{
	"signatures": [
		{
			"andConditions": [
				{
					"notFlag": 0,
					"orConditions": [
						{
							"luaProfileId": 0,
							"attributeType": "string",
							"attributeName": "udp.payload.c2s_first_data",
							"protocol": "udp",
							"exprType": "none",
							"matchMethod": "sub",
							"format": "hexbin",
							"keywordObj": [
								{
									"keywords": "4865010200000000000000000000000016fefd000000000000000000730100006700000000000000"
								}
							]
						}
					]
				}
			],
			"iconColor": "",
			"signatureDesc": "",
			"signatureId": 764868,
			"signatureName": "Common-Express_2"
		},
		{
			"andConditions": [
				{
					"notFlag": 0,
					"orConditions": [
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "23.230.125.77/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "194.5.83.129/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "193.176.211.87/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "185.238.231.15/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "45.84.212.166/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "50.118.162.16/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "185.208.11.151/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "45.84.219.240/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "45.8.68.117/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "194.34.173.41/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "45.38.57.56/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "45.38.178.138/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "199.7.143.146/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "89.116.76.150/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "213.5.129.141/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "149.19.196.152/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "45.39.207.130/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "45.8.206.90/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "191.101.177.206/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "45.38.140.118/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "45.85.91.160/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "45.84.213.245/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "191.96.206.146/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "191.96.170.185/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "191.101.174.243/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "154.6.29.226/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "45.80.157.141/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "149.18.95.205/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "45.84.215.182/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "194.5.248.203/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "45.84.216.231/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "185.208.9.157/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "5.157.128.27/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "212.2.238.38/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "188.93.138.72/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "193.68.92.193/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "84.247.59.254/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "212.30.36.157/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "85.203.15.55/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "45.137.124.3/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "193.68.91.230/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "45.91.22.251/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "191.96.180.62/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "179.61.210.225/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "45.128.199.183/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "193.68.95.206/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "212.30.37.2/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "50.118.143.188/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "71.19.252.149/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "199.66.91.14/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "23.236.224.147/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "71.19.249.220/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "199.66.92.157/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "179.61.245.3/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "2.57.171.243/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "45.91.49.60/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "45.91.48.78/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "179.48.251.106/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "154.6.23.24/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "203.159.81.19/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "45.130.203.113/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "62.12.114.42/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "194.5.82.201/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "45.85.107.184/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "45.85.107.6/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "45.133.4.177/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "45.133.5.234/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "82.115.12.24/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "74.24.205.138/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "85.237.90.161/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "45.133.176.133/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "194.61.40.119/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "45.137.126.218/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "85.237.91.242/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "84.17.38.232/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "84.17.38.74/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "173.239.236.251/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "185.92.24.235/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "17.248.158.180/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "172.217.160.74/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "3.211.81.106/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "138.199.25.144/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "181.214.175.244/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "85.203.21.219/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "185.233.133.10/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "149.57.7.184/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "64.64.121.222/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "84.17.39.35/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "84.17.39.25/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "84.17.39.30/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "85.203.22.86/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "5.157.128.171/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "45.8.17.196/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "45.135.187.215/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "45.135.187.32/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "185.247.71.147/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "45.91.21.202/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "193.29.105.21/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "37.140.254.154/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "45.132.226.186/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "45.132.226.148/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "85.203.45.187/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "45.91.20.89/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "213.21.226.42/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "213.21.226.22/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "93.115.7.235/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "85.204.124.83/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "185.195.19.197/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "212.30.33.225/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "212.30.33.143/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "45.130.136.39/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "45.67.99.140/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "45.130.202.120/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "45.140.245.110/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "185.192.16.200/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "185.192.16.111/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "188.241.178.148/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "45.86.201.68/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "45.92.228.3/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "91.219.215.141/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "193.29.107.4/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "157.97.122.155/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "192.244.192.4/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "185.51.134.75/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "157.97.120.242/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "196.244.192.12/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "94.46.164.3/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "94.46.167.74/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "45.95.243.205/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "94.46.13.79/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "188.212.135.239/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "85.206.166.86/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "85.206.175.222/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "196.196.52.4/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "196.196.106.68/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "196.196.106.66/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "185.195.237.147/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "185.195.237.154/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "203.26.81.49/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "82.118.30.103/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "185.221.132.214/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "91.219.237.148/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "91.219.236.214/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "217.138.202.66/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "45.130.81.60/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "45.130.81.64/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "185.205.186.3/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "213.169.148.152/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "31.171.152.38/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "85.10.56.233/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "85.10.56.237/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "193.37.255.220/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "178.17.168.138/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "178.17.168.130/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "89.38.224.163/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "91.239.206.191/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "106.38.179.31/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "45.130.203.235/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "34.206.47.177/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "45.137.124.210/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "37.120.235.37/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "106.117.218.64/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "18.65.229.29/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "13.226.252.197/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "196.196.203.211/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "109.71.41.132/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "173.239.207.151/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "45.80.159.111/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "23.230.233.85/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "192.112.233.59/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "2.57.171.15/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "149.18.96.133/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "190.112.223.59/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "2.57.171.141/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "45.39.44.48/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "78.24.205.138/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "45.67.97.201/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "45.139.7.132/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "198.144.145.2/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "45.139.7.230/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "45.139.6.215/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "45.139.6.165/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "144.168.230.109/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "104.227.246.213/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "209.127.20.203/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "154.16.59.151/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "144.168.165.117/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "194.5.83.219/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "107.152.206.68/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "144.168.161.164/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "91.219.238.79/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "154.16.95.10/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "45.130.203.199/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "37.120.232.20/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "77.81.139.123/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "191.101.252.141/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "37.120.149.131/24",
							"port": "0-65535",
							"protocol": "0"
						},
						{
							"attributeType": "ip",
							"attributeName": "ip.dst",
							"ip": "91.219.239.223/24",
							"port": "0-65535",
							"protocol": "0"
						}
					]
				}
			],
			"iconColor": "",
			"signatureDesc": "取消srcip",
			"signatureId": 747079,
			"signatureName": "Common-Express_1"
		},
		{
			"andConditions": [
				{
					"notFlag": 0,
					"orConditions": [
						{
							"luaProfileId": 0,
							"attributeType": "string",
							"attributeName": "udp.payload.c2s_first_data",
							"protocol": "udp",
							"exprType": "none",
							"matchMethod": "left",
							"format": "hexbin",
							"keywordObj": [
								{
									"keywords": "01000000"
								}
							]
						}
					]
				},
				{
					"notFlag": 0,
					"orConditions": [
						{
							"luaProfileId": 0,
							"attributeType": "string",
							"attributeName": "udp.payload.c2s_first_data",
							"protocol": "udp",
							"exprType": "none",
							"matchMethod": "right",
							"format": "hexbin",
							"keywordObj": [
								{
									"keywords": "00000000000000000000000000000000"
								}
							]
						}
					]
				},
				{
					"notFlag": 0,
					"orConditions": [
						{
							"luaProfileId": 0,
							"attributeType": "string",
							"attributeName": "udp.payload.s2c_first_data",
							"protocol": "udp",
							"exprType": "none",
							"matchMethod": "left",
							"format": "hexbin",
							"keywordObj": [
								{
									"keywords": "02000000"
								}
							]
						}
					]
				},
				{
					"notFlag": 0,
					"orConditions": [
						{
							"luaProfileId": 0,
							"attributeType": "string",
							"attributeName": "udp.payload.s2c_first_data",
							"protocol": "udp",
							"exprType": "none",
							"matchMethod": "right",
							"format": "hexbin",
							"keywordObj": [
								{
									"keywords": "00000000000000000000000000000000"
								}
							]
						}
					]
				}
			],
			"iconColor": "",
			"signatureDesc": "",
			"signatureId": 747077,
			"signatureName": "Common-Nord-VPN_1"
		},
		{
			"andConditions": [
				{
					"notFlag": 0,
					"orConditions": [
						{
							"attributeType": "string",
							"attributeName": "ssl.handshake.extensions_server_name",
							"protocol": "ssl",
							"exprType": "none",
							"matchMethod": "right",
							"format": "uncase plain",
							"keywordObj": [
								{
									"keywords": "nordvpn.com"
								}
							]
						},
						{
							"attributeType": "string",
							"attributeName": "ssl.handshake.extensions_server_name",
							"protocol": "ssl",
							"exprType": "none",
							"matchMethod": "right",
							"format": "uncase plain",
							"keywordObj": [
								{
									"keywords": ".zwyr157wwiu6eior.com"
								}
							]
						},
						{
							"attributeType": "string",
							"attributeName": "ssl.handshake.extensions_server_name",
							"protocol": "ssl",
							"exprType": "none",
							"matchMethod": "right",
							"format": "uncase plain",
							"keywordObj": [
								{
									"keywords": ".napps-2.com"
								}
							]
						}
					]
				}
			],
			"iconColor": "",
			"signatureDesc": "",
			"signatureId": 747074,
			"signatureName": "Common-Nord-VPN_2"
		}
	],
	"applications": [
		{
			"appName": "Common-Express",
			"appLongname": "Common-Express",
			"appId": 1060285,
			"description": "特征仅保留dstip看是否有效果",
			"appProperties": {
				"category": "business-systems",
				"characteristics": "",
				"continueScanning": 0,
				"denyAction": {
					"method": "drop",
					"after_n_packets": 0,
					"send_icmp_unreachable": 0,
					"send_tcp_reset": 0
				},
				"parentAppId": 0,
				"parentAppName": "",
				"risk": "1",
				"subcategory": "auth-service",
				"tcpHalfClose": 0,
				"tcpTimeWait": 0,
				"tcpTimeout": 0,
				"technology": "client-server",
				"udpTimeout": 0
			},
			"appSurrogates": [
				{
					"group_by": "session",
					"ordered_match": "no",
					"signature_sequence": [
						{
							"signature": "Common-Express_1",
							"exclude": 0
						}
					],
					"time_window": null
				},
				{
					"group_by": "session",
					"ordered_match": "no",
					"signature_sequence": [
						{
							"signature": "Common-Express_2",
							"exclude": 0
						}
					],
					"time_window": 0
				}
			],
			"seqNo": 1059985,
			"opUser": -1
		},
		{
			"appName": "Common-Nord-VPN",
			"appLongname": "Common-Nord-VPN",
			"appId": 1060287,
			"description": "",
			"appProperties": {
				"category": "business-systems",
				"characteristics": "",
				"continueScanning": 0,
				"denyAction": {
					"method": "drop",
					"after_n_packets": 0,
					"send_icmp_unreachable": 0,
					"send_tcp_reset": 0
				},
				"parentAppId": 0,
				"parentAppName": "",
				"risk": "2",
				"subcategory": "auth-service",
				"tcpHalfClose": 0,
				"tcpTimeWait": 0,
				"tcpTimeout": 0,
				"technology": "browser-based",
				"udpTimeout": 0
			},
			"appSurrogates": [
				{
					"group_by": "session",
					"ordered_match": "no",
					"signature_sequence": [
						{
							"signature": "Common-Nord-VPN_1",
							"exclude": 0
						}
					],
					"time_window": 0
				},
				{
					"group_by": "session",
					"ordered_match": "no",
					"signature_sequence": [
						{
							"signature": "Common-Nord-VPN_2",
							"exclude": 0
						}
					],
					"time_window": 0
				}
			],
			"seqNo": 1060013,
			"opUser": -1
		}
	]
}