{
	"signatures": [
		{
			"signature_id": 5964,
			"signature_name": "Avira PhantomVPN_fqdn_20241118",
			"and_conditions": [
				{
					"or_conditions": [
						{
							"lua_profile_id": 0,
							"attribute_type": "string",
							"attribute_name": "common.server_fqdn",
							"source_object_ids": [
								13116
							],
							"protocol": "common"
						}
					],
					"not_flag": 0
				}
			],
			"signature_desc": "",
			"icon_color": ""
		},
		{
			"signature_id": 5963,
			"signature_name": "Avira PhantomVPN_ip_20241118",
			"and_conditions": [
				{
					"or_conditions": [
						{
							"lua_profile_id": 0,
							"attribute_type": "ip",
							"attribute_name": "ip.dst",
							"source_object_ids": [
								13276
							],
							"protocol": "ip"
						}
					],
					"not_flag": 0
				}
			],
			"signature_desc": "",
			"icon_color": ""
		}
	],
	"sig_objects": [
		{
			"id": 13116,
			"type": "fqdn",
			"name": "Avira PhantomVPN_fqdn_20241118",
			"vsys_id": 1,
			"source_id": 13116,
			"source_name": "Avira PhantomVPN_fqdn_20241118",
			"member_type": "1",
			"member": {
				"items": [
					{
						"string": {
							"item_type": "fqdn",
							"expr_type": 0,
							"is_hexbin": 0,
							"patterns": [
								{
									"keywords": "$api.phantom.avira-vpn.com"
								}
							]
						}
					},
					{
						"string": {
							"item_type": "fqdn",
							"expr_type": 0,
							"is_hexbin": 0,
							"patterns": [
								{
									"keywords": "$www.avira.com"
								}
							]
						}
					},
					{
						"string": {
							"item_type": "fqdn",
							"expr_type": 0,
							"is_hexbin": 0,
							"patterns": [
								{
									"keywords": "*.phantom.avira-vpn.com"
								}
							]
						}
					}
				]
			},
			"uuid": "5f459bd3-6f4e-11ef-8695-aa311b8c635e"
		},
		{
			"id": 13276,
			"type": "ip",
			"name": "Avira PhantomVPN_ip_20241118",
			"sub_type": "ip",
			"vsys_id": 1,
			"source_id": 13276,
			"source_name": "Avira PhantomVPN_ip_20241118",
			"member_type": "1",
			"member": {
				"items": [
					{
						"ip": {
							"addr_type": 4,
							"port": "0-65535",
							"ip_address": "43.198.219.149"
						}
					},
					{
						"ip": {
							"addr_type": 4,
							"port": "0-65535",
							"ip_address": "18.163.164.44"
						}
					},
					{
						"ip": {
							"addr_type": 4,
							"port": "0-65535",
							"ip_address": "18.162.67.156"
						}
					},
					{
						"ip": {
							"addr_type": 4,
							"port": "0-65535",
							"ip_address": "18.167.123.124"
						}
					},
					{
						"ip": {
							"addr_type": 4,
							"port": "0-65535",
							"ip_address": "96.0.25.144"
						}
					},
					{
						"ip": {
							"addr_type": 4,
							"port": "0-65535",
							"ip_address": "96.0.25.184"
						}
					},
					{
						"ip": {
							"addr_type": 4,
							"port": "0-65535",
							"ip_address": "51.17.207.137"
						}
					},
					{
						"ip": {
							"addr_type": 4,
							"port": "0-65535",
							"ip_address": "51.16.213.34"
						}
					},
					{
						"ip": {
							"addr_type": 4,
							"port": "0-65535",
							"ip_address": "185.94.192.234"
						}
					},
					{
						"ip": {
							"addr_type": 4,
							"port": "0-65535",
							"ip_address": "185.94.192.242"
						}
					},
					{
						"ip": {
							"addr_type": 4,
							"port": "0-65535",
							"ip_address": "37.235.49.93"
						}
					},
					{
						"ip": {
							"addr_type": 4,
							"port": "0-65535",
							"ip_address": "151.236.24.101"
						}
					},
					{
						"ip": {
							"addr_type": 4,
							"port": "0-65535",
							"ip_address": "35.183.163.166"
						}
					},
					{
						"ip": {
							"addr_type": 4,
							"port": "0-65535",
							"ip_address": "15.157.143.213"
						}
					},
					{
						"ip": {
							"addr_type": 4,
							"port": "0-65535",
							"ip_address": "35.183.56.6"
						}
					},
					{
						"ip": {
							"addr_type": 4,
							"port": "0-65535",
							"ip_address": "35.182.183.150"
						}
					},
					{
						"ip": {
							"addr_type": 4,
							"port": "0-65535",
							"ip_address": "185.189.114.138"
						}
					},
					{
						"ip": {
							"addr_type": 4,
							"port": "0-65535",
							"ip_address": "152.89.160.50"
						}
					},
					{
						"ip": {
							"addr_type": 4,
							"port": "0-65535",
							"ip_address": "152.89.160.42"
						}
					},
					{
						"ip": {
							"addr_type": 4,
							"port": "0-65535",
							"ip_address": "15.220.184.3"
						}
					},
					{
						"ip": {
							"addr_type": 4,
							"port": "0-65535",
							"ip_address": "15.220.187.255"
						}
					},
					{
						"ip": {
							"addr_type": 4,
							"port": "0-65535",
							"ip_address": "185.210.219.226"
						}
					},
					{
						"ip": {
							"addr_type": 4,
							"port": "0-65535",
							"ip_address": "185.210.219.234"
						}
					},
					{
						"ip": {
							"addr_type": 4,
							"port": "0-65535",
							"ip_address": "185.216.34.82"
						}
					},
					{
						"ip": {
							"addr_type": 4,
							"port": "0-65535",
							"ip_address": "18.229.177.70"
						}
					},
					{
						"ip": {
							"addr_type": 4,
							"port": "0-65535",
							"ip_address": "177.71.170.182"
						}
					},
					{
						"ip": {
							"addr_type": 4,
							"port": "0-65535",
							"ip_address": "54.207.230.187"
						}
					},
					{
						"ip": {
							"addr_type": 4,
							"port": "0-65535",
							"ip_address": "192.71.166.64"
						}
					},
					{
						"ip": {
							"addr_type": 4,
							"port": "0-65535",
							"ip_address": "192.71.166.122"
						}
					},
					{
						"ip": {
							"addr_type": 4,
							"port": "0-65535",
							"ip_address": "192.71.166.62"
						}
					},
					{
						"ip": {
							"addr_type": 4,
							"port": "0-65535",
							"ip_address": "192.71.166.134"
						}
					},
					{
						"ip": {
							"addr_type": 4,
							"port": "0-65535",
							"ip_address": "15.181.0.30"
						}
					},
					{
						"ip": {
							"addr_type": 4,
							"port": "0-65535",
							"ip_address": "3.76.172.184"
						}
					},
					{
						"ip": {
							"addr_type": 4,
							"port": "0-65535",
							"ip_address": "3.73.176.151"
						}
					},
					{
						"ip": {
							"addr_type": 4,
							"port": "0-65535",
							"ip_address": "3.76.18.87"
						}
					},
					{
						"ip": {
							"addr_type": 4,
							"port": "0-65535",
							"ip_address": "18.159.191.89"
						}
					},
					{
						"ip": {
							"addr_type": 4,
							"port": "0-65535",
							"ip_address": "18.101.175.229"
						}
					},
					{
						"ip": {
							"addr_type": 4,
							"port": "0-65535",
							"ip_address": "95.168.164.193"
						}
					},
					{
						"ip": {
							"addr_type": 4,
							"port": "0-65535",
							"ip_address": "15.220.168.158"
						}
					},
					{
						"ip": {
							"addr_type": 4,
							"port": "0-65535",
							"ip_address": "18.175.39.15"
						}
					},
					{
						"ip": {
							"addr_type": 4,
							"port": "0-65535",
							"ip_address": "18.135.61.227"
						}
					},
					{
						"ip": {
							"addr_type": 4,
							"port": "0-65535",
							"ip_address": "161.193.0.122"
						}
					},
					{
						"ip": {
							"addr_type": 4,
							"port": "0-65535",
							"ip_address": "18.88.10.187"
						}
					},
					{
						"ip": {
							"addr_type": 4,
							"port": "0-65535",
							"ip_address": "18.101.169.182"
						}
					},
					{
						"ip": {
							"addr_type": 4,
							"port": "0-65535",
							"ip_address": "18.88.142.14"
						}
					},
					{
						"ip": {
							"addr_type": 4,
							"port": "0-65535",
							"ip_address": "95.168.164.194"
						}
					},
					{
						"ip": {
							"addr_type": 4,
							"port": "0-65535",
							"ip_address": "3.77.166.121"
						}
					},
					{
						"ip": {
							"addr_type": 4,
							"port": "0-65535",
							"ip_address": "3.122.25.155"
						}
					},
					{
						"ip": {
							"addr_type": 4,
							"port": "0-65535",
							"ip_address": "18.199.110.118"
						}
					},
					{
						"ip": {
							"addr_type": 4,
							"port": "0-65535",
							"ip_address": "3.125.65.153"
						}
					},
					{
						"ip": {
							"addr_type": 4,
							"port": "0-65535",
							"ip_address": "3.68.248.98"
						}
					},
					{
						"ip": {
							"addr_type": 4,
							"port": "0-65535",
							"ip_address": "3.67.117.205"
						}
					},
					{
						"ip": {
							"addr_type": 4,
							"port": "0-65535",
							"ip_address": "35.158.248.240"
						}
					},
					{
						"ip": {
							"addr_type": 4,
							"port": "0-65535",
							"ip_address": "3.66.111.72"
						}
					},
					{
						"ip": {
							"addr_type": 4,
							"port": "0-65535",
							"ip_address": "52.59.69.115"
						}
					},
					{
						"ip": {
							"addr_type": 4,
							"port": "0-65535",
							"ip_address": "3.67.208.129"
						}
					},
					{
						"ip": {
							"addr_type": 4,
							"port": "0-65535",
							"ip_address": "15.160.37.148"
						}
					},
					{
						"ip": {
							"addr_type": 4,
							"port": "0-65535",
							"ip_address": "15.161.74.208"
						}
					},
					{
						"ip": {
							"addr_type": 4,
							"port": "0-65535",
							"ip_address": "15.160.54.188"
						}
					},
					{
						"ip": {
							"addr_type": 4,
							"port": "0-65535",
							"ip_address": "15.160.20.6"
						}
					},
					{
						"ip": {
							"addr_type": 4,
							"port": "0-65535",
							"ip_address": "15.161.156.115"
						}
					},
					{
						"ip": {
							"addr_type": 4,
							"port": "0-65535",
							"ip_address": "82.102.22.250"
						}
					},
					{
						"ip": {
							"addr_type": 4,
							"port": "0-65535",
							"ip_address": "161.193.0.41"
						}
					},
					{
						"ip": {
							"addr_type": 4,
							"port": "0-65535",
							"ip_address": "15.220.168.36"
						}
					},
					{
						"ip": {
							"addr_type": 4,
							"port": "0-65535",
							"ip_address": "18.88.142.23"
						}
					},
					{
						"ip": {
							"addr_type": 4,
							"port": "0-65535",
							"ip_address": "15.181.163.146"
						}
					},
					{
						"ip": {
							"addr_type": 4,
							"port": "0-65535",
							"ip_address": "18.88.10.223"
						}
					},
					{
						"ip": {
							"addr_type": 4,
							"port": "0-65535",
							"ip_address": "185.216.35.90"
						}
					},
					{
						"ip": {
							"addr_type": 4,
							"port": "0-65535",
							"ip_address": "161.178.0.228"
						}
					},
					{
						"ip": {
							"addr_type": 4,
							"port": "0-65535",
							"ip_address": "100.27.158.236"
						}
					},
					{
						"ip": {
							"addr_type": 4,
							"port": "0-65535",
							"ip_address": "15.181.161.39"
						}
					},
					{
						"ip": {
							"addr_type": 4,
							"port": "0-65535",
							"ip_address": "15.254.38.182"
						}
					},
					{
						"ip": {
							"addr_type": 4,
							"port": "0-65535",
							"ip_address": "54.151.8.49"
						}
					},
					{
						"ip": {
							"addr_type": 4,
							"port": "0-65535",
							"ip_address": "15.220.16.190"
						}
					},
					{
						"ip": {
							"addr_type": 4,
							"port": "0-65535",
							"ip_address": "16.56.5.29"
						}
					},
					{
						"ip": {
							"addr_type": 4,
							"port": "0-65535",
							"ip_address": "16.63.83.190"
						}
					},
					{
						"ip": {
							"addr_type": 4,
							"port": "0-65535",
							"ip_address": "91.195.98.178"
						}
					},
					{
						"ip": {
							"addr_type": 4,
							"port": "0-65535",
							"ip_address": "13.48.247.202"
						}
					},
					{
						"ip": {
							"addr_type": 4,
							"port": "0-65535",
							"ip_address": "185.216.35.82"
						}
					},
					{
						"ip": {
							"addr_type": 4,
							"port": "0-65535",
							"ip_address": "52.63.128.114"
						}
					},
					{
						"ip": {
							"addr_type": 4,
							"port": "0-65535",
							"ip_address": "3.25.10.197"
						}
					},
					{
						"ip": {
							"addr_type": 4,
							"port": "0-65535",
							"ip_address": "52.50.173.177"
						}
					},
					{
						"ip": {
							"addr_type": 4,
							"port": "0-65535",
							"ip_address": "13.37.103.213"
						}
					},
					{
						"ip": {
							"addr_type": 4,
							"port": "0-65535",
							"ip_address": "15.220.66.217"
						}
					},
					{
						"ip": {
							"addr_type": 4,
							"port": "0-65535",
							"ip_address": "96.0.50.255"
						}
					},
					{
						"ip": {
							"addr_type": 4,
							"port": "0-65535",
							"ip_address": "192.121.87.26"
						}
					},
					{
						"ip": {
							"addr_type": 4,
							"port": "0-65535",
							"ip_address": "176.34.49.166"
						}
					},
					{
						"ip": {
							"addr_type": 4,
							"port": "0-65535",
							"ip_address": "192.71.244.27"
						}
					},
					{
						"ip": {
							"addr_type": 4,
							"port": "0-65535",
							"ip_address": "96.0.77.21"
						}
					},
					{
						"ip": {
							"addr_type": 4,
							"port": "0-65535",
							"ip_address": "13.214.112.91"
						}
					},
					{
						"ip": {
							"addr_type": 4,
							"port": "0-65535",
							"ip_address": "18.102.40.27"
						}
					},
					{
						"ip": {
							"addr_type": 4,
							"port": "0-65535",
							"ip_address": "192.121.87.85"
						}
					},
					{
						"ip": {
							"addr_type": 4,
							"port": "0-65535",
							"ip_address": "185.189.114.130"
						}
					},
					{
						"ip": {
							"addr_type": 4,
							"port": "0-65535",
							"ip_address": "83.149.73.14"
						}
					},
					{
						"ip": {
							"addr_type": 4,
							"port": "0-65535",
							"ip_address": "18.101.173.182"
						}
					},
					{
						"ip": {
							"addr_type": 4,
							"port": "0-65535",
							"ip_address": "15.181.5.160"
						}
					},
					{
						"ip": {
							"addr_type": 4,
							"port": "0-65535",
							"ip_address": "54.233.253.62"
						}
					},
					{
						"ip": {
							"addr_type": 4,
							"port": "0-65535",
							"ip_address": "15.254.16.50"
						}
					},
					{
						"ip": {
							"addr_type": 4,
							"port": "0-65535",
							"ip_address": "15.181.161.170"
						}
					},
					{
						"ip": {
							"addr_type": 4,
							"port": "0-65535",
							"ip_address": "15.181.161.50"
						}
					},
					{
						"ip": {
							"addr_type": 4,
							"port": "0-65535",
							"ip_address": "82.102.22.242"
						}
					},
					{
						"ip": {
							"addr_type": 4,
							"port": "0-65535",
							"ip_address": "16.63.216.83"
						}
					},
					{
						"ip": {
							"addr_type": 4,
							"port": "0-65535",
							"ip_address": "16.63.9.226"
						}
					},
					{
						"ip": {
							"addr_type": 4,
							"port": "0-65535",
							"ip_address": "192.71.244.173"
						}
					},
					{
						"ip": {
							"addr_type": 4,
							"port": "0-65535",
							"ip_address": "185.120.146.114"
						}
					},
					{
						"ip": {
							"addr_type": 4,
							"port": "0-65535",
							"ip_address": "54.254.182.115"
						}
					},
					{
						"ip": {
							"addr_type": 4,
							"port": "0-65535",
							"ip_address": "54.151.151.254"
						}
					},
					{
						"ip": {
							"addr_type": 4,
							"port": "0-65535",
							"ip_address": "16.16.176.141"
						}
					},
					{
						"ip": {
							"addr_type": 4,
							"port": "0-65535",
							"ip_address": "51.20.241.210"
						}
					},
					{
						"ip": {
							"addr_type": 4,
							"port": "0-65535",
							"ip_address": "96.0.50.37"
						}
					},
					{
						"ip": {
							"addr_type": 4,
							"port": "0-65535",
							"ip_address": "13.238.69.161"
						}
					},
					{
						"ip": {
							"addr_type": 4,
							"port": "0-65535",
							"ip_address": "82.102.19.42"
						}
					},
					{
						"ip": {
							"addr_type": 4,
							"port": "0-65535",
							"ip_address": "13.37.186.180"
						}
					},
					{
						"ip": {
							"addr_type": 4,
							"port": "0-65535",
							"ip_address": "15.237.225.154"
						}
					},
					{
						"ip": {
							"addr_type": 4,
							"port": "0-65535",
							"ip_address": "13.36.44.112"
						}
					},
					{
						"ip": {
							"addr_type": 4,
							"port": "0-65535",
							"ip_address": "3.105.215.153"
						}
					},
					{
						"ip": {
							"addr_type": 4,
							"port": "0-65535",
							"ip_address": "13.42.178.134"
						}
					},
					{
						"ip": {
							"addr_type": 4,
							"port": "0-65535",
							"ip_address": "15.220.31.235"
						}
					},
					{
						"ip": {
							"addr_type": 4,
							"port": "0-65535",
							"ip_address": "52.52.150.48"
						}
					},
					{
						"ip": {
							"addr_type": 4,
							"port": "0-65535",
							"ip_address": "34.205.52.49"
						}
					},
					{
						"ip": {
							"addr_type": 4,
							"port": "0-65535",
							"ip_address": "91.195.98.186"
						}
					},
					{
						"ip": {
							"addr_type": 4,
							"port": "0-65535",
							"ip_address": "185.195.18.250"
						}
					},
					{
						"ip": {
							"addr_type": 4,
							"port": "0-65535",
							"ip_address": "16.63.123.47"
						}
					},
					{
						"ip": {
							"addr_type": 4,
							"port": "0-65535",
							"ip_address": "52.210.83.241"
						}
					},
					{
						"ip": {
							"addr_type": 4,
							"port": "0-65535",
							"ip_address": "15.220.64.209"
						}
					},
					{
						"ip": {
							"addr_type": 4,
							"port": "0-65535",
							"ip_address": "15.220.66.125"
						}
					},
					{
						"ip": {
							"addr_type": 4,
							"port": "0-65535",
							"ip_address": "35.181.178.57"
						}
					},
					{
						"ip": {
							"addr_type": 4,
							"port": "0-65535",
							"ip_address": "13.39.46.38"
						}
					},
					{
						"ip": {
							"addr_type": 4,
							"port": "0-65535",
							"ip_address": "54.249.234.28"
						}
					}
				]
			},
			"uuid": "022c67de-6f57-11ef-8695-aa311b8c635e"
		}
	],
	"applications": [
		{
			"app_id": 19275,
			"app_name": "Avira PhantomVPN_20241118",
			"app_longname": "Avira PhantomVPN_20241118",
			"description": "website:https://www.avira.com/en/avira-phantom-vpn\ngoogleplay:https://play.google.com/store/apps/details?id=com.avira.vpn&hl=en_GB&gl=US",
			"seq_no": 19275,
			"app_properties": {
				"parent_app_id": 0,
				"parent_app_name": "null",
				"category": "networking",
				"subcategory": "tunnels",
				"content": "unknown",
				"risk": "1",
				"characteristics": "",
				"deny_action": {
					"method": "drop",
					"after_n_packets": 0,
					"send_icmp_unreachable": 1,
					"send_tcp_reset": 1
				},
				"continue_scanning": 0,
				"tcp_timeout": 0,
				"udp_timeout": 0,
				"tcp_half_close": 0,
				"tcp_time_wait": 0
			},
			"app_surrogates": [
				{
					"group_by": "session",
					"ordered_match": "no",
					"signature_sequence": [
						{
							"signature": "Avira PhantomVPN_fqdn_20241118",
							"exclude": 0
						}
					]
				},
				{
					"group_by": "session",
					"time_window": 0,
					"ordered_match": "no",
					"signature_sequence": [
						{
							"signature": "Avira PhantomVPN_ip_20241118",
							"exclude": 0
						}
					]
				}
			]
		}
	]
}