index=activity AND rg_functionality="Next Generation Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "24rq2pvihkrct6pxl6zy3p36gt2wd6sn6izoz7ntlivxvbuu5ei3xwad.onion" OR destinationhostname CONTAINS "3crj2ylhdffpf2yik4bb2hn32xey2bdhcpykxfezb4sq53eelglp3sqd.onion" OR destinationhostname CONTAINS "44yd2dxmm5xuo7dsivwkf2fqyqmfsqkt5nkxdlgwpnbr57sca56j74yd.onion" OR destinationhostname CONTAINS "acuy77ahadd6g5rw2pxsuejskirjmxaoj37ck7fvj4h4kc36a3uwirqd.onion" OR destinationhostname CONTAINS "bbknilviexavjvnwdtdqmhsexqcokfwgdqthxexvuwzlwgaggddaahxn.onion" OR destinationhostname CONTAINS "bvxx2p6hfttpiyntpuf72axcvaakjbz5zgiea7iklkrb2s6wrdrv4lid.onion" OR destinationhostname CONTAINS "c3uybau64lj32ty3z3sxgchnrmg72bvbpua66mcvydcjpgrbv2r6huyd.onion" OR destinationhostname CONTAINS "drv4lids5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR destinationhostname CONTAINS "fend7yhjoeam7b4fp4rj5oobphuvmhjbovhtvporusjex4nyoiamgdyd.onion" OR destinationhostname CONTAINS "m5idjwoj4q5yrmo5xbnvhoqqrdld6pruxx5qjvr6gfnnmao4xiniwzid.onion" OR destinationhostname CONTAINS "m7wajjzas7eotqw4b6k4aei5q4zijdal3spsec7wsfmf2xqjhmydjiyd.onion" OR destinationhostname CONTAINS "npnsktlnofwisqvd3e6tpslinkypajmh5jctyjivuf6jza3syw2v6cid.onion" OR destinationhostname CONTAINS "pcjvbrttcy2s3gqpgwklgsco4u4bskr5xhvdzs4pzqqcrfllkwe437id.onion" OR destinationhostname CONTAINS "s4ofksblif7bmo7sp64f56gij6xzh7sznvrn46m6daup2hwdmwbiabqd.onion" OR destinationhostname CONTAINS "s5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR destinationhostname CONTAINS "sourt33xcdoyg4jcrh33qvx6cjoneowihsfrbuqldkrrili54gdvryyd.onion" OR destinationhostname CONTAINS "syd5mtjvcqxvnnkeqjjkdm2oz2jzl6swrfhnvliiemxtgiqvcbm26nyd.onion" OR destinationhostname CONTAINS "tybocptxypx42ngrcqldrgas536syipwotmfnbjpwc5fpxth4xf4faqd.onion" OR destinationhostname CONTAINS "u7kteztwfg3p6wdeiq6y7zidxx3xtto4gmm2vwz42mzd6s4ixgvpgxyd.onion" OR destinationhostname CONTAINS "uu2iggf5wq57dt6xanfdmwq3rvxqorkb43bh2eacj2vz22nvwewlxcyd.onion" OR destinationhostname CONTAINS "wauby5e7m6zf2eb7rfn7nqm3diuaehdu6tfay4janiktgx33wjfifkyd.onion" OR destinationhostname CONTAINS "wf4uxi6izbqppzb4fvg4sq7sm5t5w5xl5v5pkxpguwpr4aci7hvzboid.onion" OR destinationhostname CONTAINS "wjd2t2lzbgb7g7bcenpl2r2bsobkbwwpooqrmiwqjkpktm5p5seifcid.onion" OR destinationhostname CONTAINS "xjdhr5is3qsw2cyekdxo57gchpxusvkko3265x2lmmn4g6fnlimdngqd.onion" OR destinationhostname CONTAINS "yjh2bktujnqkj7u7g7hxotck6sfhjuf7crhc4vcf6ewpa7swoqalfkid.onion" OR destinationhostname CONTAINS "yqs4gu4c2kb5ybgcigkl5gcsqbjuk5n2su2pozpsw4ojav2op5gddkid.onion")
index=activity AND rg_functionality="Next Generation Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "24rq2pvihkrct6pxl6zy3p36gt2wd6sn6izoz7ntlivxvbuu5ei3xwad.onion" OR sourcentdomain CONTAINS "3crj2ylhdffpf2yik4bb2hn32xey2bdhcpykxfezb4sq53eelglp3sqd.onion" OR sourcentdomain CONTAINS "44yd2dxmm5xuo7dsivwkf2fqyqmfsqkt5nkxdlgwpnbr57sca56j74yd.onion" OR sourcentdomain CONTAINS "acuy77ahadd6g5rw2pxsuejskirjmxaoj37ck7fvj4h4kc36a3uwirqd.onion" OR sourcentdomain CONTAINS "bbknilviexavjvnwdtdqmhsexqcokfwgdqthxexvuwzlwgaggddaahxn.onion" OR sourcentdomain CONTAINS "bvxx2p6hfttpiyntpuf72axcvaakjbz5zgiea7iklkrb2s6wrdrv4lid.onion" OR sourcentdomain CONTAINS "c3uybau64lj32ty3z3sxgchnrmg72bvbpua66mcvydcjpgrbv2r6huyd.onion" OR sourcentdomain CONTAINS "drv4lids5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR sourcentdomain CONTAINS "fend7yhjoeam7b4fp4rj5oobphuvmhjbovhtvporusjex4nyoiamgdyd.onion" OR sourcentdomain CONTAINS "m5idjwoj4q5yrmo5xbnvhoqqrdld6pruxx5qjvr6gfnnmao4xiniwzid.onion" OR sourcentdomain CONTAINS "m7wajjzas7eotqw4b6k4aei5q4zijdal3spsec7wsfmf2xqjhmydjiyd.onion" OR sourcentdomain CONTAINS "npnsktlnofwisqvd3e6tpslinkypajmh5jctyjivuf6jza3syw2v6cid.onion" OR sourcentdomain CONTAINS "pcjvbrttcy2s3gqpgwklgsco4u4bskr5xhvdzs4pzqqcrfllkwe437id.onion" OR sourcentdomain CONTAINS "s4ofksblif7bmo7sp64f56gij6xzh7sznvrn46m6daup2hwdmwbiabqd.onion" OR sourcentdomain CONTAINS "s5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR sourcentdomain CONTAINS "sourt33xcdoyg4jcrh33qvx6cjoneowihsfrbuqldkrrili54gdvryyd.onion" OR sourcentdomain CONTAINS "syd5mtjvcqxvnnkeqjjkdm2oz2jzl6swrfhnvliiemxtgiqvcbm26nyd.onion" OR sourcentdomain CONTAINS "tybocptxypx42ngrcqldrgas536syipwotmfnbjpwc5fpxth4xf4faqd.onion" OR sourcentdomain CONTAINS "u7kteztwfg3p6wdeiq6y7zidxx3xtto4gmm2vwz42mzd6s4ixgvpgxyd.onion" OR sourcentdomain CONTAINS "uu2iggf5wq57dt6xanfdmwq3rvxqorkb43bh2eacj2vz22nvwewlxcyd.onion" OR sourcentdomain CONTAINS "wauby5e7m6zf2eb7rfn7nqm3diuaehdu6tfay4janiktgx33wjfifkyd.onion" OR sourcentdomain CONTAINS "wf4uxi6izbqppzb4fvg4sq7sm5t5w5xl5v5pkxpguwpr4aci7hvzboid.onion" OR sourcentdomain CONTAINS "wjd2t2lzbgb7g7bcenpl2r2bsobkbwwpooqrmiwqjkpktm5p5seifcid.onion" OR sourcentdomain CONTAINS "xjdhr5is3qsw2cyekdxo57gchpxusvkko3265x2lmmn4g6fnlimdngqd.onion" OR sourcentdomain CONTAINS "yjh2bktujnqkj7u7g7hxotck6sfhjuf7crhc4vcf6ewpa7swoqalfkid.onion" OR sourcentdomain CONTAINS "yqs4gu4c2kb5ybgcigkl5gcsqbjuk5n2su2pozpsw4ojav2op5gddkid.onion")
index=activity AND rg_functionality="Next Generation Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "24rq2pvihkrct6pxl6zy3p36gt2wd6sn6izoz7ntlivxvbuu5ei3xwad.onion" OR sourcehostname CONTAINS "3crj2ylhdffpf2yik4bb2hn32xey2bdhcpykxfezb4sq53eelglp3sqd.onion" OR sourcehostname CONTAINS "44yd2dxmm5xuo7dsivwkf2fqyqmfsqkt5nkxdlgwpnbr57sca56j74yd.onion" OR sourcehostname CONTAINS "acuy77ahadd6g5rw2pxsuejskirjmxaoj37ck7fvj4h4kc36a3uwirqd.onion" OR sourcehostname CONTAINS "bbknilviexavjvnwdtdqmhsexqcokfwgdqthxexvuwzlwgaggddaahxn.onion" OR sourcehostname CONTAINS "bvxx2p6hfttpiyntpuf72axcvaakjbz5zgiea7iklkrb2s6wrdrv4lid.onion" OR sourcehostname CONTAINS "c3uybau64lj32ty3z3sxgchnrmg72bvbpua66mcvydcjpgrbv2r6huyd.onion" OR sourcehostname CONTAINS "drv4lids5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR sourcehostname CONTAINS "fend7yhjoeam7b4fp4rj5oobphuvmhjbovhtvporusjex4nyoiamgdyd.onion" OR sourcehostname CONTAINS "m5idjwoj4q5yrmo5xbnvhoqqrdld6pruxx5qjvr6gfnnmao4xiniwzid.onion" OR sourcehostname CONTAINS "m7wajjzas7eotqw4b6k4aei5q4zijdal3spsec7wsfmf2xqjhmydjiyd.onion" OR sourcehostname CONTAINS "npnsktlnofwisqvd3e6tpslinkypajmh5jctyjivuf6jza3syw2v6cid.onion" OR sourcehostname CONTAINS "pcjvbrttcy2s3gqpgwklgsco4u4bskr5xhvdzs4pzqqcrfllkwe437id.onion" OR sourcehostname CONTAINS "s4ofksblif7bmo7sp64f56gij6xzh7sznvrn46m6daup2hwdmwbiabqd.onion" OR sourcehostname CONTAINS "s5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR sourcehostname CONTAINS "sourt33xcdoyg4jcrh33qvx6cjoneowihsfrbuqldkrrili54gdvryyd.onion" OR sourcehostname CONTAINS "syd5mtjvcqxvnnkeqjjkdm2oz2jzl6swrfhnvliiemxtgiqvcbm26nyd.onion" OR sourcehostname CONTAINS "tybocptxypx42ngrcqldrgas536syipwotmfnbjpwc5fpxth4xf4faqd.onion" OR sourcehostname CONTAINS "u7kteztwfg3p6wdeiq6y7zidxx3xtto4gmm2vwz42mzd6s4ixgvpgxyd.onion" OR sourcehostname CONTAINS "uu2iggf5wq57dt6xanfdmwq3rvxqorkb43bh2eacj2vz22nvwewlxcyd.onion" OR sourcehostname CONTAINS "wauby5e7m6zf2eb7rfn7nqm3diuaehdu6tfay4janiktgx33wjfifkyd.onion" OR sourcehostname CONTAINS "wf4uxi6izbqppzb4fvg4sq7sm5t5w5xl5v5pkxpguwpr4aci7hvzboid.onion" OR sourcehostname CONTAINS "wjd2t2lzbgb7g7bcenpl2r2bsobkbwwpooqrmiwqjkpktm5p5seifcid.onion" OR sourcehostname CONTAINS "xjdhr5is3qsw2cyekdxo57gchpxusvkko3265x2lmmn4g6fnlimdngqd.onion" OR sourcehostname CONTAINS "yjh2bktujnqkj7u7g7hxotck6sfhjuf7crhc4vcf6ewpa7swoqalfkid.onion" OR sourcehostname CONTAINS "yqs4gu4c2kb5ybgcigkl5gcsqbjuk5n2su2pozpsw4ojav2op5gddkid.onion")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "24rq2pvihkrct6pxl6zy3p36gt2wd6sn6izoz7ntlivxvbuu5ei3xwad.onion" OR destinationntdomain CONTAINS "3crj2ylhdffpf2yik4bb2hn32xey2bdhcpykxfezb4sq53eelglp3sqd.onion" OR destinationntdomain CONTAINS "44yd2dxmm5xuo7dsivwkf2fqyqmfsqkt5nkxdlgwpnbr57sca56j74yd.onion" OR destinationntdomain CONTAINS "acuy77ahadd6g5rw2pxsuejskirjmxaoj37ck7fvj4h4kc36a3uwirqd.onion" OR destinationntdomain CONTAINS "bbknilviexavjvnwdtdqmhsexqcokfwgdqthxexvuwzlwgaggddaahxn.onion" OR destinationntdomain CONTAINS "bvxx2p6hfttpiyntpuf72axcvaakjbz5zgiea7iklkrb2s6wrdrv4lid.onion" OR destinationntdomain CONTAINS "c3uybau64lj32ty3z3sxgchnrmg72bvbpua66mcvydcjpgrbv2r6huyd.onion" OR destinationntdomain CONTAINS "drv4lids5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR destinationntdomain CONTAINS "fend7yhjoeam7b4fp4rj5oobphuvmhjbovhtvporusjex4nyoiamgdyd.onion" OR destinationntdomain CONTAINS "m5idjwoj4q5yrmo5xbnvhoqqrdld6pruxx5qjvr6gfnnmao4xiniwzid.onion" OR destinationntdomain CONTAINS "m7wajjzas7eotqw4b6k4aei5q4zijdal3spsec7wsfmf2xqjhmydjiyd.onion" OR destinationntdomain CONTAINS "npnsktlnofwisqvd3e6tpslinkypajmh5jctyjivuf6jza3syw2v6cid.onion" OR destinationntdomain CONTAINS "pcjvbrttcy2s3gqpgwklgsco4u4bskr5xhvdzs4pzqqcrfllkwe437id.onion" OR destinationntdomain CONTAINS "s4ofksblif7bmo7sp64f56gij6xzh7sznvrn46m6daup2hwdmwbiabqd.onion" OR destinationntdomain CONTAINS "s5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR destinationntdomain CONTAINS "sourt33xcdoyg4jcrh33qvx6cjoneowihsfrbuqldkrrili54gdvryyd.onion" OR destinationntdomain CONTAINS "syd5mtjvcqxvnnkeqjjkdm2oz2jzl6swrfhnvliiemxtgiqvcbm26nyd.onion" OR destinationntdomain CONTAINS "tybocptxypx42ngrcqldrgas536syipwotmfnbjpwc5fpxth4xf4faqd.onion" OR destinationntdomain CONTAINS "u7kteztwfg3p6wdeiq6y7zidxx3xtto4gmm2vwz42mzd6s4ixgvpgxyd.onion" OR destinationntdomain CONTAINS "uu2iggf5wq57dt6xanfdmwq3rvxqorkb43bh2eacj2vz22nvwewlxcyd.onion" OR destinationntdomain CONTAINS "wauby5e7m6zf2eb7rfn7nqm3diuaehdu6tfay4janiktgx33wjfifkyd.onion" OR destinationntdomain CONTAINS "wf4uxi6izbqppzb4fvg4sq7sm5t5w5xl5v5pkxpguwpr4aci7hvzboid.onion" OR destinationntdomain CONTAINS "wjd2t2lzbgb7g7bcenpl2r2bsobkbwwpooqrmiwqjkpktm5p5seifcid.onion" OR destinationntdomain CONTAINS "xjdhr5is3qsw2cyekdxo57gchpxusvkko3265x2lmmn4g6fnlimdngqd.onion" OR destinationntdomain CONTAINS "yjh2bktujnqkj7u7g7hxotck6sfhjuf7crhc4vcf6ewpa7swoqalfkid.onion" OR destinationntdomain CONTAINS "yqs4gu4c2kb5ybgcigkl5gcsqbjuk5n2su2pozpsw4ojav2op5gddkid.onion")
index=activity AND rg_functionality="Next Generation Firewall" AND requesturl NOT NULL AND (requesturl CONTAINS "24rq2pvihkrct6pxl6zy3p36gt2wd6sn6izoz7ntlivxvbuu5ei3xwad.onion" OR requesturl CONTAINS "3crj2ylhdffpf2yik4bb2hn32xey2bdhcpykxfezb4sq53eelglp3sqd.onion" OR requesturl CONTAINS "44yd2dxmm5xuo7dsivwkf2fqyqmfsqkt5nkxdlgwpnbr57sca56j74yd.onion" OR requesturl CONTAINS "acuy77ahadd6g5rw2pxsuejskirjmxaoj37ck7fvj4h4kc36a3uwirqd.onion" OR requesturl CONTAINS "bbknilviexavjvnwdtdqmhsexqcokfwgdqthxexvuwzlwgaggddaahxn.onion" OR requesturl CONTAINS "bvxx2p6hfttpiyntpuf72axcvaakjbz5zgiea7iklkrb2s6wrdrv4lid.onion" OR requesturl CONTAINS "c3uybau64lj32ty3z3sxgchnrmg72bvbpua66mcvydcjpgrbv2r6huyd.onion" OR requesturl CONTAINS "drv4lids5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR requesturl CONTAINS "fend7yhjoeam7b4fp4rj5oobphuvmhjbovhtvporusjex4nyoiamgdyd.onion" OR requesturl CONTAINS "m5idjwoj4q5yrmo5xbnvhoqqrdld6pruxx5qjvr6gfnnmao4xiniwzid.onion" OR requesturl CONTAINS "m7wajjzas7eotqw4b6k4aei5q4zijdal3spsec7wsfmf2xqjhmydjiyd.onion" OR requesturl CONTAINS "npnsktlnofwisqvd3e6tpslinkypajmh5jctyjivuf6jza3syw2v6cid.onion" OR requesturl CONTAINS "pcjvbrttcy2s3gqpgwklgsco4u4bskr5xhvdzs4pzqqcrfllkwe437id.onion" OR requesturl CONTAINS "s4ofksblif7bmo7sp64f56gij6xzh7sznvrn46m6daup2hwdmwbiabqd.onion" OR requesturl CONTAINS "s5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR requesturl CONTAINS "sourt33xcdoyg4jcrh33qvx6cjoneowihsfrbuqldkrrili54gdvryyd.onion" OR requesturl CONTAINS "syd5mtjvcqxvnnkeqjjkdm2oz2jzl6swrfhnvliiemxtgiqvcbm26nyd.onion" OR requesturl CONTAINS "tybocptxypx42ngrcqldrgas536syipwotmfnbjpwc5fpxth4xf4faqd.onion" OR requesturl CONTAINS "u7kteztwfg3p6wdeiq6y7zidxx3xtto4gmm2vwz42mzd6s4ixgvpgxyd.onion" OR requesturl CONTAINS "uu2iggf5wq57dt6xanfdmwq3rvxqorkb43bh2eacj2vz22nvwewlxcyd.onion" OR requesturl CONTAINS "wauby5e7m6zf2eb7rfn7nqm3diuaehdu6tfay4janiktgx33wjfifkyd.onion" OR requesturl CONTAINS "wf4uxi6izbqppzb4fvg4sq7sm5t5w5xl5v5pkxpguwpr4aci7hvzboid.onion" OR requesturl CONTAINS "wjd2t2lzbgb7g7bcenpl2r2bsobkbwwpooqrmiwqjkpktm5p5seifcid.onion" OR requesturl CONTAINS "xjdhr5is3qsw2cyekdxo57gchpxusvkko3265x2lmmn4g6fnlimdngqd.onion" OR requesturl CONTAINS "yjh2bktujnqkj7u7g7hxotck6sfhjuf7crhc4vcf6ewpa7swoqalfkid.onion" OR requesturl CONTAINS "yqs4gu4c2kb5ybgcigkl5gcsqbjuk5n2su2pozpsw4ojav2op5gddkid.onion")
index=activity AND rg_functionality="Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "24rq2pvihkrct6pxl6zy3p36gt2wd6sn6izoz7ntlivxvbuu5ei3xwad.onion" OR destinationhostname CONTAINS "3crj2ylhdffpf2yik4bb2hn32xey2bdhcpykxfezb4sq53eelglp3sqd.onion" OR destinationhostname CONTAINS "44yd2dxmm5xuo7dsivwkf2fqyqmfsqkt5nkxdlgwpnbr57sca56j74yd.onion" OR destinationhostname CONTAINS "acuy77ahadd6g5rw2pxsuejskirjmxaoj37ck7fvj4h4kc36a3uwirqd.onion" OR destinationhostname CONTAINS "bbknilviexavjvnwdtdqmhsexqcokfwgdqthxexvuwzlwgaggddaahxn.onion" OR destinationhostname CONTAINS "bvxx2p6hfttpiyntpuf72axcvaakjbz5zgiea7iklkrb2s6wrdrv4lid.onion" OR destinationhostname CONTAINS "c3uybau64lj32ty3z3sxgchnrmg72bvbpua66mcvydcjpgrbv2r6huyd.onion" OR destinationhostname CONTAINS "drv4lids5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR destinationhostname CONTAINS "fend7yhjoeam7b4fp4rj5oobphuvmhjbovhtvporusjex4nyoiamgdyd.onion" OR destinationhostname CONTAINS "m5idjwoj4q5yrmo5xbnvhoqqrdld6pruxx5qjvr6gfnnmao4xiniwzid.onion" OR destinationhostname CONTAINS "m7wajjzas7eotqw4b6k4aei5q4zijdal3spsec7wsfmf2xqjhmydjiyd.onion" OR destinationhostname CONTAINS "npnsktlnofwisqvd3e6tpslinkypajmh5jctyjivuf6jza3syw2v6cid.onion" OR destinationhostname CONTAINS "pcjvbrttcy2s3gqpgwklgsco4u4bskr5xhvdzs4pzqqcrfllkwe437id.onion" OR destinationhostname CONTAINS "s4ofksblif7bmo7sp64f56gij6xzh7sznvrn46m6daup2hwdmwbiabqd.onion" OR destinationhostname CONTAINS "s5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR destinationhostname CONTAINS "sourt33xcdoyg4jcrh33qvx6cjoneowihsfrbuqldkrrili54gdvryyd.onion" OR destinationhostname CONTAINS "syd5mtjvcqxvnnkeqjjkdm2oz2jzl6swrfhnvliiemxtgiqvcbm26nyd.onion" OR destinationhostname CONTAINS "tybocptxypx42ngrcqldrgas536syipwotmfnbjpwc5fpxth4xf4faqd.onion" OR destinationhostname CONTAINS "u7kteztwfg3p6wdeiq6y7zidxx3xtto4gmm2vwz42mzd6s4ixgvpgxyd.onion" OR destinationhostname CONTAINS "uu2iggf5wq57dt6xanfdmwq3rvxqorkb43bh2eacj2vz22nvwewlxcyd.onion" OR destinationhostname CONTAINS "wauby5e7m6zf2eb7rfn7nqm3diuaehdu6tfay4janiktgx33wjfifkyd.onion" OR destinationhostname CONTAINS "wf4uxi6izbqppzb4fvg4sq7sm5t5w5xl5v5pkxpguwpr4aci7hvzboid.onion" OR destinationhostname CONTAINS "wjd2t2lzbgb7g7bcenpl2r2bsobkbwwpooqrmiwqjkpktm5p5seifcid.onion" OR destinationhostname CONTAINS "xjdhr5is3qsw2cyekdxo57gchpxusvkko3265x2lmmn4g6fnlimdngqd.onion" OR destinationhostname CONTAINS "yjh2bktujnqkj7u7g7hxotck6sfhjuf7crhc4vcf6ewpa7swoqalfkid.onion" OR destinationhostname CONTAINS "yqs4gu4c2kb5ybgcigkl5gcsqbjuk5n2su2pozpsw4ojav2op5gddkid.onion")
index=activity AND rg_functionality="Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "24rq2pvihkrct6pxl6zy3p36gt2wd6sn6izoz7ntlivxvbuu5ei3xwad.onion" OR sourcentdomain CONTAINS "3crj2ylhdffpf2yik4bb2hn32xey2bdhcpykxfezb4sq53eelglp3sqd.onion" OR sourcentdomain CONTAINS "44yd2dxmm5xuo7dsivwkf2fqyqmfsqkt5nkxdlgwpnbr57sca56j74yd.onion" OR sourcentdomain CONTAINS "acuy77ahadd6g5rw2pxsuejskirjmxaoj37ck7fvj4h4kc36a3uwirqd.onion" OR sourcentdomain CONTAINS "bbknilviexavjvnwdtdqmhsexqcokfwgdqthxexvuwzlwgaggddaahxn.onion" OR sourcentdomain CONTAINS "bvxx2p6hfttpiyntpuf72axcvaakjbz5zgiea7iklkrb2s6wrdrv4lid.onion" OR sourcentdomain CONTAINS "c3uybau64lj32ty3z3sxgchnrmg72bvbpua66mcvydcjpgrbv2r6huyd.onion" OR sourcentdomain CONTAINS "drv4lids5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR sourcentdomain CONTAINS "fend7yhjoeam7b4fp4rj5oobphuvmhjbovhtvporusjex4nyoiamgdyd.onion" OR sourcentdomain CONTAINS "m5idjwoj4q5yrmo5xbnvhoqqrdld6pruxx5qjvr6gfnnmao4xiniwzid.onion" OR sourcentdomain CONTAINS "m7wajjzas7eotqw4b6k4aei5q4zijdal3spsec7wsfmf2xqjhmydjiyd.onion" OR sourcentdomain CONTAINS "npnsktlnofwisqvd3e6tpslinkypajmh5jctyjivuf6jza3syw2v6cid.onion" OR sourcentdomain CONTAINS "pcjvbrttcy2s3gqpgwklgsco4u4bskr5xhvdzs4pzqqcrfllkwe437id.onion" OR sourcentdomain CONTAINS "s4ofksblif7bmo7sp64f56gij6xzh7sznvrn46m6daup2hwdmwbiabqd.onion" OR sourcentdomain CONTAINS "s5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR sourcentdomain CONTAINS "sourt33xcdoyg4jcrh33qvx6cjoneowihsfrbuqldkrrili54gdvryyd.onion" OR sourcentdomain CONTAINS "syd5mtjvcqxvnnkeqjjkdm2oz2jzl6swrfhnvliiemxtgiqvcbm26nyd.onion" OR sourcentdomain CONTAINS "tybocptxypx42ngrcqldrgas536syipwotmfnbjpwc5fpxth4xf4faqd.onion" OR sourcentdomain CONTAINS "u7kteztwfg3p6wdeiq6y7zidxx3xtto4gmm2vwz42mzd6s4ixgvpgxyd.onion" OR sourcentdomain CONTAINS "uu2iggf5wq57dt6xanfdmwq3rvxqorkb43bh2eacj2vz22nvwewlxcyd.onion" OR sourcentdomain CONTAINS "wauby5e7m6zf2eb7rfn7nqm3diuaehdu6tfay4janiktgx33wjfifkyd.onion" OR sourcentdomain CONTAINS "wf4uxi6izbqppzb4fvg4sq7sm5t5w5xl5v5pkxpguwpr4aci7hvzboid.onion" OR sourcentdomain CONTAINS "wjd2t2lzbgb7g7bcenpl2r2bsobkbwwpooqrmiwqjkpktm5p5seifcid.onion" OR sourcentdomain CONTAINS "xjdhr5is3qsw2cyekdxo57gchpxusvkko3265x2lmmn4g6fnlimdngqd.onion" OR sourcentdomain CONTAINS "yjh2bktujnqkj7u7g7hxotck6sfhjuf7crhc4vcf6ewpa7swoqalfkid.onion" OR sourcentdomain CONTAINS "yqs4gu4c2kb5ybgcigkl5gcsqbjuk5n2su2pozpsw4ojav2op5gddkid.onion")
index=activity AND rg_functionality="Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "24rq2pvihkrct6pxl6zy3p36gt2wd6sn6izoz7ntlivxvbuu5ei3xwad.onion" OR sourcehostname CONTAINS "3crj2ylhdffpf2yik4bb2hn32xey2bdhcpykxfezb4sq53eelglp3sqd.onion" OR sourcehostname CONTAINS "44yd2dxmm5xuo7dsivwkf2fqyqmfsqkt5nkxdlgwpnbr57sca56j74yd.onion" OR sourcehostname CONTAINS "acuy77ahadd6g5rw2pxsuejskirjmxaoj37ck7fvj4h4kc36a3uwirqd.onion" OR sourcehostname CONTAINS "bbknilviexavjvnwdtdqmhsexqcokfwgdqthxexvuwzlwgaggddaahxn.onion" OR sourcehostname CONTAINS "bvxx2p6hfttpiyntpuf72axcvaakjbz5zgiea7iklkrb2s6wrdrv4lid.onion" OR sourcehostname CONTAINS "c3uybau64lj32ty3z3sxgchnrmg72bvbpua66mcvydcjpgrbv2r6huyd.onion" OR sourcehostname CONTAINS "drv4lids5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR sourcehostname CONTAINS "fend7yhjoeam7b4fp4rj5oobphuvmhjbovhtvporusjex4nyoiamgdyd.onion" OR sourcehostname CONTAINS "m5idjwoj4q5yrmo5xbnvhoqqrdld6pruxx5qjvr6gfnnmao4xiniwzid.onion" OR sourcehostname CONTAINS "m7wajjzas7eotqw4b6k4aei5q4zijdal3spsec7wsfmf2xqjhmydjiyd.onion" OR sourcehostname CONTAINS "npnsktlnofwisqvd3e6tpslinkypajmh5jctyjivuf6jza3syw2v6cid.onion" OR sourcehostname CONTAINS "pcjvbrttcy2s3gqpgwklgsco4u4bskr5xhvdzs4pzqqcrfllkwe437id.onion" OR sourcehostname CONTAINS "s4ofksblif7bmo7sp64f56gij6xzh7sznvrn46m6daup2hwdmwbiabqd.onion" OR sourcehostname CONTAINS "s5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR sourcehostname CONTAINS "sourt33xcdoyg4jcrh33qvx6cjoneowihsfrbuqldkrrili54gdvryyd.onion" OR sourcehostname CONTAINS "syd5mtjvcqxvnnkeqjjkdm2oz2jzl6swrfhnvliiemxtgiqvcbm26nyd.onion" OR sourcehostname CONTAINS "tybocptxypx42ngrcqldrgas536syipwotmfnbjpwc5fpxth4xf4faqd.onion" OR sourcehostname CONTAINS "u7kteztwfg3p6wdeiq6y7zidxx3xtto4gmm2vwz42mzd6s4ixgvpgxyd.onion" OR sourcehostname CONTAINS "uu2iggf5wq57dt6xanfdmwq3rvxqorkb43bh2eacj2vz22nvwewlxcyd.onion" OR sourcehostname CONTAINS "wauby5e7m6zf2eb7rfn7nqm3diuaehdu6tfay4janiktgx33wjfifkyd.onion" OR sourcehostname CONTAINS "wf4uxi6izbqppzb4fvg4sq7sm5t5w5xl5v5pkxpguwpr4aci7hvzboid.onion" OR sourcehostname CONTAINS "wjd2t2lzbgb7g7bcenpl2r2bsobkbwwpooqrmiwqjkpktm5p5seifcid.onion" OR sourcehostname CONTAINS "xjdhr5is3qsw2cyekdxo57gchpxusvkko3265x2lmmn4g6fnlimdngqd.onion" OR sourcehostname CONTAINS "yjh2bktujnqkj7u7g7hxotck6sfhjuf7crhc4vcf6ewpa7swoqalfkid.onion" OR sourcehostname CONTAINS "yqs4gu4c2kb5ybgcigkl5gcsqbjuk5n2su2pozpsw4ojav2op5gddkid.onion")
index=activity AND rg_functionality="Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "24rq2pvihkrct6pxl6zy3p36gt2wd6sn6izoz7ntlivxvbuu5ei3xwad.onion" OR destinationntdomain CONTAINS "3crj2ylhdffpf2yik4bb2hn32xey2bdhcpykxfezb4sq53eelglp3sqd.onion" OR destinationntdomain CONTAINS "44yd2dxmm5xuo7dsivwkf2fqyqmfsqkt5nkxdlgwpnbr57sca56j74yd.onion" OR destinationntdomain CONTAINS "acuy77ahadd6g5rw2pxsuejskirjmxaoj37ck7fvj4h4kc36a3uwirqd.onion" OR destinationntdomain CONTAINS "bbknilviexavjvnwdtdqmhsexqcokfwgdqthxexvuwzlwgaggddaahxn.onion" OR destinationntdomain CONTAINS "bvxx2p6hfttpiyntpuf72axcvaakjbz5zgiea7iklkrb2s6wrdrv4lid.onion" OR destinationntdomain CONTAINS "c3uybau64lj32ty3z3sxgchnrmg72bvbpua66mcvydcjpgrbv2r6huyd.onion" OR destinationntdomain CONTAINS "drv4lids5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR destinationntdomain CONTAINS "fend7yhjoeam7b4fp4rj5oobphuvmhjbovhtvporusjex4nyoiamgdyd.onion" OR destinationntdomain CONTAINS "m5idjwoj4q5yrmo5xbnvhoqqrdld6pruxx5qjvr6gfnnmao4xiniwzid.onion" OR destinationntdomain CONTAINS "m7wajjzas7eotqw4b6k4aei5q4zijdal3spsec7wsfmf2xqjhmydjiyd.onion" OR destinationntdomain CONTAINS "npnsktlnofwisqvd3e6tpslinkypajmh5jctyjivuf6jza3syw2v6cid.onion" OR destinationntdomain CONTAINS "pcjvbrttcy2s3gqpgwklgsco4u4bskr5xhvdzs4pzqqcrfllkwe437id.onion" OR destinationntdomain CONTAINS "s4ofksblif7bmo7sp64f56gij6xzh7sznvrn46m6daup2hwdmwbiabqd.onion" OR destinationntdomain CONTAINS "s5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR destinationntdomain CONTAINS "sourt33xcdoyg4jcrh33qvx6cjoneowihsfrbuqldkrrili54gdvryyd.onion" OR destinationntdomain CONTAINS "syd5mtjvcqxvnnkeqjjkdm2oz2jzl6swrfhnvliiemxtgiqvcbm26nyd.onion" OR destinationntdomain CONTAINS "tybocptxypx42ngrcqldrgas536syipwotmfnbjpwc5fpxth4xf4faqd.onion" OR destinationntdomain CONTAINS "u7kteztwfg3p6wdeiq6y7zidxx3xtto4gmm2vwz42mzd6s4ixgvpgxyd.onion" OR destinationntdomain CONTAINS "uu2iggf5wq57dt6xanfdmwq3rvxqorkb43bh2eacj2vz22nvwewlxcyd.onion" OR destinationntdomain CONTAINS "wauby5e7m6zf2eb7rfn7nqm3diuaehdu6tfay4janiktgx33wjfifkyd.onion" OR destinationntdomain CONTAINS "wf4uxi6izbqppzb4fvg4sq7sm5t5w5xl5v5pkxpguwpr4aci7hvzboid.onion" OR destinationntdomain CONTAINS "wjd2t2lzbgb7g7bcenpl2r2bsobkbwwpooqrmiwqjkpktm5p5seifcid.onion" OR destinationntdomain CONTAINS "xjdhr5is3qsw2cyekdxo57gchpxusvkko3265x2lmmn4g6fnlimdngqd.onion" OR destinationntdomain CONTAINS "yjh2bktujnqkj7u7g7hxotck6sfhjuf7crhc4vcf6ewpa7swoqalfkid.onion" OR destinationntdomain CONTAINS "yqs4gu4c2kb5ybgcigkl5gcsqbjuk5n2su2pozpsw4ojav2op5gddkid.onion")
index=activity AND rg_functionality="Firewall" AND requesturl NOT NULL AND (requesturl CONTAINS "24rq2pvihkrct6pxl6zy3p36gt2wd6sn6izoz7ntlivxvbuu5ei3xwad.onion" OR requesturl CONTAINS "3crj2ylhdffpf2yik4bb2hn32xey2bdhcpykxfezb4sq53eelglp3sqd.onion" OR requesturl CONTAINS "44yd2dxmm5xuo7dsivwkf2fqyqmfsqkt5nkxdlgwpnbr57sca56j74yd.onion" OR requesturl CONTAINS "acuy77ahadd6g5rw2pxsuejskirjmxaoj37ck7fvj4h4kc36a3uwirqd.onion" OR requesturl CONTAINS "bbknilviexavjvnwdtdqmhsexqcokfwgdqthxexvuwzlwgaggddaahxn.onion" OR requesturl CONTAINS "bvxx2p6hfttpiyntpuf72axcvaakjbz5zgiea7iklkrb2s6wrdrv4lid.onion" OR requesturl CONTAINS "c3uybau64lj32ty3z3sxgchnrmg72bvbpua66mcvydcjpgrbv2r6huyd.onion" OR requesturl CONTAINS "drv4lids5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR requesturl CONTAINS "fend7yhjoeam7b4fp4rj5oobphuvmhjbovhtvporusjex4nyoiamgdyd.onion" OR requesturl CONTAINS "m5idjwoj4q5yrmo5xbnvhoqqrdld6pruxx5qjvr6gfnnmao4xiniwzid.onion" OR requesturl CONTAINS "m7wajjzas7eotqw4b6k4aei5q4zijdal3spsec7wsfmf2xqjhmydjiyd.onion" OR requesturl CONTAINS "npnsktlnofwisqvd3e6tpslinkypajmh5jctyjivuf6jza3syw2v6cid.onion" OR requesturl CONTAINS "pcjvbrttcy2s3gqpgwklgsco4u4bskr5xhvdzs4pzqqcrfllkwe437id.onion" OR requesturl CONTAINS "s4ofksblif7bmo7sp64f56gij6xzh7sznvrn46m6daup2hwdmwbiabqd.onion" OR requesturl CONTAINS "s5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR requesturl CONTAINS "sourt33xcdoyg4jcrh33qvx6cjoneowihsfrbuqldkrrili54gdvryyd.onion" OR requesturl CONTAINS "syd5mtjvcqxvnnkeqjjkdm2oz2jzl6swrfhnvliiemxtgiqvcbm26nyd.onion" OR requesturl CONTAINS "tybocptxypx42ngrcqldrgas536syipwotmfnbjpwc5fpxth4xf4faqd.onion" OR requesturl CONTAINS "u7kteztwfg3p6wdeiq6y7zidxx3xtto4gmm2vwz42mzd6s4ixgvpgxyd.onion" OR requesturl CONTAINS "uu2iggf5wq57dt6xanfdmwq3rvxqorkb43bh2eacj2vz22nvwewlxcyd.onion" OR requesturl CONTAINS "wauby5e7m6zf2eb7rfn7nqm3diuaehdu6tfay4janiktgx33wjfifkyd.onion" OR requesturl CONTAINS "wf4uxi6izbqppzb4fvg4sq7sm5t5w5xl5v5pkxpguwpr4aci7hvzboid.onion" OR requesturl CONTAINS "wjd2t2lzbgb7g7bcenpl2r2bsobkbwwpooqrmiwqjkpktm5p5seifcid.onion" OR requesturl CONTAINS "xjdhr5is3qsw2cyekdxo57gchpxusvkko3265x2lmmn4g6fnlimdngqd.onion" OR requesturl CONTAINS "yjh2bktujnqkj7u7g7hxotck6sfhjuf7crhc4vcf6ewpa7swoqalfkid.onion" OR requesturl CONTAINS "yqs4gu4c2kb5ybgcigkl5gcsqbjuk5n2su2pozpsw4ojav2op5gddkid.onion")
index=activity AND rg_functionality="Web Proxy" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "24rq2pvihkrct6pxl6zy3p36gt2wd6sn6izoz7ntlivxvbuu5ei3xwad.onion" OR destinationhostname CONTAINS "3crj2ylhdffpf2yik4bb2hn32xey2bdhcpykxfezb4sq53eelglp3sqd.onion" OR destinationhostname CONTAINS "44yd2dxmm5xuo7dsivwkf2fqyqmfsqkt5nkxdlgwpnbr57sca56j74yd.onion" OR destinationhostname CONTAINS "acuy77ahadd6g5rw2pxsuejskirjmxaoj37ck7fvj4h4kc36a3uwirqd.onion" OR destinationhostname CONTAINS "bbknilviexavjvnwdtdqmhsexqcokfwgdqthxexvuwzlwgaggddaahxn.onion" OR destinationhostname CONTAINS "bvxx2p6hfttpiyntpuf72axcvaakjbz5zgiea7iklkrb2s6wrdrv4lid.onion" OR destinationhostname CONTAINS "c3uybau64lj32ty3z3sxgchnrmg72bvbpua66mcvydcjpgrbv2r6huyd.onion" OR destinationhostname CONTAINS "drv4lids5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR destinationhostname CONTAINS "fend7yhjoeam7b4fp4rj5oobphuvmhjbovhtvporusjex4nyoiamgdyd.onion" OR destinationhostname CONTAINS "m5idjwoj4q5yrmo5xbnvhoqqrdld6pruxx5qjvr6gfnnmao4xiniwzid.onion" OR destinationhostname CONTAINS "m7wajjzas7eotqw4b6k4aei5q4zijdal3spsec7wsfmf2xqjhmydjiyd.onion" OR destinationhostname CONTAINS "npnsktlnofwisqvd3e6tpslinkypajmh5jctyjivuf6jza3syw2v6cid.onion" OR destinationhostname CONTAINS "pcjvbrttcy2s3gqpgwklgsco4u4bskr5xhvdzs4pzqqcrfllkwe437id.onion" OR destinationhostname CONTAINS "s4ofksblif7bmo7sp64f56gij6xzh7sznvrn46m6daup2hwdmwbiabqd.onion" OR destinationhostname CONTAINS "s5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR destinationhostname CONTAINS "sourt33xcdoyg4jcrh33qvx6cjoneowihsfrbuqldkrrili54gdvryyd.onion" OR destinationhostname CONTAINS "syd5mtjvcqxvnnkeqjjkdm2oz2jzl6swrfhnvliiemxtgiqvcbm26nyd.onion" OR destinationhostname CONTAINS "tybocptxypx42ngrcqldrgas536syipwotmfnbjpwc5fpxth4xf4faqd.onion" OR destinationhostname CONTAINS "u7kteztwfg3p6wdeiq6y7zidxx3xtto4gmm2vwz42mzd6s4ixgvpgxyd.onion" OR destinationhostname CONTAINS "uu2iggf5wq57dt6xanfdmwq3rvxqorkb43bh2eacj2vz22nvwewlxcyd.onion" OR destinationhostname CONTAINS "wauby5e7m6zf2eb7rfn7nqm3diuaehdu6tfay4janiktgx33wjfifkyd.onion" OR destinationhostname CONTAINS "wf4uxi6izbqppzb4fvg4sq7sm5t5w5xl5v5pkxpguwpr4aci7hvzboid.onion" OR destinationhostname CONTAINS "wjd2t2lzbgb7g7bcenpl2r2bsobkbwwpooqrmiwqjkpktm5p5seifcid.onion" OR destinationhostname CONTAINS "xjdhr5is3qsw2cyekdxo57gchpxusvkko3265x2lmmn4g6fnlimdngqd.onion" OR destinationhostname CONTAINS "yjh2bktujnqkj7u7g7hxotck6sfhjuf7crhc4vcf6ewpa7swoqalfkid.onion" OR destinationhostname CONTAINS "yqs4gu4c2kb5ybgcigkl5gcsqbjuk5n2su2pozpsw4ojav2op5gddkid.onion")
index=activity AND rg_functionality="Web Proxy" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "24rq2pvihkrct6pxl6zy3p36gt2wd6sn6izoz7ntlivxvbuu5ei3xwad.onion" OR sourcentdomain CONTAINS "3crj2ylhdffpf2yik4bb2hn32xey2bdhcpykxfezb4sq53eelglp3sqd.onion" OR sourcentdomain CONTAINS "44yd2dxmm5xuo7dsivwkf2fqyqmfsqkt5nkxdlgwpnbr57sca56j74yd.onion" OR sourcentdomain CONTAINS "acuy77ahadd6g5rw2pxsuejskirjmxaoj37ck7fvj4h4kc36a3uwirqd.onion" OR sourcentdomain CONTAINS "bbknilviexavjvnwdtdqmhsexqcokfwgdqthxexvuwzlwgaggddaahxn.onion" OR sourcentdomain CONTAINS "bvxx2p6hfttpiyntpuf72axcvaakjbz5zgiea7iklkrb2s6wrdrv4lid.onion" OR sourcentdomain CONTAINS "c3uybau64lj32ty3z3sxgchnrmg72bvbpua66mcvydcjpgrbv2r6huyd.onion" OR sourcentdomain CONTAINS "drv4lids5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR sourcentdomain CONTAINS "fend7yhjoeam7b4fp4rj5oobphuvmhjbovhtvporusjex4nyoiamgdyd.onion" OR sourcentdomain CONTAINS "m5idjwoj4q5yrmo5xbnvhoqqrdld6pruxx5qjvr6gfnnmao4xiniwzid.onion" OR sourcentdomain CONTAINS "m7wajjzas7eotqw4b6k4aei5q4zijdal3spsec7wsfmf2xqjhmydjiyd.onion" OR sourcentdomain CONTAINS "npnsktlnofwisqvd3e6tpslinkypajmh5jctyjivuf6jza3syw2v6cid.onion" OR sourcentdomain CONTAINS "pcjvbrttcy2s3gqpgwklgsco4u4bskr5xhvdzs4pzqqcrfllkwe437id.onion" OR sourcentdomain CONTAINS "s4ofksblif7bmo7sp64f56gij6xzh7sznvrn46m6daup2hwdmwbiabqd.onion" OR sourcentdomain CONTAINS "s5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR sourcentdomain CONTAINS "sourt33xcdoyg4jcrh33qvx6cjoneowihsfrbuqldkrrili54gdvryyd.onion" OR sourcentdomain CONTAINS "syd5mtjvcqxvnnkeqjjkdm2oz2jzl6swrfhnvliiemxtgiqvcbm26nyd.onion" OR sourcentdomain CONTAINS "tybocptxypx42ngrcqldrgas536syipwotmfnbjpwc5fpxth4xf4faqd.onion" OR sourcentdomain CONTAINS "u7kteztwfg3p6wdeiq6y7zidxx3xtto4gmm2vwz42mzd6s4ixgvpgxyd.onion" OR sourcentdomain CONTAINS "uu2iggf5wq57dt6xanfdmwq3rvxqorkb43bh2eacj2vz22nvwewlxcyd.onion" OR sourcentdomain CONTAINS "wauby5e7m6zf2eb7rfn7nqm3diuaehdu6tfay4janiktgx33wjfifkyd.onion" OR sourcentdomain CONTAINS "wf4uxi6izbqppzb4fvg4sq7sm5t5w5xl5v5pkxpguwpr4aci7hvzboid.onion" OR sourcentdomain CONTAINS "wjd2t2lzbgb7g7bcenpl2r2bsobkbwwpooqrmiwqjkpktm5p5seifcid.onion" OR sourcentdomain CONTAINS "xjdhr5is3qsw2cyekdxo57gchpxusvkko3265x2lmmn4g6fnlimdngqd.onion" OR sourcentdomain CONTAINS "yjh2bktujnqkj7u7g7hxotck6sfhjuf7crhc4vcf6ewpa7swoqalfkid.onion" OR sourcentdomain CONTAINS "yqs4gu4c2kb5ybgcigkl5gcsqbjuk5n2su2pozpsw4ojav2op5gddkid.onion")
index=activity AND rg_functionality="Web Proxy" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "24rq2pvihkrct6pxl6zy3p36gt2wd6sn6izoz7ntlivxvbuu5ei3xwad.onion" OR sourcehostname CONTAINS "3crj2ylhdffpf2yik4bb2hn32xey2bdhcpykxfezb4sq53eelglp3sqd.onion" OR sourcehostname CONTAINS "44yd2dxmm5xuo7dsivwkf2fqyqmfsqkt5nkxdlgwpnbr57sca56j74yd.onion" OR sourcehostname CONTAINS "acuy77ahadd6g5rw2pxsuejskirjmxaoj37ck7fvj4h4kc36a3uwirqd.onion" OR sourcehostname CONTAINS "bbknilviexavjvnwdtdqmhsexqcokfwgdqthxexvuwzlwgaggddaahxn.onion" OR sourcehostname CONTAINS "bvxx2p6hfttpiyntpuf72axcvaakjbz5zgiea7iklkrb2s6wrdrv4lid.onion" OR sourcehostname CONTAINS "c3uybau64lj32ty3z3sxgchnrmg72bvbpua66mcvydcjpgrbv2r6huyd.onion" OR sourcehostname CONTAINS "drv4lids5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR sourcehostname CONTAINS "fend7yhjoeam7b4fp4rj5oobphuvmhjbovhtvporusjex4nyoiamgdyd.onion" OR sourcehostname CONTAINS "m5idjwoj4q5yrmo5xbnvhoqqrdld6pruxx5qjvr6gfnnmao4xiniwzid.onion" OR sourcehostname CONTAINS "m7wajjzas7eotqw4b6k4aei5q4zijdal3spsec7wsfmf2xqjhmydjiyd.onion" OR sourcehostname CONTAINS "npnsktlnofwisqvd3e6tpslinkypajmh5jctyjivuf6jza3syw2v6cid.onion" OR sourcehostname CONTAINS "pcjvbrttcy2s3gqpgwklgsco4u4bskr5xhvdzs4pzqqcrfllkwe437id.onion" OR sourcehostname CONTAINS "s4ofksblif7bmo7sp64f56gij6xzh7sznvrn46m6daup2hwdmwbiabqd.onion" OR sourcehostname CONTAINS "s5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR sourcehostname CONTAINS "sourt33xcdoyg4jcrh33qvx6cjoneowihsfrbuqldkrrili54gdvryyd.onion" OR sourcehostname CONTAINS "syd5mtjvcqxvnnkeqjjkdm2oz2jzl6swrfhnvliiemxtgiqvcbm26nyd.onion" OR sourcehostname CONTAINS "tybocptxypx42ngrcqldrgas536syipwotmfnbjpwc5fpxth4xf4faqd.onion" OR sourcehostname CONTAINS "u7kteztwfg3p6wdeiq6y7zidxx3xtto4gmm2vwz42mzd6s4ixgvpgxyd.onion" OR sourcehostname CONTAINS "uu2iggf5wq57dt6xanfdmwq3rvxqorkb43bh2eacj2vz22nvwewlxcyd.onion" OR sourcehostname CONTAINS "wauby5e7m6zf2eb7rfn7nqm3diuaehdu6tfay4janiktgx33wjfifkyd.onion" OR sourcehostname CONTAINS "wf4uxi6izbqppzb4fvg4sq7sm5t5w5xl5v5pkxpguwpr4aci7hvzboid.onion" OR sourcehostname CONTAINS "wjd2t2lzbgb7g7bcenpl2r2bsobkbwwpooqrmiwqjkpktm5p5seifcid.onion" OR sourcehostname CONTAINS "xjdhr5is3qsw2cyekdxo57gchpxusvkko3265x2lmmn4g6fnlimdngqd.onion" OR sourcehostname CONTAINS "yjh2bktujnqkj7u7g7hxotck6sfhjuf7crhc4vcf6ewpa7swoqalfkid.onion" OR sourcehostname CONTAINS "yqs4gu4c2kb5ybgcigkl5gcsqbjuk5n2su2pozpsw4ojav2op5gddkid.onion")
index=activity AND rg_functionality="Web Proxy" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "24rq2pvihkrct6pxl6zy3p36gt2wd6sn6izoz7ntlivxvbuu5ei3xwad.onion" OR destinationntdomain CONTAINS "3crj2ylhdffpf2yik4bb2hn32xey2bdhcpykxfezb4sq53eelglp3sqd.onion" OR destinationntdomain CONTAINS "44yd2dxmm5xuo7dsivwkf2fqyqmfsqkt5nkxdlgwpnbr57sca56j74yd.onion" OR destinationntdomain CONTAINS "acuy77ahadd6g5rw2pxsuejskirjmxaoj37ck7fvj4h4kc36a3uwirqd.onion" OR destinationntdomain CONTAINS "bbknilviexavjvnwdtdqmhsexqcokfwgdqthxexvuwzlwgaggddaahxn.onion" OR destinationntdomain CONTAINS "bvxx2p6hfttpiyntpuf72axcvaakjbz5zgiea7iklkrb2s6wrdrv4lid.onion" OR destinationntdomain CONTAINS "c3uybau64lj32ty3z3sxgchnrmg72bvbpua66mcvydcjpgrbv2r6huyd.onion" OR destinationntdomain CONTAINS "drv4lids5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR destinationntdomain CONTAINS "fend7yhjoeam7b4fp4rj5oobphuvmhjbovhtvporusjex4nyoiamgdyd.onion" OR destinationntdomain CONTAINS "m5idjwoj4q5yrmo5xbnvhoqqrdld6pruxx5qjvr6gfnnmao4xiniwzid.onion" OR destinationntdomain CONTAINS "m7wajjzas7eotqw4b6k4aei5q4zijdal3spsec7wsfmf2xqjhmydjiyd.onion" OR destinationntdomain CONTAINS "npnsktlnofwisqvd3e6tpslinkypajmh5jctyjivuf6jza3syw2v6cid.onion" OR destinationntdomain CONTAINS "pcjvbrttcy2s3gqpgwklgsco4u4bskr5xhvdzs4pzqqcrfllkwe437id.onion" OR destinationntdomain CONTAINS "s4ofksblif7bmo7sp64f56gij6xzh7sznvrn46m6daup2hwdmwbiabqd.onion" OR destinationntdomain CONTAINS "s5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR destinationntdomain CONTAINS "sourt33xcdoyg4jcrh33qvx6cjoneowihsfrbuqldkrrili54gdvryyd.onion" OR destinationntdomain CONTAINS "syd5mtjvcqxvnnkeqjjkdm2oz2jzl6swrfhnvliiemxtgiqvcbm26nyd.onion" OR destinationntdomain CONTAINS "tybocptxypx42ngrcqldrgas536syipwotmfnbjpwc5fpxth4xf4faqd.onion" OR destinationntdomain CONTAINS "u7kteztwfg3p6wdeiq6y7zidxx3xtto4gmm2vwz42mzd6s4ixgvpgxyd.onion" OR destinationntdomain CONTAINS "uu2iggf5wq57dt6xanfdmwq3rvxqorkb43bh2eacj2vz22nvwewlxcyd.onion" OR destinationntdomain CONTAINS "wauby5e7m6zf2eb7rfn7nqm3diuaehdu6tfay4janiktgx33wjfifkyd.onion" OR destinationntdomain CONTAINS "wf4uxi6izbqppzb4fvg4sq7sm5t5w5xl5v5pkxpguwpr4aci7hvzboid.onion" OR destinationntdomain CONTAINS "wjd2t2lzbgb7g7bcenpl2r2bsobkbwwpooqrmiwqjkpktm5p5seifcid.onion" OR destinationntdomain CONTAINS "xjdhr5is3qsw2cyekdxo57gchpxusvkko3265x2lmmn4g6fnlimdngqd.onion" OR destinationntdomain CONTAINS "yjh2bktujnqkj7u7g7hxotck6sfhjuf7crhc4vcf6ewpa7swoqalfkid.onion" OR destinationntdomain CONTAINS "yqs4gu4c2kb5ybgcigkl5gcsqbjuk5n2su2pozpsw4ojav2op5gddkid.onion")
index=activity AND rg_functionality="Web Proxy" AND requesturl NOT NULL AND (requesturl CONTAINS "24rq2pvihkrct6pxl6zy3p36gt2wd6sn6izoz7ntlivxvbuu5ei3xwad.onion" OR requesturl CONTAINS "3crj2ylhdffpf2yik4bb2hn32xey2bdhcpykxfezb4sq53eelglp3sqd.onion" OR requesturl CONTAINS "44yd2dxmm5xuo7dsivwkf2fqyqmfsqkt5nkxdlgwpnbr57sca56j74yd.onion" OR requesturl CONTAINS "acuy77ahadd6g5rw2pxsuejskirjmxaoj37ck7fvj4h4kc36a3uwirqd.onion" OR requesturl CONTAINS "bbknilviexavjvnwdtdqmhsexqcokfwgdqthxexvuwzlwgaggddaahxn.onion" OR requesturl CONTAINS "bvxx2p6hfttpiyntpuf72axcvaakjbz5zgiea7iklkrb2s6wrdrv4lid.onion" OR requesturl CONTAINS "c3uybau64lj32ty3z3sxgchnrmg72bvbpua66mcvydcjpgrbv2r6huyd.onion" OR requesturl CONTAINS "drv4lids5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR requesturl CONTAINS "fend7yhjoeam7b4fp4rj5oobphuvmhjbovhtvporusjex4nyoiamgdyd.onion" OR requesturl CONTAINS "m5idjwoj4q5yrmo5xbnvhoqqrdld6pruxx5qjvr6gfnnmao4xiniwzid.onion" OR requesturl CONTAINS "m7wajjzas7eotqw4b6k4aei5q4zijdal3spsec7wsfmf2xqjhmydjiyd.onion" OR requesturl CONTAINS "npnsktlnofwisqvd3e6tpslinkypajmh5jctyjivuf6jza3syw2v6cid.onion" OR requesturl CONTAINS "pcjvbrttcy2s3gqpgwklgsco4u4bskr5xhvdzs4pzqqcrfllkwe437id.onion" OR requesturl CONTAINS "s4ofksblif7bmo7sp64f56gij6xzh7sznvrn46m6daup2hwdmwbiabqd.onion" OR requesturl CONTAINS "s5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR requesturl CONTAINS "sourt33xcdoyg4jcrh33qvx6cjoneowihsfrbuqldkrrili54gdvryyd.onion" OR requesturl CONTAINS "syd5mtjvcqxvnnkeqjjkdm2oz2jzl6swrfhnvliiemxtgiqvcbm26nyd.onion" OR requesturl CONTAINS "tybocptxypx42ngrcqldrgas536syipwotmfnbjpwc5fpxth4xf4faqd.onion" OR requesturl CONTAINS "u7kteztwfg3p6wdeiq6y7zidxx3xtto4gmm2vwz42mzd6s4ixgvpgxyd.onion" OR requesturl CONTAINS "uu2iggf5wq57dt6xanfdmwq3rvxqorkb43bh2eacj2vz22nvwewlxcyd.onion" OR requesturl CONTAINS "wauby5e7m6zf2eb7rfn7nqm3diuaehdu6tfay4janiktgx33wjfifkyd.onion" OR requesturl CONTAINS "wf4uxi6izbqppzb4fvg4sq7sm5t5w5xl5v5pkxpguwpr4aci7hvzboid.onion" OR requesturl CONTAINS "wjd2t2lzbgb7g7bcenpl2r2bsobkbwwpooqrmiwqjkpktm5p5seifcid.onion" OR requesturl CONTAINS "xjdhr5is3qsw2cyekdxo57gchpxusvkko3265x2lmmn4g6fnlimdngqd.onion" OR requesturl CONTAINS "yjh2bktujnqkj7u7g7hxotck6sfhjuf7crhc4vcf6ewpa7swoqalfkid.onion" OR requesturl CONTAINS "yqs4gu4c2kb5ybgcigkl5gcsqbjuk5n2su2pozpsw4ojav2op5gddkid.onion")
index=activity AND rg_functionality="Flow" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "24rq2pvihkrct6pxl6zy3p36gt2wd6sn6izoz7ntlivxvbuu5ei3xwad.onion" OR destinationhostname CONTAINS "3crj2ylhdffpf2yik4bb2hn32xey2bdhcpykxfezb4sq53eelglp3sqd.onion" OR destinationhostname CONTAINS "44yd2dxmm5xuo7dsivwkf2fqyqmfsqkt5nkxdlgwpnbr57sca56j74yd.onion" OR destinationhostname CONTAINS "acuy77ahadd6g5rw2pxsuejskirjmxaoj37ck7fvj4h4kc36a3uwirqd.onion" OR destinationhostname CONTAINS "bbknilviexavjvnwdtdqmhsexqcokfwgdqthxexvuwzlwgaggddaahxn.onion" OR destinationhostname CONTAINS "bvxx2p6hfttpiyntpuf72axcvaakjbz5zgiea7iklkrb2s6wrdrv4lid.onion" OR destinationhostname CONTAINS "c3uybau64lj32ty3z3sxgchnrmg72bvbpua66mcvydcjpgrbv2r6huyd.onion" OR destinationhostname CONTAINS "drv4lids5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR destinationhostname CONTAINS "fend7yhjoeam7b4fp4rj5oobphuvmhjbovhtvporusjex4nyoiamgdyd.onion" OR destinationhostname CONTAINS "m5idjwoj4q5yrmo5xbnvhoqqrdld6pruxx5qjvr6gfnnmao4xiniwzid.onion" OR destinationhostname CONTAINS "m7wajjzas7eotqw4b6k4aei5q4zijdal3spsec7wsfmf2xqjhmydjiyd.onion" OR destinationhostname CONTAINS "npnsktlnofwisqvd3e6tpslinkypajmh5jctyjivuf6jza3syw2v6cid.onion" OR destinationhostname CONTAINS "pcjvbrttcy2s3gqpgwklgsco4u4bskr5xhvdzs4pzqqcrfllkwe437id.onion" OR destinationhostname CONTAINS "s4ofksblif7bmo7sp64f56gij6xzh7sznvrn46m6daup2hwdmwbiabqd.onion" OR destinationhostname CONTAINS "s5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR destinationhostname CONTAINS "sourt33xcdoyg4jcrh33qvx6cjoneowihsfrbuqldkrrili54gdvryyd.onion" OR destinationhostname CONTAINS "syd5mtjvcqxvnnkeqjjkdm2oz2jzl6swrfhnvliiemxtgiqvcbm26nyd.onion" OR destinationhostname CONTAINS "tybocptxypx42ngrcqldrgas536syipwotmfnbjpwc5fpxth4xf4faqd.onion" OR destinationhostname CONTAINS "u7kteztwfg3p6wdeiq6y7zidxx3xtto4gmm2vwz42mzd6s4ixgvpgxyd.onion" OR destinationhostname CONTAINS "uu2iggf5wq57dt6xanfdmwq3rvxqorkb43bh2eacj2vz22nvwewlxcyd.onion" OR destinationhostname CONTAINS "wauby5e7m6zf2eb7rfn7nqm3diuaehdu6tfay4janiktgx33wjfifkyd.onion" OR destinationhostname CONTAINS "wf4uxi6izbqppzb4fvg4sq7sm5t5w5xl5v5pkxpguwpr4aci7hvzboid.onion" OR destinationhostname CONTAINS "wjd2t2lzbgb7g7bcenpl2r2bsobkbwwpooqrmiwqjkpktm5p5seifcid.onion" OR destinationhostname CONTAINS "xjdhr5is3qsw2cyekdxo57gchpxusvkko3265x2lmmn4g6fnlimdngqd.onion" OR destinationhostname CONTAINS "yjh2bktujnqkj7u7g7hxotck6sfhjuf7crhc4vcf6ewpa7swoqalfkid.onion" OR destinationhostname CONTAINS "yqs4gu4c2kb5ybgcigkl5gcsqbjuk5n2su2pozpsw4ojav2op5gddkid.onion")
index=activity AND rg_functionality="Flow" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "24rq2pvihkrct6pxl6zy3p36gt2wd6sn6izoz7ntlivxvbuu5ei3xwad.onion" OR sourcentdomain CONTAINS "3crj2ylhdffpf2yik4bb2hn32xey2bdhcpykxfezb4sq53eelglp3sqd.onion" OR sourcentdomain CONTAINS "44yd2dxmm5xuo7dsivwkf2fqyqmfsqkt5nkxdlgwpnbr57sca56j74yd.onion" OR sourcentdomain CONTAINS "acuy77ahadd6g5rw2pxsuejskirjmxaoj37ck7fvj4h4kc36a3uwirqd.onion" OR sourcentdomain CONTAINS "bbknilviexavjvnwdtdqmhsexqcokfwgdqthxexvuwzlwgaggddaahxn.onion" OR sourcentdomain CONTAINS "bvxx2p6hfttpiyntpuf72axcvaakjbz5zgiea7iklkrb2s6wrdrv4lid.onion" OR sourcentdomain CONTAINS "c3uybau64lj32ty3z3sxgchnrmg72bvbpua66mcvydcjpgrbv2r6huyd.onion" OR sourcentdomain CONTAINS "drv4lids5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR sourcentdomain CONTAINS "fend7yhjoeam7b4fp4rj5oobphuvmhjbovhtvporusjex4nyoiamgdyd.onion" OR sourcentdomain CONTAINS "m5idjwoj4q5yrmo5xbnvhoqqrdld6pruxx5qjvr6gfnnmao4xiniwzid.onion" OR sourcentdomain CONTAINS "m7wajjzas7eotqw4b6k4aei5q4zijdal3spsec7wsfmf2xqjhmydjiyd.onion" OR sourcentdomain CONTAINS "npnsktlnofwisqvd3e6tpslinkypajmh5jctyjivuf6jza3syw2v6cid.onion" OR sourcentdomain CONTAINS "pcjvbrttcy2s3gqpgwklgsco4u4bskr5xhvdzs4pzqqcrfllkwe437id.onion" OR sourcentdomain CONTAINS "s4ofksblif7bmo7sp64f56gij6xzh7sznvrn46m6daup2hwdmwbiabqd.onion" OR sourcentdomain CONTAINS "s5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR sourcentdomain CONTAINS "sourt33xcdoyg4jcrh33qvx6cjoneowihsfrbuqldkrrili54gdvryyd.onion" OR sourcentdomain CONTAINS "syd5mtjvcqxvnnkeqjjkdm2oz2jzl6swrfhnvliiemxtgiqvcbm26nyd.onion" OR sourcentdomain CONTAINS "tybocptxypx42ngrcqldrgas536syipwotmfnbjpwc5fpxth4xf4faqd.onion" OR sourcentdomain CONTAINS "u7kteztwfg3p6wdeiq6y7zidxx3xtto4gmm2vwz42mzd6s4ixgvpgxyd.onion" OR sourcentdomain CONTAINS "uu2iggf5wq57dt6xanfdmwq3rvxqorkb43bh2eacj2vz22nvwewlxcyd.onion" OR sourcentdomain CONTAINS "wauby5e7m6zf2eb7rfn7nqm3diuaehdu6tfay4janiktgx33wjfifkyd.onion" OR sourcentdomain CONTAINS "wf4uxi6izbqppzb4fvg4sq7sm5t5w5xl5v5pkxpguwpr4aci7hvzboid.onion" OR sourcentdomain CONTAINS "wjd2t2lzbgb7g7bcenpl2r2bsobkbwwpooqrmiwqjkpktm5p5seifcid.onion" OR sourcentdomain CONTAINS "xjdhr5is3qsw2cyekdxo57gchpxusvkko3265x2lmmn4g6fnlimdngqd.onion" OR sourcentdomain CONTAINS "yjh2bktujnqkj7u7g7hxotck6sfhjuf7crhc4vcf6ewpa7swoqalfkid.onion" OR sourcentdomain CONTAINS "yqs4gu4c2kb5ybgcigkl5gcsqbjuk5n2su2pozpsw4ojav2op5gddkid.onion")
index=activity AND rg_functionality="Flow" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "24rq2pvihkrct6pxl6zy3p36gt2wd6sn6izoz7ntlivxvbuu5ei3xwad.onion" OR sourcehostname CONTAINS "3crj2ylhdffpf2yik4bb2hn32xey2bdhcpykxfezb4sq53eelglp3sqd.onion" OR sourcehostname CONTAINS "44yd2dxmm5xuo7dsivwkf2fqyqmfsqkt5nkxdlgwpnbr57sca56j74yd.onion" OR sourcehostname CONTAINS "acuy77ahadd6g5rw2pxsuejskirjmxaoj37ck7fvj4h4kc36a3uwirqd.onion" OR sourcehostname CONTAINS "bbknilviexavjvnwdtdqmhsexqcokfwgdqthxexvuwzlwgaggddaahxn.onion" OR sourcehostname CONTAINS "bvxx2p6hfttpiyntpuf72axcvaakjbz5zgiea7iklkrb2s6wrdrv4lid.onion" OR sourcehostname CONTAINS "c3uybau64lj32ty3z3sxgchnrmg72bvbpua66mcvydcjpgrbv2r6huyd.onion" OR sourcehostname CONTAINS "drv4lids5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR sourcehostname CONTAINS "fend7yhjoeam7b4fp4rj5oobphuvmhjbovhtvporusjex4nyoiamgdyd.onion" OR sourcehostname CONTAINS "m5idjwoj4q5yrmo5xbnvhoqqrdld6pruxx5qjvr6gfnnmao4xiniwzid.onion" OR sourcehostname CONTAINS "m7wajjzas7eotqw4b6k4aei5q4zijdal3spsec7wsfmf2xqjhmydjiyd.onion" OR sourcehostname CONTAINS "npnsktlnofwisqvd3e6tpslinkypajmh5jctyjivuf6jza3syw2v6cid.onion" OR sourcehostname CONTAINS "pcjvbrttcy2s3gqpgwklgsco4u4bskr5xhvdzs4pzqqcrfllkwe437id.onion" OR sourcehostname CONTAINS "s4ofksblif7bmo7sp64f56gij6xzh7sznvrn46m6daup2hwdmwbiabqd.onion" OR sourcehostname CONTAINS "s5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR sourcehostname CONTAINS "sourt33xcdoyg4jcrh33qvx6cjoneowihsfrbuqldkrrili54gdvryyd.onion" OR sourcehostname CONTAINS "syd5mtjvcqxvnnkeqjjkdm2oz2jzl6swrfhnvliiemxtgiqvcbm26nyd.onion" OR sourcehostname CONTAINS "tybocptxypx42ngrcqldrgas536syipwotmfnbjpwc5fpxth4xf4faqd.onion" OR sourcehostname CONTAINS "u7kteztwfg3p6wdeiq6y7zidxx3xtto4gmm2vwz42mzd6s4ixgvpgxyd.onion" OR sourcehostname CONTAINS "uu2iggf5wq57dt6xanfdmwq3rvxqorkb43bh2eacj2vz22nvwewlxcyd.onion" OR sourcehostname CONTAINS "wauby5e7m6zf2eb7rfn7nqm3diuaehdu6tfay4janiktgx33wjfifkyd.onion" OR sourcehostname CONTAINS "wf4uxi6izbqppzb4fvg4sq7sm5t5w5xl5v5pkxpguwpr4aci7hvzboid.onion" OR sourcehostname CONTAINS "wjd2t2lzbgb7g7bcenpl2r2bsobkbwwpooqrmiwqjkpktm5p5seifcid.onion" OR sourcehostname CONTAINS "xjdhr5is3qsw2cyekdxo57gchpxusvkko3265x2lmmn4g6fnlimdngqd.onion" OR sourcehostname CONTAINS "yjh2bktujnqkj7u7g7hxotck6sfhjuf7crhc4vcf6ewpa7swoqalfkid.onion" OR sourcehostname CONTAINS "yqs4gu4c2kb5ybgcigkl5gcsqbjuk5n2su2pozpsw4ojav2op5gddkid.onion")
index=activity AND rg_functionality="Flow" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "24rq2pvihkrct6pxl6zy3p36gt2wd6sn6izoz7ntlivxvbuu5ei3xwad.onion" OR destinationntdomain CONTAINS "3crj2ylhdffpf2yik4bb2hn32xey2bdhcpykxfezb4sq53eelglp3sqd.onion" OR destinationntdomain CONTAINS "44yd2dxmm5xuo7dsivwkf2fqyqmfsqkt5nkxdlgwpnbr57sca56j74yd.onion" OR destinationntdomain CONTAINS "acuy77ahadd6g5rw2pxsuejskirjmxaoj37ck7fvj4h4kc36a3uwirqd.onion" OR destinationntdomain CONTAINS "bbknilviexavjvnwdtdqmhsexqcokfwgdqthxexvuwzlwgaggddaahxn.onion" OR destinationntdomain CONTAINS "bvxx2p6hfttpiyntpuf72axcvaakjbz5zgiea7iklkrb2s6wrdrv4lid.onion" OR destinationntdomain CONTAINS "c3uybau64lj32ty3z3sxgchnrmg72bvbpua66mcvydcjpgrbv2r6huyd.onion" OR destinationntdomain CONTAINS "drv4lids5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR destinationntdomain CONTAINS "fend7yhjoeam7b4fp4rj5oobphuvmhjbovhtvporusjex4nyoiamgdyd.onion" OR destinationntdomain CONTAINS "m5idjwoj4q5yrmo5xbnvhoqqrdld6pruxx5qjvr6gfnnmao4xiniwzid.onion" OR destinationntdomain CONTAINS "m7wajjzas7eotqw4b6k4aei5q4zijdal3spsec7wsfmf2xqjhmydjiyd.onion" OR destinationntdomain CONTAINS "npnsktlnofwisqvd3e6tpslinkypajmh5jctyjivuf6jza3syw2v6cid.onion" OR destinationntdomain CONTAINS "pcjvbrttcy2s3gqpgwklgsco4u4bskr5xhvdzs4pzqqcrfllkwe437id.onion" OR destinationntdomain CONTAINS "s4ofksblif7bmo7sp64f56gij6xzh7sznvrn46m6daup2hwdmwbiabqd.onion" OR destinationntdomain CONTAINS "s5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR destinationntdomain CONTAINS "sourt33xcdoyg4jcrh33qvx6cjoneowihsfrbuqldkrrili54gdvryyd.onion" OR destinationntdomain CONTAINS "syd5mtjvcqxvnnkeqjjkdm2oz2jzl6swrfhnvliiemxtgiqvcbm26nyd.onion" OR destinationntdomain CONTAINS "tybocptxypx42ngrcqldrgas536syipwotmfnbjpwc5fpxth4xf4faqd.onion" OR destinationntdomain CONTAINS "u7kteztwfg3p6wdeiq6y7zidxx3xtto4gmm2vwz42mzd6s4ixgvpgxyd.onion" OR destinationntdomain CONTAINS "uu2iggf5wq57dt6xanfdmwq3rvxqorkb43bh2eacj2vz22nvwewlxcyd.onion" OR destinationntdomain CONTAINS "wauby5e7m6zf2eb7rfn7nqm3diuaehdu6tfay4janiktgx33wjfifkyd.onion" OR destinationntdomain CONTAINS "wf4uxi6izbqppzb4fvg4sq7sm5t5w5xl5v5pkxpguwpr4aci7hvzboid.onion" OR destinationntdomain CONTAINS "wjd2t2lzbgb7g7bcenpl2r2bsobkbwwpooqrmiwqjkpktm5p5seifcid.onion" OR destinationntdomain CONTAINS "xjdhr5is3qsw2cyekdxo57gchpxusvkko3265x2lmmn4g6fnlimdngqd.onion" OR destinationntdomain CONTAINS "yjh2bktujnqkj7u7g7hxotck6sfhjuf7crhc4vcf6ewpa7swoqalfkid.onion" OR destinationntdomain CONTAINS "yqs4gu4c2kb5ybgcigkl5gcsqbjuk5n2su2pozpsw4ojav2op5gddkid.onion")
index=activity AND rg_functionality="Flow" AND requesturl NOT NULL AND (requesturl CONTAINS "24rq2pvihkrct6pxl6zy3p36gt2wd6sn6izoz7ntlivxvbuu5ei3xwad.onion" OR requesturl CONTAINS "3crj2ylhdffpf2yik4bb2hn32xey2bdhcpykxfezb4sq53eelglp3sqd.onion" OR requesturl CONTAINS "44yd2dxmm5xuo7dsivwkf2fqyqmfsqkt5nkxdlgwpnbr57sca56j74yd.onion" OR requesturl CONTAINS "acuy77ahadd6g5rw2pxsuejskirjmxaoj37ck7fvj4h4kc36a3uwirqd.onion" OR requesturl CONTAINS "bbknilviexavjvnwdtdqmhsexqcokfwgdqthxexvuwzlwgaggddaahxn.onion" OR requesturl CONTAINS "bvxx2p6hfttpiyntpuf72axcvaakjbz5zgiea7iklkrb2s6wrdrv4lid.onion" OR requesturl CONTAINS "c3uybau64lj32ty3z3sxgchnrmg72bvbpua66mcvydcjpgrbv2r6huyd.onion" OR requesturl CONTAINS "drv4lids5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR requesturl CONTAINS "fend7yhjoeam7b4fp4rj5oobphuvmhjbovhtvporusjex4nyoiamgdyd.onion" OR requesturl CONTAINS "m5idjwoj4q5yrmo5xbnvhoqqrdld6pruxx5qjvr6gfnnmao4xiniwzid.onion" OR requesturl CONTAINS "m7wajjzas7eotqw4b6k4aei5q4zijdal3spsec7wsfmf2xqjhmydjiyd.onion" OR requesturl CONTAINS "npnsktlnofwisqvd3e6tpslinkypajmh5jctyjivuf6jza3syw2v6cid.onion" OR requesturl CONTAINS "pcjvbrttcy2s3gqpgwklgsco4u4bskr5xhvdzs4pzqqcrfllkwe437id.onion" OR requesturl CONTAINS "s4ofksblif7bmo7sp64f56gij6xzh7sznvrn46m6daup2hwdmwbiabqd.onion" OR requesturl CONTAINS "s5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR requesturl CONTAINS "sourt33xcdoyg4jcrh33qvx6cjoneowihsfrbuqldkrrili54gdvryyd.onion" OR requesturl CONTAINS "syd5mtjvcqxvnnkeqjjkdm2oz2jzl6swrfhnvliiemxtgiqvcbm26nyd.onion" OR requesturl CONTAINS "tybocptxypx42ngrcqldrgas536syipwotmfnbjpwc5fpxth4xf4faqd.onion" OR requesturl CONTAINS "u7kteztwfg3p6wdeiq6y7zidxx3xtto4gmm2vwz42mzd6s4ixgvpgxyd.onion" OR requesturl CONTAINS "uu2iggf5wq57dt6xanfdmwq3rvxqorkb43bh2eacj2vz22nvwewlxcyd.onion" OR requesturl CONTAINS "wauby5e7m6zf2eb7rfn7nqm3diuaehdu6tfay4janiktgx33wjfifkyd.onion" OR requesturl CONTAINS "wf4uxi6izbqppzb4fvg4sq7sm5t5w5xl5v5pkxpguwpr4aci7hvzboid.onion" OR requesturl CONTAINS "wjd2t2lzbgb7g7bcenpl2r2bsobkbwwpooqrmiwqjkpktm5p5seifcid.onion" OR requesturl CONTAINS "xjdhr5is3qsw2cyekdxo57gchpxusvkko3265x2lmmn4g6fnlimdngqd.onion" OR requesturl CONTAINS "yjh2bktujnqkj7u7g7hxotck6sfhjuf7crhc4vcf6ewpa7swoqalfkid.onion" OR requesturl CONTAINS "yqs4gu4c2kb5ybgcigkl5gcsqbjuk5n2su2pozpsw4ojav2op5gddkid.onion")
index=activity AND rg_functionality="Web Server" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "24rq2pvihkrct6pxl6zy3p36gt2wd6sn6izoz7ntlivxvbuu5ei3xwad.onion" OR destinationhostname CONTAINS "3crj2ylhdffpf2yik4bb2hn32xey2bdhcpykxfezb4sq53eelglp3sqd.onion" OR destinationhostname CONTAINS "44yd2dxmm5xuo7dsivwkf2fqyqmfsqkt5nkxdlgwpnbr57sca56j74yd.onion" OR destinationhostname CONTAINS "acuy77ahadd6g5rw2pxsuejskirjmxaoj37ck7fvj4h4kc36a3uwirqd.onion" OR destinationhostname CONTAINS "bbknilviexavjvnwdtdqmhsexqcokfwgdqthxexvuwzlwgaggddaahxn.onion" OR destinationhostname CONTAINS "bvxx2p6hfttpiyntpuf72axcvaakjbz5zgiea7iklkrb2s6wrdrv4lid.onion" OR destinationhostname CONTAINS "c3uybau64lj32ty3z3sxgchnrmg72bvbpua66mcvydcjpgrbv2r6huyd.onion" OR destinationhostname CONTAINS "drv4lids5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR destinationhostname CONTAINS "fend7yhjoeam7b4fp4rj5oobphuvmhjbovhtvporusjex4nyoiamgdyd.onion" OR destinationhostname CONTAINS "m5idjwoj4q5yrmo5xbnvhoqqrdld6pruxx5qjvr6gfnnmao4xiniwzid.onion" OR destinationhostname CONTAINS "m7wajjzas7eotqw4b6k4aei5q4zijdal3spsec7wsfmf2xqjhmydjiyd.onion" OR destinationhostname CONTAINS "npnsktlnofwisqvd3e6tpslinkypajmh5jctyjivuf6jza3syw2v6cid.onion" OR destinationhostname CONTAINS "pcjvbrttcy2s3gqpgwklgsco4u4bskr5xhvdzs4pzqqcrfllkwe437id.onion" OR destinationhostname CONTAINS "s4ofksblif7bmo7sp64f56gij6xzh7sznvrn46m6daup2hwdmwbiabqd.onion" OR destinationhostname CONTAINS "s5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR destinationhostname CONTAINS "sourt33xcdoyg4jcrh33qvx6cjoneowihsfrbuqldkrrili54gdvryyd.onion" OR destinationhostname CONTAINS "syd5mtjvcqxvnnkeqjjkdm2oz2jzl6swrfhnvliiemxtgiqvcbm26nyd.onion" OR destinationhostname CONTAINS "tybocptxypx42ngrcqldrgas536syipwotmfnbjpwc5fpxth4xf4faqd.onion" OR destinationhostname CONTAINS "u7kteztwfg3p6wdeiq6y7zidxx3xtto4gmm2vwz42mzd6s4ixgvpgxyd.onion" OR destinationhostname CONTAINS "uu2iggf5wq57dt6xanfdmwq3rvxqorkb43bh2eacj2vz22nvwewlxcyd.onion" OR destinationhostname CONTAINS "wauby5e7m6zf2eb7rfn7nqm3diuaehdu6tfay4janiktgx33wjfifkyd.onion" OR destinationhostname CONTAINS "wf4uxi6izbqppzb4fvg4sq7sm5t5w5xl5v5pkxpguwpr4aci7hvzboid.onion" OR destinationhostname CONTAINS "wjd2t2lzbgb7g7bcenpl2r2bsobkbwwpooqrmiwqjkpktm5p5seifcid.onion" OR destinationhostname CONTAINS "xjdhr5is3qsw2cyekdxo57gchpxusvkko3265x2lmmn4g6fnlimdngqd.onion" OR destinationhostname CONTAINS "yjh2bktujnqkj7u7g7hxotck6sfhjuf7crhc4vcf6ewpa7swoqalfkid.onion" OR destinationhostname CONTAINS "yqs4gu4c2kb5ybgcigkl5gcsqbjuk5n2su2pozpsw4ojav2op5gddkid.onion")
index=activity AND rg_functionality="Web Server" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "24rq2pvihkrct6pxl6zy3p36gt2wd6sn6izoz7ntlivxvbuu5ei3xwad.onion" OR sourcentdomain CONTAINS "3crj2ylhdffpf2yik4bb2hn32xey2bdhcpykxfezb4sq53eelglp3sqd.onion" OR sourcentdomain CONTAINS "44yd2dxmm5xuo7dsivwkf2fqyqmfsqkt5nkxdlgwpnbr57sca56j74yd.onion" OR sourcentdomain CONTAINS "acuy77ahadd6g5rw2pxsuejskirjmxaoj37ck7fvj4h4kc36a3uwirqd.onion" OR sourcentdomain CONTAINS "bbknilviexavjvnwdtdqmhsexqcokfwgdqthxexvuwzlwgaggddaahxn.onion" OR sourcentdomain CONTAINS "bvxx2p6hfttpiyntpuf72axcvaakjbz5zgiea7iklkrb2s6wrdrv4lid.onion" OR sourcentdomain CONTAINS "c3uybau64lj32ty3z3sxgchnrmg72bvbpua66mcvydcjpgrbv2r6huyd.onion" OR sourcentdomain CONTAINS "drv4lids5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR sourcentdomain CONTAINS "fend7yhjoeam7b4fp4rj5oobphuvmhjbovhtvporusjex4nyoiamgdyd.onion" OR sourcentdomain CONTAINS "m5idjwoj4q5yrmo5xbnvhoqqrdld6pruxx5qjvr6gfnnmao4xiniwzid.onion" OR sourcentdomain CONTAINS "m7wajjzas7eotqw4b6k4aei5q4zijdal3spsec7wsfmf2xqjhmydjiyd.onion" OR sourcentdomain CONTAINS "npnsktlnofwisqvd3e6tpslinkypajmh5jctyjivuf6jza3syw2v6cid.onion" OR sourcentdomain CONTAINS "pcjvbrttcy2s3gqpgwklgsco4u4bskr5xhvdzs4pzqqcrfllkwe437id.onion" OR sourcentdomain CONTAINS "s4ofksblif7bmo7sp64f56gij6xzh7sznvrn46m6daup2hwdmwbiabqd.onion" OR sourcentdomain CONTAINS "s5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR sourcentdomain CONTAINS "sourt33xcdoyg4jcrh33qvx6cjoneowihsfrbuqldkrrili54gdvryyd.onion" OR sourcentdomain CONTAINS "syd5mtjvcqxvnnkeqjjkdm2oz2jzl6swrfhnvliiemxtgiqvcbm26nyd.onion" OR sourcentdomain CONTAINS "tybocptxypx42ngrcqldrgas536syipwotmfnbjpwc5fpxth4xf4faqd.onion" OR sourcentdomain CONTAINS "u7kteztwfg3p6wdeiq6y7zidxx3xtto4gmm2vwz42mzd6s4ixgvpgxyd.onion" OR sourcentdomain CONTAINS "uu2iggf5wq57dt6xanfdmwq3rvxqorkb43bh2eacj2vz22nvwewlxcyd.onion" OR sourcentdomain CONTAINS "wauby5e7m6zf2eb7rfn7nqm3diuaehdu6tfay4janiktgx33wjfifkyd.onion" OR sourcentdomain CONTAINS "wf4uxi6izbqppzb4fvg4sq7sm5t5w5xl5v5pkxpguwpr4aci7hvzboid.onion" OR sourcentdomain CONTAINS "wjd2t2lzbgb7g7bcenpl2r2bsobkbwwpooqrmiwqjkpktm5p5seifcid.onion" OR sourcentdomain CONTAINS "xjdhr5is3qsw2cyekdxo57gchpxusvkko3265x2lmmn4g6fnlimdngqd.onion" OR sourcentdomain CONTAINS "yjh2bktujnqkj7u7g7hxotck6sfhjuf7crhc4vcf6ewpa7swoqalfkid.onion" OR sourcentdomain CONTAINS "yqs4gu4c2kb5ybgcigkl5gcsqbjuk5n2su2pozpsw4ojav2op5gddkid.onion")
index=activity AND rg_functionality="Web Server" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "24rq2pvihkrct6pxl6zy3p36gt2wd6sn6izoz7ntlivxvbuu5ei3xwad.onion" OR sourcehostname CONTAINS "3crj2ylhdffpf2yik4bb2hn32xey2bdhcpykxfezb4sq53eelglp3sqd.onion" OR sourcehostname CONTAINS "44yd2dxmm5xuo7dsivwkf2fqyqmfsqkt5nkxdlgwpnbr57sca56j74yd.onion" OR sourcehostname CONTAINS "acuy77ahadd6g5rw2pxsuejskirjmxaoj37ck7fvj4h4kc36a3uwirqd.onion" OR sourcehostname CONTAINS "bbknilviexavjvnwdtdqmhsexqcokfwgdqthxexvuwzlwgaggddaahxn.onion" OR sourcehostname CONTAINS "bvxx2p6hfttpiyntpuf72axcvaakjbz5zgiea7iklkrb2s6wrdrv4lid.onion" OR sourcehostname CONTAINS "c3uybau64lj32ty3z3sxgchnrmg72bvbpua66mcvydcjpgrbv2r6huyd.onion" OR sourcehostname CONTAINS "drv4lids5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR sourcehostname CONTAINS "fend7yhjoeam7b4fp4rj5oobphuvmhjbovhtvporusjex4nyoiamgdyd.onion" OR sourcehostname CONTAINS "m5idjwoj4q5yrmo5xbnvhoqqrdld6pruxx5qjvr6gfnnmao4xiniwzid.onion" OR sourcehostname CONTAINS "m7wajjzas7eotqw4b6k4aei5q4zijdal3spsec7wsfmf2xqjhmydjiyd.onion" OR sourcehostname CONTAINS "npnsktlnofwisqvd3e6tpslinkypajmh5jctyjivuf6jza3syw2v6cid.onion" OR sourcehostname CONTAINS "pcjvbrttcy2s3gqpgwklgsco4u4bskr5xhvdzs4pzqqcrfllkwe437id.onion" OR sourcehostname CONTAINS "s4ofksblif7bmo7sp64f56gij6xzh7sznvrn46m6daup2hwdmwbiabqd.onion" OR sourcehostname CONTAINS "s5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR sourcehostname CONTAINS "sourt33xcdoyg4jcrh33qvx6cjoneowihsfrbuqldkrrili54gdvryyd.onion" OR sourcehostname CONTAINS "syd5mtjvcqxvnnkeqjjkdm2oz2jzl6swrfhnvliiemxtgiqvcbm26nyd.onion" OR sourcehostname CONTAINS "tybocptxypx42ngrcqldrgas536syipwotmfnbjpwc5fpxth4xf4faqd.onion" OR sourcehostname CONTAINS "u7kteztwfg3p6wdeiq6y7zidxx3xtto4gmm2vwz42mzd6s4ixgvpgxyd.onion" OR sourcehostname CONTAINS "uu2iggf5wq57dt6xanfdmwq3rvxqorkb43bh2eacj2vz22nvwewlxcyd.onion" OR sourcehostname CONTAINS "wauby5e7m6zf2eb7rfn7nqm3diuaehdu6tfay4janiktgx33wjfifkyd.onion" OR sourcehostname CONTAINS "wf4uxi6izbqppzb4fvg4sq7sm5t5w5xl5v5pkxpguwpr4aci7hvzboid.onion" OR sourcehostname CONTAINS "wjd2t2lzbgb7g7bcenpl2r2bsobkbwwpooqrmiwqjkpktm5p5seifcid.onion" OR sourcehostname CONTAINS "xjdhr5is3qsw2cyekdxo57gchpxusvkko3265x2lmmn4g6fnlimdngqd.onion" OR sourcehostname CONTAINS "yjh2bktujnqkj7u7g7hxotck6sfhjuf7crhc4vcf6ewpa7swoqalfkid.onion" OR sourcehostname CONTAINS "yqs4gu4c2kb5ybgcigkl5gcsqbjuk5n2su2pozpsw4ojav2op5gddkid.onion")
index=activity AND rg_functionality="Web Server" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "24rq2pvihkrct6pxl6zy3p36gt2wd6sn6izoz7ntlivxvbuu5ei3xwad.onion" OR destinationntdomain CONTAINS "3crj2ylhdffpf2yik4bb2hn32xey2bdhcpykxfezb4sq53eelglp3sqd.onion" OR destinationntdomain CONTAINS "44yd2dxmm5xuo7dsivwkf2fqyqmfsqkt5nkxdlgwpnbr57sca56j74yd.onion" OR destinationntdomain CONTAINS "acuy77ahadd6g5rw2pxsuejskirjmxaoj37ck7fvj4h4kc36a3uwirqd.onion" OR destinationntdomain CONTAINS "bbknilviexavjvnwdtdqmhsexqcokfwgdqthxexvuwzlwgaggddaahxn.onion" OR destinationntdomain CONTAINS "bvxx2p6hfttpiyntpuf72axcvaakjbz5zgiea7iklkrb2s6wrdrv4lid.onion" OR destinationntdomain CONTAINS "c3uybau64lj32ty3z3sxgchnrmg72bvbpua66mcvydcjpgrbv2r6huyd.onion" OR destinationntdomain CONTAINS "drv4lids5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR destinationntdomain CONTAINS "fend7yhjoeam7b4fp4rj5oobphuvmhjbovhtvporusjex4nyoiamgdyd.onion" OR destinationntdomain CONTAINS "m5idjwoj4q5yrmo5xbnvhoqqrdld6pruxx5qjvr6gfnnmao4xiniwzid.onion" OR destinationntdomain CONTAINS "m7wajjzas7eotqw4b6k4aei5q4zijdal3spsec7wsfmf2xqjhmydjiyd.onion" OR destinationntdomain CONTAINS "npnsktlnofwisqvd3e6tpslinkypajmh5jctyjivuf6jza3syw2v6cid.onion" OR destinationntdomain CONTAINS "pcjvbrttcy2s3gqpgwklgsco4u4bskr5xhvdzs4pzqqcrfllkwe437id.onion" OR destinationntdomain CONTAINS "s4ofksblif7bmo7sp64f56gij6xzh7sznvrn46m6daup2hwdmwbiabqd.onion" OR destinationntdomain CONTAINS "s5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR destinationntdomain CONTAINS "sourt33xcdoyg4jcrh33qvx6cjoneowihsfrbuqldkrrili54gdvryyd.onion" OR destinationntdomain CONTAINS "syd5mtjvcqxvnnkeqjjkdm2oz2jzl6swrfhnvliiemxtgiqvcbm26nyd.onion" OR destinationntdomain CONTAINS "tybocptxypx42ngrcqldrgas536syipwotmfnbjpwc5fpxth4xf4faqd.onion" OR destinationntdomain CONTAINS "u7kteztwfg3p6wdeiq6y7zidxx3xtto4gmm2vwz42mzd6s4ixgvpgxyd.onion" OR destinationntdomain CONTAINS "uu2iggf5wq57dt6xanfdmwq3rvxqorkb43bh2eacj2vz22nvwewlxcyd.onion" OR destinationntdomain CONTAINS "wauby5e7m6zf2eb7rfn7nqm3diuaehdu6tfay4janiktgx33wjfifkyd.onion" OR destinationntdomain CONTAINS "wf4uxi6izbqppzb4fvg4sq7sm5t5w5xl5v5pkxpguwpr4aci7hvzboid.onion" OR destinationntdomain CONTAINS "wjd2t2lzbgb7g7bcenpl2r2bsobkbwwpooqrmiwqjkpktm5p5seifcid.onion" OR destinationntdomain CONTAINS "xjdhr5is3qsw2cyekdxo57gchpxusvkko3265x2lmmn4g6fnlimdngqd.onion" OR destinationntdomain CONTAINS "yjh2bktujnqkj7u7g7hxotck6sfhjuf7crhc4vcf6ewpa7swoqalfkid.onion" OR destinationntdomain CONTAINS "yqs4gu4c2kb5ybgcigkl5gcsqbjuk5n2su2pozpsw4ojav2op5gddkid.onion")
index=activity AND rg_functionality="Web Server" AND requesturl NOT NULL AND (requesturl CONTAINS "24rq2pvihkrct6pxl6zy3p36gt2wd6sn6izoz7ntlivxvbuu5ei3xwad.onion" OR requesturl CONTAINS "3crj2ylhdffpf2yik4bb2hn32xey2bdhcpykxfezb4sq53eelglp3sqd.onion" OR requesturl CONTAINS "44yd2dxmm5xuo7dsivwkf2fqyqmfsqkt5nkxdlgwpnbr57sca56j74yd.onion" OR requesturl CONTAINS "acuy77ahadd6g5rw2pxsuejskirjmxaoj37ck7fvj4h4kc36a3uwirqd.onion" OR requesturl CONTAINS "bbknilviexavjvnwdtdqmhsexqcokfwgdqthxexvuwzlwgaggddaahxn.onion" OR requesturl CONTAINS "bvxx2p6hfttpiyntpuf72axcvaakjbz5zgiea7iklkrb2s6wrdrv4lid.onion" OR requesturl CONTAINS "c3uybau64lj32ty3z3sxgchnrmg72bvbpua66mcvydcjpgrbv2r6huyd.onion" OR requesturl CONTAINS "drv4lids5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR requesturl CONTAINS "fend7yhjoeam7b4fp4rj5oobphuvmhjbovhtvporusjex4nyoiamgdyd.onion" OR requesturl CONTAINS "m5idjwoj4q5yrmo5xbnvhoqqrdld6pruxx5qjvr6gfnnmao4xiniwzid.onion" OR requesturl CONTAINS "m7wajjzas7eotqw4b6k4aei5q4zijdal3spsec7wsfmf2xqjhmydjiyd.onion" OR requesturl CONTAINS "npnsktlnofwisqvd3e6tpslinkypajmh5jctyjivuf6jza3syw2v6cid.onion" OR requesturl CONTAINS "pcjvbrttcy2s3gqpgwklgsco4u4bskr5xhvdzs4pzqqcrfllkwe437id.onion" OR requesturl CONTAINS "s4ofksblif7bmo7sp64f56gij6xzh7sznvrn46m6daup2hwdmwbiabqd.onion" OR requesturl CONTAINS "s5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR requesturl CONTAINS "sourt33xcdoyg4jcrh33qvx6cjoneowihsfrbuqldkrrili54gdvryyd.onion" OR requesturl CONTAINS "syd5mtjvcqxvnnkeqjjkdm2oz2jzl6swrfhnvliiemxtgiqvcbm26nyd.onion" OR requesturl CONTAINS "tybocptxypx42ngrcqldrgas536syipwotmfnbjpwc5fpxth4xf4faqd.onion" OR requesturl CONTAINS "u7kteztwfg3p6wdeiq6y7zidxx3xtto4gmm2vwz42mzd6s4ixgvpgxyd.onion" OR requesturl CONTAINS "uu2iggf5wq57dt6xanfdmwq3rvxqorkb43bh2eacj2vz22nvwewlxcyd.onion" OR requesturl CONTAINS "wauby5e7m6zf2eb7rfn7nqm3diuaehdu6tfay4janiktgx33wjfifkyd.onion" OR requesturl CONTAINS "wf4uxi6izbqppzb4fvg4sq7sm5t5w5xl5v5pkxpguwpr4aci7hvzboid.onion" OR requesturl CONTAINS "wjd2t2lzbgb7g7bcenpl2r2bsobkbwwpooqrmiwqjkpktm5p5seifcid.onion" OR requesturl CONTAINS "xjdhr5is3qsw2cyekdxo57gchpxusvkko3265x2lmmn4g6fnlimdngqd.onion" OR requesturl CONTAINS "yjh2bktujnqkj7u7g7hxotck6sfhjuf7crhc4vcf6ewpa7swoqalfkid.onion" OR requesturl CONTAINS "yqs4gu4c2kb5ybgcigkl5gcsqbjuk5n2su2pozpsw4ojav2op5gddkid.onion")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "24rq2pvihkrct6pxl6zy3p36gt2wd6sn6izoz7ntlivxvbuu5ei3xwad.onion" OR destinationhostname CONTAINS "3crj2ylhdffpf2yik4bb2hn32xey2bdhcpykxfezb4sq53eelglp3sqd.onion" OR destinationhostname CONTAINS "44yd2dxmm5xuo7dsivwkf2fqyqmfsqkt5nkxdlgwpnbr57sca56j74yd.onion" OR destinationhostname CONTAINS "acuy77ahadd6g5rw2pxsuejskirjmxaoj37ck7fvj4h4kc36a3uwirqd.onion" OR destinationhostname CONTAINS "bbknilviexavjvnwdtdqmhsexqcokfwgdqthxexvuwzlwgaggddaahxn.onion" OR destinationhostname CONTAINS "bvxx2p6hfttpiyntpuf72axcvaakjbz5zgiea7iklkrb2s6wrdrv4lid.onion" OR destinationhostname CONTAINS "c3uybau64lj32ty3z3sxgchnrmg72bvbpua66mcvydcjpgrbv2r6huyd.onion" OR destinationhostname CONTAINS "drv4lids5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR destinationhostname CONTAINS "fend7yhjoeam7b4fp4rj5oobphuvmhjbovhtvporusjex4nyoiamgdyd.onion" OR destinationhostname CONTAINS "m5idjwoj4q5yrmo5xbnvhoqqrdld6pruxx5qjvr6gfnnmao4xiniwzid.onion" OR destinationhostname CONTAINS "m7wajjzas7eotqw4b6k4aei5q4zijdal3spsec7wsfmf2xqjhmydjiyd.onion" OR destinationhostname CONTAINS "npnsktlnofwisqvd3e6tpslinkypajmh5jctyjivuf6jza3syw2v6cid.onion" OR destinationhostname CONTAINS "pcjvbrttcy2s3gqpgwklgsco4u4bskr5xhvdzs4pzqqcrfllkwe437id.onion" OR destinationhostname CONTAINS "s4ofksblif7bmo7sp64f56gij6xzh7sznvrn46m6daup2hwdmwbiabqd.onion" OR destinationhostname CONTAINS "s5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR destinationhostname CONTAINS "sourt33xcdoyg4jcrh33qvx6cjoneowihsfrbuqldkrrili54gdvryyd.onion" OR destinationhostname CONTAINS "syd5mtjvcqxvnnkeqjjkdm2oz2jzl6swrfhnvliiemxtgiqvcbm26nyd.onion" OR destinationhostname CONTAINS "tybocptxypx42ngrcqldrgas536syipwotmfnbjpwc5fpxth4xf4faqd.onion" OR destinationhostname CONTAINS "u7kteztwfg3p6wdeiq6y7zidxx3xtto4gmm2vwz42mzd6s4ixgvpgxyd.onion" OR destinationhostname CONTAINS "uu2iggf5wq57dt6xanfdmwq3rvxqorkb43bh2eacj2vz22nvwewlxcyd.onion" OR destinationhostname CONTAINS "wauby5e7m6zf2eb7rfn7nqm3diuaehdu6tfay4janiktgx33wjfifkyd.onion" OR destinationhostname CONTAINS "wf4uxi6izbqppzb4fvg4sq7sm5t5w5xl5v5pkxpguwpr4aci7hvzboid.onion" OR destinationhostname CONTAINS "wjd2t2lzbgb7g7bcenpl2r2bsobkbwwpooqrmiwqjkpktm5p5seifcid.onion" OR destinationhostname CONTAINS "xjdhr5is3qsw2cyekdxo57gchpxusvkko3265x2lmmn4g6fnlimdngqd.onion" OR destinationhostname CONTAINS "yjh2bktujnqkj7u7g7hxotck6sfhjuf7crhc4vcf6ewpa7swoqalfkid.onion" OR destinationhostname CONTAINS "yqs4gu4c2kb5ybgcigkl5gcsqbjuk5n2su2pozpsw4ojav2op5gddkid.onion")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "24rq2pvihkrct6pxl6zy3p36gt2wd6sn6izoz7ntlivxvbuu5ei3xwad.onion" OR sourcentdomain CONTAINS "3crj2ylhdffpf2yik4bb2hn32xey2bdhcpykxfezb4sq53eelglp3sqd.onion" OR sourcentdomain CONTAINS "44yd2dxmm5xuo7dsivwkf2fqyqmfsqkt5nkxdlgwpnbr57sca56j74yd.onion" OR sourcentdomain CONTAINS "acuy77ahadd6g5rw2pxsuejskirjmxaoj37ck7fvj4h4kc36a3uwirqd.onion" OR sourcentdomain CONTAINS "bbknilviexavjvnwdtdqmhsexqcokfwgdqthxexvuwzlwgaggddaahxn.onion" OR sourcentdomain CONTAINS "bvxx2p6hfttpiyntpuf72axcvaakjbz5zgiea7iklkrb2s6wrdrv4lid.onion" OR sourcentdomain CONTAINS "c3uybau64lj32ty3z3sxgchnrmg72bvbpua66mcvydcjpgrbv2r6huyd.onion" OR sourcentdomain CONTAINS "drv4lids5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR sourcentdomain CONTAINS "fend7yhjoeam7b4fp4rj5oobphuvmhjbovhtvporusjex4nyoiamgdyd.onion" OR sourcentdomain CONTAINS "m5idjwoj4q5yrmo5xbnvhoqqrdld6pruxx5qjvr6gfnnmao4xiniwzid.onion" OR sourcentdomain CONTAINS "m7wajjzas7eotqw4b6k4aei5q4zijdal3spsec7wsfmf2xqjhmydjiyd.onion" OR sourcentdomain CONTAINS "npnsktlnofwisqvd3e6tpslinkypajmh5jctyjivuf6jza3syw2v6cid.onion" OR sourcentdomain CONTAINS "pcjvbrttcy2s3gqpgwklgsco4u4bskr5xhvdzs4pzqqcrfllkwe437id.onion" OR sourcentdomain CONTAINS "s4ofksblif7bmo7sp64f56gij6xzh7sznvrn46m6daup2hwdmwbiabqd.onion" OR sourcentdomain CONTAINS "s5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR sourcentdomain CONTAINS "sourt33xcdoyg4jcrh33qvx6cjoneowihsfrbuqldkrrili54gdvryyd.onion" OR sourcentdomain CONTAINS "syd5mtjvcqxvnnkeqjjkdm2oz2jzl6swrfhnvliiemxtgiqvcbm26nyd.onion" OR sourcentdomain CONTAINS "tybocptxypx42ngrcqldrgas536syipwotmfnbjpwc5fpxth4xf4faqd.onion" OR sourcentdomain CONTAINS "u7kteztwfg3p6wdeiq6y7zidxx3xtto4gmm2vwz42mzd6s4ixgvpgxyd.onion" OR sourcentdomain CONTAINS "uu2iggf5wq57dt6xanfdmwq3rvxqorkb43bh2eacj2vz22nvwewlxcyd.onion" OR sourcentdomain CONTAINS "wauby5e7m6zf2eb7rfn7nqm3diuaehdu6tfay4janiktgx33wjfifkyd.onion" OR sourcentdomain CONTAINS "wf4uxi6izbqppzb4fvg4sq7sm5t5w5xl5v5pkxpguwpr4aci7hvzboid.onion" OR sourcentdomain CONTAINS "wjd2t2lzbgb7g7bcenpl2r2bsobkbwwpooqrmiwqjkpktm5p5seifcid.onion" OR sourcentdomain CONTAINS "xjdhr5is3qsw2cyekdxo57gchpxusvkko3265x2lmmn4g6fnlimdngqd.onion" OR sourcentdomain CONTAINS "yjh2bktujnqkj7u7g7hxotck6sfhjuf7crhc4vcf6ewpa7swoqalfkid.onion" OR sourcentdomain CONTAINS "yqs4gu4c2kb5ybgcigkl5gcsqbjuk5n2su2pozpsw4ojav2op5gddkid.onion")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "24rq2pvihkrct6pxl6zy3p36gt2wd6sn6izoz7ntlivxvbuu5ei3xwad.onion" OR sourcehostname CONTAINS "3crj2ylhdffpf2yik4bb2hn32xey2bdhcpykxfezb4sq53eelglp3sqd.onion" OR sourcehostname CONTAINS "44yd2dxmm5xuo7dsivwkf2fqyqmfsqkt5nkxdlgwpnbr57sca56j74yd.onion" OR sourcehostname CONTAINS "acuy77ahadd6g5rw2pxsuejskirjmxaoj37ck7fvj4h4kc36a3uwirqd.onion" OR sourcehostname CONTAINS "bbknilviexavjvnwdtdqmhsexqcokfwgdqthxexvuwzlwgaggddaahxn.onion" OR sourcehostname CONTAINS "bvxx2p6hfttpiyntpuf72axcvaakjbz5zgiea7iklkrb2s6wrdrv4lid.onion" OR sourcehostname CONTAINS "c3uybau64lj32ty3z3sxgchnrmg72bvbpua66mcvydcjpgrbv2r6huyd.onion" OR sourcehostname CONTAINS "drv4lids5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR sourcehostname CONTAINS "fend7yhjoeam7b4fp4rj5oobphuvmhjbovhtvporusjex4nyoiamgdyd.onion" OR sourcehostname CONTAINS "m5idjwoj4q5yrmo5xbnvhoqqrdld6pruxx5qjvr6gfnnmao4xiniwzid.onion" OR sourcehostname CONTAINS "m7wajjzas7eotqw4b6k4aei5q4zijdal3spsec7wsfmf2xqjhmydjiyd.onion" OR sourcehostname CONTAINS "npnsktlnofwisqvd3e6tpslinkypajmh5jctyjivuf6jza3syw2v6cid.onion" OR sourcehostname CONTAINS "pcjvbrttcy2s3gqpgwklgsco4u4bskr5xhvdzs4pzqqcrfllkwe437id.onion" OR sourcehostname CONTAINS "s4ofksblif7bmo7sp64f56gij6xzh7sznvrn46m6daup2hwdmwbiabqd.onion" OR sourcehostname CONTAINS "s5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR sourcehostname CONTAINS "sourt33xcdoyg4jcrh33qvx6cjoneowihsfrbuqldkrrili54gdvryyd.onion" OR sourcehostname CONTAINS "syd5mtjvcqxvnnkeqjjkdm2oz2jzl6swrfhnvliiemxtgiqvcbm26nyd.onion" OR sourcehostname CONTAINS "tybocptxypx42ngrcqldrgas536syipwotmfnbjpwc5fpxth4xf4faqd.onion" OR sourcehostname CONTAINS "u7kteztwfg3p6wdeiq6y7zidxx3xtto4gmm2vwz42mzd6s4ixgvpgxyd.onion" OR sourcehostname CONTAINS "uu2iggf5wq57dt6xanfdmwq3rvxqorkb43bh2eacj2vz22nvwewlxcyd.onion" OR sourcehostname CONTAINS "wauby5e7m6zf2eb7rfn7nqm3diuaehdu6tfay4janiktgx33wjfifkyd.onion" OR sourcehostname CONTAINS "wf4uxi6izbqppzb4fvg4sq7sm5t5w5xl5v5pkxpguwpr4aci7hvzboid.onion" OR sourcehostname CONTAINS "wjd2t2lzbgb7g7bcenpl2r2bsobkbwwpooqrmiwqjkpktm5p5seifcid.onion" OR sourcehostname CONTAINS "xjdhr5is3qsw2cyekdxo57gchpxusvkko3265x2lmmn4g6fnlimdngqd.onion" OR sourcehostname CONTAINS "yjh2bktujnqkj7u7g7hxotck6sfhjuf7crhc4vcf6ewpa7swoqalfkid.onion" OR sourcehostname CONTAINS "yqs4gu4c2kb5ybgcigkl5gcsqbjuk5n2su2pozpsw4ojav2op5gddkid.onion")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "24rq2pvihkrct6pxl6zy3p36gt2wd6sn6izoz7ntlivxvbuu5ei3xwad.onion" OR destinationntdomain CONTAINS "3crj2ylhdffpf2yik4bb2hn32xey2bdhcpykxfezb4sq53eelglp3sqd.onion" OR destinationntdomain CONTAINS "44yd2dxmm5xuo7dsivwkf2fqyqmfsqkt5nkxdlgwpnbr57sca56j74yd.onion" OR destinationntdomain CONTAINS "acuy77ahadd6g5rw2pxsuejskirjmxaoj37ck7fvj4h4kc36a3uwirqd.onion" OR destinationntdomain CONTAINS "bbknilviexavjvnwdtdqmhsexqcokfwgdqthxexvuwzlwgaggddaahxn.onion" OR destinationntdomain CONTAINS "bvxx2p6hfttpiyntpuf72axcvaakjbz5zgiea7iklkrb2s6wrdrv4lid.onion" OR destinationntdomain CONTAINS "c3uybau64lj32ty3z3sxgchnrmg72bvbpua66mcvydcjpgrbv2r6huyd.onion" OR destinationntdomain CONTAINS "drv4lids5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR destinationntdomain CONTAINS "fend7yhjoeam7b4fp4rj5oobphuvmhjbovhtvporusjex4nyoiamgdyd.onion" OR destinationntdomain CONTAINS "m5idjwoj4q5yrmo5xbnvhoqqrdld6pruxx5qjvr6gfnnmao4xiniwzid.onion" OR destinationntdomain CONTAINS "m7wajjzas7eotqw4b6k4aei5q4zijdal3spsec7wsfmf2xqjhmydjiyd.onion" OR destinationntdomain CONTAINS "npnsktlnofwisqvd3e6tpslinkypajmh5jctyjivuf6jza3syw2v6cid.onion" OR destinationntdomain CONTAINS "pcjvbrttcy2s3gqpgwklgsco4u4bskr5xhvdzs4pzqqcrfllkwe437id.onion" OR destinationntdomain CONTAINS "s4ofksblif7bmo7sp64f56gij6xzh7sznvrn46m6daup2hwdmwbiabqd.onion" OR destinationntdomain CONTAINS "s5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR destinationntdomain CONTAINS "sourt33xcdoyg4jcrh33qvx6cjoneowihsfrbuqldkrrili54gdvryyd.onion" OR destinationntdomain CONTAINS "syd5mtjvcqxvnnkeqjjkdm2oz2jzl6swrfhnvliiemxtgiqvcbm26nyd.onion" OR destinationntdomain CONTAINS "tybocptxypx42ngrcqldrgas536syipwotmfnbjpwc5fpxth4xf4faqd.onion" OR destinationntdomain CONTAINS "u7kteztwfg3p6wdeiq6y7zidxx3xtto4gmm2vwz42mzd6s4ixgvpgxyd.onion" OR destinationntdomain CONTAINS "uu2iggf5wq57dt6xanfdmwq3rvxqorkb43bh2eacj2vz22nvwewlxcyd.onion" OR destinationntdomain CONTAINS "wauby5e7m6zf2eb7rfn7nqm3diuaehdu6tfay4janiktgx33wjfifkyd.onion" OR destinationntdomain CONTAINS "wf4uxi6izbqppzb4fvg4sq7sm5t5w5xl5v5pkxpguwpr4aci7hvzboid.onion" OR destinationntdomain CONTAINS "wjd2t2lzbgb7g7bcenpl2r2bsobkbwwpooqrmiwqjkpktm5p5seifcid.onion" OR destinationntdomain CONTAINS "xjdhr5is3qsw2cyekdxo57gchpxusvkko3265x2lmmn4g6fnlimdngqd.onion" OR destinationntdomain CONTAINS "yjh2bktujnqkj7u7g7hxotck6sfhjuf7crhc4vcf6ewpa7swoqalfkid.onion" OR destinationntdomain CONTAINS "yqs4gu4c2kb5ybgcigkl5gcsqbjuk5n2su2pozpsw4ojav2op5gddkid.onion")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND (requesturl CONTAINS "24rq2pvihkrct6pxl6zy3p36gt2wd6sn6izoz7ntlivxvbuu5ei3xwad.onion" OR requesturl CONTAINS "3crj2ylhdffpf2yik4bb2hn32xey2bdhcpykxfezb4sq53eelglp3sqd.onion" OR requesturl CONTAINS "44yd2dxmm5xuo7dsivwkf2fqyqmfsqkt5nkxdlgwpnbr57sca56j74yd.onion" OR requesturl CONTAINS "acuy77ahadd6g5rw2pxsuejskirjmxaoj37ck7fvj4h4kc36a3uwirqd.onion" OR requesturl CONTAINS "bbknilviexavjvnwdtdqmhsexqcokfwgdqthxexvuwzlwgaggddaahxn.onion" OR requesturl CONTAINS "bvxx2p6hfttpiyntpuf72axcvaakjbz5zgiea7iklkrb2s6wrdrv4lid.onion" OR requesturl CONTAINS "c3uybau64lj32ty3z3sxgchnrmg72bvbpua66mcvydcjpgrbv2r6huyd.onion" OR requesturl CONTAINS "drv4lids5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR requesturl CONTAINS "fend7yhjoeam7b4fp4rj5oobphuvmhjbovhtvporusjex4nyoiamgdyd.onion" OR requesturl CONTAINS "m5idjwoj4q5yrmo5xbnvhoqqrdld6pruxx5qjvr6gfnnmao4xiniwzid.onion" OR requesturl CONTAINS "m7wajjzas7eotqw4b6k4aei5q4zijdal3spsec7wsfmf2xqjhmydjiyd.onion" OR requesturl CONTAINS "npnsktlnofwisqvd3e6tpslinkypajmh5jctyjivuf6jza3syw2v6cid.onion" OR requesturl CONTAINS "pcjvbrttcy2s3gqpgwklgsco4u4bskr5xhvdzs4pzqqcrfllkwe437id.onion" OR requesturl CONTAINS "s4ofksblif7bmo7sp64f56gij6xzh7sznvrn46m6daup2hwdmwbiabqd.onion" OR requesturl CONTAINS "s5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR requesturl CONTAINS "sourt33xcdoyg4jcrh33qvx6cjoneowihsfrbuqldkrrili54gdvryyd.onion" OR requesturl CONTAINS "syd5mtjvcqxvnnkeqjjkdm2oz2jzl6swrfhnvliiemxtgiqvcbm26nyd.onion" OR requesturl CONTAINS "tybocptxypx42ngrcqldrgas536syipwotmfnbjpwc5fpxth4xf4faqd.onion" OR requesturl CONTAINS "u7kteztwfg3p6wdeiq6y7zidxx3xtto4gmm2vwz42mzd6s4ixgvpgxyd.onion" OR requesturl CONTAINS "uu2iggf5wq57dt6xanfdmwq3rvxqorkb43bh2eacj2vz22nvwewlxcyd.onion" OR requesturl CONTAINS "wauby5e7m6zf2eb7rfn7nqm3diuaehdu6tfay4janiktgx33wjfifkyd.onion" OR requesturl CONTAINS "wf4uxi6izbqppzb4fvg4sq7sm5t5w5xl5v5pkxpguwpr4aci7hvzboid.onion" OR requesturl CONTAINS "wjd2t2lzbgb7g7bcenpl2r2bsobkbwwpooqrmiwqjkpktm5p5seifcid.onion" OR requesturl CONTAINS "xjdhr5is3qsw2cyekdxo57gchpxusvkko3265x2lmmn4g6fnlimdngqd.onion" OR requesturl CONTAINS "yjh2bktujnqkj7u7g7hxotck6sfhjuf7crhc4vcf6ewpa7swoqalfkid.onion" OR requesturl CONTAINS "yqs4gu4c2kb5ybgcigkl5gcsqbjuk5n2su2pozpsw4ojav2op5gddkid.onion")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "24rq2pvihkrct6pxl6zy3p36gt2wd6sn6izoz7ntlivxvbuu5ei3xwad.onion" OR destinationhostname CONTAINS "3crj2ylhdffpf2yik4bb2hn32xey2bdhcpykxfezb4sq53eelglp3sqd.onion" OR destinationhostname CONTAINS "44yd2dxmm5xuo7dsivwkf2fqyqmfsqkt5nkxdlgwpnbr57sca56j74yd.onion" OR destinationhostname CONTAINS "acuy77ahadd6g5rw2pxsuejskirjmxaoj37ck7fvj4h4kc36a3uwirqd.onion" OR destinationhostname CONTAINS "bbknilviexavjvnwdtdqmhsexqcokfwgdqthxexvuwzlwgaggddaahxn.onion" OR destinationhostname CONTAINS "bvxx2p6hfttpiyntpuf72axcvaakjbz5zgiea7iklkrb2s6wrdrv4lid.onion" OR destinationhostname CONTAINS "c3uybau64lj32ty3z3sxgchnrmg72bvbpua66mcvydcjpgrbv2r6huyd.onion" OR destinationhostname CONTAINS "drv4lids5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR destinationhostname CONTAINS "fend7yhjoeam7b4fp4rj5oobphuvmhjbovhtvporusjex4nyoiamgdyd.onion" OR destinationhostname CONTAINS "m5idjwoj4q5yrmo5xbnvhoqqrdld6pruxx5qjvr6gfnnmao4xiniwzid.onion" OR destinationhostname CONTAINS "m7wajjzas7eotqw4b6k4aei5q4zijdal3spsec7wsfmf2xqjhmydjiyd.onion" OR destinationhostname CONTAINS "npnsktlnofwisqvd3e6tpslinkypajmh5jctyjivuf6jza3syw2v6cid.onion" OR destinationhostname CONTAINS "pcjvbrttcy2s3gqpgwklgsco4u4bskr5xhvdzs4pzqqcrfllkwe437id.onion" OR destinationhostname CONTAINS "s4ofksblif7bmo7sp64f56gij6xzh7sznvrn46m6daup2hwdmwbiabqd.onion" OR destinationhostname CONTAINS "s5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR destinationhostname CONTAINS "sourt33xcdoyg4jcrh33qvx6cjoneowihsfrbuqldkrrili54gdvryyd.onion" OR destinationhostname CONTAINS "syd5mtjvcqxvnnkeqjjkdm2oz2jzl6swrfhnvliiemxtgiqvcbm26nyd.onion" OR destinationhostname CONTAINS "tybocptxypx42ngrcqldrgas536syipwotmfnbjpwc5fpxth4xf4faqd.onion" OR destinationhostname CONTAINS "u7kteztwfg3p6wdeiq6y7zidxx3xtto4gmm2vwz42mzd6s4ixgvpgxyd.onion" OR destinationhostname CONTAINS "uu2iggf5wq57dt6xanfdmwq3rvxqorkb43bh2eacj2vz22nvwewlxcyd.onion" OR destinationhostname CONTAINS "wauby5e7m6zf2eb7rfn7nqm3diuaehdu6tfay4janiktgx33wjfifkyd.onion" OR destinationhostname CONTAINS "wf4uxi6izbqppzb4fvg4sq7sm5t5w5xl5v5pkxpguwpr4aci7hvzboid.onion" OR destinationhostname CONTAINS "wjd2t2lzbgb7g7bcenpl2r2bsobkbwwpooqrmiwqjkpktm5p5seifcid.onion" OR destinationhostname CONTAINS "xjdhr5is3qsw2cyekdxo57gchpxusvkko3265x2lmmn4g6fnlimdngqd.onion" OR destinationhostname CONTAINS "yjh2bktujnqkj7u7g7hxotck6sfhjuf7crhc4vcf6ewpa7swoqalfkid.onion" OR destinationhostname CONTAINS "yqs4gu4c2kb5ybgcigkl5gcsqbjuk5n2su2pozpsw4ojav2op5gddkid.onion")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "24rq2pvihkrct6pxl6zy3p36gt2wd6sn6izoz7ntlivxvbuu5ei3xwad.onion" OR sourcentdomain CONTAINS "3crj2ylhdffpf2yik4bb2hn32xey2bdhcpykxfezb4sq53eelglp3sqd.onion" OR sourcentdomain CONTAINS "44yd2dxmm5xuo7dsivwkf2fqyqmfsqkt5nkxdlgwpnbr57sca56j74yd.onion" OR sourcentdomain CONTAINS "acuy77ahadd6g5rw2pxsuejskirjmxaoj37ck7fvj4h4kc36a3uwirqd.onion" OR sourcentdomain CONTAINS "bbknilviexavjvnwdtdqmhsexqcokfwgdqthxexvuwzlwgaggddaahxn.onion" OR sourcentdomain CONTAINS "bvxx2p6hfttpiyntpuf72axcvaakjbz5zgiea7iklkrb2s6wrdrv4lid.onion" OR sourcentdomain CONTAINS "c3uybau64lj32ty3z3sxgchnrmg72bvbpua66mcvydcjpgrbv2r6huyd.onion" OR sourcentdomain CONTAINS "drv4lids5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR sourcentdomain CONTAINS "fend7yhjoeam7b4fp4rj5oobphuvmhjbovhtvporusjex4nyoiamgdyd.onion" OR sourcentdomain CONTAINS "m5idjwoj4q5yrmo5xbnvhoqqrdld6pruxx5qjvr6gfnnmao4xiniwzid.onion" OR sourcentdomain CONTAINS "m7wajjzas7eotqw4b6k4aei5q4zijdal3spsec7wsfmf2xqjhmydjiyd.onion" OR sourcentdomain CONTAINS "npnsktlnofwisqvd3e6tpslinkypajmh5jctyjivuf6jza3syw2v6cid.onion" OR sourcentdomain CONTAINS "pcjvbrttcy2s3gqpgwklgsco4u4bskr5xhvdzs4pzqqcrfllkwe437id.onion" OR sourcentdomain CONTAINS "s4ofksblif7bmo7sp64f56gij6xzh7sznvrn46m6daup2hwdmwbiabqd.onion" OR sourcentdomain CONTAINS "s5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR sourcentdomain CONTAINS "sourt33xcdoyg4jcrh33qvx6cjoneowihsfrbuqldkrrili54gdvryyd.onion" OR sourcentdomain CONTAINS "syd5mtjvcqxvnnkeqjjkdm2oz2jzl6swrfhnvliiemxtgiqvcbm26nyd.onion" OR sourcentdomain CONTAINS "tybocptxypx42ngrcqldrgas536syipwotmfnbjpwc5fpxth4xf4faqd.onion" OR sourcentdomain CONTAINS "u7kteztwfg3p6wdeiq6y7zidxx3xtto4gmm2vwz42mzd6s4ixgvpgxyd.onion" OR sourcentdomain CONTAINS "uu2iggf5wq57dt6xanfdmwq3rvxqorkb43bh2eacj2vz22nvwewlxcyd.onion" OR sourcentdomain CONTAINS "wauby5e7m6zf2eb7rfn7nqm3diuaehdu6tfay4janiktgx33wjfifkyd.onion" OR sourcentdomain CONTAINS "wf4uxi6izbqppzb4fvg4sq7sm5t5w5xl5v5pkxpguwpr4aci7hvzboid.onion" OR sourcentdomain CONTAINS "wjd2t2lzbgb7g7bcenpl2r2bsobkbwwpooqrmiwqjkpktm5p5seifcid.onion" OR sourcentdomain CONTAINS "xjdhr5is3qsw2cyekdxo57gchpxusvkko3265x2lmmn4g6fnlimdngqd.onion" OR sourcentdomain CONTAINS "yjh2bktujnqkj7u7g7hxotck6sfhjuf7crhc4vcf6ewpa7swoqalfkid.onion" OR sourcentdomain CONTAINS "yqs4gu4c2kb5ybgcigkl5gcsqbjuk5n2su2pozpsw4ojav2op5gddkid.onion")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "24rq2pvihkrct6pxl6zy3p36gt2wd6sn6izoz7ntlivxvbuu5ei3xwad.onion" OR sourcehostname CONTAINS "3crj2ylhdffpf2yik4bb2hn32xey2bdhcpykxfezb4sq53eelglp3sqd.onion" OR sourcehostname CONTAINS "44yd2dxmm5xuo7dsivwkf2fqyqmfsqkt5nkxdlgwpnbr57sca56j74yd.onion" OR sourcehostname CONTAINS "acuy77ahadd6g5rw2pxsuejskirjmxaoj37ck7fvj4h4kc36a3uwirqd.onion" OR sourcehostname CONTAINS "bbknilviexavjvnwdtdqmhsexqcokfwgdqthxexvuwzlwgaggddaahxn.onion" OR sourcehostname CONTAINS "bvxx2p6hfttpiyntpuf72axcvaakjbz5zgiea7iklkrb2s6wrdrv4lid.onion" OR sourcehostname CONTAINS "c3uybau64lj32ty3z3sxgchnrmg72bvbpua66mcvydcjpgrbv2r6huyd.onion" OR sourcehostname CONTAINS "drv4lids5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR sourcehostname CONTAINS "fend7yhjoeam7b4fp4rj5oobphuvmhjbovhtvporusjex4nyoiamgdyd.onion" OR sourcehostname CONTAINS "m5idjwoj4q5yrmo5xbnvhoqqrdld6pruxx5qjvr6gfnnmao4xiniwzid.onion" OR sourcehostname CONTAINS "m7wajjzas7eotqw4b6k4aei5q4zijdal3spsec7wsfmf2xqjhmydjiyd.onion" OR sourcehostname CONTAINS "npnsktlnofwisqvd3e6tpslinkypajmh5jctyjivuf6jza3syw2v6cid.onion" OR sourcehostname CONTAINS "pcjvbrttcy2s3gqpgwklgsco4u4bskr5xhvdzs4pzqqcrfllkwe437id.onion" OR sourcehostname CONTAINS "s4ofksblif7bmo7sp64f56gij6xzh7sznvrn46m6daup2hwdmwbiabqd.onion" OR sourcehostname CONTAINS "s5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR sourcehostname CONTAINS "sourt33xcdoyg4jcrh33qvx6cjoneowihsfrbuqldkrrili54gdvryyd.onion" OR sourcehostname CONTAINS "syd5mtjvcqxvnnkeqjjkdm2oz2jzl6swrfhnvliiemxtgiqvcbm26nyd.onion" OR sourcehostname CONTAINS "tybocptxypx42ngrcqldrgas536syipwotmfnbjpwc5fpxth4xf4faqd.onion" OR sourcehostname CONTAINS "u7kteztwfg3p6wdeiq6y7zidxx3xtto4gmm2vwz42mzd6s4ixgvpgxyd.onion" OR sourcehostname CONTAINS "uu2iggf5wq57dt6xanfdmwq3rvxqorkb43bh2eacj2vz22nvwewlxcyd.onion" OR sourcehostname CONTAINS "wauby5e7m6zf2eb7rfn7nqm3diuaehdu6tfay4janiktgx33wjfifkyd.onion" OR sourcehostname CONTAINS "wf4uxi6izbqppzb4fvg4sq7sm5t5w5xl5v5pkxpguwpr4aci7hvzboid.onion" OR sourcehostname CONTAINS "wjd2t2lzbgb7g7bcenpl2r2bsobkbwwpooqrmiwqjkpktm5p5seifcid.onion" OR sourcehostname CONTAINS "xjdhr5is3qsw2cyekdxo57gchpxusvkko3265x2lmmn4g6fnlimdngqd.onion" OR sourcehostname CONTAINS "yjh2bktujnqkj7u7g7hxotck6sfhjuf7crhc4vcf6ewpa7swoqalfkid.onion" OR sourcehostname CONTAINS "yqs4gu4c2kb5ybgcigkl5gcsqbjuk5n2su2pozpsw4ojav2op5gddkid.onion")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "24rq2pvihkrct6pxl6zy3p36gt2wd6sn6izoz7ntlivxvbuu5ei3xwad.onion" OR destinationntdomain CONTAINS "3crj2ylhdffpf2yik4bb2hn32xey2bdhcpykxfezb4sq53eelglp3sqd.onion" OR destinationntdomain CONTAINS "44yd2dxmm5xuo7dsivwkf2fqyqmfsqkt5nkxdlgwpnbr57sca56j74yd.onion" OR destinationntdomain CONTAINS "acuy77ahadd6g5rw2pxsuejskirjmxaoj37ck7fvj4h4kc36a3uwirqd.onion" OR destinationntdomain CONTAINS "bbknilviexavjvnwdtdqmhsexqcokfwgdqthxexvuwzlwgaggddaahxn.onion" OR destinationntdomain CONTAINS "bvxx2p6hfttpiyntpuf72axcvaakjbz5zgiea7iklkrb2s6wrdrv4lid.onion" OR destinationntdomain CONTAINS "c3uybau64lj32ty3z3sxgchnrmg72bvbpua66mcvydcjpgrbv2r6huyd.onion" OR destinationntdomain CONTAINS "drv4lids5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR destinationntdomain CONTAINS "fend7yhjoeam7b4fp4rj5oobphuvmhjbovhtvporusjex4nyoiamgdyd.onion" OR destinationntdomain CONTAINS "m5idjwoj4q5yrmo5xbnvhoqqrdld6pruxx5qjvr6gfnnmao4xiniwzid.onion" OR destinationntdomain CONTAINS "m7wajjzas7eotqw4b6k4aei5q4zijdal3spsec7wsfmf2xqjhmydjiyd.onion" OR destinationntdomain CONTAINS "npnsktlnofwisqvd3e6tpslinkypajmh5jctyjivuf6jza3syw2v6cid.onion" OR destinationntdomain CONTAINS "pcjvbrttcy2s3gqpgwklgsco4u4bskr5xhvdzs4pzqqcrfllkwe437id.onion" OR destinationntdomain CONTAINS "s4ofksblif7bmo7sp64f56gij6xzh7sznvrn46m6daup2hwdmwbiabqd.onion" OR destinationntdomain CONTAINS "s5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR destinationntdomain CONTAINS "sourt33xcdoyg4jcrh33qvx6cjoneowihsfrbuqldkrrili54gdvryyd.onion" OR destinationntdomain CONTAINS "syd5mtjvcqxvnnkeqjjkdm2oz2jzl6swrfhnvliiemxtgiqvcbm26nyd.onion" OR destinationntdomain CONTAINS "tybocptxypx42ngrcqldrgas536syipwotmfnbjpwc5fpxth4xf4faqd.onion" OR destinationntdomain CONTAINS "u7kteztwfg3p6wdeiq6y7zidxx3xtto4gmm2vwz42mzd6s4ixgvpgxyd.onion" OR destinationntdomain CONTAINS "uu2iggf5wq57dt6xanfdmwq3rvxqorkb43bh2eacj2vz22nvwewlxcyd.onion" OR destinationntdomain CONTAINS "wauby5e7m6zf2eb7rfn7nqm3diuaehdu6tfay4janiktgx33wjfifkyd.onion" OR destinationntdomain CONTAINS "wf4uxi6izbqppzb4fvg4sq7sm5t5w5xl5v5pkxpguwpr4aci7hvzboid.onion" OR destinationntdomain CONTAINS "wjd2t2lzbgb7g7bcenpl2r2bsobkbwwpooqrmiwqjkpktm5p5seifcid.onion" OR destinationntdomain CONTAINS "xjdhr5is3qsw2cyekdxo57gchpxusvkko3265x2lmmn4g6fnlimdngqd.onion" OR destinationntdomain CONTAINS "yjh2bktujnqkj7u7g7hxotck6sfhjuf7crhc4vcf6ewpa7swoqalfkid.onion" OR destinationntdomain CONTAINS "yqs4gu4c2kb5ybgcigkl5gcsqbjuk5n2su2pozpsw4ojav2op5gddkid.onion")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND requesturl NOT NULL AND (requesturl CONTAINS "24rq2pvihkrct6pxl6zy3p36gt2wd6sn6izoz7ntlivxvbuu5ei3xwad.onion" OR requesturl CONTAINS "3crj2ylhdffpf2yik4bb2hn32xey2bdhcpykxfezb4sq53eelglp3sqd.onion" OR requesturl CONTAINS "44yd2dxmm5xuo7dsivwkf2fqyqmfsqkt5nkxdlgwpnbr57sca56j74yd.onion" OR requesturl CONTAINS "acuy77ahadd6g5rw2pxsuejskirjmxaoj37ck7fvj4h4kc36a3uwirqd.onion" OR requesturl CONTAINS "bbknilviexavjvnwdtdqmhsexqcokfwgdqthxexvuwzlwgaggddaahxn.onion" OR requesturl CONTAINS "bvxx2p6hfttpiyntpuf72axcvaakjbz5zgiea7iklkrb2s6wrdrv4lid.onion" OR requesturl CONTAINS "c3uybau64lj32ty3z3sxgchnrmg72bvbpua66mcvydcjpgrbv2r6huyd.onion" OR requesturl CONTAINS "drv4lids5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR requesturl CONTAINS "fend7yhjoeam7b4fp4rj5oobphuvmhjbovhtvporusjex4nyoiamgdyd.onion" OR requesturl CONTAINS "m5idjwoj4q5yrmo5xbnvhoqqrdld6pruxx5qjvr6gfnnmao4xiniwzid.onion" OR requesturl CONTAINS "m7wajjzas7eotqw4b6k4aei5q4zijdal3spsec7wsfmf2xqjhmydjiyd.onion" OR requesturl CONTAINS "npnsktlnofwisqvd3e6tpslinkypajmh5jctyjivuf6jza3syw2v6cid.onion" OR requesturl CONTAINS "pcjvbrttcy2s3gqpgwklgsco4u4bskr5xhvdzs4pzqqcrfllkwe437id.onion" OR requesturl CONTAINS "s4ofksblif7bmo7sp64f56gij6xzh7sznvrn46m6daup2hwdmwbiabqd.onion" OR requesturl CONTAINS "s5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR requesturl CONTAINS "sourt33xcdoyg4jcrh33qvx6cjoneowihsfrbuqldkrrili54gdvryyd.onion" OR requesturl CONTAINS "syd5mtjvcqxvnnkeqjjkdm2oz2jzl6swrfhnvliiemxtgiqvcbm26nyd.onion" OR requesturl CONTAINS "tybocptxypx42ngrcqldrgas536syipwotmfnbjpwc5fpxth4xf4faqd.onion" OR requesturl CONTAINS "u7kteztwfg3p6wdeiq6y7zidxx3xtto4gmm2vwz42mzd6s4ixgvpgxyd.onion" OR requesturl CONTAINS "uu2iggf5wq57dt6xanfdmwq3rvxqorkb43bh2eacj2vz22nvwewlxcyd.onion" OR requesturl CONTAINS "wauby5e7m6zf2eb7rfn7nqm3diuaehdu6tfay4janiktgx33wjfifkyd.onion" OR requesturl CONTAINS "wf4uxi6izbqppzb4fvg4sq7sm5t5w5xl5v5pkxpguwpr4aci7hvzboid.onion" OR requesturl CONTAINS "wjd2t2lzbgb7g7bcenpl2r2bsobkbwwpooqrmiwqjkpktm5p5seifcid.onion" OR requesturl CONTAINS "xjdhr5is3qsw2cyekdxo57gchpxusvkko3265x2lmmn4g6fnlimdngqd.onion" OR requesturl CONTAINS "yjh2bktujnqkj7u7g7hxotck6sfhjuf7crhc4vcf6ewpa7swoqalfkid.onion" OR requesturl CONTAINS "yqs4gu4c2kb5ybgcigkl5gcsqbjuk5n2su2pozpsw4ojav2op5gddkid.onion")
index=activity AND rg_functionality="Web Application Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "24rq2pvihkrct6pxl6zy3p36gt2wd6sn6izoz7ntlivxvbuu5ei3xwad.onion" OR destinationhostname CONTAINS "3crj2ylhdffpf2yik4bb2hn32xey2bdhcpykxfezb4sq53eelglp3sqd.onion" OR destinationhostname CONTAINS "44yd2dxmm5xuo7dsivwkf2fqyqmfsqkt5nkxdlgwpnbr57sca56j74yd.onion" OR destinationhostname CONTAINS "acuy77ahadd6g5rw2pxsuejskirjmxaoj37ck7fvj4h4kc36a3uwirqd.onion" OR destinationhostname CONTAINS "bbknilviexavjvnwdtdqmhsexqcokfwgdqthxexvuwzlwgaggddaahxn.onion" OR destinationhostname CONTAINS "bvxx2p6hfttpiyntpuf72axcvaakjbz5zgiea7iklkrb2s6wrdrv4lid.onion" OR destinationhostname CONTAINS "c3uybau64lj32ty3z3sxgchnrmg72bvbpua66mcvydcjpgrbv2r6huyd.onion" OR destinationhostname CONTAINS "drv4lids5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR destinationhostname CONTAINS "fend7yhjoeam7b4fp4rj5oobphuvmhjbovhtvporusjex4nyoiamgdyd.onion" OR destinationhostname CONTAINS "m5idjwoj4q5yrmo5xbnvhoqqrdld6pruxx5qjvr6gfnnmao4xiniwzid.onion" OR destinationhostname CONTAINS "m7wajjzas7eotqw4b6k4aei5q4zijdal3spsec7wsfmf2xqjhmydjiyd.onion" OR destinationhostname CONTAINS "npnsktlnofwisqvd3e6tpslinkypajmh5jctyjivuf6jza3syw2v6cid.onion" OR destinationhostname CONTAINS "pcjvbrttcy2s3gqpgwklgsco4u4bskr5xhvdzs4pzqqcrfllkwe437id.onion" OR destinationhostname CONTAINS "s4ofksblif7bmo7sp64f56gij6xzh7sznvrn46m6daup2hwdmwbiabqd.onion" OR destinationhostname CONTAINS "s5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR destinationhostname CONTAINS "sourt33xcdoyg4jcrh33qvx6cjoneowihsfrbuqldkrrili54gdvryyd.onion" OR destinationhostname CONTAINS "syd5mtjvcqxvnnkeqjjkdm2oz2jzl6swrfhnvliiemxtgiqvcbm26nyd.onion" OR destinationhostname CONTAINS "tybocptxypx42ngrcqldrgas536syipwotmfnbjpwc5fpxth4xf4faqd.onion" OR destinationhostname CONTAINS "u7kteztwfg3p6wdeiq6y7zidxx3xtto4gmm2vwz42mzd6s4ixgvpgxyd.onion" OR destinationhostname CONTAINS "uu2iggf5wq57dt6xanfdmwq3rvxqorkb43bh2eacj2vz22nvwewlxcyd.onion" OR destinationhostname CONTAINS "wauby5e7m6zf2eb7rfn7nqm3diuaehdu6tfay4janiktgx33wjfifkyd.onion" OR destinationhostname CONTAINS "wf4uxi6izbqppzb4fvg4sq7sm5t5w5xl5v5pkxpguwpr4aci7hvzboid.onion" OR destinationhostname CONTAINS "wjd2t2lzbgb7g7bcenpl2r2bsobkbwwpooqrmiwqjkpktm5p5seifcid.onion" OR destinationhostname CONTAINS "xjdhr5is3qsw2cyekdxo57gchpxusvkko3265x2lmmn4g6fnlimdngqd.onion" OR destinationhostname CONTAINS "yjh2bktujnqkj7u7g7hxotck6sfhjuf7crhc4vcf6ewpa7swoqalfkid.onion" OR destinationhostname CONTAINS "yqs4gu4c2kb5ybgcigkl5gcsqbjuk5n2su2pozpsw4ojav2op5gddkid.onion")
index=activity AND rg_functionality="Web Application Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "24rq2pvihkrct6pxl6zy3p36gt2wd6sn6izoz7ntlivxvbuu5ei3xwad.onion" OR sourcentdomain CONTAINS "3crj2ylhdffpf2yik4bb2hn32xey2bdhcpykxfezb4sq53eelglp3sqd.onion" OR sourcentdomain CONTAINS "44yd2dxmm5xuo7dsivwkf2fqyqmfsqkt5nkxdlgwpnbr57sca56j74yd.onion" OR sourcentdomain CONTAINS "acuy77ahadd6g5rw2pxsuejskirjmxaoj37ck7fvj4h4kc36a3uwirqd.onion" OR sourcentdomain CONTAINS "bbknilviexavjvnwdtdqmhsexqcokfwgdqthxexvuwzlwgaggddaahxn.onion" OR sourcentdomain CONTAINS "bvxx2p6hfttpiyntpuf72axcvaakjbz5zgiea7iklkrb2s6wrdrv4lid.onion" OR sourcentdomain CONTAINS "c3uybau64lj32ty3z3sxgchnrmg72bvbpua66mcvydcjpgrbv2r6huyd.onion" OR sourcentdomain CONTAINS "drv4lids5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR sourcentdomain CONTAINS "fend7yhjoeam7b4fp4rj5oobphuvmhjbovhtvporusjex4nyoiamgdyd.onion" OR sourcentdomain CONTAINS "m5idjwoj4q5yrmo5xbnvhoqqrdld6pruxx5qjvr6gfnnmao4xiniwzid.onion" OR sourcentdomain CONTAINS "m7wajjzas7eotqw4b6k4aei5q4zijdal3spsec7wsfmf2xqjhmydjiyd.onion" OR sourcentdomain CONTAINS "npnsktlnofwisqvd3e6tpslinkypajmh5jctyjivuf6jza3syw2v6cid.onion" OR sourcentdomain CONTAINS "pcjvbrttcy2s3gqpgwklgsco4u4bskr5xhvdzs4pzqqcrfllkwe437id.onion" OR sourcentdomain CONTAINS "s4ofksblif7bmo7sp64f56gij6xzh7sznvrn46m6daup2hwdmwbiabqd.onion" OR sourcentdomain CONTAINS "s5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR sourcentdomain CONTAINS "sourt33xcdoyg4jcrh33qvx6cjoneowihsfrbuqldkrrili54gdvryyd.onion" OR sourcentdomain CONTAINS "syd5mtjvcqxvnnkeqjjkdm2oz2jzl6swrfhnvliiemxtgiqvcbm26nyd.onion" OR sourcentdomain CONTAINS "tybocptxypx42ngrcqldrgas536syipwotmfnbjpwc5fpxth4xf4faqd.onion" OR sourcentdomain CONTAINS "u7kteztwfg3p6wdeiq6y7zidxx3xtto4gmm2vwz42mzd6s4ixgvpgxyd.onion" OR sourcentdomain CONTAINS "uu2iggf5wq57dt6xanfdmwq3rvxqorkb43bh2eacj2vz22nvwewlxcyd.onion" OR sourcentdomain CONTAINS "wauby5e7m6zf2eb7rfn7nqm3diuaehdu6tfay4janiktgx33wjfifkyd.onion" OR sourcentdomain CONTAINS "wf4uxi6izbqppzb4fvg4sq7sm5t5w5xl5v5pkxpguwpr4aci7hvzboid.onion" OR sourcentdomain CONTAINS "wjd2t2lzbgb7g7bcenpl2r2bsobkbwwpooqrmiwqjkpktm5p5seifcid.onion" OR sourcentdomain CONTAINS "xjdhr5is3qsw2cyekdxo57gchpxusvkko3265x2lmmn4g6fnlimdngqd.onion" OR sourcentdomain CONTAINS "yjh2bktujnqkj7u7g7hxotck6sfhjuf7crhc4vcf6ewpa7swoqalfkid.onion" OR sourcentdomain CONTAINS "yqs4gu4c2kb5ybgcigkl5gcsqbjuk5n2su2pozpsw4ojav2op5gddkid.onion")
index=activity AND rg_functionality="Web Application Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "24rq2pvihkrct6pxl6zy3p36gt2wd6sn6izoz7ntlivxvbuu5ei3xwad.onion" OR sourcehostname CONTAINS "3crj2ylhdffpf2yik4bb2hn32xey2bdhcpykxfezb4sq53eelglp3sqd.onion" OR sourcehostname CONTAINS "44yd2dxmm5xuo7dsivwkf2fqyqmfsqkt5nkxdlgwpnbr57sca56j74yd.onion" OR sourcehostname CONTAINS "acuy77ahadd6g5rw2pxsuejskirjmxaoj37ck7fvj4h4kc36a3uwirqd.onion" OR sourcehostname CONTAINS "bbknilviexavjvnwdtdqmhsexqcokfwgdqthxexvuwzlwgaggddaahxn.onion" OR sourcehostname CONTAINS "bvxx2p6hfttpiyntpuf72axcvaakjbz5zgiea7iklkrb2s6wrdrv4lid.onion" OR sourcehostname CONTAINS "c3uybau64lj32ty3z3sxgchnrmg72bvbpua66mcvydcjpgrbv2r6huyd.onion" OR sourcehostname CONTAINS "drv4lids5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR sourcehostname CONTAINS "fend7yhjoeam7b4fp4rj5oobphuvmhjbovhtvporusjex4nyoiamgdyd.onion" OR sourcehostname CONTAINS "m5idjwoj4q5yrmo5xbnvhoqqrdld6pruxx5qjvr6gfnnmao4xiniwzid.onion" OR sourcehostname CONTAINS "m7wajjzas7eotqw4b6k4aei5q4zijdal3spsec7wsfmf2xqjhmydjiyd.onion" OR sourcehostname CONTAINS "npnsktlnofwisqvd3e6tpslinkypajmh5jctyjivuf6jza3syw2v6cid.onion" OR sourcehostname CONTAINS "pcjvbrttcy2s3gqpgwklgsco4u4bskr5xhvdzs4pzqqcrfllkwe437id.onion" OR sourcehostname CONTAINS "s4ofksblif7bmo7sp64f56gij6xzh7sznvrn46m6daup2hwdmwbiabqd.onion" OR sourcehostname CONTAINS "s5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR sourcehostname CONTAINS "sourt33xcdoyg4jcrh33qvx6cjoneowihsfrbuqldkrrili54gdvryyd.onion" OR sourcehostname CONTAINS "syd5mtjvcqxvnnkeqjjkdm2oz2jzl6swrfhnvliiemxtgiqvcbm26nyd.onion" OR sourcehostname CONTAINS "tybocptxypx42ngrcqldrgas536syipwotmfnbjpwc5fpxth4xf4faqd.onion" OR sourcehostname CONTAINS "u7kteztwfg3p6wdeiq6y7zidxx3xtto4gmm2vwz42mzd6s4ixgvpgxyd.onion" OR sourcehostname CONTAINS "uu2iggf5wq57dt6xanfdmwq3rvxqorkb43bh2eacj2vz22nvwewlxcyd.onion" OR sourcehostname CONTAINS "wauby5e7m6zf2eb7rfn7nqm3diuaehdu6tfay4janiktgx33wjfifkyd.onion" OR sourcehostname CONTAINS "wf4uxi6izbqppzb4fvg4sq7sm5t5w5xl5v5pkxpguwpr4aci7hvzboid.onion" OR sourcehostname CONTAINS "wjd2t2lzbgb7g7bcenpl2r2bsobkbwwpooqrmiwqjkpktm5p5seifcid.onion" OR sourcehostname CONTAINS "xjdhr5is3qsw2cyekdxo57gchpxusvkko3265x2lmmn4g6fnlimdngqd.onion" OR sourcehostname CONTAINS "yjh2bktujnqkj7u7g7hxotck6sfhjuf7crhc4vcf6ewpa7swoqalfkid.onion" OR sourcehostname CONTAINS "yqs4gu4c2kb5ybgcigkl5gcsqbjuk5n2su2pozpsw4ojav2op5gddkid.onion")
index=activity AND rg_functionality="Web Application Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "24rq2pvihkrct6pxl6zy3p36gt2wd6sn6izoz7ntlivxvbuu5ei3xwad.onion" OR destinationntdomain CONTAINS "3crj2ylhdffpf2yik4bb2hn32xey2bdhcpykxfezb4sq53eelglp3sqd.onion" OR destinationntdomain CONTAINS "44yd2dxmm5xuo7dsivwkf2fqyqmfsqkt5nkxdlgwpnbr57sca56j74yd.onion" OR destinationntdomain CONTAINS "acuy77ahadd6g5rw2pxsuejskirjmxaoj37ck7fvj4h4kc36a3uwirqd.onion" OR destinationntdomain CONTAINS "bbknilviexavjvnwdtdqmhsexqcokfwgdqthxexvuwzlwgaggddaahxn.onion" OR destinationntdomain CONTAINS "bvxx2p6hfttpiyntpuf72axcvaakjbz5zgiea7iklkrb2s6wrdrv4lid.onion" OR destinationntdomain CONTAINS "c3uybau64lj32ty3z3sxgchnrmg72bvbpua66mcvydcjpgrbv2r6huyd.onion" OR destinationntdomain CONTAINS "drv4lids5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR destinationntdomain CONTAINS "fend7yhjoeam7b4fp4rj5oobphuvmhjbovhtvporusjex4nyoiamgdyd.onion" OR destinationntdomain CONTAINS "m5idjwoj4q5yrmo5xbnvhoqqrdld6pruxx5qjvr6gfnnmao4xiniwzid.onion" OR destinationntdomain CONTAINS "m7wajjzas7eotqw4b6k4aei5q4zijdal3spsec7wsfmf2xqjhmydjiyd.onion" OR destinationntdomain CONTAINS "npnsktlnofwisqvd3e6tpslinkypajmh5jctyjivuf6jza3syw2v6cid.onion" OR destinationntdomain CONTAINS "pcjvbrttcy2s3gqpgwklgsco4u4bskr5xhvdzs4pzqqcrfllkwe437id.onion" OR destinationntdomain CONTAINS "s4ofksblif7bmo7sp64f56gij6xzh7sznvrn46m6daup2hwdmwbiabqd.onion" OR destinationntdomain CONTAINS "s5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR destinationntdomain CONTAINS "sourt33xcdoyg4jcrh33qvx6cjoneowihsfrbuqldkrrili54gdvryyd.onion" OR destinationntdomain CONTAINS "syd5mtjvcqxvnnkeqjjkdm2oz2jzl6swrfhnvliiemxtgiqvcbm26nyd.onion" OR destinationntdomain CONTAINS "tybocptxypx42ngrcqldrgas536syipwotmfnbjpwc5fpxth4xf4faqd.onion" OR destinationntdomain CONTAINS "u7kteztwfg3p6wdeiq6y7zidxx3xtto4gmm2vwz42mzd6s4ixgvpgxyd.onion" OR destinationntdomain CONTAINS "uu2iggf5wq57dt6xanfdmwq3rvxqorkb43bh2eacj2vz22nvwewlxcyd.onion" OR destinationntdomain CONTAINS "wauby5e7m6zf2eb7rfn7nqm3diuaehdu6tfay4janiktgx33wjfifkyd.onion" OR destinationntdomain CONTAINS "wf4uxi6izbqppzb4fvg4sq7sm5t5w5xl5v5pkxpguwpr4aci7hvzboid.onion" OR destinationntdomain CONTAINS "wjd2t2lzbgb7g7bcenpl2r2bsobkbwwpooqrmiwqjkpktm5p5seifcid.onion" OR destinationntdomain CONTAINS "xjdhr5is3qsw2cyekdxo57gchpxusvkko3265x2lmmn4g6fnlimdngqd.onion" OR destinationntdomain CONTAINS "yjh2bktujnqkj7u7g7hxotck6sfhjuf7crhc4vcf6ewpa7swoqalfkid.onion" OR destinationntdomain CONTAINS "yqs4gu4c2kb5ybgcigkl5gcsqbjuk5n2su2pozpsw4ojav2op5gddkid.onion")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND (requesturl CONTAINS "24rq2pvihkrct6pxl6zy3p36gt2wd6sn6izoz7ntlivxvbuu5ei3xwad.onion" OR requesturl CONTAINS "3crj2ylhdffpf2yik4bb2hn32xey2bdhcpykxfezb4sq53eelglp3sqd.onion" OR requesturl CONTAINS "44yd2dxmm5xuo7dsivwkf2fqyqmfsqkt5nkxdlgwpnbr57sca56j74yd.onion" OR requesturl CONTAINS "acuy77ahadd6g5rw2pxsuejskirjmxaoj37ck7fvj4h4kc36a3uwirqd.onion" OR requesturl CONTAINS "bbknilviexavjvnwdtdqmhsexqcokfwgdqthxexvuwzlwgaggddaahxn.onion" OR requesturl CONTAINS "bvxx2p6hfttpiyntpuf72axcvaakjbz5zgiea7iklkrb2s6wrdrv4lid.onion" OR requesturl CONTAINS "c3uybau64lj32ty3z3sxgchnrmg72bvbpua66mcvydcjpgrbv2r6huyd.onion" OR requesturl CONTAINS "drv4lids5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR requesturl CONTAINS "fend7yhjoeam7b4fp4rj5oobphuvmhjbovhtvporusjex4nyoiamgdyd.onion" OR requesturl CONTAINS "m5idjwoj4q5yrmo5xbnvhoqqrdld6pruxx5qjvr6gfnnmao4xiniwzid.onion" OR requesturl CONTAINS "m7wajjzas7eotqw4b6k4aei5q4zijdal3spsec7wsfmf2xqjhmydjiyd.onion" OR requesturl CONTAINS "npnsktlnofwisqvd3e6tpslinkypajmh5jctyjivuf6jza3syw2v6cid.onion" OR requesturl CONTAINS "pcjvbrttcy2s3gqpgwklgsco4u4bskr5xhvdzs4pzqqcrfllkwe437id.onion" OR requesturl CONTAINS "s4ofksblif7bmo7sp64f56gij6xzh7sznvrn46m6daup2hwdmwbiabqd.onion" OR requesturl CONTAINS "s5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR requesturl CONTAINS "sourt33xcdoyg4jcrh33qvx6cjoneowihsfrbuqldkrrili54gdvryyd.onion" OR requesturl CONTAINS "syd5mtjvcqxvnnkeqjjkdm2oz2jzl6swrfhnvliiemxtgiqvcbm26nyd.onion" OR requesturl CONTAINS "tybocptxypx42ngrcqldrgas536syipwotmfnbjpwc5fpxth4xf4faqd.onion" OR requesturl CONTAINS "u7kteztwfg3p6wdeiq6y7zidxx3xtto4gmm2vwz42mzd6s4ixgvpgxyd.onion" OR requesturl CONTAINS "uu2iggf5wq57dt6xanfdmwq3rvxqorkb43bh2eacj2vz22nvwewlxcyd.onion" OR requesturl CONTAINS "wauby5e7m6zf2eb7rfn7nqm3diuaehdu6tfay4janiktgx33wjfifkyd.onion" OR requesturl CONTAINS "wf4uxi6izbqppzb4fvg4sq7sm5t5w5xl5v5pkxpguwpr4aci7hvzboid.onion" OR requesturl CONTAINS "wjd2t2lzbgb7g7bcenpl2r2bsobkbwwpooqrmiwqjkpktm5p5seifcid.onion" OR requesturl CONTAINS "xjdhr5is3qsw2cyekdxo57gchpxusvkko3265x2lmmn4g6fnlimdngqd.onion" OR requesturl CONTAINS "yjh2bktujnqkj7u7g7hxotck6sfhjuf7crhc4vcf6ewpa7swoqalfkid.onion" OR requesturl CONTAINS "yqs4gu4c2kb5ybgcigkl5gcsqbjuk5n2su2pozpsw4ojav2op5gddkid.onion")
index=activity AND rg_functionality="Endpoint management systems" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "24rq2pvihkrct6pxl6zy3p36gt2wd6sn6izoz7ntlivxvbuu5ei3xwad.onion" OR destinationhostname CONTAINS "3crj2ylhdffpf2yik4bb2hn32xey2bdhcpykxfezb4sq53eelglp3sqd.onion" OR destinationhostname CONTAINS "44yd2dxmm5xuo7dsivwkf2fqyqmfsqkt5nkxdlgwpnbr57sca56j74yd.onion" OR destinationhostname CONTAINS "acuy77ahadd6g5rw2pxsuejskirjmxaoj37ck7fvj4h4kc36a3uwirqd.onion" OR destinationhostname CONTAINS "bbknilviexavjvnwdtdqmhsexqcokfwgdqthxexvuwzlwgaggddaahxn.onion" OR destinationhostname CONTAINS "bvxx2p6hfttpiyntpuf72axcvaakjbz5zgiea7iklkrb2s6wrdrv4lid.onion" OR destinationhostname CONTAINS "c3uybau64lj32ty3z3sxgchnrmg72bvbpua66mcvydcjpgrbv2r6huyd.onion" OR destinationhostname CONTAINS "drv4lids5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR destinationhostname CONTAINS "fend7yhjoeam7b4fp4rj5oobphuvmhjbovhtvporusjex4nyoiamgdyd.onion" OR destinationhostname CONTAINS "m5idjwoj4q5yrmo5xbnvhoqqrdld6pruxx5qjvr6gfnnmao4xiniwzid.onion" OR destinationhostname CONTAINS "m7wajjzas7eotqw4b6k4aei5q4zijdal3spsec7wsfmf2xqjhmydjiyd.onion" OR destinationhostname CONTAINS "npnsktlnofwisqvd3e6tpslinkypajmh5jctyjivuf6jza3syw2v6cid.onion" OR destinationhostname CONTAINS "pcjvbrttcy2s3gqpgwklgsco4u4bskr5xhvdzs4pzqqcrfllkwe437id.onion" OR destinationhostname CONTAINS "s4ofksblif7bmo7sp64f56gij6xzh7sznvrn46m6daup2hwdmwbiabqd.onion" OR destinationhostname CONTAINS "s5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR destinationhostname CONTAINS "sourt33xcdoyg4jcrh33qvx6cjoneowihsfrbuqldkrrili54gdvryyd.onion" OR destinationhostname CONTAINS "syd5mtjvcqxvnnkeqjjkdm2oz2jzl6swrfhnvliiemxtgiqvcbm26nyd.onion" OR destinationhostname CONTAINS "tybocptxypx42ngrcqldrgas536syipwotmfnbjpwc5fpxth4xf4faqd.onion" OR destinationhostname CONTAINS "u7kteztwfg3p6wdeiq6y7zidxx3xtto4gmm2vwz42mzd6s4ixgvpgxyd.onion" OR destinationhostname CONTAINS "uu2iggf5wq57dt6xanfdmwq3rvxqorkb43bh2eacj2vz22nvwewlxcyd.onion" OR destinationhostname CONTAINS "wauby5e7m6zf2eb7rfn7nqm3diuaehdu6tfay4janiktgx33wjfifkyd.onion" OR destinationhostname CONTAINS "wf4uxi6izbqppzb4fvg4sq7sm5t5w5xl5v5pkxpguwpr4aci7hvzboid.onion" OR destinationhostname CONTAINS "wjd2t2lzbgb7g7bcenpl2r2bsobkbwwpooqrmiwqjkpktm5p5seifcid.onion" OR destinationhostname CONTAINS "xjdhr5is3qsw2cyekdxo57gchpxusvkko3265x2lmmn4g6fnlimdngqd.onion" OR destinationhostname CONTAINS "yjh2bktujnqkj7u7g7hxotck6sfhjuf7crhc4vcf6ewpa7swoqalfkid.onion" OR destinationhostname CONTAINS "yqs4gu4c2kb5ybgcigkl5gcsqbjuk5n2su2pozpsw4ojav2op5gddkid.onion")
index=activity AND rg_functionality="Endpoint management systems" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "24rq2pvihkrct6pxl6zy3p36gt2wd6sn6izoz7ntlivxvbuu5ei3xwad.onion" OR sourcentdomain CONTAINS "3crj2ylhdffpf2yik4bb2hn32xey2bdhcpykxfezb4sq53eelglp3sqd.onion" OR sourcentdomain CONTAINS "44yd2dxmm5xuo7dsivwkf2fqyqmfsqkt5nkxdlgwpnbr57sca56j74yd.onion" OR sourcentdomain CONTAINS "acuy77ahadd6g5rw2pxsuejskirjmxaoj37ck7fvj4h4kc36a3uwirqd.onion" OR sourcentdomain CONTAINS "bbknilviexavjvnwdtdqmhsexqcokfwgdqthxexvuwzlwgaggddaahxn.onion" OR sourcentdomain CONTAINS "bvxx2p6hfttpiyntpuf72axcvaakjbz5zgiea7iklkrb2s6wrdrv4lid.onion" OR sourcentdomain CONTAINS "c3uybau64lj32ty3z3sxgchnrmg72bvbpua66mcvydcjpgrbv2r6huyd.onion" OR sourcentdomain CONTAINS "drv4lids5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR sourcentdomain CONTAINS "fend7yhjoeam7b4fp4rj5oobphuvmhjbovhtvporusjex4nyoiamgdyd.onion" OR sourcentdomain CONTAINS "m5idjwoj4q5yrmo5xbnvhoqqrdld6pruxx5qjvr6gfnnmao4xiniwzid.onion" OR sourcentdomain CONTAINS "m7wajjzas7eotqw4b6k4aei5q4zijdal3spsec7wsfmf2xqjhmydjiyd.onion" OR sourcentdomain CONTAINS "npnsktlnofwisqvd3e6tpslinkypajmh5jctyjivuf6jza3syw2v6cid.onion" OR sourcentdomain CONTAINS "pcjvbrttcy2s3gqpgwklgsco4u4bskr5xhvdzs4pzqqcrfllkwe437id.onion" OR sourcentdomain CONTAINS "s4ofksblif7bmo7sp64f56gij6xzh7sznvrn46m6daup2hwdmwbiabqd.onion" OR sourcentdomain CONTAINS "s5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR sourcentdomain CONTAINS "sourt33xcdoyg4jcrh33qvx6cjoneowihsfrbuqldkrrili54gdvryyd.onion" OR sourcentdomain CONTAINS "syd5mtjvcqxvnnkeqjjkdm2oz2jzl6swrfhnvliiemxtgiqvcbm26nyd.onion" OR sourcentdomain CONTAINS "tybocptxypx42ngrcqldrgas536syipwotmfnbjpwc5fpxth4xf4faqd.onion" OR sourcentdomain CONTAINS "u7kteztwfg3p6wdeiq6y7zidxx3xtto4gmm2vwz42mzd6s4ixgvpgxyd.onion" OR sourcentdomain CONTAINS "uu2iggf5wq57dt6xanfdmwq3rvxqorkb43bh2eacj2vz22nvwewlxcyd.onion" OR sourcentdomain CONTAINS "wauby5e7m6zf2eb7rfn7nqm3diuaehdu6tfay4janiktgx33wjfifkyd.onion" OR sourcentdomain CONTAINS "wf4uxi6izbqppzb4fvg4sq7sm5t5w5xl5v5pkxpguwpr4aci7hvzboid.onion" OR sourcentdomain CONTAINS "wjd2t2lzbgb7g7bcenpl2r2bsobkbwwpooqrmiwqjkpktm5p5seifcid.onion" OR sourcentdomain CONTAINS "xjdhr5is3qsw2cyekdxo57gchpxusvkko3265x2lmmn4g6fnlimdngqd.onion" OR sourcentdomain CONTAINS "yjh2bktujnqkj7u7g7hxotck6sfhjuf7crhc4vcf6ewpa7swoqalfkid.onion" OR sourcentdomain CONTAINS "yqs4gu4c2kb5ybgcigkl5gcsqbjuk5n2su2pozpsw4ojav2op5gddkid.onion")
index=activity AND rg_functionality="Endpoint management systems" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "24rq2pvihkrct6pxl6zy3p36gt2wd6sn6izoz7ntlivxvbuu5ei3xwad.onion" OR sourcehostname CONTAINS "3crj2ylhdffpf2yik4bb2hn32xey2bdhcpykxfezb4sq53eelglp3sqd.onion" OR sourcehostname CONTAINS "44yd2dxmm5xuo7dsivwkf2fqyqmfsqkt5nkxdlgwpnbr57sca56j74yd.onion" OR sourcehostname CONTAINS "acuy77ahadd6g5rw2pxsuejskirjmxaoj37ck7fvj4h4kc36a3uwirqd.onion" OR sourcehostname CONTAINS "bbknilviexavjvnwdtdqmhsexqcokfwgdqthxexvuwzlwgaggddaahxn.onion" OR sourcehostname CONTAINS "bvxx2p6hfttpiyntpuf72axcvaakjbz5zgiea7iklkrb2s6wrdrv4lid.onion" OR sourcehostname CONTAINS "c3uybau64lj32ty3z3sxgchnrmg72bvbpua66mcvydcjpgrbv2r6huyd.onion" OR sourcehostname CONTAINS "drv4lids5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR sourcehostname CONTAINS "fend7yhjoeam7b4fp4rj5oobphuvmhjbovhtvporusjex4nyoiamgdyd.onion" OR sourcehostname CONTAINS "m5idjwoj4q5yrmo5xbnvhoqqrdld6pruxx5qjvr6gfnnmao4xiniwzid.onion" OR sourcehostname CONTAINS "m7wajjzas7eotqw4b6k4aei5q4zijdal3spsec7wsfmf2xqjhmydjiyd.onion" OR sourcehostname CONTAINS "npnsktlnofwisqvd3e6tpslinkypajmh5jctyjivuf6jza3syw2v6cid.onion" OR sourcehostname CONTAINS "pcjvbrttcy2s3gqpgwklgsco4u4bskr5xhvdzs4pzqqcrfllkwe437id.onion" OR sourcehostname CONTAINS "s4ofksblif7bmo7sp64f56gij6xzh7sznvrn46m6daup2hwdmwbiabqd.onion" OR sourcehostname CONTAINS "s5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR sourcehostname CONTAINS "sourt33xcdoyg4jcrh33qvx6cjoneowihsfrbuqldkrrili54gdvryyd.onion" OR sourcehostname CONTAINS "syd5mtjvcqxvnnkeqjjkdm2oz2jzl6swrfhnvliiemxtgiqvcbm26nyd.onion" OR sourcehostname CONTAINS "tybocptxypx42ngrcqldrgas536syipwotmfnbjpwc5fpxth4xf4faqd.onion" OR sourcehostname CONTAINS "u7kteztwfg3p6wdeiq6y7zidxx3xtto4gmm2vwz42mzd6s4ixgvpgxyd.onion" OR sourcehostname CONTAINS "uu2iggf5wq57dt6xanfdmwq3rvxqorkb43bh2eacj2vz22nvwewlxcyd.onion" OR sourcehostname CONTAINS "wauby5e7m6zf2eb7rfn7nqm3diuaehdu6tfay4janiktgx33wjfifkyd.onion" OR sourcehostname CONTAINS "wf4uxi6izbqppzb4fvg4sq7sm5t5w5xl5v5pkxpguwpr4aci7hvzboid.onion" OR sourcehostname CONTAINS "wjd2t2lzbgb7g7bcenpl2r2bsobkbwwpooqrmiwqjkpktm5p5seifcid.onion" OR sourcehostname CONTAINS "xjdhr5is3qsw2cyekdxo57gchpxusvkko3265x2lmmn4g6fnlimdngqd.onion" OR sourcehostname CONTAINS "yjh2bktujnqkj7u7g7hxotck6sfhjuf7crhc4vcf6ewpa7swoqalfkid.onion" OR sourcehostname CONTAINS "yqs4gu4c2kb5ybgcigkl5gcsqbjuk5n2su2pozpsw4ojav2op5gddkid.onion")
index=activity AND rg_functionality="Endpoint management systems" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "24rq2pvihkrct6pxl6zy3p36gt2wd6sn6izoz7ntlivxvbuu5ei3xwad.onion" OR destinationntdomain CONTAINS "3crj2ylhdffpf2yik4bb2hn32xey2bdhcpykxfezb4sq53eelglp3sqd.onion" OR destinationntdomain CONTAINS "44yd2dxmm5xuo7dsivwkf2fqyqmfsqkt5nkxdlgwpnbr57sca56j74yd.onion" OR destinationntdomain CONTAINS "acuy77ahadd6g5rw2pxsuejskirjmxaoj37ck7fvj4h4kc36a3uwirqd.onion" OR destinationntdomain CONTAINS "bbknilviexavjvnwdtdqmhsexqcokfwgdqthxexvuwzlwgaggddaahxn.onion" OR destinationntdomain CONTAINS "bvxx2p6hfttpiyntpuf72axcvaakjbz5zgiea7iklkrb2s6wrdrv4lid.onion" OR destinationntdomain CONTAINS "c3uybau64lj32ty3z3sxgchnrmg72bvbpua66mcvydcjpgrbv2r6huyd.onion" OR destinationntdomain CONTAINS "drv4lids5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR destinationntdomain CONTAINS "fend7yhjoeam7b4fp4rj5oobphuvmhjbovhtvporusjex4nyoiamgdyd.onion" OR destinationntdomain CONTAINS "m5idjwoj4q5yrmo5xbnvhoqqrdld6pruxx5qjvr6gfnnmao4xiniwzid.onion" OR destinationntdomain CONTAINS "m7wajjzas7eotqw4b6k4aei5q4zijdal3spsec7wsfmf2xqjhmydjiyd.onion" OR destinationntdomain CONTAINS "npnsktlnofwisqvd3e6tpslinkypajmh5jctyjivuf6jza3syw2v6cid.onion" OR destinationntdomain CONTAINS "pcjvbrttcy2s3gqpgwklgsco4u4bskr5xhvdzs4pzqqcrfllkwe437id.onion" OR destinationntdomain CONTAINS "s4ofksblif7bmo7sp64f56gij6xzh7sznvrn46m6daup2hwdmwbiabqd.onion" OR destinationntdomain CONTAINS "s5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR destinationntdomain CONTAINS "sourt33xcdoyg4jcrh33qvx6cjoneowihsfrbuqldkrrili54gdvryyd.onion" OR destinationntdomain CONTAINS "syd5mtjvcqxvnnkeqjjkdm2oz2jzl6swrfhnvliiemxtgiqvcbm26nyd.onion" OR destinationntdomain CONTAINS "tybocptxypx42ngrcqldrgas536syipwotmfnbjpwc5fpxth4xf4faqd.onion" OR destinationntdomain CONTAINS "u7kteztwfg3p6wdeiq6y7zidxx3xtto4gmm2vwz42mzd6s4ixgvpgxyd.onion" OR destinationntdomain CONTAINS "uu2iggf5wq57dt6xanfdmwq3rvxqorkb43bh2eacj2vz22nvwewlxcyd.onion" OR destinationntdomain CONTAINS "wauby5e7m6zf2eb7rfn7nqm3diuaehdu6tfay4janiktgx33wjfifkyd.onion" OR destinationntdomain CONTAINS "wf4uxi6izbqppzb4fvg4sq7sm5t5w5xl5v5pkxpguwpr4aci7hvzboid.onion" OR destinationntdomain CONTAINS "wjd2t2lzbgb7g7bcenpl2r2bsobkbwwpooqrmiwqjkpktm5p5seifcid.onion" OR destinationntdomain CONTAINS "xjdhr5is3qsw2cyekdxo57gchpxusvkko3265x2lmmn4g6fnlimdngqd.onion" OR destinationntdomain CONTAINS "yjh2bktujnqkj7u7g7hxotck6sfhjuf7crhc4vcf6ewpa7swoqalfkid.onion" OR destinationntdomain CONTAINS "yqs4gu4c2kb5ybgcigkl5gcsqbjuk5n2su2pozpsw4ojav2op5gddkid.onion")
index=activity AND rg_functionality="Endpoint management systems" AND requesturl NOT NULL AND (requesturl CONTAINS "24rq2pvihkrct6pxl6zy3p36gt2wd6sn6izoz7ntlivxvbuu5ei3xwad.onion" OR requesturl CONTAINS "3crj2ylhdffpf2yik4bb2hn32xey2bdhcpykxfezb4sq53eelglp3sqd.onion" OR requesturl CONTAINS "44yd2dxmm5xuo7dsivwkf2fqyqmfsqkt5nkxdlgwpnbr57sca56j74yd.onion" OR requesturl CONTAINS "acuy77ahadd6g5rw2pxsuejskirjmxaoj37ck7fvj4h4kc36a3uwirqd.onion" OR requesturl CONTAINS "bbknilviexavjvnwdtdqmhsexqcokfwgdqthxexvuwzlwgaggddaahxn.onion" OR requesturl CONTAINS "bvxx2p6hfttpiyntpuf72axcvaakjbz5zgiea7iklkrb2s6wrdrv4lid.onion" OR requesturl CONTAINS "c3uybau64lj32ty3z3sxgchnrmg72bvbpua66mcvydcjpgrbv2r6huyd.onion" OR requesturl CONTAINS "drv4lids5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR requesturl CONTAINS "fend7yhjoeam7b4fp4rj5oobphuvmhjbovhtvporusjex4nyoiamgdyd.onion" OR requesturl CONTAINS "m5idjwoj4q5yrmo5xbnvhoqqrdld6pruxx5qjvr6gfnnmao4xiniwzid.onion" OR requesturl CONTAINS "m7wajjzas7eotqw4b6k4aei5q4zijdal3spsec7wsfmf2xqjhmydjiyd.onion" OR requesturl CONTAINS "npnsktlnofwisqvd3e6tpslinkypajmh5jctyjivuf6jza3syw2v6cid.onion" OR requesturl CONTAINS "pcjvbrttcy2s3gqpgwklgsco4u4bskr5xhvdzs4pzqqcrfllkwe437id.onion" OR requesturl CONTAINS "s4ofksblif7bmo7sp64f56gij6xzh7sznvrn46m6daup2hwdmwbiabqd.onion" OR requesturl CONTAINS "s5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR requesturl CONTAINS "sourt33xcdoyg4jcrh33qvx6cjoneowihsfrbuqldkrrili54gdvryyd.onion" OR requesturl CONTAINS "syd5mtjvcqxvnnkeqjjkdm2oz2jzl6swrfhnvliiemxtgiqvcbm26nyd.onion" OR requesturl CONTAINS "tybocptxypx42ngrcqldrgas536syipwotmfnbjpwc5fpxth4xf4faqd.onion" OR requesturl CONTAINS "u7kteztwfg3p6wdeiq6y7zidxx3xtto4gmm2vwz42mzd6s4ixgvpgxyd.onion" OR requesturl CONTAINS "uu2iggf5wq57dt6xanfdmwq3rvxqorkb43bh2eacj2vz22nvwewlxcyd.onion" OR requesturl CONTAINS "wauby5e7m6zf2eb7rfn7nqm3diuaehdu6tfay4janiktgx33wjfifkyd.onion" OR requesturl CONTAINS "wf4uxi6izbqppzb4fvg4sq7sm5t5w5xl5v5pkxpguwpr4aci7hvzboid.onion" OR requesturl CONTAINS "wjd2t2lzbgb7g7bcenpl2r2bsobkbwwpooqrmiwqjkpktm5p5seifcid.onion" OR requesturl CONTAINS "xjdhr5is3qsw2cyekdxo57gchpxusvkko3265x2lmmn4g6fnlimdngqd.onion" OR requesturl CONTAINS "yjh2bktujnqkj7u7g7hxotck6sfhjuf7crhc4vcf6ewpa7swoqalfkid.onion" OR requesturl CONTAINS "yqs4gu4c2kb5ybgcigkl5gcsqbjuk5n2su2pozpsw4ojav2op5gddkid.onion")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "24rq2pvihkrct6pxl6zy3p36gt2wd6sn6izoz7ntlivxvbuu5ei3xwad.onion" OR destinationhostname CONTAINS "3crj2ylhdffpf2yik4bb2hn32xey2bdhcpykxfezb4sq53eelglp3sqd.onion" OR destinationhostname CONTAINS "44yd2dxmm5xuo7dsivwkf2fqyqmfsqkt5nkxdlgwpnbr57sca56j74yd.onion" OR destinationhostname CONTAINS "acuy77ahadd6g5rw2pxsuejskirjmxaoj37ck7fvj4h4kc36a3uwirqd.onion" OR destinationhostname CONTAINS "bbknilviexavjvnwdtdqmhsexqcokfwgdqthxexvuwzlwgaggddaahxn.onion" OR destinationhostname CONTAINS "bvxx2p6hfttpiyntpuf72axcvaakjbz5zgiea7iklkrb2s6wrdrv4lid.onion" OR destinationhostname CONTAINS "c3uybau64lj32ty3z3sxgchnrmg72bvbpua66mcvydcjpgrbv2r6huyd.onion" OR destinationhostname CONTAINS "drv4lids5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR destinationhostname CONTAINS "fend7yhjoeam7b4fp4rj5oobphuvmhjbovhtvporusjex4nyoiamgdyd.onion" OR destinationhostname CONTAINS "m5idjwoj4q5yrmo5xbnvhoqqrdld6pruxx5qjvr6gfnnmao4xiniwzid.onion" OR destinationhostname CONTAINS "m7wajjzas7eotqw4b6k4aei5q4zijdal3spsec7wsfmf2xqjhmydjiyd.onion" OR destinationhostname CONTAINS "npnsktlnofwisqvd3e6tpslinkypajmh5jctyjivuf6jza3syw2v6cid.onion" OR destinationhostname CONTAINS "pcjvbrttcy2s3gqpgwklgsco4u4bskr5xhvdzs4pzqqcrfllkwe437id.onion" OR destinationhostname CONTAINS "s4ofksblif7bmo7sp64f56gij6xzh7sznvrn46m6daup2hwdmwbiabqd.onion" OR destinationhostname CONTAINS "s5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR destinationhostname CONTAINS "sourt33xcdoyg4jcrh33qvx6cjoneowihsfrbuqldkrrili54gdvryyd.onion" OR destinationhostname CONTAINS "syd5mtjvcqxvnnkeqjjkdm2oz2jzl6swrfhnvliiemxtgiqvcbm26nyd.onion" OR destinationhostname CONTAINS "tybocptxypx42ngrcqldrgas536syipwotmfnbjpwc5fpxth4xf4faqd.onion" OR destinationhostname CONTAINS "u7kteztwfg3p6wdeiq6y7zidxx3xtto4gmm2vwz42mzd6s4ixgvpgxyd.onion" OR destinationhostname CONTAINS "uu2iggf5wq57dt6xanfdmwq3rvxqorkb43bh2eacj2vz22nvwewlxcyd.onion" OR destinationhostname CONTAINS "wauby5e7m6zf2eb7rfn7nqm3diuaehdu6tfay4janiktgx33wjfifkyd.onion" OR destinationhostname CONTAINS "wf4uxi6izbqppzb4fvg4sq7sm5t5w5xl5v5pkxpguwpr4aci7hvzboid.onion" OR destinationhostname CONTAINS "wjd2t2lzbgb7g7bcenpl2r2bsobkbwwpooqrmiwqjkpktm5p5seifcid.onion" OR destinationhostname CONTAINS "xjdhr5is3qsw2cyekdxo57gchpxusvkko3265x2lmmn4g6fnlimdngqd.onion" OR destinationhostname CONTAINS "yjh2bktujnqkj7u7g7hxotck6sfhjuf7crhc4vcf6ewpa7swoqalfkid.onion" OR destinationhostname CONTAINS "yqs4gu4c2kb5ybgcigkl5gcsqbjuk5n2su2pozpsw4ojav2op5gddkid.onion")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "24rq2pvihkrct6pxl6zy3p36gt2wd6sn6izoz7ntlivxvbuu5ei3xwad.onion" OR sourcentdomain CONTAINS "3crj2ylhdffpf2yik4bb2hn32xey2bdhcpykxfezb4sq53eelglp3sqd.onion" OR sourcentdomain CONTAINS "44yd2dxmm5xuo7dsivwkf2fqyqmfsqkt5nkxdlgwpnbr57sca56j74yd.onion" OR sourcentdomain CONTAINS "acuy77ahadd6g5rw2pxsuejskirjmxaoj37ck7fvj4h4kc36a3uwirqd.onion" OR sourcentdomain CONTAINS "bbknilviexavjvnwdtdqmhsexqcokfwgdqthxexvuwzlwgaggddaahxn.onion" OR sourcentdomain CONTAINS "bvxx2p6hfttpiyntpuf72axcvaakjbz5zgiea7iklkrb2s6wrdrv4lid.onion" OR sourcentdomain CONTAINS "c3uybau64lj32ty3z3sxgchnrmg72bvbpua66mcvydcjpgrbv2r6huyd.onion" OR sourcentdomain CONTAINS "drv4lids5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR sourcentdomain CONTAINS "fend7yhjoeam7b4fp4rj5oobphuvmhjbovhtvporusjex4nyoiamgdyd.onion" OR sourcentdomain CONTAINS "m5idjwoj4q5yrmo5xbnvhoqqrdld6pruxx5qjvr6gfnnmao4xiniwzid.onion" OR sourcentdomain CONTAINS "m7wajjzas7eotqw4b6k4aei5q4zijdal3spsec7wsfmf2xqjhmydjiyd.onion" OR sourcentdomain CONTAINS "npnsktlnofwisqvd3e6tpslinkypajmh5jctyjivuf6jza3syw2v6cid.onion" OR sourcentdomain CONTAINS "pcjvbrttcy2s3gqpgwklgsco4u4bskr5xhvdzs4pzqqcrfllkwe437id.onion" OR sourcentdomain CONTAINS "s4ofksblif7bmo7sp64f56gij6xzh7sznvrn46m6daup2hwdmwbiabqd.onion" OR sourcentdomain CONTAINS "s5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR sourcentdomain CONTAINS "sourt33xcdoyg4jcrh33qvx6cjoneowihsfrbuqldkrrili54gdvryyd.onion" OR sourcentdomain CONTAINS "syd5mtjvcqxvnnkeqjjkdm2oz2jzl6swrfhnvliiemxtgiqvcbm26nyd.onion" OR sourcentdomain CONTAINS "tybocptxypx42ngrcqldrgas536syipwotmfnbjpwc5fpxth4xf4faqd.onion" OR sourcentdomain CONTAINS "u7kteztwfg3p6wdeiq6y7zidxx3xtto4gmm2vwz42mzd6s4ixgvpgxyd.onion" OR sourcentdomain CONTAINS "uu2iggf5wq57dt6xanfdmwq3rvxqorkb43bh2eacj2vz22nvwewlxcyd.onion" OR sourcentdomain CONTAINS "wauby5e7m6zf2eb7rfn7nqm3diuaehdu6tfay4janiktgx33wjfifkyd.onion" OR sourcentdomain CONTAINS "wf4uxi6izbqppzb4fvg4sq7sm5t5w5xl5v5pkxpguwpr4aci7hvzboid.onion" OR sourcentdomain CONTAINS "wjd2t2lzbgb7g7bcenpl2r2bsobkbwwpooqrmiwqjkpktm5p5seifcid.onion" OR sourcentdomain CONTAINS "xjdhr5is3qsw2cyekdxo57gchpxusvkko3265x2lmmn4g6fnlimdngqd.onion" OR sourcentdomain CONTAINS "yjh2bktujnqkj7u7g7hxotck6sfhjuf7crhc4vcf6ewpa7swoqalfkid.onion" OR sourcentdomain CONTAINS "yqs4gu4c2kb5ybgcigkl5gcsqbjuk5n2su2pozpsw4ojav2op5gddkid.onion")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "24rq2pvihkrct6pxl6zy3p36gt2wd6sn6izoz7ntlivxvbuu5ei3xwad.onion" OR sourcehostname CONTAINS "3crj2ylhdffpf2yik4bb2hn32xey2bdhcpykxfezb4sq53eelglp3sqd.onion" OR sourcehostname CONTAINS "44yd2dxmm5xuo7dsivwkf2fqyqmfsqkt5nkxdlgwpnbr57sca56j74yd.onion" OR sourcehostname CONTAINS "acuy77ahadd6g5rw2pxsuejskirjmxaoj37ck7fvj4h4kc36a3uwirqd.onion" OR sourcehostname CONTAINS "bbknilviexavjvnwdtdqmhsexqcokfwgdqthxexvuwzlwgaggddaahxn.onion" OR sourcehostname CONTAINS "bvxx2p6hfttpiyntpuf72axcvaakjbz5zgiea7iklkrb2s6wrdrv4lid.onion" OR sourcehostname CONTAINS "c3uybau64lj32ty3z3sxgchnrmg72bvbpua66mcvydcjpgrbv2r6huyd.onion" OR sourcehostname CONTAINS "drv4lids5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR sourcehostname CONTAINS "fend7yhjoeam7b4fp4rj5oobphuvmhjbovhtvporusjex4nyoiamgdyd.onion" OR sourcehostname CONTAINS "m5idjwoj4q5yrmo5xbnvhoqqrdld6pruxx5qjvr6gfnnmao4xiniwzid.onion" OR sourcehostname CONTAINS "m7wajjzas7eotqw4b6k4aei5q4zijdal3spsec7wsfmf2xqjhmydjiyd.onion" OR sourcehostname CONTAINS "npnsktlnofwisqvd3e6tpslinkypajmh5jctyjivuf6jza3syw2v6cid.onion" OR sourcehostname CONTAINS "pcjvbrttcy2s3gqpgwklgsco4u4bskr5xhvdzs4pzqqcrfllkwe437id.onion" OR sourcehostname CONTAINS "s4ofksblif7bmo7sp64f56gij6xzh7sznvrn46m6daup2hwdmwbiabqd.onion" OR sourcehostname CONTAINS "s5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR sourcehostname CONTAINS "sourt33xcdoyg4jcrh33qvx6cjoneowihsfrbuqldkrrili54gdvryyd.onion" OR sourcehostname CONTAINS "syd5mtjvcqxvnnkeqjjkdm2oz2jzl6swrfhnvliiemxtgiqvcbm26nyd.onion" OR sourcehostname CONTAINS "tybocptxypx42ngrcqldrgas536syipwotmfnbjpwc5fpxth4xf4faqd.onion" OR sourcehostname CONTAINS "u7kteztwfg3p6wdeiq6y7zidxx3xtto4gmm2vwz42mzd6s4ixgvpgxyd.onion" OR sourcehostname CONTAINS "uu2iggf5wq57dt6xanfdmwq3rvxqorkb43bh2eacj2vz22nvwewlxcyd.onion" OR sourcehostname CONTAINS "wauby5e7m6zf2eb7rfn7nqm3diuaehdu6tfay4janiktgx33wjfifkyd.onion" OR sourcehostname CONTAINS "wf4uxi6izbqppzb4fvg4sq7sm5t5w5xl5v5pkxpguwpr4aci7hvzboid.onion" OR sourcehostname CONTAINS "wjd2t2lzbgb7g7bcenpl2r2bsobkbwwpooqrmiwqjkpktm5p5seifcid.onion" OR sourcehostname CONTAINS "xjdhr5is3qsw2cyekdxo57gchpxusvkko3265x2lmmn4g6fnlimdngqd.onion" OR sourcehostname CONTAINS "yjh2bktujnqkj7u7g7hxotck6sfhjuf7crhc4vcf6ewpa7swoqalfkid.onion" OR sourcehostname CONTAINS "yqs4gu4c2kb5ybgcigkl5gcsqbjuk5n2su2pozpsw4ojav2op5gddkid.onion")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "24rq2pvihkrct6pxl6zy3p36gt2wd6sn6izoz7ntlivxvbuu5ei3xwad.onion" OR destinationntdomain CONTAINS "3crj2ylhdffpf2yik4bb2hn32xey2bdhcpykxfezb4sq53eelglp3sqd.onion" OR destinationntdomain CONTAINS "44yd2dxmm5xuo7dsivwkf2fqyqmfsqkt5nkxdlgwpnbr57sca56j74yd.onion" OR destinationntdomain CONTAINS "acuy77ahadd6g5rw2pxsuejskirjmxaoj37ck7fvj4h4kc36a3uwirqd.onion" OR destinationntdomain CONTAINS "bbknilviexavjvnwdtdqmhsexqcokfwgdqthxexvuwzlwgaggddaahxn.onion" OR destinationntdomain CONTAINS "bvxx2p6hfttpiyntpuf72axcvaakjbz5zgiea7iklkrb2s6wrdrv4lid.onion" OR destinationntdomain CONTAINS "c3uybau64lj32ty3z3sxgchnrmg72bvbpua66mcvydcjpgrbv2r6huyd.onion" OR destinationntdomain CONTAINS "drv4lids5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR destinationntdomain CONTAINS "fend7yhjoeam7b4fp4rj5oobphuvmhjbovhtvporusjex4nyoiamgdyd.onion" OR destinationntdomain CONTAINS "m5idjwoj4q5yrmo5xbnvhoqqrdld6pruxx5qjvr6gfnnmao4xiniwzid.onion" OR destinationntdomain CONTAINS "m7wajjzas7eotqw4b6k4aei5q4zijdal3spsec7wsfmf2xqjhmydjiyd.onion" OR destinationntdomain CONTAINS "npnsktlnofwisqvd3e6tpslinkypajmh5jctyjivuf6jza3syw2v6cid.onion" OR destinationntdomain CONTAINS "pcjvbrttcy2s3gqpgwklgsco4u4bskr5xhvdzs4pzqqcrfllkwe437id.onion" OR destinationntdomain CONTAINS "s4ofksblif7bmo7sp64f56gij6xzh7sznvrn46m6daup2hwdmwbiabqd.onion" OR destinationntdomain CONTAINS "s5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR destinationntdomain CONTAINS "sourt33xcdoyg4jcrh33qvx6cjoneowihsfrbuqldkrrili54gdvryyd.onion" OR destinationntdomain CONTAINS "syd5mtjvcqxvnnkeqjjkdm2oz2jzl6swrfhnvliiemxtgiqvcbm26nyd.onion" OR destinationntdomain CONTAINS "tybocptxypx42ngrcqldrgas536syipwotmfnbjpwc5fpxth4xf4faqd.onion" OR destinationntdomain CONTAINS "u7kteztwfg3p6wdeiq6y7zidxx3xtto4gmm2vwz42mzd6s4ixgvpgxyd.onion" OR destinationntdomain CONTAINS "uu2iggf5wq57dt6xanfdmwq3rvxqorkb43bh2eacj2vz22nvwewlxcyd.onion" OR destinationntdomain CONTAINS "wauby5e7m6zf2eb7rfn7nqm3diuaehdu6tfay4janiktgx33wjfifkyd.onion" OR destinationntdomain CONTAINS "wf4uxi6izbqppzb4fvg4sq7sm5t5w5xl5v5pkxpguwpr4aci7hvzboid.onion" OR destinationntdomain CONTAINS "wjd2t2lzbgb7g7bcenpl2r2bsobkbwwpooqrmiwqjkpktm5p5seifcid.onion" OR destinationntdomain CONTAINS "xjdhr5is3qsw2cyekdxo57gchpxusvkko3265x2lmmn4g6fnlimdngqd.onion" OR destinationntdomain CONTAINS "yjh2bktujnqkj7u7g7hxotck6sfhjuf7crhc4vcf6ewpa7swoqalfkid.onion" OR destinationntdomain CONTAINS "yqs4gu4c2kb5ybgcigkl5gcsqbjuk5n2su2pozpsw4ojav2op5gddkid.onion")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND (requesturl CONTAINS "24rq2pvihkrct6pxl6zy3p36gt2wd6sn6izoz7ntlivxvbuu5ei3xwad.onion" OR requesturl CONTAINS "3crj2ylhdffpf2yik4bb2hn32xey2bdhcpykxfezb4sq53eelglp3sqd.onion" OR requesturl CONTAINS "44yd2dxmm5xuo7dsivwkf2fqyqmfsqkt5nkxdlgwpnbr57sca56j74yd.onion" OR requesturl CONTAINS "acuy77ahadd6g5rw2pxsuejskirjmxaoj37ck7fvj4h4kc36a3uwirqd.onion" OR requesturl CONTAINS "bbknilviexavjvnwdtdqmhsexqcokfwgdqthxexvuwzlwgaggddaahxn.onion" OR requesturl CONTAINS "bvxx2p6hfttpiyntpuf72axcvaakjbz5zgiea7iklkrb2s6wrdrv4lid.onion" OR requesturl CONTAINS "c3uybau64lj32ty3z3sxgchnrmg72bvbpua66mcvydcjpgrbv2r6huyd.onion" OR requesturl CONTAINS "drv4lids5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR requesturl CONTAINS "fend7yhjoeam7b4fp4rj5oobphuvmhjbovhtvporusjex4nyoiamgdyd.onion" OR requesturl CONTAINS "m5idjwoj4q5yrmo5xbnvhoqqrdld6pruxx5qjvr6gfnnmao4xiniwzid.onion" OR requesturl CONTAINS "m7wajjzas7eotqw4b6k4aei5q4zijdal3spsec7wsfmf2xqjhmydjiyd.onion" OR requesturl CONTAINS "npnsktlnofwisqvd3e6tpslinkypajmh5jctyjivuf6jza3syw2v6cid.onion" OR requesturl CONTAINS "pcjvbrttcy2s3gqpgwklgsco4u4bskr5xhvdzs4pzqqcrfllkwe437id.onion" OR requesturl CONTAINS "s4ofksblif7bmo7sp64f56gij6xzh7sznvrn46m6daup2hwdmwbiabqd.onion" OR requesturl CONTAINS "s5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR requesturl CONTAINS "sourt33xcdoyg4jcrh33qvx6cjoneowihsfrbuqldkrrili54gdvryyd.onion" OR requesturl CONTAINS "syd5mtjvcqxvnnkeqjjkdm2oz2jzl6swrfhnvliiemxtgiqvcbm26nyd.onion" OR requesturl CONTAINS "tybocptxypx42ngrcqldrgas536syipwotmfnbjpwc5fpxth4xf4faqd.onion" OR requesturl CONTAINS "u7kteztwfg3p6wdeiq6y7zidxx3xtto4gmm2vwz42mzd6s4ixgvpgxyd.onion" OR requesturl CONTAINS "uu2iggf5wq57dt6xanfdmwq3rvxqorkb43bh2eacj2vz22nvwewlxcyd.onion" OR requesturl CONTAINS "wauby5e7m6zf2eb7rfn7nqm3diuaehdu6tfay4janiktgx33wjfifkyd.onion" OR requesturl CONTAINS "wf4uxi6izbqppzb4fvg4sq7sm5t5w5xl5v5pkxpguwpr4aci7hvzboid.onion" OR requesturl CONTAINS "wjd2t2lzbgb7g7bcenpl2r2bsobkbwwpooqrmiwqjkpktm5p5seifcid.onion" OR requesturl CONTAINS "xjdhr5is3qsw2cyekdxo57gchpxusvkko3265x2lmmn4g6fnlimdngqd.onion" OR requesturl CONTAINS "yjh2bktujnqkj7u7g7hxotck6sfhjuf7crhc4vcf6ewpa7swoqalfkid.onion" OR requesturl CONTAINS "yqs4gu4c2kb5ybgcigkl5gcsqbjuk5n2su2pozpsw4ojav2op5gddkid.onion")
index=activity AND rg_functionality="Cloud Application Audit" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "24rq2pvihkrct6pxl6zy3p36gt2wd6sn6izoz7ntlivxvbuu5ei3xwad.onion" OR destinationhostname CONTAINS "3crj2ylhdffpf2yik4bb2hn32xey2bdhcpykxfezb4sq53eelglp3sqd.onion" OR destinationhostname CONTAINS "44yd2dxmm5xuo7dsivwkf2fqyqmfsqkt5nkxdlgwpnbr57sca56j74yd.onion" OR destinationhostname CONTAINS "acuy77ahadd6g5rw2pxsuejskirjmxaoj37ck7fvj4h4kc36a3uwirqd.onion" OR destinationhostname CONTAINS "bbknilviexavjvnwdtdqmhsexqcokfwgdqthxexvuwzlwgaggddaahxn.onion" OR destinationhostname CONTAINS "bvxx2p6hfttpiyntpuf72axcvaakjbz5zgiea7iklkrb2s6wrdrv4lid.onion" OR destinationhostname CONTAINS "c3uybau64lj32ty3z3sxgchnrmg72bvbpua66mcvydcjpgrbv2r6huyd.onion" OR destinationhostname CONTAINS "drv4lids5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR destinationhostname CONTAINS "fend7yhjoeam7b4fp4rj5oobphuvmhjbovhtvporusjex4nyoiamgdyd.onion" OR destinationhostname CONTAINS "m5idjwoj4q5yrmo5xbnvhoqqrdld6pruxx5qjvr6gfnnmao4xiniwzid.onion" OR destinationhostname CONTAINS "m7wajjzas7eotqw4b6k4aei5q4zijdal3spsec7wsfmf2xqjhmydjiyd.onion" OR destinationhostname CONTAINS "npnsktlnofwisqvd3e6tpslinkypajmh5jctyjivuf6jza3syw2v6cid.onion" OR destinationhostname CONTAINS "pcjvbrttcy2s3gqpgwklgsco4u4bskr5xhvdzs4pzqqcrfllkwe437id.onion" OR destinationhostname CONTAINS "s4ofksblif7bmo7sp64f56gij6xzh7sznvrn46m6daup2hwdmwbiabqd.onion" OR destinationhostname CONTAINS "s5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR destinationhostname CONTAINS "sourt33xcdoyg4jcrh33qvx6cjoneowihsfrbuqldkrrili54gdvryyd.onion" OR destinationhostname CONTAINS "syd5mtjvcqxvnnkeqjjkdm2oz2jzl6swrfhnvliiemxtgiqvcbm26nyd.onion" OR destinationhostname CONTAINS "tybocptxypx42ngrcqldrgas536syipwotmfnbjpwc5fpxth4xf4faqd.onion" OR destinationhostname CONTAINS "u7kteztwfg3p6wdeiq6y7zidxx3xtto4gmm2vwz42mzd6s4ixgvpgxyd.onion" OR destinationhostname CONTAINS "uu2iggf5wq57dt6xanfdmwq3rvxqorkb43bh2eacj2vz22nvwewlxcyd.onion" OR destinationhostname CONTAINS "wauby5e7m6zf2eb7rfn7nqm3diuaehdu6tfay4janiktgx33wjfifkyd.onion" OR destinationhostname CONTAINS "wf4uxi6izbqppzb4fvg4sq7sm5t5w5xl5v5pkxpguwpr4aci7hvzboid.onion" OR destinationhostname CONTAINS "wjd2t2lzbgb7g7bcenpl2r2bsobkbwwpooqrmiwqjkpktm5p5seifcid.onion" OR destinationhostname CONTAINS "xjdhr5is3qsw2cyekdxo57gchpxusvkko3265x2lmmn4g6fnlimdngqd.onion" OR destinationhostname CONTAINS "yjh2bktujnqkj7u7g7hxotck6sfhjuf7crhc4vcf6ewpa7swoqalfkid.onion" OR destinationhostname CONTAINS "yqs4gu4c2kb5ybgcigkl5gcsqbjuk5n2su2pozpsw4ojav2op5gddkid.onion")
index=activity AND rg_functionality="Cloud Application Audit" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "24rq2pvihkrct6pxl6zy3p36gt2wd6sn6izoz7ntlivxvbuu5ei3xwad.onion" OR sourcentdomain CONTAINS "3crj2ylhdffpf2yik4bb2hn32xey2bdhcpykxfezb4sq53eelglp3sqd.onion" OR sourcentdomain CONTAINS "44yd2dxmm5xuo7dsivwkf2fqyqmfsqkt5nkxdlgwpnbr57sca56j74yd.onion" OR sourcentdomain CONTAINS "acuy77ahadd6g5rw2pxsuejskirjmxaoj37ck7fvj4h4kc36a3uwirqd.onion" OR sourcentdomain CONTAINS "bbknilviexavjvnwdtdqmhsexqcokfwgdqthxexvuwzlwgaggddaahxn.onion" OR sourcentdomain CONTAINS "bvxx2p6hfttpiyntpuf72axcvaakjbz5zgiea7iklkrb2s6wrdrv4lid.onion" OR sourcentdomain CONTAINS "c3uybau64lj32ty3z3sxgchnrmg72bvbpua66mcvydcjpgrbv2r6huyd.onion" OR sourcentdomain CONTAINS "drv4lids5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR sourcentdomain CONTAINS "fend7yhjoeam7b4fp4rj5oobphuvmhjbovhtvporusjex4nyoiamgdyd.onion" OR sourcentdomain CONTAINS "m5idjwoj4q5yrmo5xbnvhoqqrdld6pruxx5qjvr6gfnnmao4xiniwzid.onion" OR sourcentdomain CONTAINS "m7wajjzas7eotqw4b6k4aei5q4zijdal3spsec7wsfmf2xqjhmydjiyd.onion" OR sourcentdomain CONTAINS "npnsktlnofwisqvd3e6tpslinkypajmh5jctyjivuf6jza3syw2v6cid.onion" OR sourcentdomain CONTAINS "pcjvbrttcy2s3gqpgwklgsco4u4bskr5xhvdzs4pzqqcrfllkwe437id.onion" OR sourcentdomain CONTAINS "s4ofksblif7bmo7sp64f56gij6xzh7sznvrn46m6daup2hwdmwbiabqd.onion" OR sourcentdomain CONTAINS "s5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR sourcentdomain CONTAINS "sourt33xcdoyg4jcrh33qvx6cjoneowihsfrbuqldkrrili54gdvryyd.onion" OR sourcentdomain CONTAINS "syd5mtjvcqxvnnkeqjjkdm2oz2jzl6swrfhnvliiemxtgiqvcbm26nyd.onion" OR sourcentdomain CONTAINS "tybocptxypx42ngrcqldrgas536syipwotmfnbjpwc5fpxth4xf4faqd.onion" OR sourcentdomain CONTAINS "u7kteztwfg3p6wdeiq6y7zidxx3xtto4gmm2vwz42mzd6s4ixgvpgxyd.onion" OR sourcentdomain CONTAINS "uu2iggf5wq57dt6xanfdmwq3rvxqorkb43bh2eacj2vz22nvwewlxcyd.onion" OR sourcentdomain CONTAINS "wauby5e7m6zf2eb7rfn7nqm3diuaehdu6tfay4janiktgx33wjfifkyd.onion" OR sourcentdomain CONTAINS "wf4uxi6izbqppzb4fvg4sq7sm5t5w5xl5v5pkxpguwpr4aci7hvzboid.onion" OR sourcentdomain CONTAINS "wjd2t2lzbgb7g7bcenpl2r2bsobkbwwpooqrmiwqjkpktm5p5seifcid.onion" OR sourcentdomain CONTAINS "xjdhr5is3qsw2cyekdxo57gchpxusvkko3265x2lmmn4g6fnlimdngqd.onion" OR sourcentdomain CONTAINS "yjh2bktujnqkj7u7g7hxotck6sfhjuf7crhc4vcf6ewpa7swoqalfkid.onion" OR sourcentdomain CONTAINS "yqs4gu4c2kb5ybgcigkl5gcsqbjuk5n2su2pozpsw4ojav2op5gddkid.onion")
index=activity AND rg_functionality="Cloud Application Audit" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "24rq2pvihkrct6pxl6zy3p36gt2wd6sn6izoz7ntlivxvbuu5ei3xwad.onion" OR sourcehostname CONTAINS "3crj2ylhdffpf2yik4bb2hn32xey2bdhcpykxfezb4sq53eelglp3sqd.onion" OR sourcehostname CONTAINS "44yd2dxmm5xuo7dsivwkf2fqyqmfsqkt5nkxdlgwpnbr57sca56j74yd.onion" OR sourcehostname CONTAINS "acuy77ahadd6g5rw2pxsuejskirjmxaoj37ck7fvj4h4kc36a3uwirqd.onion" OR sourcehostname CONTAINS "bbknilviexavjvnwdtdqmhsexqcokfwgdqthxexvuwzlwgaggddaahxn.onion" OR sourcehostname CONTAINS "bvxx2p6hfttpiyntpuf72axcvaakjbz5zgiea7iklkrb2s6wrdrv4lid.onion" OR sourcehostname CONTAINS "c3uybau64lj32ty3z3sxgchnrmg72bvbpua66mcvydcjpgrbv2r6huyd.onion" OR sourcehostname CONTAINS "drv4lids5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR sourcehostname CONTAINS "fend7yhjoeam7b4fp4rj5oobphuvmhjbovhtvporusjex4nyoiamgdyd.onion" OR sourcehostname CONTAINS "m5idjwoj4q5yrmo5xbnvhoqqrdld6pruxx5qjvr6gfnnmao4xiniwzid.onion" OR sourcehostname CONTAINS "m7wajjzas7eotqw4b6k4aei5q4zijdal3spsec7wsfmf2xqjhmydjiyd.onion" OR sourcehostname CONTAINS "npnsktlnofwisqvd3e6tpslinkypajmh5jctyjivuf6jza3syw2v6cid.onion" OR sourcehostname CONTAINS "pcjvbrttcy2s3gqpgwklgsco4u4bskr5xhvdzs4pzqqcrfllkwe437id.onion" OR sourcehostname CONTAINS "s4ofksblif7bmo7sp64f56gij6xzh7sznvrn46m6daup2hwdmwbiabqd.onion" OR sourcehostname CONTAINS "s5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR sourcehostname CONTAINS "sourt33xcdoyg4jcrh33qvx6cjoneowihsfrbuqldkrrili54gdvryyd.onion" OR sourcehostname CONTAINS "syd5mtjvcqxvnnkeqjjkdm2oz2jzl6swrfhnvliiemxtgiqvcbm26nyd.onion" OR sourcehostname CONTAINS "tybocptxypx42ngrcqldrgas536syipwotmfnbjpwc5fpxth4xf4faqd.onion" OR sourcehostname CONTAINS "u7kteztwfg3p6wdeiq6y7zidxx3xtto4gmm2vwz42mzd6s4ixgvpgxyd.onion" OR sourcehostname CONTAINS "uu2iggf5wq57dt6xanfdmwq3rvxqorkb43bh2eacj2vz22nvwewlxcyd.onion" OR sourcehostname CONTAINS "wauby5e7m6zf2eb7rfn7nqm3diuaehdu6tfay4janiktgx33wjfifkyd.onion" OR sourcehostname CONTAINS "wf4uxi6izbqppzb4fvg4sq7sm5t5w5xl5v5pkxpguwpr4aci7hvzboid.onion" OR sourcehostname CONTAINS "wjd2t2lzbgb7g7bcenpl2r2bsobkbwwpooqrmiwqjkpktm5p5seifcid.onion" OR sourcehostname CONTAINS "xjdhr5is3qsw2cyekdxo57gchpxusvkko3265x2lmmn4g6fnlimdngqd.onion" OR sourcehostname CONTAINS "yjh2bktujnqkj7u7g7hxotck6sfhjuf7crhc4vcf6ewpa7swoqalfkid.onion" OR sourcehostname CONTAINS "yqs4gu4c2kb5ybgcigkl5gcsqbjuk5n2su2pozpsw4ojav2op5gddkid.onion")
index=activity AND rg_functionality="Cloud Application Audit" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "24rq2pvihkrct6pxl6zy3p36gt2wd6sn6izoz7ntlivxvbuu5ei3xwad.onion" OR destinationntdomain CONTAINS "3crj2ylhdffpf2yik4bb2hn32xey2bdhcpykxfezb4sq53eelglp3sqd.onion" OR destinationntdomain CONTAINS "44yd2dxmm5xuo7dsivwkf2fqyqmfsqkt5nkxdlgwpnbr57sca56j74yd.onion" OR destinationntdomain CONTAINS "acuy77ahadd6g5rw2pxsuejskirjmxaoj37ck7fvj4h4kc36a3uwirqd.onion" OR destinationntdomain CONTAINS "bbknilviexavjvnwdtdqmhsexqcokfwgdqthxexvuwzlwgaggddaahxn.onion" OR destinationntdomain CONTAINS "bvxx2p6hfttpiyntpuf72axcvaakjbz5zgiea7iklkrb2s6wrdrv4lid.onion" OR destinationntdomain CONTAINS "c3uybau64lj32ty3z3sxgchnrmg72bvbpua66mcvydcjpgrbv2r6huyd.onion" OR destinationntdomain CONTAINS "drv4lids5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR destinationntdomain CONTAINS "fend7yhjoeam7b4fp4rj5oobphuvmhjbovhtvporusjex4nyoiamgdyd.onion" OR destinationntdomain CONTAINS "m5idjwoj4q5yrmo5xbnvhoqqrdld6pruxx5qjvr6gfnnmao4xiniwzid.onion" OR destinationntdomain CONTAINS "m7wajjzas7eotqw4b6k4aei5q4zijdal3spsec7wsfmf2xqjhmydjiyd.onion" OR destinationntdomain CONTAINS "npnsktlnofwisqvd3e6tpslinkypajmh5jctyjivuf6jza3syw2v6cid.onion" OR destinationntdomain CONTAINS "pcjvbrttcy2s3gqpgwklgsco4u4bskr5xhvdzs4pzqqcrfllkwe437id.onion" OR destinationntdomain CONTAINS "s4ofksblif7bmo7sp64f56gij6xzh7sznvrn46m6daup2hwdmwbiabqd.onion" OR destinationntdomain CONTAINS "s5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR destinationntdomain CONTAINS "sourt33xcdoyg4jcrh33qvx6cjoneowihsfrbuqldkrrili54gdvryyd.onion" OR destinationntdomain CONTAINS "syd5mtjvcqxvnnkeqjjkdm2oz2jzl6swrfhnvliiemxtgiqvcbm26nyd.onion" OR destinationntdomain CONTAINS "tybocptxypx42ngrcqldrgas536syipwotmfnbjpwc5fpxth4xf4faqd.onion" OR destinationntdomain CONTAINS "u7kteztwfg3p6wdeiq6y7zidxx3xtto4gmm2vwz42mzd6s4ixgvpgxyd.onion" OR destinationntdomain CONTAINS "uu2iggf5wq57dt6xanfdmwq3rvxqorkb43bh2eacj2vz22nvwewlxcyd.onion" OR destinationntdomain CONTAINS "wauby5e7m6zf2eb7rfn7nqm3diuaehdu6tfay4janiktgx33wjfifkyd.onion" OR destinationntdomain CONTAINS "wf4uxi6izbqppzb4fvg4sq7sm5t5w5xl5v5pkxpguwpr4aci7hvzboid.onion" OR destinationntdomain CONTAINS "wjd2t2lzbgb7g7bcenpl2r2bsobkbwwpooqrmiwqjkpktm5p5seifcid.onion" OR destinationntdomain CONTAINS "xjdhr5is3qsw2cyekdxo57gchpxusvkko3265x2lmmn4g6fnlimdngqd.onion" OR destinationntdomain CONTAINS "yjh2bktujnqkj7u7g7hxotck6sfhjuf7crhc4vcf6ewpa7swoqalfkid.onion" OR destinationntdomain CONTAINS "yqs4gu4c2kb5ybgcigkl5gcsqbjuk5n2su2pozpsw4ojav2op5gddkid.onion")
index=activity AND rg_functionality="Cloud Application Audit" AND requesturl NOT NULL AND (requesturl CONTAINS "24rq2pvihkrct6pxl6zy3p36gt2wd6sn6izoz7ntlivxvbuu5ei3xwad.onion" OR requesturl CONTAINS "3crj2ylhdffpf2yik4bb2hn32xey2bdhcpykxfezb4sq53eelglp3sqd.onion" OR requesturl CONTAINS "44yd2dxmm5xuo7dsivwkf2fqyqmfsqkt5nkxdlgwpnbr57sca56j74yd.onion" OR requesturl CONTAINS "acuy77ahadd6g5rw2pxsuejskirjmxaoj37ck7fvj4h4kc36a3uwirqd.onion" OR requesturl CONTAINS "bbknilviexavjvnwdtdqmhsexqcokfwgdqthxexvuwzlwgaggddaahxn.onion" OR requesturl CONTAINS "bvxx2p6hfttpiyntpuf72axcvaakjbz5zgiea7iklkrb2s6wrdrv4lid.onion" OR requesturl CONTAINS "c3uybau64lj32ty3z3sxgchnrmg72bvbpua66mcvydcjpgrbv2r6huyd.onion" OR requesturl CONTAINS "drv4lids5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR requesturl CONTAINS "fend7yhjoeam7b4fp4rj5oobphuvmhjbovhtvporusjex4nyoiamgdyd.onion" OR requesturl CONTAINS "m5idjwoj4q5yrmo5xbnvhoqqrdld6pruxx5qjvr6gfnnmao4xiniwzid.onion" OR requesturl CONTAINS "m7wajjzas7eotqw4b6k4aei5q4zijdal3spsec7wsfmf2xqjhmydjiyd.onion" OR requesturl CONTAINS "npnsktlnofwisqvd3e6tpslinkypajmh5jctyjivuf6jza3syw2v6cid.onion" OR requesturl CONTAINS "pcjvbrttcy2s3gqpgwklgsco4u4bskr5xhvdzs4pzqqcrfllkwe437id.onion" OR requesturl CONTAINS "s4ofksblif7bmo7sp64f56gij6xzh7sznvrn46m6daup2hwdmwbiabqd.onion" OR requesturl CONTAINS "s5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR requesturl CONTAINS "sourt33xcdoyg4jcrh33qvx6cjoneowihsfrbuqldkrrili54gdvryyd.onion" OR requesturl CONTAINS "syd5mtjvcqxvnnkeqjjkdm2oz2jzl6swrfhnvliiemxtgiqvcbm26nyd.onion" OR requesturl CONTAINS "tybocptxypx42ngrcqldrgas536syipwotmfnbjpwc5fpxth4xf4faqd.onion" OR requesturl CONTAINS "u7kteztwfg3p6wdeiq6y7zidxx3xtto4gmm2vwz42mzd6s4ixgvpgxyd.onion" OR requesturl CONTAINS "uu2iggf5wq57dt6xanfdmwq3rvxqorkb43bh2eacj2vz22nvwewlxcyd.onion" OR requesturl CONTAINS "wauby5e7m6zf2eb7rfn7nqm3diuaehdu6tfay4janiktgx33wjfifkyd.onion" OR requesturl CONTAINS "wf4uxi6izbqppzb4fvg4sq7sm5t5w5xl5v5pkxpguwpr4aci7hvzboid.onion" OR requesturl CONTAINS "wjd2t2lzbgb7g7bcenpl2r2bsobkbwwpooqrmiwqjkpktm5p5seifcid.onion" OR requesturl CONTAINS "xjdhr5is3qsw2cyekdxo57gchpxusvkko3265x2lmmn4g6fnlimdngqd.onion" OR requesturl CONTAINS "yjh2bktujnqkj7u7g7hxotck6sfhjuf7crhc4vcf6ewpa7swoqalfkid.onion" OR requesturl CONTAINS "yqs4gu4c2kb5ybgcigkl5gcsqbjuk5n2su2pozpsw4ojav2op5gddkid.onion")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "24rq2pvihkrct6pxl6zy3p36gt2wd6sn6izoz7ntlivxvbuu5ei3xwad.onion" OR destinationhostname CONTAINS "3crj2ylhdffpf2yik4bb2hn32xey2bdhcpykxfezb4sq53eelglp3sqd.onion" OR destinationhostname CONTAINS "44yd2dxmm5xuo7dsivwkf2fqyqmfsqkt5nkxdlgwpnbr57sca56j74yd.onion" OR destinationhostname CONTAINS "acuy77ahadd6g5rw2pxsuejskirjmxaoj37ck7fvj4h4kc36a3uwirqd.onion" OR destinationhostname CONTAINS "bbknilviexavjvnwdtdqmhsexqcokfwgdqthxexvuwzlwgaggddaahxn.onion" OR destinationhostname CONTAINS "bvxx2p6hfttpiyntpuf72axcvaakjbz5zgiea7iklkrb2s6wrdrv4lid.onion" OR destinationhostname CONTAINS "c3uybau64lj32ty3z3sxgchnrmg72bvbpua66mcvydcjpgrbv2r6huyd.onion" OR destinationhostname CONTAINS "drv4lids5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR destinationhostname CONTAINS "fend7yhjoeam7b4fp4rj5oobphuvmhjbovhtvporusjex4nyoiamgdyd.onion" OR destinationhostname CONTAINS "m5idjwoj4q5yrmo5xbnvhoqqrdld6pruxx5qjvr6gfnnmao4xiniwzid.onion" OR destinationhostname CONTAINS "m7wajjzas7eotqw4b6k4aei5q4zijdal3spsec7wsfmf2xqjhmydjiyd.onion" OR destinationhostname CONTAINS "npnsktlnofwisqvd3e6tpslinkypajmh5jctyjivuf6jza3syw2v6cid.onion" OR destinationhostname CONTAINS "pcjvbrttcy2s3gqpgwklgsco4u4bskr5xhvdzs4pzqqcrfllkwe437id.onion" OR destinationhostname CONTAINS "s4ofksblif7bmo7sp64f56gij6xzh7sznvrn46m6daup2hwdmwbiabqd.onion" OR destinationhostname CONTAINS "s5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR destinationhostname CONTAINS "sourt33xcdoyg4jcrh33qvx6cjoneowihsfrbuqldkrrili54gdvryyd.onion" OR destinationhostname CONTAINS "syd5mtjvcqxvnnkeqjjkdm2oz2jzl6swrfhnvliiemxtgiqvcbm26nyd.onion" OR destinationhostname CONTAINS "tybocptxypx42ngrcqldrgas536syipwotmfnbjpwc5fpxth4xf4faqd.onion" OR destinationhostname CONTAINS "u7kteztwfg3p6wdeiq6y7zidxx3xtto4gmm2vwz42mzd6s4ixgvpgxyd.onion" OR destinationhostname CONTAINS "uu2iggf5wq57dt6xanfdmwq3rvxqorkb43bh2eacj2vz22nvwewlxcyd.onion" OR destinationhostname CONTAINS "wauby5e7m6zf2eb7rfn7nqm3diuaehdu6tfay4janiktgx33wjfifkyd.onion" OR destinationhostname CONTAINS "wf4uxi6izbqppzb4fvg4sq7sm5t5w5xl5v5pkxpguwpr4aci7hvzboid.onion" OR destinationhostname CONTAINS "wjd2t2lzbgb7g7bcenpl2r2bsobkbwwpooqrmiwqjkpktm5p5seifcid.onion" OR destinationhostname CONTAINS "xjdhr5is3qsw2cyekdxo57gchpxusvkko3265x2lmmn4g6fnlimdngqd.onion" OR destinationhostname CONTAINS "yjh2bktujnqkj7u7g7hxotck6sfhjuf7crhc4vcf6ewpa7swoqalfkid.onion" OR destinationhostname CONTAINS "yqs4gu4c2kb5ybgcigkl5gcsqbjuk5n2su2pozpsw4ojav2op5gddkid.onion")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "24rq2pvihkrct6pxl6zy3p36gt2wd6sn6izoz7ntlivxvbuu5ei3xwad.onion" OR sourcentdomain CONTAINS "3crj2ylhdffpf2yik4bb2hn32xey2bdhcpykxfezb4sq53eelglp3sqd.onion" OR sourcentdomain CONTAINS "44yd2dxmm5xuo7dsivwkf2fqyqmfsqkt5nkxdlgwpnbr57sca56j74yd.onion" OR sourcentdomain CONTAINS "acuy77ahadd6g5rw2pxsuejskirjmxaoj37ck7fvj4h4kc36a3uwirqd.onion" OR sourcentdomain CONTAINS "bbknilviexavjvnwdtdqmhsexqcokfwgdqthxexvuwzlwgaggddaahxn.onion" OR sourcentdomain CONTAINS "bvxx2p6hfttpiyntpuf72axcvaakjbz5zgiea7iklkrb2s6wrdrv4lid.onion" OR sourcentdomain CONTAINS "c3uybau64lj32ty3z3sxgchnrmg72bvbpua66mcvydcjpgrbv2r6huyd.onion" OR sourcentdomain CONTAINS "drv4lids5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR sourcentdomain CONTAINS "fend7yhjoeam7b4fp4rj5oobphuvmhjbovhtvporusjex4nyoiamgdyd.onion" OR sourcentdomain CONTAINS "m5idjwoj4q5yrmo5xbnvhoqqrdld6pruxx5qjvr6gfnnmao4xiniwzid.onion" OR sourcentdomain CONTAINS "m7wajjzas7eotqw4b6k4aei5q4zijdal3spsec7wsfmf2xqjhmydjiyd.onion" OR sourcentdomain CONTAINS "npnsktlnofwisqvd3e6tpslinkypajmh5jctyjivuf6jza3syw2v6cid.onion" OR sourcentdomain CONTAINS "pcjvbrttcy2s3gqpgwklgsco4u4bskr5xhvdzs4pzqqcrfllkwe437id.onion" OR sourcentdomain CONTAINS "s4ofksblif7bmo7sp64f56gij6xzh7sznvrn46m6daup2hwdmwbiabqd.onion" OR sourcentdomain CONTAINS "s5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR sourcentdomain CONTAINS "sourt33xcdoyg4jcrh33qvx6cjoneowihsfrbuqldkrrili54gdvryyd.onion" OR sourcentdomain CONTAINS "syd5mtjvcqxvnnkeqjjkdm2oz2jzl6swrfhnvliiemxtgiqvcbm26nyd.onion" OR sourcentdomain CONTAINS "tybocptxypx42ngrcqldrgas536syipwotmfnbjpwc5fpxth4xf4faqd.onion" OR sourcentdomain CONTAINS "u7kteztwfg3p6wdeiq6y7zidxx3xtto4gmm2vwz42mzd6s4ixgvpgxyd.onion" OR sourcentdomain CONTAINS "uu2iggf5wq57dt6xanfdmwq3rvxqorkb43bh2eacj2vz22nvwewlxcyd.onion" OR sourcentdomain CONTAINS "wauby5e7m6zf2eb7rfn7nqm3diuaehdu6tfay4janiktgx33wjfifkyd.onion" OR sourcentdomain CONTAINS "wf4uxi6izbqppzb4fvg4sq7sm5t5w5xl5v5pkxpguwpr4aci7hvzboid.onion" OR sourcentdomain CONTAINS "wjd2t2lzbgb7g7bcenpl2r2bsobkbwwpooqrmiwqjkpktm5p5seifcid.onion" OR sourcentdomain CONTAINS "xjdhr5is3qsw2cyekdxo57gchpxusvkko3265x2lmmn4g6fnlimdngqd.onion" OR sourcentdomain CONTAINS "yjh2bktujnqkj7u7g7hxotck6sfhjuf7crhc4vcf6ewpa7swoqalfkid.onion" OR sourcentdomain CONTAINS "yqs4gu4c2kb5ybgcigkl5gcsqbjuk5n2su2pozpsw4ojav2op5gddkid.onion")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "24rq2pvihkrct6pxl6zy3p36gt2wd6sn6izoz7ntlivxvbuu5ei3xwad.onion" OR sourcehostname CONTAINS "3crj2ylhdffpf2yik4bb2hn32xey2bdhcpykxfezb4sq53eelglp3sqd.onion" OR sourcehostname CONTAINS "44yd2dxmm5xuo7dsivwkf2fqyqmfsqkt5nkxdlgwpnbr57sca56j74yd.onion" OR sourcehostname CONTAINS "acuy77ahadd6g5rw2pxsuejskirjmxaoj37ck7fvj4h4kc36a3uwirqd.onion" OR sourcehostname CONTAINS "bbknilviexavjvnwdtdqmhsexqcokfwgdqthxexvuwzlwgaggddaahxn.onion" OR sourcehostname CONTAINS "bvxx2p6hfttpiyntpuf72axcvaakjbz5zgiea7iklkrb2s6wrdrv4lid.onion" OR sourcehostname CONTAINS "c3uybau64lj32ty3z3sxgchnrmg72bvbpua66mcvydcjpgrbv2r6huyd.onion" OR sourcehostname CONTAINS "drv4lids5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR sourcehostname CONTAINS "fend7yhjoeam7b4fp4rj5oobphuvmhjbovhtvporusjex4nyoiamgdyd.onion" OR sourcehostname CONTAINS "m5idjwoj4q5yrmo5xbnvhoqqrdld6pruxx5qjvr6gfnnmao4xiniwzid.onion" OR sourcehostname CONTAINS "m7wajjzas7eotqw4b6k4aei5q4zijdal3spsec7wsfmf2xqjhmydjiyd.onion" OR sourcehostname CONTAINS "npnsktlnofwisqvd3e6tpslinkypajmh5jctyjivuf6jza3syw2v6cid.onion" OR sourcehostname CONTAINS "pcjvbrttcy2s3gqpgwklgsco4u4bskr5xhvdzs4pzqqcrfllkwe437id.onion" OR sourcehostname CONTAINS "s4ofksblif7bmo7sp64f56gij6xzh7sznvrn46m6daup2hwdmwbiabqd.onion" OR sourcehostname CONTAINS "s5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR sourcehostname CONTAINS "sourt33xcdoyg4jcrh33qvx6cjoneowihsfrbuqldkrrili54gdvryyd.onion" OR sourcehostname CONTAINS "syd5mtjvcqxvnnkeqjjkdm2oz2jzl6swrfhnvliiemxtgiqvcbm26nyd.onion" OR sourcehostname CONTAINS "tybocptxypx42ngrcqldrgas536syipwotmfnbjpwc5fpxth4xf4faqd.onion" OR sourcehostname CONTAINS "u7kteztwfg3p6wdeiq6y7zidxx3xtto4gmm2vwz42mzd6s4ixgvpgxyd.onion" OR sourcehostname CONTAINS "uu2iggf5wq57dt6xanfdmwq3rvxqorkb43bh2eacj2vz22nvwewlxcyd.onion" OR sourcehostname CONTAINS "wauby5e7m6zf2eb7rfn7nqm3diuaehdu6tfay4janiktgx33wjfifkyd.onion" OR sourcehostname CONTAINS "wf4uxi6izbqppzb4fvg4sq7sm5t5w5xl5v5pkxpguwpr4aci7hvzboid.onion" OR sourcehostname CONTAINS "wjd2t2lzbgb7g7bcenpl2r2bsobkbwwpooqrmiwqjkpktm5p5seifcid.onion" OR sourcehostname CONTAINS "xjdhr5is3qsw2cyekdxo57gchpxusvkko3265x2lmmn4g6fnlimdngqd.onion" OR sourcehostname CONTAINS "yjh2bktujnqkj7u7g7hxotck6sfhjuf7crhc4vcf6ewpa7swoqalfkid.onion" OR sourcehostname CONTAINS "yqs4gu4c2kb5ybgcigkl5gcsqbjuk5n2su2pozpsw4ojav2op5gddkid.onion")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "24rq2pvihkrct6pxl6zy3p36gt2wd6sn6izoz7ntlivxvbuu5ei3xwad.onion" OR destinationntdomain CONTAINS "3crj2ylhdffpf2yik4bb2hn32xey2bdhcpykxfezb4sq53eelglp3sqd.onion" OR destinationntdomain CONTAINS "44yd2dxmm5xuo7dsivwkf2fqyqmfsqkt5nkxdlgwpnbr57sca56j74yd.onion" OR destinationntdomain CONTAINS "acuy77ahadd6g5rw2pxsuejskirjmxaoj37ck7fvj4h4kc36a3uwirqd.onion" OR destinationntdomain CONTAINS "bbknilviexavjvnwdtdqmhsexqcokfwgdqthxexvuwzlwgaggddaahxn.onion" OR destinationntdomain CONTAINS "bvxx2p6hfttpiyntpuf72axcvaakjbz5zgiea7iklkrb2s6wrdrv4lid.onion" OR destinationntdomain CONTAINS "c3uybau64lj32ty3z3sxgchnrmg72bvbpua66mcvydcjpgrbv2r6huyd.onion" OR destinationntdomain CONTAINS "drv4lids5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR destinationntdomain CONTAINS "fend7yhjoeam7b4fp4rj5oobphuvmhjbovhtvporusjex4nyoiamgdyd.onion" OR destinationntdomain CONTAINS "m5idjwoj4q5yrmo5xbnvhoqqrdld6pruxx5qjvr6gfnnmao4xiniwzid.onion" OR destinationntdomain CONTAINS "m7wajjzas7eotqw4b6k4aei5q4zijdal3spsec7wsfmf2xqjhmydjiyd.onion" OR destinationntdomain CONTAINS "npnsktlnofwisqvd3e6tpslinkypajmh5jctyjivuf6jza3syw2v6cid.onion" OR destinationntdomain CONTAINS "pcjvbrttcy2s3gqpgwklgsco4u4bskr5xhvdzs4pzqqcrfllkwe437id.onion" OR destinationntdomain CONTAINS "s4ofksblif7bmo7sp64f56gij6xzh7sznvrn46m6daup2hwdmwbiabqd.onion" OR destinationntdomain CONTAINS "s5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR destinationntdomain CONTAINS "sourt33xcdoyg4jcrh33qvx6cjoneowihsfrbuqldkrrili54gdvryyd.onion" OR destinationntdomain CONTAINS "syd5mtjvcqxvnnkeqjjkdm2oz2jzl6swrfhnvliiemxtgiqvcbm26nyd.onion" OR destinationntdomain CONTAINS "tybocptxypx42ngrcqldrgas536syipwotmfnbjpwc5fpxth4xf4faqd.onion" OR destinationntdomain CONTAINS "u7kteztwfg3p6wdeiq6y7zidxx3xtto4gmm2vwz42mzd6s4ixgvpgxyd.onion" OR destinationntdomain CONTAINS "uu2iggf5wq57dt6xanfdmwq3rvxqorkb43bh2eacj2vz22nvwewlxcyd.onion" OR destinationntdomain CONTAINS "wauby5e7m6zf2eb7rfn7nqm3diuaehdu6tfay4janiktgx33wjfifkyd.onion" OR destinationntdomain CONTAINS "wf4uxi6izbqppzb4fvg4sq7sm5t5w5xl5v5pkxpguwpr4aci7hvzboid.onion" OR destinationntdomain CONTAINS "wjd2t2lzbgb7g7bcenpl2r2bsobkbwwpooqrmiwqjkpktm5p5seifcid.onion" OR destinationntdomain CONTAINS "xjdhr5is3qsw2cyekdxo57gchpxusvkko3265x2lmmn4g6fnlimdngqd.onion" OR destinationntdomain CONTAINS "yjh2bktujnqkj7u7g7hxotck6sfhjuf7crhc4vcf6ewpa7swoqalfkid.onion" OR destinationntdomain CONTAINS "yqs4gu4c2kb5ybgcigkl5gcsqbjuk5n2su2pozpsw4ojav2op5gddkid.onion")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND (requesturl CONTAINS "24rq2pvihkrct6pxl6zy3p36gt2wd6sn6izoz7ntlivxvbuu5ei3xwad.onion" OR requesturl CONTAINS "3crj2ylhdffpf2yik4bb2hn32xey2bdhcpykxfezb4sq53eelglp3sqd.onion" OR requesturl CONTAINS "44yd2dxmm5xuo7dsivwkf2fqyqmfsqkt5nkxdlgwpnbr57sca56j74yd.onion" OR requesturl CONTAINS "acuy77ahadd6g5rw2pxsuejskirjmxaoj37ck7fvj4h4kc36a3uwirqd.onion" OR requesturl CONTAINS "bbknilviexavjvnwdtdqmhsexqcokfwgdqthxexvuwzlwgaggddaahxn.onion" OR requesturl CONTAINS "bvxx2p6hfttpiyntpuf72axcvaakjbz5zgiea7iklkrb2s6wrdrv4lid.onion" OR requesturl CONTAINS "c3uybau64lj32ty3z3sxgchnrmg72bvbpua66mcvydcjpgrbv2r6huyd.onion" OR requesturl CONTAINS "drv4lids5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR requesturl CONTAINS "fend7yhjoeam7b4fp4rj5oobphuvmhjbovhtvporusjex4nyoiamgdyd.onion" OR requesturl CONTAINS "m5idjwoj4q5yrmo5xbnvhoqqrdld6pruxx5qjvr6gfnnmao4xiniwzid.onion" OR requesturl CONTAINS "m7wajjzas7eotqw4b6k4aei5q4zijdal3spsec7wsfmf2xqjhmydjiyd.onion" OR requesturl CONTAINS "npnsktlnofwisqvd3e6tpslinkypajmh5jctyjivuf6jza3syw2v6cid.onion" OR requesturl CONTAINS "pcjvbrttcy2s3gqpgwklgsco4u4bskr5xhvdzs4pzqqcrfllkwe437id.onion" OR requesturl CONTAINS "s4ofksblif7bmo7sp64f56gij6xzh7sznvrn46m6daup2hwdmwbiabqd.onion" OR requesturl CONTAINS "s5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR requesturl CONTAINS "sourt33xcdoyg4jcrh33qvx6cjoneowihsfrbuqldkrrili54gdvryyd.onion" OR requesturl CONTAINS "syd5mtjvcqxvnnkeqjjkdm2oz2jzl6swrfhnvliiemxtgiqvcbm26nyd.onion" OR requesturl CONTAINS "tybocptxypx42ngrcqldrgas536syipwotmfnbjpwc5fpxth4xf4faqd.onion" OR requesturl CONTAINS "u7kteztwfg3p6wdeiq6y7zidxx3xtto4gmm2vwz42mzd6s4ixgvpgxyd.onion" OR requesturl CONTAINS "uu2iggf5wq57dt6xanfdmwq3rvxqorkb43bh2eacj2vz22nvwewlxcyd.onion" OR requesturl CONTAINS "wauby5e7m6zf2eb7rfn7nqm3diuaehdu6tfay4janiktgx33wjfifkyd.onion" OR requesturl CONTAINS "wf4uxi6izbqppzb4fvg4sq7sm5t5w5xl5v5pkxpguwpr4aci7hvzboid.onion" OR requesturl CONTAINS "wjd2t2lzbgb7g7bcenpl2r2bsobkbwwpooqrmiwqjkpktm5p5seifcid.onion" OR requesturl CONTAINS "xjdhr5is3qsw2cyekdxo57gchpxusvkko3265x2lmmn4g6fnlimdngqd.onion" OR requesturl CONTAINS "yjh2bktujnqkj7u7g7hxotck6sfhjuf7crhc4vcf6ewpa7swoqalfkid.onion" OR requesturl CONTAINS "yqs4gu4c2kb5ybgcigkl5gcsqbjuk5n2su2pozpsw4ojav2op5gddkid.onion")
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "24rq2pvihkrct6pxl6zy3p36gt2wd6sn6izoz7ntlivxvbuu5ei3xwad.onion" OR destinationhostname CONTAINS "3crj2ylhdffpf2yik4bb2hn32xey2bdhcpykxfezb4sq53eelglp3sqd.onion" OR destinationhostname CONTAINS "44yd2dxmm5xuo7dsivwkf2fqyqmfsqkt5nkxdlgwpnbr57sca56j74yd.onion" OR destinationhostname CONTAINS "acuy77ahadd6g5rw2pxsuejskirjmxaoj37ck7fvj4h4kc36a3uwirqd.onion" OR destinationhostname CONTAINS "bbknilviexavjvnwdtdqmhsexqcokfwgdqthxexvuwzlwgaggddaahxn.onion" OR destinationhostname CONTAINS "bvxx2p6hfttpiyntpuf72axcvaakjbz5zgiea7iklkrb2s6wrdrv4lid.onion" OR destinationhostname CONTAINS "c3uybau64lj32ty3z3sxgchnrmg72bvbpua66mcvydcjpgrbv2r6huyd.onion" OR destinationhostname CONTAINS "drv4lids5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR destinationhostname CONTAINS "fend7yhjoeam7b4fp4rj5oobphuvmhjbovhtvporusjex4nyoiamgdyd.onion" OR destinationhostname CONTAINS "m5idjwoj4q5yrmo5xbnvhoqqrdld6pruxx5qjvr6gfnnmao4xiniwzid.onion" OR destinationhostname CONTAINS "m7wajjzas7eotqw4b6k4aei5q4zijdal3spsec7wsfmf2xqjhmydjiyd.onion" OR destinationhostname CONTAINS "npnsktlnofwisqvd3e6tpslinkypajmh5jctyjivuf6jza3syw2v6cid.onion" OR destinationhostname CONTAINS "pcjvbrttcy2s3gqpgwklgsco4u4bskr5xhvdzs4pzqqcrfllkwe437id.onion" OR destinationhostname CONTAINS "s4ofksblif7bmo7sp64f56gij6xzh7sznvrn46m6daup2hwdmwbiabqd.onion" OR destinationhostname CONTAINS "s5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR destinationhostname CONTAINS "sourt33xcdoyg4jcrh33qvx6cjoneowihsfrbuqldkrrili54gdvryyd.onion" OR destinationhostname CONTAINS "syd5mtjvcqxvnnkeqjjkdm2oz2jzl6swrfhnvliiemxtgiqvcbm26nyd.onion" OR destinationhostname CONTAINS "tybocptxypx42ngrcqldrgas536syipwotmfnbjpwc5fpxth4xf4faqd.onion" OR destinationhostname CONTAINS "u7kteztwfg3p6wdeiq6y7zidxx3xtto4gmm2vwz42mzd6s4ixgvpgxyd.onion" OR destinationhostname CONTAINS "uu2iggf5wq57dt6xanfdmwq3rvxqorkb43bh2eacj2vz22nvwewlxcyd.onion" OR destinationhostname CONTAINS "wauby5e7m6zf2eb7rfn7nqm3diuaehdu6tfay4janiktgx33wjfifkyd.onion" OR destinationhostname CONTAINS "wf4uxi6izbqppzb4fvg4sq7sm5t5w5xl5v5pkxpguwpr4aci7hvzboid.onion" OR destinationhostname CONTAINS "wjd2t2lzbgb7g7bcenpl2r2bsobkbwwpooqrmiwqjkpktm5p5seifcid.onion" OR destinationhostname CONTAINS "xjdhr5is3qsw2cyekdxo57gchpxusvkko3265x2lmmn4g6fnlimdngqd.onion" OR destinationhostname CONTAINS "yjh2bktujnqkj7u7g7hxotck6sfhjuf7crhc4vcf6ewpa7swoqalfkid.onion" OR destinationhostname CONTAINS "yqs4gu4c2kb5ybgcigkl5gcsqbjuk5n2su2pozpsw4ojav2op5gddkid.onion")
index=activity AND rg_functionality="Unix / Linux / AIX" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "24rq2pvihkrct6pxl6zy3p36gt2wd6sn6izoz7ntlivxvbuu5ei3xwad.onion" OR sourcentdomain CONTAINS "3crj2ylhdffpf2yik4bb2hn32xey2bdhcpykxfezb4sq53eelglp3sqd.onion" OR sourcentdomain CONTAINS "44yd2dxmm5xuo7dsivwkf2fqyqmfsqkt5nkxdlgwpnbr57sca56j74yd.onion" OR sourcentdomain CONTAINS "acuy77ahadd6g5rw2pxsuejskirjmxaoj37ck7fvj4h4kc36a3uwirqd.onion" OR sourcentdomain CONTAINS "bbknilviexavjvnwdtdqmhsexqcokfwgdqthxexvuwzlwgaggddaahxn.onion" OR sourcentdomain CONTAINS "bvxx2p6hfttpiyntpuf72axcvaakjbz5zgiea7iklkrb2s6wrdrv4lid.onion" OR sourcentdomain CONTAINS "c3uybau64lj32ty3z3sxgchnrmg72bvbpua66mcvydcjpgrbv2r6huyd.onion" OR sourcentdomain CONTAINS "drv4lids5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR sourcentdomain CONTAINS "fend7yhjoeam7b4fp4rj5oobphuvmhjbovhtvporusjex4nyoiamgdyd.onion" OR sourcentdomain CONTAINS "m5idjwoj4q5yrmo5xbnvhoqqrdld6pruxx5qjvr6gfnnmao4xiniwzid.onion" OR sourcentdomain CONTAINS "m7wajjzas7eotqw4b6k4aei5q4zijdal3spsec7wsfmf2xqjhmydjiyd.onion" OR sourcentdomain CONTAINS "npnsktlnofwisqvd3e6tpslinkypajmh5jctyjivuf6jza3syw2v6cid.onion" OR sourcentdomain CONTAINS "pcjvbrttcy2s3gqpgwklgsco4u4bskr5xhvdzs4pzqqcrfllkwe437id.onion" OR sourcentdomain CONTAINS "s4ofksblif7bmo7sp64f56gij6xzh7sznvrn46m6daup2hwdmwbiabqd.onion" OR sourcentdomain CONTAINS "s5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR sourcentdomain CONTAINS "sourt33xcdoyg4jcrh33qvx6cjoneowihsfrbuqldkrrili54gdvryyd.onion" OR sourcentdomain CONTAINS "syd5mtjvcqxvnnkeqjjkdm2oz2jzl6swrfhnvliiemxtgiqvcbm26nyd.onion" OR sourcentdomain CONTAINS "tybocptxypx42ngrcqldrgas536syipwotmfnbjpwc5fpxth4xf4faqd.onion" OR sourcentdomain CONTAINS "u7kteztwfg3p6wdeiq6y7zidxx3xtto4gmm2vwz42mzd6s4ixgvpgxyd.onion" OR sourcentdomain CONTAINS "uu2iggf5wq57dt6xanfdmwq3rvxqorkb43bh2eacj2vz22nvwewlxcyd.onion" OR sourcentdomain CONTAINS "wauby5e7m6zf2eb7rfn7nqm3diuaehdu6tfay4janiktgx33wjfifkyd.onion" OR sourcentdomain CONTAINS "wf4uxi6izbqppzb4fvg4sq7sm5t5w5xl5v5pkxpguwpr4aci7hvzboid.onion" OR sourcentdomain CONTAINS "wjd2t2lzbgb7g7bcenpl2r2bsobkbwwpooqrmiwqjkpktm5p5seifcid.onion" OR sourcentdomain CONTAINS "xjdhr5is3qsw2cyekdxo57gchpxusvkko3265x2lmmn4g6fnlimdngqd.onion" OR sourcentdomain CONTAINS "yjh2bktujnqkj7u7g7hxotck6sfhjuf7crhc4vcf6ewpa7swoqalfkid.onion" OR sourcentdomain CONTAINS "yqs4gu4c2kb5ybgcigkl5gcsqbjuk5n2su2pozpsw4ojav2op5gddkid.onion")
index=activity AND rg_functionality="Unix / Linux / AIX" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "24rq2pvihkrct6pxl6zy3p36gt2wd6sn6izoz7ntlivxvbuu5ei3xwad.onion" OR sourcehostname CONTAINS "3crj2ylhdffpf2yik4bb2hn32xey2bdhcpykxfezb4sq53eelglp3sqd.onion" OR sourcehostname CONTAINS "44yd2dxmm5xuo7dsivwkf2fqyqmfsqkt5nkxdlgwpnbr57sca56j74yd.onion" OR sourcehostname CONTAINS "acuy77ahadd6g5rw2pxsuejskirjmxaoj37ck7fvj4h4kc36a3uwirqd.onion" OR sourcehostname CONTAINS "bbknilviexavjvnwdtdqmhsexqcokfwgdqthxexvuwzlwgaggddaahxn.onion" OR sourcehostname CONTAINS "bvxx2p6hfttpiyntpuf72axcvaakjbz5zgiea7iklkrb2s6wrdrv4lid.onion" OR sourcehostname CONTAINS "c3uybau64lj32ty3z3sxgchnrmg72bvbpua66mcvydcjpgrbv2r6huyd.onion" OR sourcehostname CONTAINS "drv4lids5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR sourcehostname CONTAINS "fend7yhjoeam7b4fp4rj5oobphuvmhjbovhtvporusjex4nyoiamgdyd.onion" OR sourcehostname CONTAINS "m5idjwoj4q5yrmo5xbnvhoqqrdld6pruxx5qjvr6gfnnmao4xiniwzid.onion" OR sourcehostname CONTAINS "m7wajjzas7eotqw4b6k4aei5q4zijdal3spsec7wsfmf2xqjhmydjiyd.onion" OR sourcehostname CONTAINS "npnsktlnofwisqvd3e6tpslinkypajmh5jctyjivuf6jza3syw2v6cid.onion" OR sourcehostname CONTAINS "pcjvbrttcy2s3gqpgwklgsco4u4bskr5xhvdzs4pzqqcrfllkwe437id.onion" OR sourcehostname CONTAINS "s4ofksblif7bmo7sp64f56gij6xzh7sznvrn46m6daup2hwdmwbiabqd.onion" OR sourcehostname CONTAINS "s5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR sourcehostname CONTAINS "sourt33xcdoyg4jcrh33qvx6cjoneowihsfrbuqldkrrili54gdvryyd.onion" OR sourcehostname CONTAINS "syd5mtjvcqxvnnkeqjjkdm2oz2jzl6swrfhnvliiemxtgiqvcbm26nyd.onion" OR sourcehostname CONTAINS "tybocptxypx42ngrcqldrgas536syipwotmfnbjpwc5fpxth4xf4faqd.onion" OR sourcehostname CONTAINS "u7kteztwfg3p6wdeiq6y7zidxx3xtto4gmm2vwz42mzd6s4ixgvpgxyd.onion" OR sourcehostname CONTAINS "uu2iggf5wq57dt6xanfdmwq3rvxqorkb43bh2eacj2vz22nvwewlxcyd.onion" OR sourcehostname CONTAINS "wauby5e7m6zf2eb7rfn7nqm3diuaehdu6tfay4janiktgx33wjfifkyd.onion" OR sourcehostname CONTAINS "wf4uxi6izbqppzb4fvg4sq7sm5t5w5xl5v5pkxpguwpr4aci7hvzboid.onion" OR sourcehostname CONTAINS "wjd2t2lzbgb7g7bcenpl2r2bsobkbwwpooqrmiwqjkpktm5p5seifcid.onion" OR sourcehostname CONTAINS "xjdhr5is3qsw2cyekdxo57gchpxusvkko3265x2lmmn4g6fnlimdngqd.onion" OR sourcehostname CONTAINS "yjh2bktujnqkj7u7g7hxotck6sfhjuf7crhc4vcf6ewpa7swoqalfkid.onion" OR sourcehostname CONTAINS "yqs4gu4c2kb5ybgcigkl5gcsqbjuk5n2su2pozpsw4ojav2op5gddkid.onion")
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "24rq2pvihkrct6pxl6zy3p36gt2wd6sn6izoz7ntlivxvbuu5ei3xwad.onion" OR destinationntdomain CONTAINS "3crj2ylhdffpf2yik4bb2hn32xey2bdhcpykxfezb4sq53eelglp3sqd.onion" OR destinationntdomain CONTAINS "44yd2dxmm5xuo7dsivwkf2fqyqmfsqkt5nkxdlgwpnbr57sca56j74yd.onion" OR destinationntdomain CONTAINS "acuy77ahadd6g5rw2pxsuejskirjmxaoj37ck7fvj4h4kc36a3uwirqd.onion" OR destinationntdomain CONTAINS "bbknilviexavjvnwdtdqmhsexqcokfwgdqthxexvuwzlwgaggddaahxn.onion" OR destinationntdomain CONTAINS "bvxx2p6hfttpiyntpuf72axcvaakjbz5zgiea7iklkrb2s6wrdrv4lid.onion" OR destinationntdomain CONTAINS "c3uybau64lj32ty3z3sxgchnrmg72bvbpua66mcvydcjpgrbv2r6huyd.onion" OR destinationntdomain CONTAINS "drv4lids5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR destinationntdomain CONTAINS "fend7yhjoeam7b4fp4rj5oobphuvmhjbovhtvporusjex4nyoiamgdyd.onion" OR destinationntdomain CONTAINS "m5idjwoj4q5yrmo5xbnvhoqqrdld6pruxx5qjvr6gfnnmao4xiniwzid.onion" OR destinationntdomain CONTAINS "m7wajjzas7eotqw4b6k4aei5q4zijdal3spsec7wsfmf2xqjhmydjiyd.onion" OR destinationntdomain CONTAINS "npnsktlnofwisqvd3e6tpslinkypajmh5jctyjivuf6jza3syw2v6cid.onion" OR destinationntdomain CONTAINS "pcjvbrttcy2s3gqpgwklgsco4u4bskr5xhvdzs4pzqqcrfllkwe437id.onion" OR destinationntdomain CONTAINS "s4ofksblif7bmo7sp64f56gij6xzh7sznvrn46m6daup2hwdmwbiabqd.onion" OR destinationntdomain CONTAINS "s5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR destinationntdomain CONTAINS "sourt33xcdoyg4jcrh33qvx6cjoneowihsfrbuqldkrrili54gdvryyd.onion" OR destinationntdomain CONTAINS "syd5mtjvcqxvnnkeqjjkdm2oz2jzl6swrfhnvliiemxtgiqvcbm26nyd.onion" OR destinationntdomain CONTAINS "tybocptxypx42ngrcqldrgas536syipwotmfnbjpwc5fpxth4xf4faqd.onion" OR destinationntdomain CONTAINS "u7kteztwfg3p6wdeiq6y7zidxx3xtto4gmm2vwz42mzd6s4ixgvpgxyd.onion" OR destinationntdomain CONTAINS "uu2iggf5wq57dt6xanfdmwq3rvxqorkb43bh2eacj2vz22nvwewlxcyd.onion" OR destinationntdomain CONTAINS "wauby5e7m6zf2eb7rfn7nqm3diuaehdu6tfay4janiktgx33wjfifkyd.onion" OR destinationntdomain CONTAINS "wf4uxi6izbqppzb4fvg4sq7sm5t5w5xl5v5pkxpguwpr4aci7hvzboid.onion" OR destinationntdomain CONTAINS "wjd2t2lzbgb7g7bcenpl2r2bsobkbwwpooqrmiwqjkpktm5p5seifcid.onion" OR destinationntdomain CONTAINS "xjdhr5is3qsw2cyekdxo57gchpxusvkko3265x2lmmn4g6fnlimdngqd.onion" OR destinationntdomain CONTAINS "yjh2bktujnqkj7u7g7hxotck6sfhjuf7crhc4vcf6ewpa7swoqalfkid.onion" OR destinationntdomain CONTAINS "yqs4gu4c2kb5ybgcigkl5gcsqbjuk5n2su2pozpsw4ojav2op5gddkid.onion")
index=activity AND rg_functionality="Unix / Linux / AIX" AND requesturl NOT NULL AND (requesturl CONTAINS "24rq2pvihkrct6pxl6zy3p36gt2wd6sn6izoz7ntlivxvbuu5ei3xwad.onion" OR requesturl CONTAINS "3crj2ylhdffpf2yik4bb2hn32xey2bdhcpykxfezb4sq53eelglp3sqd.onion" OR requesturl CONTAINS "44yd2dxmm5xuo7dsivwkf2fqyqmfsqkt5nkxdlgwpnbr57sca56j74yd.onion" OR requesturl CONTAINS "acuy77ahadd6g5rw2pxsuejskirjmxaoj37ck7fvj4h4kc36a3uwirqd.onion" OR requesturl CONTAINS "bbknilviexavjvnwdtdqmhsexqcokfwgdqthxexvuwzlwgaggddaahxn.onion" OR requesturl CONTAINS "bvxx2p6hfttpiyntpuf72axcvaakjbz5zgiea7iklkrb2s6wrdrv4lid.onion" OR requesturl CONTAINS "c3uybau64lj32ty3z3sxgchnrmg72bvbpua66mcvydcjpgrbv2r6huyd.onion" OR requesturl CONTAINS "drv4lids5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR requesturl CONTAINS "fend7yhjoeam7b4fp4rj5oobphuvmhjbovhtvporusjex4nyoiamgdyd.onion" OR requesturl CONTAINS "m5idjwoj4q5yrmo5xbnvhoqqrdld6pruxx5qjvr6gfnnmao4xiniwzid.onion" OR requesturl CONTAINS "m7wajjzas7eotqw4b6k4aei5q4zijdal3spsec7wsfmf2xqjhmydjiyd.onion" OR requesturl CONTAINS "npnsktlnofwisqvd3e6tpslinkypajmh5jctyjivuf6jza3syw2v6cid.onion" OR requesturl CONTAINS "pcjvbrttcy2s3gqpgwklgsco4u4bskr5xhvdzs4pzqqcrfllkwe437id.onion" OR requesturl CONTAINS "s4ofksblif7bmo7sp64f56gij6xzh7sznvrn46m6daup2hwdmwbiabqd.onion" OR requesturl CONTAINS "s5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR requesturl CONTAINS "sourt33xcdoyg4jcrh33qvx6cjoneowihsfrbuqldkrrili54gdvryyd.onion" OR requesturl CONTAINS "syd5mtjvcqxvnnkeqjjkdm2oz2jzl6swrfhnvliiemxtgiqvcbm26nyd.onion" OR requesturl CONTAINS "tybocptxypx42ngrcqldrgas536syipwotmfnbjpwc5fpxth4xf4faqd.onion" OR requesturl CONTAINS "u7kteztwfg3p6wdeiq6y7zidxx3xtto4gmm2vwz42mzd6s4ixgvpgxyd.onion" OR requesturl CONTAINS "uu2iggf5wq57dt6xanfdmwq3rvxqorkb43bh2eacj2vz22nvwewlxcyd.onion" OR requesturl CONTAINS "wauby5e7m6zf2eb7rfn7nqm3diuaehdu6tfay4janiktgx33wjfifkyd.onion" OR requesturl CONTAINS "wf4uxi6izbqppzb4fvg4sq7sm5t5w5xl5v5pkxpguwpr4aci7hvzboid.onion" OR requesturl CONTAINS "wjd2t2lzbgb7g7bcenpl2r2bsobkbwwpooqrmiwqjkpktm5p5seifcid.onion" OR requesturl CONTAINS "xjdhr5is3qsw2cyekdxo57gchpxusvkko3265x2lmmn4g6fnlimdngqd.onion" OR requesturl CONTAINS "yjh2bktujnqkj7u7g7hxotck6sfhjuf7crhc4vcf6ewpa7swoqalfkid.onion" OR requesturl CONTAINS "yqs4gu4c2kb5ybgcigkl5gcsqbjuk5n2su2pozpsw4ojav2op5gddkid.onion")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "24rq2pvihkrct6pxl6zy3p36gt2wd6sn6izoz7ntlivxvbuu5ei3xwad.onion" OR destinationhostname CONTAINS "3crj2ylhdffpf2yik4bb2hn32xey2bdhcpykxfezb4sq53eelglp3sqd.onion" OR destinationhostname CONTAINS "44yd2dxmm5xuo7dsivwkf2fqyqmfsqkt5nkxdlgwpnbr57sca56j74yd.onion" OR destinationhostname CONTAINS "acuy77ahadd6g5rw2pxsuejskirjmxaoj37ck7fvj4h4kc36a3uwirqd.onion" OR destinationhostname CONTAINS "bbknilviexavjvnwdtdqmhsexqcokfwgdqthxexvuwzlwgaggddaahxn.onion" OR destinationhostname CONTAINS "bvxx2p6hfttpiyntpuf72axcvaakjbz5zgiea7iklkrb2s6wrdrv4lid.onion" OR destinationhostname CONTAINS "c3uybau64lj32ty3z3sxgchnrmg72bvbpua66mcvydcjpgrbv2r6huyd.onion" OR destinationhostname CONTAINS "drv4lids5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR destinationhostname CONTAINS "fend7yhjoeam7b4fp4rj5oobphuvmhjbovhtvporusjex4nyoiamgdyd.onion" OR destinationhostname CONTAINS "m5idjwoj4q5yrmo5xbnvhoqqrdld6pruxx5qjvr6gfnnmao4xiniwzid.onion" OR destinationhostname CONTAINS "m7wajjzas7eotqw4b6k4aei5q4zijdal3spsec7wsfmf2xqjhmydjiyd.onion" OR destinationhostname CONTAINS "npnsktlnofwisqvd3e6tpslinkypajmh5jctyjivuf6jza3syw2v6cid.onion" OR destinationhostname CONTAINS "pcjvbrttcy2s3gqpgwklgsco4u4bskr5xhvdzs4pzqqcrfllkwe437id.onion" OR destinationhostname CONTAINS "s4ofksblif7bmo7sp64f56gij6xzh7sznvrn46m6daup2hwdmwbiabqd.onion" OR destinationhostname CONTAINS "s5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR destinationhostname CONTAINS "sourt33xcdoyg4jcrh33qvx6cjoneowihsfrbuqldkrrili54gdvryyd.onion" OR destinationhostname CONTAINS "syd5mtjvcqxvnnkeqjjkdm2oz2jzl6swrfhnvliiemxtgiqvcbm26nyd.onion" OR destinationhostname CONTAINS "tybocptxypx42ngrcqldrgas536syipwotmfnbjpwc5fpxth4xf4faqd.onion" OR destinationhostname CONTAINS "u7kteztwfg3p6wdeiq6y7zidxx3xtto4gmm2vwz42mzd6s4ixgvpgxyd.onion" OR destinationhostname CONTAINS "uu2iggf5wq57dt6xanfdmwq3rvxqorkb43bh2eacj2vz22nvwewlxcyd.onion" OR destinationhostname CONTAINS "wauby5e7m6zf2eb7rfn7nqm3diuaehdu6tfay4janiktgx33wjfifkyd.onion" OR destinationhostname CONTAINS "wf4uxi6izbqppzb4fvg4sq7sm5t5w5xl5v5pkxpguwpr4aci7hvzboid.onion" OR destinationhostname CONTAINS "wjd2t2lzbgb7g7bcenpl2r2bsobkbwwpooqrmiwqjkpktm5p5seifcid.onion" OR destinationhostname CONTAINS "xjdhr5is3qsw2cyekdxo57gchpxusvkko3265x2lmmn4g6fnlimdngqd.onion" OR destinationhostname CONTAINS "yjh2bktujnqkj7u7g7hxotck6sfhjuf7crhc4vcf6ewpa7swoqalfkid.onion" OR destinationhostname CONTAINS "yqs4gu4c2kb5ybgcigkl5gcsqbjuk5n2su2pozpsw4ojav2op5gddkid.onion")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "24rq2pvihkrct6pxl6zy3p36gt2wd6sn6izoz7ntlivxvbuu5ei3xwad.onion" OR sourcentdomain CONTAINS "3crj2ylhdffpf2yik4bb2hn32xey2bdhcpykxfezb4sq53eelglp3sqd.onion" OR sourcentdomain CONTAINS "44yd2dxmm5xuo7dsivwkf2fqyqmfsqkt5nkxdlgwpnbr57sca56j74yd.onion" OR sourcentdomain CONTAINS "acuy77ahadd6g5rw2pxsuejskirjmxaoj37ck7fvj4h4kc36a3uwirqd.onion" OR sourcentdomain CONTAINS "bbknilviexavjvnwdtdqmhsexqcokfwgdqthxexvuwzlwgaggddaahxn.onion" OR sourcentdomain CONTAINS "bvxx2p6hfttpiyntpuf72axcvaakjbz5zgiea7iklkrb2s6wrdrv4lid.onion" OR sourcentdomain CONTAINS "c3uybau64lj32ty3z3sxgchnrmg72bvbpua66mcvydcjpgrbv2r6huyd.onion" OR sourcentdomain CONTAINS "drv4lids5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR sourcentdomain CONTAINS "fend7yhjoeam7b4fp4rj5oobphuvmhjbovhtvporusjex4nyoiamgdyd.onion" OR sourcentdomain CONTAINS "m5idjwoj4q5yrmo5xbnvhoqqrdld6pruxx5qjvr6gfnnmao4xiniwzid.onion" OR sourcentdomain CONTAINS "m7wajjzas7eotqw4b6k4aei5q4zijdal3spsec7wsfmf2xqjhmydjiyd.onion" OR sourcentdomain CONTAINS "npnsktlnofwisqvd3e6tpslinkypajmh5jctyjivuf6jza3syw2v6cid.onion" OR sourcentdomain CONTAINS "pcjvbrttcy2s3gqpgwklgsco4u4bskr5xhvdzs4pzqqcrfllkwe437id.onion" OR sourcentdomain CONTAINS "s4ofksblif7bmo7sp64f56gij6xzh7sznvrn46m6daup2hwdmwbiabqd.onion" OR sourcentdomain CONTAINS "s5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR sourcentdomain CONTAINS "sourt33xcdoyg4jcrh33qvx6cjoneowihsfrbuqldkrrili54gdvryyd.onion" OR sourcentdomain CONTAINS "syd5mtjvcqxvnnkeqjjkdm2oz2jzl6swrfhnvliiemxtgiqvcbm26nyd.onion" OR sourcentdomain CONTAINS "tybocptxypx42ngrcqldrgas536syipwotmfnbjpwc5fpxth4xf4faqd.onion" OR sourcentdomain CONTAINS "u7kteztwfg3p6wdeiq6y7zidxx3xtto4gmm2vwz42mzd6s4ixgvpgxyd.onion" OR sourcentdomain CONTAINS "uu2iggf5wq57dt6xanfdmwq3rvxqorkb43bh2eacj2vz22nvwewlxcyd.onion" OR sourcentdomain CONTAINS "wauby5e7m6zf2eb7rfn7nqm3diuaehdu6tfay4janiktgx33wjfifkyd.onion" OR sourcentdomain CONTAINS "wf4uxi6izbqppzb4fvg4sq7sm5t5w5xl5v5pkxpguwpr4aci7hvzboid.onion" OR sourcentdomain CONTAINS "wjd2t2lzbgb7g7bcenpl2r2bsobkbwwpooqrmiwqjkpktm5p5seifcid.onion" OR sourcentdomain CONTAINS "xjdhr5is3qsw2cyekdxo57gchpxusvkko3265x2lmmn4g6fnlimdngqd.onion" OR sourcentdomain CONTAINS "yjh2bktujnqkj7u7g7hxotck6sfhjuf7crhc4vcf6ewpa7swoqalfkid.onion" OR sourcentdomain CONTAINS "yqs4gu4c2kb5ybgcigkl5gcsqbjuk5n2su2pozpsw4ojav2op5gddkid.onion")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "24rq2pvihkrct6pxl6zy3p36gt2wd6sn6izoz7ntlivxvbuu5ei3xwad.onion" OR sourcehostname CONTAINS "3crj2ylhdffpf2yik4bb2hn32xey2bdhcpykxfezb4sq53eelglp3sqd.onion" OR sourcehostname CONTAINS "44yd2dxmm5xuo7dsivwkf2fqyqmfsqkt5nkxdlgwpnbr57sca56j74yd.onion" OR sourcehostname CONTAINS "acuy77ahadd6g5rw2pxsuejskirjmxaoj37ck7fvj4h4kc36a3uwirqd.onion" OR sourcehostname CONTAINS "bbknilviexavjvnwdtdqmhsexqcokfwgdqthxexvuwzlwgaggddaahxn.onion" OR sourcehostname CONTAINS "bvxx2p6hfttpiyntpuf72axcvaakjbz5zgiea7iklkrb2s6wrdrv4lid.onion" OR sourcehostname CONTAINS "c3uybau64lj32ty3z3sxgchnrmg72bvbpua66mcvydcjpgrbv2r6huyd.onion" OR sourcehostname CONTAINS "drv4lids5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR sourcehostname CONTAINS "fend7yhjoeam7b4fp4rj5oobphuvmhjbovhtvporusjex4nyoiamgdyd.onion" OR sourcehostname CONTAINS "m5idjwoj4q5yrmo5xbnvhoqqrdld6pruxx5qjvr6gfnnmao4xiniwzid.onion" OR sourcehostname CONTAINS "m7wajjzas7eotqw4b6k4aei5q4zijdal3spsec7wsfmf2xqjhmydjiyd.onion" OR sourcehostname CONTAINS "npnsktlnofwisqvd3e6tpslinkypajmh5jctyjivuf6jza3syw2v6cid.onion" OR sourcehostname CONTAINS "pcjvbrttcy2s3gqpgwklgsco4u4bskr5xhvdzs4pzqqcrfllkwe437id.onion" OR sourcehostname CONTAINS "s4ofksblif7bmo7sp64f56gij6xzh7sznvrn46m6daup2hwdmwbiabqd.onion" OR sourcehostname CONTAINS "s5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR sourcehostname CONTAINS "sourt33xcdoyg4jcrh33qvx6cjoneowihsfrbuqldkrrili54gdvryyd.onion" OR sourcehostname CONTAINS "syd5mtjvcqxvnnkeqjjkdm2oz2jzl6swrfhnvliiemxtgiqvcbm26nyd.onion" OR sourcehostname CONTAINS "tybocptxypx42ngrcqldrgas536syipwotmfnbjpwc5fpxth4xf4faqd.onion" OR sourcehostname CONTAINS "u7kteztwfg3p6wdeiq6y7zidxx3xtto4gmm2vwz42mzd6s4ixgvpgxyd.onion" OR sourcehostname CONTAINS "uu2iggf5wq57dt6xanfdmwq3rvxqorkb43bh2eacj2vz22nvwewlxcyd.onion" OR sourcehostname CONTAINS "wauby5e7m6zf2eb7rfn7nqm3diuaehdu6tfay4janiktgx33wjfifkyd.onion" OR sourcehostname CONTAINS "wf4uxi6izbqppzb4fvg4sq7sm5t5w5xl5v5pkxpguwpr4aci7hvzboid.onion" OR sourcehostname CONTAINS "wjd2t2lzbgb7g7bcenpl2r2bsobkbwwpooqrmiwqjkpktm5p5seifcid.onion" OR sourcehostname CONTAINS "xjdhr5is3qsw2cyekdxo57gchpxusvkko3265x2lmmn4g6fnlimdngqd.onion" OR sourcehostname CONTAINS "yjh2bktujnqkj7u7g7hxotck6sfhjuf7crhc4vcf6ewpa7swoqalfkid.onion" OR sourcehostname CONTAINS "yqs4gu4c2kb5ybgcigkl5gcsqbjuk5n2su2pozpsw4ojav2op5gddkid.onion")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "24rq2pvihkrct6pxl6zy3p36gt2wd6sn6izoz7ntlivxvbuu5ei3xwad.onion" OR destinationntdomain CONTAINS "3crj2ylhdffpf2yik4bb2hn32xey2bdhcpykxfezb4sq53eelglp3sqd.onion" OR destinationntdomain CONTAINS "44yd2dxmm5xuo7dsivwkf2fqyqmfsqkt5nkxdlgwpnbr57sca56j74yd.onion" OR destinationntdomain CONTAINS "acuy77ahadd6g5rw2pxsuejskirjmxaoj37ck7fvj4h4kc36a3uwirqd.onion" OR destinationntdomain CONTAINS "bbknilviexavjvnwdtdqmhsexqcokfwgdqthxexvuwzlwgaggddaahxn.onion" OR destinationntdomain CONTAINS "bvxx2p6hfttpiyntpuf72axcvaakjbz5zgiea7iklkrb2s6wrdrv4lid.onion" OR destinationntdomain CONTAINS "c3uybau64lj32ty3z3sxgchnrmg72bvbpua66mcvydcjpgrbv2r6huyd.onion" OR destinationntdomain CONTAINS "drv4lids5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR destinationntdomain CONTAINS "fend7yhjoeam7b4fp4rj5oobphuvmhjbovhtvporusjex4nyoiamgdyd.onion" OR destinationntdomain CONTAINS "m5idjwoj4q5yrmo5xbnvhoqqrdld6pruxx5qjvr6gfnnmao4xiniwzid.onion" OR destinationntdomain CONTAINS "m7wajjzas7eotqw4b6k4aei5q4zijdal3spsec7wsfmf2xqjhmydjiyd.onion" OR destinationntdomain CONTAINS "npnsktlnofwisqvd3e6tpslinkypajmh5jctyjivuf6jza3syw2v6cid.onion" OR destinationntdomain CONTAINS "pcjvbrttcy2s3gqpgwklgsco4u4bskr5xhvdzs4pzqqcrfllkwe437id.onion" OR destinationntdomain CONTAINS "s4ofksblif7bmo7sp64f56gij6xzh7sznvrn46m6daup2hwdmwbiabqd.onion" OR destinationntdomain CONTAINS "s5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR destinationntdomain CONTAINS "sourt33xcdoyg4jcrh33qvx6cjoneowihsfrbuqldkrrili54gdvryyd.onion" OR destinationntdomain CONTAINS "syd5mtjvcqxvnnkeqjjkdm2oz2jzl6swrfhnvliiemxtgiqvcbm26nyd.onion" OR destinationntdomain CONTAINS "tybocptxypx42ngrcqldrgas536syipwotmfnbjpwc5fpxth4xf4faqd.onion" OR destinationntdomain CONTAINS "u7kteztwfg3p6wdeiq6y7zidxx3xtto4gmm2vwz42mzd6s4ixgvpgxyd.onion" OR destinationntdomain CONTAINS "uu2iggf5wq57dt6xanfdmwq3rvxqorkb43bh2eacj2vz22nvwewlxcyd.onion" OR destinationntdomain CONTAINS "wauby5e7m6zf2eb7rfn7nqm3diuaehdu6tfay4janiktgx33wjfifkyd.onion" OR destinationntdomain CONTAINS "wf4uxi6izbqppzb4fvg4sq7sm5t5w5xl5v5pkxpguwpr4aci7hvzboid.onion" OR destinationntdomain CONTAINS "wjd2t2lzbgb7g7bcenpl2r2bsobkbwwpooqrmiwqjkpktm5p5seifcid.onion" OR destinationntdomain CONTAINS "xjdhr5is3qsw2cyekdxo57gchpxusvkko3265x2lmmn4g6fnlimdngqd.onion" OR destinationntdomain CONTAINS "yjh2bktujnqkj7u7g7hxotck6sfhjuf7crhc4vcf6ewpa7swoqalfkid.onion" OR destinationntdomain CONTAINS "yqs4gu4c2kb5ybgcigkl5gcsqbjuk5n2su2pozpsw4ojav2op5gddkid.onion")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND (requesturl CONTAINS "24rq2pvihkrct6pxl6zy3p36gt2wd6sn6izoz7ntlivxvbuu5ei3xwad.onion" OR requesturl CONTAINS "3crj2ylhdffpf2yik4bb2hn32xey2bdhcpykxfezb4sq53eelglp3sqd.onion" OR requesturl CONTAINS "44yd2dxmm5xuo7dsivwkf2fqyqmfsqkt5nkxdlgwpnbr57sca56j74yd.onion" OR requesturl CONTAINS "acuy77ahadd6g5rw2pxsuejskirjmxaoj37ck7fvj4h4kc36a3uwirqd.onion" OR requesturl CONTAINS "bbknilviexavjvnwdtdqmhsexqcokfwgdqthxexvuwzlwgaggddaahxn.onion" OR requesturl CONTAINS "bvxx2p6hfttpiyntpuf72axcvaakjbz5zgiea7iklkrb2s6wrdrv4lid.onion" OR requesturl CONTAINS "c3uybau64lj32ty3z3sxgchnrmg72bvbpua66mcvydcjpgrbv2r6huyd.onion" OR requesturl CONTAINS "drv4lids5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR requesturl CONTAINS "fend7yhjoeam7b4fp4rj5oobphuvmhjbovhtvporusjex4nyoiamgdyd.onion" OR requesturl CONTAINS "m5idjwoj4q5yrmo5xbnvhoqqrdld6pruxx5qjvr6gfnnmao4xiniwzid.onion" OR requesturl CONTAINS "m7wajjzas7eotqw4b6k4aei5q4zijdal3spsec7wsfmf2xqjhmydjiyd.onion" OR requesturl CONTAINS "npnsktlnofwisqvd3e6tpslinkypajmh5jctyjivuf6jza3syw2v6cid.onion" OR requesturl CONTAINS "pcjvbrttcy2s3gqpgwklgsco4u4bskr5xhvdzs4pzqqcrfllkwe437id.onion" OR requesturl CONTAINS "s4ofksblif7bmo7sp64f56gij6xzh7sznvrn46m6daup2hwdmwbiabqd.onion" OR requesturl CONTAINS "s5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR requesturl CONTAINS "sourt33xcdoyg4jcrh33qvx6cjoneowihsfrbuqldkrrili54gdvryyd.onion" OR requesturl CONTAINS "syd5mtjvcqxvnnkeqjjkdm2oz2jzl6swrfhnvliiemxtgiqvcbm26nyd.onion" OR requesturl CONTAINS "tybocptxypx42ngrcqldrgas536syipwotmfnbjpwc5fpxth4xf4faqd.onion" OR requesturl CONTAINS "u7kteztwfg3p6wdeiq6y7zidxx3xtto4gmm2vwz42mzd6s4ixgvpgxyd.onion" OR requesturl CONTAINS "uu2iggf5wq57dt6xanfdmwq3rvxqorkb43bh2eacj2vz22nvwewlxcyd.onion" OR requesturl CONTAINS "wauby5e7m6zf2eb7rfn7nqm3diuaehdu6tfay4janiktgx33wjfifkyd.onion" OR requesturl CONTAINS "wf4uxi6izbqppzb4fvg4sq7sm5t5w5xl5v5pkxpguwpr4aci7hvzboid.onion" OR requesturl CONTAINS "wjd2t2lzbgb7g7bcenpl2r2bsobkbwwpooqrmiwqjkpktm5p5seifcid.onion" OR requesturl CONTAINS "xjdhr5is3qsw2cyekdxo57gchpxusvkko3265x2lmmn4g6fnlimdngqd.onion" OR requesturl CONTAINS "yjh2bktujnqkj7u7g7hxotck6sfhjuf7crhc4vcf6ewpa7swoqalfkid.onion" OR requesturl CONTAINS "yqs4gu4c2kb5ybgcigkl5gcsqbjuk5n2su2pozpsw4ojav2op5gddkid.onion")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "24rq2pvihkrct6pxl6zy3p36gt2wd6sn6izoz7ntlivxvbuu5ei3xwad.onion" OR destinationhostname CONTAINS "3crj2ylhdffpf2yik4bb2hn32xey2bdhcpykxfezb4sq53eelglp3sqd.onion" OR destinationhostname CONTAINS "44yd2dxmm5xuo7dsivwkf2fqyqmfsqkt5nkxdlgwpnbr57sca56j74yd.onion" OR destinationhostname CONTAINS "acuy77ahadd6g5rw2pxsuejskirjmxaoj37ck7fvj4h4kc36a3uwirqd.onion" OR destinationhostname CONTAINS "bbknilviexavjvnwdtdqmhsexqcokfwgdqthxexvuwzlwgaggddaahxn.onion" OR destinationhostname CONTAINS "bvxx2p6hfttpiyntpuf72axcvaakjbz5zgiea7iklkrb2s6wrdrv4lid.onion" OR destinationhostname CONTAINS "c3uybau64lj32ty3z3sxgchnrmg72bvbpua66mcvydcjpgrbv2r6huyd.onion" OR destinationhostname CONTAINS "drv4lids5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR destinationhostname CONTAINS "fend7yhjoeam7b4fp4rj5oobphuvmhjbovhtvporusjex4nyoiamgdyd.onion" OR destinationhostname CONTAINS "m5idjwoj4q5yrmo5xbnvhoqqrdld6pruxx5qjvr6gfnnmao4xiniwzid.onion" OR destinationhostname CONTAINS "m7wajjzas7eotqw4b6k4aei5q4zijdal3spsec7wsfmf2xqjhmydjiyd.onion" OR destinationhostname CONTAINS "npnsktlnofwisqvd3e6tpslinkypajmh5jctyjivuf6jza3syw2v6cid.onion" OR destinationhostname CONTAINS "pcjvbrttcy2s3gqpgwklgsco4u4bskr5xhvdzs4pzqqcrfllkwe437id.onion" OR destinationhostname CONTAINS "s4ofksblif7bmo7sp64f56gij6xzh7sznvrn46m6daup2hwdmwbiabqd.onion" OR destinationhostname CONTAINS "s5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR destinationhostname CONTAINS "sourt33xcdoyg4jcrh33qvx6cjoneowihsfrbuqldkrrili54gdvryyd.onion" OR destinationhostname CONTAINS "syd5mtjvcqxvnnkeqjjkdm2oz2jzl6swrfhnvliiemxtgiqvcbm26nyd.onion" OR destinationhostname CONTAINS "tybocptxypx42ngrcqldrgas536syipwotmfnbjpwc5fpxth4xf4faqd.onion" OR destinationhostname CONTAINS "u7kteztwfg3p6wdeiq6y7zidxx3xtto4gmm2vwz42mzd6s4ixgvpgxyd.onion" OR destinationhostname CONTAINS "uu2iggf5wq57dt6xanfdmwq3rvxqorkb43bh2eacj2vz22nvwewlxcyd.onion" OR destinationhostname CONTAINS "wauby5e7m6zf2eb7rfn7nqm3diuaehdu6tfay4janiktgx33wjfifkyd.onion" OR destinationhostname CONTAINS "wf4uxi6izbqppzb4fvg4sq7sm5t5w5xl5v5pkxpguwpr4aci7hvzboid.onion" OR destinationhostname CONTAINS "wjd2t2lzbgb7g7bcenpl2r2bsobkbwwpooqrmiwqjkpktm5p5seifcid.onion" OR destinationhostname CONTAINS "xjdhr5is3qsw2cyekdxo57gchpxusvkko3265x2lmmn4g6fnlimdngqd.onion" OR destinationhostname CONTAINS "yjh2bktujnqkj7u7g7hxotck6sfhjuf7crhc4vcf6ewpa7swoqalfkid.onion" OR destinationhostname CONTAINS "yqs4gu4c2kb5ybgcigkl5gcsqbjuk5n2su2pozpsw4ojav2op5gddkid.onion")
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "24rq2pvihkrct6pxl6zy3p36gt2wd6sn6izoz7ntlivxvbuu5ei3xwad.onion" OR sourcentdomain CONTAINS "3crj2ylhdffpf2yik4bb2hn32xey2bdhcpykxfezb4sq53eelglp3sqd.onion" OR sourcentdomain CONTAINS "44yd2dxmm5xuo7dsivwkf2fqyqmfsqkt5nkxdlgwpnbr57sca56j74yd.onion" OR sourcentdomain CONTAINS "acuy77ahadd6g5rw2pxsuejskirjmxaoj37ck7fvj4h4kc36a3uwirqd.onion" OR sourcentdomain CONTAINS "bbknilviexavjvnwdtdqmhsexqcokfwgdqthxexvuwzlwgaggddaahxn.onion" OR sourcentdomain CONTAINS "bvxx2p6hfttpiyntpuf72axcvaakjbz5zgiea7iklkrb2s6wrdrv4lid.onion" OR sourcentdomain CONTAINS "c3uybau64lj32ty3z3sxgchnrmg72bvbpua66mcvydcjpgrbv2r6huyd.onion" OR sourcentdomain CONTAINS "drv4lids5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR sourcentdomain CONTAINS "fend7yhjoeam7b4fp4rj5oobphuvmhjbovhtvporusjex4nyoiamgdyd.onion" OR sourcentdomain CONTAINS "m5idjwoj4q5yrmo5xbnvhoqqrdld6pruxx5qjvr6gfnnmao4xiniwzid.onion" OR sourcentdomain CONTAINS "m7wajjzas7eotqw4b6k4aei5q4zijdal3spsec7wsfmf2xqjhmydjiyd.onion" OR sourcentdomain CONTAINS "npnsktlnofwisqvd3e6tpslinkypajmh5jctyjivuf6jza3syw2v6cid.onion" OR sourcentdomain CONTAINS "pcjvbrttcy2s3gqpgwklgsco4u4bskr5xhvdzs4pzqqcrfllkwe437id.onion" OR sourcentdomain CONTAINS "s4ofksblif7bmo7sp64f56gij6xzh7sznvrn46m6daup2hwdmwbiabqd.onion" OR sourcentdomain CONTAINS "s5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR sourcentdomain CONTAINS "sourt33xcdoyg4jcrh33qvx6cjoneowihsfrbuqldkrrili54gdvryyd.onion" OR sourcentdomain CONTAINS "syd5mtjvcqxvnnkeqjjkdm2oz2jzl6swrfhnvliiemxtgiqvcbm26nyd.onion" OR sourcentdomain CONTAINS "tybocptxypx42ngrcqldrgas536syipwotmfnbjpwc5fpxth4xf4faqd.onion" OR sourcentdomain CONTAINS "u7kteztwfg3p6wdeiq6y7zidxx3xtto4gmm2vwz42mzd6s4ixgvpgxyd.onion" OR sourcentdomain CONTAINS "uu2iggf5wq57dt6xanfdmwq3rvxqorkb43bh2eacj2vz22nvwewlxcyd.onion" OR sourcentdomain CONTAINS "wauby5e7m6zf2eb7rfn7nqm3diuaehdu6tfay4janiktgx33wjfifkyd.onion" OR sourcentdomain CONTAINS "wf4uxi6izbqppzb4fvg4sq7sm5t5w5xl5v5pkxpguwpr4aci7hvzboid.onion" OR sourcentdomain CONTAINS "wjd2t2lzbgb7g7bcenpl2r2bsobkbwwpooqrmiwqjkpktm5p5seifcid.onion" OR sourcentdomain CONTAINS "xjdhr5is3qsw2cyekdxo57gchpxusvkko3265x2lmmn4g6fnlimdngqd.onion" OR sourcentdomain CONTAINS "yjh2bktujnqkj7u7g7hxotck6sfhjuf7crhc4vcf6ewpa7swoqalfkid.onion" OR sourcentdomain CONTAINS "yqs4gu4c2kb5ybgcigkl5gcsqbjuk5n2su2pozpsw4ojav2op5gddkid.onion")
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "24rq2pvihkrct6pxl6zy3p36gt2wd6sn6izoz7ntlivxvbuu5ei3xwad.onion" OR sourcehostname CONTAINS "3crj2ylhdffpf2yik4bb2hn32xey2bdhcpykxfezb4sq53eelglp3sqd.onion" OR sourcehostname CONTAINS "44yd2dxmm5xuo7dsivwkf2fqyqmfsqkt5nkxdlgwpnbr57sca56j74yd.onion" OR sourcehostname CONTAINS "acuy77ahadd6g5rw2pxsuejskirjmxaoj37ck7fvj4h4kc36a3uwirqd.onion" OR sourcehostname CONTAINS "bbknilviexavjvnwdtdqmhsexqcokfwgdqthxexvuwzlwgaggddaahxn.onion" OR sourcehostname CONTAINS "bvxx2p6hfttpiyntpuf72axcvaakjbz5zgiea7iklkrb2s6wrdrv4lid.onion" OR sourcehostname CONTAINS "c3uybau64lj32ty3z3sxgchnrmg72bvbpua66mcvydcjpgrbv2r6huyd.onion" OR sourcehostname CONTAINS "drv4lids5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR sourcehostname CONTAINS "fend7yhjoeam7b4fp4rj5oobphuvmhjbovhtvporusjex4nyoiamgdyd.onion" OR sourcehostname CONTAINS "m5idjwoj4q5yrmo5xbnvhoqqrdld6pruxx5qjvr6gfnnmao4xiniwzid.onion" OR sourcehostname CONTAINS "m7wajjzas7eotqw4b6k4aei5q4zijdal3spsec7wsfmf2xqjhmydjiyd.onion" OR sourcehostname CONTAINS "npnsktlnofwisqvd3e6tpslinkypajmh5jctyjivuf6jza3syw2v6cid.onion" OR sourcehostname CONTAINS "pcjvbrttcy2s3gqpgwklgsco4u4bskr5xhvdzs4pzqqcrfllkwe437id.onion" OR sourcehostname CONTAINS "s4ofksblif7bmo7sp64f56gij6xzh7sznvrn46m6daup2hwdmwbiabqd.onion" OR sourcehostname CONTAINS "s5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR sourcehostname CONTAINS "sourt33xcdoyg4jcrh33qvx6cjoneowihsfrbuqldkrrili54gdvryyd.onion" OR sourcehostname CONTAINS "syd5mtjvcqxvnnkeqjjkdm2oz2jzl6swrfhnvliiemxtgiqvcbm26nyd.onion" OR sourcehostname CONTAINS "tybocptxypx42ngrcqldrgas536syipwotmfnbjpwc5fpxth4xf4faqd.onion" OR sourcehostname CONTAINS "u7kteztwfg3p6wdeiq6y7zidxx3xtto4gmm2vwz42mzd6s4ixgvpgxyd.onion" OR sourcehostname CONTAINS "uu2iggf5wq57dt6xanfdmwq3rvxqorkb43bh2eacj2vz22nvwewlxcyd.onion" OR sourcehostname CONTAINS "wauby5e7m6zf2eb7rfn7nqm3diuaehdu6tfay4janiktgx33wjfifkyd.onion" OR sourcehostname CONTAINS "wf4uxi6izbqppzb4fvg4sq7sm5t5w5xl5v5pkxpguwpr4aci7hvzboid.onion" OR sourcehostname CONTAINS "wjd2t2lzbgb7g7bcenpl2r2bsobkbwwpooqrmiwqjkpktm5p5seifcid.onion" OR sourcehostname CONTAINS "xjdhr5is3qsw2cyekdxo57gchpxusvkko3265x2lmmn4g6fnlimdngqd.onion" OR sourcehostname CONTAINS "yjh2bktujnqkj7u7g7hxotck6sfhjuf7crhc4vcf6ewpa7swoqalfkid.onion" OR sourcehostname CONTAINS "yqs4gu4c2kb5ybgcigkl5gcsqbjuk5n2su2pozpsw4ojav2op5gddkid.onion")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "24rq2pvihkrct6pxl6zy3p36gt2wd6sn6izoz7ntlivxvbuu5ei3xwad.onion" OR destinationntdomain CONTAINS "3crj2ylhdffpf2yik4bb2hn32xey2bdhcpykxfezb4sq53eelglp3sqd.onion" OR destinationntdomain CONTAINS "44yd2dxmm5xuo7dsivwkf2fqyqmfsqkt5nkxdlgwpnbr57sca56j74yd.onion" OR destinationntdomain CONTAINS "acuy77ahadd6g5rw2pxsuejskirjmxaoj37ck7fvj4h4kc36a3uwirqd.onion" OR destinationntdomain CONTAINS "bbknilviexavjvnwdtdqmhsexqcokfwgdqthxexvuwzlwgaggddaahxn.onion" OR destinationntdomain CONTAINS "bvxx2p6hfttpiyntpuf72axcvaakjbz5zgiea7iklkrb2s6wrdrv4lid.onion" OR destinationntdomain CONTAINS "c3uybau64lj32ty3z3sxgchnrmg72bvbpua66mcvydcjpgrbv2r6huyd.onion" OR destinationntdomain CONTAINS "drv4lids5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR destinationntdomain CONTAINS "fend7yhjoeam7b4fp4rj5oobphuvmhjbovhtvporusjex4nyoiamgdyd.onion" OR destinationntdomain CONTAINS "m5idjwoj4q5yrmo5xbnvhoqqrdld6pruxx5qjvr6gfnnmao4xiniwzid.onion" OR destinationntdomain CONTAINS "m7wajjzas7eotqw4b6k4aei5q4zijdal3spsec7wsfmf2xqjhmydjiyd.onion" OR destinationntdomain CONTAINS "npnsktlnofwisqvd3e6tpslinkypajmh5jctyjivuf6jza3syw2v6cid.onion" OR destinationntdomain CONTAINS "pcjvbrttcy2s3gqpgwklgsco4u4bskr5xhvdzs4pzqqcrfllkwe437id.onion" OR destinationntdomain CONTAINS "s4ofksblif7bmo7sp64f56gij6xzh7sznvrn46m6daup2hwdmwbiabqd.onion" OR destinationntdomain CONTAINS "s5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR destinationntdomain CONTAINS "sourt33xcdoyg4jcrh33qvx6cjoneowihsfrbuqldkrrili54gdvryyd.onion" OR destinationntdomain CONTAINS "syd5mtjvcqxvnnkeqjjkdm2oz2jzl6swrfhnvliiemxtgiqvcbm26nyd.onion" OR destinationntdomain CONTAINS "tybocptxypx42ngrcqldrgas536syipwotmfnbjpwc5fpxth4xf4faqd.onion" OR destinationntdomain CONTAINS "u7kteztwfg3p6wdeiq6y7zidxx3xtto4gmm2vwz42mzd6s4ixgvpgxyd.onion" OR destinationntdomain CONTAINS "uu2iggf5wq57dt6xanfdmwq3rvxqorkb43bh2eacj2vz22nvwewlxcyd.onion" OR destinationntdomain CONTAINS "wauby5e7m6zf2eb7rfn7nqm3diuaehdu6tfay4janiktgx33wjfifkyd.onion" OR destinationntdomain CONTAINS "wf4uxi6izbqppzb4fvg4sq7sm5t5w5xl5v5pkxpguwpr4aci7hvzboid.onion" OR destinationntdomain CONTAINS "wjd2t2lzbgb7g7bcenpl2r2bsobkbwwpooqrmiwqjkpktm5p5seifcid.onion" OR destinationntdomain CONTAINS "xjdhr5is3qsw2cyekdxo57gchpxusvkko3265x2lmmn4g6fnlimdngqd.onion" OR destinationntdomain CONTAINS "yjh2bktujnqkj7u7g7hxotck6sfhjuf7crhc4vcf6ewpa7swoqalfkid.onion" OR destinationntdomain CONTAINS "yqs4gu4c2kb5ybgcigkl5gcsqbjuk5n2su2pozpsw4ojav2op5gddkid.onion")
index=activity AND rg_functionality="Cloud Application Security Broker" AND requesturl NOT NULL AND (requesturl CONTAINS "24rq2pvihkrct6pxl6zy3p36gt2wd6sn6izoz7ntlivxvbuu5ei3xwad.onion" OR requesturl CONTAINS "3crj2ylhdffpf2yik4bb2hn32xey2bdhcpykxfezb4sq53eelglp3sqd.onion" OR requesturl CONTAINS "44yd2dxmm5xuo7dsivwkf2fqyqmfsqkt5nkxdlgwpnbr57sca56j74yd.onion" OR requesturl CONTAINS "acuy77ahadd6g5rw2pxsuejskirjmxaoj37ck7fvj4h4kc36a3uwirqd.onion" OR requesturl CONTAINS "bbknilviexavjvnwdtdqmhsexqcokfwgdqthxexvuwzlwgaggddaahxn.onion" OR requesturl CONTAINS "bvxx2p6hfttpiyntpuf72axcvaakjbz5zgiea7iklkrb2s6wrdrv4lid.onion" OR requesturl CONTAINS "c3uybau64lj32ty3z3sxgchnrmg72bvbpua66mcvydcjpgrbv2r6huyd.onion" OR requesturl CONTAINS "drv4lids5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR requesturl CONTAINS "fend7yhjoeam7b4fp4rj5oobphuvmhjbovhtvporusjex4nyoiamgdyd.onion" OR requesturl CONTAINS "m5idjwoj4q5yrmo5xbnvhoqqrdld6pruxx5qjvr6gfnnmao4xiniwzid.onion" OR requesturl CONTAINS "m7wajjzas7eotqw4b6k4aei5q4zijdal3spsec7wsfmf2xqjhmydjiyd.onion" OR requesturl CONTAINS "npnsktlnofwisqvd3e6tpslinkypajmh5jctyjivuf6jza3syw2v6cid.onion" OR requesturl CONTAINS "pcjvbrttcy2s3gqpgwklgsco4u4bskr5xhvdzs4pzqqcrfllkwe437id.onion" OR requesturl CONTAINS "s4ofksblif7bmo7sp64f56gij6xzh7sznvrn46m6daup2hwdmwbiabqd.onion" OR requesturl CONTAINS "s5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR requesturl CONTAINS "sourt33xcdoyg4jcrh33qvx6cjoneowihsfrbuqldkrrili54gdvryyd.onion" OR requesturl CONTAINS "syd5mtjvcqxvnnkeqjjkdm2oz2jzl6swrfhnvliiemxtgiqvcbm26nyd.onion" OR requesturl CONTAINS "tybocptxypx42ngrcqldrgas536syipwotmfnbjpwc5fpxth4xf4faqd.onion" OR requesturl CONTAINS "u7kteztwfg3p6wdeiq6y7zidxx3xtto4gmm2vwz42mzd6s4ixgvpgxyd.onion" OR requesturl CONTAINS "uu2iggf5wq57dt6xanfdmwq3rvxqorkb43bh2eacj2vz22nvwewlxcyd.onion" OR requesturl CONTAINS "wauby5e7m6zf2eb7rfn7nqm3diuaehdu6tfay4janiktgx33wjfifkyd.onion" OR requesturl CONTAINS "wf4uxi6izbqppzb4fvg4sq7sm5t5w5xl5v5pkxpguwpr4aci7hvzboid.onion" OR requesturl CONTAINS "wjd2t2lzbgb7g7bcenpl2r2bsobkbwwpooqrmiwqjkpktm5p5seifcid.onion" OR requesturl CONTAINS "xjdhr5is3qsw2cyekdxo57gchpxusvkko3265x2lmmn4g6fnlimdngqd.onion" OR requesturl CONTAINS "yjh2bktujnqkj7u7g7hxotck6sfhjuf7crhc4vcf6ewpa7swoqalfkid.onion" OR requesturl CONTAINS "yqs4gu4c2kb5ybgcigkl5gcsqbjuk5n2su2pozpsw4ojav2op5gddkid.onion")
index=activity AND rg_functionality="Source Code Repository" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "24rq2pvihkrct6pxl6zy3p36gt2wd6sn6izoz7ntlivxvbuu5ei3xwad.onion" OR destinationhostname CONTAINS "3crj2ylhdffpf2yik4bb2hn32xey2bdhcpykxfezb4sq53eelglp3sqd.onion" OR destinationhostname CONTAINS "44yd2dxmm5xuo7dsivwkf2fqyqmfsqkt5nkxdlgwpnbr57sca56j74yd.onion" OR destinationhostname CONTAINS "acuy77ahadd6g5rw2pxsuejskirjmxaoj37ck7fvj4h4kc36a3uwirqd.onion" OR destinationhostname CONTAINS "bbknilviexavjvnwdtdqmhsexqcokfwgdqthxexvuwzlwgaggddaahxn.onion" OR destinationhostname CONTAINS "bvxx2p6hfttpiyntpuf72axcvaakjbz5zgiea7iklkrb2s6wrdrv4lid.onion" OR destinationhostname CONTAINS "c3uybau64lj32ty3z3sxgchnrmg72bvbpua66mcvydcjpgrbv2r6huyd.onion" OR destinationhostname CONTAINS "drv4lids5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR destinationhostname CONTAINS "fend7yhjoeam7b4fp4rj5oobphuvmhjbovhtvporusjex4nyoiamgdyd.onion" OR destinationhostname CONTAINS "m5idjwoj4q5yrmo5xbnvhoqqrdld6pruxx5qjvr6gfnnmao4xiniwzid.onion" OR destinationhostname CONTAINS "m7wajjzas7eotqw4b6k4aei5q4zijdal3spsec7wsfmf2xqjhmydjiyd.onion" OR destinationhostname CONTAINS "npnsktlnofwisqvd3e6tpslinkypajmh5jctyjivuf6jza3syw2v6cid.onion" OR destinationhostname CONTAINS "pcjvbrttcy2s3gqpgwklgsco4u4bskr5xhvdzs4pzqqcrfllkwe437id.onion" OR destinationhostname CONTAINS "s4ofksblif7bmo7sp64f56gij6xzh7sznvrn46m6daup2hwdmwbiabqd.onion" OR destinationhostname CONTAINS "s5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR destinationhostname CONTAINS "sourt33xcdoyg4jcrh33qvx6cjoneowihsfrbuqldkrrili54gdvryyd.onion" OR destinationhostname CONTAINS "syd5mtjvcqxvnnkeqjjkdm2oz2jzl6swrfhnvliiemxtgiqvcbm26nyd.onion" OR destinationhostname CONTAINS "tybocptxypx42ngrcqldrgas536syipwotmfnbjpwc5fpxth4xf4faqd.onion" OR destinationhostname CONTAINS "u7kteztwfg3p6wdeiq6y7zidxx3xtto4gmm2vwz42mzd6s4ixgvpgxyd.onion" OR destinationhostname CONTAINS "uu2iggf5wq57dt6xanfdmwq3rvxqorkb43bh2eacj2vz22nvwewlxcyd.onion" OR destinationhostname CONTAINS "wauby5e7m6zf2eb7rfn7nqm3diuaehdu6tfay4janiktgx33wjfifkyd.onion" OR destinationhostname CONTAINS "wf4uxi6izbqppzb4fvg4sq7sm5t5w5xl5v5pkxpguwpr4aci7hvzboid.onion" OR destinationhostname CONTAINS "wjd2t2lzbgb7g7bcenpl2r2bsobkbwwpooqrmiwqjkpktm5p5seifcid.onion" OR destinationhostname CONTAINS "xjdhr5is3qsw2cyekdxo57gchpxusvkko3265x2lmmn4g6fnlimdngqd.onion" OR destinationhostname CONTAINS "yjh2bktujnqkj7u7g7hxotck6sfhjuf7crhc4vcf6ewpa7swoqalfkid.onion" OR destinationhostname CONTAINS "yqs4gu4c2kb5ybgcigkl5gcsqbjuk5n2su2pozpsw4ojav2op5gddkid.onion")
index=activity AND rg_functionality="Source Code Repository" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "24rq2pvihkrct6pxl6zy3p36gt2wd6sn6izoz7ntlivxvbuu5ei3xwad.onion" OR sourcentdomain CONTAINS "3crj2ylhdffpf2yik4bb2hn32xey2bdhcpykxfezb4sq53eelglp3sqd.onion" OR sourcentdomain CONTAINS "44yd2dxmm5xuo7dsivwkf2fqyqmfsqkt5nkxdlgwpnbr57sca56j74yd.onion" OR sourcentdomain CONTAINS "acuy77ahadd6g5rw2pxsuejskirjmxaoj37ck7fvj4h4kc36a3uwirqd.onion" OR sourcentdomain CONTAINS "bbknilviexavjvnwdtdqmhsexqcokfwgdqthxexvuwzlwgaggddaahxn.onion" OR sourcentdomain CONTAINS "bvxx2p6hfttpiyntpuf72axcvaakjbz5zgiea7iklkrb2s6wrdrv4lid.onion" OR sourcentdomain CONTAINS "c3uybau64lj32ty3z3sxgchnrmg72bvbpua66mcvydcjpgrbv2r6huyd.onion" OR sourcentdomain CONTAINS "drv4lids5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR sourcentdomain CONTAINS "fend7yhjoeam7b4fp4rj5oobphuvmhjbovhtvporusjex4nyoiamgdyd.onion" OR sourcentdomain CONTAINS "m5idjwoj4q5yrmo5xbnvhoqqrdld6pruxx5qjvr6gfnnmao4xiniwzid.onion" OR sourcentdomain CONTAINS "m7wajjzas7eotqw4b6k4aei5q4zijdal3spsec7wsfmf2xqjhmydjiyd.onion" OR sourcentdomain CONTAINS "npnsktlnofwisqvd3e6tpslinkypajmh5jctyjivuf6jza3syw2v6cid.onion" OR sourcentdomain CONTAINS "pcjvbrttcy2s3gqpgwklgsco4u4bskr5xhvdzs4pzqqcrfllkwe437id.onion" OR sourcentdomain CONTAINS "s4ofksblif7bmo7sp64f56gij6xzh7sznvrn46m6daup2hwdmwbiabqd.onion" OR sourcentdomain CONTAINS "s5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR sourcentdomain CONTAINS "sourt33xcdoyg4jcrh33qvx6cjoneowihsfrbuqldkrrili54gdvryyd.onion" OR sourcentdomain CONTAINS "syd5mtjvcqxvnnkeqjjkdm2oz2jzl6swrfhnvliiemxtgiqvcbm26nyd.onion" OR sourcentdomain CONTAINS "tybocptxypx42ngrcqldrgas536syipwotmfnbjpwc5fpxth4xf4faqd.onion" OR sourcentdomain CONTAINS "u7kteztwfg3p6wdeiq6y7zidxx3xtto4gmm2vwz42mzd6s4ixgvpgxyd.onion" OR sourcentdomain CONTAINS "uu2iggf5wq57dt6xanfdmwq3rvxqorkb43bh2eacj2vz22nvwewlxcyd.onion" OR sourcentdomain CONTAINS "wauby5e7m6zf2eb7rfn7nqm3diuaehdu6tfay4janiktgx33wjfifkyd.onion" OR sourcentdomain CONTAINS "wf4uxi6izbqppzb4fvg4sq7sm5t5w5xl5v5pkxpguwpr4aci7hvzboid.onion" OR sourcentdomain CONTAINS "wjd2t2lzbgb7g7bcenpl2r2bsobkbwwpooqrmiwqjkpktm5p5seifcid.onion" OR sourcentdomain CONTAINS "xjdhr5is3qsw2cyekdxo57gchpxusvkko3265x2lmmn4g6fnlimdngqd.onion" OR sourcentdomain CONTAINS "yjh2bktujnqkj7u7g7hxotck6sfhjuf7crhc4vcf6ewpa7swoqalfkid.onion" OR sourcentdomain CONTAINS "yqs4gu4c2kb5ybgcigkl5gcsqbjuk5n2su2pozpsw4ojav2op5gddkid.onion")
index=activity AND rg_functionality="Source Code Repository" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "24rq2pvihkrct6pxl6zy3p36gt2wd6sn6izoz7ntlivxvbuu5ei3xwad.onion" OR sourcehostname CONTAINS "3crj2ylhdffpf2yik4bb2hn32xey2bdhcpykxfezb4sq53eelglp3sqd.onion" OR sourcehostname CONTAINS "44yd2dxmm5xuo7dsivwkf2fqyqmfsqkt5nkxdlgwpnbr57sca56j74yd.onion" OR sourcehostname CONTAINS "acuy77ahadd6g5rw2pxsuejskirjmxaoj37ck7fvj4h4kc36a3uwirqd.onion" OR sourcehostname CONTAINS "bbknilviexavjvnwdtdqmhsexqcokfwgdqthxexvuwzlwgaggddaahxn.onion" OR sourcehostname CONTAINS "bvxx2p6hfttpiyntpuf72axcvaakjbz5zgiea7iklkrb2s6wrdrv4lid.onion" OR sourcehostname CONTAINS "c3uybau64lj32ty3z3sxgchnrmg72bvbpua66mcvydcjpgrbv2r6huyd.onion" OR sourcehostname CONTAINS "drv4lids5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR sourcehostname CONTAINS "fend7yhjoeam7b4fp4rj5oobphuvmhjbovhtvporusjex4nyoiamgdyd.onion" OR sourcehostname CONTAINS "m5idjwoj4q5yrmo5xbnvhoqqrdld6pruxx5qjvr6gfnnmao4xiniwzid.onion" OR sourcehostname CONTAINS "m7wajjzas7eotqw4b6k4aei5q4zijdal3spsec7wsfmf2xqjhmydjiyd.onion" OR sourcehostname CONTAINS "npnsktlnofwisqvd3e6tpslinkypajmh5jctyjivuf6jza3syw2v6cid.onion" OR sourcehostname CONTAINS "pcjvbrttcy2s3gqpgwklgsco4u4bskr5xhvdzs4pzqqcrfllkwe437id.onion" OR sourcehostname CONTAINS "s4ofksblif7bmo7sp64f56gij6xzh7sznvrn46m6daup2hwdmwbiabqd.onion" OR sourcehostname CONTAINS "s5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR sourcehostname CONTAINS "sourt33xcdoyg4jcrh33qvx6cjoneowihsfrbuqldkrrili54gdvryyd.onion" OR sourcehostname CONTAINS "syd5mtjvcqxvnnkeqjjkdm2oz2jzl6swrfhnvliiemxtgiqvcbm26nyd.onion" OR sourcehostname CONTAINS "tybocptxypx42ngrcqldrgas536syipwotmfnbjpwc5fpxth4xf4faqd.onion" OR sourcehostname CONTAINS "u7kteztwfg3p6wdeiq6y7zidxx3xtto4gmm2vwz42mzd6s4ixgvpgxyd.onion" OR sourcehostname CONTAINS "uu2iggf5wq57dt6xanfdmwq3rvxqorkb43bh2eacj2vz22nvwewlxcyd.onion" OR sourcehostname CONTAINS "wauby5e7m6zf2eb7rfn7nqm3diuaehdu6tfay4janiktgx33wjfifkyd.onion" OR sourcehostname CONTAINS "wf4uxi6izbqppzb4fvg4sq7sm5t5w5xl5v5pkxpguwpr4aci7hvzboid.onion" OR sourcehostname CONTAINS "wjd2t2lzbgb7g7bcenpl2r2bsobkbwwpooqrmiwqjkpktm5p5seifcid.onion" OR sourcehostname CONTAINS "xjdhr5is3qsw2cyekdxo57gchpxusvkko3265x2lmmn4g6fnlimdngqd.onion" OR sourcehostname CONTAINS "yjh2bktujnqkj7u7g7hxotck6sfhjuf7crhc4vcf6ewpa7swoqalfkid.onion" OR sourcehostname CONTAINS "yqs4gu4c2kb5ybgcigkl5gcsqbjuk5n2su2pozpsw4ojav2op5gddkid.onion")
index=activity AND rg_functionality="Source Code Repository" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "24rq2pvihkrct6pxl6zy3p36gt2wd6sn6izoz7ntlivxvbuu5ei3xwad.onion" OR destinationntdomain CONTAINS "3crj2ylhdffpf2yik4bb2hn32xey2bdhcpykxfezb4sq53eelglp3sqd.onion" OR destinationntdomain CONTAINS "44yd2dxmm5xuo7dsivwkf2fqyqmfsqkt5nkxdlgwpnbr57sca56j74yd.onion" OR destinationntdomain CONTAINS "acuy77ahadd6g5rw2pxsuejskirjmxaoj37ck7fvj4h4kc36a3uwirqd.onion" OR destinationntdomain CONTAINS "bbknilviexavjvnwdtdqmhsexqcokfwgdqthxexvuwzlwgaggddaahxn.onion" OR destinationntdomain CONTAINS "bvxx2p6hfttpiyntpuf72axcvaakjbz5zgiea7iklkrb2s6wrdrv4lid.onion" OR destinationntdomain CONTAINS "c3uybau64lj32ty3z3sxgchnrmg72bvbpua66mcvydcjpgrbv2r6huyd.onion" OR destinationntdomain CONTAINS "drv4lids5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR destinationntdomain CONTAINS "fend7yhjoeam7b4fp4rj5oobphuvmhjbovhtvporusjex4nyoiamgdyd.onion" OR destinationntdomain CONTAINS "m5idjwoj4q5yrmo5xbnvhoqqrdld6pruxx5qjvr6gfnnmao4xiniwzid.onion" OR destinationntdomain CONTAINS "m7wajjzas7eotqw4b6k4aei5q4zijdal3spsec7wsfmf2xqjhmydjiyd.onion" OR destinationntdomain CONTAINS "npnsktlnofwisqvd3e6tpslinkypajmh5jctyjivuf6jza3syw2v6cid.onion" OR destinationntdomain CONTAINS "pcjvbrttcy2s3gqpgwklgsco4u4bskr5xhvdzs4pzqqcrfllkwe437id.onion" OR destinationntdomain CONTAINS "s4ofksblif7bmo7sp64f56gij6xzh7sznvrn46m6daup2hwdmwbiabqd.onion" OR destinationntdomain CONTAINS "s5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR destinationntdomain CONTAINS "sourt33xcdoyg4jcrh33qvx6cjoneowihsfrbuqldkrrili54gdvryyd.onion" OR destinationntdomain CONTAINS "syd5mtjvcqxvnnkeqjjkdm2oz2jzl6swrfhnvliiemxtgiqvcbm26nyd.onion" OR destinationntdomain CONTAINS "tybocptxypx42ngrcqldrgas536syipwotmfnbjpwc5fpxth4xf4faqd.onion" OR destinationntdomain CONTAINS "u7kteztwfg3p6wdeiq6y7zidxx3xtto4gmm2vwz42mzd6s4ixgvpgxyd.onion" OR destinationntdomain CONTAINS "uu2iggf5wq57dt6xanfdmwq3rvxqorkb43bh2eacj2vz22nvwewlxcyd.onion" OR destinationntdomain CONTAINS "wauby5e7m6zf2eb7rfn7nqm3diuaehdu6tfay4janiktgx33wjfifkyd.onion" OR destinationntdomain CONTAINS "wf4uxi6izbqppzb4fvg4sq7sm5t5w5xl5v5pkxpguwpr4aci7hvzboid.onion" OR destinationntdomain CONTAINS "wjd2t2lzbgb7g7bcenpl2r2bsobkbwwpooqrmiwqjkpktm5p5seifcid.onion" OR destinationntdomain CONTAINS "xjdhr5is3qsw2cyekdxo57gchpxusvkko3265x2lmmn4g6fnlimdngqd.onion" OR destinationntdomain CONTAINS "yjh2bktujnqkj7u7g7hxotck6sfhjuf7crhc4vcf6ewpa7swoqalfkid.onion" OR destinationntdomain CONTAINS "yqs4gu4c2kb5ybgcigkl5gcsqbjuk5n2su2pozpsw4ojav2op5gddkid.onion")
index=activity AND rg_functionality="Source Code Repository" AND requesturl NOT NULL AND (requesturl CONTAINS "24rq2pvihkrct6pxl6zy3p36gt2wd6sn6izoz7ntlivxvbuu5ei3xwad.onion" OR requesturl CONTAINS "3crj2ylhdffpf2yik4bb2hn32xey2bdhcpykxfezb4sq53eelglp3sqd.onion" OR requesturl CONTAINS "44yd2dxmm5xuo7dsivwkf2fqyqmfsqkt5nkxdlgwpnbr57sca56j74yd.onion" OR requesturl CONTAINS "acuy77ahadd6g5rw2pxsuejskirjmxaoj37ck7fvj4h4kc36a3uwirqd.onion" OR requesturl CONTAINS "bbknilviexavjvnwdtdqmhsexqcokfwgdqthxexvuwzlwgaggddaahxn.onion" OR requesturl CONTAINS "bvxx2p6hfttpiyntpuf72axcvaakjbz5zgiea7iklkrb2s6wrdrv4lid.onion" OR requesturl CONTAINS "c3uybau64lj32ty3z3sxgchnrmg72bvbpua66mcvydcjpgrbv2r6huyd.onion" OR requesturl CONTAINS "drv4lids5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR requesturl CONTAINS "fend7yhjoeam7b4fp4rj5oobphuvmhjbovhtvporusjex4nyoiamgdyd.onion" OR requesturl CONTAINS "m5idjwoj4q5yrmo5xbnvhoqqrdld6pruxx5qjvr6gfnnmao4xiniwzid.onion" OR requesturl CONTAINS "m7wajjzas7eotqw4b6k4aei5q4zijdal3spsec7wsfmf2xqjhmydjiyd.onion" OR requesturl CONTAINS "npnsktlnofwisqvd3e6tpslinkypajmh5jctyjivuf6jza3syw2v6cid.onion" OR requesturl CONTAINS "pcjvbrttcy2s3gqpgwklgsco4u4bskr5xhvdzs4pzqqcrfllkwe437id.onion" OR requesturl CONTAINS "s4ofksblif7bmo7sp64f56gij6xzh7sznvrn46m6daup2hwdmwbiabqd.onion" OR requesturl CONTAINS "s5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR requesturl CONTAINS "sourt33xcdoyg4jcrh33qvx6cjoneowihsfrbuqldkrrili54gdvryyd.onion" OR requesturl CONTAINS "syd5mtjvcqxvnnkeqjjkdm2oz2jzl6swrfhnvliiemxtgiqvcbm26nyd.onion" OR requesturl CONTAINS "tybocptxypx42ngrcqldrgas536syipwotmfnbjpwc5fpxth4xf4faqd.onion" OR requesturl CONTAINS "u7kteztwfg3p6wdeiq6y7zidxx3xtto4gmm2vwz42mzd6s4ixgvpgxyd.onion" OR requesturl CONTAINS "uu2iggf5wq57dt6xanfdmwq3rvxqorkb43bh2eacj2vz22nvwewlxcyd.onion" OR requesturl CONTAINS "wauby5e7m6zf2eb7rfn7nqm3diuaehdu6tfay4janiktgx33wjfifkyd.onion" OR requesturl CONTAINS "wf4uxi6izbqppzb4fvg4sq7sm5t5w5xl5v5pkxpguwpr4aci7hvzboid.onion" OR requesturl CONTAINS "wjd2t2lzbgb7g7bcenpl2r2bsobkbwwpooqrmiwqjkpktm5p5seifcid.onion" OR requesturl CONTAINS "xjdhr5is3qsw2cyekdxo57gchpxusvkko3265x2lmmn4g6fnlimdngqd.onion" OR requesturl CONTAINS "yjh2bktujnqkj7u7g7hxotck6sfhjuf7crhc4vcf6ewpa7swoqalfkid.onion" OR requesturl CONTAINS "yqs4gu4c2kb5ybgcigkl5gcsqbjuk5n2su2pozpsw4ojav2op5gddkid.onion")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "24rq2pvihkrct6pxl6zy3p36gt2wd6sn6izoz7ntlivxvbuu5ei3xwad.onion" OR destinationhostname CONTAINS "3crj2ylhdffpf2yik4bb2hn32xey2bdhcpykxfezb4sq53eelglp3sqd.onion" OR destinationhostname CONTAINS "44yd2dxmm5xuo7dsivwkf2fqyqmfsqkt5nkxdlgwpnbr57sca56j74yd.onion" OR destinationhostname CONTAINS "acuy77ahadd6g5rw2pxsuejskirjmxaoj37ck7fvj4h4kc36a3uwirqd.onion" OR destinationhostname CONTAINS "bbknilviexavjvnwdtdqmhsexqcokfwgdqthxexvuwzlwgaggddaahxn.onion" OR destinationhostname CONTAINS "bvxx2p6hfttpiyntpuf72axcvaakjbz5zgiea7iklkrb2s6wrdrv4lid.onion" OR destinationhostname CONTAINS "c3uybau64lj32ty3z3sxgchnrmg72bvbpua66mcvydcjpgrbv2r6huyd.onion" OR destinationhostname CONTAINS "drv4lids5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR destinationhostname CONTAINS "fend7yhjoeam7b4fp4rj5oobphuvmhjbovhtvporusjex4nyoiamgdyd.onion" OR destinationhostname CONTAINS "m5idjwoj4q5yrmo5xbnvhoqqrdld6pruxx5qjvr6gfnnmao4xiniwzid.onion" OR destinationhostname CONTAINS "m7wajjzas7eotqw4b6k4aei5q4zijdal3spsec7wsfmf2xqjhmydjiyd.onion" OR destinationhostname CONTAINS "npnsktlnofwisqvd3e6tpslinkypajmh5jctyjivuf6jza3syw2v6cid.onion" OR destinationhostname CONTAINS "pcjvbrttcy2s3gqpgwklgsco4u4bskr5xhvdzs4pzqqcrfllkwe437id.onion" OR destinationhostname CONTAINS "s4ofksblif7bmo7sp64f56gij6xzh7sznvrn46m6daup2hwdmwbiabqd.onion" OR destinationhostname CONTAINS "s5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR destinationhostname CONTAINS "sourt33xcdoyg4jcrh33qvx6cjoneowihsfrbuqldkrrili54gdvryyd.onion" OR destinationhostname CONTAINS "syd5mtjvcqxvnnkeqjjkdm2oz2jzl6swrfhnvliiemxtgiqvcbm26nyd.onion" OR destinationhostname CONTAINS "tybocptxypx42ngrcqldrgas536syipwotmfnbjpwc5fpxth4xf4faqd.onion" OR destinationhostname CONTAINS "u7kteztwfg3p6wdeiq6y7zidxx3xtto4gmm2vwz42mzd6s4ixgvpgxyd.onion" OR destinationhostname CONTAINS "uu2iggf5wq57dt6xanfdmwq3rvxqorkb43bh2eacj2vz22nvwewlxcyd.onion" OR destinationhostname CONTAINS "wauby5e7m6zf2eb7rfn7nqm3diuaehdu6tfay4janiktgx33wjfifkyd.onion" OR destinationhostname CONTAINS "wf4uxi6izbqppzb4fvg4sq7sm5t5w5xl5v5pkxpguwpr4aci7hvzboid.onion" OR destinationhostname CONTAINS "wjd2t2lzbgb7g7bcenpl2r2bsobkbwwpooqrmiwqjkpktm5p5seifcid.onion" OR destinationhostname CONTAINS "xjdhr5is3qsw2cyekdxo57gchpxusvkko3265x2lmmn4g6fnlimdngqd.onion" OR destinationhostname CONTAINS "yjh2bktujnqkj7u7g7hxotck6sfhjuf7crhc4vcf6ewpa7swoqalfkid.onion" OR destinationhostname CONTAINS "yqs4gu4c2kb5ybgcigkl5gcsqbjuk5n2su2pozpsw4ojav2op5gddkid.onion")
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "24rq2pvihkrct6pxl6zy3p36gt2wd6sn6izoz7ntlivxvbuu5ei3xwad.onion" OR sourcentdomain CONTAINS "3crj2ylhdffpf2yik4bb2hn32xey2bdhcpykxfezb4sq53eelglp3sqd.onion" OR sourcentdomain CONTAINS "44yd2dxmm5xuo7dsivwkf2fqyqmfsqkt5nkxdlgwpnbr57sca56j74yd.onion" OR sourcentdomain CONTAINS "acuy77ahadd6g5rw2pxsuejskirjmxaoj37ck7fvj4h4kc36a3uwirqd.onion" OR sourcentdomain CONTAINS "bbknilviexavjvnwdtdqmhsexqcokfwgdqthxexvuwzlwgaggddaahxn.onion" OR sourcentdomain CONTAINS "bvxx2p6hfttpiyntpuf72axcvaakjbz5zgiea7iklkrb2s6wrdrv4lid.onion" OR sourcentdomain CONTAINS "c3uybau64lj32ty3z3sxgchnrmg72bvbpua66mcvydcjpgrbv2r6huyd.onion" OR sourcentdomain CONTAINS "drv4lids5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR sourcentdomain CONTAINS "fend7yhjoeam7b4fp4rj5oobphuvmhjbovhtvporusjex4nyoiamgdyd.onion" OR sourcentdomain CONTAINS "m5idjwoj4q5yrmo5xbnvhoqqrdld6pruxx5qjvr6gfnnmao4xiniwzid.onion" OR sourcentdomain CONTAINS "m7wajjzas7eotqw4b6k4aei5q4zijdal3spsec7wsfmf2xqjhmydjiyd.onion" OR sourcentdomain CONTAINS "npnsktlnofwisqvd3e6tpslinkypajmh5jctyjivuf6jza3syw2v6cid.onion" OR sourcentdomain CONTAINS "pcjvbrttcy2s3gqpgwklgsco4u4bskr5xhvdzs4pzqqcrfllkwe437id.onion" OR sourcentdomain CONTAINS "s4ofksblif7bmo7sp64f56gij6xzh7sznvrn46m6daup2hwdmwbiabqd.onion" OR sourcentdomain CONTAINS "s5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR sourcentdomain CONTAINS "sourt33xcdoyg4jcrh33qvx6cjoneowihsfrbuqldkrrili54gdvryyd.onion" OR sourcentdomain CONTAINS "syd5mtjvcqxvnnkeqjjkdm2oz2jzl6swrfhnvliiemxtgiqvcbm26nyd.onion" OR sourcentdomain CONTAINS "tybocptxypx42ngrcqldrgas536syipwotmfnbjpwc5fpxth4xf4faqd.onion" OR sourcentdomain CONTAINS "u7kteztwfg3p6wdeiq6y7zidxx3xtto4gmm2vwz42mzd6s4ixgvpgxyd.onion" OR sourcentdomain CONTAINS "uu2iggf5wq57dt6xanfdmwq3rvxqorkb43bh2eacj2vz22nvwewlxcyd.onion" OR sourcentdomain CONTAINS "wauby5e7m6zf2eb7rfn7nqm3diuaehdu6tfay4janiktgx33wjfifkyd.onion" OR sourcentdomain CONTAINS "wf4uxi6izbqppzb4fvg4sq7sm5t5w5xl5v5pkxpguwpr4aci7hvzboid.onion" OR sourcentdomain CONTAINS "wjd2t2lzbgb7g7bcenpl2r2bsobkbwwpooqrmiwqjkpktm5p5seifcid.onion" OR sourcentdomain CONTAINS "xjdhr5is3qsw2cyekdxo57gchpxusvkko3265x2lmmn4g6fnlimdngqd.onion" OR sourcentdomain CONTAINS "yjh2bktujnqkj7u7g7hxotck6sfhjuf7crhc4vcf6ewpa7swoqalfkid.onion" OR sourcentdomain CONTAINS "yqs4gu4c2kb5ybgcigkl5gcsqbjuk5n2su2pozpsw4ojav2op5gddkid.onion")
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "24rq2pvihkrct6pxl6zy3p36gt2wd6sn6izoz7ntlivxvbuu5ei3xwad.onion" OR sourcehostname CONTAINS "3crj2ylhdffpf2yik4bb2hn32xey2bdhcpykxfezb4sq53eelglp3sqd.onion" OR sourcehostname CONTAINS "44yd2dxmm5xuo7dsivwkf2fqyqmfsqkt5nkxdlgwpnbr57sca56j74yd.onion" OR sourcehostname CONTAINS "acuy77ahadd6g5rw2pxsuejskirjmxaoj37ck7fvj4h4kc36a3uwirqd.onion" OR sourcehostname CONTAINS "bbknilviexavjvnwdtdqmhsexqcokfwgdqthxexvuwzlwgaggddaahxn.onion" OR sourcehostname CONTAINS "bvxx2p6hfttpiyntpuf72axcvaakjbz5zgiea7iklkrb2s6wrdrv4lid.onion" OR sourcehostname CONTAINS "c3uybau64lj32ty3z3sxgchnrmg72bvbpua66mcvydcjpgrbv2r6huyd.onion" OR sourcehostname CONTAINS "drv4lids5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR sourcehostname CONTAINS "fend7yhjoeam7b4fp4rj5oobphuvmhjbovhtvporusjex4nyoiamgdyd.onion" OR sourcehostname CONTAINS "m5idjwoj4q5yrmo5xbnvhoqqrdld6pruxx5qjvr6gfnnmao4xiniwzid.onion" OR sourcehostname CONTAINS "m7wajjzas7eotqw4b6k4aei5q4zijdal3spsec7wsfmf2xqjhmydjiyd.onion" OR sourcehostname CONTAINS "npnsktlnofwisqvd3e6tpslinkypajmh5jctyjivuf6jza3syw2v6cid.onion" OR sourcehostname CONTAINS "pcjvbrttcy2s3gqpgwklgsco4u4bskr5xhvdzs4pzqqcrfllkwe437id.onion" OR sourcehostname CONTAINS "s4ofksblif7bmo7sp64f56gij6xzh7sznvrn46m6daup2hwdmwbiabqd.onion" OR sourcehostname CONTAINS "s5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR sourcehostname CONTAINS "sourt33xcdoyg4jcrh33qvx6cjoneowihsfrbuqldkrrili54gdvryyd.onion" OR sourcehostname CONTAINS "syd5mtjvcqxvnnkeqjjkdm2oz2jzl6swrfhnvliiemxtgiqvcbm26nyd.onion" OR sourcehostname CONTAINS "tybocptxypx42ngrcqldrgas536syipwotmfnbjpwc5fpxth4xf4faqd.onion" OR sourcehostname CONTAINS "u7kteztwfg3p6wdeiq6y7zidxx3xtto4gmm2vwz42mzd6s4ixgvpgxyd.onion" OR sourcehostname CONTAINS "uu2iggf5wq57dt6xanfdmwq3rvxqorkb43bh2eacj2vz22nvwewlxcyd.onion" OR sourcehostname CONTAINS "wauby5e7m6zf2eb7rfn7nqm3diuaehdu6tfay4janiktgx33wjfifkyd.onion" OR sourcehostname CONTAINS "wf4uxi6izbqppzb4fvg4sq7sm5t5w5xl5v5pkxpguwpr4aci7hvzboid.onion" OR sourcehostname CONTAINS "wjd2t2lzbgb7g7bcenpl2r2bsobkbwwpooqrmiwqjkpktm5p5seifcid.onion" OR sourcehostname CONTAINS "xjdhr5is3qsw2cyekdxo57gchpxusvkko3265x2lmmn4g6fnlimdngqd.onion" OR sourcehostname CONTAINS "yjh2bktujnqkj7u7g7hxotck6sfhjuf7crhc4vcf6ewpa7swoqalfkid.onion" OR sourcehostname CONTAINS "yqs4gu4c2kb5ybgcigkl5gcsqbjuk5n2su2pozpsw4ojav2op5gddkid.onion")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "24rq2pvihkrct6pxl6zy3p36gt2wd6sn6izoz7ntlivxvbuu5ei3xwad.onion" OR destinationntdomain CONTAINS "3crj2ylhdffpf2yik4bb2hn32xey2bdhcpykxfezb4sq53eelglp3sqd.onion" OR destinationntdomain CONTAINS "44yd2dxmm5xuo7dsivwkf2fqyqmfsqkt5nkxdlgwpnbr57sca56j74yd.onion" OR destinationntdomain CONTAINS "acuy77ahadd6g5rw2pxsuejskirjmxaoj37ck7fvj4h4kc36a3uwirqd.onion" OR destinationntdomain CONTAINS "bbknilviexavjvnwdtdqmhsexqcokfwgdqthxexvuwzlwgaggddaahxn.onion" OR destinationntdomain CONTAINS "bvxx2p6hfttpiyntpuf72axcvaakjbz5zgiea7iklkrb2s6wrdrv4lid.onion" OR destinationntdomain CONTAINS "c3uybau64lj32ty3z3sxgchnrmg72bvbpua66mcvydcjpgrbv2r6huyd.onion" OR destinationntdomain CONTAINS "drv4lids5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR destinationntdomain CONTAINS "fend7yhjoeam7b4fp4rj5oobphuvmhjbovhtvporusjex4nyoiamgdyd.onion" OR destinationntdomain CONTAINS "m5idjwoj4q5yrmo5xbnvhoqqrdld6pruxx5qjvr6gfnnmao4xiniwzid.onion" OR destinationntdomain CONTAINS "m7wajjzas7eotqw4b6k4aei5q4zijdal3spsec7wsfmf2xqjhmydjiyd.onion" OR destinationntdomain CONTAINS "npnsktlnofwisqvd3e6tpslinkypajmh5jctyjivuf6jza3syw2v6cid.onion" OR destinationntdomain CONTAINS "pcjvbrttcy2s3gqpgwklgsco4u4bskr5xhvdzs4pzqqcrfllkwe437id.onion" OR destinationntdomain CONTAINS "s4ofksblif7bmo7sp64f56gij6xzh7sznvrn46m6daup2hwdmwbiabqd.onion" OR destinationntdomain CONTAINS "s5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR destinationntdomain CONTAINS "sourt33xcdoyg4jcrh33qvx6cjoneowihsfrbuqldkrrili54gdvryyd.onion" OR destinationntdomain CONTAINS "syd5mtjvcqxvnnkeqjjkdm2oz2jzl6swrfhnvliiemxtgiqvcbm26nyd.onion" OR destinationntdomain CONTAINS "tybocptxypx42ngrcqldrgas536syipwotmfnbjpwc5fpxth4xf4faqd.onion" OR destinationntdomain CONTAINS "u7kteztwfg3p6wdeiq6y7zidxx3xtto4gmm2vwz42mzd6s4ixgvpgxyd.onion" OR destinationntdomain CONTAINS "uu2iggf5wq57dt6xanfdmwq3rvxqorkb43bh2eacj2vz22nvwewlxcyd.onion" OR destinationntdomain CONTAINS "wauby5e7m6zf2eb7rfn7nqm3diuaehdu6tfay4janiktgx33wjfifkyd.onion" OR destinationntdomain CONTAINS "wf4uxi6izbqppzb4fvg4sq7sm5t5w5xl5v5pkxpguwpr4aci7hvzboid.onion" OR destinationntdomain CONTAINS "wjd2t2lzbgb7g7bcenpl2r2bsobkbwwpooqrmiwqjkpktm5p5seifcid.onion" OR destinationntdomain CONTAINS "xjdhr5is3qsw2cyekdxo57gchpxusvkko3265x2lmmn4g6fnlimdngqd.onion" OR destinationntdomain CONTAINS "yjh2bktujnqkj7u7g7hxotck6sfhjuf7crhc4vcf6ewpa7swoqalfkid.onion" OR destinationntdomain CONTAINS "yqs4gu4c2kb5ybgcigkl5gcsqbjuk5n2su2pozpsw4ojav2op5gddkid.onion")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND (requesturl CONTAINS "24rq2pvihkrct6pxl6zy3p36gt2wd6sn6izoz7ntlivxvbuu5ei3xwad.onion" OR requesturl CONTAINS "3crj2ylhdffpf2yik4bb2hn32xey2bdhcpykxfezb4sq53eelglp3sqd.onion" OR requesturl CONTAINS "44yd2dxmm5xuo7dsivwkf2fqyqmfsqkt5nkxdlgwpnbr57sca56j74yd.onion" OR requesturl CONTAINS "acuy77ahadd6g5rw2pxsuejskirjmxaoj37ck7fvj4h4kc36a3uwirqd.onion" OR requesturl CONTAINS "bbknilviexavjvnwdtdqmhsexqcokfwgdqthxexvuwzlwgaggddaahxn.onion" OR requesturl CONTAINS "bvxx2p6hfttpiyntpuf72axcvaakjbz5zgiea7iklkrb2s6wrdrv4lid.onion" OR requesturl CONTAINS "c3uybau64lj32ty3z3sxgchnrmg72bvbpua66mcvydcjpgrbv2r6huyd.onion" OR requesturl CONTAINS "drv4lids5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR requesturl CONTAINS "fend7yhjoeam7b4fp4rj5oobphuvmhjbovhtvporusjex4nyoiamgdyd.onion" OR requesturl CONTAINS "m5idjwoj4q5yrmo5xbnvhoqqrdld6pruxx5qjvr6gfnnmao4xiniwzid.onion" OR requesturl CONTAINS "m7wajjzas7eotqw4b6k4aei5q4zijdal3spsec7wsfmf2xqjhmydjiyd.onion" OR requesturl CONTAINS "npnsktlnofwisqvd3e6tpslinkypajmh5jctyjivuf6jza3syw2v6cid.onion" OR requesturl CONTAINS "pcjvbrttcy2s3gqpgwklgsco4u4bskr5xhvdzs4pzqqcrfllkwe437id.onion" OR requesturl CONTAINS "s4ofksblif7bmo7sp64f56gij6xzh7sznvrn46m6daup2hwdmwbiabqd.onion" OR requesturl CONTAINS "s5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR requesturl CONTAINS "sourt33xcdoyg4jcrh33qvx6cjoneowihsfrbuqldkrrili54gdvryyd.onion" OR requesturl CONTAINS "syd5mtjvcqxvnnkeqjjkdm2oz2jzl6swrfhnvliiemxtgiqvcbm26nyd.onion" OR requesturl CONTAINS "tybocptxypx42ngrcqldrgas536syipwotmfnbjpwc5fpxth4xf4faqd.onion" OR requesturl CONTAINS "u7kteztwfg3p6wdeiq6y7zidxx3xtto4gmm2vwz42mzd6s4ixgvpgxyd.onion" OR requesturl CONTAINS "uu2iggf5wq57dt6xanfdmwq3rvxqorkb43bh2eacj2vz22nvwewlxcyd.onion" OR requesturl CONTAINS "wauby5e7m6zf2eb7rfn7nqm3diuaehdu6tfay4janiktgx33wjfifkyd.onion" OR requesturl CONTAINS "wf4uxi6izbqppzb4fvg4sq7sm5t5w5xl5v5pkxpguwpr4aci7hvzboid.onion" OR requesturl CONTAINS "wjd2t2lzbgb7g7bcenpl2r2bsobkbwwpooqrmiwqjkpktm5p5seifcid.onion" OR requesturl CONTAINS "xjdhr5is3qsw2cyekdxo57gchpxusvkko3265x2lmmn4g6fnlimdngqd.onion" OR requesturl CONTAINS "yjh2bktujnqkj7u7g7hxotck6sfhjuf7crhc4vcf6ewpa7swoqalfkid.onion" OR requesturl CONTAINS "yqs4gu4c2kb5ybgcigkl5gcsqbjuk5n2su2pozpsw4ojav2op5gddkid.onion")
index=activity AND rg_functionality="DNS / DHCP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "24rq2pvihkrct6pxl6zy3p36gt2wd6sn6izoz7ntlivxvbuu5ei3xwad.onion" OR destinationhostname CONTAINS "3crj2ylhdffpf2yik4bb2hn32xey2bdhcpykxfezb4sq53eelglp3sqd.onion" OR destinationhostname CONTAINS "44yd2dxmm5xuo7dsivwkf2fqyqmfsqkt5nkxdlgwpnbr57sca56j74yd.onion" OR destinationhostname CONTAINS "acuy77ahadd6g5rw2pxsuejskirjmxaoj37ck7fvj4h4kc36a3uwirqd.onion" OR destinationhostname CONTAINS "bbknilviexavjvnwdtdqmhsexqcokfwgdqthxexvuwzlwgaggddaahxn.onion" OR destinationhostname CONTAINS "bvxx2p6hfttpiyntpuf72axcvaakjbz5zgiea7iklkrb2s6wrdrv4lid.onion" OR destinationhostname CONTAINS "c3uybau64lj32ty3z3sxgchnrmg72bvbpua66mcvydcjpgrbv2r6huyd.onion" OR destinationhostname CONTAINS "drv4lids5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR destinationhostname CONTAINS "fend7yhjoeam7b4fp4rj5oobphuvmhjbovhtvporusjex4nyoiamgdyd.onion" OR destinationhostname CONTAINS "m5idjwoj4q5yrmo5xbnvhoqqrdld6pruxx5qjvr6gfnnmao4xiniwzid.onion" OR destinationhostname CONTAINS "m7wajjzas7eotqw4b6k4aei5q4zijdal3spsec7wsfmf2xqjhmydjiyd.onion" OR destinationhostname CONTAINS "npnsktlnofwisqvd3e6tpslinkypajmh5jctyjivuf6jza3syw2v6cid.onion" OR destinationhostname CONTAINS "pcjvbrttcy2s3gqpgwklgsco4u4bskr5xhvdzs4pzqqcrfllkwe437id.onion" OR destinationhostname CONTAINS "s4ofksblif7bmo7sp64f56gij6xzh7sznvrn46m6daup2hwdmwbiabqd.onion" OR destinationhostname CONTAINS "s5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR destinationhostname CONTAINS "sourt33xcdoyg4jcrh33qvx6cjoneowihsfrbuqldkrrili54gdvryyd.onion" OR destinationhostname CONTAINS "syd5mtjvcqxvnnkeqjjkdm2oz2jzl6swrfhnvliiemxtgiqvcbm26nyd.onion" OR destinationhostname CONTAINS "tybocptxypx42ngrcqldrgas536syipwotmfnbjpwc5fpxth4xf4faqd.onion" OR destinationhostname CONTAINS "u7kteztwfg3p6wdeiq6y7zidxx3xtto4gmm2vwz42mzd6s4ixgvpgxyd.onion" OR destinationhostname CONTAINS "uu2iggf5wq57dt6xanfdmwq3rvxqorkb43bh2eacj2vz22nvwewlxcyd.onion" OR destinationhostname CONTAINS "wauby5e7m6zf2eb7rfn7nqm3diuaehdu6tfay4janiktgx33wjfifkyd.onion" OR destinationhostname CONTAINS "wf4uxi6izbqppzb4fvg4sq7sm5t5w5xl5v5pkxpguwpr4aci7hvzboid.onion" OR destinationhostname CONTAINS "wjd2t2lzbgb7g7bcenpl2r2bsobkbwwpooqrmiwqjkpktm5p5seifcid.onion" OR destinationhostname CONTAINS "xjdhr5is3qsw2cyekdxo57gchpxusvkko3265x2lmmn4g6fnlimdngqd.onion" OR destinationhostname CONTAINS "yjh2bktujnqkj7u7g7hxotck6sfhjuf7crhc4vcf6ewpa7swoqalfkid.onion" OR destinationhostname CONTAINS "yqs4gu4c2kb5ybgcigkl5gcsqbjuk5n2su2pozpsw4ojav2op5gddkid.onion")
index=activity AND rg_functionality="DNS / DHCP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "24rq2pvihkrct6pxl6zy3p36gt2wd6sn6izoz7ntlivxvbuu5ei3xwad.onion" OR sourcentdomain CONTAINS "3crj2ylhdffpf2yik4bb2hn32xey2bdhcpykxfezb4sq53eelglp3sqd.onion" OR sourcentdomain CONTAINS "44yd2dxmm5xuo7dsivwkf2fqyqmfsqkt5nkxdlgwpnbr57sca56j74yd.onion" OR sourcentdomain CONTAINS "acuy77ahadd6g5rw2pxsuejskirjmxaoj37ck7fvj4h4kc36a3uwirqd.onion" OR sourcentdomain CONTAINS "bbknilviexavjvnwdtdqmhsexqcokfwgdqthxexvuwzlwgaggddaahxn.onion" OR sourcentdomain CONTAINS "bvxx2p6hfttpiyntpuf72axcvaakjbz5zgiea7iklkrb2s6wrdrv4lid.onion" OR sourcentdomain CONTAINS "c3uybau64lj32ty3z3sxgchnrmg72bvbpua66mcvydcjpgrbv2r6huyd.onion" OR sourcentdomain CONTAINS "drv4lids5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR sourcentdomain CONTAINS "fend7yhjoeam7b4fp4rj5oobphuvmhjbovhtvporusjex4nyoiamgdyd.onion" OR sourcentdomain CONTAINS "m5idjwoj4q5yrmo5xbnvhoqqrdld6pruxx5qjvr6gfnnmao4xiniwzid.onion" OR sourcentdomain CONTAINS "m7wajjzas7eotqw4b6k4aei5q4zijdal3spsec7wsfmf2xqjhmydjiyd.onion" OR sourcentdomain CONTAINS "npnsktlnofwisqvd3e6tpslinkypajmh5jctyjivuf6jza3syw2v6cid.onion" OR sourcentdomain CONTAINS "pcjvbrttcy2s3gqpgwklgsco4u4bskr5xhvdzs4pzqqcrfllkwe437id.onion" OR sourcentdomain CONTAINS "s4ofksblif7bmo7sp64f56gij6xzh7sznvrn46m6daup2hwdmwbiabqd.onion" OR sourcentdomain CONTAINS "s5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR sourcentdomain CONTAINS "sourt33xcdoyg4jcrh33qvx6cjoneowihsfrbuqldkrrili54gdvryyd.onion" OR sourcentdomain CONTAINS "syd5mtjvcqxvnnkeqjjkdm2oz2jzl6swrfhnvliiemxtgiqvcbm26nyd.onion" OR sourcentdomain CONTAINS "tybocptxypx42ngrcqldrgas536syipwotmfnbjpwc5fpxth4xf4faqd.onion" OR sourcentdomain CONTAINS "u7kteztwfg3p6wdeiq6y7zidxx3xtto4gmm2vwz42mzd6s4ixgvpgxyd.onion" OR sourcentdomain CONTAINS "uu2iggf5wq57dt6xanfdmwq3rvxqorkb43bh2eacj2vz22nvwewlxcyd.onion" OR sourcentdomain CONTAINS "wauby5e7m6zf2eb7rfn7nqm3diuaehdu6tfay4janiktgx33wjfifkyd.onion" OR sourcentdomain CONTAINS "wf4uxi6izbqppzb4fvg4sq7sm5t5w5xl5v5pkxpguwpr4aci7hvzboid.onion" OR sourcentdomain CONTAINS "wjd2t2lzbgb7g7bcenpl2r2bsobkbwwpooqrmiwqjkpktm5p5seifcid.onion" OR sourcentdomain CONTAINS "xjdhr5is3qsw2cyekdxo57gchpxusvkko3265x2lmmn4g6fnlimdngqd.onion" OR sourcentdomain CONTAINS "yjh2bktujnqkj7u7g7hxotck6sfhjuf7crhc4vcf6ewpa7swoqalfkid.onion" OR sourcentdomain CONTAINS "yqs4gu4c2kb5ybgcigkl5gcsqbjuk5n2su2pozpsw4ojav2op5gddkid.onion")
index=activity AND rg_functionality="DNS / DHCP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "24rq2pvihkrct6pxl6zy3p36gt2wd6sn6izoz7ntlivxvbuu5ei3xwad.onion" OR sourcehostname CONTAINS "3crj2ylhdffpf2yik4bb2hn32xey2bdhcpykxfezb4sq53eelglp3sqd.onion" OR sourcehostname CONTAINS "44yd2dxmm5xuo7dsivwkf2fqyqmfsqkt5nkxdlgwpnbr57sca56j74yd.onion" OR sourcehostname CONTAINS "acuy77ahadd6g5rw2pxsuejskirjmxaoj37ck7fvj4h4kc36a3uwirqd.onion" OR sourcehostname CONTAINS "bbknilviexavjvnwdtdqmhsexqcokfwgdqthxexvuwzlwgaggddaahxn.onion" OR sourcehostname CONTAINS "bvxx2p6hfttpiyntpuf72axcvaakjbz5zgiea7iklkrb2s6wrdrv4lid.onion" OR sourcehostname CONTAINS "c3uybau64lj32ty3z3sxgchnrmg72bvbpua66mcvydcjpgrbv2r6huyd.onion" OR sourcehostname CONTAINS "drv4lids5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR sourcehostname CONTAINS "fend7yhjoeam7b4fp4rj5oobphuvmhjbovhtvporusjex4nyoiamgdyd.onion" OR sourcehostname CONTAINS "m5idjwoj4q5yrmo5xbnvhoqqrdld6pruxx5qjvr6gfnnmao4xiniwzid.onion" OR sourcehostname CONTAINS "m7wajjzas7eotqw4b6k4aei5q4zijdal3spsec7wsfmf2xqjhmydjiyd.onion" OR sourcehostname CONTAINS "npnsktlnofwisqvd3e6tpslinkypajmh5jctyjivuf6jza3syw2v6cid.onion" OR sourcehostname CONTAINS "pcjvbrttcy2s3gqpgwklgsco4u4bskr5xhvdzs4pzqqcrfllkwe437id.onion" OR sourcehostname CONTAINS "s4ofksblif7bmo7sp64f56gij6xzh7sznvrn46m6daup2hwdmwbiabqd.onion" OR sourcehostname CONTAINS "s5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR sourcehostname CONTAINS "sourt33xcdoyg4jcrh33qvx6cjoneowihsfrbuqldkrrili54gdvryyd.onion" OR sourcehostname CONTAINS "syd5mtjvcqxvnnkeqjjkdm2oz2jzl6swrfhnvliiemxtgiqvcbm26nyd.onion" OR sourcehostname CONTAINS "tybocptxypx42ngrcqldrgas536syipwotmfnbjpwc5fpxth4xf4faqd.onion" OR sourcehostname CONTAINS "u7kteztwfg3p6wdeiq6y7zidxx3xtto4gmm2vwz42mzd6s4ixgvpgxyd.onion" OR sourcehostname CONTAINS "uu2iggf5wq57dt6xanfdmwq3rvxqorkb43bh2eacj2vz22nvwewlxcyd.onion" OR sourcehostname CONTAINS "wauby5e7m6zf2eb7rfn7nqm3diuaehdu6tfay4janiktgx33wjfifkyd.onion" OR sourcehostname CONTAINS "wf4uxi6izbqppzb4fvg4sq7sm5t5w5xl5v5pkxpguwpr4aci7hvzboid.onion" OR sourcehostname CONTAINS "wjd2t2lzbgb7g7bcenpl2r2bsobkbwwpooqrmiwqjkpktm5p5seifcid.onion" OR sourcehostname CONTAINS "xjdhr5is3qsw2cyekdxo57gchpxusvkko3265x2lmmn4g6fnlimdngqd.onion" OR sourcehostname CONTAINS "yjh2bktujnqkj7u7g7hxotck6sfhjuf7crhc4vcf6ewpa7swoqalfkid.onion" OR sourcehostname CONTAINS "yqs4gu4c2kb5ybgcigkl5gcsqbjuk5n2su2pozpsw4ojav2op5gddkid.onion")
index=activity AND rg_functionality="DNS / DHCP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "24rq2pvihkrct6pxl6zy3p36gt2wd6sn6izoz7ntlivxvbuu5ei3xwad.onion" OR destinationntdomain CONTAINS "3crj2ylhdffpf2yik4bb2hn32xey2bdhcpykxfezb4sq53eelglp3sqd.onion" OR destinationntdomain CONTAINS "44yd2dxmm5xuo7dsivwkf2fqyqmfsqkt5nkxdlgwpnbr57sca56j74yd.onion" OR destinationntdomain CONTAINS "acuy77ahadd6g5rw2pxsuejskirjmxaoj37ck7fvj4h4kc36a3uwirqd.onion" OR destinationntdomain CONTAINS "bbknilviexavjvnwdtdqmhsexqcokfwgdqthxexvuwzlwgaggddaahxn.onion" OR destinationntdomain CONTAINS "bvxx2p6hfttpiyntpuf72axcvaakjbz5zgiea7iklkrb2s6wrdrv4lid.onion" OR destinationntdomain CONTAINS "c3uybau64lj32ty3z3sxgchnrmg72bvbpua66mcvydcjpgrbv2r6huyd.onion" OR destinationntdomain CONTAINS "drv4lids5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR destinationntdomain CONTAINS "fend7yhjoeam7b4fp4rj5oobphuvmhjbovhtvporusjex4nyoiamgdyd.onion" OR destinationntdomain CONTAINS "m5idjwoj4q5yrmo5xbnvhoqqrdld6pruxx5qjvr6gfnnmao4xiniwzid.onion" OR destinationntdomain CONTAINS "m7wajjzas7eotqw4b6k4aei5q4zijdal3spsec7wsfmf2xqjhmydjiyd.onion" OR destinationntdomain CONTAINS "npnsktlnofwisqvd3e6tpslinkypajmh5jctyjivuf6jza3syw2v6cid.onion" OR destinationntdomain CONTAINS "pcjvbrttcy2s3gqpgwklgsco4u4bskr5xhvdzs4pzqqcrfllkwe437id.onion" OR destinationntdomain CONTAINS "s4ofksblif7bmo7sp64f56gij6xzh7sznvrn46m6daup2hwdmwbiabqd.onion" OR destinationntdomain CONTAINS "s5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR destinationntdomain CONTAINS "sourt33xcdoyg4jcrh33qvx6cjoneowihsfrbuqldkrrili54gdvryyd.onion" OR destinationntdomain CONTAINS "syd5mtjvcqxvnnkeqjjkdm2oz2jzl6swrfhnvliiemxtgiqvcbm26nyd.onion" OR destinationntdomain CONTAINS "tybocptxypx42ngrcqldrgas536syipwotmfnbjpwc5fpxth4xf4faqd.onion" OR destinationntdomain CONTAINS "u7kteztwfg3p6wdeiq6y7zidxx3xtto4gmm2vwz42mzd6s4ixgvpgxyd.onion" OR destinationntdomain CONTAINS "uu2iggf5wq57dt6xanfdmwq3rvxqorkb43bh2eacj2vz22nvwewlxcyd.onion" OR destinationntdomain CONTAINS "wauby5e7m6zf2eb7rfn7nqm3diuaehdu6tfay4janiktgx33wjfifkyd.onion" OR destinationntdomain CONTAINS "wf4uxi6izbqppzb4fvg4sq7sm5t5w5xl5v5pkxpguwpr4aci7hvzboid.onion" OR destinationntdomain CONTAINS "wjd2t2lzbgb7g7bcenpl2r2bsobkbwwpooqrmiwqjkpktm5p5seifcid.onion" OR destinationntdomain CONTAINS "xjdhr5is3qsw2cyekdxo57gchpxusvkko3265x2lmmn4g6fnlimdngqd.onion" OR destinationntdomain CONTAINS "yjh2bktujnqkj7u7g7hxotck6sfhjuf7crhc4vcf6ewpa7swoqalfkid.onion" OR destinationntdomain CONTAINS "yqs4gu4c2kb5ybgcigkl5gcsqbjuk5n2su2pozpsw4ojav2op5gddkid.onion")
index=activity AND rg_functionality="DNS / DHCP" AND requesturl NOT NULL AND (requesturl CONTAINS "24rq2pvihkrct6pxl6zy3p36gt2wd6sn6izoz7ntlivxvbuu5ei3xwad.onion" OR requesturl CONTAINS "3crj2ylhdffpf2yik4bb2hn32xey2bdhcpykxfezb4sq53eelglp3sqd.onion" OR requesturl CONTAINS "44yd2dxmm5xuo7dsivwkf2fqyqmfsqkt5nkxdlgwpnbr57sca56j74yd.onion" OR requesturl CONTAINS "acuy77ahadd6g5rw2pxsuejskirjmxaoj37ck7fvj4h4kc36a3uwirqd.onion" OR requesturl CONTAINS "bbknilviexavjvnwdtdqmhsexqcokfwgdqthxexvuwzlwgaggddaahxn.onion" OR requesturl CONTAINS "bvxx2p6hfttpiyntpuf72axcvaakjbz5zgiea7iklkrb2s6wrdrv4lid.onion" OR requesturl CONTAINS "c3uybau64lj32ty3z3sxgchnrmg72bvbpua66mcvydcjpgrbv2r6huyd.onion" OR requesturl CONTAINS "drv4lids5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR requesturl CONTAINS "fend7yhjoeam7b4fp4rj5oobphuvmhjbovhtvporusjex4nyoiamgdyd.onion" OR requesturl CONTAINS "m5idjwoj4q5yrmo5xbnvhoqqrdld6pruxx5qjvr6gfnnmao4xiniwzid.onion" OR requesturl CONTAINS "m7wajjzas7eotqw4b6k4aei5q4zijdal3spsec7wsfmf2xqjhmydjiyd.onion" OR requesturl CONTAINS "npnsktlnofwisqvd3e6tpslinkypajmh5jctyjivuf6jza3syw2v6cid.onion" OR requesturl CONTAINS "pcjvbrttcy2s3gqpgwklgsco4u4bskr5xhvdzs4pzqqcrfllkwe437id.onion" OR requesturl CONTAINS "s4ofksblif7bmo7sp64f56gij6xzh7sznvrn46m6daup2hwdmwbiabqd.onion" OR requesturl CONTAINS "s5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR requesturl CONTAINS "sourt33xcdoyg4jcrh33qvx6cjoneowihsfrbuqldkrrili54gdvryyd.onion" OR requesturl CONTAINS "syd5mtjvcqxvnnkeqjjkdm2oz2jzl6swrfhnvliiemxtgiqvcbm26nyd.onion" OR requesturl CONTAINS "tybocptxypx42ngrcqldrgas536syipwotmfnbjpwc5fpxth4xf4faqd.onion" OR requesturl CONTAINS "u7kteztwfg3p6wdeiq6y7zidxx3xtto4gmm2vwz42mzd6s4ixgvpgxyd.onion" OR requesturl CONTAINS "uu2iggf5wq57dt6xanfdmwq3rvxqorkb43bh2eacj2vz22nvwewlxcyd.onion" OR requesturl CONTAINS "wauby5e7m6zf2eb7rfn7nqm3diuaehdu6tfay4janiktgx33wjfifkyd.onion" OR requesturl CONTAINS "wf4uxi6izbqppzb4fvg4sq7sm5t5w5xl5v5pkxpguwpr4aci7hvzboid.onion" OR requesturl CONTAINS "wjd2t2lzbgb7g7bcenpl2r2bsobkbwwpooqrmiwqjkpktm5p5seifcid.onion" OR requesturl CONTAINS "xjdhr5is3qsw2cyekdxo57gchpxusvkko3265x2lmmn4g6fnlimdngqd.onion" OR requesturl CONTAINS "yjh2bktujnqkj7u7g7hxotck6sfhjuf7crhc4vcf6ewpa7swoqalfkid.onion" OR requesturl CONTAINS "yqs4gu4c2kb5ybgcigkl5gcsqbjuk5n2su2pozpsw4ojav2op5gddkid.onion")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "24rq2pvihkrct6pxl6zy3p36gt2wd6sn6izoz7ntlivxvbuu5ei3xwad.onion" OR destinationhostname CONTAINS "3crj2ylhdffpf2yik4bb2hn32xey2bdhcpykxfezb4sq53eelglp3sqd.onion" OR destinationhostname CONTAINS "44yd2dxmm5xuo7dsivwkf2fqyqmfsqkt5nkxdlgwpnbr57sca56j74yd.onion" OR destinationhostname CONTAINS "acuy77ahadd6g5rw2pxsuejskirjmxaoj37ck7fvj4h4kc36a3uwirqd.onion" OR destinationhostname CONTAINS "bbknilviexavjvnwdtdqmhsexqcokfwgdqthxexvuwzlwgaggddaahxn.onion" OR destinationhostname CONTAINS "bvxx2p6hfttpiyntpuf72axcvaakjbz5zgiea7iklkrb2s6wrdrv4lid.onion" OR destinationhostname CONTAINS "c3uybau64lj32ty3z3sxgchnrmg72bvbpua66mcvydcjpgrbv2r6huyd.onion" OR destinationhostname CONTAINS "drv4lids5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR destinationhostname CONTAINS "fend7yhjoeam7b4fp4rj5oobphuvmhjbovhtvporusjex4nyoiamgdyd.onion" OR destinationhostname CONTAINS "m5idjwoj4q5yrmo5xbnvhoqqrdld6pruxx5qjvr6gfnnmao4xiniwzid.onion" OR destinationhostname CONTAINS "m7wajjzas7eotqw4b6k4aei5q4zijdal3spsec7wsfmf2xqjhmydjiyd.onion" OR destinationhostname CONTAINS "npnsktlnofwisqvd3e6tpslinkypajmh5jctyjivuf6jza3syw2v6cid.onion" OR destinationhostname CONTAINS "pcjvbrttcy2s3gqpgwklgsco4u4bskr5xhvdzs4pzqqcrfllkwe437id.onion" OR destinationhostname CONTAINS "s4ofksblif7bmo7sp64f56gij6xzh7sznvrn46m6daup2hwdmwbiabqd.onion" OR destinationhostname CONTAINS "s5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR destinationhostname CONTAINS "sourt33xcdoyg4jcrh33qvx6cjoneowihsfrbuqldkrrili54gdvryyd.onion" OR destinationhostname CONTAINS "syd5mtjvcqxvnnkeqjjkdm2oz2jzl6swrfhnvliiemxtgiqvcbm26nyd.onion" OR destinationhostname CONTAINS "tybocptxypx42ngrcqldrgas536syipwotmfnbjpwc5fpxth4xf4faqd.onion" OR destinationhostname CONTAINS "u7kteztwfg3p6wdeiq6y7zidxx3xtto4gmm2vwz42mzd6s4ixgvpgxyd.onion" OR destinationhostname CONTAINS "uu2iggf5wq57dt6xanfdmwq3rvxqorkb43bh2eacj2vz22nvwewlxcyd.onion" OR destinationhostname CONTAINS "wauby5e7m6zf2eb7rfn7nqm3diuaehdu6tfay4janiktgx33wjfifkyd.onion" OR destinationhostname CONTAINS "wf4uxi6izbqppzb4fvg4sq7sm5t5w5xl5v5pkxpguwpr4aci7hvzboid.onion" OR destinationhostname CONTAINS "wjd2t2lzbgb7g7bcenpl2r2bsobkbwwpooqrmiwqjkpktm5p5seifcid.onion" OR destinationhostname CONTAINS "xjdhr5is3qsw2cyekdxo57gchpxusvkko3265x2lmmn4g6fnlimdngqd.onion" OR destinationhostname CONTAINS "yjh2bktujnqkj7u7g7hxotck6sfhjuf7crhc4vcf6ewpa7swoqalfkid.onion" OR destinationhostname CONTAINS "yqs4gu4c2kb5ybgcigkl5gcsqbjuk5n2su2pozpsw4ojav2op5gddkid.onion")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "24rq2pvihkrct6pxl6zy3p36gt2wd6sn6izoz7ntlivxvbuu5ei3xwad.onion" OR sourcentdomain CONTAINS "3crj2ylhdffpf2yik4bb2hn32xey2bdhcpykxfezb4sq53eelglp3sqd.onion" OR sourcentdomain CONTAINS "44yd2dxmm5xuo7dsivwkf2fqyqmfsqkt5nkxdlgwpnbr57sca56j74yd.onion" OR sourcentdomain CONTAINS "acuy77ahadd6g5rw2pxsuejskirjmxaoj37ck7fvj4h4kc36a3uwirqd.onion" OR sourcentdomain CONTAINS "bbknilviexavjvnwdtdqmhsexqcokfwgdqthxexvuwzlwgaggddaahxn.onion" OR sourcentdomain CONTAINS "bvxx2p6hfttpiyntpuf72axcvaakjbz5zgiea7iklkrb2s6wrdrv4lid.onion" OR sourcentdomain CONTAINS "c3uybau64lj32ty3z3sxgchnrmg72bvbpua66mcvydcjpgrbv2r6huyd.onion" OR sourcentdomain CONTAINS "drv4lids5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR sourcentdomain CONTAINS "fend7yhjoeam7b4fp4rj5oobphuvmhjbovhtvporusjex4nyoiamgdyd.onion" OR sourcentdomain CONTAINS "m5idjwoj4q5yrmo5xbnvhoqqrdld6pruxx5qjvr6gfnnmao4xiniwzid.onion" OR sourcentdomain CONTAINS "m7wajjzas7eotqw4b6k4aei5q4zijdal3spsec7wsfmf2xqjhmydjiyd.onion" OR sourcentdomain CONTAINS "npnsktlnofwisqvd3e6tpslinkypajmh5jctyjivuf6jza3syw2v6cid.onion" OR sourcentdomain CONTAINS "pcjvbrttcy2s3gqpgwklgsco4u4bskr5xhvdzs4pzqqcrfllkwe437id.onion" OR sourcentdomain CONTAINS "s4ofksblif7bmo7sp64f56gij6xzh7sznvrn46m6daup2hwdmwbiabqd.onion" OR sourcentdomain CONTAINS "s5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR sourcentdomain CONTAINS "sourt33xcdoyg4jcrh33qvx6cjoneowihsfrbuqldkrrili54gdvryyd.onion" OR sourcentdomain CONTAINS "syd5mtjvcqxvnnkeqjjkdm2oz2jzl6swrfhnvliiemxtgiqvcbm26nyd.onion" OR sourcentdomain CONTAINS "tybocptxypx42ngrcqldrgas536syipwotmfnbjpwc5fpxth4xf4faqd.onion" OR sourcentdomain CONTAINS "u7kteztwfg3p6wdeiq6y7zidxx3xtto4gmm2vwz42mzd6s4ixgvpgxyd.onion" OR sourcentdomain CONTAINS "uu2iggf5wq57dt6xanfdmwq3rvxqorkb43bh2eacj2vz22nvwewlxcyd.onion" OR sourcentdomain CONTAINS "wauby5e7m6zf2eb7rfn7nqm3diuaehdu6tfay4janiktgx33wjfifkyd.onion" OR sourcentdomain CONTAINS "wf4uxi6izbqppzb4fvg4sq7sm5t5w5xl5v5pkxpguwpr4aci7hvzboid.onion" OR sourcentdomain CONTAINS "wjd2t2lzbgb7g7bcenpl2r2bsobkbwwpooqrmiwqjkpktm5p5seifcid.onion" OR sourcentdomain CONTAINS "xjdhr5is3qsw2cyekdxo57gchpxusvkko3265x2lmmn4g6fnlimdngqd.onion" OR sourcentdomain CONTAINS "yjh2bktujnqkj7u7g7hxotck6sfhjuf7crhc4vcf6ewpa7swoqalfkid.onion" OR sourcentdomain CONTAINS "yqs4gu4c2kb5ybgcigkl5gcsqbjuk5n2su2pozpsw4ojav2op5gddkid.onion")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "24rq2pvihkrct6pxl6zy3p36gt2wd6sn6izoz7ntlivxvbuu5ei3xwad.onion" OR sourcehostname CONTAINS "3crj2ylhdffpf2yik4bb2hn32xey2bdhcpykxfezb4sq53eelglp3sqd.onion" OR sourcehostname CONTAINS "44yd2dxmm5xuo7dsivwkf2fqyqmfsqkt5nkxdlgwpnbr57sca56j74yd.onion" OR sourcehostname CONTAINS "acuy77ahadd6g5rw2pxsuejskirjmxaoj37ck7fvj4h4kc36a3uwirqd.onion" OR sourcehostname CONTAINS "bbknilviexavjvnwdtdqmhsexqcokfwgdqthxexvuwzlwgaggddaahxn.onion" OR sourcehostname CONTAINS "bvxx2p6hfttpiyntpuf72axcvaakjbz5zgiea7iklkrb2s6wrdrv4lid.onion" OR sourcehostname CONTAINS "c3uybau64lj32ty3z3sxgchnrmg72bvbpua66mcvydcjpgrbv2r6huyd.onion" OR sourcehostname CONTAINS "drv4lids5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR sourcehostname CONTAINS "fend7yhjoeam7b4fp4rj5oobphuvmhjbovhtvporusjex4nyoiamgdyd.onion" OR sourcehostname CONTAINS "m5idjwoj4q5yrmo5xbnvhoqqrdld6pruxx5qjvr6gfnnmao4xiniwzid.onion" OR sourcehostname CONTAINS "m7wajjzas7eotqw4b6k4aei5q4zijdal3spsec7wsfmf2xqjhmydjiyd.onion" OR sourcehostname CONTAINS "npnsktlnofwisqvd3e6tpslinkypajmh5jctyjivuf6jza3syw2v6cid.onion" OR sourcehostname CONTAINS "pcjvbrttcy2s3gqpgwklgsco4u4bskr5xhvdzs4pzqqcrfllkwe437id.onion" OR sourcehostname CONTAINS "s4ofksblif7bmo7sp64f56gij6xzh7sznvrn46m6daup2hwdmwbiabqd.onion" OR sourcehostname CONTAINS "s5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR sourcehostname CONTAINS "sourt33xcdoyg4jcrh33qvx6cjoneowihsfrbuqldkrrili54gdvryyd.onion" OR sourcehostname CONTAINS "syd5mtjvcqxvnnkeqjjkdm2oz2jzl6swrfhnvliiemxtgiqvcbm26nyd.onion" OR sourcehostname CONTAINS "tybocptxypx42ngrcqldrgas536syipwotmfnbjpwc5fpxth4xf4faqd.onion" OR sourcehostname CONTAINS "u7kteztwfg3p6wdeiq6y7zidxx3xtto4gmm2vwz42mzd6s4ixgvpgxyd.onion" OR sourcehostname CONTAINS "uu2iggf5wq57dt6xanfdmwq3rvxqorkb43bh2eacj2vz22nvwewlxcyd.onion" OR sourcehostname CONTAINS "wauby5e7m6zf2eb7rfn7nqm3diuaehdu6tfay4janiktgx33wjfifkyd.onion" OR sourcehostname CONTAINS "wf4uxi6izbqppzb4fvg4sq7sm5t5w5xl5v5pkxpguwpr4aci7hvzboid.onion" OR sourcehostname CONTAINS "wjd2t2lzbgb7g7bcenpl2r2bsobkbwwpooqrmiwqjkpktm5p5seifcid.onion" OR sourcehostname CONTAINS "xjdhr5is3qsw2cyekdxo57gchpxusvkko3265x2lmmn4g6fnlimdngqd.onion" OR sourcehostname CONTAINS "yjh2bktujnqkj7u7g7hxotck6sfhjuf7crhc4vcf6ewpa7swoqalfkid.onion" OR sourcehostname CONTAINS "yqs4gu4c2kb5ybgcigkl5gcsqbjuk5n2su2pozpsw4ojav2op5gddkid.onion")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "24rq2pvihkrct6pxl6zy3p36gt2wd6sn6izoz7ntlivxvbuu5ei3xwad.onion" OR destinationntdomain CONTAINS "3crj2ylhdffpf2yik4bb2hn32xey2bdhcpykxfezb4sq53eelglp3sqd.onion" OR destinationntdomain CONTAINS "44yd2dxmm5xuo7dsivwkf2fqyqmfsqkt5nkxdlgwpnbr57sca56j74yd.onion" OR destinationntdomain CONTAINS "acuy77ahadd6g5rw2pxsuejskirjmxaoj37ck7fvj4h4kc36a3uwirqd.onion" OR destinationntdomain CONTAINS "bbknilviexavjvnwdtdqmhsexqcokfwgdqthxexvuwzlwgaggddaahxn.onion" OR destinationntdomain CONTAINS "bvxx2p6hfttpiyntpuf72axcvaakjbz5zgiea7iklkrb2s6wrdrv4lid.onion" OR destinationntdomain CONTAINS "c3uybau64lj32ty3z3sxgchnrmg72bvbpua66mcvydcjpgrbv2r6huyd.onion" OR destinationntdomain CONTAINS "drv4lids5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR destinationntdomain CONTAINS "fend7yhjoeam7b4fp4rj5oobphuvmhjbovhtvporusjex4nyoiamgdyd.onion" OR destinationntdomain CONTAINS "m5idjwoj4q5yrmo5xbnvhoqqrdld6pruxx5qjvr6gfnnmao4xiniwzid.onion" OR destinationntdomain CONTAINS "m7wajjzas7eotqw4b6k4aei5q4zijdal3spsec7wsfmf2xqjhmydjiyd.onion" OR destinationntdomain CONTAINS "npnsktlnofwisqvd3e6tpslinkypajmh5jctyjivuf6jza3syw2v6cid.onion" OR destinationntdomain CONTAINS "pcjvbrttcy2s3gqpgwklgsco4u4bskr5xhvdzs4pzqqcrfllkwe437id.onion" OR destinationntdomain CONTAINS "s4ofksblif7bmo7sp64f56gij6xzh7sznvrn46m6daup2hwdmwbiabqd.onion" OR destinationntdomain CONTAINS "s5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR destinationntdomain CONTAINS "sourt33xcdoyg4jcrh33qvx6cjoneowihsfrbuqldkrrili54gdvryyd.onion" OR destinationntdomain CONTAINS "syd5mtjvcqxvnnkeqjjkdm2oz2jzl6swrfhnvliiemxtgiqvcbm26nyd.onion" OR destinationntdomain CONTAINS "tybocptxypx42ngrcqldrgas536syipwotmfnbjpwc5fpxth4xf4faqd.onion" OR destinationntdomain CONTAINS "u7kteztwfg3p6wdeiq6y7zidxx3xtto4gmm2vwz42mzd6s4ixgvpgxyd.onion" OR destinationntdomain CONTAINS "uu2iggf5wq57dt6xanfdmwq3rvxqorkb43bh2eacj2vz22nvwewlxcyd.onion" OR destinationntdomain CONTAINS "wauby5e7m6zf2eb7rfn7nqm3diuaehdu6tfay4janiktgx33wjfifkyd.onion" OR destinationntdomain CONTAINS "wf4uxi6izbqppzb4fvg4sq7sm5t5w5xl5v5pkxpguwpr4aci7hvzboid.onion" OR destinationntdomain CONTAINS "wjd2t2lzbgb7g7bcenpl2r2bsobkbwwpooqrmiwqjkpktm5p5seifcid.onion" OR destinationntdomain CONTAINS "xjdhr5is3qsw2cyekdxo57gchpxusvkko3265x2lmmn4g6fnlimdngqd.onion" OR destinationntdomain CONTAINS "yjh2bktujnqkj7u7g7hxotck6sfhjuf7crhc4vcf6ewpa7swoqalfkid.onion" OR destinationntdomain CONTAINS "yqs4gu4c2kb5ybgcigkl5gcsqbjuk5n2su2pozpsw4ojav2op5gddkid.onion")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND requesturl NOT NULL AND (requesturl CONTAINS "24rq2pvihkrct6pxl6zy3p36gt2wd6sn6izoz7ntlivxvbuu5ei3xwad.onion" OR requesturl CONTAINS "3crj2ylhdffpf2yik4bb2hn32xey2bdhcpykxfezb4sq53eelglp3sqd.onion" OR requesturl CONTAINS "44yd2dxmm5xuo7dsivwkf2fqyqmfsqkt5nkxdlgwpnbr57sca56j74yd.onion" OR requesturl CONTAINS "acuy77ahadd6g5rw2pxsuejskirjmxaoj37ck7fvj4h4kc36a3uwirqd.onion" OR requesturl CONTAINS "bbknilviexavjvnwdtdqmhsexqcokfwgdqthxexvuwzlwgaggddaahxn.onion" OR requesturl CONTAINS "bvxx2p6hfttpiyntpuf72axcvaakjbz5zgiea7iklkrb2s6wrdrv4lid.onion" OR requesturl CONTAINS "c3uybau64lj32ty3z3sxgchnrmg72bvbpua66mcvydcjpgrbv2r6huyd.onion" OR requesturl CONTAINS "drv4lids5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR requesturl CONTAINS "fend7yhjoeam7b4fp4rj5oobphuvmhjbovhtvporusjex4nyoiamgdyd.onion" OR requesturl CONTAINS "m5idjwoj4q5yrmo5xbnvhoqqrdld6pruxx5qjvr6gfnnmao4xiniwzid.onion" OR requesturl CONTAINS "m7wajjzas7eotqw4b6k4aei5q4zijdal3spsec7wsfmf2xqjhmydjiyd.onion" OR requesturl CONTAINS "npnsktlnofwisqvd3e6tpslinkypajmh5jctyjivuf6jza3syw2v6cid.onion" OR requesturl CONTAINS "pcjvbrttcy2s3gqpgwklgsco4u4bskr5xhvdzs4pzqqcrfllkwe437id.onion" OR requesturl CONTAINS "s4ofksblif7bmo7sp64f56gij6xzh7sznvrn46m6daup2hwdmwbiabqd.onion" OR requesturl CONTAINS "s5q2zsdf5n7dezz2hcah23iodsrn6gpyv6f2dxv62ikp7idntmlecvqd.onion" OR requesturl CONTAINS "sourt33xcdoyg4jcrh33qvx6cjoneowihsfrbuqldkrrili54gdvryyd.onion" OR requesturl CONTAINS "syd5mtjvcqxvnnkeqjjkdm2oz2jzl6swrfhnvliiemxtgiqvcbm26nyd.onion" OR requesturl CONTAINS "tybocptxypx42ngrcqldrgas536syipwotmfnbjpwc5fpxth4xf4faqd.onion" OR requesturl CONTAINS "u7kteztwfg3p6wdeiq6y7zidxx3xtto4gmm2vwz42mzd6s4ixgvpgxyd.onion" OR requesturl CONTAINS "uu2iggf5wq57dt6xanfdmwq3rvxqorkb43bh2eacj2vz22nvwewlxcyd.onion" OR requesturl CONTAINS "wauby5e7m6zf2eb7rfn7nqm3diuaehdu6tfay4janiktgx33wjfifkyd.onion" OR requesturl CONTAINS "wf4uxi6izbqppzb4fvg4sq7sm5t5w5xl5v5pkxpguwpr4aci7hvzboid.onion" OR requesturl CONTAINS "wjd2t2lzbgb7g7bcenpl2r2bsobkbwwpooqrmiwqjkpktm5p5seifcid.onion" OR requesturl CONTAINS "xjdhr5is3qsw2cyekdxo57gchpxusvkko3265x2lmmn4g6fnlimdngqd.onion" OR requesturl CONTAINS "yjh2bktujnqkj7u7g7hxotck6sfhjuf7crhc4vcf6ewpa7swoqalfkid.onion" OR requesturl CONTAINS "yqs4gu4c2kb5ybgcigkl5gcsqbjuk5n2su2pozpsw4ojav2op5gddkid.onion")
index=activity AND rg_functionality="Next Generation Firewall" AND ipaddress NOT NULL AND ipaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Next Generation Firewall" AND sourceaddress NOT NULL AND sourceaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Next Generation Firewall" AND translatedipaddress NOT NULL AND translatedipaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Next Generation Firewall" AND deviceaddress NOT NULL AND deviceaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Firewall" AND ipaddress NOT NULL AND ipaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Firewall" AND sourceaddress NOT NULL AND sourceaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Firewall" AND translatedipaddress NOT NULL AND translatedipaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Firewall" AND deviceaddress NOT NULL AND deviceaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Web Proxy" AND ipaddress NOT NULL AND ipaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Web Proxy" AND sourceaddress NOT NULL AND sourceaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Web Proxy" AND destinationaddress NOT NULL AND destinationaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Web Proxy" AND translatedipaddress NOT NULL AND translatedipaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Web Proxy" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Web Proxy" AND deviceaddress NOT NULL AND deviceaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Flow" AND ipaddress NOT NULL AND ipaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Flow" AND sourceaddress NOT NULL AND sourceaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Flow" AND destinationaddress NOT NULL AND destinationaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Flow" AND translatedipaddress NOT NULL AND translatedipaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Flow" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Flow" AND deviceaddress NOT NULL AND deviceaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Web Server" AND ipaddress NOT NULL AND ipaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Web Server" AND sourceaddress NOT NULL AND sourceaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Web Server" AND destinationaddress NOT NULL AND destinationaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Web Server" AND translatedipaddress NOT NULL AND translatedipaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Web Server" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Web Server" AND deviceaddress NOT NULL AND deviceaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND ipaddress NOT NULL AND ipaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourceaddress NOT NULL AND sourceaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationaddress NOT NULL AND destinationaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND translatedipaddress NOT NULL AND translatedipaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND deviceaddress NOT NULL AND deviceaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND ipaddress NOT NULL AND ipaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourceaddress NOT NULL AND sourceaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationaddress NOT NULL AND destinationaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND translatedipaddress NOT NULL AND translatedipaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND deviceaddress NOT NULL AND deviceaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Web Application Firewall" AND ipaddress NOT NULL AND ipaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Web Application Firewall" AND sourceaddress NOT NULL AND sourceaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Web Application Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Web Application Firewall" AND translatedipaddress NOT NULL AND translatedipaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Web Application Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Web Application Firewall" AND deviceaddress NOT NULL AND deviceaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Endpoint management systems" AND ipaddress NOT NULL AND ipaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Endpoint management systems" AND sourceaddress NOT NULL AND sourceaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Endpoint management systems" AND destinationaddress NOT NULL AND destinationaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Endpoint management systems" AND translatedipaddress NOT NULL AND translatedipaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Endpoint management systems" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Endpoint management systems" AND deviceaddress NOT NULL AND deviceaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND ipaddress NOT NULL AND ipaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourceaddress NOT NULL AND sourceaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationaddress NOT NULL AND destinationaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND translatedipaddress NOT NULL AND translatedipaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND deviceaddress NOT NULL AND deviceaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Cloud Application Audit" AND ipaddress NOT NULL AND ipaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Cloud Application Audit" AND sourceaddress NOT NULL AND sourceaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Cloud Application Audit" AND destinationaddress NOT NULL AND destinationaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Cloud Application Audit" AND translatedipaddress NOT NULL AND translatedipaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Cloud Application Audit" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Cloud Application Audit" AND deviceaddress NOT NULL AND deviceaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND ipaddress NOT NULL AND ipaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND sourceaddress NOT NULL AND sourceaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationaddress NOT NULL AND destinationaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND translatedipaddress NOT NULL AND translatedipaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND deviceaddress NOT NULL AND deviceaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Unix / Linux / AIX" AND ipaddress NOT NULL AND ipaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Unix / Linux / AIX" AND sourceaddress NOT NULL AND sourceaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationaddress NOT NULL AND destinationaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Unix / Linux / AIX" AND translatedipaddress NOT NULL AND translatedipaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Unix / Linux / AIX" AND deviceaddress NOT NULL AND deviceaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND ipaddress NOT NULL AND ipaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND sourceaddress NOT NULL AND sourceaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationaddress NOT NULL AND destinationaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND translatedipaddress NOT NULL AND translatedipaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND deviceaddress NOT NULL AND deviceaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Cloud Application Security Broker" AND ipaddress NOT NULL AND ipaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourceaddress NOT NULL AND sourceaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationaddress NOT NULL AND destinationaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Cloud Application Security Broker" AND translatedipaddress NOT NULL AND translatedipaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Cloud Application Security Broker" AND deviceaddress NOT NULL AND deviceaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Source Code Repository" AND ipaddress NOT NULL AND ipaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Source Code Repository" AND sourceaddress NOT NULL AND sourceaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Source Code Repository" AND destinationaddress NOT NULL AND destinationaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Source Code Repository" AND translatedipaddress NOT NULL AND translatedipaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Source Code Repository" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Source Code Repository" AND deviceaddress NOT NULL AND deviceaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Cloud Email / Email Security" AND ipaddress NOT NULL AND ipaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourceaddress NOT NULL AND sourceaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationaddress NOT NULL AND destinationaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Cloud Email / Email Security" AND translatedipaddress NOT NULL AND translatedipaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Cloud Email / Email Security" AND deviceaddress NOT NULL AND deviceaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="DNS / DHCP" AND ipaddress NOT NULL AND ipaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="DNS / DHCP" AND sourceaddress NOT NULL AND sourceaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="DNS / DHCP" AND destinationaddress NOT NULL AND destinationaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="DNS / DHCP" AND translatedipaddress NOT NULL AND translatedipaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="DNS / DHCP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="DNS / DHCP" AND deviceaddress NOT NULL AND deviceaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND ipaddress NOT NULL AND ipaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND sourceaddress NOT NULL AND sourceaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationaddress NOT NULL AND destinationaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND translatedipaddress NOT NULL AND translatedipaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND deviceaddress NOT NULL AND deviceaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Next Generation Firewall" AND ipaddress NOT NULL AND ipaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Next Generation Firewall" AND sourceaddress NOT NULL AND sourceaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Next Generation Firewall" AND translatedipaddress NOT NULL AND translatedipaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Next Generation Firewall" AND deviceaddress NOT NULL AND deviceaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Firewall" AND ipaddress NOT NULL AND ipaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Firewall" AND sourceaddress NOT NULL AND sourceaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Firewall" AND translatedipaddress NOT NULL AND translatedipaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Firewall" AND deviceaddress NOT NULL AND deviceaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Web Proxy" AND ipaddress NOT NULL AND ipaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Web Proxy" AND sourceaddress NOT NULL AND sourceaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Web Proxy" AND destinationaddress NOT NULL AND destinationaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Web Proxy" AND translatedipaddress NOT NULL AND translatedipaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Web Proxy" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Web Proxy" AND deviceaddress NOT NULL AND deviceaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Flow" AND ipaddress NOT NULL AND ipaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Flow" AND sourceaddress NOT NULL AND sourceaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Flow" AND destinationaddress NOT NULL AND destinationaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Flow" AND translatedipaddress NOT NULL AND translatedipaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Flow" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Flow" AND deviceaddress NOT NULL AND deviceaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Web Server" AND ipaddress NOT NULL AND ipaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Web Server" AND sourceaddress NOT NULL AND sourceaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Web Server" AND destinationaddress NOT NULL AND destinationaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Web Server" AND translatedipaddress NOT NULL AND translatedipaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Web Server" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Web Server" AND deviceaddress NOT NULL AND deviceaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="DNS / DHCP" AND ipaddress NOT NULL AND ipaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="DNS / DHCP" AND sourceaddress NOT NULL AND sourceaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="DNS / DHCP" AND destinationaddress NOT NULL AND destinationaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="DNS / DHCP" AND translatedipaddress NOT NULL AND translatedipaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="DNS / DHCP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="DNS / DHCP" AND deviceaddress NOT NULL AND deviceaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND ipaddress NOT NULL AND ipaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND sourceaddress NOT NULL AND sourceaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationaddress NOT NULL AND destinationaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND translatedipaddress NOT NULL AND translatedipaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND deviceaddress NOT NULL AND deviceaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND ipaddress NOT NULL AND ipaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND sourceaddress NOT NULL AND sourceaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationaddress NOT NULL AND destinationaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND translatedipaddress NOT NULL AND translatedipaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND deviceaddress NOT NULL AND deviceaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Email / Email Security" AND ipaddress NOT NULL AND ipaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Email / Email Security" AND sourceaddress NOT NULL AND sourceaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Email / Email Security" AND destinationaddress NOT NULL AND destinationaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Email / Email Security" AND translatedipaddress NOT NULL AND translatedipaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Email / Email Security" AND deviceaddress NOT NULL AND deviceaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Cloud Email / Email Security" AND ipaddress NOT NULL AND ipaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourceaddress NOT NULL AND sourceaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationaddress NOT NULL AND destinationaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Cloud Email / Email Security" AND translatedipaddress NOT NULL AND translatedipaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Cloud Email / Email Security" AND deviceaddress NOT NULL AND deviceaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND ipaddress NOT NULL AND ipaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourceaddress NOT NULL AND sourceaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationaddress NOT NULL AND destinationaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND translatedipaddress NOT NULL AND translatedipaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND deviceaddress NOT NULL AND deviceaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND ipaddress NOT NULL AND ipaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourceaddress NOT NULL AND sourceaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationaddress NOT NULL AND destinationaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND translatedipaddress NOT NULL AND translatedipaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND deviceaddress NOT NULL AND deviceaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Web Application Firewall" AND ipaddress NOT NULL AND ipaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Web Application Firewall" AND sourceaddress NOT NULL AND sourceaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Web Application Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Web Application Firewall" AND translatedipaddress NOT NULL AND translatedipaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Web Application Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Web Application Firewall" AND deviceaddress NOT NULL AND deviceaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Endpoint management systems" AND ipaddress NOT NULL AND ipaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Endpoint management systems" AND sourceaddress NOT NULL AND sourceaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Endpoint management systems" AND destinationaddress NOT NULL AND destinationaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Endpoint management systems" AND translatedipaddress NOT NULL AND translatedipaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Endpoint management systems" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Endpoint management systems" AND deviceaddress NOT NULL AND deviceaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Cloud Content Management System" AND ipaddress NOT NULL AND ipaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Cloud Content Management System" AND sourceaddress NOT NULL AND sourceaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Cloud Content Management System" AND destinationaddress NOT NULL AND destinationaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Cloud Content Management System" AND translatedipaddress NOT NULL AND translatedipaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Cloud Content Management System" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Cloud Content Management System" AND deviceaddress NOT NULL AND deviceaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND ipaddress NOT NULL AND ipaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourceaddress NOT NULL AND sourceaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationaddress NOT NULL AND destinationaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND translatedipaddress NOT NULL AND translatedipaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND deviceaddress NOT NULL AND deviceaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Microsoft Windows" AND ipaddress NOT NULL AND ipaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Microsoft Windows" AND sourceaddress NOT NULL AND sourceaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Microsoft Windows" AND destinationaddress NOT NULL AND destinationaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Microsoft Windows" AND translatedipaddress NOT NULL AND translatedipaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Microsoft Windows" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Microsoft Windows" AND deviceaddress NOT NULL AND deviceaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Cloud Services / Applications" AND ipaddress NOT NULL AND ipaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Cloud Services / Applications" AND sourceaddress NOT NULL AND sourceaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Cloud Services / Applications" AND destinationaddress NOT NULL AND destinationaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Cloud Services / Applications" AND translatedipaddress NOT NULL AND translatedipaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Cloud Services / Applications" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Cloud Services / Applications" AND deviceaddress NOT NULL AND deviceaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Cloud Application Audit" AND ipaddress NOT NULL AND ipaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Cloud Application Audit" AND sourceaddress NOT NULL AND sourceaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Cloud Application Audit" AND destinationaddress NOT NULL AND destinationaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Cloud Application Audit" AND translatedipaddress NOT NULL AND translatedipaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Cloud Application Audit" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Cloud Application Audit" AND deviceaddress NOT NULL AND deviceaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND ipaddress NOT NULL AND ipaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND sourceaddress NOT NULL AND sourceaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationaddress NOT NULL AND destinationaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND translatedipaddress NOT NULL AND translatedipaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND deviceaddress NOT NULL AND deviceaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Authentication / VPN" AND ipaddress NOT NULL AND ipaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Authentication / VPN" AND sourceaddress NOT NULL AND sourceaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Authentication / VPN" AND destinationaddress NOT NULL AND destinationaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Authentication / VPN" AND translatedipaddress NOT NULL AND translatedipaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Authentication / VPN" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Authentication / VPN" AND deviceaddress NOT NULL AND deviceaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Content Management System" AND ipaddress NOT NULL AND ipaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Content Management System" AND sourceaddress NOT NULL AND sourceaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Content Management System" AND destinationaddress NOT NULL AND destinationaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Content Management System" AND translatedipaddress NOT NULL AND translatedipaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Content Management System" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Content Management System" AND deviceaddress NOT NULL AND deviceaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Unix / Linux / AIX" AND ipaddress NOT NULL AND ipaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Unix / Linux / AIX" AND sourceaddress NOT NULL AND sourceaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationaddress NOT NULL AND destinationaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Unix / Linux / AIX" AND translatedipaddress NOT NULL AND translatedipaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Unix / Linux / AIX" AND deviceaddress NOT NULL AND deviceaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Network Access Control / NAC" AND ipaddress NOT NULL AND ipaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Network Access Control / NAC" AND sourceaddress NOT NULL AND sourceaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Network Access Control / NAC" AND destinationaddress NOT NULL AND destinationaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Network Access Control / NAC" AND translatedipaddress NOT NULL AND translatedipaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Network Access Control / NAC" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Network Access Control / NAC" AND deviceaddress NOT NULL AND deviceaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Virtualization / Containers" AND ipaddress NOT NULL AND ipaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Virtualization / Containers" AND sourceaddress NOT NULL AND sourceaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Virtualization / Containers" AND destinationaddress NOT NULL AND destinationaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Virtualization / Containers" AND translatedipaddress NOT NULL AND translatedipaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Virtualization / Containers" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Virtualization / Containers" AND deviceaddress NOT NULL AND deviceaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Access / Privileged User" AND ipaddress NOT NULL AND ipaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Access / Privileged User" AND sourceaddress NOT NULL AND sourceaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Access / Privileged User" AND destinationaddress NOT NULL AND destinationaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Access / Privileged User" AND translatedipaddress NOT NULL AND translatedipaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Access / Privileged User" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Access / Privileged User" AND deviceaddress NOT NULL AND deviceaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND ipaddress NOT NULL AND ipaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND sourceaddress NOT NULL AND sourceaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationaddress NOT NULL AND destinationaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND translatedipaddress NOT NULL AND translatedipaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND deviceaddress NOT NULL AND deviceaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Access / Identity Management" AND ipaddress NOT NULL AND ipaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Access / Identity Management" AND sourceaddress NOT NULL AND sourceaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Access / Identity Management" AND destinationaddress NOT NULL AND destinationaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Access / Identity Management" AND translatedipaddress NOT NULL AND translatedipaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Access / Identity Management" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Access / Identity Management" AND deviceaddress NOT NULL AND deviceaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Identity Access Management" AND ipaddress NOT NULL AND ipaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Identity Access Management" AND sourceaddress NOT NULL AND sourceaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Identity Access Management" AND destinationaddress NOT NULL AND destinationaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Identity Access Management" AND translatedipaddress NOT NULL AND translatedipaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Identity Access Management" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Identity Access Management" AND deviceaddress NOT NULL AND deviceaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND ipaddress NOT NULL AND ipaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND sourceaddress NOT NULL AND sourceaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND destinationaddress NOT NULL AND destinationaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND translatedipaddress NOT NULL AND translatedipaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND deviceaddress NOT NULL AND deviceaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Authentication / WiFi" AND ipaddress NOT NULL AND ipaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Authentication / WiFi" AND sourceaddress NOT NULL AND sourceaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Authentication / WiFi" AND destinationaddress NOT NULL AND destinationaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Authentication / WiFi" AND translatedipaddress NOT NULL AND translatedipaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Authentication / WiFi" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Authentication / WiFi" AND deviceaddress NOT NULL AND deviceaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Cloud Application Security Broker" AND ipaddress NOT NULL AND ipaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourceaddress NOT NULL AND sourceaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationaddress NOT NULL AND destinationaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Cloud Application Security Broker" AND translatedipaddress NOT NULL AND translatedipaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Cloud Application Security Broker" AND deviceaddress NOT NULL AND deviceaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Source Code Repository" AND ipaddress NOT NULL AND ipaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Source Code Repository" AND sourceaddress NOT NULL AND sourceaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Source Code Repository" AND destinationaddress NOT NULL AND destinationaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Source Code Repository" AND translatedipaddress NOT NULL AND translatedipaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Source Code Repository" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Source Code Repository" AND deviceaddress NOT NULL AND deviceaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND ipaddress NOT NULL AND ipaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND sourceaddress NOT NULL AND sourceaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationaddress NOT NULL AND destinationaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND translatedipaddress NOT NULL AND translatedipaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND deviceaddress NOT NULL AND deviceaddress IN ("158.255.208.140","91.132.95.204","91.132.95.28","151.236.20.39","151.236.23.232","158.255.212.173","162.252.175.109","162.252.175.122","162.252.175.136","162.252.175.163","162.252.175.90","176.120.74.3","185.126.239.207","185.26.239.98","194.233.174.22","194.68.27.149","194.68.27.176","198.244.207.203","208.115.230.243","213.183.57.174","213.183.57.72","31.40.212.130","37.143.128.223","37.235.53.217","37.235.56.204\n45.120.178.161","89.31.120.126","91.132.93.33","91.132.95.135","92.243.64.184","92.243.64.36","95.164.45.27")
index=activity AND rg_functionality="Next Generation Firewall" AND filehash NOT NULL AND filehash IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Next Generation Firewall" AND oldfilehash NOT NULL AND oldfilehash IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Next Generation Firewall" AND customstring3 NOT NULL AND customstring3 IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Next Generation Firewall" AND customstring64 NOT NULL AND customstring64 IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Firewall" AND filehash NOT NULL AND filehash IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Firewall" AND oldfilehash NOT NULL AND oldfilehash IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Firewall" AND customstring3 NOT NULL AND customstring3 IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Firewall" AND customstring64 NOT NULL AND customstring64 IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Web Proxy" AND filehash NOT NULL AND filehash IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Web Proxy" AND oldfilehash NOT NULL AND oldfilehash IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Web Proxy" AND customstring3 NOT NULL AND customstring3 IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Web Proxy" AND customstring64 NOT NULL AND customstring64 IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Flow" AND filehash NOT NULL AND filehash IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Flow" AND oldfilehash NOT NULL AND oldfilehash IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Flow" AND customstring3 NOT NULL AND customstring3 IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Flow" AND customstring64 NOT NULL AND customstring64 IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Web Server" AND filehash NOT NULL AND filehash IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Web Server" AND oldfilehash NOT NULL AND oldfilehash IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Web Server" AND customstring3 NOT NULL AND customstring3 IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Web Server" AND customstring64 NOT NULL AND customstring64 IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Web Application Firewall" AND filehash NOT NULL AND filehash IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Web Application Firewall" AND oldfilehash NOT NULL AND oldfilehash IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Web Application Firewall" AND customstring3 NOT NULL AND customstring3 IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Web Application Firewall" AND customstring64 NOT NULL AND customstring64 IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Endpoint management systems" AND filehash NOT NULL AND filehash IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Endpoint management systems" AND oldfilehash NOT NULL AND oldfilehash IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Endpoint management systems" AND customstring3 NOT NULL AND customstring3 IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Endpoint management systems" AND customstring64 NOT NULL AND customstring64 IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Cloud Application Audit" AND filehash NOT NULL AND filehash IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Cloud Application Audit" AND oldfilehash NOT NULL AND oldfilehash IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Cloud Application Audit" AND customstring3 NOT NULL AND customstring3 IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Cloud Application Audit" AND customstring64 NOT NULL AND customstring64 IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND filehash NOT NULL AND filehash IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND oldfilehash NOT NULL AND oldfilehash IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND customstring64 NOT NULL AND customstring64 IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Unix / Linux / AIX" AND filehash NOT NULL AND filehash IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Unix / Linux / AIX" AND oldfilehash NOT NULL AND oldfilehash IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Unix / Linux / AIX" AND customstring3 NOT NULL AND customstring3 IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Unix / Linux / AIX" AND customstring64 NOT NULL AND customstring64 IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND filehash NOT NULL AND filehash IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND oldfilehash NOT NULL AND oldfilehash IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND customstring64 NOT NULL AND customstring64 IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Cloud Application Security Broker" AND filehash NOT NULL AND filehash IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Cloud Application Security Broker" AND oldfilehash NOT NULL AND oldfilehash IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Cloud Application Security Broker" AND customstring3 NOT NULL AND customstring3 IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Cloud Application Security Broker" AND customstring64 NOT NULL AND customstring64 IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Source Code Repository" AND filehash NOT NULL AND filehash IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Source Code Repository" AND oldfilehash NOT NULL AND oldfilehash IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Source Code Repository" AND customstring3 NOT NULL AND customstring3 IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Source Code Repository" AND customstring64 NOT NULL AND customstring64 IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="DNS / DHCP" AND filehash NOT NULL AND filehash IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="DNS / DHCP" AND oldfilehash NOT NULL AND oldfilehash IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="DNS / DHCP" AND customstring3 NOT NULL AND customstring3 IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="DNS / DHCP" AND customstring64 NOT NULL AND customstring64 IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND filehash NOT NULL AND filehash IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND oldfilehash NOT NULL AND oldfilehash IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND customstring3 NOT NULL AND customstring3 IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND customstring64 NOT NULL AND customstring64 IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Next Generation Firewall" AND filehash NOT NULL AND filehash IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Next Generation Firewall" AND oldfilehash NOT NULL AND oldfilehash IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Next Generation Firewall" AND customstring3 NOT NULL AND customstring3 IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Next Generation Firewall" AND customstring64 NOT NULL AND customstring64 IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Firewall" AND filehash NOT NULL AND filehash IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Firewall" AND oldfilehash NOT NULL AND oldfilehash IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Firewall" AND customstring3 NOT NULL AND customstring3 IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Firewall" AND customstring64 NOT NULL AND customstring64 IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Web Proxy" AND filehash NOT NULL AND filehash IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Web Proxy" AND oldfilehash NOT NULL AND oldfilehash IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Web Proxy" AND customstring3 NOT NULL AND customstring3 IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Web Proxy" AND customstring64 NOT NULL AND customstring64 IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Flow" AND filehash NOT NULL AND filehash IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Flow" AND oldfilehash NOT NULL AND oldfilehash IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Flow" AND customstring3 NOT NULL AND customstring3 IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Flow" AND customstring64 NOT NULL AND customstring64 IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Web Server" AND filehash NOT NULL AND filehash IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Web Server" AND oldfilehash NOT NULL AND oldfilehash IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Web Server" AND customstring3 NOT NULL AND customstring3 IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Web Server" AND customstring64 NOT NULL AND customstring64 IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="DNS / DHCP" AND filehash NOT NULL AND filehash IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="DNS / DHCP" AND oldfilehash NOT NULL AND oldfilehash IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="DNS / DHCP" AND customstring3 NOT NULL AND customstring3 IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="DNS / DHCP" AND customstring64 NOT NULL AND customstring64 IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Web Application Firewall" AND filehash NOT NULL AND filehash IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Web Application Firewall" AND oldfilehash NOT NULL AND oldfilehash IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Web Application Firewall" AND customstring3 NOT NULL AND customstring3 IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Web Application Firewall" AND customstring64 NOT NULL AND customstring64 IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Endpoint management systems" AND filehash NOT NULL AND filehash IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Endpoint management systems" AND oldfilehash NOT NULL AND oldfilehash IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Endpoint management systems" AND customstring3 NOT NULL AND customstring3 IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Endpoint management systems" AND customstring64 NOT NULL AND customstring64 IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Cloud Content Management System" AND filehash NOT NULL AND filehash IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Cloud Content Management System" AND oldfilehash NOT NULL AND oldfilehash IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Cloud Content Management System" AND customstring3 NOT NULL AND customstring3 IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Cloud Content Management System" AND customstring64 NOT NULL AND customstring64 IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Microsoft Windows" AND filehash NOT NULL AND filehash IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Microsoft Windows" AND oldfilehash NOT NULL AND oldfilehash IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Microsoft Windows" AND customstring3 NOT NULL AND customstring3 IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Microsoft Windows" AND customstring64 NOT NULL AND customstring64 IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Cloud Services / Applications" AND filehash NOT NULL AND filehash IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Cloud Services / Applications" AND oldfilehash NOT NULL AND oldfilehash IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Cloud Services / Applications" AND customstring3 NOT NULL AND customstring3 IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Cloud Services / Applications" AND customstring64 NOT NULL AND customstring64 IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Cloud Application Audit" AND filehash NOT NULL AND filehash IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Cloud Application Audit" AND oldfilehash NOT NULL AND oldfilehash IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Cloud Application Audit" AND customstring3 NOT NULL AND customstring3 IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Cloud Application Audit" AND customstring64 NOT NULL AND customstring64 IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND filehash NOT NULL AND filehash IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND oldfilehash NOT NULL AND oldfilehash IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND customstring64 NOT NULL AND customstring64 IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Authentication / VPN" AND filehash NOT NULL AND filehash IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Authentication / VPN" AND oldfilehash NOT NULL AND oldfilehash IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Authentication / VPN" AND customstring3 NOT NULL AND customstring3 IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Authentication / VPN" AND customstring64 NOT NULL AND customstring64 IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Content Management System" AND filehash NOT NULL AND filehash IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Content Management System" AND oldfilehash NOT NULL AND oldfilehash IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Content Management System" AND customstring3 NOT NULL AND customstring3 IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Content Management System" AND customstring64 NOT NULL AND customstring64 IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Unix / Linux / AIX" AND filehash NOT NULL AND filehash IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Unix / Linux / AIX" AND oldfilehash NOT NULL AND oldfilehash IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Unix / Linux / AIX" AND customstring3 NOT NULL AND customstring3 IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Unix / Linux / AIX" AND customstring64 NOT NULL AND customstring64 IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Network Access Control / NAC" AND filehash NOT NULL AND filehash IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Network Access Control / NAC" AND oldfilehash NOT NULL AND oldfilehash IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Network Access Control / NAC" AND customstring3 NOT NULL AND customstring3 IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Network Access Control / NAC" AND customstring64 NOT NULL AND customstring64 IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Virtualization / Containers" AND filehash NOT NULL AND filehash IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Virtualization / Containers" AND oldfilehash NOT NULL AND oldfilehash IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Virtualization / Containers" AND customstring3 NOT NULL AND customstring3 IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Virtualization / Containers" AND customstring64 NOT NULL AND customstring64 IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Access / Privileged User" AND filehash NOT NULL AND filehash IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Access / Privileged User" AND oldfilehash NOT NULL AND oldfilehash IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Access / Privileged User" AND customstring3 NOT NULL AND customstring3 IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Access / Privileged User" AND customstring64 NOT NULL AND customstring64 IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND filehash NOT NULL AND filehash IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND oldfilehash NOT NULL AND oldfilehash IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND customstring64 NOT NULL AND customstring64 IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Access / Identity Management" AND filehash NOT NULL AND filehash IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Access / Identity Management" AND oldfilehash NOT NULL AND oldfilehash IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Access / Identity Management" AND customstring3 NOT NULL AND customstring3 IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Access / Identity Management" AND customstring64 NOT NULL AND customstring64 IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Identity Access Management" AND filehash NOT NULL AND filehash IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Identity Access Management" AND oldfilehash NOT NULL AND oldfilehash IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Identity Access Management" AND customstring3 NOT NULL AND customstring3 IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Identity Access Management" AND customstring64 NOT NULL AND customstring64 IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND filehash NOT NULL AND filehash IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND oldfilehash NOT NULL AND oldfilehash IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND customstring3 NOT NULL AND customstring3 IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND customstring64 NOT NULL AND customstring64 IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Authentication / WiFi" AND filehash NOT NULL AND filehash IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Authentication / WiFi" AND oldfilehash NOT NULL AND oldfilehash IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Authentication / WiFi" AND customstring3 NOT NULL AND customstring3 IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Authentication / WiFi" AND customstring64 NOT NULL AND customstring64 IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Cloud Application Security Broker" AND filehash NOT NULL AND filehash IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Cloud Application Security Broker" AND oldfilehash NOT NULL AND oldfilehash IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Cloud Application Security Broker" AND customstring3 NOT NULL AND customstring3 IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Cloud Application Security Broker" AND customstring64 NOT NULL AND customstring64 IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Source Code Repository" AND filehash NOT NULL AND filehash IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Source Code Repository" AND oldfilehash NOT NULL AND oldfilehash IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Source Code Repository" AND customstring3 NOT NULL AND customstring3 IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Source Code Repository" AND customstring64 NOT NULL AND customstring64 IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND filehash NOT NULL AND filehash IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND oldfilehash NOT NULL AND oldfilehash IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND customstring3 NOT NULL AND customstring3 IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND customstring64 NOT NULL AND customstring64 IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("9352740811729cbac88116b2e2a92833c9bee4a2","8e1beb77b33497d5d8076ebdb68e5ac002cca7c3","265d5d2219d11e8aa6e6b7855f3d17023fe18eb0","43dc4acbf65be07f00d53e6b2c65b572e4b43f30227aa42438e34d21ecc50acd")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="158.255.212.173" AND destinationport=10862 OR destinationaddress="151.236.25.126" AND destinationport=11331 OR destinationaddress="158.255.215.49" AND destinationport=23079 OR destinationaddress="185.26.239.98" AND destinationport=11076 OR destinationaddress="151.236.25.10" AND destinationport=7205 OR destinationaddress="37.235.53.217" AND destinationport=1358 OR destinationaddress="151.236.23.232" AND destinationport=763 OR destinationaddress="37.235.56.204" AND destinationport=24239 OR destinationaddress="162.252.175.122" AND destinationport=4126 OR destinationaddress="162.252.175.136" AND destinationport=11077)
index=activity AND rg_functionality="Next Generation Firewall" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="158.255.212.173" AND sourceport=10862 OR sourceaddress="151.236.25.126" AND sourceport=11331 OR sourceaddress="158.255.215.49" AND sourceport=23079 OR sourceaddress="185.26.239.98" AND sourceport=11076 OR sourceaddress="151.236.25.10" AND sourceport=7205 OR sourceaddress="37.235.53.217" AND sourceport=1358 OR sourceaddress="151.236.23.232" AND sourceport=763 OR sourceaddress="37.235.56.204" AND sourceport=24239 OR sourceaddress="162.252.175.122" AND sourceport=4126 OR sourceaddress="162.252.175.136" AND sourceport=11077)
index=activity AND rg_functionality="Next Generation Firewall" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="158.255.212.173" AND sourceport=10862 OR translatedipaddress="151.236.25.126" AND sourceport=11331 OR translatedipaddress="158.255.215.49" AND sourceport=23079 OR translatedipaddress="185.26.239.98" AND sourceport=11076 OR translatedipaddress="151.236.25.10" AND sourceport=7205 OR translatedipaddress="37.235.53.217" AND sourceport=1358 OR translatedipaddress="151.236.23.232" AND sourceport=763 OR translatedipaddress="37.235.56.204" AND sourceport=24239 OR translatedipaddress="162.252.175.122" AND sourceport=4126 OR translatedipaddress="162.252.175.136" AND sourceport=11077)
index=activity AND rg_functionality="Next Generation Firewall" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND destinationport=10862 OR destinationtranslatedaddress="151.236.25.126" AND destinationport=11331 OR destinationtranslatedaddress="158.255.215.49" AND destinationport=23079 OR destinationtranslatedaddress="185.26.239.98" AND destinationport=11076 OR destinationtranslatedaddress="151.236.25.10" AND destinationport=7205 OR destinationtranslatedaddress="37.235.53.217" AND destinationport=1358 OR destinationtranslatedaddress="151.236.23.232" AND destinationport=763 OR destinationtranslatedaddress="37.235.56.204" AND destinationport=24239 OR destinationtranslatedaddress="162.252.175.122" AND destinationport=4126 OR destinationtranslatedaddress="162.252.175.136" AND destinationport=11077)
index=activity AND rg_functionality="Next Generation Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND destinationtranslatedport=10862 OR destinationtranslatedaddress="151.236.25.126" AND destinationtranslatedport=11331 OR destinationtranslatedaddress="158.255.215.49" AND destinationtranslatedport=23079 OR destinationtranslatedaddress="185.26.239.98" AND destinationtranslatedport=11076 OR destinationtranslatedaddress="151.236.25.10" AND destinationtranslatedport=7205 OR destinationtranslatedaddress="37.235.53.217" AND destinationtranslatedport=1358 OR destinationtranslatedaddress="151.236.23.232" AND destinationtranslatedport=763 OR destinationtranslatedaddress="37.235.56.204" AND destinationtranslatedport=24239 OR destinationtranslatedaddress="162.252.175.122" AND destinationtranslatedport=4126 OR destinationtranslatedaddress="162.252.175.136" AND destinationtranslatedport=11077)
index=activity AND rg_functionality="Next Generation Firewall" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND translatedport=10862 OR destinationtranslatedaddress="151.236.25.126" AND translatedport=11331 OR destinationtranslatedaddress="158.255.215.49" AND translatedport=23079 OR destinationtranslatedaddress="185.26.239.98" AND translatedport=11076 OR destinationtranslatedaddress="151.236.25.10" AND translatedport=7205 OR destinationtranslatedaddress="37.235.53.217" AND translatedport=1358 OR destinationtranslatedaddress="151.236.23.232" AND translatedport=763 OR destinationtranslatedaddress="37.235.56.204" AND translatedport=24239 OR destinationtranslatedaddress="162.252.175.122" AND translatedport=4126 OR destinationtranslatedaddress="162.252.175.136" AND translatedport=11077)
index=activity AND rg_functionality="Next Generation Firewall" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="162.252.175.163" AND destinationport=28693 OR destinationaddress="162.252.175.90" AND destinationport=845 OR destinationaddress="162.252.175.109" AND destinationport=28330 OR destinationaddress="151.236.20.39" AND destinationport=5524 OR destinationaddress="158.255.208.140" AND destinationport=86 OR destinationaddress="194.68.27.149" AND destinationport=13106 OR destinationaddress="194.68.27.176" AND destinationport=6460 OR destinationaddress="37.143.128.223" AND destinationport=16223 OR destinationaddress="31.40.212.130" AND destinationport=7225 OR destinationaddress="198.244.207.203" AND destinationport=2076)
index=activity AND rg_functionality="Next Generation Firewall" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="162.252.175.163" AND sourceport=28693 OR sourceaddress="162.252.175.90" AND sourceport=845 OR sourceaddress="162.252.175.109" AND sourceport=28330 OR sourceaddress="151.236.20.39" AND sourceport=5524 OR sourceaddress="158.255.208.140" AND sourceport=86 OR sourceaddress="194.68.27.149" AND sourceport=13106 OR sourceaddress="194.68.27.176" AND sourceport=6460 OR sourceaddress="37.143.128.223" AND sourceport=16223 OR sourceaddress="31.40.212.130" AND sourceport=7225 OR sourceaddress="198.244.207.203" AND sourceport=2076)
index=activity AND rg_functionality="Next Generation Firewall" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="162.252.175.163" AND sourceport=28693 OR translatedipaddress="162.252.175.90" AND sourceport=845 OR translatedipaddress="162.252.175.109" AND sourceport=28330 OR translatedipaddress="151.236.20.39" AND sourceport=5524 OR translatedipaddress="158.255.208.140" AND sourceport=86 OR translatedipaddress="194.68.27.149" AND sourceport=13106 OR translatedipaddress="194.68.27.176" AND sourceport=6460 OR translatedipaddress="37.143.128.223" AND sourceport=16223 OR translatedipaddress="31.40.212.130" AND sourceport=7225 OR translatedipaddress="198.244.207.203" AND sourceport=2076)
index=activity AND rg_functionality="Next Generation Firewall" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND destinationport=28693 OR destinationtranslatedaddress="162.252.175.90" AND destinationport=845 OR destinationtranslatedaddress="162.252.175.109" AND destinationport=28330 OR destinationtranslatedaddress="151.236.20.39" AND destinationport=5524 OR destinationtranslatedaddress="158.255.208.140" AND destinationport=86 OR destinationtranslatedaddress="194.68.27.149" AND destinationport=13106 OR destinationtranslatedaddress="194.68.27.176" AND destinationport=6460 OR destinationtranslatedaddress="37.143.128.223" AND destinationport=16223 OR destinationtranslatedaddress="31.40.212.130" AND destinationport=7225 OR destinationtranslatedaddress="198.244.207.203" AND destinationport=2076)
index=activity AND rg_functionality="Next Generation Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND destinationtranslatedport=28693 OR destinationtranslatedaddress="162.252.175.90" AND destinationtranslatedport=845 OR destinationtranslatedaddress="162.252.175.109" AND destinationtranslatedport=28330 OR destinationtranslatedaddress="151.236.20.39" AND destinationtranslatedport=5524 OR destinationtranslatedaddress="158.255.208.140" AND destinationtranslatedport=86 OR destinationtranslatedaddress="194.68.27.149" AND destinationtranslatedport=13106 OR destinationtranslatedaddress="194.68.27.176" AND destinationtranslatedport=6460 OR destinationtranslatedaddress="37.143.128.223" AND destinationtranslatedport=16223 OR destinationtranslatedaddress="31.40.212.130" AND destinationtranslatedport=7225 OR destinationtranslatedaddress="198.244.207.203" AND destinationtranslatedport=2076)
index=activity AND rg_functionality="Next Generation Firewall" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND translatedport=28693 OR destinationtranslatedaddress="162.252.175.90" AND translatedport=845 OR destinationtranslatedaddress="162.252.175.109" AND translatedport=28330 OR destinationtranslatedaddress="151.236.20.39" AND translatedport=5524 OR destinationtranslatedaddress="158.255.208.140" AND translatedport=86 OR destinationtranslatedaddress="194.68.27.149" AND translatedport=13106 OR destinationtranslatedaddress="194.68.27.176" AND translatedport=6460 OR destinationtranslatedaddress="37.143.128.223" AND translatedport=16223 OR destinationtranslatedaddress="31.40.212.130" AND translatedport=7225 OR destinationtranslatedaddress="198.244.207.203" AND translatedport=2076)
index=activity AND rg_functionality="Next Generation Firewall" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="208.115.230.243" AND destinationport=16697 OR destinationaddress="185.126.239.207" AND destinationport=26630 OR destinationaddress="213.183.57.174" AND destinationport=12517 OR destinationaddress="213.183.57.72" AND destinationport=12517 OR destinationaddress="213.183.56.201" AND destinationport=12517 OR destinationaddress="95.164.45.27" AND destinationport=17426 OR destinationaddress="45.120.178.161" AND destinationport=11013 OR destinationaddress="176.120.74.3" AND destinationport=17268 OR destinationaddress="92.243.64.184" AND destinationport=17146 OR destinationaddress="92.243.64.36" AND destinationport=17146)
index=activity AND rg_functionality="Next Generation Firewall" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="208.115.230.243" AND sourceport=16697 OR sourceaddress="185.126.239.207" AND sourceport=26630 OR sourceaddress="213.183.57.174" AND sourceport=12517 OR sourceaddress="213.183.57.72" AND sourceport=12517 OR sourceaddress="213.183.56.201" AND sourceport=12517 OR sourceaddress="95.164.45.27" AND sourceport=17426 OR sourceaddress="45.120.178.161" AND sourceport=11013 OR sourceaddress="176.120.74.3" AND sourceport=17268 OR sourceaddress="92.243.64.184" AND sourceport=17146 OR sourceaddress="92.243.64.36" AND sourceport=17146)
index=activity AND rg_functionality="Next Generation Firewall" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="208.115.230.243" AND sourceport=16697 OR translatedipaddress="185.126.239.207" AND sourceport=26630 OR translatedipaddress="213.183.57.174" AND sourceport=12517 OR translatedipaddress="213.183.57.72" AND sourceport=12517 OR translatedipaddress="213.183.56.201" AND sourceport=12517 OR translatedipaddress="95.164.45.27" AND sourceport=17426 OR translatedipaddress="45.120.178.161" AND sourceport=11013 OR translatedipaddress="176.120.74.3" AND sourceport=17268 OR translatedipaddress="92.243.64.184" AND sourceport=17146 OR translatedipaddress="92.243.64.36" AND sourceport=17146)
index=activity AND rg_functionality="Next Generation Firewall" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND destinationport=16697 OR destinationtranslatedaddress="185.126.239.207" AND destinationport=26630 OR destinationtranslatedaddress="213.183.57.174" AND destinationport=12517 OR destinationtranslatedaddress="213.183.57.72" AND destinationport=12517 OR destinationtranslatedaddress="213.183.56.201" AND destinationport=12517 OR destinationtranslatedaddress="95.164.45.27" AND destinationport=17426 OR destinationtranslatedaddress="45.120.178.161" AND destinationport=11013 OR destinationtranslatedaddress="176.120.74.3" AND destinationport=17268 OR destinationtranslatedaddress="92.243.64.184" AND destinationport=17146 OR destinationtranslatedaddress="92.243.64.36" AND destinationport=17146)
index=activity AND rg_functionality="Next Generation Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND destinationtranslatedport=16697 OR destinationtranslatedaddress="185.126.239.207" AND destinationtranslatedport=26630 OR destinationtranslatedaddress="213.183.57.174" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="213.183.57.72" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="213.183.56.201" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="95.164.45.27" AND destinationtranslatedport=17426 OR destinationtranslatedaddress="45.120.178.161" AND destinationtranslatedport=11013 OR destinationtranslatedaddress="176.120.74.3" AND destinationtranslatedport=17268 OR destinationtranslatedaddress="92.243.64.184" AND destinationtranslatedport=17146 OR destinationtranslatedaddress="92.243.64.36" AND destinationtranslatedport=17146)
index=activity AND rg_functionality="Next Generation Firewall" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND translatedport=16697 OR destinationtranslatedaddress="185.126.239.207" AND translatedport=26630 OR destinationtranslatedaddress="213.183.57.174" AND translatedport=12517 OR destinationtranslatedaddress="213.183.57.72" AND translatedport=12517 OR destinationtranslatedaddress="213.183.56.201" AND translatedport=12517 OR destinationtranslatedaddress="95.164.45.27" AND translatedport=17426 OR destinationtranslatedaddress="45.120.178.161" AND translatedport=11013 OR destinationtranslatedaddress="176.120.74.3" AND translatedport=17268 OR destinationtranslatedaddress="92.243.64.184" AND translatedport=17146 OR destinationtranslatedaddress="92.243.64.36" AND translatedport=17146)
index=activity AND rg_functionality="Next Generation Firewall" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="89.31.120.126" AND destinationport=11578 OR destinationaddress="91.132.93.33" AND destinationport=11578 OR destinationaddress="91.132.95.28" AND destinationport=8773 OR destinationaddress="91.132.95.204" AND destinationport=8773 OR destinationaddress="91.132.95.135" AND destinationport=8773 OR destinationaddress="194.233.174.22" AND destinationport=45358)
index=activity AND rg_functionality="Next Generation Firewall" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="89.31.120.126" AND sourceport=11578 OR sourceaddress="91.132.93.33" AND sourceport=11578 OR sourceaddress="91.132.95.28" AND sourceport=8773 OR sourceaddress="91.132.95.204" AND sourceport=8773 OR sourceaddress="91.132.95.135" AND sourceport=8773 OR sourceaddress="194.233.174.22" AND sourceport=45358)
index=activity AND rg_functionality="Next Generation Firewall" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="89.31.120.126" AND sourceport=11578 OR translatedipaddress="91.132.93.33" AND sourceport=11578 OR translatedipaddress="91.132.95.28" AND sourceport=8773 OR translatedipaddress="91.132.95.204" AND sourceport=8773 OR translatedipaddress="91.132.95.135" AND sourceport=8773 OR translatedipaddress="194.233.174.22" AND sourceport=45358)
index=activity AND rg_functionality="Next Generation Firewall" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND destinationport=11578 OR destinationtranslatedaddress="91.132.93.33" AND destinationport=11578 OR destinationtranslatedaddress="91.132.95.28" AND destinationport=8773 OR destinationtranslatedaddress="91.132.95.204" AND destinationport=8773 OR destinationtranslatedaddress="91.132.95.135" AND destinationport=8773 OR destinationtranslatedaddress="194.233.174.22" AND destinationport=45358)
index=activity AND rg_functionality="Next Generation Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND destinationtranslatedport=11578 OR destinationtranslatedaddress="91.132.93.33" AND destinationtranslatedport=11578 OR destinationtranslatedaddress="91.132.95.28" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="91.132.95.204" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="91.132.95.135" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="194.233.174.22" AND destinationtranslatedport=45358)
index=activity AND rg_functionality="Next Generation Firewall" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND translatedport=11578 OR destinationtranslatedaddress="91.132.93.33" AND translatedport=11578 OR destinationtranslatedaddress="91.132.95.28" AND translatedport=8773 OR destinationtranslatedaddress="91.132.95.204" AND translatedport=8773 OR destinationtranslatedaddress="91.132.95.135" AND translatedport=8773 OR destinationtranslatedaddress="194.233.174.22" AND translatedport=45358)
index=activity AND rg_functionality="Firewall" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="158.255.212.173" AND destinationport=10862 OR destinationaddress="151.236.25.126" AND destinationport=11331 OR destinationaddress="158.255.215.49" AND destinationport=23079 OR destinationaddress="185.26.239.98" AND destinationport=11076 OR destinationaddress="151.236.25.10" AND destinationport=7205 OR destinationaddress="37.235.53.217" AND destinationport=1358 OR destinationaddress="151.236.23.232" AND destinationport=763 OR destinationaddress="37.235.56.204" AND destinationport=24239 OR destinationaddress="162.252.175.122" AND destinationport=4126 OR destinationaddress="162.252.175.136" AND destinationport=11077)
index=activity AND rg_functionality="Firewall" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="158.255.212.173" AND sourceport=10862 OR sourceaddress="151.236.25.126" AND sourceport=11331 OR sourceaddress="158.255.215.49" AND sourceport=23079 OR sourceaddress="185.26.239.98" AND sourceport=11076 OR sourceaddress="151.236.25.10" AND sourceport=7205 OR sourceaddress="37.235.53.217" AND sourceport=1358 OR sourceaddress="151.236.23.232" AND sourceport=763 OR sourceaddress="37.235.56.204" AND sourceport=24239 OR sourceaddress="162.252.175.122" AND sourceport=4126 OR sourceaddress="162.252.175.136" AND sourceport=11077)
index=activity AND rg_functionality="Firewall" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="158.255.212.173" AND sourceport=10862 OR translatedipaddress="151.236.25.126" AND sourceport=11331 OR translatedipaddress="158.255.215.49" AND sourceport=23079 OR translatedipaddress="185.26.239.98" AND sourceport=11076 OR translatedipaddress="151.236.25.10" AND sourceport=7205 OR translatedipaddress="37.235.53.217" AND sourceport=1358 OR translatedipaddress="151.236.23.232" AND sourceport=763 OR translatedipaddress="37.235.56.204" AND sourceport=24239 OR translatedipaddress="162.252.175.122" AND sourceport=4126 OR translatedipaddress="162.252.175.136" AND sourceport=11077)
index=activity AND rg_functionality="Firewall" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND destinationport=10862 OR destinationtranslatedaddress="151.236.25.126" AND destinationport=11331 OR destinationtranslatedaddress="158.255.215.49" AND destinationport=23079 OR destinationtranslatedaddress="185.26.239.98" AND destinationport=11076 OR destinationtranslatedaddress="151.236.25.10" AND destinationport=7205 OR destinationtranslatedaddress="37.235.53.217" AND destinationport=1358 OR destinationtranslatedaddress="151.236.23.232" AND destinationport=763 OR destinationtranslatedaddress="37.235.56.204" AND destinationport=24239 OR destinationtranslatedaddress="162.252.175.122" AND destinationport=4126 OR destinationtranslatedaddress="162.252.175.136" AND destinationport=11077)
index=activity AND rg_functionality="Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND destinationtranslatedport=10862 OR destinationtranslatedaddress="151.236.25.126" AND destinationtranslatedport=11331 OR destinationtranslatedaddress="158.255.215.49" AND destinationtranslatedport=23079 OR destinationtranslatedaddress="185.26.239.98" AND destinationtranslatedport=11076 OR destinationtranslatedaddress="151.236.25.10" AND destinationtranslatedport=7205 OR destinationtranslatedaddress="37.235.53.217" AND destinationtranslatedport=1358 OR destinationtranslatedaddress="151.236.23.232" AND destinationtranslatedport=763 OR destinationtranslatedaddress="37.235.56.204" AND destinationtranslatedport=24239 OR destinationtranslatedaddress="162.252.175.122" AND destinationtranslatedport=4126 OR destinationtranslatedaddress="162.252.175.136" AND destinationtranslatedport=11077)
index=activity AND rg_functionality="Firewall" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND translatedport=10862 OR destinationtranslatedaddress="151.236.25.126" AND translatedport=11331 OR destinationtranslatedaddress="158.255.215.49" AND translatedport=23079 OR destinationtranslatedaddress="185.26.239.98" AND translatedport=11076 OR destinationtranslatedaddress="151.236.25.10" AND translatedport=7205 OR destinationtranslatedaddress="37.235.53.217" AND translatedport=1358 OR destinationtranslatedaddress="151.236.23.232" AND translatedport=763 OR destinationtranslatedaddress="37.235.56.204" AND translatedport=24239 OR destinationtranslatedaddress="162.252.175.122" AND translatedport=4126 OR destinationtranslatedaddress="162.252.175.136" AND translatedport=11077)
index=activity AND rg_functionality="Firewall" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="162.252.175.163" AND destinationport=28693 OR destinationaddress="162.252.175.90" AND destinationport=845 OR destinationaddress="162.252.175.109" AND destinationport=28330 OR destinationaddress="151.236.20.39" AND destinationport=5524 OR destinationaddress="158.255.208.140" AND destinationport=86 OR destinationaddress="194.68.27.149" AND destinationport=13106 OR destinationaddress="194.68.27.176" AND destinationport=6460 OR destinationaddress="37.143.128.223" AND destinationport=16223 OR destinationaddress="31.40.212.130" AND destinationport=7225 OR destinationaddress="198.244.207.203" AND destinationport=2076)
index=activity AND rg_functionality="Firewall" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="162.252.175.163" AND sourceport=28693 OR sourceaddress="162.252.175.90" AND sourceport=845 OR sourceaddress="162.252.175.109" AND sourceport=28330 OR sourceaddress="151.236.20.39" AND sourceport=5524 OR sourceaddress="158.255.208.140" AND sourceport=86 OR sourceaddress="194.68.27.149" AND sourceport=13106 OR sourceaddress="194.68.27.176" AND sourceport=6460 OR sourceaddress="37.143.128.223" AND sourceport=16223 OR sourceaddress="31.40.212.130" AND sourceport=7225 OR sourceaddress="198.244.207.203" AND sourceport=2076)
index=activity AND rg_functionality="Firewall" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="162.252.175.163" AND sourceport=28693 OR translatedipaddress="162.252.175.90" AND sourceport=845 OR translatedipaddress="162.252.175.109" AND sourceport=28330 OR translatedipaddress="151.236.20.39" AND sourceport=5524 OR translatedipaddress="158.255.208.140" AND sourceport=86 OR translatedipaddress="194.68.27.149" AND sourceport=13106 OR translatedipaddress="194.68.27.176" AND sourceport=6460 OR translatedipaddress="37.143.128.223" AND sourceport=16223 OR translatedipaddress="31.40.212.130" AND sourceport=7225 OR translatedipaddress="198.244.207.203" AND sourceport=2076)
index=activity AND rg_functionality="Firewall" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND destinationport=28693 OR destinationtranslatedaddress="162.252.175.90" AND destinationport=845 OR destinationtranslatedaddress="162.252.175.109" AND destinationport=28330 OR destinationtranslatedaddress="151.236.20.39" AND destinationport=5524 OR destinationtranslatedaddress="158.255.208.140" AND destinationport=86 OR destinationtranslatedaddress="194.68.27.149" AND destinationport=13106 OR destinationtranslatedaddress="194.68.27.176" AND destinationport=6460 OR destinationtranslatedaddress="37.143.128.223" AND destinationport=16223 OR destinationtranslatedaddress="31.40.212.130" AND destinationport=7225 OR destinationtranslatedaddress="198.244.207.203" AND destinationport=2076)
index=activity AND rg_functionality="Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND destinationtranslatedport=28693 OR destinationtranslatedaddress="162.252.175.90" AND destinationtranslatedport=845 OR destinationtranslatedaddress="162.252.175.109" AND destinationtranslatedport=28330 OR destinationtranslatedaddress="151.236.20.39" AND destinationtranslatedport=5524 OR destinationtranslatedaddress="158.255.208.140" AND destinationtranslatedport=86 OR destinationtranslatedaddress="194.68.27.149" AND destinationtranslatedport=13106 OR destinationtranslatedaddress="194.68.27.176" AND destinationtranslatedport=6460 OR destinationtranslatedaddress="37.143.128.223" AND destinationtranslatedport=16223 OR destinationtranslatedaddress="31.40.212.130" AND destinationtranslatedport=7225 OR destinationtranslatedaddress="198.244.207.203" AND destinationtranslatedport=2076)
index=activity AND rg_functionality="Firewall" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND translatedport=28693 OR destinationtranslatedaddress="162.252.175.90" AND translatedport=845 OR destinationtranslatedaddress="162.252.175.109" AND translatedport=28330 OR destinationtranslatedaddress="151.236.20.39" AND translatedport=5524 OR destinationtranslatedaddress="158.255.208.140" AND translatedport=86 OR destinationtranslatedaddress="194.68.27.149" AND translatedport=13106 OR destinationtranslatedaddress="194.68.27.176" AND translatedport=6460 OR destinationtranslatedaddress="37.143.128.223" AND translatedport=16223 OR destinationtranslatedaddress="31.40.212.130" AND translatedport=7225 OR destinationtranslatedaddress="198.244.207.203" AND translatedport=2076)
index=activity AND rg_functionality="Firewall" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="208.115.230.243" AND destinationport=16697 OR destinationaddress="185.126.239.207" AND destinationport=26630 OR destinationaddress="213.183.57.174" AND destinationport=12517 OR destinationaddress="213.183.57.72" AND destinationport=12517 OR destinationaddress="213.183.56.201" AND destinationport=12517 OR destinationaddress="95.164.45.27" AND destinationport=17426 OR destinationaddress="45.120.178.161" AND destinationport=11013 OR destinationaddress="176.120.74.3" AND destinationport=17268 OR destinationaddress="92.243.64.184" AND destinationport=17146 OR destinationaddress="92.243.64.36" AND destinationport=17146)
index=activity AND rg_functionality="Firewall" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="208.115.230.243" AND sourceport=16697 OR sourceaddress="185.126.239.207" AND sourceport=26630 OR sourceaddress="213.183.57.174" AND sourceport=12517 OR sourceaddress="213.183.57.72" AND sourceport=12517 OR sourceaddress="213.183.56.201" AND sourceport=12517 OR sourceaddress="95.164.45.27" AND sourceport=17426 OR sourceaddress="45.120.178.161" AND sourceport=11013 OR sourceaddress="176.120.74.3" AND sourceport=17268 OR sourceaddress="92.243.64.184" AND sourceport=17146 OR sourceaddress="92.243.64.36" AND sourceport=17146)
index=activity AND rg_functionality="Firewall" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="208.115.230.243" AND sourceport=16697 OR translatedipaddress="185.126.239.207" AND sourceport=26630 OR translatedipaddress="213.183.57.174" AND sourceport=12517 OR translatedipaddress="213.183.57.72" AND sourceport=12517 OR translatedipaddress="213.183.56.201" AND sourceport=12517 OR translatedipaddress="95.164.45.27" AND sourceport=17426 OR translatedipaddress="45.120.178.161" AND sourceport=11013 OR translatedipaddress="176.120.74.3" AND sourceport=17268 OR translatedipaddress="92.243.64.184" AND sourceport=17146 OR translatedipaddress="92.243.64.36" AND sourceport=17146)
index=activity AND rg_functionality="Firewall" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND destinationport=16697 OR destinationtranslatedaddress="185.126.239.207" AND destinationport=26630 OR destinationtranslatedaddress="213.183.57.174" AND destinationport=12517 OR destinationtranslatedaddress="213.183.57.72" AND destinationport=12517 OR destinationtranslatedaddress="213.183.56.201" AND destinationport=12517 OR destinationtranslatedaddress="95.164.45.27" AND destinationport=17426 OR destinationtranslatedaddress="45.120.178.161" AND destinationport=11013 OR destinationtranslatedaddress="176.120.74.3" AND destinationport=17268 OR destinationtranslatedaddress="92.243.64.184" AND destinationport=17146 OR destinationtranslatedaddress="92.243.64.36" AND destinationport=17146)
index=activity AND rg_functionality="Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND destinationtranslatedport=16697 OR destinationtranslatedaddress="185.126.239.207" AND destinationtranslatedport=26630 OR destinationtranslatedaddress="213.183.57.174" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="213.183.57.72" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="213.183.56.201" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="95.164.45.27" AND destinationtranslatedport=17426 OR destinationtranslatedaddress="45.120.178.161" AND destinationtranslatedport=11013 OR destinationtranslatedaddress="176.120.74.3" AND destinationtranslatedport=17268 OR destinationtranslatedaddress="92.243.64.184" AND destinationtranslatedport=17146 OR destinationtranslatedaddress="92.243.64.36" AND destinationtranslatedport=17146)
index=activity AND rg_functionality="Firewall" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND translatedport=16697 OR destinationtranslatedaddress="185.126.239.207" AND translatedport=26630 OR destinationtranslatedaddress="213.183.57.174" AND translatedport=12517 OR destinationtranslatedaddress="213.183.57.72" AND translatedport=12517 OR destinationtranslatedaddress="213.183.56.201" AND translatedport=12517 OR destinationtranslatedaddress="95.164.45.27" AND translatedport=17426 OR destinationtranslatedaddress="45.120.178.161" AND translatedport=11013 OR destinationtranslatedaddress="176.120.74.3" AND translatedport=17268 OR destinationtranslatedaddress="92.243.64.184" AND translatedport=17146 OR destinationtranslatedaddress="92.243.64.36" AND translatedport=17146)
index=activity AND rg_functionality="Firewall" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="89.31.120.126" AND destinationport=11578 OR destinationaddress="91.132.93.33" AND destinationport=11578 OR destinationaddress="91.132.95.28" AND destinationport=8773 OR destinationaddress="91.132.95.204" AND destinationport=8773 OR destinationaddress="91.132.95.135" AND destinationport=8773 OR destinationaddress="194.233.174.22" AND destinationport=45358)
index=activity AND rg_functionality="Firewall" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="89.31.120.126" AND sourceport=11578 OR sourceaddress="91.132.93.33" AND sourceport=11578 OR sourceaddress="91.132.95.28" AND sourceport=8773 OR sourceaddress="91.132.95.204" AND sourceport=8773 OR sourceaddress="91.132.95.135" AND sourceport=8773 OR sourceaddress="194.233.174.22" AND sourceport=45358)
index=activity AND rg_functionality="Firewall" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="89.31.120.126" AND sourceport=11578 OR translatedipaddress="91.132.93.33" AND sourceport=11578 OR translatedipaddress="91.132.95.28" AND sourceport=8773 OR translatedipaddress="91.132.95.204" AND sourceport=8773 OR translatedipaddress="91.132.95.135" AND sourceport=8773 OR translatedipaddress="194.233.174.22" AND sourceport=45358)
index=activity AND rg_functionality="Firewall" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND destinationport=11578 OR destinationtranslatedaddress="91.132.93.33" AND destinationport=11578 OR destinationtranslatedaddress="91.132.95.28" AND destinationport=8773 OR destinationtranslatedaddress="91.132.95.204" AND destinationport=8773 OR destinationtranslatedaddress="91.132.95.135" AND destinationport=8773 OR destinationtranslatedaddress="194.233.174.22" AND destinationport=45358)
index=activity AND rg_functionality="Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND destinationtranslatedport=11578 OR destinationtranslatedaddress="91.132.93.33" AND destinationtranslatedport=11578 OR destinationtranslatedaddress="91.132.95.28" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="91.132.95.204" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="91.132.95.135" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="194.233.174.22" AND destinationtranslatedport=45358)
index=activity AND rg_functionality="Firewall" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND translatedport=11578 OR destinationtranslatedaddress="91.132.93.33" AND translatedport=11578 OR destinationtranslatedaddress="91.132.95.28" AND translatedport=8773 OR destinationtranslatedaddress="91.132.95.204" AND translatedport=8773 OR destinationtranslatedaddress="91.132.95.135" AND translatedport=8773 OR destinationtranslatedaddress="194.233.174.22" AND translatedport=45358)
index=activity AND rg_functionality="Web Proxy" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="158.255.212.173" AND destinationport=10862 OR destinationaddress="151.236.25.126" AND destinationport=11331 OR destinationaddress="158.255.215.49" AND destinationport=23079 OR destinationaddress="185.26.239.98" AND destinationport=11076 OR destinationaddress="151.236.25.10" AND destinationport=7205 OR destinationaddress="37.235.53.217" AND destinationport=1358 OR destinationaddress="151.236.23.232" AND destinationport=763 OR destinationaddress="37.235.56.204" AND destinationport=24239 OR destinationaddress="162.252.175.122" AND destinationport=4126 OR destinationaddress="162.252.175.136" AND destinationport=11077)
index=activity AND rg_functionality="Web Proxy" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="158.255.212.173" AND sourceport=10862 OR sourceaddress="151.236.25.126" AND sourceport=11331 OR sourceaddress="158.255.215.49" AND sourceport=23079 OR sourceaddress="185.26.239.98" AND sourceport=11076 OR sourceaddress="151.236.25.10" AND sourceport=7205 OR sourceaddress="37.235.53.217" AND sourceport=1358 OR sourceaddress="151.236.23.232" AND sourceport=763 OR sourceaddress="37.235.56.204" AND sourceport=24239 OR sourceaddress="162.252.175.122" AND sourceport=4126 OR sourceaddress="162.252.175.136" AND sourceport=11077)
index=activity AND rg_functionality="Web Proxy" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="158.255.212.173" AND sourceport=10862 OR translatedipaddress="151.236.25.126" AND sourceport=11331 OR translatedipaddress="158.255.215.49" AND sourceport=23079 OR translatedipaddress="185.26.239.98" AND sourceport=11076 OR translatedipaddress="151.236.25.10" AND sourceport=7205 OR translatedipaddress="37.235.53.217" AND sourceport=1358 OR translatedipaddress="151.236.23.232" AND sourceport=763 OR translatedipaddress="37.235.56.204" AND sourceport=24239 OR translatedipaddress="162.252.175.122" AND sourceport=4126 OR translatedipaddress="162.252.175.136" AND sourceport=11077)
index=activity AND rg_functionality="Web Proxy" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND destinationport=10862 OR destinationtranslatedaddress="151.236.25.126" AND destinationport=11331 OR destinationtranslatedaddress="158.255.215.49" AND destinationport=23079 OR destinationtranslatedaddress="185.26.239.98" AND destinationport=11076 OR destinationtranslatedaddress="151.236.25.10" AND destinationport=7205 OR destinationtranslatedaddress="37.235.53.217" AND destinationport=1358 OR destinationtranslatedaddress="151.236.23.232" AND destinationport=763 OR destinationtranslatedaddress="37.235.56.204" AND destinationport=24239 OR destinationtranslatedaddress="162.252.175.122" AND destinationport=4126 OR destinationtranslatedaddress="162.252.175.136" AND destinationport=11077)
index=activity AND rg_functionality="Web Proxy" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND destinationtranslatedport=10862 OR destinationtranslatedaddress="151.236.25.126" AND destinationtranslatedport=11331 OR destinationtranslatedaddress="158.255.215.49" AND destinationtranslatedport=23079 OR destinationtranslatedaddress="185.26.239.98" AND destinationtranslatedport=11076 OR destinationtranslatedaddress="151.236.25.10" AND destinationtranslatedport=7205 OR destinationtranslatedaddress="37.235.53.217" AND destinationtranslatedport=1358 OR destinationtranslatedaddress="151.236.23.232" AND destinationtranslatedport=763 OR destinationtranslatedaddress="37.235.56.204" AND destinationtranslatedport=24239 OR destinationtranslatedaddress="162.252.175.122" AND destinationtranslatedport=4126 OR destinationtranslatedaddress="162.252.175.136" AND destinationtranslatedport=11077)
index=activity AND rg_functionality="Web Proxy" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND translatedport=10862 OR destinationtranslatedaddress="151.236.25.126" AND translatedport=11331 OR destinationtranslatedaddress="158.255.215.49" AND translatedport=23079 OR destinationtranslatedaddress="185.26.239.98" AND translatedport=11076 OR destinationtranslatedaddress="151.236.25.10" AND translatedport=7205 OR destinationtranslatedaddress="37.235.53.217" AND translatedport=1358 OR destinationtranslatedaddress="151.236.23.232" AND translatedport=763 OR destinationtranslatedaddress="37.235.56.204" AND translatedport=24239 OR destinationtranslatedaddress="162.252.175.122" AND translatedport=4126 OR destinationtranslatedaddress="162.252.175.136" AND translatedport=11077)
index=activity AND rg_functionality="Web Proxy" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="162.252.175.163" AND destinationport=28693 OR destinationaddress="162.252.175.90" AND destinationport=845 OR destinationaddress="162.252.175.109" AND destinationport=28330 OR destinationaddress="151.236.20.39" AND destinationport=5524 OR destinationaddress="158.255.208.140" AND destinationport=86 OR destinationaddress="194.68.27.149" AND destinationport=13106 OR destinationaddress="194.68.27.176" AND destinationport=6460 OR destinationaddress="37.143.128.223" AND destinationport=16223 OR destinationaddress="31.40.212.130" AND destinationport=7225 OR destinationaddress="198.244.207.203" AND destinationport=2076)
index=activity AND rg_functionality="Web Proxy" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="162.252.175.163" AND sourceport=28693 OR sourceaddress="162.252.175.90" AND sourceport=845 OR sourceaddress="162.252.175.109" AND sourceport=28330 OR sourceaddress="151.236.20.39" AND sourceport=5524 OR sourceaddress="158.255.208.140" AND sourceport=86 OR sourceaddress="194.68.27.149" AND sourceport=13106 OR sourceaddress="194.68.27.176" AND sourceport=6460 OR sourceaddress="37.143.128.223" AND sourceport=16223 OR sourceaddress="31.40.212.130" AND sourceport=7225 OR sourceaddress="198.244.207.203" AND sourceport=2076)
index=activity AND rg_functionality="Web Proxy" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="162.252.175.163" AND sourceport=28693 OR translatedipaddress="162.252.175.90" AND sourceport=845 OR translatedipaddress="162.252.175.109" AND sourceport=28330 OR translatedipaddress="151.236.20.39" AND sourceport=5524 OR translatedipaddress="158.255.208.140" AND sourceport=86 OR translatedipaddress="194.68.27.149" AND sourceport=13106 OR translatedipaddress="194.68.27.176" AND sourceport=6460 OR translatedipaddress="37.143.128.223" AND sourceport=16223 OR translatedipaddress="31.40.212.130" AND sourceport=7225 OR translatedipaddress="198.244.207.203" AND sourceport=2076)
index=activity AND rg_functionality="Web Proxy" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND destinationport=28693 OR destinationtranslatedaddress="162.252.175.90" AND destinationport=845 OR destinationtranslatedaddress="162.252.175.109" AND destinationport=28330 OR destinationtranslatedaddress="151.236.20.39" AND destinationport=5524 OR destinationtranslatedaddress="158.255.208.140" AND destinationport=86 OR destinationtranslatedaddress="194.68.27.149" AND destinationport=13106 OR destinationtranslatedaddress="194.68.27.176" AND destinationport=6460 OR destinationtranslatedaddress="37.143.128.223" AND destinationport=16223 OR destinationtranslatedaddress="31.40.212.130" AND destinationport=7225 OR destinationtranslatedaddress="198.244.207.203" AND destinationport=2076)
index=activity AND rg_functionality="Web Proxy" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND destinationtranslatedport=28693 OR destinationtranslatedaddress="162.252.175.90" AND destinationtranslatedport=845 OR destinationtranslatedaddress="162.252.175.109" AND destinationtranslatedport=28330 OR destinationtranslatedaddress="151.236.20.39" AND destinationtranslatedport=5524 OR destinationtranslatedaddress="158.255.208.140" AND destinationtranslatedport=86 OR destinationtranslatedaddress="194.68.27.149" AND destinationtranslatedport=13106 OR destinationtranslatedaddress="194.68.27.176" AND destinationtranslatedport=6460 OR destinationtranslatedaddress="37.143.128.223" AND destinationtranslatedport=16223 OR destinationtranslatedaddress="31.40.212.130" AND destinationtranslatedport=7225 OR destinationtranslatedaddress="198.244.207.203" AND destinationtranslatedport=2076)
index=activity AND rg_functionality="Web Proxy" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND translatedport=28693 OR destinationtranslatedaddress="162.252.175.90" AND translatedport=845 OR destinationtranslatedaddress="162.252.175.109" AND translatedport=28330 OR destinationtranslatedaddress="151.236.20.39" AND translatedport=5524 OR destinationtranslatedaddress="158.255.208.140" AND translatedport=86 OR destinationtranslatedaddress="194.68.27.149" AND translatedport=13106 OR destinationtranslatedaddress="194.68.27.176" AND translatedport=6460 OR destinationtranslatedaddress="37.143.128.223" AND translatedport=16223 OR destinationtranslatedaddress="31.40.212.130" AND translatedport=7225 OR destinationtranslatedaddress="198.244.207.203" AND translatedport=2076)
index=activity AND rg_functionality="Web Proxy" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="208.115.230.243" AND destinationport=16697 OR destinationaddress="185.126.239.207" AND destinationport=26630 OR destinationaddress="213.183.57.174" AND destinationport=12517 OR destinationaddress="213.183.57.72" AND destinationport=12517 OR destinationaddress="213.183.56.201" AND destinationport=12517 OR destinationaddress="95.164.45.27" AND destinationport=17426 OR destinationaddress="45.120.178.161" AND destinationport=11013 OR destinationaddress="176.120.74.3" AND destinationport=17268 OR destinationaddress="92.243.64.184" AND destinationport=17146 OR destinationaddress="92.243.64.36" AND destinationport=17146)
index=activity AND rg_functionality="Web Proxy" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="208.115.230.243" AND sourceport=16697 OR sourceaddress="185.126.239.207" AND sourceport=26630 OR sourceaddress="213.183.57.174" AND sourceport=12517 OR sourceaddress="213.183.57.72" AND sourceport=12517 OR sourceaddress="213.183.56.201" AND sourceport=12517 OR sourceaddress="95.164.45.27" AND sourceport=17426 OR sourceaddress="45.120.178.161" AND sourceport=11013 OR sourceaddress="176.120.74.3" AND sourceport=17268 OR sourceaddress="92.243.64.184" AND sourceport=17146 OR sourceaddress="92.243.64.36" AND sourceport=17146)
index=activity AND rg_functionality="Web Proxy" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="208.115.230.243" AND sourceport=16697 OR translatedipaddress="185.126.239.207" AND sourceport=26630 OR translatedipaddress="213.183.57.174" AND sourceport=12517 OR translatedipaddress="213.183.57.72" AND sourceport=12517 OR translatedipaddress="213.183.56.201" AND sourceport=12517 OR translatedipaddress="95.164.45.27" AND sourceport=17426 OR translatedipaddress="45.120.178.161" AND sourceport=11013 OR translatedipaddress="176.120.74.3" AND sourceport=17268 OR translatedipaddress="92.243.64.184" AND sourceport=17146 OR translatedipaddress="92.243.64.36" AND sourceport=17146)
index=activity AND rg_functionality="Web Proxy" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND destinationport=16697 OR destinationtranslatedaddress="185.126.239.207" AND destinationport=26630 OR destinationtranslatedaddress="213.183.57.174" AND destinationport=12517 OR destinationtranslatedaddress="213.183.57.72" AND destinationport=12517 OR destinationtranslatedaddress="213.183.56.201" AND destinationport=12517 OR destinationtranslatedaddress="95.164.45.27" AND destinationport=17426 OR destinationtranslatedaddress="45.120.178.161" AND destinationport=11013 OR destinationtranslatedaddress="176.120.74.3" AND destinationport=17268 OR destinationtranslatedaddress="92.243.64.184" AND destinationport=17146 OR destinationtranslatedaddress="92.243.64.36" AND destinationport=17146)
index=activity AND rg_functionality="Web Proxy" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND destinationtranslatedport=16697 OR destinationtranslatedaddress="185.126.239.207" AND destinationtranslatedport=26630 OR destinationtranslatedaddress="213.183.57.174" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="213.183.57.72" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="213.183.56.201" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="95.164.45.27" AND destinationtranslatedport=17426 OR destinationtranslatedaddress="45.120.178.161" AND destinationtranslatedport=11013 OR destinationtranslatedaddress="176.120.74.3" AND destinationtranslatedport=17268 OR destinationtranslatedaddress="92.243.64.184" AND destinationtranslatedport=17146 OR destinationtranslatedaddress="92.243.64.36" AND destinationtranslatedport=17146)
index=activity AND rg_functionality="Web Proxy" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND translatedport=16697 OR destinationtranslatedaddress="185.126.239.207" AND translatedport=26630 OR destinationtranslatedaddress="213.183.57.174" AND translatedport=12517 OR destinationtranslatedaddress="213.183.57.72" AND translatedport=12517 OR destinationtranslatedaddress="213.183.56.201" AND translatedport=12517 OR destinationtranslatedaddress="95.164.45.27" AND translatedport=17426 OR destinationtranslatedaddress="45.120.178.161" AND translatedport=11013 OR destinationtranslatedaddress="176.120.74.3" AND translatedport=17268 OR destinationtranslatedaddress="92.243.64.184" AND translatedport=17146 OR destinationtranslatedaddress="92.243.64.36" AND translatedport=17146)
index=activity AND rg_functionality="Web Proxy" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="89.31.120.126" AND destinationport=11578 OR destinationaddress="91.132.93.33" AND destinationport=11578 OR destinationaddress="91.132.95.28" AND destinationport=8773 OR destinationaddress="91.132.95.204" AND destinationport=8773 OR destinationaddress="91.132.95.135" AND destinationport=8773 OR destinationaddress="194.233.174.22" AND destinationport=45358)
index=activity AND rg_functionality="Web Proxy" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="89.31.120.126" AND sourceport=11578 OR sourceaddress="91.132.93.33" AND sourceport=11578 OR sourceaddress="91.132.95.28" AND sourceport=8773 OR sourceaddress="91.132.95.204" AND sourceport=8773 OR sourceaddress="91.132.95.135" AND sourceport=8773 OR sourceaddress="194.233.174.22" AND sourceport=45358)
index=activity AND rg_functionality="Web Proxy" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="89.31.120.126" AND sourceport=11578 OR translatedipaddress="91.132.93.33" AND sourceport=11578 OR translatedipaddress="91.132.95.28" AND sourceport=8773 OR translatedipaddress="91.132.95.204" AND sourceport=8773 OR translatedipaddress="91.132.95.135" AND sourceport=8773 OR translatedipaddress="194.233.174.22" AND sourceport=45358)
index=activity AND rg_functionality="Web Proxy" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND destinationport=11578 OR destinationtranslatedaddress="91.132.93.33" AND destinationport=11578 OR destinationtranslatedaddress="91.132.95.28" AND destinationport=8773 OR destinationtranslatedaddress="91.132.95.204" AND destinationport=8773 OR destinationtranslatedaddress="91.132.95.135" AND destinationport=8773 OR destinationtranslatedaddress="194.233.174.22" AND destinationport=45358)
index=activity AND rg_functionality="Web Proxy" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND destinationtranslatedport=11578 OR destinationtranslatedaddress="91.132.93.33" AND destinationtranslatedport=11578 OR destinationtranslatedaddress="91.132.95.28" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="91.132.95.204" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="91.132.95.135" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="194.233.174.22" AND destinationtranslatedport=45358)
index=activity AND rg_functionality="Web Proxy" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND translatedport=11578 OR destinationtranslatedaddress="91.132.93.33" AND translatedport=11578 OR destinationtranslatedaddress="91.132.95.28" AND translatedport=8773 OR destinationtranslatedaddress="91.132.95.204" AND translatedport=8773 OR destinationtranslatedaddress="91.132.95.135" AND translatedport=8773 OR destinationtranslatedaddress="194.233.174.22" AND translatedport=45358)
index=activity AND rg_functionality="Flow" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="158.255.212.173" AND destinationport=10862 OR destinationaddress="151.236.25.126" AND destinationport=11331 OR destinationaddress="158.255.215.49" AND destinationport=23079 OR destinationaddress="185.26.239.98" AND destinationport=11076 OR destinationaddress="151.236.25.10" AND destinationport=7205 OR destinationaddress="37.235.53.217" AND destinationport=1358 OR destinationaddress="151.236.23.232" AND destinationport=763 OR destinationaddress="37.235.56.204" AND destinationport=24239 OR destinationaddress="162.252.175.122" AND destinationport=4126 OR destinationaddress="162.252.175.136" AND destinationport=11077)
index=activity AND rg_functionality="Flow" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="158.255.212.173" AND sourceport=10862 OR sourceaddress="151.236.25.126" AND sourceport=11331 OR sourceaddress="158.255.215.49" AND sourceport=23079 OR sourceaddress="185.26.239.98" AND sourceport=11076 OR sourceaddress="151.236.25.10" AND sourceport=7205 OR sourceaddress="37.235.53.217" AND sourceport=1358 OR sourceaddress="151.236.23.232" AND sourceport=763 OR sourceaddress="37.235.56.204" AND sourceport=24239 OR sourceaddress="162.252.175.122" AND sourceport=4126 OR sourceaddress="162.252.175.136" AND sourceport=11077)
index=activity AND rg_functionality="Flow" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="158.255.212.173" AND sourceport=10862 OR translatedipaddress="151.236.25.126" AND sourceport=11331 OR translatedipaddress="158.255.215.49" AND sourceport=23079 OR translatedipaddress="185.26.239.98" AND sourceport=11076 OR translatedipaddress="151.236.25.10" AND sourceport=7205 OR translatedipaddress="37.235.53.217" AND sourceport=1358 OR translatedipaddress="151.236.23.232" AND sourceport=763 OR translatedipaddress="37.235.56.204" AND sourceport=24239 OR translatedipaddress="162.252.175.122" AND sourceport=4126 OR translatedipaddress="162.252.175.136" AND sourceport=11077)
index=activity AND rg_functionality="Flow" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND destinationport=10862 OR destinationtranslatedaddress="151.236.25.126" AND destinationport=11331 OR destinationtranslatedaddress="158.255.215.49" AND destinationport=23079 OR destinationtranslatedaddress="185.26.239.98" AND destinationport=11076 OR destinationtranslatedaddress="151.236.25.10" AND destinationport=7205 OR destinationtranslatedaddress="37.235.53.217" AND destinationport=1358 OR destinationtranslatedaddress="151.236.23.232" AND destinationport=763 OR destinationtranslatedaddress="37.235.56.204" AND destinationport=24239 OR destinationtranslatedaddress="162.252.175.122" AND destinationport=4126 OR destinationtranslatedaddress="162.252.175.136" AND destinationport=11077)
index=activity AND rg_functionality="Flow" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND destinationtranslatedport=10862 OR destinationtranslatedaddress="151.236.25.126" AND destinationtranslatedport=11331 OR destinationtranslatedaddress="158.255.215.49" AND destinationtranslatedport=23079 OR destinationtranslatedaddress="185.26.239.98" AND destinationtranslatedport=11076 OR destinationtranslatedaddress="151.236.25.10" AND destinationtranslatedport=7205 OR destinationtranslatedaddress="37.235.53.217" AND destinationtranslatedport=1358 OR destinationtranslatedaddress="151.236.23.232" AND destinationtranslatedport=763 OR destinationtranslatedaddress="37.235.56.204" AND destinationtranslatedport=24239 OR destinationtranslatedaddress="162.252.175.122" AND destinationtranslatedport=4126 OR destinationtranslatedaddress="162.252.175.136" AND destinationtranslatedport=11077)
index=activity AND rg_functionality="Flow" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND translatedport=10862 OR destinationtranslatedaddress="151.236.25.126" AND translatedport=11331 OR destinationtranslatedaddress="158.255.215.49" AND translatedport=23079 OR destinationtranslatedaddress="185.26.239.98" AND translatedport=11076 OR destinationtranslatedaddress="151.236.25.10" AND translatedport=7205 OR destinationtranslatedaddress="37.235.53.217" AND translatedport=1358 OR destinationtranslatedaddress="151.236.23.232" AND translatedport=763 OR destinationtranslatedaddress="37.235.56.204" AND translatedport=24239 OR destinationtranslatedaddress="162.252.175.122" AND translatedport=4126 OR destinationtranslatedaddress="162.252.175.136" AND translatedport=11077)
index=activity AND rg_functionality="Flow" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="162.252.175.163" AND destinationport=28693 OR destinationaddress="162.252.175.90" AND destinationport=845 OR destinationaddress="162.252.175.109" AND destinationport=28330 OR destinationaddress="151.236.20.39" AND destinationport=5524 OR destinationaddress="158.255.208.140" AND destinationport=86 OR destinationaddress="194.68.27.149" AND destinationport=13106 OR destinationaddress="194.68.27.176" AND destinationport=6460 OR destinationaddress="37.143.128.223" AND destinationport=16223 OR destinationaddress="31.40.212.130" AND destinationport=7225 OR destinationaddress="198.244.207.203" AND destinationport=2076)
index=activity AND rg_functionality="Flow" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="162.252.175.163" AND sourceport=28693 OR sourceaddress="162.252.175.90" AND sourceport=845 OR sourceaddress="162.252.175.109" AND sourceport=28330 OR sourceaddress="151.236.20.39" AND sourceport=5524 OR sourceaddress="158.255.208.140" AND sourceport=86 OR sourceaddress="194.68.27.149" AND sourceport=13106 OR sourceaddress="194.68.27.176" AND sourceport=6460 OR sourceaddress="37.143.128.223" AND sourceport=16223 OR sourceaddress="31.40.212.130" AND sourceport=7225 OR sourceaddress="198.244.207.203" AND sourceport=2076)
index=activity AND rg_functionality="Flow" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="162.252.175.163" AND sourceport=28693 OR translatedipaddress="162.252.175.90" AND sourceport=845 OR translatedipaddress="162.252.175.109" AND sourceport=28330 OR translatedipaddress="151.236.20.39" AND sourceport=5524 OR translatedipaddress="158.255.208.140" AND sourceport=86 OR translatedipaddress="194.68.27.149" AND sourceport=13106 OR translatedipaddress="194.68.27.176" AND sourceport=6460 OR translatedipaddress="37.143.128.223" AND sourceport=16223 OR translatedipaddress="31.40.212.130" AND sourceport=7225 OR translatedipaddress="198.244.207.203" AND sourceport=2076)
index=activity AND rg_functionality="Flow" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND destinationport=28693 OR destinationtranslatedaddress="162.252.175.90" AND destinationport=845 OR destinationtranslatedaddress="162.252.175.109" AND destinationport=28330 OR destinationtranslatedaddress="151.236.20.39" AND destinationport=5524 OR destinationtranslatedaddress="158.255.208.140" AND destinationport=86 OR destinationtranslatedaddress="194.68.27.149" AND destinationport=13106 OR destinationtranslatedaddress="194.68.27.176" AND destinationport=6460 OR destinationtranslatedaddress="37.143.128.223" AND destinationport=16223 OR destinationtranslatedaddress="31.40.212.130" AND destinationport=7225 OR destinationtranslatedaddress="198.244.207.203" AND destinationport=2076)
index=activity AND rg_functionality="Flow" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND destinationtranslatedport=28693 OR destinationtranslatedaddress="162.252.175.90" AND destinationtranslatedport=845 OR destinationtranslatedaddress="162.252.175.109" AND destinationtranslatedport=28330 OR destinationtranslatedaddress="151.236.20.39" AND destinationtranslatedport=5524 OR destinationtranslatedaddress="158.255.208.140" AND destinationtranslatedport=86 OR destinationtranslatedaddress="194.68.27.149" AND destinationtranslatedport=13106 OR destinationtranslatedaddress="194.68.27.176" AND destinationtranslatedport=6460 OR destinationtranslatedaddress="37.143.128.223" AND destinationtranslatedport=16223 OR destinationtranslatedaddress="31.40.212.130" AND destinationtranslatedport=7225 OR destinationtranslatedaddress="198.244.207.203" AND destinationtranslatedport=2076)
index=activity AND rg_functionality="Flow" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND translatedport=28693 OR destinationtranslatedaddress="162.252.175.90" AND translatedport=845 OR destinationtranslatedaddress="162.252.175.109" AND translatedport=28330 OR destinationtranslatedaddress="151.236.20.39" AND translatedport=5524 OR destinationtranslatedaddress="158.255.208.140" AND translatedport=86 OR destinationtranslatedaddress="194.68.27.149" AND translatedport=13106 OR destinationtranslatedaddress="194.68.27.176" AND translatedport=6460 OR destinationtranslatedaddress="37.143.128.223" AND translatedport=16223 OR destinationtranslatedaddress="31.40.212.130" AND translatedport=7225 OR destinationtranslatedaddress="198.244.207.203" AND translatedport=2076)
index=activity AND rg_functionality="Flow" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="208.115.230.243" AND destinationport=16697 OR destinationaddress="185.126.239.207" AND destinationport=26630 OR destinationaddress="213.183.57.174" AND destinationport=12517 OR destinationaddress="213.183.57.72" AND destinationport=12517 OR destinationaddress="213.183.56.201" AND destinationport=12517 OR destinationaddress="95.164.45.27" AND destinationport=17426 OR destinationaddress="45.120.178.161" AND destinationport=11013 OR destinationaddress="176.120.74.3" AND destinationport=17268 OR destinationaddress="92.243.64.184" AND destinationport=17146 OR destinationaddress="92.243.64.36" AND destinationport=17146)
index=activity AND rg_functionality="Flow" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="208.115.230.243" AND sourceport=16697 OR sourceaddress="185.126.239.207" AND sourceport=26630 OR sourceaddress="213.183.57.174" AND sourceport=12517 OR sourceaddress="213.183.57.72" AND sourceport=12517 OR sourceaddress="213.183.56.201" AND sourceport=12517 OR sourceaddress="95.164.45.27" AND sourceport=17426 OR sourceaddress="45.120.178.161" AND sourceport=11013 OR sourceaddress="176.120.74.3" AND sourceport=17268 OR sourceaddress="92.243.64.184" AND sourceport=17146 OR sourceaddress="92.243.64.36" AND sourceport=17146)
index=activity AND rg_functionality="Flow" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="208.115.230.243" AND sourceport=16697 OR translatedipaddress="185.126.239.207" AND sourceport=26630 OR translatedipaddress="213.183.57.174" AND sourceport=12517 OR translatedipaddress="213.183.57.72" AND sourceport=12517 OR translatedipaddress="213.183.56.201" AND sourceport=12517 OR translatedipaddress="95.164.45.27" AND sourceport=17426 OR translatedipaddress="45.120.178.161" AND sourceport=11013 OR translatedipaddress="176.120.74.3" AND sourceport=17268 OR translatedipaddress="92.243.64.184" AND sourceport=17146 OR translatedipaddress="92.243.64.36" AND sourceport=17146)
index=activity AND rg_functionality="Flow" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND destinationport=16697 OR destinationtranslatedaddress="185.126.239.207" AND destinationport=26630 OR destinationtranslatedaddress="213.183.57.174" AND destinationport=12517 OR destinationtranslatedaddress="213.183.57.72" AND destinationport=12517 OR destinationtranslatedaddress="213.183.56.201" AND destinationport=12517 OR destinationtranslatedaddress="95.164.45.27" AND destinationport=17426 OR destinationtranslatedaddress="45.120.178.161" AND destinationport=11013 OR destinationtranslatedaddress="176.120.74.3" AND destinationport=17268 OR destinationtranslatedaddress="92.243.64.184" AND destinationport=17146 OR destinationtranslatedaddress="92.243.64.36" AND destinationport=17146)
index=activity AND rg_functionality="Flow" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND destinationtranslatedport=16697 OR destinationtranslatedaddress="185.126.239.207" AND destinationtranslatedport=26630 OR destinationtranslatedaddress="213.183.57.174" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="213.183.57.72" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="213.183.56.201" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="95.164.45.27" AND destinationtranslatedport=17426 OR destinationtranslatedaddress="45.120.178.161" AND destinationtranslatedport=11013 OR destinationtranslatedaddress="176.120.74.3" AND destinationtranslatedport=17268 OR destinationtranslatedaddress="92.243.64.184" AND destinationtranslatedport=17146 OR destinationtranslatedaddress="92.243.64.36" AND destinationtranslatedport=17146)
index=activity AND rg_functionality="Flow" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND translatedport=16697 OR destinationtranslatedaddress="185.126.239.207" AND translatedport=26630 OR destinationtranslatedaddress="213.183.57.174" AND translatedport=12517 OR destinationtranslatedaddress="213.183.57.72" AND translatedport=12517 OR destinationtranslatedaddress="213.183.56.201" AND translatedport=12517 OR destinationtranslatedaddress="95.164.45.27" AND translatedport=17426 OR destinationtranslatedaddress="45.120.178.161" AND translatedport=11013 OR destinationtranslatedaddress="176.120.74.3" AND translatedport=17268 OR destinationtranslatedaddress="92.243.64.184" AND translatedport=17146 OR destinationtranslatedaddress="92.243.64.36" AND translatedport=17146)
index=activity AND rg_functionality="Flow" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="89.31.120.126" AND destinationport=11578 OR destinationaddress="91.132.93.33" AND destinationport=11578 OR destinationaddress="91.132.95.28" AND destinationport=8773 OR destinationaddress="91.132.95.204" AND destinationport=8773 OR destinationaddress="91.132.95.135" AND destinationport=8773 OR destinationaddress="194.233.174.22" AND destinationport=45358)
index=activity AND rg_functionality="Flow" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="89.31.120.126" AND sourceport=11578 OR sourceaddress="91.132.93.33" AND sourceport=11578 OR sourceaddress="91.132.95.28" AND sourceport=8773 OR sourceaddress="91.132.95.204" AND sourceport=8773 OR sourceaddress="91.132.95.135" AND sourceport=8773 OR sourceaddress="194.233.174.22" AND sourceport=45358)
index=activity AND rg_functionality="Flow" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="89.31.120.126" AND sourceport=11578 OR translatedipaddress="91.132.93.33" AND sourceport=11578 OR translatedipaddress="91.132.95.28" AND sourceport=8773 OR translatedipaddress="91.132.95.204" AND sourceport=8773 OR translatedipaddress="91.132.95.135" AND sourceport=8773 OR translatedipaddress="194.233.174.22" AND sourceport=45358)
index=activity AND rg_functionality="Flow" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND destinationport=11578 OR destinationtranslatedaddress="91.132.93.33" AND destinationport=11578 OR destinationtranslatedaddress="91.132.95.28" AND destinationport=8773 OR destinationtranslatedaddress="91.132.95.204" AND destinationport=8773 OR destinationtranslatedaddress="91.132.95.135" AND destinationport=8773 OR destinationtranslatedaddress="194.233.174.22" AND destinationport=45358)
index=activity AND rg_functionality="Flow" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND destinationtranslatedport=11578 OR destinationtranslatedaddress="91.132.93.33" AND destinationtranslatedport=11578 OR destinationtranslatedaddress="91.132.95.28" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="91.132.95.204" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="91.132.95.135" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="194.233.174.22" AND destinationtranslatedport=45358)
index=activity AND rg_functionality="Flow" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND translatedport=11578 OR destinationtranslatedaddress="91.132.93.33" AND translatedport=11578 OR destinationtranslatedaddress="91.132.95.28" AND translatedport=8773 OR destinationtranslatedaddress="91.132.95.204" AND translatedport=8773 OR destinationtranslatedaddress="91.132.95.135" AND translatedport=8773 OR destinationtranslatedaddress="194.233.174.22" AND translatedport=45358)
index=activity AND rg_functionality="Web Server" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="158.255.212.173" AND destinationport=10862 OR destinationaddress="151.236.25.126" AND destinationport=11331 OR destinationaddress="158.255.215.49" AND destinationport=23079 OR destinationaddress="185.26.239.98" AND destinationport=11076 OR destinationaddress="151.236.25.10" AND destinationport=7205 OR destinationaddress="37.235.53.217" AND destinationport=1358 OR destinationaddress="151.236.23.232" AND destinationport=763 OR destinationaddress="37.235.56.204" AND destinationport=24239 OR destinationaddress="162.252.175.122" AND destinationport=4126 OR destinationaddress="162.252.175.136" AND destinationport=11077)
index=activity AND rg_functionality="Web Server" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="158.255.212.173" AND sourceport=10862 OR sourceaddress="151.236.25.126" AND sourceport=11331 OR sourceaddress="158.255.215.49" AND sourceport=23079 OR sourceaddress="185.26.239.98" AND sourceport=11076 OR sourceaddress="151.236.25.10" AND sourceport=7205 OR sourceaddress="37.235.53.217" AND sourceport=1358 OR sourceaddress="151.236.23.232" AND sourceport=763 OR sourceaddress="37.235.56.204" AND sourceport=24239 OR sourceaddress="162.252.175.122" AND sourceport=4126 OR sourceaddress="162.252.175.136" AND sourceport=11077)
index=activity AND rg_functionality="Web Server" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="158.255.212.173" AND sourceport=10862 OR translatedipaddress="151.236.25.126" AND sourceport=11331 OR translatedipaddress="158.255.215.49" AND sourceport=23079 OR translatedipaddress="185.26.239.98" AND sourceport=11076 OR translatedipaddress="151.236.25.10" AND sourceport=7205 OR translatedipaddress="37.235.53.217" AND sourceport=1358 OR translatedipaddress="151.236.23.232" AND sourceport=763 OR translatedipaddress="37.235.56.204" AND sourceport=24239 OR translatedipaddress="162.252.175.122" AND sourceport=4126 OR translatedipaddress="162.252.175.136" AND sourceport=11077)
index=activity AND rg_functionality="Web Server" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND destinationport=10862 OR destinationtranslatedaddress="151.236.25.126" AND destinationport=11331 OR destinationtranslatedaddress="158.255.215.49" AND destinationport=23079 OR destinationtranslatedaddress="185.26.239.98" AND destinationport=11076 OR destinationtranslatedaddress="151.236.25.10" AND destinationport=7205 OR destinationtranslatedaddress="37.235.53.217" AND destinationport=1358 OR destinationtranslatedaddress="151.236.23.232" AND destinationport=763 OR destinationtranslatedaddress="37.235.56.204" AND destinationport=24239 OR destinationtranslatedaddress="162.252.175.122" AND destinationport=4126 OR destinationtranslatedaddress="162.252.175.136" AND destinationport=11077)
index=activity AND rg_functionality="Web Server" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND destinationtranslatedport=10862 OR destinationtranslatedaddress="151.236.25.126" AND destinationtranslatedport=11331 OR destinationtranslatedaddress="158.255.215.49" AND destinationtranslatedport=23079 OR destinationtranslatedaddress="185.26.239.98" AND destinationtranslatedport=11076 OR destinationtranslatedaddress="151.236.25.10" AND destinationtranslatedport=7205 OR destinationtranslatedaddress="37.235.53.217" AND destinationtranslatedport=1358 OR destinationtranslatedaddress="151.236.23.232" AND destinationtranslatedport=763 OR destinationtranslatedaddress="37.235.56.204" AND destinationtranslatedport=24239 OR destinationtranslatedaddress="162.252.175.122" AND destinationtranslatedport=4126 OR destinationtranslatedaddress="162.252.175.136" AND destinationtranslatedport=11077)
index=activity AND rg_functionality="Web Server" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND translatedport=10862 OR destinationtranslatedaddress="151.236.25.126" AND translatedport=11331 OR destinationtranslatedaddress="158.255.215.49" AND translatedport=23079 OR destinationtranslatedaddress="185.26.239.98" AND translatedport=11076 OR destinationtranslatedaddress="151.236.25.10" AND translatedport=7205 OR destinationtranslatedaddress="37.235.53.217" AND translatedport=1358 OR destinationtranslatedaddress="151.236.23.232" AND translatedport=763 OR destinationtranslatedaddress="37.235.56.204" AND translatedport=24239 OR destinationtranslatedaddress="162.252.175.122" AND translatedport=4126 OR destinationtranslatedaddress="162.252.175.136" AND translatedport=11077)
index=activity AND rg_functionality="Web Server" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="162.252.175.163" AND destinationport=28693 OR destinationaddress="162.252.175.90" AND destinationport=845 OR destinationaddress="162.252.175.109" AND destinationport=28330 OR destinationaddress="151.236.20.39" AND destinationport=5524 OR destinationaddress="158.255.208.140" AND destinationport=86 OR destinationaddress="194.68.27.149" AND destinationport=13106 OR destinationaddress="194.68.27.176" AND destinationport=6460 OR destinationaddress="37.143.128.223" AND destinationport=16223 OR destinationaddress="31.40.212.130" AND destinationport=7225 OR destinationaddress="198.244.207.203" AND destinationport=2076)
index=activity AND rg_functionality="Web Server" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="162.252.175.163" AND sourceport=28693 OR sourceaddress="162.252.175.90" AND sourceport=845 OR sourceaddress="162.252.175.109" AND sourceport=28330 OR sourceaddress="151.236.20.39" AND sourceport=5524 OR sourceaddress="158.255.208.140" AND sourceport=86 OR sourceaddress="194.68.27.149" AND sourceport=13106 OR sourceaddress="194.68.27.176" AND sourceport=6460 OR sourceaddress="37.143.128.223" AND sourceport=16223 OR sourceaddress="31.40.212.130" AND sourceport=7225 OR sourceaddress="198.244.207.203" AND sourceport=2076)
index=activity AND rg_functionality="Web Server" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="162.252.175.163" AND sourceport=28693 OR translatedipaddress="162.252.175.90" AND sourceport=845 OR translatedipaddress="162.252.175.109" AND sourceport=28330 OR translatedipaddress="151.236.20.39" AND sourceport=5524 OR translatedipaddress="158.255.208.140" AND sourceport=86 OR translatedipaddress="194.68.27.149" AND sourceport=13106 OR translatedipaddress="194.68.27.176" AND sourceport=6460 OR translatedipaddress="37.143.128.223" AND sourceport=16223 OR translatedipaddress="31.40.212.130" AND sourceport=7225 OR translatedipaddress="198.244.207.203" AND sourceport=2076)
index=activity AND rg_functionality="Web Server" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND destinationport=28693 OR destinationtranslatedaddress="162.252.175.90" AND destinationport=845 OR destinationtranslatedaddress="162.252.175.109" AND destinationport=28330 OR destinationtranslatedaddress="151.236.20.39" AND destinationport=5524 OR destinationtranslatedaddress="158.255.208.140" AND destinationport=86 OR destinationtranslatedaddress="194.68.27.149" AND destinationport=13106 OR destinationtranslatedaddress="194.68.27.176" AND destinationport=6460 OR destinationtranslatedaddress="37.143.128.223" AND destinationport=16223 OR destinationtranslatedaddress="31.40.212.130" AND destinationport=7225 OR destinationtranslatedaddress="198.244.207.203" AND destinationport=2076)
index=activity AND rg_functionality="Web Server" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND destinationtranslatedport=28693 OR destinationtranslatedaddress="162.252.175.90" AND destinationtranslatedport=845 OR destinationtranslatedaddress="162.252.175.109" AND destinationtranslatedport=28330 OR destinationtranslatedaddress="151.236.20.39" AND destinationtranslatedport=5524 OR destinationtranslatedaddress="158.255.208.140" AND destinationtranslatedport=86 OR destinationtranslatedaddress="194.68.27.149" AND destinationtranslatedport=13106 OR destinationtranslatedaddress="194.68.27.176" AND destinationtranslatedport=6460 OR destinationtranslatedaddress="37.143.128.223" AND destinationtranslatedport=16223 OR destinationtranslatedaddress="31.40.212.130" AND destinationtranslatedport=7225 OR destinationtranslatedaddress="198.244.207.203" AND destinationtranslatedport=2076)
index=activity AND rg_functionality="Web Server" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND translatedport=28693 OR destinationtranslatedaddress="162.252.175.90" AND translatedport=845 OR destinationtranslatedaddress="162.252.175.109" AND translatedport=28330 OR destinationtranslatedaddress="151.236.20.39" AND translatedport=5524 OR destinationtranslatedaddress="158.255.208.140" AND translatedport=86 OR destinationtranslatedaddress="194.68.27.149" AND translatedport=13106 OR destinationtranslatedaddress="194.68.27.176" AND translatedport=6460 OR destinationtranslatedaddress="37.143.128.223" AND translatedport=16223 OR destinationtranslatedaddress="31.40.212.130" AND translatedport=7225 OR destinationtranslatedaddress="198.244.207.203" AND translatedport=2076)
index=activity AND rg_functionality="Web Server" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="208.115.230.243" AND destinationport=16697 OR destinationaddress="185.126.239.207" AND destinationport=26630 OR destinationaddress="213.183.57.174" AND destinationport=12517 OR destinationaddress="213.183.57.72" AND destinationport=12517 OR destinationaddress="213.183.56.201" AND destinationport=12517 OR destinationaddress="95.164.45.27" AND destinationport=17426 OR destinationaddress="45.120.178.161" AND destinationport=11013 OR destinationaddress="176.120.74.3" AND destinationport=17268 OR destinationaddress="92.243.64.184" AND destinationport=17146 OR destinationaddress="92.243.64.36" AND destinationport=17146)
index=activity AND rg_functionality="Web Server" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="208.115.230.243" AND sourceport=16697 OR sourceaddress="185.126.239.207" AND sourceport=26630 OR sourceaddress="213.183.57.174" AND sourceport=12517 OR sourceaddress="213.183.57.72" AND sourceport=12517 OR sourceaddress="213.183.56.201" AND sourceport=12517 OR sourceaddress="95.164.45.27" AND sourceport=17426 OR sourceaddress="45.120.178.161" AND sourceport=11013 OR sourceaddress="176.120.74.3" AND sourceport=17268 OR sourceaddress="92.243.64.184" AND sourceport=17146 OR sourceaddress="92.243.64.36" AND sourceport=17146)
index=activity AND rg_functionality="Web Server" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="208.115.230.243" AND sourceport=16697 OR translatedipaddress="185.126.239.207" AND sourceport=26630 OR translatedipaddress="213.183.57.174" AND sourceport=12517 OR translatedipaddress="213.183.57.72" AND sourceport=12517 OR translatedipaddress="213.183.56.201" AND sourceport=12517 OR translatedipaddress="95.164.45.27" AND sourceport=17426 OR translatedipaddress="45.120.178.161" AND sourceport=11013 OR translatedipaddress="176.120.74.3" AND sourceport=17268 OR translatedipaddress="92.243.64.184" AND sourceport=17146 OR translatedipaddress="92.243.64.36" AND sourceport=17146)
index=activity AND rg_functionality="Web Server" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND destinationport=16697 OR destinationtranslatedaddress="185.126.239.207" AND destinationport=26630 OR destinationtranslatedaddress="213.183.57.174" AND destinationport=12517 OR destinationtranslatedaddress="213.183.57.72" AND destinationport=12517 OR destinationtranslatedaddress="213.183.56.201" AND destinationport=12517 OR destinationtranslatedaddress="95.164.45.27" AND destinationport=17426 OR destinationtranslatedaddress="45.120.178.161" AND destinationport=11013 OR destinationtranslatedaddress="176.120.74.3" AND destinationport=17268 OR destinationtranslatedaddress="92.243.64.184" AND destinationport=17146 OR destinationtranslatedaddress="92.243.64.36" AND destinationport=17146)
index=activity AND rg_functionality="Web Server" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND destinationtranslatedport=16697 OR destinationtranslatedaddress="185.126.239.207" AND destinationtranslatedport=26630 OR destinationtranslatedaddress="213.183.57.174" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="213.183.57.72" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="213.183.56.201" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="95.164.45.27" AND destinationtranslatedport=17426 OR destinationtranslatedaddress="45.120.178.161" AND destinationtranslatedport=11013 OR destinationtranslatedaddress="176.120.74.3" AND destinationtranslatedport=17268 OR destinationtranslatedaddress="92.243.64.184" AND destinationtranslatedport=17146 OR destinationtranslatedaddress="92.243.64.36" AND destinationtranslatedport=17146)
index=activity AND rg_functionality="Web Server" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND translatedport=16697 OR destinationtranslatedaddress="185.126.239.207" AND translatedport=26630 OR destinationtranslatedaddress="213.183.57.174" AND translatedport=12517 OR destinationtranslatedaddress="213.183.57.72" AND translatedport=12517 OR destinationtranslatedaddress="213.183.56.201" AND translatedport=12517 OR destinationtranslatedaddress="95.164.45.27" AND translatedport=17426 OR destinationtranslatedaddress="45.120.178.161" AND translatedport=11013 OR destinationtranslatedaddress="176.120.74.3" AND translatedport=17268 OR destinationtranslatedaddress="92.243.64.184" AND translatedport=17146 OR destinationtranslatedaddress="92.243.64.36" AND translatedport=17146)
index=activity AND rg_functionality="Web Server" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="89.31.120.126" AND destinationport=11578 OR destinationaddress="91.132.93.33" AND destinationport=11578 OR destinationaddress="91.132.95.28" AND destinationport=8773 OR destinationaddress="91.132.95.204" AND destinationport=8773 OR destinationaddress="91.132.95.135" AND destinationport=8773 OR destinationaddress="194.233.174.22" AND destinationport=45358)
index=activity AND rg_functionality="Web Server" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="89.31.120.126" AND sourceport=11578 OR sourceaddress="91.132.93.33" AND sourceport=11578 OR sourceaddress="91.132.95.28" AND sourceport=8773 OR sourceaddress="91.132.95.204" AND sourceport=8773 OR sourceaddress="91.132.95.135" AND sourceport=8773 OR sourceaddress="194.233.174.22" AND sourceport=45358)
index=activity AND rg_functionality="Web Server" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="89.31.120.126" AND sourceport=11578 OR translatedipaddress="91.132.93.33" AND sourceport=11578 OR translatedipaddress="91.132.95.28" AND sourceport=8773 OR translatedipaddress="91.132.95.204" AND sourceport=8773 OR translatedipaddress="91.132.95.135" AND sourceport=8773 OR translatedipaddress="194.233.174.22" AND sourceport=45358)
index=activity AND rg_functionality="Web Server" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND destinationport=11578 OR destinationtranslatedaddress="91.132.93.33" AND destinationport=11578 OR destinationtranslatedaddress="91.132.95.28" AND destinationport=8773 OR destinationtranslatedaddress="91.132.95.204" AND destinationport=8773 OR destinationtranslatedaddress="91.132.95.135" AND destinationport=8773 OR destinationtranslatedaddress="194.233.174.22" AND destinationport=45358)
index=activity AND rg_functionality="Web Server" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND destinationtranslatedport=11578 OR destinationtranslatedaddress="91.132.93.33" AND destinationtranslatedport=11578 OR destinationtranslatedaddress="91.132.95.28" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="91.132.95.204" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="91.132.95.135" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="194.233.174.22" AND destinationtranslatedport=45358)
index=activity AND rg_functionality="Web Server" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND translatedport=11578 OR destinationtranslatedaddress="91.132.93.33" AND translatedport=11578 OR destinationtranslatedaddress="91.132.95.28" AND translatedport=8773 OR destinationtranslatedaddress="91.132.95.204" AND translatedport=8773 OR destinationtranslatedaddress="91.132.95.135" AND translatedport=8773 OR destinationtranslatedaddress="194.233.174.22" AND translatedport=45358)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="158.255.212.173" AND destinationport=10862 OR destinationaddress="151.236.25.126" AND destinationport=11331 OR destinationaddress="158.255.215.49" AND destinationport=23079 OR destinationaddress="185.26.239.98" AND destinationport=11076 OR destinationaddress="151.236.25.10" AND destinationport=7205 OR destinationaddress="37.235.53.217" AND destinationport=1358 OR destinationaddress="151.236.23.232" AND destinationport=763 OR destinationaddress="37.235.56.204" AND destinationport=24239 OR destinationaddress="162.252.175.122" AND destinationport=4126 OR destinationaddress="162.252.175.136" AND destinationport=11077)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="158.255.212.173" AND sourceport=10862 OR sourceaddress="151.236.25.126" AND sourceport=11331 OR sourceaddress="158.255.215.49" AND sourceport=23079 OR sourceaddress="185.26.239.98" AND sourceport=11076 OR sourceaddress="151.236.25.10" AND sourceport=7205 OR sourceaddress="37.235.53.217" AND sourceport=1358 OR sourceaddress="151.236.23.232" AND sourceport=763 OR sourceaddress="37.235.56.204" AND sourceport=24239 OR sourceaddress="162.252.175.122" AND sourceport=4126 OR sourceaddress="162.252.175.136" AND sourceport=11077)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="158.255.212.173" AND sourceport=10862 OR translatedipaddress="151.236.25.126" AND sourceport=11331 OR translatedipaddress="158.255.215.49" AND sourceport=23079 OR translatedipaddress="185.26.239.98" AND sourceport=11076 OR translatedipaddress="151.236.25.10" AND sourceport=7205 OR translatedipaddress="37.235.53.217" AND sourceport=1358 OR translatedipaddress="151.236.23.232" AND sourceport=763 OR translatedipaddress="37.235.56.204" AND sourceport=24239 OR translatedipaddress="162.252.175.122" AND sourceport=4126 OR translatedipaddress="162.252.175.136" AND sourceport=11077)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND destinationport=10862 OR destinationtranslatedaddress="151.236.25.126" AND destinationport=11331 OR destinationtranslatedaddress="158.255.215.49" AND destinationport=23079 OR destinationtranslatedaddress="185.26.239.98" AND destinationport=11076 OR destinationtranslatedaddress="151.236.25.10" AND destinationport=7205 OR destinationtranslatedaddress="37.235.53.217" AND destinationport=1358 OR destinationtranslatedaddress="151.236.23.232" AND destinationport=763 OR destinationtranslatedaddress="37.235.56.204" AND destinationport=24239 OR destinationtranslatedaddress="162.252.175.122" AND destinationport=4126 OR destinationtranslatedaddress="162.252.175.136" AND destinationport=11077)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND destinationtranslatedport=10862 OR destinationtranslatedaddress="151.236.25.126" AND destinationtranslatedport=11331 OR destinationtranslatedaddress="158.255.215.49" AND destinationtranslatedport=23079 OR destinationtranslatedaddress="185.26.239.98" AND destinationtranslatedport=11076 OR destinationtranslatedaddress="151.236.25.10" AND destinationtranslatedport=7205 OR destinationtranslatedaddress="37.235.53.217" AND destinationtranslatedport=1358 OR destinationtranslatedaddress="151.236.23.232" AND destinationtranslatedport=763 OR destinationtranslatedaddress="37.235.56.204" AND destinationtranslatedport=24239 OR destinationtranslatedaddress="162.252.175.122" AND destinationtranslatedport=4126 OR destinationtranslatedaddress="162.252.175.136" AND destinationtranslatedport=11077)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND translatedport=10862 OR destinationtranslatedaddress="151.236.25.126" AND translatedport=11331 OR destinationtranslatedaddress="158.255.215.49" AND translatedport=23079 OR destinationtranslatedaddress="185.26.239.98" AND translatedport=11076 OR destinationtranslatedaddress="151.236.25.10" AND translatedport=7205 OR destinationtranslatedaddress="37.235.53.217" AND translatedport=1358 OR destinationtranslatedaddress="151.236.23.232" AND translatedport=763 OR destinationtranslatedaddress="37.235.56.204" AND translatedport=24239 OR destinationtranslatedaddress="162.252.175.122" AND translatedport=4126 OR destinationtranslatedaddress="162.252.175.136" AND translatedport=11077)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="162.252.175.163" AND destinationport=28693 OR destinationaddress="162.252.175.90" AND destinationport=845 OR destinationaddress="162.252.175.109" AND destinationport=28330 OR destinationaddress="151.236.20.39" AND destinationport=5524 OR destinationaddress="158.255.208.140" AND destinationport=86 OR destinationaddress="194.68.27.149" AND destinationport=13106 OR destinationaddress="194.68.27.176" AND destinationport=6460 OR destinationaddress="37.143.128.223" AND destinationport=16223 OR destinationaddress="31.40.212.130" AND destinationport=7225 OR destinationaddress="198.244.207.203" AND destinationport=2076)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="162.252.175.163" AND sourceport=28693 OR sourceaddress="162.252.175.90" AND sourceport=845 OR sourceaddress="162.252.175.109" AND sourceport=28330 OR sourceaddress="151.236.20.39" AND sourceport=5524 OR sourceaddress="158.255.208.140" AND sourceport=86 OR sourceaddress="194.68.27.149" AND sourceport=13106 OR sourceaddress="194.68.27.176" AND sourceport=6460 OR sourceaddress="37.143.128.223" AND sourceport=16223 OR sourceaddress="31.40.212.130" AND sourceport=7225 OR sourceaddress="198.244.207.203" AND sourceport=2076)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="162.252.175.163" AND sourceport=28693 OR translatedipaddress="162.252.175.90" AND sourceport=845 OR translatedipaddress="162.252.175.109" AND sourceport=28330 OR translatedipaddress="151.236.20.39" AND sourceport=5524 OR translatedipaddress="158.255.208.140" AND sourceport=86 OR translatedipaddress="194.68.27.149" AND sourceport=13106 OR translatedipaddress="194.68.27.176" AND sourceport=6460 OR translatedipaddress="37.143.128.223" AND sourceport=16223 OR translatedipaddress="31.40.212.130" AND sourceport=7225 OR translatedipaddress="198.244.207.203" AND sourceport=2076)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND destinationport=28693 OR destinationtranslatedaddress="162.252.175.90" AND destinationport=845 OR destinationtranslatedaddress="162.252.175.109" AND destinationport=28330 OR destinationtranslatedaddress="151.236.20.39" AND destinationport=5524 OR destinationtranslatedaddress="158.255.208.140" AND destinationport=86 OR destinationtranslatedaddress="194.68.27.149" AND destinationport=13106 OR destinationtranslatedaddress="194.68.27.176" AND destinationport=6460 OR destinationtranslatedaddress="37.143.128.223" AND destinationport=16223 OR destinationtranslatedaddress="31.40.212.130" AND destinationport=7225 OR destinationtranslatedaddress="198.244.207.203" AND destinationport=2076)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND destinationtranslatedport=28693 OR destinationtranslatedaddress="162.252.175.90" AND destinationtranslatedport=845 OR destinationtranslatedaddress="162.252.175.109" AND destinationtranslatedport=28330 OR destinationtranslatedaddress="151.236.20.39" AND destinationtranslatedport=5524 OR destinationtranslatedaddress="158.255.208.140" AND destinationtranslatedport=86 OR destinationtranslatedaddress="194.68.27.149" AND destinationtranslatedport=13106 OR destinationtranslatedaddress="194.68.27.176" AND destinationtranslatedport=6460 OR destinationtranslatedaddress="37.143.128.223" AND destinationtranslatedport=16223 OR destinationtranslatedaddress="31.40.212.130" AND destinationtranslatedport=7225 OR destinationtranslatedaddress="198.244.207.203" AND destinationtranslatedport=2076)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND translatedport=28693 OR destinationtranslatedaddress="162.252.175.90" AND translatedport=845 OR destinationtranslatedaddress="162.252.175.109" AND translatedport=28330 OR destinationtranslatedaddress="151.236.20.39" AND translatedport=5524 OR destinationtranslatedaddress="158.255.208.140" AND translatedport=86 OR destinationtranslatedaddress="194.68.27.149" AND translatedport=13106 OR destinationtranslatedaddress="194.68.27.176" AND translatedport=6460 OR destinationtranslatedaddress="37.143.128.223" AND translatedport=16223 OR destinationtranslatedaddress="31.40.212.130" AND translatedport=7225 OR destinationtranslatedaddress="198.244.207.203" AND translatedport=2076)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="208.115.230.243" AND destinationport=16697 OR destinationaddress="185.126.239.207" AND destinationport=26630 OR destinationaddress="213.183.57.174" AND destinationport=12517 OR destinationaddress="213.183.57.72" AND destinationport=12517 OR destinationaddress="213.183.56.201" AND destinationport=12517 OR destinationaddress="95.164.45.27" AND destinationport=17426 OR destinationaddress="45.120.178.161" AND destinationport=11013 OR destinationaddress="176.120.74.3" AND destinationport=17268 OR destinationaddress="92.243.64.184" AND destinationport=17146 OR destinationaddress="92.243.64.36" AND destinationport=17146)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="208.115.230.243" AND sourceport=16697 OR sourceaddress="185.126.239.207" AND sourceport=26630 OR sourceaddress="213.183.57.174" AND sourceport=12517 OR sourceaddress="213.183.57.72" AND sourceport=12517 OR sourceaddress="213.183.56.201" AND sourceport=12517 OR sourceaddress="95.164.45.27" AND sourceport=17426 OR sourceaddress="45.120.178.161" AND sourceport=11013 OR sourceaddress="176.120.74.3" AND sourceport=17268 OR sourceaddress="92.243.64.184" AND sourceport=17146 OR sourceaddress="92.243.64.36" AND sourceport=17146)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="208.115.230.243" AND sourceport=16697 OR translatedipaddress="185.126.239.207" AND sourceport=26630 OR translatedipaddress="213.183.57.174" AND sourceport=12517 OR translatedipaddress="213.183.57.72" AND sourceport=12517 OR translatedipaddress="213.183.56.201" AND sourceport=12517 OR translatedipaddress="95.164.45.27" AND sourceport=17426 OR translatedipaddress="45.120.178.161" AND sourceport=11013 OR translatedipaddress="176.120.74.3" AND sourceport=17268 OR translatedipaddress="92.243.64.184" AND sourceport=17146 OR translatedipaddress="92.243.64.36" AND sourceport=17146)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND destinationport=16697 OR destinationtranslatedaddress="185.126.239.207" AND destinationport=26630 OR destinationtranslatedaddress="213.183.57.174" AND destinationport=12517 OR destinationtranslatedaddress="213.183.57.72" AND destinationport=12517 OR destinationtranslatedaddress="213.183.56.201" AND destinationport=12517 OR destinationtranslatedaddress="95.164.45.27" AND destinationport=17426 OR destinationtranslatedaddress="45.120.178.161" AND destinationport=11013 OR destinationtranslatedaddress="176.120.74.3" AND destinationport=17268 OR destinationtranslatedaddress="92.243.64.184" AND destinationport=17146 OR destinationtranslatedaddress="92.243.64.36" AND destinationport=17146)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND destinationtranslatedport=16697 OR destinationtranslatedaddress="185.126.239.207" AND destinationtranslatedport=26630 OR destinationtranslatedaddress="213.183.57.174" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="213.183.57.72" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="213.183.56.201" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="95.164.45.27" AND destinationtranslatedport=17426 OR destinationtranslatedaddress="45.120.178.161" AND destinationtranslatedport=11013 OR destinationtranslatedaddress="176.120.74.3" AND destinationtranslatedport=17268 OR destinationtranslatedaddress="92.243.64.184" AND destinationtranslatedport=17146 OR destinationtranslatedaddress="92.243.64.36" AND destinationtranslatedport=17146)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND translatedport=16697 OR destinationtranslatedaddress="185.126.239.207" AND translatedport=26630 OR destinationtranslatedaddress="213.183.57.174" AND translatedport=12517 OR destinationtranslatedaddress="213.183.57.72" AND translatedport=12517 OR destinationtranslatedaddress="213.183.56.201" AND translatedport=12517 OR destinationtranslatedaddress="95.164.45.27" AND translatedport=17426 OR destinationtranslatedaddress="45.120.178.161" AND translatedport=11013 OR destinationtranslatedaddress="176.120.74.3" AND translatedport=17268 OR destinationtranslatedaddress="92.243.64.184" AND translatedport=17146 OR destinationtranslatedaddress="92.243.64.36" AND translatedport=17146)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="89.31.120.126" AND destinationport=11578 OR destinationaddress="91.132.93.33" AND destinationport=11578 OR destinationaddress="91.132.95.28" AND destinationport=8773 OR destinationaddress="91.132.95.204" AND destinationport=8773 OR destinationaddress="91.132.95.135" AND destinationport=8773 OR destinationaddress="194.233.174.22" AND destinationport=45358)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="89.31.120.126" AND sourceport=11578 OR sourceaddress="91.132.93.33" AND sourceport=11578 OR sourceaddress="91.132.95.28" AND sourceport=8773 OR sourceaddress="91.132.95.204" AND sourceport=8773 OR sourceaddress="91.132.95.135" AND sourceport=8773 OR sourceaddress="194.233.174.22" AND sourceport=45358)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="89.31.120.126" AND sourceport=11578 OR translatedipaddress="91.132.93.33" AND sourceport=11578 OR translatedipaddress="91.132.95.28" AND sourceport=8773 OR translatedipaddress="91.132.95.204" AND sourceport=8773 OR translatedipaddress="91.132.95.135" AND sourceport=8773 OR translatedipaddress="194.233.174.22" AND sourceport=45358)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND destinationport=11578 OR destinationtranslatedaddress="91.132.93.33" AND destinationport=11578 OR destinationtranslatedaddress="91.132.95.28" AND destinationport=8773 OR destinationtranslatedaddress="91.132.95.204" AND destinationport=8773 OR destinationtranslatedaddress="91.132.95.135" AND destinationport=8773 OR destinationtranslatedaddress="194.233.174.22" AND destinationport=45358)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND destinationtranslatedport=11578 OR destinationtranslatedaddress="91.132.93.33" AND destinationtranslatedport=11578 OR destinationtranslatedaddress="91.132.95.28" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="91.132.95.204" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="91.132.95.135" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="194.233.174.22" AND destinationtranslatedport=45358)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND translatedport=11578 OR destinationtranslatedaddress="91.132.93.33" AND translatedport=11578 OR destinationtranslatedaddress="91.132.95.28" AND translatedport=8773 OR destinationtranslatedaddress="91.132.95.204" AND translatedport=8773 OR destinationtranslatedaddress="91.132.95.135" AND translatedport=8773 OR destinationtranslatedaddress="194.233.174.22" AND translatedport=45358)
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="158.255.212.173" AND destinationport=10862 OR destinationaddress="151.236.25.126" AND destinationport=11331 OR destinationaddress="158.255.215.49" AND destinationport=23079 OR destinationaddress="185.26.239.98" AND destinationport=11076 OR destinationaddress="151.236.25.10" AND destinationport=7205 OR destinationaddress="37.235.53.217" AND destinationport=1358 OR destinationaddress="151.236.23.232" AND destinationport=763 OR destinationaddress="37.235.56.204" AND destinationport=24239 OR destinationaddress="162.252.175.122" AND destinationport=4126 OR destinationaddress="162.252.175.136" AND destinationport=11077)
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="158.255.212.173" AND sourceport=10862 OR sourceaddress="151.236.25.126" AND sourceport=11331 OR sourceaddress="158.255.215.49" AND sourceport=23079 OR sourceaddress="185.26.239.98" AND sourceport=11076 OR sourceaddress="151.236.25.10" AND sourceport=7205 OR sourceaddress="37.235.53.217" AND sourceport=1358 OR sourceaddress="151.236.23.232" AND sourceport=763 OR sourceaddress="37.235.56.204" AND sourceport=24239 OR sourceaddress="162.252.175.122" AND sourceport=4126 OR sourceaddress="162.252.175.136" AND sourceport=11077)
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="158.255.212.173" AND sourceport=10862 OR translatedipaddress="151.236.25.126" AND sourceport=11331 OR translatedipaddress="158.255.215.49" AND sourceport=23079 OR translatedipaddress="185.26.239.98" AND sourceport=11076 OR translatedipaddress="151.236.25.10" AND sourceport=7205 OR translatedipaddress="37.235.53.217" AND sourceport=1358 OR translatedipaddress="151.236.23.232" AND sourceport=763 OR translatedipaddress="37.235.56.204" AND sourceport=24239 OR translatedipaddress="162.252.175.122" AND sourceport=4126 OR translatedipaddress="162.252.175.136" AND sourceport=11077)
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND destinationport=10862 OR destinationtranslatedaddress="151.236.25.126" AND destinationport=11331 OR destinationtranslatedaddress="158.255.215.49" AND destinationport=23079 OR destinationtranslatedaddress="185.26.239.98" AND destinationport=11076 OR destinationtranslatedaddress="151.236.25.10" AND destinationport=7205 OR destinationtranslatedaddress="37.235.53.217" AND destinationport=1358 OR destinationtranslatedaddress="151.236.23.232" AND destinationport=763 OR destinationtranslatedaddress="37.235.56.204" AND destinationport=24239 OR destinationtranslatedaddress="162.252.175.122" AND destinationport=4126 OR destinationtranslatedaddress="162.252.175.136" AND destinationport=11077)
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND destinationtranslatedport=10862 OR destinationtranslatedaddress="151.236.25.126" AND destinationtranslatedport=11331 OR destinationtranslatedaddress="158.255.215.49" AND destinationtranslatedport=23079 OR destinationtranslatedaddress="185.26.239.98" AND destinationtranslatedport=11076 OR destinationtranslatedaddress="151.236.25.10" AND destinationtranslatedport=7205 OR destinationtranslatedaddress="37.235.53.217" AND destinationtranslatedport=1358 OR destinationtranslatedaddress="151.236.23.232" AND destinationtranslatedport=763 OR destinationtranslatedaddress="37.235.56.204" AND destinationtranslatedport=24239 OR destinationtranslatedaddress="162.252.175.122" AND destinationtranslatedport=4126 OR destinationtranslatedaddress="162.252.175.136" AND destinationtranslatedport=11077)
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND translatedport=10862 OR destinationtranslatedaddress="151.236.25.126" AND translatedport=11331 OR destinationtranslatedaddress="158.255.215.49" AND translatedport=23079 OR destinationtranslatedaddress="185.26.239.98" AND translatedport=11076 OR destinationtranslatedaddress="151.236.25.10" AND translatedport=7205 OR destinationtranslatedaddress="37.235.53.217" AND translatedport=1358 OR destinationtranslatedaddress="151.236.23.232" AND translatedport=763 OR destinationtranslatedaddress="37.235.56.204" AND translatedport=24239 OR destinationtranslatedaddress="162.252.175.122" AND translatedport=4126 OR destinationtranslatedaddress="162.252.175.136" AND translatedport=11077)
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="162.252.175.163" AND destinationport=28693 OR destinationaddress="162.252.175.90" AND destinationport=845 OR destinationaddress="162.252.175.109" AND destinationport=28330 OR destinationaddress="151.236.20.39" AND destinationport=5524 OR destinationaddress="158.255.208.140" AND destinationport=86 OR destinationaddress="194.68.27.149" AND destinationport=13106 OR destinationaddress="194.68.27.176" AND destinationport=6460 OR destinationaddress="37.143.128.223" AND destinationport=16223 OR destinationaddress="31.40.212.130" AND destinationport=7225 OR destinationaddress="198.244.207.203" AND destinationport=2076)
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="162.252.175.163" AND sourceport=28693 OR sourceaddress="162.252.175.90" AND sourceport=845 OR sourceaddress="162.252.175.109" AND sourceport=28330 OR sourceaddress="151.236.20.39" AND sourceport=5524 OR sourceaddress="158.255.208.140" AND sourceport=86 OR sourceaddress="194.68.27.149" AND sourceport=13106 OR sourceaddress="194.68.27.176" AND sourceport=6460 OR sourceaddress="37.143.128.223" AND sourceport=16223 OR sourceaddress="31.40.212.130" AND sourceport=7225 OR sourceaddress="198.244.207.203" AND sourceport=2076)
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="162.252.175.163" AND sourceport=28693 OR translatedipaddress="162.252.175.90" AND sourceport=845 OR translatedipaddress="162.252.175.109" AND sourceport=28330 OR translatedipaddress="151.236.20.39" AND sourceport=5524 OR translatedipaddress="158.255.208.140" AND sourceport=86 OR translatedipaddress="194.68.27.149" AND sourceport=13106 OR translatedipaddress="194.68.27.176" AND sourceport=6460 OR translatedipaddress="37.143.128.223" AND sourceport=16223 OR translatedipaddress="31.40.212.130" AND sourceport=7225 OR translatedipaddress="198.244.207.203" AND sourceport=2076)
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND destinationport=28693 OR destinationtranslatedaddress="162.252.175.90" AND destinationport=845 OR destinationtranslatedaddress="162.252.175.109" AND destinationport=28330 OR destinationtranslatedaddress="151.236.20.39" AND destinationport=5524 OR destinationtranslatedaddress="158.255.208.140" AND destinationport=86 OR destinationtranslatedaddress="194.68.27.149" AND destinationport=13106 OR destinationtranslatedaddress="194.68.27.176" AND destinationport=6460 OR destinationtranslatedaddress="37.143.128.223" AND destinationport=16223 OR destinationtranslatedaddress="31.40.212.130" AND destinationport=7225 OR destinationtranslatedaddress="198.244.207.203" AND destinationport=2076)
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND destinationtranslatedport=28693 OR destinationtranslatedaddress="162.252.175.90" AND destinationtranslatedport=845 OR destinationtranslatedaddress="162.252.175.109" AND destinationtranslatedport=28330 OR destinationtranslatedaddress="151.236.20.39" AND destinationtranslatedport=5524 OR destinationtranslatedaddress="158.255.208.140" AND destinationtranslatedport=86 OR destinationtranslatedaddress="194.68.27.149" AND destinationtranslatedport=13106 OR destinationtranslatedaddress="194.68.27.176" AND destinationtranslatedport=6460 OR destinationtranslatedaddress="37.143.128.223" AND destinationtranslatedport=16223 OR destinationtranslatedaddress="31.40.212.130" AND destinationtranslatedport=7225 OR destinationtranslatedaddress="198.244.207.203" AND destinationtranslatedport=2076)
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND translatedport=28693 OR destinationtranslatedaddress="162.252.175.90" AND translatedport=845 OR destinationtranslatedaddress="162.252.175.109" AND translatedport=28330 OR destinationtranslatedaddress="151.236.20.39" AND translatedport=5524 OR destinationtranslatedaddress="158.255.208.140" AND translatedport=86 OR destinationtranslatedaddress="194.68.27.149" AND translatedport=13106 OR destinationtranslatedaddress="194.68.27.176" AND translatedport=6460 OR destinationtranslatedaddress="37.143.128.223" AND translatedport=16223 OR destinationtranslatedaddress="31.40.212.130" AND translatedport=7225 OR destinationtranslatedaddress="198.244.207.203" AND translatedport=2076)
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="208.115.230.243" AND destinationport=16697 OR destinationaddress="185.126.239.207" AND destinationport=26630 OR destinationaddress="213.183.57.174" AND destinationport=12517 OR destinationaddress="213.183.57.72" AND destinationport=12517 OR destinationaddress="213.183.56.201" AND destinationport=12517 OR destinationaddress="95.164.45.27" AND destinationport=17426 OR destinationaddress="45.120.178.161" AND destinationport=11013 OR destinationaddress="176.120.74.3" AND destinationport=17268 OR destinationaddress="92.243.64.184" AND destinationport=17146 OR destinationaddress="92.243.64.36" AND destinationport=17146)
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="208.115.230.243" AND sourceport=16697 OR sourceaddress="185.126.239.207" AND sourceport=26630 OR sourceaddress="213.183.57.174" AND sourceport=12517 OR sourceaddress="213.183.57.72" AND sourceport=12517 OR sourceaddress="213.183.56.201" AND sourceport=12517 OR sourceaddress="95.164.45.27" AND sourceport=17426 OR sourceaddress="45.120.178.161" AND sourceport=11013 OR sourceaddress="176.120.74.3" AND sourceport=17268 OR sourceaddress="92.243.64.184" AND sourceport=17146 OR sourceaddress="92.243.64.36" AND sourceport=17146)
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="208.115.230.243" AND sourceport=16697 OR translatedipaddress="185.126.239.207" AND sourceport=26630 OR translatedipaddress="213.183.57.174" AND sourceport=12517 OR translatedipaddress="213.183.57.72" AND sourceport=12517 OR translatedipaddress="213.183.56.201" AND sourceport=12517 OR translatedipaddress="95.164.45.27" AND sourceport=17426 OR translatedipaddress="45.120.178.161" AND sourceport=11013 OR translatedipaddress="176.120.74.3" AND sourceport=17268 OR translatedipaddress="92.243.64.184" AND sourceport=17146 OR translatedipaddress="92.243.64.36" AND sourceport=17146)
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND destinationport=16697 OR destinationtranslatedaddress="185.126.239.207" AND destinationport=26630 OR destinationtranslatedaddress="213.183.57.174" AND destinationport=12517 OR destinationtranslatedaddress="213.183.57.72" AND destinationport=12517 OR destinationtranslatedaddress="213.183.56.201" AND destinationport=12517 OR destinationtranslatedaddress="95.164.45.27" AND destinationport=17426 OR destinationtranslatedaddress="45.120.178.161" AND destinationport=11013 OR destinationtranslatedaddress="176.120.74.3" AND destinationport=17268 OR destinationtranslatedaddress="92.243.64.184" AND destinationport=17146 OR destinationtranslatedaddress="92.243.64.36" AND destinationport=17146)
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND destinationtranslatedport=16697 OR destinationtranslatedaddress="185.126.239.207" AND destinationtranslatedport=26630 OR destinationtranslatedaddress="213.183.57.174" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="213.183.57.72" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="213.183.56.201" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="95.164.45.27" AND destinationtranslatedport=17426 OR destinationtranslatedaddress="45.120.178.161" AND destinationtranslatedport=11013 OR destinationtranslatedaddress="176.120.74.3" AND destinationtranslatedport=17268 OR destinationtranslatedaddress="92.243.64.184" AND destinationtranslatedport=17146 OR destinationtranslatedaddress="92.243.64.36" AND destinationtranslatedport=17146)
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND translatedport=16697 OR destinationtranslatedaddress="185.126.239.207" AND translatedport=26630 OR destinationtranslatedaddress="213.183.57.174" AND translatedport=12517 OR destinationtranslatedaddress="213.183.57.72" AND translatedport=12517 OR destinationtranslatedaddress="213.183.56.201" AND translatedport=12517 OR destinationtranslatedaddress="95.164.45.27" AND translatedport=17426 OR destinationtranslatedaddress="45.120.178.161" AND translatedport=11013 OR destinationtranslatedaddress="176.120.74.3" AND translatedport=17268 OR destinationtranslatedaddress="92.243.64.184" AND translatedport=17146 OR destinationtranslatedaddress="92.243.64.36" AND translatedport=17146)
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="89.31.120.126" AND destinationport=11578 OR destinationaddress="91.132.93.33" AND destinationport=11578 OR destinationaddress="91.132.95.28" AND destinationport=8773 OR destinationaddress="91.132.95.204" AND destinationport=8773 OR destinationaddress="91.132.95.135" AND destinationport=8773 OR destinationaddress="194.233.174.22" AND destinationport=45358)
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="89.31.120.126" AND sourceport=11578 OR sourceaddress="91.132.93.33" AND sourceport=11578 OR sourceaddress="91.132.95.28" AND sourceport=8773 OR sourceaddress="91.132.95.204" AND sourceport=8773 OR sourceaddress="91.132.95.135" AND sourceport=8773 OR sourceaddress="194.233.174.22" AND sourceport=45358)
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="89.31.120.126" AND sourceport=11578 OR translatedipaddress="91.132.93.33" AND sourceport=11578 OR translatedipaddress="91.132.95.28" AND sourceport=8773 OR translatedipaddress="91.132.95.204" AND sourceport=8773 OR translatedipaddress="91.132.95.135" AND sourceport=8773 OR translatedipaddress="194.233.174.22" AND sourceport=45358)
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND destinationport=11578 OR destinationtranslatedaddress="91.132.93.33" AND destinationport=11578 OR destinationtranslatedaddress="91.132.95.28" AND destinationport=8773 OR destinationtranslatedaddress="91.132.95.204" AND destinationport=8773 OR destinationtranslatedaddress="91.132.95.135" AND destinationport=8773 OR destinationtranslatedaddress="194.233.174.22" AND destinationport=45358)
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND destinationtranslatedport=11578 OR destinationtranslatedaddress="91.132.93.33" AND destinationtranslatedport=11578 OR destinationtranslatedaddress="91.132.95.28" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="91.132.95.204" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="91.132.95.135" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="194.233.174.22" AND destinationtranslatedport=45358)
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND translatedport=11578 OR destinationtranslatedaddress="91.132.93.33" AND translatedport=11578 OR destinationtranslatedaddress="91.132.95.28" AND translatedport=8773 OR destinationtranslatedaddress="91.132.95.204" AND translatedport=8773 OR destinationtranslatedaddress="91.132.95.135" AND translatedport=8773 OR destinationtranslatedaddress="194.233.174.22" AND translatedport=45358)
index=activity AND rg_functionality="Web Application Firewall" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="158.255.212.173" AND destinationport=10862 OR destinationaddress="151.236.25.126" AND destinationport=11331 OR destinationaddress="158.255.215.49" AND destinationport=23079 OR destinationaddress="185.26.239.98" AND destinationport=11076 OR destinationaddress="151.236.25.10" AND destinationport=7205 OR destinationaddress="37.235.53.217" AND destinationport=1358 OR destinationaddress="151.236.23.232" AND destinationport=763 OR destinationaddress="37.235.56.204" AND destinationport=24239 OR destinationaddress="162.252.175.122" AND destinationport=4126 OR destinationaddress="162.252.175.136" AND destinationport=11077)
index=activity AND rg_functionality="Web Application Firewall" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="158.255.212.173" AND sourceport=10862 OR sourceaddress="151.236.25.126" AND sourceport=11331 OR sourceaddress="158.255.215.49" AND sourceport=23079 OR sourceaddress="185.26.239.98" AND sourceport=11076 OR sourceaddress="151.236.25.10" AND sourceport=7205 OR sourceaddress="37.235.53.217" AND sourceport=1358 OR sourceaddress="151.236.23.232" AND sourceport=763 OR sourceaddress="37.235.56.204" AND sourceport=24239 OR sourceaddress="162.252.175.122" AND sourceport=4126 OR sourceaddress="162.252.175.136" AND sourceport=11077)
index=activity AND rg_functionality="Web Application Firewall" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="158.255.212.173" AND sourceport=10862 OR translatedipaddress="151.236.25.126" AND sourceport=11331 OR translatedipaddress="158.255.215.49" AND sourceport=23079 OR translatedipaddress="185.26.239.98" AND sourceport=11076 OR translatedipaddress="151.236.25.10" AND sourceport=7205 OR translatedipaddress="37.235.53.217" AND sourceport=1358 OR translatedipaddress="151.236.23.232" AND sourceport=763 OR translatedipaddress="37.235.56.204" AND sourceport=24239 OR translatedipaddress="162.252.175.122" AND sourceport=4126 OR translatedipaddress="162.252.175.136" AND sourceport=11077)
index=activity AND rg_functionality="Web Application Firewall" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND destinationport=10862 OR destinationtranslatedaddress="151.236.25.126" AND destinationport=11331 OR destinationtranslatedaddress="158.255.215.49" AND destinationport=23079 OR destinationtranslatedaddress="185.26.239.98" AND destinationport=11076 OR destinationtranslatedaddress="151.236.25.10" AND destinationport=7205 OR destinationtranslatedaddress="37.235.53.217" AND destinationport=1358 OR destinationtranslatedaddress="151.236.23.232" AND destinationport=763 OR destinationtranslatedaddress="37.235.56.204" AND destinationport=24239 OR destinationtranslatedaddress="162.252.175.122" AND destinationport=4126 OR destinationtranslatedaddress="162.252.175.136" AND destinationport=11077)
index=activity AND rg_functionality="Web Application Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND destinationtranslatedport=10862 OR destinationtranslatedaddress="151.236.25.126" AND destinationtranslatedport=11331 OR destinationtranslatedaddress="158.255.215.49" AND destinationtranslatedport=23079 OR destinationtranslatedaddress="185.26.239.98" AND destinationtranslatedport=11076 OR destinationtranslatedaddress="151.236.25.10" AND destinationtranslatedport=7205 OR destinationtranslatedaddress="37.235.53.217" AND destinationtranslatedport=1358 OR destinationtranslatedaddress="151.236.23.232" AND destinationtranslatedport=763 OR destinationtranslatedaddress="37.235.56.204" AND destinationtranslatedport=24239 OR destinationtranslatedaddress="162.252.175.122" AND destinationtranslatedport=4126 OR destinationtranslatedaddress="162.252.175.136" AND destinationtranslatedport=11077)
index=activity AND rg_functionality="Web Application Firewall" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND translatedport=10862 OR destinationtranslatedaddress="151.236.25.126" AND translatedport=11331 OR destinationtranslatedaddress="158.255.215.49" AND translatedport=23079 OR destinationtranslatedaddress="185.26.239.98" AND translatedport=11076 OR destinationtranslatedaddress="151.236.25.10" AND translatedport=7205 OR destinationtranslatedaddress="37.235.53.217" AND translatedport=1358 OR destinationtranslatedaddress="151.236.23.232" AND translatedport=763 OR destinationtranslatedaddress="37.235.56.204" AND translatedport=24239 OR destinationtranslatedaddress="162.252.175.122" AND translatedport=4126 OR destinationtranslatedaddress="162.252.175.136" AND translatedport=11077)
index=activity AND rg_functionality="Web Application Firewall" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="162.252.175.163" AND destinationport=28693 OR destinationaddress="162.252.175.90" AND destinationport=845 OR destinationaddress="162.252.175.109" AND destinationport=28330 OR destinationaddress="151.236.20.39" AND destinationport=5524 OR destinationaddress="158.255.208.140" AND destinationport=86 OR destinationaddress="194.68.27.149" AND destinationport=13106 OR destinationaddress="194.68.27.176" AND destinationport=6460 OR destinationaddress="37.143.128.223" AND destinationport=16223 OR destinationaddress="31.40.212.130" AND destinationport=7225 OR destinationaddress="198.244.207.203" AND destinationport=2076)
index=activity AND rg_functionality="Web Application Firewall" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="162.252.175.163" AND sourceport=28693 OR sourceaddress="162.252.175.90" AND sourceport=845 OR sourceaddress="162.252.175.109" AND sourceport=28330 OR sourceaddress="151.236.20.39" AND sourceport=5524 OR sourceaddress="158.255.208.140" AND sourceport=86 OR sourceaddress="194.68.27.149" AND sourceport=13106 OR sourceaddress="194.68.27.176" AND sourceport=6460 OR sourceaddress="37.143.128.223" AND sourceport=16223 OR sourceaddress="31.40.212.130" AND sourceport=7225 OR sourceaddress="198.244.207.203" AND sourceport=2076)
index=activity AND rg_functionality="Web Application Firewall" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="162.252.175.163" AND sourceport=28693 OR translatedipaddress="162.252.175.90" AND sourceport=845 OR translatedipaddress="162.252.175.109" AND sourceport=28330 OR translatedipaddress="151.236.20.39" AND sourceport=5524 OR translatedipaddress="158.255.208.140" AND sourceport=86 OR translatedipaddress="194.68.27.149" AND sourceport=13106 OR translatedipaddress="194.68.27.176" AND sourceport=6460 OR translatedipaddress="37.143.128.223" AND sourceport=16223 OR translatedipaddress="31.40.212.130" AND sourceport=7225 OR translatedipaddress="198.244.207.203" AND sourceport=2076)
index=activity AND rg_functionality="Web Application Firewall" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND destinationport=28693 OR destinationtranslatedaddress="162.252.175.90" AND destinationport=845 OR destinationtranslatedaddress="162.252.175.109" AND destinationport=28330 OR destinationtranslatedaddress="151.236.20.39" AND destinationport=5524 OR destinationtranslatedaddress="158.255.208.140" AND destinationport=86 OR destinationtranslatedaddress="194.68.27.149" AND destinationport=13106 OR destinationtranslatedaddress="194.68.27.176" AND destinationport=6460 OR destinationtranslatedaddress="37.143.128.223" AND destinationport=16223 OR destinationtranslatedaddress="31.40.212.130" AND destinationport=7225 OR destinationtranslatedaddress="198.244.207.203" AND destinationport=2076)
index=activity AND rg_functionality="Web Application Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND destinationtranslatedport=28693 OR destinationtranslatedaddress="162.252.175.90" AND destinationtranslatedport=845 OR destinationtranslatedaddress="162.252.175.109" AND destinationtranslatedport=28330 OR destinationtranslatedaddress="151.236.20.39" AND destinationtranslatedport=5524 OR destinationtranslatedaddress="158.255.208.140" AND destinationtranslatedport=86 OR destinationtranslatedaddress="194.68.27.149" AND destinationtranslatedport=13106 OR destinationtranslatedaddress="194.68.27.176" AND destinationtranslatedport=6460 OR destinationtranslatedaddress="37.143.128.223" AND destinationtranslatedport=16223 OR destinationtranslatedaddress="31.40.212.130" AND destinationtranslatedport=7225 OR destinationtranslatedaddress="198.244.207.203" AND destinationtranslatedport=2076)
index=activity AND rg_functionality="Web Application Firewall" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND translatedport=28693 OR destinationtranslatedaddress="162.252.175.90" AND translatedport=845 OR destinationtranslatedaddress="162.252.175.109" AND translatedport=28330 OR destinationtranslatedaddress="151.236.20.39" AND translatedport=5524 OR destinationtranslatedaddress="158.255.208.140" AND translatedport=86 OR destinationtranslatedaddress="194.68.27.149" AND translatedport=13106 OR destinationtranslatedaddress="194.68.27.176" AND translatedport=6460 OR destinationtranslatedaddress="37.143.128.223" AND translatedport=16223 OR destinationtranslatedaddress="31.40.212.130" AND translatedport=7225 OR destinationtranslatedaddress="198.244.207.203" AND translatedport=2076)
index=activity AND rg_functionality="Web Application Firewall" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="208.115.230.243" AND destinationport=16697 OR destinationaddress="185.126.239.207" AND destinationport=26630 OR destinationaddress="213.183.57.174" AND destinationport=12517 OR destinationaddress="213.183.57.72" AND destinationport=12517 OR destinationaddress="213.183.56.201" AND destinationport=12517 OR destinationaddress="95.164.45.27" AND destinationport=17426 OR destinationaddress="45.120.178.161" AND destinationport=11013 OR destinationaddress="176.120.74.3" AND destinationport=17268 OR destinationaddress="92.243.64.184" AND destinationport=17146 OR destinationaddress="92.243.64.36" AND destinationport=17146)
index=activity AND rg_functionality="Web Application Firewall" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="208.115.230.243" AND sourceport=16697 OR sourceaddress="185.126.239.207" AND sourceport=26630 OR sourceaddress="213.183.57.174" AND sourceport=12517 OR sourceaddress="213.183.57.72" AND sourceport=12517 OR sourceaddress="213.183.56.201" AND sourceport=12517 OR sourceaddress="95.164.45.27" AND sourceport=17426 OR sourceaddress="45.120.178.161" AND sourceport=11013 OR sourceaddress="176.120.74.3" AND sourceport=17268 OR sourceaddress="92.243.64.184" AND sourceport=17146 OR sourceaddress="92.243.64.36" AND sourceport=17146)
index=activity AND rg_functionality="Web Application Firewall" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="208.115.230.243" AND sourceport=16697 OR translatedipaddress="185.126.239.207" AND sourceport=26630 OR translatedipaddress="213.183.57.174" AND sourceport=12517 OR translatedipaddress="213.183.57.72" AND sourceport=12517 OR translatedipaddress="213.183.56.201" AND sourceport=12517 OR translatedipaddress="95.164.45.27" AND sourceport=17426 OR translatedipaddress="45.120.178.161" AND sourceport=11013 OR translatedipaddress="176.120.74.3" AND sourceport=17268 OR translatedipaddress="92.243.64.184" AND sourceport=17146 OR translatedipaddress="92.243.64.36" AND sourceport=17146)
index=activity AND rg_functionality="Web Application Firewall" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND destinationport=16697 OR destinationtranslatedaddress="185.126.239.207" AND destinationport=26630 OR destinationtranslatedaddress="213.183.57.174" AND destinationport=12517 OR destinationtranslatedaddress="213.183.57.72" AND destinationport=12517 OR destinationtranslatedaddress="213.183.56.201" AND destinationport=12517 OR destinationtranslatedaddress="95.164.45.27" AND destinationport=17426 OR destinationtranslatedaddress="45.120.178.161" AND destinationport=11013 OR destinationtranslatedaddress="176.120.74.3" AND destinationport=17268 OR destinationtranslatedaddress="92.243.64.184" AND destinationport=17146 OR destinationtranslatedaddress="92.243.64.36" AND destinationport=17146)
index=activity AND rg_functionality="Web Application Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND destinationtranslatedport=16697 OR destinationtranslatedaddress="185.126.239.207" AND destinationtranslatedport=26630 OR destinationtranslatedaddress="213.183.57.174" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="213.183.57.72" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="213.183.56.201" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="95.164.45.27" AND destinationtranslatedport=17426 OR destinationtranslatedaddress="45.120.178.161" AND destinationtranslatedport=11013 OR destinationtranslatedaddress="176.120.74.3" AND destinationtranslatedport=17268 OR destinationtranslatedaddress="92.243.64.184" AND destinationtranslatedport=17146 OR destinationtranslatedaddress="92.243.64.36" AND destinationtranslatedport=17146)
index=activity AND rg_functionality="Web Application Firewall" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND translatedport=16697 OR destinationtranslatedaddress="185.126.239.207" AND translatedport=26630 OR destinationtranslatedaddress="213.183.57.174" AND translatedport=12517 OR destinationtranslatedaddress="213.183.57.72" AND translatedport=12517 OR destinationtranslatedaddress="213.183.56.201" AND translatedport=12517 OR destinationtranslatedaddress="95.164.45.27" AND translatedport=17426 OR destinationtranslatedaddress="45.120.178.161" AND translatedport=11013 OR destinationtranslatedaddress="176.120.74.3" AND translatedport=17268 OR destinationtranslatedaddress="92.243.64.184" AND translatedport=17146 OR destinationtranslatedaddress="92.243.64.36" AND translatedport=17146)
index=activity AND rg_functionality="Web Application Firewall" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="89.31.120.126" AND destinationport=11578 OR destinationaddress="91.132.93.33" AND destinationport=11578 OR destinationaddress="91.132.95.28" AND destinationport=8773 OR destinationaddress="91.132.95.204" AND destinationport=8773 OR destinationaddress="91.132.95.135" AND destinationport=8773 OR destinationaddress="194.233.174.22" AND destinationport=45358)
index=activity AND rg_functionality="Web Application Firewall" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="89.31.120.126" AND sourceport=11578 OR sourceaddress="91.132.93.33" AND sourceport=11578 OR sourceaddress="91.132.95.28" AND sourceport=8773 OR sourceaddress="91.132.95.204" AND sourceport=8773 OR sourceaddress="91.132.95.135" AND sourceport=8773 OR sourceaddress="194.233.174.22" AND sourceport=45358)
index=activity AND rg_functionality="Web Application Firewall" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="89.31.120.126" AND sourceport=11578 OR translatedipaddress="91.132.93.33" AND sourceport=11578 OR translatedipaddress="91.132.95.28" AND sourceport=8773 OR translatedipaddress="91.132.95.204" AND sourceport=8773 OR translatedipaddress="91.132.95.135" AND sourceport=8773 OR translatedipaddress="194.233.174.22" AND sourceport=45358)
index=activity AND rg_functionality="Web Application Firewall" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND destinationport=11578 OR destinationtranslatedaddress="91.132.93.33" AND destinationport=11578 OR destinationtranslatedaddress="91.132.95.28" AND destinationport=8773 OR destinationtranslatedaddress="91.132.95.204" AND destinationport=8773 OR destinationtranslatedaddress="91.132.95.135" AND destinationport=8773 OR destinationtranslatedaddress="194.233.174.22" AND destinationport=45358)
index=activity AND rg_functionality="Web Application Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND destinationtranslatedport=11578 OR destinationtranslatedaddress="91.132.93.33" AND destinationtranslatedport=11578 OR destinationtranslatedaddress="91.132.95.28" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="91.132.95.204" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="91.132.95.135" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="194.233.174.22" AND destinationtranslatedport=45358)
index=activity AND rg_functionality="Web Application Firewall" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND translatedport=11578 OR destinationtranslatedaddress="91.132.93.33" AND translatedport=11578 OR destinationtranslatedaddress="91.132.95.28" AND translatedport=8773 OR destinationtranslatedaddress="91.132.95.204" AND translatedport=8773 OR destinationtranslatedaddress="91.132.95.135" AND translatedport=8773 OR destinationtranslatedaddress="194.233.174.22" AND translatedport=45358)
index=activity AND rg_functionality="Endpoint management systems" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="158.255.212.173" AND destinationport=10862 OR destinationaddress="151.236.25.126" AND destinationport=11331 OR destinationaddress="158.255.215.49" AND destinationport=23079 OR destinationaddress="185.26.239.98" AND destinationport=11076 OR destinationaddress="151.236.25.10" AND destinationport=7205 OR destinationaddress="37.235.53.217" AND destinationport=1358 OR destinationaddress="151.236.23.232" AND destinationport=763 OR destinationaddress="37.235.56.204" AND destinationport=24239 OR destinationaddress="162.252.175.122" AND destinationport=4126 OR destinationaddress="162.252.175.136" AND destinationport=11077)
index=activity AND rg_functionality="Endpoint management systems" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="158.255.212.173" AND sourceport=10862 OR sourceaddress="151.236.25.126" AND sourceport=11331 OR sourceaddress="158.255.215.49" AND sourceport=23079 OR sourceaddress="185.26.239.98" AND sourceport=11076 OR sourceaddress="151.236.25.10" AND sourceport=7205 OR sourceaddress="37.235.53.217" AND sourceport=1358 OR sourceaddress="151.236.23.232" AND sourceport=763 OR sourceaddress="37.235.56.204" AND sourceport=24239 OR sourceaddress="162.252.175.122" AND sourceport=4126 OR sourceaddress="162.252.175.136" AND sourceport=11077)
index=activity AND rg_functionality="Endpoint management systems" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="158.255.212.173" AND sourceport=10862 OR translatedipaddress="151.236.25.126" AND sourceport=11331 OR translatedipaddress="158.255.215.49" AND sourceport=23079 OR translatedipaddress="185.26.239.98" AND sourceport=11076 OR translatedipaddress="151.236.25.10" AND sourceport=7205 OR translatedipaddress="37.235.53.217" AND sourceport=1358 OR translatedipaddress="151.236.23.232" AND sourceport=763 OR translatedipaddress="37.235.56.204" AND sourceport=24239 OR translatedipaddress="162.252.175.122" AND sourceport=4126 OR translatedipaddress="162.252.175.136" AND sourceport=11077)
index=activity AND rg_functionality="Endpoint management systems" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND destinationport=10862 OR destinationtranslatedaddress="151.236.25.126" AND destinationport=11331 OR destinationtranslatedaddress="158.255.215.49" AND destinationport=23079 OR destinationtranslatedaddress="185.26.239.98" AND destinationport=11076 OR destinationtranslatedaddress="151.236.25.10" AND destinationport=7205 OR destinationtranslatedaddress="37.235.53.217" AND destinationport=1358 OR destinationtranslatedaddress="151.236.23.232" AND destinationport=763 OR destinationtranslatedaddress="37.235.56.204" AND destinationport=24239 OR destinationtranslatedaddress="162.252.175.122" AND destinationport=4126 OR destinationtranslatedaddress="162.252.175.136" AND destinationport=11077)
index=activity AND rg_functionality="Endpoint management systems" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND destinationtranslatedport=10862 OR destinationtranslatedaddress="151.236.25.126" AND destinationtranslatedport=11331 OR destinationtranslatedaddress="158.255.215.49" AND destinationtranslatedport=23079 OR destinationtranslatedaddress="185.26.239.98" AND destinationtranslatedport=11076 OR destinationtranslatedaddress="151.236.25.10" AND destinationtranslatedport=7205 OR destinationtranslatedaddress="37.235.53.217" AND destinationtranslatedport=1358 OR destinationtranslatedaddress="151.236.23.232" AND destinationtranslatedport=763 OR destinationtranslatedaddress="37.235.56.204" AND destinationtranslatedport=24239 OR destinationtranslatedaddress="162.252.175.122" AND destinationtranslatedport=4126 OR destinationtranslatedaddress="162.252.175.136" AND destinationtranslatedport=11077)
index=activity AND rg_functionality="Endpoint management systems" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND translatedport=10862 OR destinationtranslatedaddress="151.236.25.126" AND translatedport=11331 OR destinationtranslatedaddress="158.255.215.49" AND translatedport=23079 OR destinationtranslatedaddress="185.26.239.98" AND translatedport=11076 OR destinationtranslatedaddress="151.236.25.10" AND translatedport=7205 OR destinationtranslatedaddress="37.235.53.217" AND translatedport=1358 OR destinationtranslatedaddress="151.236.23.232" AND translatedport=763 OR destinationtranslatedaddress="37.235.56.204" AND translatedport=24239 OR destinationtranslatedaddress="162.252.175.122" AND translatedport=4126 OR destinationtranslatedaddress="162.252.175.136" AND translatedport=11077)
index=activity AND rg_functionality="Endpoint management systems" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="162.252.175.163" AND destinationport=28693 OR destinationaddress="162.252.175.90" AND destinationport=845 OR destinationaddress="162.252.175.109" AND destinationport=28330 OR destinationaddress="151.236.20.39" AND destinationport=5524 OR destinationaddress="158.255.208.140" AND destinationport=86 OR destinationaddress="194.68.27.149" AND destinationport=13106 OR destinationaddress="194.68.27.176" AND destinationport=6460 OR destinationaddress="37.143.128.223" AND destinationport=16223 OR destinationaddress="31.40.212.130" AND destinationport=7225 OR destinationaddress="198.244.207.203" AND destinationport=2076)
index=activity AND rg_functionality="Endpoint management systems" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="162.252.175.163" AND sourceport=28693 OR sourceaddress="162.252.175.90" AND sourceport=845 OR sourceaddress="162.252.175.109" AND sourceport=28330 OR sourceaddress="151.236.20.39" AND sourceport=5524 OR sourceaddress="158.255.208.140" AND sourceport=86 OR sourceaddress="194.68.27.149" AND sourceport=13106 OR sourceaddress="194.68.27.176" AND sourceport=6460 OR sourceaddress="37.143.128.223" AND sourceport=16223 OR sourceaddress="31.40.212.130" AND sourceport=7225 OR sourceaddress="198.244.207.203" AND sourceport=2076)
index=activity AND rg_functionality="Endpoint management systems" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="162.252.175.163" AND sourceport=28693 OR translatedipaddress="162.252.175.90" AND sourceport=845 OR translatedipaddress="162.252.175.109" AND sourceport=28330 OR translatedipaddress="151.236.20.39" AND sourceport=5524 OR translatedipaddress="158.255.208.140" AND sourceport=86 OR translatedipaddress="194.68.27.149" AND sourceport=13106 OR translatedipaddress="194.68.27.176" AND sourceport=6460 OR translatedipaddress="37.143.128.223" AND sourceport=16223 OR translatedipaddress="31.40.212.130" AND sourceport=7225 OR translatedipaddress="198.244.207.203" AND sourceport=2076)
index=activity AND rg_functionality="Endpoint management systems" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND destinationport=28693 OR destinationtranslatedaddress="162.252.175.90" AND destinationport=845 OR destinationtranslatedaddress="162.252.175.109" AND destinationport=28330 OR destinationtranslatedaddress="151.236.20.39" AND destinationport=5524 OR destinationtranslatedaddress="158.255.208.140" AND destinationport=86 OR destinationtranslatedaddress="194.68.27.149" AND destinationport=13106 OR destinationtranslatedaddress="194.68.27.176" AND destinationport=6460 OR destinationtranslatedaddress="37.143.128.223" AND destinationport=16223 OR destinationtranslatedaddress="31.40.212.130" AND destinationport=7225 OR destinationtranslatedaddress="198.244.207.203" AND destinationport=2076)
index=activity AND rg_functionality="Endpoint management systems" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND destinationtranslatedport=28693 OR destinationtranslatedaddress="162.252.175.90" AND destinationtranslatedport=845 OR destinationtranslatedaddress="162.252.175.109" AND destinationtranslatedport=28330 OR destinationtranslatedaddress="151.236.20.39" AND destinationtranslatedport=5524 OR destinationtranslatedaddress="158.255.208.140" AND destinationtranslatedport=86 OR destinationtranslatedaddress="194.68.27.149" AND destinationtranslatedport=13106 OR destinationtranslatedaddress="194.68.27.176" AND destinationtranslatedport=6460 OR destinationtranslatedaddress="37.143.128.223" AND destinationtranslatedport=16223 OR destinationtranslatedaddress="31.40.212.130" AND destinationtranslatedport=7225 OR destinationtranslatedaddress="198.244.207.203" AND destinationtranslatedport=2076)
index=activity AND rg_functionality="Endpoint management systems" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND translatedport=28693 OR destinationtranslatedaddress="162.252.175.90" AND translatedport=845 OR destinationtranslatedaddress="162.252.175.109" AND translatedport=28330 OR destinationtranslatedaddress="151.236.20.39" AND translatedport=5524 OR destinationtranslatedaddress="158.255.208.140" AND translatedport=86 OR destinationtranslatedaddress="194.68.27.149" AND translatedport=13106 OR destinationtranslatedaddress="194.68.27.176" AND translatedport=6460 OR destinationtranslatedaddress="37.143.128.223" AND translatedport=16223 OR destinationtranslatedaddress="31.40.212.130" AND translatedport=7225 OR destinationtranslatedaddress="198.244.207.203" AND translatedport=2076)
index=activity AND rg_functionality="Endpoint management systems" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="208.115.230.243" AND destinationport=16697 OR destinationaddress="185.126.239.207" AND destinationport=26630 OR destinationaddress="213.183.57.174" AND destinationport=12517 OR destinationaddress="213.183.57.72" AND destinationport=12517 OR destinationaddress="213.183.56.201" AND destinationport=12517 OR destinationaddress="95.164.45.27" AND destinationport=17426 OR destinationaddress="45.120.178.161" AND destinationport=11013 OR destinationaddress="176.120.74.3" AND destinationport=17268 OR destinationaddress="92.243.64.184" AND destinationport=17146 OR destinationaddress="92.243.64.36" AND destinationport=17146)
index=activity AND rg_functionality="Endpoint management systems" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="208.115.230.243" AND sourceport=16697 OR sourceaddress="185.126.239.207" AND sourceport=26630 OR sourceaddress="213.183.57.174" AND sourceport=12517 OR sourceaddress="213.183.57.72" AND sourceport=12517 OR sourceaddress="213.183.56.201" AND sourceport=12517 OR sourceaddress="95.164.45.27" AND sourceport=17426 OR sourceaddress="45.120.178.161" AND sourceport=11013 OR sourceaddress="176.120.74.3" AND sourceport=17268 OR sourceaddress="92.243.64.184" AND sourceport=17146 OR sourceaddress="92.243.64.36" AND sourceport=17146)
index=activity AND rg_functionality="Endpoint management systems" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="208.115.230.243" AND sourceport=16697 OR translatedipaddress="185.126.239.207" AND sourceport=26630 OR translatedipaddress="213.183.57.174" AND sourceport=12517 OR translatedipaddress="213.183.57.72" AND sourceport=12517 OR translatedipaddress="213.183.56.201" AND sourceport=12517 OR translatedipaddress="95.164.45.27" AND sourceport=17426 OR translatedipaddress="45.120.178.161" AND sourceport=11013 OR translatedipaddress="176.120.74.3" AND sourceport=17268 OR translatedipaddress="92.243.64.184" AND sourceport=17146 OR translatedipaddress="92.243.64.36" AND sourceport=17146)
index=activity AND rg_functionality="Endpoint management systems" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND destinationport=16697 OR destinationtranslatedaddress="185.126.239.207" AND destinationport=26630 OR destinationtranslatedaddress="213.183.57.174" AND destinationport=12517 OR destinationtranslatedaddress="213.183.57.72" AND destinationport=12517 OR destinationtranslatedaddress="213.183.56.201" AND destinationport=12517 OR destinationtranslatedaddress="95.164.45.27" AND destinationport=17426 OR destinationtranslatedaddress="45.120.178.161" AND destinationport=11013 OR destinationtranslatedaddress="176.120.74.3" AND destinationport=17268 OR destinationtranslatedaddress="92.243.64.184" AND destinationport=17146 OR destinationtranslatedaddress="92.243.64.36" AND destinationport=17146)
index=activity AND rg_functionality="Endpoint management systems" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND destinationtranslatedport=16697 OR destinationtranslatedaddress="185.126.239.207" AND destinationtranslatedport=26630 OR destinationtranslatedaddress="213.183.57.174" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="213.183.57.72" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="213.183.56.201" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="95.164.45.27" AND destinationtranslatedport=17426 OR destinationtranslatedaddress="45.120.178.161" AND destinationtranslatedport=11013 OR destinationtranslatedaddress="176.120.74.3" AND destinationtranslatedport=17268 OR destinationtranslatedaddress="92.243.64.184" AND destinationtranslatedport=17146 OR destinationtranslatedaddress="92.243.64.36" AND destinationtranslatedport=17146)
index=activity AND rg_functionality="Endpoint management systems" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND translatedport=16697 OR destinationtranslatedaddress="185.126.239.207" AND translatedport=26630 OR destinationtranslatedaddress="213.183.57.174" AND translatedport=12517 OR destinationtranslatedaddress="213.183.57.72" AND translatedport=12517 OR destinationtranslatedaddress="213.183.56.201" AND translatedport=12517 OR destinationtranslatedaddress="95.164.45.27" AND translatedport=17426 OR destinationtranslatedaddress="45.120.178.161" AND translatedport=11013 OR destinationtranslatedaddress="176.120.74.3" AND translatedport=17268 OR destinationtranslatedaddress="92.243.64.184" AND translatedport=17146 OR destinationtranslatedaddress="92.243.64.36" AND translatedport=17146)
index=activity AND rg_functionality="Endpoint management systems" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="89.31.120.126" AND destinationport=11578 OR destinationaddress="91.132.93.33" AND destinationport=11578 OR destinationaddress="91.132.95.28" AND destinationport=8773 OR destinationaddress="91.132.95.204" AND destinationport=8773 OR destinationaddress="91.132.95.135" AND destinationport=8773 OR destinationaddress="194.233.174.22" AND destinationport=45358)
index=activity AND rg_functionality="Endpoint management systems" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="89.31.120.126" AND sourceport=11578 OR sourceaddress="91.132.93.33" AND sourceport=11578 OR sourceaddress="91.132.95.28" AND sourceport=8773 OR sourceaddress="91.132.95.204" AND sourceport=8773 OR sourceaddress="91.132.95.135" AND sourceport=8773 OR sourceaddress="194.233.174.22" AND sourceport=45358)
index=activity AND rg_functionality="Endpoint management systems" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="89.31.120.126" AND sourceport=11578 OR translatedipaddress="91.132.93.33" AND sourceport=11578 OR translatedipaddress="91.132.95.28" AND sourceport=8773 OR translatedipaddress="91.132.95.204" AND sourceport=8773 OR translatedipaddress="91.132.95.135" AND sourceport=8773 OR translatedipaddress="194.233.174.22" AND sourceport=45358)
index=activity AND rg_functionality="Endpoint management systems" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND destinationport=11578 OR destinationtranslatedaddress="91.132.93.33" AND destinationport=11578 OR destinationtranslatedaddress="91.132.95.28" AND destinationport=8773 OR destinationtranslatedaddress="91.132.95.204" AND destinationport=8773 OR destinationtranslatedaddress="91.132.95.135" AND destinationport=8773 OR destinationtranslatedaddress="194.233.174.22" AND destinationport=45358)
index=activity AND rg_functionality="Endpoint management systems" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND destinationtranslatedport=11578 OR destinationtranslatedaddress="91.132.93.33" AND destinationtranslatedport=11578 OR destinationtranslatedaddress="91.132.95.28" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="91.132.95.204" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="91.132.95.135" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="194.233.174.22" AND destinationtranslatedport=45358)
index=activity AND rg_functionality="Endpoint management systems" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND translatedport=11578 OR destinationtranslatedaddress="91.132.93.33" AND translatedport=11578 OR destinationtranslatedaddress="91.132.95.28" AND translatedport=8773 OR destinationtranslatedaddress="91.132.95.204" AND translatedport=8773 OR destinationtranslatedaddress="91.132.95.135" AND translatedport=8773 OR destinationtranslatedaddress="194.233.174.22" AND translatedport=45358)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="158.255.212.173" AND destinationport=10862 OR destinationaddress="151.236.25.126" AND destinationport=11331 OR destinationaddress="158.255.215.49" AND destinationport=23079 OR destinationaddress="185.26.239.98" AND destinationport=11076 OR destinationaddress="151.236.25.10" AND destinationport=7205 OR destinationaddress="37.235.53.217" AND destinationport=1358 OR destinationaddress="151.236.23.232" AND destinationport=763 OR destinationaddress="37.235.56.204" AND destinationport=24239 OR destinationaddress="162.252.175.122" AND destinationport=4126 OR destinationaddress="162.252.175.136" AND destinationport=11077)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="158.255.212.173" AND sourceport=10862 OR sourceaddress="151.236.25.126" AND sourceport=11331 OR sourceaddress="158.255.215.49" AND sourceport=23079 OR sourceaddress="185.26.239.98" AND sourceport=11076 OR sourceaddress="151.236.25.10" AND sourceport=7205 OR sourceaddress="37.235.53.217" AND sourceport=1358 OR sourceaddress="151.236.23.232" AND sourceport=763 OR sourceaddress="37.235.56.204" AND sourceport=24239 OR sourceaddress="162.252.175.122" AND sourceport=4126 OR sourceaddress="162.252.175.136" AND sourceport=11077)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="158.255.212.173" AND sourceport=10862 OR translatedipaddress="151.236.25.126" AND sourceport=11331 OR translatedipaddress="158.255.215.49" AND sourceport=23079 OR translatedipaddress="185.26.239.98" AND sourceport=11076 OR translatedipaddress="151.236.25.10" AND sourceport=7205 OR translatedipaddress="37.235.53.217" AND sourceport=1358 OR translatedipaddress="151.236.23.232" AND sourceport=763 OR translatedipaddress="37.235.56.204" AND sourceport=24239 OR translatedipaddress="162.252.175.122" AND sourceport=4126 OR translatedipaddress="162.252.175.136" AND sourceport=11077)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND destinationport=10862 OR destinationtranslatedaddress="151.236.25.126" AND destinationport=11331 OR destinationtranslatedaddress="158.255.215.49" AND destinationport=23079 OR destinationtranslatedaddress="185.26.239.98" AND destinationport=11076 OR destinationtranslatedaddress="151.236.25.10" AND destinationport=7205 OR destinationtranslatedaddress="37.235.53.217" AND destinationport=1358 OR destinationtranslatedaddress="151.236.23.232" AND destinationport=763 OR destinationtranslatedaddress="37.235.56.204" AND destinationport=24239 OR destinationtranslatedaddress="162.252.175.122" AND destinationport=4126 OR destinationtranslatedaddress="162.252.175.136" AND destinationport=11077)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND destinationtranslatedport=10862 OR destinationtranslatedaddress="151.236.25.126" AND destinationtranslatedport=11331 OR destinationtranslatedaddress="158.255.215.49" AND destinationtranslatedport=23079 OR destinationtranslatedaddress="185.26.239.98" AND destinationtranslatedport=11076 OR destinationtranslatedaddress="151.236.25.10" AND destinationtranslatedport=7205 OR destinationtranslatedaddress="37.235.53.217" AND destinationtranslatedport=1358 OR destinationtranslatedaddress="151.236.23.232" AND destinationtranslatedport=763 OR destinationtranslatedaddress="37.235.56.204" AND destinationtranslatedport=24239 OR destinationtranslatedaddress="162.252.175.122" AND destinationtranslatedport=4126 OR destinationtranslatedaddress="162.252.175.136" AND destinationtranslatedport=11077)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND translatedport=10862 OR destinationtranslatedaddress="151.236.25.126" AND translatedport=11331 OR destinationtranslatedaddress="158.255.215.49" AND translatedport=23079 OR destinationtranslatedaddress="185.26.239.98" AND translatedport=11076 OR destinationtranslatedaddress="151.236.25.10" AND translatedport=7205 OR destinationtranslatedaddress="37.235.53.217" AND translatedport=1358 OR destinationtranslatedaddress="151.236.23.232" AND translatedport=763 OR destinationtranslatedaddress="37.235.56.204" AND translatedport=24239 OR destinationtranslatedaddress="162.252.175.122" AND translatedport=4126 OR destinationtranslatedaddress="162.252.175.136" AND translatedport=11077)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="162.252.175.163" AND destinationport=28693 OR destinationaddress="162.252.175.90" AND destinationport=845 OR destinationaddress="162.252.175.109" AND destinationport=28330 OR destinationaddress="151.236.20.39" AND destinationport=5524 OR destinationaddress="158.255.208.140" AND destinationport=86 OR destinationaddress="194.68.27.149" AND destinationport=13106 OR destinationaddress="194.68.27.176" AND destinationport=6460 OR destinationaddress="37.143.128.223" AND destinationport=16223 OR destinationaddress="31.40.212.130" AND destinationport=7225 OR destinationaddress="198.244.207.203" AND destinationport=2076)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="162.252.175.163" AND sourceport=28693 OR sourceaddress="162.252.175.90" AND sourceport=845 OR sourceaddress="162.252.175.109" AND sourceport=28330 OR sourceaddress="151.236.20.39" AND sourceport=5524 OR sourceaddress="158.255.208.140" AND sourceport=86 OR sourceaddress="194.68.27.149" AND sourceport=13106 OR sourceaddress="194.68.27.176" AND sourceport=6460 OR sourceaddress="37.143.128.223" AND sourceport=16223 OR sourceaddress="31.40.212.130" AND sourceport=7225 OR sourceaddress="198.244.207.203" AND sourceport=2076)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="162.252.175.163" AND sourceport=28693 OR translatedipaddress="162.252.175.90" AND sourceport=845 OR translatedipaddress="162.252.175.109" AND sourceport=28330 OR translatedipaddress="151.236.20.39" AND sourceport=5524 OR translatedipaddress="158.255.208.140" AND sourceport=86 OR translatedipaddress="194.68.27.149" AND sourceport=13106 OR translatedipaddress="194.68.27.176" AND sourceport=6460 OR translatedipaddress="37.143.128.223" AND sourceport=16223 OR translatedipaddress="31.40.212.130" AND sourceport=7225 OR translatedipaddress="198.244.207.203" AND sourceport=2076)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND destinationport=28693 OR destinationtranslatedaddress="162.252.175.90" AND destinationport=845 OR destinationtranslatedaddress="162.252.175.109" AND destinationport=28330 OR destinationtranslatedaddress="151.236.20.39" AND destinationport=5524 OR destinationtranslatedaddress="158.255.208.140" AND destinationport=86 OR destinationtranslatedaddress="194.68.27.149" AND destinationport=13106 OR destinationtranslatedaddress="194.68.27.176" AND destinationport=6460 OR destinationtranslatedaddress="37.143.128.223" AND destinationport=16223 OR destinationtranslatedaddress="31.40.212.130" AND destinationport=7225 OR destinationtranslatedaddress="198.244.207.203" AND destinationport=2076)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND destinationtranslatedport=28693 OR destinationtranslatedaddress="162.252.175.90" AND destinationtranslatedport=845 OR destinationtranslatedaddress="162.252.175.109" AND destinationtranslatedport=28330 OR destinationtranslatedaddress="151.236.20.39" AND destinationtranslatedport=5524 OR destinationtranslatedaddress="158.255.208.140" AND destinationtranslatedport=86 OR destinationtranslatedaddress="194.68.27.149" AND destinationtranslatedport=13106 OR destinationtranslatedaddress="194.68.27.176" AND destinationtranslatedport=6460 OR destinationtranslatedaddress="37.143.128.223" AND destinationtranslatedport=16223 OR destinationtranslatedaddress="31.40.212.130" AND destinationtranslatedport=7225 OR destinationtranslatedaddress="198.244.207.203" AND destinationtranslatedport=2076)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND translatedport=28693 OR destinationtranslatedaddress="162.252.175.90" AND translatedport=845 OR destinationtranslatedaddress="162.252.175.109" AND translatedport=28330 OR destinationtranslatedaddress="151.236.20.39" AND translatedport=5524 OR destinationtranslatedaddress="158.255.208.140" AND translatedport=86 OR destinationtranslatedaddress="194.68.27.149" AND translatedport=13106 OR destinationtranslatedaddress="194.68.27.176" AND translatedport=6460 OR destinationtranslatedaddress="37.143.128.223" AND translatedport=16223 OR destinationtranslatedaddress="31.40.212.130" AND translatedport=7225 OR destinationtranslatedaddress="198.244.207.203" AND translatedport=2076)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="208.115.230.243" AND destinationport=16697 OR destinationaddress="185.126.239.207" AND destinationport=26630 OR destinationaddress="213.183.57.174" AND destinationport=12517 OR destinationaddress="213.183.57.72" AND destinationport=12517 OR destinationaddress="213.183.56.201" AND destinationport=12517 OR destinationaddress="95.164.45.27" AND destinationport=17426 OR destinationaddress="45.120.178.161" AND destinationport=11013 OR destinationaddress="176.120.74.3" AND destinationport=17268 OR destinationaddress="92.243.64.184" AND destinationport=17146 OR destinationaddress="92.243.64.36" AND destinationport=17146)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="208.115.230.243" AND sourceport=16697 OR sourceaddress="185.126.239.207" AND sourceport=26630 OR sourceaddress="213.183.57.174" AND sourceport=12517 OR sourceaddress="213.183.57.72" AND sourceport=12517 OR sourceaddress="213.183.56.201" AND sourceport=12517 OR sourceaddress="95.164.45.27" AND sourceport=17426 OR sourceaddress="45.120.178.161" AND sourceport=11013 OR sourceaddress="176.120.74.3" AND sourceport=17268 OR sourceaddress="92.243.64.184" AND sourceport=17146 OR sourceaddress="92.243.64.36" AND sourceport=17146)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="208.115.230.243" AND sourceport=16697 OR translatedipaddress="185.126.239.207" AND sourceport=26630 OR translatedipaddress="213.183.57.174" AND sourceport=12517 OR translatedipaddress="213.183.57.72" AND sourceport=12517 OR translatedipaddress="213.183.56.201" AND sourceport=12517 OR translatedipaddress="95.164.45.27" AND sourceport=17426 OR translatedipaddress="45.120.178.161" AND sourceport=11013 OR translatedipaddress="176.120.74.3" AND sourceport=17268 OR translatedipaddress="92.243.64.184" AND sourceport=17146 OR translatedipaddress="92.243.64.36" AND sourceport=17146)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND destinationport=16697 OR destinationtranslatedaddress="185.126.239.207" AND destinationport=26630 OR destinationtranslatedaddress="213.183.57.174" AND destinationport=12517 OR destinationtranslatedaddress="213.183.57.72" AND destinationport=12517 OR destinationtranslatedaddress="213.183.56.201" AND destinationport=12517 OR destinationtranslatedaddress="95.164.45.27" AND destinationport=17426 OR destinationtranslatedaddress="45.120.178.161" AND destinationport=11013 OR destinationtranslatedaddress="176.120.74.3" AND destinationport=17268 OR destinationtranslatedaddress="92.243.64.184" AND destinationport=17146 OR destinationtranslatedaddress="92.243.64.36" AND destinationport=17146)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND destinationtranslatedport=16697 OR destinationtranslatedaddress="185.126.239.207" AND destinationtranslatedport=26630 OR destinationtranslatedaddress="213.183.57.174" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="213.183.57.72" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="213.183.56.201" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="95.164.45.27" AND destinationtranslatedport=17426 OR destinationtranslatedaddress="45.120.178.161" AND destinationtranslatedport=11013 OR destinationtranslatedaddress="176.120.74.3" AND destinationtranslatedport=17268 OR destinationtranslatedaddress="92.243.64.184" AND destinationtranslatedport=17146 OR destinationtranslatedaddress="92.243.64.36" AND destinationtranslatedport=17146)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND translatedport=16697 OR destinationtranslatedaddress="185.126.239.207" AND translatedport=26630 OR destinationtranslatedaddress="213.183.57.174" AND translatedport=12517 OR destinationtranslatedaddress="213.183.57.72" AND translatedport=12517 OR destinationtranslatedaddress="213.183.56.201" AND translatedport=12517 OR destinationtranslatedaddress="95.164.45.27" AND translatedport=17426 OR destinationtranslatedaddress="45.120.178.161" AND translatedport=11013 OR destinationtranslatedaddress="176.120.74.3" AND translatedport=17268 OR destinationtranslatedaddress="92.243.64.184" AND translatedport=17146 OR destinationtranslatedaddress="92.243.64.36" AND translatedport=17146)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="89.31.120.126" AND destinationport=11578 OR destinationaddress="91.132.93.33" AND destinationport=11578 OR destinationaddress="91.132.95.28" AND destinationport=8773 OR destinationaddress="91.132.95.204" AND destinationport=8773 OR destinationaddress="91.132.95.135" AND destinationport=8773 OR destinationaddress="194.233.174.22" AND destinationport=45358)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="89.31.120.126" AND sourceport=11578 OR sourceaddress="91.132.93.33" AND sourceport=11578 OR sourceaddress="91.132.95.28" AND sourceport=8773 OR sourceaddress="91.132.95.204" AND sourceport=8773 OR sourceaddress="91.132.95.135" AND sourceport=8773 OR sourceaddress="194.233.174.22" AND sourceport=45358)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="89.31.120.126" AND sourceport=11578 OR translatedipaddress="91.132.93.33" AND sourceport=11578 OR translatedipaddress="91.132.95.28" AND sourceport=8773 OR translatedipaddress="91.132.95.204" AND sourceport=8773 OR translatedipaddress="91.132.95.135" AND sourceport=8773 OR translatedipaddress="194.233.174.22" AND sourceport=45358)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND destinationport=11578 OR destinationtranslatedaddress="91.132.93.33" AND destinationport=11578 OR destinationtranslatedaddress="91.132.95.28" AND destinationport=8773 OR destinationtranslatedaddress="91.132.95.204" AND destinationport=8773 OR destinationtranslatedaddress="91.132.95.135" AND destinationport=8773 OR destinationtranslatedaddress="194.233.174.22" AND destinationport=45358)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND destinationtranslatedport=11578 OR destinationtranslatedaddress="91.132.93.33" AND destinationtranslatedport=11578 OR destinationtranslatedaddress="91.132.95.28" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="91.132.95.204" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="91.132.95.135" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="194.233.174.22" AND destinationtranslatedport=45358)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND translatedport=11578 OR destinationtranslatedaddress="91.132.93.33" AND translatedport=11578 OR destinationtranslatedaddress="91.132.95.28" AND translatedport=8773 OR destinationtranslatedaddress="91.132.95.204" AND translatedport=8773 OR destinationtranslatedaddress="91.132.95.135" AND translatedport=8773 OR destinationtranslatedaddress="194.233.174.22" AND translatedport=45358)
index=activity AND rg_functionality="Cloud Application Audit" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="158.255.212.173" AND destinationport=10862 OR destinationaddress="151.236.25.126" AND destinationport=11331 OR destinationaddress="158.255.215.49" AND destinationport=23079 OR destinationaddress="185.26.239.98" AND destinationport=11076 OR destinationaddress="151.236.25.10" AND destinationport=7205 OR destinationaddress="37.235.53.217" AND destinationport=1358 OR destinationaddress="151.236.23.232" AND destinationport=763 OR destinationaddress="37.235.56.204" AND destinationport=24239 OR destinationaddress="162.252.175.122" AND destinationport=4126 OR destinationaddress="162.252.175.136" AND destinationport=11077)
index=activity AND rg_functionality="Cloud Application Audit" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="158.255.212.173" AND sourceport=10862 OR sourceaddress="151.236.25.126" AND sourceport=11331 OR sourceaddress="158.255.215.49" AND sourceport=23079 OR sourceaddress="185.26.239.98" AND sourceport=11076 OR sourceaddress="151.236.25.10" AND sourceport=7205 OR sourceaddress="37.235.53.217" AND sourceport=1358 OR sourceaddress="151.236.23.232" AND sourceport=763 OR sourceaddress="37.235.56.204" AND sourceport=24239 OR sourceaddress="162.252.175.122" AND sourceport=4126 OR sourceaddress="162.252.175.136" AND sourceport=11077)
index=activity AND rg_functionality="Cloud Application Audit" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="158.255.212.173" AND sourceport=10862 OR translatedipaddress="151.236.25.126" AND sourceport=11331 OR translatedipaddress="158.255.215.49" AND sourceport=23079 OR translatedipaddress="185.26.239.98" AND sourceport=11076 OR translatedipaddress="151.236.25.10" AND sourceport=7205 OR translatedipaddress="37.235.53.217" AND sourceport=1358 OR translatedipaddress="151.236.23.232" AND sourceport=763 OR translatedipaddress="37.235.56.204" AND sourceport=24239 OR translatedipaddress="162.252.175.122" AND sourceport=4126 OR translatedipaddress="162.252.175.136" AND sourceport=11077)
index=activity AND rg_functionality="Cloud Application Audit" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND destinationport=10862 OR destinationtranslatedaddress="151.236.25.126" AND destinationport=11331 OR destinationtranslatedaddress="158.255.215.49" AND destinationport=23079 OR destinationtranslatedaddress="185.26.239.98" AND destinationport=11076 OR destinationtranslatedaddress="151.236.25.10" AND destinationport=7205 OR destinationtranslatedaddress="37.235.53.217" AND destinationport=1358 OR destinationtranslatedaddress="151.236.23.232" AND destinationport=763 OR destinationtranslatedaddress="37.235.56.204" AND destinationport=24239 OR destinationtranslatedaddress="162.252.175.122" AND destinationport=4126 OR destinationtranslatedaddress="162.252.175.136" AND destinationport=11077)
index=activity AND rg_functionality="Cloud Application Audit" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND destinationtranslatedport=10862 OR destinationtranslatedaddress="151.236.25.126" AND destinationtranslatedport=11331 OR destinationtranslatedaddress="158.255.215.49" AND destinationtranslatedport=23079 OR destinationtranslatedaddress="185.26.239.98" AND destinationtranslatedport=11076 OR destinationtranslatedaddress="151.236.25.10" AND destinationtranslatedport=7205 OR destinationtranslatedaddress="37.235.53.217" AND destinationtranslatedport=1358 OR destinationtranslatedaddress="151.236.23.232" AND destinationtranslatedport=763 OR destinationtranslatedaddress="37.235.56.204" AND destinationtranslatedport=24239 OR destinationtranslatedaddress="162.252.175.122" AND destinationtranslatedport=4126 OR destinationtranslatedaddress="162.252.175.136" AND destinationtranslatedport=11077)
index=activity AND rg_functionality="Cloud Application Audit" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND translatedport=10862 OR destinationtranslatedaddress="151.236.25.126" AND translatedport=11331 OR destinationtranslatedaddress="158.255.215.49" AND translatedport=23079 OR destinationtranslatedaddress="185.26.239.98" AND translatedport=11076 OR destinationtranslatedaddress="151.236.25.10" AND translatedport=7205 OR destinationtranslatedaddress="37.235.53.217" AND translatedport=1358 OR destinationtranslatedaddress="151.236.23.232" AND translatedport=763 OR destinationtranslatedaddress="37.235.56.204" AND translatedport=24239 OR destinationtranslatedaddress="162.252.175.122" AND translatedport=4126 OR destinationtranslatedaddress="162.252.175.136" AND translatedport=11077)
index=activity AND rg_functionality="Cloud Application Audit" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="162.252.175.163" AND destinationport=28693 OR destinationaddress="162.252.175.90" AND destinationport=845 OR destinationaddress="162.252.175.109" AND destinationport=28330 OR destinationaddress="151.236.20.39" AND destinationport=5524 OR destinationaddress="158.255.208.140" AND destinationport=86 OR destinationaddress="194.68.27.149" AND destinationport=13106 OR destinationaddress="194.68.27.176" AND destinationport=6460 OR destinationaddress="37.143.128.223" AND destinationport=16223 OR destinationaddress="31.40.212.130" AND destinationport=7225 OR destinationaddress="198.244.207.203" AND destinationport=2076)
index=activity AND rg_functionality="Cloud Application Audit" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="162.252.175.163" AND sourceport=28693 OR sourceaddress="162.252.175.90" AND sourceport=845 OR sourceaddress="162.252.175.109" AND sourceport=28330 OR sourceaddress="151.236.20.39" AND sourceport=5524 OR sourceaddress="158.255.208.140" AND sourceport=86 OR sourceaddress="194.68.27.149" AND sourceport=13106 OR sourceaddress="194.68.27.176" AND sourceport=6460 OR sourceaddress="37.143.128.223" AND sourceport=16223 OR sourceaddress="31.40.212.130" AND sourceport=7225 OR sourceaddress="198.244.207.203" AND sourceport=2076)
index=activity AND rg_functionality="Cloud Application Audit" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="162.252.175.163" AND sourceport=28693 OR translatedipaddress="162.252.175.90" AND sourceport=845 OR translatedipaddress="162.252.175.109" AND sourceport=28330 OR translatedipaddress="151.236.20.39" AND sourceport=5524 OR translatedipaddress="158.255.208.140" AND sourceport=86 OR translatedipaddress="194.68.27.149" AND sourceport=13106 OR translatedipaddress="194.68.27.176" AND sourceport=6460 OR translatedipaddress="37.143.128.223" AND sourceport=16223 OR translatedipaddress="31.40.212.130" AND sourceport=7225 OR translatedipaddress="198.244.207.203" AND sourceport=2076)
index=activity AND rg_functionality="Cloud Application Audit" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND destinationport=28693 OR destinationtranslatedaddress="162.252.175.90" AND destinationport=845 OR destinationtranslatedaddress="162.252.175.109" AND destinationport=28330 OR destinationtranslatedaddress="151.236.20.39" AND destinationport=5524 OR destinationtranslatedaddress="158.255.208.140" AND destinationport=86 OR destinationtranslatedaddress="194.68.27.149" AND destinationport=13106 OR destinationtranslatedaddress="194.68.27.176" AND destinationport=6460 OR destinationtranslatedaddress="37.143.128.223" AND destinationport=16223 OR destinationtranslatedaddress="31.40.212.130" AND destinationport=7225 OR destinationtranslatedaddress="198.244.207.203" AND destinationport=2076)
index=activity AND rg_functionality="Cloud Application Audit" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND destinationtranslatedport=28693 OR destinationtranslatedaddress="162.252.175.90" AND destinationtranslatedport=845 OR destinationtranslatedaddress="162.252.175.109" AND destinationtranslatedport=28330 OR destinationtranslatedaddress="151.236.20.39" AND destinationtranslatedport=5524 OR destinationtranslatedaddress="158.255.208.140" AND destinationtranslatedport=86 OR destinationtranslatedaddress="194.68.27.149" AND destinationtranslatedport=13106 OR destinationtranslatedaddress="194.68.27.176" AND destinationtranslatedport=6460 OR destinationtranslatedaddress="37.143.128.223" AND destinationtranslatedport=16223 OR destinationtranslatedaddress="31.40.212.130" AND destinationtranslatedport=7225 OR destinationtranslatedaddress="198.244.207.203" AND destinationtranslatedport=2076)
index=activity AND rg_functionality="Cloud Application Audit" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND translatedport=28693 OR destinationtranslatedaddress="162.252.175.90" AND translatedport=845 OR destinationtranslatedaddress="162.252.175.109" AND translatedport=28330 OR destinationtranslatedaddress="151.236.20.39" AND translatedport=5524 OR destinationtranslatedaddress="158.255.208.140" AND translatedport=86 OR destinationtranslatedaddress="194.68.27.149" AND translatedport=13106 OR destinationtranslatedaddress="194.68.27.176" AND translatedport=6460 OR destinationtranslatedaddress="37.143.128.223" AND translatedport=16223 OR destinationtranslatedaddress="31.40.212.130" AND translatedport=7225 OR destinationtranslatedaddress="198.244.207.203" AND translatedport=2076)
index=activity AND rg_functionality="Cloud Application Audit" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="208.115.230.243" AND destinationport=16697 OR destinationaddress="185.126.239.207" AND destinationport=26630 OR destinationaddress="213.183.57.174" AND destinationport=12517 OR destinationaddress="213.183.57.72" AND destinationport=12517 OR destinationaddress="213.183.56.201" AND destinationport=12517 OR destinationaddress="95.164.45.27" AND destinationport=17426 OR destinationaddress="45.120.178.161" AND destinationport=11013 OR destinationaddress="176.120.74.3" AND destinationport=17268 OR destinationaddress="92.243.64.184" AND destinationport=17146 OR destinationaddress="92.243.64.36" AND destinationport=17146)
index=activity AND rg_functionality="Cloud Application Audit" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="208.115.230.243" AND sourceport=16697 OR sourceaddress="185.126.239.207" AND sourceport=26630 OR sourceaddress="213.183.57.174" AND sourceport=12517 OR sourceaddress="213.183.57.72" AND sourceport=12517 OR sourceaddress="213.183.56.201" AND sourceport=12517 OR sourceaddress="95.164.45.27" AND sourceport=17426 OR sourceaddress="45.120.178.161" AND sourceport=11013 OR sourceaddress="176.120.74.3" AND sourceport=17268 OR sourceaddress="92.243.64.184" AND sourceport=17146 OR sourceaddress="92.243.64.36" AND sourceport=17146)
index=activity AND rg_functionality="Cloud Application Audit" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="208.115.230.243" AND sourceport=16697 OR translatedipaddress="185.126.239.207" AND sourceport=26630 OR translatedipaddress="213.183.57.174" AND sourceport=12517 OR translatedipaddress="213.183.57.72" AND sourceport=12517 OR translatedipaddress="213.183.56.201" AND sourceport=12517 OR translatedipaddress="95.164.45.27" AND sourceport=17426 OR translatedipaddress="45.120.178.161" AND sourceport=11013 OR translatedipaddress="176.120.74.3" AND sourceport=17268 OR translatedipaddress="92.243.64.184" AND sourceport=17146 OR translatedipaddress="92.243.64.36" AND sourceport=17146)
index=activity AND rg_functionality="Cloud Application Audit" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND destinationport=16697 OR destinationtranslatedaddress="185.126.239.207" AND destinationport=26630 OR destinationtranslatedaddress="213.183.57.174" AND destinationport=12517 OR destinationtranslatedaddress="213.183.57.72" AND destinationport=12517 OR destinationtranslatedaddress="213.183.56.201" AND destinationport=12517 OR destinationtranslatedaddress="95.164.45.27" AND destinationport=17426 OR destinationtranslatedaddress="45.120.178.161" AND destinationport=11013 OR destinationtranslatedaddress="176.120.74.3" AND destinationport=17268 OR destinationtranslatedaddress="92.243.64.184" AND destinationport=17146 OR destinationtranslatedaddress="92.243.64.36" AND destinationport=17146)
index=activity AND rg_functionality="Cloud Application Audit" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND destinationtranslatedport=16697 OR destinationtranslatedaddress="185.126.239.207" AND destinationtranslatedport=26630 OR destinationtranslatedaddress="213.183.57.174" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="213.183.57.72" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="213.183.56.201" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="95.164.45.27" AND destinationtranslatedport=17426 OR destinationtranslatedaddress="45.120.178.161" AND destinationtranslatedport=11013 OR destinationtranslatedaddress="176.120.74.3" AND destinationtranslatedport=17268 OR destinationtranslatedaddress="92.243.64.184" AND destinationtranslatedport=17146 OR destinationtranslatedaddress="92.243.64.36" AND destinationtranslatedport=17146)
index=activity AND rg_functionality="Cloud Application Audit" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND translatedport=16697 OR destinationtranslatedaddress="185.126.239.207" AND translatedport=26630 OR destinationtranslatedaddress="213.183.57.174" AND translatedport=12517 OR destinationtranslatedaddress="213.183.57.72" AND translatedport=12517 OR destinationtranslatedaddress="213.183.56.201" AND translatedport=12517 OR destinationtranslatedaddress="95.164.45.27" AND translatedport=17426 OR destinationtranslatedaddress="45.120.178.161" AND translatedport=11013 OR destinationtranslatedaddress="176.120.74.3" AND translatedport=17268 OR destinationtranslatedaddress="92.243.64.184" AND translatedport=17146 OR destinationtranslatedaddress="92.243.64.36" AND translatedport=17146)
index=activity AND rg_functionality="Cloud Application Audit" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="89.31.120.126" AND destinationport=11578 OR destinationaddress="91.132.93.33" AND destinationport=11578 OR destinationaddress="91.132.95.28" AND destinationport=8773 OR destinationaddress="91.132.95.204" AND destinationport=8773 OR destinationaddress="91.132.95.135" AND destinationport=8773 OR destinationaddress="194.233.174.22" AND destinationport=45358)
index=activity AND rg_functionality="Cloud Application Audit" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="89.31.120.126" AND sourceport=11578 OR sourceaddress="91.132.93.33" AND sourceport=11578 OR sourceaddress="91.132.95.28" AND sourceport=8773 OR sourceaddress="91.132.95.204" AND sourceport=8773 OR sourceaddress="91.132.95.135" AND sourceport=8773 OR sourceaddress="194.233.174.22" AND sourceport=45358)
index=activity AND rg_functionality="Cloud Application Audit" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="89.31.120.126" AND sourceport=11578 OR translatedipaddress="91.132.93.33" AND sourceport=11578 OR translatedipaddress="91.132.95.28" AND sourceport=8773 OR translatedipaddress="91.132.95.204" AND sourceport=8773 OR translatedipaddress="91.132.95.135" AND sourceport=8773 OR translatedipaddress="194.233.174.22" AND sourceport=45358)
index=activity AND rg_functionality="Cloud Application Audit" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND destinationport=11578 OR destinationtranslatedaddress="91.132.93.33" AND destinationport=11578 OR destinationtranslatedaddress="91.132.95.28" AND destinationport=8773 OR destinationtranslatedaddress="91.132.95.204" AND destinationport=8773 OR destinationtranslatedaddress="91.132.95.135" AND destinationport=8773 OR destinationtranslatedaddress="194.233.174.22" AND destinationport=45358)
index=activity AND rg_functionality="Cloud Application Audit" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND destinationtranslatedport=11578 OR destinationtranslatedaddress="91.132.93.33" AND destinationtranslatedport=11578 OR destinationtranslatedaddress="91.132.95.28" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="91.132.95.204" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="91.132.95.135" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="194.233.174.22" AND destinationtranslatedport=45358)
index=activity AND rg_functionality="Cloud Application Audit" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND translatedport=11578 OR destinationtranslatedaddress="91.132.93.33" AND translatedport=11578 OR destinationtranslatedaddress="91.132.95.28" AND translatedport=8773 OR destinationtranslatedaddress="91.132.95.204" AND translatedport=8773 OR destinationtranslatedaddress="91.132.95.135" AND translatedport=8773 OR destinationtranslatedaddress="194.233.174.22" AND translatedport=45358)
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="158.255.212.173" AND destinationport=10862 OR destinationaddress="151.236.25.126" AND destinationport=11331 OR destinationaddress="158.255.215.49" AND destinationport=23079 OR destinationaddress="185.26.239.98" AND destinationport=11076 OR destinationaddress="151.236.25.10" AND destinationport=7205 OR destinationaddress="37.235.53.217" AND destinationport=1358 OR destinationaddress="151.236.23.232" AND destinationport=763 OR destinationaddress="37.235.56.204" AND destinationport=24239 OR destinationaddress="162.252.175.122" AND destinationport=4126 OR destinationaddress="162.252.175.136" AND destinationport=11077)
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="158.255.212.173" AND sourceport=10862 OR sourceaddress="151.236.25.126" AND sourceport=11331 OR sourceaddress="158.255.215.49" AND sourceport=23079 OR sourceaddress="185.26.239.98" AND sourceport=11076 OR sourceaddress="151.236.25.10" AND sourceport=7205 OR sourceaddress="37.235.53.217" AND sourceport=1358 OR sourceaddress="151.236.23.232" AND sourceport=763 OR sourceaddress="37.235.56.204" AND sourceport=24239 OR sourceaddress="162.252.175.122" AND sourceport=4126 OR sourceaddress="162.252.175.136" AND sourceport=11077)
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="158.255.212.173" AND sourceport=10862 OR translatedipaddress="151.236.25.126" AND sourceport=11331 OR translatedipaddress="158.255.215.49" AND sourceport=23079 OR translatedipaddress="185.26.239.98" AND sourceport=11076 OR translatedipaddress="151.236.25.10" AND sourceport=7205 OR translatedipaddress="37.235.53.217" AND sourceport=1358 OR translatedipaddress="151.236.23.232" AND sourceport=763 OR translatedipaddress="37.235.56.204" AND sourceport=24239 OR translatedipaddress="162.252.175.122" AND sourceport=4126 OR translatedipaddress="162.252.175.136" AND sourceport=11077)
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND destinationport=10862 OR destinationtranslatedaddress="151.236.25.126" AND destinationport=11331 OR destinationtranslatedaddress="158.255.215.49" AND destinationport=23079 OR destinationtranslatedaddress="185.26.239.98" AND destinationport=11076 OR destinationtranslatedaddress="151.236.25.10" AND destinationport=7205 OR destinationtranslatedaddress="37.235.53.217" AND destinationport=1358 OR destinationtranslatedaddress="151.236.23.232" AND destinationport=763 OR destinationtranslatedaddress="37.235.56.204" AND destinationport=24239 OR destinationtranslatedaddress="162.252.175.122" AND destinationport=4126 OR destinationtranslatedaddress="162.252.175.136" AND destinationport=11077)
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND destinationtranslatedport=10862 OR destinationtranslatedaddress="151.236.25.126" AND destinationtranslatedport=11331 OR destinationtranslatedaddress="158.255.215.49" AND destinationtranslatedport=23079 OR destinationtranslatedaddress="185.26.239.98" AND destinationtranslatedport=11076 OR destinationtranslatedaddress="151.236.25.10" AND destinationtranslatedport=7205 OR destinationtranslatedaddress="37.235.53.217" AND destinationtranslatedport=1358 OR destinationtranslatedaddress="151.236.23.232" AND destinationtranslatedport=763 OR destinationtranslatedaddress="37.235.56.204" AND destinationtranslatedport=24239 OR destinationtranslatedaddress="162.252.175.122" AND destinationtranslatedport=4126 OR destinationtranslatedaddress="162.252.175.136" AND destinationtranslatedport=11077)
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND translatedport=10862 OR destinationtranslatedaddress="151.236.25.126" AND translatedport=11331 OR destinationtranslatedaddress="158.255.215.49" AND translatedport=23079 OR destinationtranslatedaddress="185.26.239.98" AND translatedport=11076 OR destinationtranslatedaddress="151.236.25.10" AND translatedport=7205 OR destinationtranslatedaddress="37.235.53.217" AND translatedport=1358 OR destinationtranslatedaddress="151.236.23.232" AND translatedport=763 OR destinationtranslatedaddress="37.235.56.204" AND translatedport=24239 OR destinationtranslatedaddress="162.252.175.122" AND translatedport=4126 OR destinationtranslatedaddress="162.252.175.136" AND translatedport=11077)
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="162.252.175.163" AND destinationport=28693 OR destinationaddress="162.252.175.90" AND destinationport=845 OR destinationaddress="162.252.175.109" AND destinationport=28330 OR destinationaddress="151.236.20.39" AND destinationport=5524 OR destinationaddress="158.255.208.140" AND destinationport=86 OR destinationaddress="194.68.27.149" AND destinationport=13106 OR destinationaddress="194.68.27.176" AND destinationport=6460 OR destinationaddress="37.143.128.223" AND destinationport=16223 OR destinationaddress="31.40.212.130" AND destinationport=7225 OR destinationaddress="198.244.207.203" AND destinationport=2076)
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="162.252.175.163" AND sourceport=28693 OR sourceaddress="162.252.175.90" AND sourceport=845 OR sourceaddress="162.252.175.109" AND sourceport=28330 OR sourceaddress="151.236.20.39" AND sourceport=5524 OR sourceaddress="158.255.208.140" AND sourceport=86 OR sourceaddress="194.68.27.149" AND sourceport=13106 OR sourceaddress="194.68.27.176" AND sourceport=6460 OR sourceaddress="37.143.128.223" AND sourceport=16223 OR sourceaddress="31.40.212.130" AND sourceport=7225 OR sourceaddress="198.244.207.203" AND sourceport=2076)
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="162.252.175.163" AND sourceport=28693 OR translatedipaddress="162.252.175.90" AND sourceport=845 OR translatedipaddress="162.252.175.109" AND sourceport=28330 OR translatedipaddress="151.236.20.39" AND sourceport=5524 OR translatedipaddress="158.255.208.140" AND sourceport=86 OR translatedipaddress="194.68.27.149" AND sourceport=13106 OR translatedipaddress="194.68.27.176" AND sourceport=6460 OR translatedipaddress="37.143.128.223" AND sourceport=16223 OR translatedipaddress="31.40.212.130" AND sourceport=7225 OR translatedipaddress="198.244.207.203" AND sourceport=2076)
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND destinationport=28693 OR destinationtranslatedaddress="162.252.175.90" AND destinationport=845 OR destinationtranslatedaddress="162.252.175.109" AND destinationport=28330 OR destinationtranslatedaddress="151.236.20.39" AND destinationport=5524 OR destinationtranslatedaddress="158.255.208.140" AND destinationport=86 OR destinationtranslatedaddress="194.68.27.149" AND destinationport=13106 OR destinationtranslatedaddress="194.68.27.176" AND destinationport=6460 OR destinationtranslatedaddress="37.143.128.223" AND destinationport=16223 OR destinationtranslatedaddress="31.40.212.130" AND destinationport=7225 OR destinationtranslatedaddress="198.244.207.203" AND destinationport=2076)
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND destinationtranslatedport=28693 OR destinationtranslatedaddress="162.252.175.90" AND destinationtranslatedport=845 OR destinationtranslatedaddress="162.252.175.109" AND destinationtranslatedport=28330 OR destinationtranslatedaddress="151.236.20.39" AND destinationtranslatedport=5524 OR destinationtranslatedaddress="158.255.208.140" AND destinationtranslatedport=86 OR destinationtranslatedaddress="194.68.27.149" AND destinationtranslatedport=13106 OR destinationtranslatedaddress="194.68.27.176" AND destinationtranslatedport=6460 OR destinationtranslatedaddress="37.143.128.223" AND destinationtranslatedport=16223 OR destinationtranslatedaddress="31.40.212.130" AND destinationtranslatedport=7225 OR destinationtranslatedaddress="198.244.207.203" AND destinationtranslatedport=2076)
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND translatedport=28693 OR destinationtranslatedaddress="162.252.175.90" AND translatedport=845 OR destinationtranslatedaddress="162.252.175.109" AND translatedport=28330 OR destinationtranslatedaddress="151.236.20.39" AND translatedport=5524 OR destinationtranslatedaddress="158.255.208.140" AND translatedport=86 OR destinationtranslatedaddress="194.68.27.149" AND translatedport=13106 OR destinationtranslatedaddress="194.68.27.176" AND translatedport=6460 OR destinationtranslatedaddress="37.143.128.223" AND translatedport=16223 OR destinationtranslatedaddress="31.40.212.130" AND translatedport=7225 OR destinationtranslatedaddress="198.244.207.203" AND translatedport=2076)
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="208.115.230.243" AND destinationport=16697 OR destinationaddress="185.126.239.207" AND destinationport=26630 OR destinationaddress="213.183.57.174" AND destinationport=12517 OR destinationaddress="213.183.57.72" AND destinationport=12517 OR destinationaddress="213.183.56.201" AND destinationport=12517 OR destinationaddress="95.164.45.27" AND destinationport=17426 OR destinationaddress="45.120.178.161" AND destinationport=11013 OR destinationaddress="176.120.74.3" AND destinationport=17268 OR destinationaddress="92.243.64.184" AND destinationport=17146 OR destinationaddress="92.243.64.36" AND destinationport=17146)
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="208.115.230.243" AND sourceport=16697 OR sourceaddress="185.126.239.207" AND sourceport=26630 OR sourceaddress="213.183.57.174" AND sourceport=12517 OR sourceaddress="213.183.57.72" AND sourceport=12517 OR sourceaddress="213.183.56.201" AND sourceport=12517 OR sourceaddress="95.164.45.27" AND sourceport=17426 OR sourceaddress="45.120.178.161" AND sourceport=11013 OR sourceaddress="176.120.74.3" AND sourceport=17268 OR sourceaddress="92.243.64.184" AND sourceport=17146 OR sourceaddress="92.243.64.36" AND sourceport=17146)
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="208.115.230.243" AND sourceport=16697 OR translatedipaddress="185.126.239.207" AND sourceport=26630 OR translatedipaddress="213.183.57.174" AND sourceport=12517 OR translatedipaddress="213.183.57.72" AND sourceport=12517 OR translatedipaddress="213.183.56.201" AND sourceport=12517 OR translatedipaddress="95.164.45.27" AND sourceport=17426 OR translatedipaddress="45.120.178.161" AND sourceport=11013 OR translatedipaddress="176.120.74.3" AND sourceport=17268 OR translatedipaddress="92.243.64.184" AND sourceport=17146 OR translatedipaddress="92.243.64.36" AND sourceport=17146)
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND destinationport=16697 OR destinationtranslatedaddress="185.126.239.207" AND destinationport=26630 OR destinationtranslatedaddress="213.183.57.174" AND destinationport=12517 OR destinationtranslatedaddress="213.183.57.72" AND destinationport=12517 OR destinationtranslatedaddress="213.183.56.201" AND destinationport=12517 OR destinationtranslatedaddress="95.164.45.27" AND destinationport=17426 OR destinationtranslatedaddress="45.120.178.161" AND destinationport=11013 OR destinationtranslatedaddress="176.120.74.3" AND destinationport=17268 OR destinationtranslatedaddress="92.243.64.184" AND destinationport=17146 OR destinationtranslatedaddress="92.243.64.36" AND destinationport=17146)
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND destinationtranslatedport=16697 OR destinationtranslatedaddress="185.126.239.207" AND destinationtranslatedport=26630 OR destinationtranslatedaddress="213.183.57.174" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="213.183.57.72" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="213.183.56.201" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="95.164.45.27" AND destinationtranslatedport=17426 OR destinationtranslatedaddress="45.120.178.161" AND destinationtranslatedport=11013 OR destinationtranslatedaddress="176.120.74.3" AND destinationtranslatedport=17268 OR destinationtranslatedaddress="92.243.64.184" AND destinationtranslatedport=17146 OR destinationtranslatedaddress="92.243.64.36" AND destinationtranslatedport=17146)
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND translatedport=16697 OR destinationtranslatedaddress="185.126.239.207" AND translatedport=26630 OR destinationtranslatedaddress="213.183.57.174" AND translatedport=12517 OR destinationtranslatedaddress="213.183.57.72" AND translatedport=12517 OR destinationtranslatedaddress="213.183.56.201" AND translatedport=12517 OR destinationtranslatedaddress="95.164.45.27" AND translatedport=17426 OR destinationtranslatedaddress="45.120.178.161" AND translatedport=11013 OR destinationtranslatedaddress="176.120.74.3" AND translatedport=17268 OR destinationtranslatedaddress="92.243.64.184" AND translatedport=17146 OR destinationtranslatedaddress="92.243.64.36" AND translatedport=17146)
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="89.31.120.126" AND destinationport=11578 OR destinationaddress="91.132.93.33" AND destinationport=11578 OR destinationaddress="91.132.95.28" AND destinationport=8773 OR destinationaddress="91.132.95.204" AND destinationport=8773 OR destinationaddress="91.132.95.135" AND destinationport=8773 OR destinationaddress="194.233.174.22" AND destinationport=45358)
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="89.31.120.126" AND sourceport=11578 OR sourceaddress="91.132.93.33" AND sourceport=11578 OR sourceaddress="91.132.95.28" AND sourceport=8773 OR sourceaddress="91.132.95.204" AND sourceport=8773 OR sourceaddress="91.132.95.135" AND sourceport=8773 OR sourceaddress="194.233.174.22" AND sourceport=45358)
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="89.31.120.126" AND sourceport=11578 OR translatedipaddress="91.132.93.33" AND sourceport=11578 OR translatedipaddress="91.132.95.28" AND sourceport=8773 OR translatedipaddress="91.132.95.204" AND sourceport=8773 OR translatedipaddress="91.132.95.135" AND sourceport=8773 OR translatedipaddress="194.233.174.22" AND sourceport=45358)
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND destinationport=11578 OR destinationtranslatedaddress="91.132.93.33" AND destinationport=11578 OR destinationtranslatedaddress="91.132.95.28" AND destinationport=8773 OR destinationtranslatedaddress="91.132.95.204" AND destinationport=8773 OR destinationtranslatedaddress="91.132.95.135" AND destinationport=8773 OR destinationtranslatedaddress="194.233.174.22" AND destinationport=45358)
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND destinationtranslatedport=11578 OR destinationtranslatedaddress="91.132.93.33" AND destinationtranslatedport=11578 OR destinationtranslatedaddress="91.132.95.28" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="91.132.95.204" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="91.132.95.135" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="194.233.174.22" AND destinationtranslatedport=45358)
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND translatedport=11578 OR destinationtranslatedaddress="91.132.93.33" AND translatedport=11578 OR destinationtranslatedaddress="91.132.95.28" AND translatedport=8773 OR destinationtranslatedaddress="91.132.95.204" AND translatedport=8773 OR destinationtranslatedaddress="91.132.95.135" AND translatedport=8773 OR destinationtranslatedaddress="194.233.174.22" AND translatedport=45358)
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="158.255.212.173" AND destinationport=10862 OR destinationaddress="151.236.25.126" AND destinationport=11331 OR destinationaddress="158.255.215.49" AND destinationport=23079 OR destinationaddress="185.26.239.98" AND destinationport=11076 OR destinationaddress="151.236.25.10" AND destinationport=7205 OR destinationaddress="37.235.53.217" AND destinationport=1358 OR destinationaddress="151.236.23.232" AND destinationport=763 OR destinationaddress="37.235.56.204" AND destinationport=24239 OR destinationaddress="162.252.175.122" AND destinationport=4126 OR destinationaddress="162.252.175.136" AND destinationport=11077)
index=activity AND rg_functionality="Unix / Linux / AIX" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="158.255.212.173" AND sourceport=10862 OR sourceaddress="151.236.25.126" AND sourceport=11331 OR sourceaddress="158.255.215.49" AND sourceport=23079 OR sourceaddress="185.26.239.98" AND sourceport=11076 OR sourceaddress="151.236.25.10" AND sourceport=7205 OR sourceaddress="37.235.53.217" AND sourceport=1358 OR sourceaddress="151.236.23.232" AND sourceport=763 OR sourceaddress="37.235.56.204" AND sourceport=24239 OR sourceaddress="162.252.175.122" AND sourceport=4126 OR sourceaddress="162.252.175.136" AND sourceport=11077)
index=activity AND rg_functionality="Unix / Linux / AIX" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="158.255.212.173" AND sourceport=10862 OR translatedipaddress="151.236.25.126" AND sourceport=11331 OR translatedipaddress="158.255.215.49" AND sourceport=23079 OR translatedipaddress="185.26.239.98" AND sourceport=11076 OR translatedipaddress="151.236.25.10" AND sourceport=7205 OR translatedipaddress="37.235.53.217" AND sourceport=1358 OR translatedipaddress="151.236.23.232" AND sourceport=763 OR translatedipaddress="37.235.56.204" AND sourceport=24239 OR translatedipaddress="162.252.175.122" AND sourceport=4126 OR translatedipaddress="162.252.175.136" AND sourceport=11077)
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND destinationport=10862 OR destinationtranslatedaddress="151.236.25.126" AND destinationport=11331 OR destinationtranslatedaddress="158.255.215.49" AND destinationport=23079 OR destinationtranslatedaddress="185.26.239.98" AND destinationport=11076 OR destinationtranslatedaddress="151.236.25.10" AND destinationport=7205 OR destinationtranslatedaddress="37.235.53.217" AND destinationport=1358 OR destinationtranslatedaddress="151.236.23.232" AND destinationport=763 OR destinationtranslatedaddress="37.235.56.204" AND destinationport=24239 OR destinationtranslatedaddress="162.252.175.122" AND destinationport=4126 OR destinationtranslatedaddress="162.252.175.136" AND destinationport=11077)
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND destinationtranslatedport=10862 OR destinationtranslatedaddress="151.236.25.126" AND destinationtranslatedport=11331 OR destinationtranslatedaddress="158.255.215.49" AND destinationtranslatedport=23079 OR destinationtranslatedaddress="185.26.239.98" AND destinationtranslatedport=11076 OR destinationtranslatedaddress="151.236.25.10" AND destinationtranslatedport=7205 OR destinationtranslatedaddress="37.235.53.217" AND destinationtranslatedport=1358 OR destinationtranslatedaddress="151.236.23.232" AND destinationtranslatedport=763 OR destinationtranslatedaddress="37.235.56.204" AND destinationtranslatedport=24239 OR destinationtranslatedaddress="162.252.175.122" AND destinationtranslatedport=4126 OR destinationtranslatedaddress="162.252.175.136" AND destinationtranslatedport=11077)
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND translatedport=10862 OR destinationtranslatedaddress="151.236.25.126" AND translatedport=11331 OR destinationtranslatedaddress="158.255.215.49" AND translatedport=23079 OR destinationtranslatedaddress="185.26.239.98" AND translatedport=11076 OR destinationtranslatedaddress="151.236.25.10" AND translatedport=7205 OR destinationtranslatedaddress="37.235.53.217" AND translatedport=1358 OR destinationtranslatedaddress="151.236.23.232" AND translatedport=763 OR destinationtranslatedaddress="37.235.56.204" AND translatedport=24239 OR destinationtranslatedaddress="162.252.175.122" AND translatedport=4126 OR destinationtranslatedaddress="162.252.175.136" AND translatedport=11077)
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="162.252.175.163" AND destinationport=28693 OR destinationaddress="162.252.175.90" AND destinationport=845 OR destinationaddress="162.252.175.109" AND destinationport=28330 OR destinationaddress="151.236.20.39" AND destinationport=5524 OR destinationaddress="158.255.208.140" AND destinationport=86 OR destinationaddress="194.68.27.149" AND destinationport=13106 OR destinationaddress="194.68.27.176" AND destinationport=6460 OR destinationaddress="37.143.128.223" AND destinationport=16223 OR destinationaddress="31.40.212.130" AND destinationport=7225 OR destinationaddress="198.244.207.203" AND destinationport=2076)
index=activity AND rg_functionality="Unix / Linux / AIX" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="162.252.175.163" AND sourceport=28693 OR sourceaddress="162.252.175.90" AND sourceport=845 OR sourceaddress="162.252.175.109" AND sourceport=28330 OR sourceaddress="151.236.20.39" AND sourceport=5524 OR sourceaddress="158.255.208.140" AND sourceport=86 OR sourceaddress="194.68.27.149" AND sourceport=13106 OR sourceaddress="194.68.27.176" AND sourceport=6460 OR sourceaddress="37.143.128.223" AND sourceport=16223 OR sourceaddress="31.40.212.130" AND sourceport=7225 OR sourceaddress="198.244.207.203" AND sourceport=2076)
index=activity AND rg_functionality="Unix / Linux / AIX" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="162.252.175.163" AND sourceport=28693 OR translatedipaddress="162.252.175.90" AND sourceport=845 OR translatedipaddress="162.252.175.109" AND sourceport=28330 OR translatedipaddress="151.236.20.39" AND sourceport=5524 OR translatedipaddress="158.255.208.140" AND sourceport=86 OR translatedipaddress="194.68.27.149" AND sourceport=13106 OR translatedipaddress="194.68.27.176" AND sourceport=6460 OR translatedipaddress="37.143.128.223" AND sourceport=16223 OR translatedipaddress="31.40.212.130" AND sourceport=7225 OR translatedipaddress="198.244.207.203" AND sourceport=2076)
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND destinationport=28693 OR destinationtranslatedaddress="162.252.175.90" AND destinationport=845 OR destinationtranslatedaddress="162.252.175.109" AND destinationport=28330 OR destinationtranslatedaddress="151.236.20.39" AND destinationport=5524 OR destinationtranslatedaddress="158.255.208.140" AND destinationport=86 OR destinationtranslatedaddress="194.68.27.149" AND destinationport=13106 OR destinationtranslatedaddress="194.68.27.176" AND destinationport=6460 OR destinationtranslatedaddress="37.143.128.223" AND destinationport=16223 OR destinationtranslatedaddress="31.40.212.130" AND destinationport=7225 OR destinationtranslatedaddress="198.244.207.203" AND destinationport=2076)
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND destinationtranslatedport=28693 OR destinationtranslatedaddress="162.252.175.90" AND destinationtranslatedport=845 OR destinationtranslatedaddress="162.252.175.109" AND destinationtranslatedport=28330 OR destinationtranslatedaddress="151.236.20.39" AND destinationtranslatedport=5524 OR destinationtranslatedaddress="158.255.208.140" AND destinationtranslatedport=86 OR destinationtranslatedaddress="194.68.27.149" AND destinationtranslatedport=13106 OR destinationtranslatedaddress="194.68.27.176" AND destinationtranslatedport=6460 OR destinationtranslatedaddress="37.143.128.223" AND destinationtranslatedport=16223 OR destinationtranslatedaddress="31.40.212.130" AND destinationtranslatedport=7225 OR destinationtranslatedaddress="198.244.207.203" AND destinationtranslatedport=2076)
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND translatedport=28693 OR destinationtranslatedaddress="162.252.175.90" AND translatedport=845 OR destinationtranslatedaddress="162.252.175.109" AND translatedport=28330 OR destinationtranslatedaddress="151.236.20.39" AND translatedport=5524 OR destinationtranslatedaddress="158.255.208.140" AND translatedport=86 OR destinationtranslatedaddress="194.68.27.149" AND translatedport=13106 OR destinationtranslatedaddress="194.68.27.176" AND translatedport=6460 OR destinationtranslatedaddress="37.143.128.223" AND translatedport=16223 OR destinationtranslatedaddress="31.40.212.130" AND translatedport=7225 OR destinationtranslatedaddress="198.244.207.203" AND translatedport=2076)
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="208.115.230.243" AND destinationport=16697 OR destinationaddress="185.126.239.207" AND destinationport=26630 OR destinationaddress="213.183.57.174" AND destinationport=12517 OR destinationaddress="213.183.57.72" AND destinationport=12517 OR destinationaddress="213.183.56.201" AND destinationport=12517 OR destinationaddress="95.164.45.27" AND destinationport=17426 OR destinationaddress="45.120.178.161" AND destinationport=11013 OR destinationaddress="176.120.74.3" AND destinationport=17268 OR destinationaddress="92.243.64.184" AND destinationport=17146 OR destinationaddress="92.243.64.36" AND destinationport=17146)
index=activity AND rg_functionality="Unix / Linux / AIX" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="208.115.230.243" AND sourceport=16697 OR sourceaddress="185.126.239.207" AND sourceport=26630 OR sourceaddress="213.183.57.174" AND sourceport=12517 OR sourceaddress="213.183.57.72" AND sourceport=12517 OR sourceaddress="213.183.56.201" AND sourceport=12517 OR sourceaddress="95.164.45.27" AND sourceport=17426 OR sourceaddress="45.120.178.161" AND sourceport=11013 OR sourceaddress="176.120.74.3" AND sourceport=17268 OR sourceaddress="92.243.64.184" AND sourceport=17146 OR sourceaddress="92.243.64.36" AND sourceport=17146)
index=activity AND rg_functionality="Unix / Linux / AIX" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="208.115.230.243" AND sourceport=16697 OR translatedipaddress="185.126.239.207" AND sourceport=26630 OR translatedipaddress="213.183.57.174" AND sourceport=12517 OR translatedipaddress="213.183.57.72" AND sourceport=12517 OR translatedipaddress="213.183.56.201" AND sourceport=12517 OR translatedipaddress="95.164.45.27" AND sourceport=17426 OR translatedipaddress="45.120.178.161" AND sourceport=11013 OR translatedipaddress="176.120.74.3" AND sourceport=17268 OR translatedipaddress="92.243.64.184" AND sourceport=17146 OR translatedipaddress="92.243.64.36" AND sourceport=17146)
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND destinationport=16697 OR destinationtranslatedaddress="185.126.239.207" AND destinationport=26630 OR destinationtranslatedaddress="213.183.57.174" AND destinationport=12517 OR destinationtranslatedaddress="213.183.57.72" AND destinationport=12517 OR destinationtranslatedaddress="213.183.56.201" AND destinationport=12517 OR destinationtranslatedaddress="95.164.45.27" AND destinationport=17426 OR destinationtranslatedaddress="45.120.178.161" AND destinationport=11013 OR destinationtranslatedaddress="176.120.74.3" AND destinationport=17268 OR destinationtranslatedaddress="92.243.64.184" AND destinationport=17146 OR destinationtranslatedaddress="92.243.64.36" AND destinationport=17146)
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND destinationtranslatedport=16697 OR destinationtranslatedaddress="185.126.239.207" AND destinationtranslatedport=26630 OR destinationtranslatedaddress="213.183.57.174" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="213.183.57.72" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="213.183.56.201" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="95.164.45.27" AND destinationtranslatedport=17426 OR destinationtranslatedaddress="45.120.178.161" AND destinationtranslatedport=11013 OR destinationtranslatedaddress="176.120.74.3" AND destinationtranslatedport=17268 OR destinationtranslatedaddress="92.243.64.184" AND destinationtranslatedport=17146 OR destinationtranslatedaddress="92.243.64.36" AND destinationtranslatedport=17146)
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND translatedport=16697 OR destinationtranslatedaddress="185.126.239.207" AND translatedport=26630 OR destinationtranslatedaddress="213.183.57.174" AND translatedport=12517 OR destinationtranslatedaddress="213.183.57.72" AND translatedport=12517 OR destinationtranslatedaddress="213.183.56.201" AND translatedport=12517 OR destinationtranslatedaddress="95.164.45.27" AND translatedport=17426 OR destinationtranslatedaddress="45.120.178.161" AND translatedport=11013 OR destinationtranslatedaddress="176.120.74.3" AND translatedport=17268 OR destinationtranslatedaddress="92.243.64.184" AND translatedport=17146 OR destinationtranslatedaddress="92.243.64.36" AND translatedport=17146)
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="89.31.120.126" AND destinationport=11578 OR destinationaddress="91.132.93.33" AND destinationport=11578 OR destinationaddress="91.132.95.28" AND destinationport=8773 OR destinationaddress="91.132.95.204" AND destinationport=8773 OR destinationaddress="91.132.95.135" AND destinationport=8773 OR destinationaddress="194.233.174.22" AND destinationport=45358)
index=activity AND rg_functionality="Unix / Linux / AIX" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="89.31.120.126" AND sourceport=11578 OR sourceaddress="91.132.93.33" AND sourceport=11578 OR sourceaddress="91.132.95.28" AND sourceport=8773 OR sourceaddress="91.132.95.204" AND sourceport=8773 OR sourceaddress="91.132.95.135" AND sourceport=8773 OR sourceaddress="194.233.174.22" AND sourceport=45358)
index=activity AND rg_functionality="Unix / Linux / AIX" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="89.31.120.126" AND sourceport=11578 OR translatedipaddress="91.132.93.33" AND sourceport=11578 OR translatedipaddress="91.132.95.28" AND sourceport=8773 OR translatedipaddress="91.132.95.204" AND sourceport=8773 OR translatedipaddress="91.132.95.135" AND sourceport=8773 OR translatedipaddress="194.233.174.22" AND sourceport=45358)
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND destinationport=11578 OR destinationtranslatedaddress="91.132.93.33" AND destinationport=11578 OR destinationtranslatedaddress="91.132.95.28" AND destinationport=8773 OR destinationtranslatedaddress="91.132.95.204" AND destinationport=8773 OR destinationtranslatedaddress="91.132.95.135" AND destinationport=8773 OR destinationtranslatedaddress="194.233.174.22" AND destinationport=45358)
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND destinationtranslatedport=11578 OR destinationtranslatedaddress="91.132.93.33" AND destinationtranslatedport=11578 OR destinationtranslatedaddress="91.132.95.28" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="91.132.95.204" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="91.132.95.135" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="194.233.174.22" AND destinationtranslatedport=45358)
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND translatedport=11578 OR destinationtranslatedaddress="91.132.93.33" AND translatedport=11578 OR destinationtranslatedaddress="91.132.95.28" AND translatedport=8773 OR destinationtranslatedaddress="91.132.95.204" AND translatedport=8773 OR destinationtranslatedaddress="91.132.95.135" AND translatedport=8773 OR destinationtranslatedaddress="194.233.174.22" AND translatedport=45358)
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="158.255.212.173" AND destinationport=10862 OR destinationaddress="151.236.25.126" AND destinationport=11331 OR destinationaddress="158.255.215.49" AND destinationport=23079 OR destinationaddress="185.26.239.98" AND destinationport=11076 OR destinationaddress="151.236.25.10" AND destinationport=7205 OR destinationaddress="37.235.53.217" AND destinationport=1358 OR destinationaddress="151.236.23.232" AND destinationport=763 OR destinationaddress="37.235.56.204" AND destinationport=24239 OR destinationaddress="162.252.175.122" AND destinationport=4126 OR destinationaddress="162.252.175.136" AND destinationport=11077)
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="158.255.212.173" AND sourceport=10862 OR sourceaddress="151.236.25.126" AND sourceport=11331 OR sourceaddress="158.255.215.49" AND sourceport=23079 OR sourceaddress="185.26.239.98" AND sourceport=11076 OR sourceaddress="151.236.25.10" AND sourceport=7205 OR sourceaddress="37.235.53.217" AND sourceport=1358 OR sourceaddress="151.236.23.232" AND sourceport=763 OR sourceaddress="37.235.56.204" AND sourceport=24239 OR sourceaddress="162.252.175.122" AND sourceport=4126 OR sourceaddress="162.252.175.136" AND sourceport=11077)
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="158.255.212.173" AND sourceport=10862 OR translatedipaddress="151.236.25.126" AND sourceport=11331 OR translatedipaddress="158.255.215.49" AND sourceport=23079 OR translatedipaddress="185.26.239.98" AND sourceport=11076 OR translatedipaddress="151.236.25.10" AND sourceport=7205 OR translatedipaddress="37.235.53.217" AND sourceport=1358 OR translatedipaddress="151.236.23.232" AND sourceport=763 OR translatedipaddress="37.235.56.204" AND sourceport=24239 OR translatedipaddress="162.252.175.122" AND sourceport=4126 OR translatedipaddress="162.252.175.136" AND sourceport=11077)
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND destinationport=10862 OR destinationtranslatedaddress="151.236.25.126" AND destinationport=11331 OR destinationtranslatedaddress="158.255.215.49" AND destinationport=23079 OR destinationtranslatedaddress="185.26.239.98" AND destinationport=11076 OR destinationtranslatedaddress="151.236.25.10" AND destinationport=7205 OR destinationtranslatedaddress="37.235.53.217" AND destinationport=1358 OR destinationtranslatedaddress="151.236.23.232" AND destinationport=763 OR destinationtranslatedaddress="37.235.56.204" AND destinationport=24239 OR destinationtranslatedaddress="162.252.175.122" AND destinationport=4126 OR destinationtranslatedaddress="162.252.175.136" AND destinationport=11077)
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND destinationtranslatedport=10862 OR destinationtranslatedaddress="151.236.25.126" AND destinationtranslatedport=11331 OR destinationtranslatedaddress="158.255.215.49" AND destinationtranslatedport=23079 OR destinationtranslatedaddress="185.26.239.98" AND destinationtranslatedport=11076 OR destinationtranslatedaddress="151.236.25.10" AND destinationtranslatedport=7205 OR destinationtranslatedaddress="37.235.53.217" AND destinationtranslatedport=1358 OR destinationtranslatedaddress="151.236.23.232" AND destinationtranslatedport=763 OR destinationtranslatedaddress="37.235.56.204" AND destinationtranslatedport=24239 OR destinationtranslatedaddress="162.252.175.122" AND destinationtranslatedport=4126 OR destinationtranslatedaddress="162.252.175.136" AND destinationtranslatedport=11077)
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND translatedport=10862 OR destinationtranslatedaddress="151.236.25.126" AND translatedport=11331 OR destinationtranslatedaddress="158.255.215.49" AND translatedport=23079 OR destinationtranslatedaddress="185.26.239.98" AND translatedport=11076 OR destinationtranslatedaddress="151.236.25.10" AND translatedport=7205 OR destinationtranslatedaddress="37.235.53.217" AND translatedport=1358 OR destinationtranslatedaddress="151.236.23.232" AND translatedport=763 OR destinationtranslatedaddress="37.235.56.204" AND translatedport=24239 OR destinationtranslatedaddress="162.252.175.122" AND translatedport=4126 OR destinationtranslatedaddress="162.252.175.136" AND translatedport=11077)
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="162.252.175.163" AND destinationport=28693 OR destinationaddress="162.252.175.90" AND destinationport=845 OR destinationaddress="162.252.175.109" AND destinationport=28330 OR destinationaddress="151.236.20.39" AND destinationport=5524 OR destinationaddress="158.255.208.140" AND destinationport=86 OR destinationaddress="194.68.27.149" AND destinationport=13106 OR destinationaddress="194.68.27.176" AND destinationport=6460 OR destinationaddress="37.143.128.223" AND destinationport=16223 OR destinationaddress="31.40.212.130" AND destinationport=7225 OR destinationaddress="198.244.207.203" AND destinationport=2076)
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="162.252.175.163" AND sourceport=28693 OR sourceaddress="162.252.175.90" AND sourceport=845 OR sourceaddress="162.252.175.109" AND sourceport=28330 OR sourceaddress="151.236.20.39" AND sourceport=5524 OR sourceaddress="158.255.208.140" AND sourceport=86 OR sourceaddress="194.68.27.149" AND sourceport=13106 OR sourceaddress="194.68.27.176" AND sourceport=6460 OR sourceaddress="37.143.128.223" AND sourceport=16223 OR sourceaddress="31.40.212.130" AND sourceport=7225 OR sourceaddress="198.244.207.203" AND sourceport=2076)
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="162.252.175.163" AND sourceport=28693 OR translatedipaddress="162.252.175.90" AND sourceport=845 OR translatedipaddress="162.252.175.109" AND sourceport=28330 OR translatedipaddress="151.236.20.39" AND sourceport=5524 OR translatedipaddress="158.255.208.140" AND sourceport=86 OR translatedipaddress="194.68.27.149" AND sourceport=13106 OR translatedipaddress="194.68.27.176" AND sourceport=6460 OR translatedipaddress="37.143.128.223" AND sourceport=16223 OR translatedipaddress="31.40.212.130" AND sourceport=7225 OR translatedipaddress="198.244.207.203" AND sourceport=2076)
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND destinationport=28693 OR destinationtranslatedaddress="162.252.175.90" AND destinationport=845 OR destinationtranslatedaddress="162.252.175.109" AND destinationport=28330 OR destinationtranslatedaddress="151.236.20.39" AND destinationport=5524 OR destinationtranslatedaddress="158.255.208.140" AND destinationport=86 OR destinationtranslatedaddress="194.68.27.149" AND destinationport=13106 OR destinationtranslatedaddress="194.68.27.176" AND destinationport=6460 OR destinationtranslatedaddress="37.143.128.223" AND destinationport=16223 OR destinationtranslatedaddress="31.40.212.130" AND destinationport=7225 OR destinationtranslatedaddress="198.244.207.203" AND destinationport=2076)
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND destinationtranslatedport=28693 OR destinationtranslatedaddress="162.252.175.90" AND destinationtranslatedport=845 OR destinationtranslatedaddress="162.252.175.109" AND destinationtranslatedport=28330 OR destinationtranslatedaddress="151.236.20.39" AND destinationtranslatedport=5524 OR destinationtranslatedaddress="158.255.208.140" AND destinationtranslatedport=86 OR destinationtranslatedaddress="194.68.27.149" AND destinationtranslatedport=13106 OR destinationtranslatedaddress="194.68.27.176" AND destinationtranslatedport=6460 OR destinationtranslatedaddress="37.143.128.223" AND destinationtranslatedport=16223 OR destinationtranslatedaddress="31.40.212.130" AND destinationtranslatedport=7225 OR destinationtranslatedaddress="198.244.207.203" AND destinationtranslatedport=2076)
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND translatedport=28693 OR destinationtranslatedaddress="162.252.175.90" AND translatedport=845 OR destinationtranslatedaddress="162.252.175.109" AND translatedport=28330 OR destinationtranslatedaddress="151.236.20.39" AND translatedport=5524 OR destinationtranslatedaddress="158.255.208.140" AND translatedport=86 OR destinationtranslatedaddress="194.68.27.149" AND translatedport=13106 OR destinationtranslatedaddress="194.68.27.176" AND translatedport=6460 OR destinationtranslatedaddress="37.143.128.223" AND translatedport=16223 OR destinationtranslatedaddress="31.40.212.130" AND translatedport=7225 OR destinationtranslatedaddress="198.244.207.203" AND translatedport=2076)
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="208.115.230.243" AND destinationport=16697 OR destinationaddress="185.126.239.207" AND destinationport=26630 OR destinationaddress="213.183.57.174" AND destinationport=12517 OR destinationaddress="213.183.57.72" AND destinationport=12517 OR destinationaddress="213.183.56.201" AND destinationport=12517 OR destinationaddress="95.164.45.27" AND destinationport=17426 OR destinationaddress="45.120.178.161" AND destinationport=11013 OR destinationaddress="176.120.74.3" AND destinationport=17268 OR destinationaddress="92.243.64.184" AND destinationport=17146 OR destinationaddress="92.243.64.36" AND destinationport=17146)
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="208.115.230.243" AND sourceport=16697 OR sourceaddress="185.126.239.207" AND sourceport=26630 OR sourceaddress="213.183.57.174" AND sourceport=12517 OR sourceaddress="213.183.57.72" AND sourceport=12517 OR sourceaddress="213.183.56.201" AND sourceport=12517 OR sourceaddress="95.164.45.27" AND sourceport=17426 OR sourceaddress="45.120.178.161" AND sourceport=11013 OR sourceaddress="176.120.74.3" AND sourceport=17268 OR sourceaddress="92.243.64.184" AND sourceport=17146 OR sourceaddress="92.243.64.36" AND sourceport=17146)
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="208.115.230.243" AND sourceport=16697 OR translatedipaddress="185.126.239.207" AND sourceport=26630 OR translatedipaddress="213.183.57.174" AND sourceport=12517 OR translatedipaddress="213.183.57.72" AND sourceport=12517 OR translatedipaddress="213.183.56.201" AND sourceport=12517 OR translatedipaddress="95.164.45.27" AND sourceport=17426 OR translatedipaddress="45.120.178.161" AND sourceport=11013 OR translatedipaddress="176.120.74.3" AND sourceport=17268 OR translatedipaddress="92.243.64.184" AND sourceport=17146 OR translatedipaddress="92.243.64.36" AND sourceport=17146)
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND destinationport=16697 OR destinationtranslatedaddress="185.126.239.207" AND destinationport=26630 OR destinationtranslatedaddress="213.183.57.174" AND destinationport=12517 OR destinationtranslatedaddress="213.183.57.72" AND destinationport=12517 OR destinationtranslatedaddress="213.183.56.201" AND destinationport=12517 OR destinationtranslatedaddress="95.164.45.27" AND destinationport=17426 OR destinationtranslatedaddress="45.120.178.161" AND destinationport=11013 OR destinationtranslatedaddress="176.120.74.3" AND destinationport=17268 OR destinationtranslatedaddress="92.243.64.184" AND destinationport=17146 OR destinationtranslatedaddress="92.243.64.36" AND destinationport=17146)
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND destinationtranslatedport=16697 OR destinationtranslatedaddress="185.126.239.207" AND destinationtranslatedport=26630 OR destinationtranslatedaddress="213.183.57.174" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="213.183.57.72" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="213.183.56.201" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="95.164.45.27" AND destinationtranslatedport=17426 OR destinationtranslatedaddress="45.120.178.161" AND destinationtranslatedport=11013 OR destinationtranslatedaddress="176.120.74.3" AND destinationtranslatedport=17268 OR destinationtranslatedaddress="92.243.64.184" AND destinationtranslatedport=17146 OR destinationtranslatedaddress="92.243.64.36" AND destinationtranslatedport=17146)
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND translatedport=16697 OR destinationtranslatedaddress="185.126.239.207" AND translatedport=26630 OR destinationtranslatedaddress="213.183.57.174" AND translatedport=12517 OR destinationtranslatedaddress="213.183.57.72" AND translatedport=12517 OR destinationtranslatedaddress="213.183.56.201" AND translatedport=12517 OR destinationtranslatedaddress="95.164.45.27" AND translatedport=17426 OR destinationtranslatedaddress="45.120.178.161" AND translatedport=11013 OR destinationtranslatedaddress="176.120.74.3" AND translatedport=17268 OR destinationtranslatedaddress="92.243.64.184" AND translatedport=17146 OR destinationtranslatedaddress="92.243.64.36" AND translatedport=17146)
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="89.31.120.126" AND destinationport=11578 OR destinationaddress="91.132.93.33" AND destinationport=11578 OR destinationaddress="91.132.95.28" AND destinationport=8773 OR destinationaddress="91.132.95.204" AND destinationport=8773 OR destinationaddress="91.132.95.135" AND destinationport=8773 OR destinationaddress="194.233.174.22" AND destinationport=45358)
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="89.31.120.126" AND sourceport=11578 OR sourceaddress="91.132.93.33" AND sourceport=11578 OR sourceaddress="91.132.95.28" AND sourceport=8773 OR sourceaddress="91.132.95.204" AND sourceport=8773 OR sourceaddress="91.132.95.135" AND sourceport=8773 OR sourceaddress="194.233.174.22" AND sourceport=45358)
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="89.31.120.126" AND sourceport=11578 OR translatedipaddress="91.132.93.33" AND sourceport=11578 OR translatedipaddress="91.132.95.28" AND sourceport=8773 OR translatedipaddress="91.132.95.204" AND sourceport=8773 OR translatedipaddress="91.132.95.135" AND sourceport=8773 OR translatedipaddress="194.233.174.22" AND sourceport=45358)
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND destinationport=11578 OR destinationtranslatedaddress="91.132.93.33" AND destinationport=11578 OR destinationtranslatedaddress="91.132.95.28" AND destinationport=8773 OR destinationtranslatedaddress="91.132.95.204" AND destinationport=8773 OR destinationtranslatedaddress="91.132.95.135" AND destinationport=8773 OR destinationtranslatedaddress="194.233.174.22" AND destinationport=45358)
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND destinationtranslatedport=11578 OR destinationtranslatedaddress="91.132.93.33" AND destinationtranslatedport=11578 OR destinationtranslatedaddress="91.132.95.28" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="91.132.95.204" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="91.132.95.135" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="194.233.174.22" AND destinationtranslatedport=45358)
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND translatedport=11578 OR destinationtranslatedaddress="91.132.93.33" AND translatedport=11578 OR destinationtranslatedaddress="91.132.95.28" AND translatedport=8773 OR destinationtranslatedaddress="91.132.95.204" AND translatedport=8773 OR destinationtranslatedaddress="91.132.95.135" AND translatedport=8773 OR destinationtranslatedaddress="194.233.174.22" AND translatedport=45358)
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="158.255.212.173" AND destinationport=10862 OR destinationaddress="151.236.25.126" AND destinationport=11331 OR destinationaddress="158.255.215.49" AND destinationport=23079 OR destinationaddress="185.26.239.98" AND destinationport=11076 OR destinationaddress="151.236.25.10" AND destinationport=7205 OR destinationaddress="37.235.53.217" AND destinationport=1358 OR destinationaddress="151.236.23.232" AND destinationport=763 OR destinationaddress="37.235.56.204" AND destinationport=24239 OR destinationaddress="162.252.175.122" AND destinationport=4126 OR destinationaddress="162.252.175.136" AND destinationport=11077)
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="158.255.212.173" AND sourceport=10862 OR sourceaddress="151.236.25.126" AND sourceport=11331 OR sourceaddress="158.255.215.49" AND sourceport=23079 OR sourceaddress="185.26.239.98" AND sourceport=11076 OR sourceaddress="151.236.25.10" AND sourceport=7205 OR sourceaddress="37.235.53.217" AND sourceport=1358 OR sourceaddress="151.236.23.232" AND sourceport=763 OR sourceaddress="37.235.56.204" AND sourceport=24239 OR sourceaddress="162.252.175.122" AND sourceport=4126 OR sourceaddress="162.252.175.136" AND sourceport=11077)
index=activity AND rg_functionality="Cloud Application Security Broker" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="158.255.212.173" AND sourceport=10862 OR translatedipaddress="151.236.25.126" AND sourceport=11331 OR translatedipaddress="158.255.215.49" AND sourceport=23079 OR translatedipaddress="185.26.239.98" AND sourceport=11076 OR translatedipaddress="151.236.25.10" AND sourceport=7205 OR translatedipaddress="37.235.53.217" AND sourceport=1358 OR translatedipaddress="151.236.23.232" AND sourceport=763 OR translatedipaddress="37.235.56.204" AND sourceport=24239 OR translatedipaddress="162.252.175.122" AND sourceport=4126 OR translatedipaddress="162.252.175.136" AND sourceport=11077)
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND destinationport=10862 OR destinationtranslatedaddress="151.236.25.126" AND destinationport=11331 OR destinationtranslatedaddress="158.255.215.49" AND destinationport=23079 OR destinationtranslatedaddress="185.26.239.98" AND destinationport=11076 OR destinationtranslatedaddress="151.236.25.10" AND destinationport=7205 OR destinationtranslatedaddress="37.235.53.217" AND destinationport=1358 OR destinationtranslatedaddress="151.236.23.232" AND destinationport=763 OR destinationtranslatedaddress="37.235.56.204" AND destinationport=24239 OR destinationtranslatedaddress="162.252.175.122" AND destinationport=4126 OR destinationtranslatedaddress="162.252.175.136" AND destinationport=11077)
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND destinationtranslatedport=10862 OR destinationtranslatedaddress="151.236.25.126" AND destinationtranslatedport=11331 OR destinationtranslatedaddress="158.255.215.49" AND destinationtranslatedport=23079 OR destinationtranslatedaddress="185.26.239.98" AND destinationtranslatedport=11076 OR destinationtranslatedaddress="151.236.25.10" AND destinationtranslatedport=7205 OR destinationtranslatedaddress="37.235.53.217" AND destinationtranslatedport=1358 OR destinationtranslatedaddress="151.236.23.232" AND destinationtranslatedport=763 OR destinationtranslatedaddress="37.235.56.204" AND destinationtranslatedport=24239 OR destinationtranslatedaddress="162.252.175.122" AND destinationtranslatedport=4126 OR destinationtranslatedaddress="162.252.175.136" AND destinationtranslatedport=11077)
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND translatedport=10862 OR destinationtranslatedaddress="151.236.25.126" AND translatedport=11331 OR destinationtranslatedaddress="158.255.215.49" AND translatedport=23079 OR destinationtranslatedaddress="185.26.239.98" AND translatedport=11076 OR destinationtranslatedaddress="151.236.25.10" AND translatedport=7205 OR destinationtranslatedaddress="37.235.53.217" AND translatedport=1358 OR destinationtranslatedaddress="151.236.23.232" AND translatedport=763 OR destinationtranslatedaddress="37.235.56.204" AND translatedport=24239 OR destinationtranslatedaddress="162.252.175.122" AND translatedport=4126 OR destinationtranslatedaddress="162.252.175.136" AND translatedport=11077)
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="162.252.175.163" AND destinationport=28693 OR destinationaddress="162.252.175.90" AND destinationport=845 OR destinationaddress="162.252.175.109" AND destinationport=28330 OR destinationaddress="151.236.20.39" AND destinationport=5524 OR destinationaddress="158.255.208.140" AND destinationport=86 OR destinationaddress="194.68.27.149" AND destinationport=13106 OR destinationaddress="194.68.27.176" AND destinationport=6460 OR destinationaddress="37.143.128.223" AND destinationport=16223 OR destinationaddress="31.40.212.130" AND destinationport=7225 OR destinationaddress="198.244.207.203" AND destinationport=2076)
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="162.252.175.163" AND sourceport=28693 OR sourceaddress="162.252.175.90" AND sourceport=845 OR sourceaddress="162.252.175.109" AND sourceport=28330 OR sourceaddress="151.236.20.39" AND sourceport=5524 OR sourceaddress="158.255.208.140" AND sourceport=86 OR sourceaddress="194.68.27.149" AND sourceport=13106 OR sourceaddress="194.68.27.176" AND sourceport=6460 OR sourceaddress="37.143.128.223" AND sourceport=16223 OR sourceaddress="31.40.212.130" AND sourceport=7225 OR sourceaddress="198.244.207.203" AND sourceport=2076)
index=activity AND rg_functionality="Cloud Application Security Broker" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="162.252.175.163" AND sourceport=28693 OR translatedipaddress="162.252.175.90" AND sourceport=845 OR translatedipaddress="162.252.175.109" AND sourceport=28330 OR translatedipaddress="151.236.20.39" AND sourceport=5524 OR translatedipaddress="158.255.208.140" AND sourceport=86 OR translatedipaddress="194.68.27.149" AND sourceport=13106 OR translatedipaddress="194.68.27.176" AND sourceport=6460 OR translatedipaddress="37.143.128.223" AND sourceport=16223 OR translatedipaddress="31.40.212.130" AND sourceport=7225 OR translatedipaddress="198.244.207.203" AND sourceport=2076)
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND destinationport=28693 OR destinationtranslatedaddress="162.252.175.90" AND destinationport=845 OR destinationtranslatedaddress="162.252.175.109" AND destinationport=28330 OR destinationtranslatedaddress="151.236.20.39" AND destinationport=5524 OR destinationtranslatedaddress="158.255.208.140" AND destinationport=86 OR destinationtranslatedaddress="194.68.27.149" AND destinationport=13106 OR destinationtranslatedaddress="194.68.27.176" AND destinationport=6460 OR destinationtranslatedaddress="37.143.128.223" AND destinationport=16223 OR destinationtranslatedaddress="31.40.212.130" AND destinationport=7225 OR destinationtranslatedaddress="198.244.207.203" AND destinationport=2076)
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND destinationtranslatedport=28693 OR destinationtranslatedaddress="162.252.175.90" AND destinationtranslatedport=845 OR destinationtranslatedaddress="162.252.175.109" AND destinationtranslatedport=28330 OR destinationtranslatedaddress="151.236.20.39" AND destinationtranslatedport=5524 OR destinationtranslatedaddress="158.255.208.140" AND destinationtranslatedport=86 OR destinationtranslatedaddress="194.68.27.149" AND destinationtranslatedport=13106 OR destinationtranslatedaddress="194.68.27.176" AND destinationtranslatedport=6460 OR destinationtranslatedaddress="37.143.128.223" AND destinationtranslatedport=16223 OR destinationtranslatedaddress="31.40.212.130" AND destinationtranslatedport=7225 OR destinationtranslatedaddress="198.244.207.203" AND destinationtranslatedport=2076)
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND translatedport=28693 OR destinationtranslatedaddress="162.252.175.90" AND translatedport=845 OR destinationtranslatedaddress="162.252.175.109" AND translatedport=28330 OR destinationtranslatedaddress="151.236.20.39" AND translatedport=5524 OR destinationtranslatedaddress="158.255.208.140" AND translatedport=86 OR destinationtranslatedaddress="194.68.27.149" AND translatedport=13106 OR destinationtranslatedaddress="194.68.27.176" AND translatedport=6460 OR destinationtranslatedaddress="37.143.128.223" AND translatedport=16223 OR destinationtranslatedaddress="31.40.212.130" AND translatedport=7225 OR destinationtranslatedaddress="198.244.207.203" AND translatedport=2076)
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="208.115.230.243" AND destinationport=16697 OR destinationaddress="185.126.239.207" AND destinationport=26630 OR destinationaddress="213.183.57.174" AND destinationport=12517 OR destinationaddress="213.183.57.72" AND destinationport=12517 OR destinationaddress="213.183.56.201" AND destinationport=12517 OR destinationaddress="95.164.45.27" AND destinationport=17426 OR destinationaddress="45.120.178.161" AND destinationport=11013 OR destinationaddress="176.120.74.3" AND destinationport=17268 OR destinationaddress="92.243.64.184" AND destinationport=17146 OR destinationaddress="92.243.64.36" AND destinationport=17146)
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="208.115.230.243" AND sourceport=16697 OR sourceaddress="185.126.239.207" AND sourceport=26630 OR sourceaddress="213.183.57.174" AND sourceport=12517 OR sourceaddress="213.183.57.72" AND sourceport=12517 OR sourceaddress="213.183.56.201" AND sourceport=12517 OR sourceaddress="95.164.45.27" AND sourceport=17426 OR sourceaddress="45.120.178.161" AND sourceport=11013 OR sourceaddress="176.120.74.3" AND sourceport=17268 OR sourceaddress="92.243.64.184" AND sourceport=17146 OR sourceaddress="92.243.64.36" AND sourceport=17146)
index=activity AND rg_functionality="Cloud Application Security Broker" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="208.115.230.243" AND sourceport=16697 OR translatedipaddress="185.126.239.207" AND sourceport=26630 OR translatedipaddress="213.183.57.174" AND sourceport=12517 OR translatedipaddress="213.183.57.72" AND sourceport=12517 OR translatedipaddress="213.183.56.201" AND sourceport=12517 OR translatedipaddress="95.164.45.27" AND sourceport=17426 OR translatedipaddress="45.120.178.161" AND sourceport=11013 OR translatedipaddress="176.120.74.3" AND sourceport=17268 OR translatedipaddress="92.243.64.184" AND sourceport=17146 OR translatedipaddress="92.243.64.36" AND sourceport=17146)
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND destinationport=16697 OR destinationtranslatedaddress="185.126.239.207" AND destinationport=26630 OR destinationtranslatedaddress="213.183.57.174" AND destinationport=12517 OR destinationtranslatedaddress="213.183.57.72" AND destinationport=12517 OR destinationtranslatedaddress="213.183.56.201" AND destinationport=12517 OR destinationtranslatedaddress="95.164.45.27" AND destinationport=17426 OR destinationtranslatedaddress="45.120.178.161" AND destinationport=11013 OR destinationtranslatedaddress="176.120.74.3" AND destinationport=17268 OR destinationtranslatedaddress="92.243.64.184" AND destinationport=17146 OR destinationtranslatedaddress="92.243.64.36" AND destinationport=17146)
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND destinationtranslatedport=16697 OR destinationtranslatedaddress="185.126.239.207" AND destinationtranslatedport=26630 OR destinationtranslatedaddress="213.183.57.174" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="213.183.57.72" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="213.183.56.201" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="95.164.45.27" AND destinationtranslatedport=17426 OR destinationtranslatedaddress="45.120.178.161" AND destinationtranslatedport=11013 OR destinationtranslatedaddress="176.120.74.3" AND destinationtranslatedport=17268 OR destinationtranslatedaddress="92.243.64.184" AND destinationtranslatedport=17146 OR destinationtranslatedaddress="92.243.64.36" AND destinationtranslatedport=17146)
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND translatedport=16697 OR destinationtranslatedaddress="185.126.239.207" AND translatedport=26630 OR destinationtranslatedaddress="213.183.57.174" AND translatedport=12517 OR destinationtranslatedaddress="213.183.57.72" AND translatedport=12517 OR destinationtranslatedaddress="213.183.56.201" AND translatedport=12517 OR destinationtranslatedaddress="95.164.45.27" AND translatedport=17426 OR destinationtranslatedaddress="45.120.178.161" AND translatedport=11013 OR destinationtranslatedaddress="176.120.74.3" AND translatedport=17268 OR destinationtranslatedaddress="92.243.64.184" AND translatedport=17146 OR destinationtranslatedaddress="92.243.64.36" AND translatedport=17146)
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="89.31.120.126" AND destinationport=11578 OR destinationaddress="91.132.93.33" AND destinationport=11578 OR destinationaddress="91.132.95.28" AND destinationport=8773 OR destinationaddress="91.132.95.204" AND destinationport=8773 OR destinationaddress="91.132.95.135" AND destinationport=8773 OR destinationaddress="194.233.174.22" AND destinationport=45358)
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="89.31.120.126" AND sourceport=11578 OR sourceaddress="91.132.93.33" AND sourceport=11578 OR sourceaddress="91.132.95.28" AND sourceport=8773 OR sourceaddress="91.132.95.204" AND sourceport=8773 OR sourceaddress="91.132.95.135" AND sourceport=8773 OR sourceaddress="194.233.174.22" AND sourceport=45358)
index=activity AND rg_functionality="Cloud Application Security Broker" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="89.31.120.126" AND sourceport=11578 OR translatedipaddress="91.132.93.33" AND sourceport=11578 OR translatedipaddress="91.132.95.28" AND sourceport=8773 OR translatedipaddress="91.132.95.204" AND sourceport=8773 OR translatedipaddress="91.132.95.135" AND sourceport=8773 OR translatedipaddress="194.233.174.22" AND sourceport=45358)
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND destinationport=11578 OR destinationtranslatedaddress="91.132.93.33" AND destinationport=11578 OR destinationtranslatedaddress="91.132.95.28" AND destinationport=8773 OR destinationtranslatedaddress="91.132.95.204" AND destinationport=8773 OR destinationtranslatedaddress="91.132.95.135" AND destinationport=8773 OR destinationtranslatedaddress="194.233.174.22" AND destinationport=45358)
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND destinationtranslatedport=11578 OR destinationtranslatedaddress="91.132.93.33" AND destinationtranslatedport=11578 OR destinationtranslatedaddress="91.132.95.28" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="91.132.95.204" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="91.132.95.135" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="194.233.174.22" AND destinationtranslatedport=45358)
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND translatedport=11578 OR destinationtranslatedaddress="91.132.93.33" AND translatedport=11578 OR destinationtranslatedaddress="91.132.95.28" AND translatedport=8773 OR destinationtranslatedaddress="91.132.95.204" AND translatedport=8773 OR destinationtranslatedaddress="91.132.95.135" AND translatedport=8773 OR destinationtranslatedaddress="194.233.174.22" AND translatedport=45358)
index=activity AND rg_functionality="Source Code Repository" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="158.255.212.173" AND destinationport=10862 OR destinationaddress="151.236.25.126" AND destinationport=11331 OR destinationaddress="158.255.215.49" AND destinationport=23079 OR destinationaddress="185.26.239.98" AND destinationport=11076 OR destinationaddress="151.236.25.10" AND destinationport=7205 OR destinationaddress="37.235.53.217" AND destinationport=1358 OR destinationaddress="151.236.23.232" AND destinationport=763 OR destinationaddress="37.235.56.204" AND destinationport=24239 OR destinationaddress="162.252.175.122" AND destinationport=4126 OR destinationaddress="162.252.175.136" AND destinationport=11077)
index=activity AND rg_functionality="Source Code Repository" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="158.255.212.173" AND sourceport=10862 OR sourceaddress="151.236.25.126" AND sourceport=11331 OR sourceaddress="158.255.215.49" AND sourceport=23079 OR sourceaddress="185.26.239.98" AND sourceport=11076 OR sourceaddress="151.236.25.10" AND sourceport=7205 OR sourceaddress="37.235.53.217" AND sourceport=1358 OR sourceaddress="151.236.23.232" AND sourceport=763 OR sourceaddress="37.235.56.204" AND sourceport=24239 OR sourceaddress="162.252.175.122" AND sourceport=4126 OR sourceaddress="162.252.175.136" AND sourceport=11077)
index=activity AND rg_functionality="Source Code Repository" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="158.255.212.173" AND sourceport=10862 OR translatedipaddress="151.236.25.126" AND sourceport=11331 OR translatedipaddress="158.255.215.49" AND sourceport=23079 OR translatedipaddress="185.26.239.98" AND sourceport=11076 OR translatedipaddress="151.236.25.10" AND sourceport=7205 OR translatedipaddress="37.235.53.217" AND sourceport=1358 OR translatedipaddress="151.236.23.232" AND sourceport=763 OR translatedipaddress="37.235.56.204" AND sourceport=24239 OR translatedipaddress="162.252.175.122" AND sourceport=4126 OR translatedipaddress="162.252.175.136" AND sourceport=11077)
index=activity AND rg_functionality="Source Code Repository" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND destinationport=10862 OR destinationtranslatedaddress="151.236.25.126" AND destinationport=11331 OR destinationtranslatedaddress="158.255.215.49" AND destinationport=23079 OR destinationtranslatedaddress="185.26.239.98" AND destinationport=11076 OR destinationtranslatedaddress="151.236.25.10" AND destinationport=7205 OR destinationtranslatedaddress="37.235.53.217" AND destinationport=1358 OR destinationtranslatedaddress="151.236.23.232" AND destinationport=763 OR destinationtranslatedaddress="37.235.56.204" AND destinationport=24239 OR destinationtranslatedaddress="162.252.175.122" AND destinationport=4126 OR destinationtranslatedaddress="162.252.175.136" AND destinationport=11077)
index=activity AND rg_functionality="Source Code Repository" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND destinationtranslatedport=10862 OR destinationtranslatedaddress="151.236.25.126" AND destinationtranslatedport=11331 OR destinationtranslatedaddress="158.255.215.49" AND destinationtranslatedport=23079 OR destinationtranslatedaddress="185.26.239.98" AND destinationtranslatedport=11076 OR destinationtranslatedaddress="151.236.25.10" AND destinationtranslatedport=7205 OR destinationtranslatedaddress="37.235.53.217" AND destinationtranslatedport=1358 OR destinationtranslatedaddress="151.236.23.232" AND destinationtranslatedport=763 OR destinationtranslatedaddress="37.235.56.204" AND destinationtranslatedport=24239 OR destinationtranslatedaddress="162.252.175.122" AND destinationtranslatedport=4126 OR destinationtranslatedaddress="162.252.175.136" AND destinationtranslatedport=11077)
index=activity AND rg_functionality="Source Code Repository" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND translatedport=10862 OR destinationtranslatedaddress="151.236.25.126" AND translatedport=11331 OR destinationtranslatedaddress="158.255.215.49" AND translatedport=23079 OR destinationtranslatedaddress="185.26.239.98" AND translatedport=11076 OR destinationtranslatedaddress="151.236.25.10" AND translatedport=7205 OR destinationtranslatedaddress="37.235.53.217" AND translatedport=1358 OR destinationtranslatedaddress="151.236.23.232" AND translatedport=763 OR destinationtranslatedaddress="37.235.56.204" AND translatedport=24239 OR destinationtranslatedaddress="162.252.175.122" AND translatedport=4126 OR destinationtranslatedaddress="162.252.175.136" AND translatedport=11077)
index=activity AND rg_functionality="Source Code Repository" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="162.252.175.163" AND destinationport=28693 OR destinationaddress="162.252.175.90" AND destinationport=845 OR destinationaddress="162.252.175.109" AND destinationport=28330 OR destinationaddress="151.236.20.39" AND destinationport=5524 OR destinationaddress="158.255.208.140" AND destinationport=86 OR destinationaddress="194.68.27.149" AND destinationport=13106 OR destinationaddress="194.68.27.176" AND destinationport=6460 OR destinationaddress="37.143.128.223" AND destinationport=16223 OR destinationaddress="31.40.212.130" AND destinationport=7225 OR destinationaddress="198.244.207.203" AND destinationport=2076)
index=activity AND rg_functionality="Source Code Repository" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="162.252.175.163" AND sourceport=28693 OR sourceaddress="162.252.175.90" AND sourceport=845 OR sourceaddress="162.252.175.109" AND sourceport=28330 OR sourceaddress="151.236.20.39" AND sourceport=5524 OR sourceaddress="158.255.208.140" AND sourceport=86 OR sourceaddress="194.68.27.149" AND sourceport=13106 OR sourceaddress="194.68.27.176" AND sourceport=6460 OR sourceaddress="37.143.128.223" AND sourceport=16223 OR sourceaddress="31.40.212.130" AND sourceport=7225 OR sourceaddress="198.244.207.203" AND sourceport=2076)
index=activity AND rg_functionality="Source Code Repository" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="162.252.175.163" AND sourceport=28693 OR translatedipaddress="162.252.175.90" AND sourceport=845 OR translatedipaddress="162.252.175.109" AND sourceport=28330 OR translatedipaddress="151.236.20.39" AND sourceport=5524 OR translatedipaddress="158.255.208.140" AND sourceport=86 OR translatedipaddress="194.68.27.149" AND sourceport=13106 OR translatedipaddress="194.68.27.176" AND sourceport=6460 OR translatedipaddress="37.143.128.223" AND sourceport=16223 OR translatedipaddress="31.40.212.130" AND sourceport=7225 OR translatedipaddress="198.244.207.203" AND sourceport=2076)
index=activity AND rg_functionality="Source Code Repository" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND destinationport=28693 OR destinationtranslatedaddress="162.252.175.90" AND destinationport=845 OR destinationtranslatedaddress="162.252.175.109" AND destinationport=28330 OR destinationtranslatedaddress="151.236.20.39" AND destinationport=5524 OR destinationtranslatedaddress="158.255.208.140" AND destinationport=86 OR destinationtranslatedaddress="194.68.27.149" AND destinationport=13106 OR destinationtranslatedaddress="194.68.27.176" AND destinationport=6460 OR destinationtranslatedaddress="37.143.128.223" AND destinationport=16223 OR destinationtranslatedaddress="31.40.212.130" AND destinationport=7225 OR destinationtranslatedaddress="198.244.207.203" AND destinationport=2076)
index=activity AND rg_functionality="Source Code Repository" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND destinationtranslatedport=28693 OR destinationtranslatedaddress="162.252.175.90" AND destinationtranslatedport=845 OR destinationtranslatedaddress="162.252.175.109" AND destinationtranslatedport=28330 OR destinationtranslatedaddress="151.236.20.39" AND destinationtranslatedport=5524 OR destinationtranslatedaddress="158.255.208.140" AND destinationtranslatedport=86 OR destinationtranslatedaddress="194.68.27.149" AND destinationtranslatedport=13106 OR destinationtranslatedaddress="194.68.27.176" AND destinationtranslatedport=6460 OR destinationtranslatedaddress="37.143.128.223" AND destinationtranslatedport=16223 OR destinationtranslatedaddress="31.40.212.130" AND destinationtranslatedport=7225 OR destinationtranslatedaddress="198.244.207.203" AND destinationtranslatedport=2076)
index=activity AND rg_functionality="Source Code Repository" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND translatedport=28693 OR destinationtranslatedaddress="162.252.175.90" AND translatedport=845 OR destinationtranslatedaddress="162.252.175.109" AND translatedport=28330 OR destinationtranslatedaddress="151.236.20.39" AND translatedport=5524 OR destinationtranslatedaddress="158.255.208.140" AND translatedport=86 OR destinationtranslatedaddress="194.68.27.149" AND translatedport=13106 OR destinationtranslatedaddress="194.68.27.176" AND translatedport=6460 OR destinationtranslatedaddress="37.143.128.223" AND translatedport=16223 OR destinationtranslatedaddress="31.40.212.130" AND translatedport=7225 OR destinationtranslatedaddress="198.244.207.203" AND translatedport=2076)
index=activity AND rg_functionality="Source Code Repository" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="208.115.230.243" AND destinationport=16697 OR destinationaddress="185.126.239.207" AND destinationport=26630 OR destinationaddress="213.183.57.174" AND destinationport=12517 OR destinationaddress="213.183.57.72" AND destinationport=12517 OR destinationaddress="213.183.56.201" AND destinationport=12517 OR destinationaddress="95.164.45.27" AND destinationport=17426 OR destinationaddress="45.120.178.161" AND destinationport=11013 OR destinationaddress="176.120.74.3" AND destinationport=17268 OR destinationaddress="92.243.64.184" AND destinationport=17146 OR destinationaddress="92.243.64.36" AND destinationport=17146)
index=activity AND rg_functionality="Source Code Repository" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="208.115.230.243" AND sourceport=16697 OR sourceaddress="185.126.239.207" AND sourceport=26630 OR sourceaddress="213.183.57.174" AND sourceport=12517 OR sourceaddress="213.183.57.72" AND sourceport=12517 OR sourceaddress="213.183.56.201" AND sourceport=12517 OR sourceaddress="95.164.45.27" AND sourceport=17426 OR sourceaddress="45.120.178.161" AND sourceport=11013 OR sourceaddress="176.120.74.3" AND sourceport=17268 OR sourceaddress="92.243.64.184" AND sourceport=17146 OR sourceaddress="92.243.64.36" AND sourceport=17146)
index=activity AND rg_functionality="Source Code Repository" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="208.115.230.243" AND sourceport=16697 OR translatedipaddress="185.126.239.207" AND sourceport=26630 OR translatedipaddress="213.183.57.174" AND sourceport=12517 OR translatedipaddress="213.183.57.72" AND sourceport=12517 OR translatedipaddress="213.183.56.201" AND sourceport=12517 OR translatedipaddress="95.164.45.27" AND sourceport=17426 OR translatedipaddress="45.120.178.161" AND sourceport=11013 OR translatedipaddress="176.120.74.3" AND sourceport=17268 OR translatedipaddress="92.243.64.184" AND sourceport=17146 OR translatedipaddress="92.243.64.36" AND sourceport=17146)
index=activity AND rg_functionality="Source Code Repository" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND destinationport=16697 OR destinationtranslatedaddress="185.126.239.207" AND destinationport=26630 OR destinationtranslatedaddress="213.183.57.174" AND destinationport=12517 OR destinationtranslatedaddress="213.183.57.72" AND destinationport=12517 OR destinationtranslatedaddress="213.183.56.201" AND destinationport=12517 OR destinationtranslatedaddress="95.164.45.27" AND destinationport=17426 OR destinationtranslatedaddress="45.120.178.161" AND destinationport=11013 OR destinationtranslatedaddress="176.120.74.3" AND destinationport=17268 OR destinationtranslatedaddress="92.243.64.184" AND destinationport=17146 OR destinationtranslatedaddress="92.243.64.36" AND destinationport=17146)
index=activity AND rg_functionality="Source Code Repository" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND destinationtranslatedport=16697 OR destinationtranslatedaddress="185.126.239.207" AND destinationtranslatedport=26630 OR destinationtranslatedaddress="213.183.57.174" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="213.183.57.72" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="213.183.56.201" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="95.164.45.27" AND destinationtranslatedport=17426 OR destinationtranslatedaddress="45.120.178.161" AND destinationtranslatedport=11013 OR destinationtranslatedaddress="176.120.74.3" AND destinationtranslatedport=17268 OR destinationtranslatedaddress="92.243.64.184" AND destinationtranslatedport=17146 OR destinationtranslatedaddress="92.243.64.36" AND destinationtranslatedport=17146)
index=activity AND rg_functionality="Source Code Repository" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND translatedport=16697 OR destinationtranslatedaddress="185.126.239.207" AND translatedport=26630 OR destinationtranslatedaddress="213.183.57.174" AND translatedport=12517 OR destinationtranslatedaddress="213.183.57.72" AND translatedport=12517 OR destinationtranslatedaddress="213.183.56.201" AND translatedport=12517 OR destinationtranslatedaddress="95.164.45.27" AND translatedport=17426 OR destinationtranslatedaddress="45.120.178.161" AND translatedport=11013 OR destinationtranslatedaddress="176.120.74.3" AND translatedport=17268 OR destinationtranslatedaddress="92.243.64.184" AND translatedport=17146 OR destinationtranslatedaddress="92.243.64.36" AND translatedport=17146)
index=activity AND rg_functionality="Source Code Repository" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="89.31.120.126" AND destinationport=11578 OR destinationaddress="91.132.93.33" AND destinationport=11578 OR destinationaddress="91.132.95.28" AND destinationport=8773 OR destinationaddress="91.132.95.204" AND destinationport=8773 OR destinationaddress="91.132.95.135" AND destinationport=8773 OR destinationaddress="194.233.174.22" AND destinationport=45358)
index=activity AND rg_functionality="Source Code Repository" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="89.31.120.126" AND sourceport=11578 OR sourceaddress="91.132.93.33" AND sourceport=11578 OR sourceaddress="91.132.95.28" AND sourceport=8773 OR sourceaddress="91.132.95.204" AND sourceport=8773 OR sourceaddress="91.132.95.135" AND sourceport=8773 OR sourceaddress="194.233.174.22" AND sourceport=45358)
index=activity AND rg_functionality="Source Code Repository" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="89.31.120.126" AND sourceport=11578 OR translatedipaddress="91.132.93.33" AND sourceport=11578 OR translatedipaddress="91.132.95.28" AND sourceport=8773 OR translatedipaddress="91.132.95.204" AND sourceport=8773 OR translatedipaddress="91.132.95.135" AND sourceport=8773 OR translatedipaddress="194.233.174.22" AND sourceport=45358)
index=activity AND rg_functionality="Source Code Repository" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND destinationport=11578 OR destinationtranslatedaddress="91.132.93.33" AND destinationport=11578 OR destinationtranslatedaddress="91.132.95.28" AND destinationport=8773 OR destinationtranslatedaddress="91.132.95.204" AND destinationport=8773 OR destinationtranslatedaddress="91.132.95.135" AND destinationport=8773 OR destinationtranslatedaddress="194.233.174.22" AND destinationport=45358)
index=activity AND rg_functionality="Source Code Repository" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND destinationtranslatedport=11578 OR destinationtranslatedaddress="91.132.93.33" AND destinationtranslatedport=11578 OR destinationtranslatedaddress="91.132.95.28" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="91.132.95.204" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="91.132.95.135" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="194.233.174.22" AND destinationtranslatedport=45358)
index=activity AND rg_functionality="Source Code Repository" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND translatedport=11578 OR destinationtranslatedaddress="91.132.93.33" AND translatedport=11578 OR destinationtranslatedaddress="91.132.95.28" AND translatedport=8773 OR destinationtranslatedaddress="91.132.95.204" AND translatedport=8773 OR destinationtranslatedaddress="91.132.95.135" AND translatedport=8773 OR destinationtranslatedaddress="194.233.174.22" AND translatedport=45358)
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="158.255.212.173" AND destinationport=10862 OR destinationaddress="151.236.25.126" AND destinationport=11331 OR destinationaddress="158.255.215.49" AND destinationport=23079 OR destinationaddress="185.26.239.98" AND destinationport=11076 OR destinationaddress="151.236.25.10" AND destinationport=7205 OR destinationaddress="37.235.53.217" AND destinationport=1358 OR destinationaddress="151.236.23.232" AND destinationport=763 OR destinationaddress="37.235.56.204" AND destinationport=24239 OR destinationaddress="162.252.175.122" AND destinationport=4126 OR destinationaddress="162.252.175.136" AND destinationport=11077)
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="158.255.212.173" AND sourceport=10862 OR sourceaddress="151.236.25.126" AND sourceport=11331 OR sourceaddress="158.255.215.49" AND sourceport=23079 OR sourceaddress="185.26.239.98" AND sourceport=11076 OR sourceaddress="151.236.25.10" AND sourceport=7205 OR sourceaddress="37.235.53.217" AND sourceport=1358 OR sourceaddress="151.236.23.232" AND sourceport=763 OR sourceaddress="37.235.56.204" AND sourceport=24239 OR sourceaddress="162.252.175.122" AND sourceport=4126 OR sourceaddress="162.252.175.136" AND sourceport=11077)
index=activity AND rg_functionality="Cloud Email / Email Security" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="158.255.212.173" AND sourceport=10862 OR translatedipaddress="151.236.25.126" AND sourceport=11331 OR translatedipaddress="158.255.215.49" AND sourceport=23079 OR translatedipaddress="185.26.239.98" AND sourceport=11076 OR translatedipaddress="151.236.25.10" AND sourceport=7205 OR translatedipaddress="37.235.53.217" AND sourceport=1358 OR translatedipaddress="151.236.23.232" AND sourceport=763 OR translatedipaddress="37.235.56.204" AND sourceport=24239 OR translatedipaddress="162.252.175.122" AND sourceport=4126 OR translatedipaddress="162.252.175.136" AND sourceport=11077)
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND destinationport=10862 OR destinationtranslatedaddress="151.236.25.126" AND destinationport=11331 OR destinationtranslatedaddress="158.255.215.49" AND destinationport=23079 OR destinationtranslatedaddress="185.26.239.98" AND destinationport=11076 OR destinationtranslatedaddress="151.236.25.10" AND destinationport=7205 OR destinationtranslatedaddress="37.235.53.217" AND destinationport=1358 OR destinationtranslatedaddress="151.236.23.232" AND destinationport=763 OR destinationtranslatedaddress="37.235.56.204" AND destinationport=24239 OR destinationtranslatedaddress="162.252.175.122" AND destinationport=4126 OR destinationtranslatedaddress="162.252.175.136" AND destinationport=11077)
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND destinationtranslatedport=10862 OR destinationtranslatedaddress="151.236.25.126" AND destinationtranslatedport=11331 OR destinationtranslatedaddress="158.255.215.49" AND destinationtranslatedport=23079 OR destinationtranslatedaddress="185.26.239.98" AND destinationtranslatedport=11076 OR destinationtranslatedaddress="151.236.25.10" AND destinationtranslatedport=7205 OR destinationtranslatedaddress="37.235.53.217" AND destinationtranslatedport=1358 OR destinationtranslatedaddress="151.236.23.232" AND destinationtranslatedport=763 OR destinationtranslatedaddress="37.235.56.204" AND destinationtranslatedport=24239 OR destinationtranslatedaddress="162.252.175.122" AND destinationtranslatedport=4126 OR destinationtranslatedaddress="162.252.175.136" AND destinationtranslatedport=11077)
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND translatedport=10862 OR destinationtranslatedaddress="151.236.25.126" AND translatedport=11331 OR destinationtranslatedaddress="158.255.215.49" AND translatedport=23079 OR destinationtranslatedaddress="185.26.239.98" AND translatedport=11076 OR destinationtranslatedaddress="151.236.25.10" AND translatedport=7205 OR destinationtranslatedaddress="37.235.53.217" AND translatedport=1358 OR destinationtranslatedaddress="151.236.23.232" AND translatedport=763 OR destinationtranslatedaddress="37.235.56.204" AND translatedport=24239 OR destinationtranslatedaddress="162.252.175.122" AND translatedport=4126 OR destinationtranslatedaddress="162.252.175.136" AND translatedport=11077)
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="162.252.175.163" AND destinationport=28693 OR destinationaddress="162.252.175.90" AND destinationport=845 OR destinationaddress="162.252.175.109" AND destinationport=28330 OR destinationaddress="151.236.20.39" AND destinationport=5524 OR destinationaddress="158.255.208.140" AND destinationport=86 OR destinationaddress="194.68.27.149" AND destinationport=13106 OR destinationaddress="194.68.27.176" AND destinationport=6460 OR destinationaddress="37.143.128.223" AND destinationport=16223 OR destinationaddress="31.40.212.130" AND destinationport=7225 OR destinationaddress="198.244.207.203" AND destinationport=2076)
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="162.252.175.163" AND sourceport=28693 OR sourceaddress="162.252.175.90" AND sourceport=845 OR sourceaddress="162.252.175.109" AND sourceport=28330 OR sourceaddress="151.236.20.39" AND sourceport=5524 OR sourceaddress="158.255.208.140" AND sourceport=86 OR sourceaddress="194.68.27.149" AND sourceport=13106 OR sourceaddress="194.68.27.176" AND sourceport=6460 OR sourceaddress="37.143.128.223" AND sourceport=16223 OR sourceaddress="31.40.212.130" AND sourceport=7225 OR sourceaddress="198.244.207.203" AND sourceport=2076)
index=activity AND rg_functionality="Cloud Email / Email Security" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="162.252.175.163" AND sourceport=28693 OR translatedipaddress="162.252.175.90" AND sourceport=845 OR translatedipaddress="162.252.175.109" AND sourceport=28330 OR translatedipaddress="151.236.20.39" AND sourceport=5524 OR translatedipaddress="158.255.208.140" AND sourceport=86 OR translatedipaddress="194.68.27.149" AND sourceport=13106 OR translatedipaddress="194.68.27.176" AND sourceport=6460 OR translatedipaddress="37.143.128.223" AND sourceport=16223 OR translatedipaddress="31.40.212.130" AND sourceport=7225 OR translatedipaddress="198.244.207.203" AND sourceport=2076)
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND destinationport=28693 OR destinationtranslatedaddress="162.252.175.90" AND destinationport=845 OR destinationtranslatedaddress="162.252.175.109" AND destinationport=28330 OR destinationtranslatedaddress="151.236.20.39" AND destinationport=5524 OR destinationtranslatedaddress="158.255.208.140" AND destinationport=86 OR destinationtranslatedaddress="194.68.27.149" AND destinationport=13106 OR destinationtranslatedaddress="194.68.27.176" AND destinationport=6460 OR destinationtranslatedaddress="37.143.128.223" AND destinationport=16223 OR destinationtranslatedaddress="31.40.212.130" AND destinationport=7225 OR destinationtranslatedaddress="198.244.207.203" AND destinationport=2076)
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND destinationtranslatedport=28693 OR destinationtranslatedaddress="162.252.175.90" AND destinationtranslatedport=845 OR destinationtranslatedaddress="162.252.175.109" AND destinationtranslatedport=28330 OR destinationtranslatedaddress="151.236.20.39" AND destinationtranslatedport=5524 OR destinationtranslatedaddress="158.255.208.140" AND destinationtranslatedport=86 OR destinationtranslatedaddress="194.68.27.149" AND destinationtranslatedport=13106 OR destinationtranslatedaddress="194.68.27.176" AND destinationtranslatedport=6460 OR destinationtranslatedaddress="37.143.128.223" AND destinationtranslatedport=16223 OR destinationtranslatedaddress="31.40.212.130" AND destinationtranslatedport=7225 OR destinationtranslatedaddress="198.244.207.203" AND destinationtranslatedport=2076)
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND translatedport=28693 OR destinationtranslatedaddress="162.252.175.90" AND translatedport=845 OR destinationtranslatedaddress="162.252.175.109" AND translatedport=28330 OR destinationtranslatedaddress="151.236.20.39" AND translatedport=5524 OR destinationtranslatedaddress="158.255.208.140" AND translatedport=86 OR destinationtranslatedaddress="194.68.27.149" AND translatedport=13106 OR destinationtranslatedaddress="194.68.27.176" AND translatedport=6460 OR destinationtranslatedaddress="37.143.128.223" AND translatedport=16223 OR destinationtranslatedaddress="31.40.212.130" AND translatedport=7225 OR destinationtranslatedaddress="198.244.207.203" AND translatedport=2076)
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="208.115.230.243" AND destinationport=16697 OR destinationaddress="185.126.239.207" AND destinationport=26630 OR destinationaddress="213.183.57.174" AND destinationport=12517 OR destinationaddress="213.183.57.72" AND destinationport=12517 OR destinationaddress="213.183.56.201" AND destinationport=12517 OR destinationaddress="95.164.45.27" AND destinationport=17426 OR destinationaddress="45.120.178.161" AND destinationport=11013 OR destinationaddress="176.120.74.3" AND destinationport=17268 OR destinationaddress="92.243.64.184" AND destinationport=17146 OR destinationaddress="92.243.64.36" AND destinationport=17146)
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="208.115.230.243" AND sourceport=16697 OR sourceaddress="185.126.239.207" AND sourceport=26630 OR sourceaddress="213.183.57.174" AND sourceport=12517 OR sourceaddress="213.183.57.72" AND sourceport=12517 OR sourceaddress="213.183.56.201" AND sourceport=12517 OR sourceaddress="95.164.45.27" AND sourceport=17426 OR sourceaddress="45.120.178.161" AND sourceport=11013 OR sourceaddress="176.120.74.3" AND sourceport=17268 OR sourceaddress="92.243.64.184" AND sourceport=17146 OR sourceaddress="92.243.64.36" AND sourceport=17146)
index=activity AND rg_functionality="Cloud Email / Email Security" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="208.115.230.243" AND sourceport=16697 OR translatedipaddress="185.126.239.207" AND sourceport=26630 OR translatedipaddress="213.183.57.174" AND sourceport=12517 OR translatedipaddress="213.183.57.72" AND sourceport=12517 OR translatedipaddress="213.183.56.201" AND sourceport=12517 OR translatedipaddress="95.164.45.27" AND sourceport=17426 OR translatedipaddress="45.120.178.161" AND sourceport=11013 OR translatedipaddress="176.120.74.3" AND sourceport=17268 OR translatedipaddress="92.243.64.184" AND sourceport=17146 OR translatedipaddress="92.243.64.36" AND sourceport=17146)
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND destinationport=16697 OR destinationtranslatedaddress="185.126.239.207" AND destinationport=26630 OR destinationtranslatedaddress="213.183.57.174" AND destinationport=12517 OR destinationtranslatedaddress="213.183.57.72" AND destinationport=12517 OR destinationtranslatedaddress="213.183.56.201" AND destinationport=12517 OR destinationtranslatedaddress="95.164.45.27" AND destinationport=17426 OR destinationtranslatedaddress="45.120.178.161" AND destinationport=11013 OR destinationtranslatedaddress="176.120.74.3" AND destinationport=17268 OR destinationtranslatedaddress="92.243.64.184" AND destinationport=17146 OR destinationtranslatedaddress="92.243.64.36" AND destinationport=17146)
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND destinationtranslatedport=16697 OR destinationtranslatedaddress="185.126.239.207" AND destinationtranslatedport=26630 OR destinationtranslatedaddress="213.183.57.174" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="213.183.57.72" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="213.183.56.201" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="95.164.45.27" AND destinationtranslatedport=17426 OR destinationtranslatedaddress="45.120.178.161" AND destinationtranslatedport=11013 OR destinationtranslatedaddress="176.120.74.3" AND destinationtranslatedport=17268 OR destinationtranslatedaddress="92.243.64.184" AND destinationtranslatedport=17146 OR destinationtranslatedaddress="92.243.64.36" AND destinationtranslatedport=17146)
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND translatedport=16697 OR destinationtranslatedaddress="185.126.239.207" AND translatedport=26630 OR destinationtranslatedaddress="213.183.57.174" AND translatedport=12517 OR destinationtranslatedaddress="213.183.57.72" AND translatedport=12517 OR destinationtranslatedaddress="213.183.56.201" AND translatedport=12517 OR destinationtranslatedaddress="95.164.45.27" AND translatedport=17426 OR destinationtranslatedaddress="45.120.178.161" AND translatedport=11013 OR destinationtranslatedaddress="176.120.74.3" AND translatedport=17268 OR destinationtranslatedaddress="92.243.64.184" AND translatedport=17146 OR destinationtranslatedaddress="92.243.64.36" AND translatedport=17146)
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="89.31.120.126" AND destinationport=11578 OR destinationaddress="91.132.93.33" AND destinationport=11578 OR destinationaddress="91.132.95.28" AND destinationport=8773 OR destinationaddress="91.132.95.204" AND destinationport=8773 OR destinationaddress="91.132.95.135" AND destinationport=8773 OR destinationaddress="194.233.174.22" AND destinationport=45358)
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="89.31.120.126" AND sourceport=11578 OR sourceaddress="91.132.93.33" AND sourceport=11578 OR sourceaddress="91.132.95.28" AND sourceport=8773 OR sourceaddress="91.132.95.204" AND sourceport=8773 OR sourceaddress="91.132.95.135" AND sourceport=8773 OR sourceaddress="194.233.174.22" AND sourceport=45358)
index=activity AND rg_functionality="Cloud Email / Email Security" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="89.31.120.126" AND sourceport=11578 OR translatedipaddress="91.132.93.33" AND sourceport=11578 OR translatedipaddress="91.132.95.28" AND sourceport=8773 OR translatedipaddress="91.132.95.204" AND sourceport=8773 OR translatedipaddress="91.132.95.135" AND sourceport=8773 OR translatedipaddress="194.233.174.22" AND sourceport=45358)
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND destinationport=11578 OR destinationtranslatedaddress="91.132.93.33" AND destinationport=11578 OR destinationtranslatedaddress="91.132.95.28" AND destinationport=8773 OR destinationtranslatedaddress="91.132.95.204" AND destinationport=8773 OR destinationtranslatedaddress="91.132.95.135" AND destinationport=8773 OR destinationtranslatedaddress="194.233.174.22" AND destinationport=45358)
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND destinationtranslatedport=11578 OR destinationtranslatedaddress="91.132.93.33" AND destinationtranslatedport=11578 OR destinationtranslatedaddress="91.132.95.28" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="91.132.95.204" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="91.132.95.135" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="194.233.174.22" AND destinationtranslatedport=45358)
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND translatedport=11578 OR destinationtranslatedaddress="91.132.93.33" AND translatedport=11578 OR destinationtranslatedaddress="91.132.95.28" AND translatedport=8773 OR destinationtranslatedaddress="91.132.95.204" AND translatedport=8773 OR destinationtranslatedaddress="91.132.95.135" AND translatedport=8773 OR destinationtranslatedaddress="194.233.174.22" AND translatedport=45358)
index=activity AND rg_functionality="DNS / DHCP" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="158.255.212.173" AND destinationport=10862 OR destinationaddress="151.236.25.126" AND destinationport=11331 OR destinationaddress="158.255.215.49" AND destinationport=23079 OR destinationaddress="185.26.239.98" AND destinationport=11076 OR destinationaddress="151.236.25.10" AND destinationport=7205 OR destinationaddress="37.235.53.217" AND destinationport=1358 OR destinationaddress="151.236.23.232" AND destinationport=763 OR destinationaddress="37.235.56.204" AND destinationport=24239 OR destinationaddress="162.252.175.122" AND destinationport=4126 OR destinationaddress="162.252.175.136" AND destinationport=11077)
index=activity AND rg_functionality="DNS / DHCP" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="158.255.212.173" AND sourceport=10862 OR sourceaddress="151.236.25.126" AND sourceport=11331 OR sourceaddress="158.255.215.49" AND sourceport=23079 OR sourceaddress="185.26.239.98" AND sourceport=11076 OR sourceaddress="151.236.25.10" AND sourceport=7205 OR sourceaddress="37.235.53.217" AND sourceport=1358 OR sourceaddress="151.236.23.232" AND sourceport=763 OR sourceaddress="37.235.56.204" AND sourceport=24239 OR sourceaddress="162.252.175.122" AND sourceport=4126 OR sourceaddress="162.252.175.136" AND sourceport=11077)
index=activity AND rg_functionality="DNS / DHCP" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="158.255.212.173" AND sourceport=10862 OR translatedipaddress="151.236.25.126" AND sourceport=11331 OR translatedipaddress="158.255.215.49" AND sourceport=23079 OR translatedipaddress="185.26.239.98" AND sourceport=11076 OR translatedipaddress="151.236.25.10" AND sourceport=7205 OR translatedipaddress="37.235.53.217" AND sourceport=1358 OR translatedipaddress="151.236.23.232" AND sourceport=763 OR translatedipaddress="37.235.56.204" AND sourceport=24239 OR translatedipaddress="162.252.175.122" AND sourceport=4126 OR translatedipaddress="162.252.175.136" AND sourceport=11077)
index=activity AND rg_functionality="DNS / DHCP" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND destinationport=10862 OR destinationtranslatedaddress="151.236.25.126" AND destinationport=11331 OR destinationtranslatedaddress="158.255.215.49" AND destinationport=23079 OR destinationtranslatedaddress="185.26.239.98" AND destinationport=11076 OR destinationtranslatedaddress="151.236.25.10" AND destinationport=7205 OR destinationtranslatedaddress="37.235.53.217" AND destinationport=1358 OR destinationtranslatedaddress="151.236.23.232" AND destinationport=763 OR destinationtranslatedaddress="37.235.56.204" AND destinationport=24239 OR destinationtranslatedaddress="162.252.175.122" AND destinationport=4126 OR destinationtranslatedaddress="162.252.175.136" AND destinationport=11077)
index=activity AND rg_functionality="DNS / DHCP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND destinationtranslatedport=10862 OR destinationtranslatedaddress="151.236.25.126" AND destinationtranslatedport=11331 OR destinationtranslatedaddress="158.255.215.49" AND destinationtranslatedport=23079 OR destinationtranslatedaddress="185.26.239.98" AND destinationtranslatedport=11076 OR destinationtranslatedaddress="151.236.25.10" AND destinationtranslatedport=7205 OR destinationtranslatedaddress="37.235.53.217" AND destinationtranslatedport=1358 OR destinationtranslatedaddress="151.236.23.232" AND destinationtranslatedport=763 OR destinationtranslatedaddress="37.235.56.204" AND destinationtranslatedport=24239 OR destinationtranslatedaddress="162.252.175.122" AND destinationtranslatedport=4126 OR destinationtranslatedaddress="162.252.175.136" AND destinationtranslatedport=11077)
index=activity AND rg_functionality="DNS / DHCP" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND translatedport=10862 OR destinationtranslatedaddress="151.236.25.126" AND translatedport=11331 OR destinationtranslatedaddress="158.255.215.49" AND translatedport=23079 OR destinationtranslatedaddress="185.26.239.98" AND translatedport=11076 OR destinationtranslatedaddress="151.236.25.10" AND translatedport=7205 OR destinationtranslatedaddress="37.235.53.217" AND translatedport=1358 OR destinationtranslatedaddress="151.236.23.232" AND translatedport=763 OR destinationtranslatedaddress="37.235.56.204" AND translatedport=24239 OR destinationtranslatedaddress="162.252.175.122" AND translatedport=4126 OR destinationtranslatedaddress="162.252.175.136" AND translatedport=11077)
index=activity AND rg_functionality="DNS / DHCP" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="162.252.175.163" AND destinationport=28693 OR destinationaddress="162.252.175.90" AND destinationport=845 OR destinationaddress="162.252.175.109" AND destinationport=28330 OR destinationaddress="151.236.20.39" AND destinationport=5524 OR destinationaddress="158.255.208.140" AND destinationport=86 OR destinationaddress="194.68.27.149" AND destinationport=13106 OR destinationaddress="194.68.27.176" AND destinationport=6460 OR destinationaddress="37.143.128.223" AND destinationport=16223 OR destinationaddress="31.40.212.130" AND destinationport=7225 OR destinationaddress="198.244.207.203" AND destinationport=2076)
index=activity AND rg_functionality="DNS / DHCP" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="162.252.175.163" AND sourceport=28693 OR sourceaddress="162.252.175.90" AND sourceport=845 OR sourceaddress="162.252.175.109" AND sourceport=28330 OR sourceaddress="151.236.20.39" AND sourceport=5524 OR sourceaddress="158.255.208.140" AND sourceport=86 OR sourceaddress="194.68.27.149" AND sourceport=13106 OR sourceaddress="194.68.27.176" AND sourceport=6460 OR sourceaddress="37.143.128.223" AND sourceport=16223 OR sourceaddress="31.40.212.130" AND sourceport=7225 OR sourceaddress="198.244.207.203" AND sourceport=2076)
index=activity AND rg_functionality="DNS / DHCP" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="162.252.175.163" AND sourceport=28693 OR translatedipaddress="162.252.175.90" AND sourceport=845 OR translatedipaddress="162.252.175.109" AND sourceport=28330 OR translatedipaddress="151.236.20.39" AND sourceport=5524 OR translatedipaddress="158.255.208.140" AND sourceport=86 OR translatedipaddress="194.68.27.149" AND sourceport=13106 OR translatedipaddress="194.68.27.176" AND sourceport=6460 OR translatedipaddress="37.143.128.223" AND sourceport=16223 OR translatedipaddress="31.40.212.130" AND sourceport=7225 OR translatedipaddress="198.244.207.203" AND sourceport=2076)
index=activity AND rg_functionality="DNS / DHCP" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND destinationport=28693 OR destinationtranslatedaddress="162.252.175.90" AND destinationport=845 OR destinationtranslatedaddress="162.252.175.109" AND destinationport=28330 OR destinationtranslatedaddress="151.236.20.39" AND destinationport=5524 OR destinationtranslatedaddress="158.255.208.140" AND destinationport=86 OR destinationtranslatedaddress="194.68.27.149" AND destinationport=13106 OR destinationtranslatedaddress="194.68.27.176" AND destinationport=6460 OR destinationtranslatedaddress="37.143.128.223" AND destinationport=16223 OR destinationtranslatedaddress="31.40.212.130" AND destinationport=7225 OR destinationtranslatedaddress="198.244.207.203" AND destinationport=2076)
index=activity AND rg_functionality="DNS / DHCP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND destinationtranslatedport=28693 OR destinationtranslatedaddress="162.252.175.90" AND destinationtranslatedport=845 OR destinationtranslatedaddress="162.252.175.109" AND destinationtranslatedport=28330 OR destinationtranslatedaddress="151.236.20.39" AND destinationtranslatedport=5524 OR destinationtranslatedaddress="158.255.208.140" AND destinationtranslatedport=86 OR destinationtranslatedaddress="194.68.27.149" AND destinationtranslatedport=13106 OR destinationtranslatedaddress="194.68.27.176" AND destinationtranslatedport=6460 OR destinationtranslatedaddress="37.143.128.223" AND destinationtranslatedport=16223 OR destinationtranslatedaddress="31.40.212.130" AND destinationtranslatedport=7225 OR destinationtranslatedaddress="198.244.207.203" AND destinationtranslatedport=2076)
index=activity AND rg_functionality="DNS / DHCP" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND translatedport=28693 OR destinationtranslatedaddress="162.252.175.90" AND translatedport=845 OR destinationtranslatedaddress="162.252.175.109" AND translatedport=28330 OR destinationtranslatedaddress="151.236.20.39" AND translatedport=5524 OR destinationtranslatedaddress="158.255.208.140" AND translatedport=86 OR destinationtranslatedaddress="194.68.27.149" AND translatedport=13106 OR destinationtranslatedaddress="194.68.27.176" AND translatedport=6460 OR destinationtranslatedaddress="37.143.128.223" AND translatedport=16223 OR destinationtranslatedaddress="31.40.212.130" AND translatedport=7225 OR destinationtranslatedaddress="198.244.207.203" AND translatedport=2076)
index=activity AND rg_functionality="DNS / DHCP" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="208.115.230.243" AND destinationport=16697 OR destinationaddress="185.126.239.207" AND destinationport=26630 OR destinationaddress="213.183.57.174" AND destinationport=12517 OR destinationaddress="213.183.57.72" AND destinationport=12517 OR destinationaddress="213.183.56.201" AND destinationport=12517 OR destinationaddress="95.164.45.27" AND destinationport=17426 OR destinationaddress="45.120.178.161" AND destinationport=11013 OR destinationaddress="176.120.74.3" AND destinationport=17268 OR destinationaddress="92.243.64.184" AND destinationport=17146 OR destinationaddress="92.243.64.36" AND destinationport=17146)
index=activity AND rg_functionality="DNS / DHCP" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="208.115.230.243" AND sourceport=16697 OR sourceaddress="185.126.239.207" AND sourceport=26630 OR sourceaddress="213.183.57.174" AND sourceport=12517 OR sourceaddress="213.183.57.72" AND sourceport=12517 OR sourceaddress="213.183.56.201" AND sourceport=12517 OR sourceaddress="95.164.45.27" AND sourceport=17426 OR sourceaddress="45.120.178.161" AND sourceport=11013 OR sourceaddress="176.120.74.3" AND sourceport=17268 OR sourceaddress="92.243.64.184" AND sourceport=17146 OR sourceaddress="92.243.64.36" AND sourceport=17146)
index=activity AND rg_functionality="DNS / DHCP" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="208.115.230.243" AND sourceport=16697 OR translatedipaddress="185.126.239.207" AND sourceport=26630 OR translatedipaddress="213.183.57.174" AND sourceport=12517 OR translatedipaddress="213.183.57.72" AND sourceport=12517 OR translatedipaddress="213.183.56.201" AND sourceport=12517 OR translatedipaddress="95.164.45.27" AND sourceport=17426 OR translatedipaddress="45.120.178.161" AND sourceport=11013 OR translatedipaddress="176.120.74.3" AND sourceport=17268 OR translatedipaddress="92.243.64.184" AND sourceport=17146 OR translatedipaddress="92.243.64.36" AND sourceport=17146)
index=activity AND rg_functionality="DNS / DHCP" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND destinationport=16697 OR destinationtranslatedaddress="185.126.239.207" AND destinationport=26630 OR destinationtranslatedaddress="213.183.57.174" AND destinationport=12517 OR destinationtranslatedaddress="213.183.57.72" AND destinationport=12517 OR destinationtranslatedaddress="213.183.56.201" AND destinationport=12517 OR destinationtranslatedaddress="95.164.45.27" AND destinationport=17426 OR destinationtranslatedaddress="45.120.178.161" AND destinationport=11013 OR destinationtranslatedaddress="176.120.74.3" AND destinationport=17268 OR destinationtranslatedaddress="92.243.64.184" AND destinationport=17146 OR destinationtranslatedaddress="92.243.64.36" AND destinationport=17146)
index=activity AND rg_functionality="DNS / DHCP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND destinationtranslatedport=16697 OR destinationtranslatedaddress="185.126.239.207" AND destinationtranslatedport=26630 OR destinationtranslatedaddress="213.183.57.174" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="213.183.57.72" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="213.183.56.201" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="95.164.45.27" AND destinationtranslatedport=17426 OR destinationtranslatedaddress="45.120.178.161" AND destinationtranslatedport=11013 OR destinationtranslatedaddress="176.120.74.3" AND destinationtranslatedport=17268 OR destinationtranslatedaddress="92.243.64.184" AND destinationtranslatedport=17146 OR destinationtranslatedaddress="92.243.64.36" AND destinationtranslatedport=17146)
index=activity AND rg_functionality="DNS / DHCP" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND translatedport=16697 OR destinationtranslatedaddress="185.126.239.207" AND translatedport=26630 OR destinationtranslatedaddress="213.183.57.174" AND translatedport=12517 OR destinationtranslatedaddress="213.183.57.72" AND translatedport=12517 OR destinationtranslatedaddress="213.183.56.201" AND translatedport=12517 OR destinationtranslatedaddress="95.164.45.27" AND translatedport=17426 OR destinationtranslatedaddress="45.120.178.161" AND translatedport=11013 OR destinationtranslatedaddress="176.120.74.3" AND translatedport=17268 OR destinationtranslatedaddress="92.243.64.184" AND translatedport=17146 OR destinationtranslatedaddress="92.243.64.36" AND translatedport=17146)
index=activity AND rg_functionality="DNS / DHCP" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="89.31.120.126" AND destinationport=11578 OR destinationaddress="91.132.93.33" AND destinationport=11578 OR destinationaddress="91.132.95.28" AND destinationport=8773 OR destinationaddress="91.132.95.204" AND destinationport=8773 OR destinationaddress="91.132.95.135" AND destinationport=8773 OR destinationaddress="194.233.174.22" AND destinationport=45358)
index=activity AND rg_functionality="DNS / DHCP" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="89.31.120.126" AND sourceport=11578 OR sourceaddress="91.132.93.33" AND sourceport=11578 OR sourceaddress="91.132.95.28" AND sourceport=8773 OR sourceaddress="91.132.95.204" AND sourceport=8773 OR sourceaddress="91.132.95.135" AND sourceport=8773 OR sourceaddress="194.233.174.22" AND sourceport=45358)
index=activity AND rg_functionality="DNS / DHCP" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="89.31.120.126" AND sourceport=11578 OR translatedipaddress="91.132.93.33" AND sourceport=11578 OR translatedipaddress="91.132.95.28" AND sourceport=8773 OR translatedipaddress="91.132.95.204" AND sourceport=8773 OR translatedipaddress="91.132.95.135" AND sourceport=8773 OR translatedipaddress="194.233.174.22" AND sourceport=45358)
index=activity AND rg_functionality="DNS / DHCP" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND destinationport=11578 OR destinationtranslatedaddress="91.132.93.33" AND destinationport=11578 OR destinationtranslatedaddress="91.132.95.28" AND destinationport=8773 OR destinationtranslatedaddress="91.132.95.204" AND destinationport=8773 OR destinationtranslatedaddress="91.132.95.135" AND destinationport=8773 OR destinationtranslatedaddress="194.233.174.22" AND destinationport=45358)
index=activity AND rg_functionality="DNS / DHCP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND destinationtranslatedport=11578 OR destinationtranslatedaddress="91.132.93.33" AND destinationtranslatedport=11578 OR destinationtranslatedaddress="91.132.95.28" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="91.132.95.204" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="91.132.95.135" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="194.233.174.22" AND destinationtranslatedport=45358)
index=activity AND rg_functionality="DNS / DHCP" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND translatedport=11578 OR destinationtranslatedaddress="91.132.93.33" AND translatedport=11578 OR destinationtranslatedaddress="91.132.95.28" AND translatedport=8773 OR destinationtranslatedaddress="91.132.95.204" AND translatedport=8773 OR destinationtranslatedaddress="91.132.95.135" AND translatedport=8773 OR destinationtranslatedaddress="194.233.174.22" AND translatedport=45358)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="158.255.212.173" AND destinationport=10862 OR destinationaddress="151.236.25.126" AND destinationport=11331 OR destinationaddress="158.255.215.49" AND destinationport=23079 OR destinationaddress="185.26.239.98" AND destinationport=11076 OR destinationaddress="151.236.25.10" AND destinationport=7205 OR destinationaddress="37.235.53.217" AND destinationport=1358 OR destinationaddress="151.236.23.232" AND destinationport=763 OR destinationaddress="37.235.56.204" AND destinationport=24239 OR destinationaddress="162.252.175.122" AND destinationport=4126 OR destinationaddress="162.252.175.136" AND destinationport=11077)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="158.255.212.173" AND sourceport=10862 OR sourceaddress="151.236.25.126" AND sourceport=11331 OR sourceaddress="158.255.215.49" AND sourceport=23079 OR sourceaddress="185.26.239.98" AND sourceport=11076 OR sourceaddress="151.236.25.10" AND sourceport=7205 OR sourceaddress="37.235.53.217" AND sourceport=1358 OR sourceaddress="151.236.23.232" AND sourceport=763 OR sourceaddress="37.235.56.204" AND sourceport=24239 OR sourceaddress="162.252.175.122" AND sourceport=4126 OR sourceaddress="162.252.175.136" AND sourceport=11077)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="158.255.212.173" AND sourceport=10862 OR translatedipaddress="151.236.25.126" AND sourceport=11331 OR translatedipaddress="158.255.215.49" AND sourceport=23079 OR translatedipaddress="185.26.239.98" AND sourceport=11076 OR translatedipaddress="151.236.25.10" AND sourceport=7205 OR translatedipaddress="37.235.53.217" AND sourceport=1358 OR translatedipaddress="151.236.23.232" AND sourceport=763 OR translatedipaddress="37.235.56.204" AND sourceport=24239 OR translatedipaddress="162.252.175.122" AND sourceport=4126 OR translatedipaddress="162.252.175.136" AND sourceport=11077)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND destinationport=10862 OR destinationtranslatedaddress="151.236.25.126" AND destinationport=11331 OR destinationtranslatedaddress="158.255.215.49" AND destinationport=23079 OR destinationtranslatedaddress="185.26.239.98" AND destinationport=11076 OR destinationtranslatedaddress="151.236.25.10" AND destinationport=7205 OR destinationtranslatedaddress="37.235.53.217" AND destinationport=1358 OR destinationtranslatedaddress="151.236.23.232" AND destinationport=763 OR destinationtranslatedaddress="37.235.56.204" AND destinationport=24239 OR destinationtranslatedaddress="162.252.175.122" AND destinationport=4126 OR destinationtranslatedaddress="162.252.175.136" AND destinationport=11077)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND destinationtranslatedport=10862 OR destinationtranslatedaddress="151.236.25.126" AND destinationtranslatedport=11331 OR destinationtranslatedaddress="158.255.215.49" AND destinationtranslatedport=23079 OR destinationtranslatedaddress="185.26.239.98" AND destinationtranslatedport=11076 OR destinationtranslatedaddress="151.236.25.10" AND destinationtranslatedport=7205 OR destinationtranslatedaddress="37.235.53.217" AND destinationtranslatedport=1358 OR destinationtranslatedaddress="151.236.23.232" AND destinationtranslatedport=763 OR destinationtranslatedaddress="37.235.56.204" AND destinationtranslatedport=24239 OR destinationtranslatedaddress="162.252.175.122" AND destinationtranslatedport=4126 OR destinationtranslatedaddress="162.252.175.136" AND destinationtranslatedport=11077)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND translatedport=10862 OR destinationtranslatedaddress="151.236.25.126" AND translatedport=11331 OR destinationtranslatedaddress="158.255.215.49" AND translatedport=23079 OR destinationtranslatedaddress="185.26.239.98" AND translatedport=11076 OR destinationtranslatedaddress="151.236.25.10" AND translatedport=7205 OR destinationtranslatedaddress="37.235.53.217" AND translatedport=1358 OR destinationtranslatedaddress="151.236.23.232" AND translatedport=763 OR destinationtranslatedaddress="37.235.56.204" AND translatedport=24239 OR destinationtranslatedaddress="162.252.175.122" AND translatedport=4126 OR destinationtranslatedaddress="162.252.175.136" AND translatedport=11077)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="162.252.175.163" AND destinationport=28693 OR destinationaddress="162.252.175.90" AND destinationport=845 OR destinationaddress="162.252.175.109" AND destinationport=28330 OR destinationaddress="151.236.20.39" AND destinationport=5524 OR destinationaddress="158.255.208.140" AND destinationport=86 OR destinationaddress="194.68.27.149" AND destinationport=13106 OR destinationaddress="194.68.27.176" AND destinationport=6460 OR destinationaddress="37.143.128.223" AND destinationport=16223 OR destinationaddress="31.40.212.130" AND destinationport=7225 OR destinationaddress="198.244.207.203" AND destinationport=2076)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="162.252.175.163" AND sourceport=28693 OR sourceaddress="162.252.175.90" AND sourceport=845 OR sourceaddress="162.252.175.109" AND sourceport=28330 OR sourceaddress="151.236.20.39" AND sourceport=5524 OR sourceaddress="158.255.208.140" AND sourceport=86 OR sourceaddress="194.68.27.149" AND sourceport=13106 OR sourceaddress="194.68.27.176" AND sourceport=6460 OR sourceaddress="37.143.128.223" AND sourceport=16223 OR sourceaddress="31.40.212.130" AND sourceport=7225 OR sourceaddress="198.244.207.203" AND sourceport=2076)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="162.252.175.163" AND sourceport=28693 OR translatedipaddress="162.252.175.90" AND sourceport=845 OR translatedipaddress="162.252.175.109" AND sourceport=28330 OR translatedipaddress="151.236.20.39" AND sourceport=5524 OR translatedipaddress="158.255.208.140" AND sourceport=86 OR translatedipaddress="194.68.27.149" AND sourceport=13106 OR translatedipaddress="194.68.27.176" AND sourceport=6460 OR translatedipaddress="37.143.128.223" AND sourceport=16223 OR translatedipaddress="31.40.212.130" AND sourceport=7225 OR translatedipaddress="198.244.207.203" AND sourceport=2076)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND destinationport=28693 OR destinationtranslatedaddress="162.252.175.90" AND destinationport=845 OR destinationtranslatedaddress="162.252.175.109" AND destinationport=28330 OR destinationtranslatedaddress="151.236.20.39" AND destinationport=5524 OR destinationtranslatedaddress="158.255.208.140" AND destinationport=86 OR destinationtranslatedaddress="194.68.27.149" AND destinationport=13106 OR destinationtranslatedaddress="194.68.27.176" AND destinationport=6460 OR destinationtranslatedaddress="37.143.128.223" AND destinationport=16223 OR destinationtranslatedaddress="31.40.212.130" AND destinationport=7225 OR destinationtranslatedaddress="198.244.207.203" AND destinationport=2076)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND destinationtranslatedport=28693 OR destinationtranslatedaddress="162.252.175.90" AND destinationtranslatedport=845 OR destinationtranslatedaddress="162.252.175.109" AND destinationtranslatedport=28330 OR destinationtranslatedaddress="151.236.20.39" AND destinationtranslatedport=5524 OR destinationtranslatedaddress="158.255.208.140" AND destinationtranslatedport=86 OR destinationtranslatedaddress="194.68.27.149" AND destinationtranslatedport=13106 OR destinationtranslatedaddress="194.68.27.176" AND destinationtranslatedport=6460 OR destinationtranslatedaddress="37.143.128.223" AND destinationtranslatedport=16223 OR destinationtranslatedaddress="31.40.212.130" AND destinationtranslatedport=7225 OR destinationtranslatedaddress="198.244.207.203" AND destinationtranslatedport=2076)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND translatedport=28693 OR destinationtranslatedaddress="162.252.175.90" AND translatedport=845 OR destinationtranslatedaddress="162.252.175.109" AND translatedport=28330 OR destinationtranslatedaddress="151.236.20.39" AND translatedport=5524 OR destinationtranslatedaddress="158.255.208.140" AND translatedport=86 OR destinationtranslatedaddress="194.68.27.149" AND translatedport=13106 OR destinationtranslatedaddress="194.68.27.176" AND translatedport=6460 OR destinationtranslatedaddress="37.143.128.223" AND translatedport=16223 OR destinationtranslatedaddress="31.40.212.130" AND translatedport=7225 OR destinationtranslatedaddress="198.244.207.203" AND translatedport=2076)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="208.115.230.243" AND destinationport=16697 OR destinationaddress="185.126.239.207" AND destinationport=26630 OR destinationaddress="213.183.57.174" AND destinationport=12517 OR destinationaddress="213.183.57.72" AND destinationport=12517 OR destinationaddress="213.183.56.201" AND destinationport=12517 OR destinationaddress="95.164.45.27" AND destinationport=17426 OR destinationaddress="45.120.178.161" AND destinationport=11013 OR destinationaddress="176.120.74.3" AND destinationport=17268 OR destinationaddress="92.243.64.184" AND destinationport=17146 OR destinationaddress="92.243.64.36" AND destinationport=17146)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="208.115.230.243" AND sourceport=16697 OR sourceaddress="185.126.239.207" AND sourceport=26630 OR sourceaddress="213.183.57.174" AND sourceport=12517 OR sourceaddress="213.183.57.72" AND sourceport=12517 OR sourceaddress="213.183.56.201" AND sourceport=12517 OR sourceaddress="95.164.45.27" AND sourceport=17426 OR sourceaddress="45.120.178.161" AND sourceport=11013 OR sourceaddress="176.120.74.3" AND sourceport=17268 OR sourceaddress="92.243.64.184" AND sourceport=17146 OR sourceaddress="92.243.64.36" AND sourceport=17146)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="208.115.230.243" AND sourceport=16697 OR translatedipaddress="185.126.239.207" AND sourceport=26630 OR translatedipaddress="213.183.57.174" AND sourceport=12517 OR translatedipaddress="213.183.57.72" AND sourceport=12517 OR translatedipaddress="213.183.56.201" AND sourceport=12517 OR translatedipaddress="95.164.45.27" AND sourceport=17426 OR translatedipaddress="45.120.178.161" AND sourceport=11013 OR translatedipaddress="176.120.74.3" AND sourceport=17268 OR translatedipaddress="92.243.64.184" AND sourceport=17146 OR translatedipaddress="92.243.64.36" AND sourceport=17146)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND destinationport=16697 OR destinationtranslatedaddress="185.126.239.207" AND destinationport=26630 OR destinationtranslatedaddress="213.183.57.174" AND destinationport=12517 OR destinationtranslatedaddress="213.183.57.72" AND destinationport=12517 OR destinationtranslatedaddress="213.183.56.201" AND destinationport=12517 OR destinationtranslatedaddress="95.164.45.27" AND destinationport=17426 OR destinationtranslatedaddress="45.120.178.161" AND destinationport=11013 OR destinationtranslatedaddress="176.120.74.3" AND destinationport=17268 OR destinationtranslatedaddress="92.243.64.184" AND destinationport=17146 OR destinationtranslatedaddress="92.243.64.36" AND destinationport=17146)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND destinationtranslatedport=16697 OR destinationtranslatedaddress="185.126.239.207" AND destinationtranslatedport=26630 OR destinationtranslatedaddress="213.183.57.174" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="213.183.57.72" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="213.183.56.201" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="95.164.45.27" AND destinationtranslatedport=17426 OR destinationtranslatedaddress="45.120.178.161" AND destinationtranslatedport=11013 OR destinationtranslatedaddress="176.120.74.3" AND destinationtranslatedport=17268 OR destinationtranslatedaddress="92.243.64.184" AND destinationtranslatedport=17146 OR destinationtranslatedaddress="92.243.64.36" AND destinationtranslatedport=17146)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND translatedport=16697 OR destinationtranslatedaddress="185.126.239.207" AND translatedport=26630 OR destinationtranslatedaddress="213.183.57.174" AND translatedport=12517 OR destinationtranslatedaddress="213.183.57.72" AND translatedport=12517 OR destinationtranslatedaddress="213.183.56.201" AND translatedport=12517 OR destinationtranslatedaddress="95.164.45.27" AND translatedport=17426 OR destinationtranslatedaddress="45.120.178.161" AND translatedport=11013 OR destinationtranslatedaddress="176.120.74.3" AND translatedport=17268 OR destinationtranslatedaddress="92.243.64.184" AND translatedport=17146 OR destinationtranslatedaddress="92.243.64.36" AND translatedport=17146)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="89.31.120.126" AND destinationport=11578 OR destinationaddress="91.132.93.33" AND destinationport=11578 OR destinationaddress="91.132.95.28" AND destinationport=8773 OR destinationaddress="91.132.95.204" AND destinationport=8773 OR destinationaddress="91.132.95.135" AND destinationport=8773 OR destinationaddress="194.233.174.22" AND destinationport=45358)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="89.31.120.126" AND sourceport=11578 OR sourceaddress="91.132.93.33" AND sourceport=11578 OR sourceaddress="91.132.95.28" AND sourceport=8773 OR sourceaddress="91.132.95.204" AND sourceport=8773 OR sourceaddress="91.132.95.135" AND sourceport=8773 OR sourceaddress="194.233.174.22" AND sourceport=45358)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="89.31.120.126" AND sourceport=11578 OR translatedipaddress="91.132.93.33" AND sourceport=11578 OR translatedipaddress="91.132.95.28" AND sourceport=8773 OR translatedipaddress="91.132.95.204" AND sourceport=8773 OR translatedipaddress="91.132.95.135" AND sourceport=8773 OR translatedipaddress="194.233.174.22" AND sourceport=45358)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND destinationport=11578 OR destinationtranslatedaddress="91.132.93.33" AND destinationport=11578 OR destinationtranslatedaddress="91.132.95.28" AND destinationport=8773 OR destinationtranslatedaddress="91.132.95.204" AND destinationport=8773 OR destinationtranslatedaddress="91.132.95.135" AND destinationport=8773 OR destinationtranslatedaddress="194.233.174.22" AND destinationport=45358)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND destinationtranslatedport=11578 OR destinationtranslatedaddress="91.132.93.33" AND destinationtranslatedport=11578 OR destinationtranslatedaddress="91.132.95.28" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="91.132.95.204" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="91.132.95.135" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="194.233.174.22" AND destinationtranslatedport=45358)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND translatedport=11578 OR destinationtranslatedaddress="91.132.93.33" AND translatedport=11578 OR destinationtranslatedaddress="91.132.95.28" AND translatedport=8773 OR destinationtranslatedaddress="91.132.95.204" AND translatedport=8773 OR destinationtranslatedaddress="91.132.95.135" AND translatedport=8773 OR destinationtranslatedaddress="194.233.174.22" AND translatedport=45358)
index=activity AND rg_functionality="Next Generation Firewall" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="158.255.212.173" AND destinationport=10862 OR destinationaddress="151.236.25.126" AND destinationport=11331 OR destinationaddress="158.255.215.49" AND destinationport=23079 OR destinationaddress="185.26.239.98" AND destinationport=11076 OR destinationaddress="151.236.25.10" AND destinationport=7205 OR destinationaddress="37.235.53.217" AND destinationport=1358 OR destinationaddress="151.236.23.232" AND destinationport=763 OR destinationaddress="37.235.56.204" AND destinationport=24239 OR destinationaddress="162.252.175.122" AND destinationport=4126 OR destinationaddress="162.252.175.136" AND destinationport=11077)
index=activity AND rg_functionality="Next Generation Firewall" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="158.255.212.173" AND sourceport=10862 OR sourceaddress="151.236.25.126" AND sourceport=11331 OR sourceaddress="158.255.215.49" AND sourceport=23079 OR sourceaddress="185.26.239.98" AND sourceport=11076 OR sourceaddress="151.236.25.10" AND sourceport=7205 OR sourceaddress="37.235.53.217" AND sourceport=1358 OR sourceaddress="151.236.23.232" AND sourceport=763 OR sourceaddress="37.235.56.204" AND sourceport=24239 OR sourceaddress="162.252.175.122" AND sourceport=4126 OR sourceaddress="162.252.175.136" AND sourceport=11077)
index=activity AND rg_functionality="Next Generation Firewall" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="158.255.212.173" AND sourceport=10862 OR translatedipaddress="151.236.25.126" AND sourceport=11331 OR translatedipaddress="158.255.215.49" AND sourceport=23079 OR translatedipaddress="185.26.239.98" AND sourceport=11076 OR translatedipaddress="151.236.25.10" AND sourceport=7205 OR translatedipaddress="37.235.53.217" AND sourceport=1358 OR translatedipaddress="151.236.23.232" AND sourceport=763 OR translatedipaddress="37.235.56.204" AND sourceport=24239 OR translatedipaddress="162.252.175.122" AND sourceport=4126 OR translatedipaddress="162.252.175.136" AND sourceport=11077)
index=activity AND rg_functionality="Next Generation Firewall" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND destinationport=10862 OR destinationtranslatedaddress="151.236.25.126" AND destinationport=11331 OR destinationtranslatedaddress="158.255.215.49" AND destinationport=23079 OR destinationtranslatedaddress="185.26.239.98" AND destinationport=11076 OR destinationtranslatedaddress="151.236.25.10" AND destinationport=7205 OR destinationtranslatedaddress="37.235.53.217" AND destinationport=1358 OR destinationtranslatedaddress="151.236.23.232" AND destinationport=763 OR destinationtranslatedaddress="37.235.56.204" AND destinationport=24239 OR destinationtranslatedaddress="162.252.175.122" AND destinationport=4126 OR destinationtranslatedaddress="162.252.175.136" AND destinationport=11077)
index=activity AND rg_functionality="Next Generation Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND destinationtranslatedport=10862 OR destinationtranslatedaddress="151.236.25.126" AND destinationtranslatedport=11331 OR destinationtranslatedaddress="158.255.215.49" AND destinationtranslatedport=23079 OR destinationtranslatedaddress="185.26.239.98" AND destinationtranslatedport=11076 OR destinationtranslatedaddress="151.236.25.10" AND destinationtranslatedport=7205 OR destinationtranslatedaddress="37.235.53.217" AND destinationtranslatedport=1358 OR destinationtranslatedaddress="151.236.23.232" AND destinationtranslatedport=763 OR destinationtranslatedaddress="37.235.56.204" AND destinationtranslatedport=24239 OR destinationtranslatedaddress="162.252.175.122" AND destinationtranslatedport=4126 OR destinationtranslatedaddress="162.252.175.136" AND destinationtranslatedport=11077)
index=activity AND rg_functionality="Next Generation Firewall" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND translatedport=10862 OR destinationtranslatedaddress="151.236.25.126" AND translatedport=11331 OR destinationtranslatedaddress="158.255.215.49" AND translatedport=23079 OR destinationtranslatedaddress="185.26.239.98" AND translatedport=11076 OR destinationtranslatedaddress="151.236.25.10" AND translatedport=7205 OR destinationtranslatedaddress="37.235.53.217" AND translatedport=1358 OR destinationtranslatedaddress="151.236.23.232" AND translatedport=763 OR destinationtranslatedaddress="37.235.56.204" AND translatedport=24239 OR destinationtranslatedaddress="162.252.175.122" AND translatedport=4126 OR destinationtranslatedaddress="162.252.175.136" AND translatedport=11077)
index=activity AND rg_functionality="Next Generation Firewall" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="162.252.175.163" AND destinationport=28693 OR destinationaddress="162.252.175.90" AND destinationport=845 OR destinationaddress="162.252.175.109" AND destinationport=28330 OR destinationaddress="151.236.20.39" AND destinationport=5524 OR destinationaddress="158.255.208.140" AND destinationport=86 OR destinationaddress="194.68.27.149" AND destinationport=13106 OR destinationaddress="194.68.27.176" AND destinationport=6460 OR destinationaddress="37.143.128.223" AND destinationport=16223 OR destinationaddress="31.40.212.130" AND destinationport=7225 OR destinationaddress="198.244.207.203" AND destinationport=2076)
index=activity AND rg_functionality="Next Generation Firewall" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="162.252.175.163" AND sourceport=28693 OR sourceaddress="162.252.175.90" AND sourceport=845 OR sourceaddress="162.252.175.109" AND sourceport=28330 OR sourceaddress="151.236.20.39" AND sourceport=5524 OR sourceaddress="158.255.208.140" AND sourceport=86 OR sourceaddress="194.68.27.149" AND sourceport=13106 OR sourceaddress="194.68.27.176" AND sourceport=6460 OR sourceaddress="37.143.128.223" AND sourceport=16223 OR sourceaddress="31.40.212.130" AND sourceport=7225 OR sourceaddress="198.244.207.203" AND sourceport=2076)
index=activity AND rg_functionality="Next Generation Firewall" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="162.252.175.163" AND sourceport=28693 OR translatedipaddress="162.252.175.90" AND sourceport=845 OR translatedipaddress="162.252.175.109" AND sourceport=28330 OR translatedipaddress="151.236.20.39" AND sourceport=5524 OR translatedipaddress="158.255.208.140" AND sourceport=86 OR translatedipaddress="194.68.27.149" AND sourceport=13106 OR translatedipaddress="194.68.27.176" AND sourceport=6460 OR translatedipaddress="37.143.128.223" AND sourceport=16223 OR translatedipaddress="31.40.212.130" AND sourceport=7225 OR translatedipaddress="198.244.207.203" AND sourceport=2076)
index=activity AND rg_functionality="Next Generation Firewall" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND destinationport=28693 OR destinationtranslatedaddress="162.252.175.90" AND destinationport=845 OR destinationtranslatedaddress="162.252.175.109" AND destinationport=28330 OR destinationtranslatedaddress="151.236.20.39" AND destinationport=5524 OR destinationtranslatedaddress="158.255.208.140" AND destinationport=86 OR destinationtranslatedaddress="194.68.27.149" AND destinationport=13106 OR destinationtranslatedaddress="194.68.27.176" AND destinationport=6460 OR destinationtranslatedaddress="37.143.128.223" AND destinationport=16223 OR destinationtranslatedaddress="31.40.212.130" AND destinationport=7225 OR destinationtranslatedaddress="198.244.207.203" AND destinationport=2076)
index=activity AND rg_functionality="Next Generation Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND destinationtranslatedport=28693 OR destinationtranslatedaddress="162.252.175.90" AND destinationtranslatedport=845 OR destinationtranslatedaddress="162.252.175.109" AND destinationtranslatedport=28330 OR destinationtranslatedaddress="151.236.20.39" AND destinationtranslatedport=5524 OR destinationtranslatedaddress="158.255.208.140" AND destinationtranslatedport=86 OR destinationtranslatedaddress="194.68.27.149" AND destinationtranslatedport=13106 OR destinationtranslatedaddress="194.68.27.176" AND destinationtranslatedport=6460 OR destinationtranslatedaddress="37.143.128.223" AND destinationtranslatedport=16223 OR destinationtranslatedaddress="31.40.212.130" AND destinationtranslatedport=7225 OR destinationtranslatedaddress="198.244.207.203" AND destinationtranslatedport=2076)
index=activity AND rg_functionality="Next Generation Firewall" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND translatedport=28693 OR destinationtranslatedaddress="162.252.175.90" AND translatedport=845 OR destinationtranslatedaddress="162.252.175.109" AND translatedport=28330 OR destinationtranslatedaddress="151.236.20.39" AND translatedport=5524 OR destinationtranslatedaddress="158.255.208.140" AND translatedport=86 OR destinationtranslatedaddress="194.68.27.149" AND translatedport=13106 OR destinationtranslatedaddress="194.68.27.176" AND translatedport=6460 OR destinationtranslatedaddress="37.143.128.223" AND translatedport=16223 OR destinationtranslatedaddress="31.40.212.130" AND translatedport=7225 OR destinationtranslatedaddress="198.244.207.203" AND translatedport=2076)
index=activity AND rg_functionality="Next Generation Firewall" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="208.115.230.243" AND destinationport=16697 OR destinationaddress="185.126.239.207" AND destinationport=26630 OR destinationaddress="213.183.57.174" AND destinationport=12517 OR destinationaddress="213.183.57.72" AND destinationport=12517 OR destinationaddress="213.183.56.201" AND destinationport=12517 OR destinationaddress="95.164.45.27" AND destinationport=17426 OR destinationaddress="45.120.178.161" AND destinationport=11013 OR destinationaddress="176.120.74.3" AND destinationport=17268 OR destinationaddress="92.243.64.184" AND destinationport=17146 OR destinationaddress="92.243.64.36" AND destinationport=17146)
index=activity AND rg_functionality="Next Generation Firewall" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="208.115.230.243" AND sourceport=16697 OR sourceaddress="185.126.239.207" AND sourceport=26630 OR sourceaddress="213.183.57.174" AND sourceport=12517 OR sourceaddress="213.183.57.72" AND sourceport=12517 OR sourceaddress="213.183.56.201" AND sourceport=12517 OR sourceaddress="95.164.45.27" AND sourceport=17426 OR sourceaddress="45.120.178.161" AND sourceport=11013 OR sourceaddress="176.120.74.3" AND sourceport=17268 OR sourceaddress="92.243.64.184" AND sourceport=17146 OR sourceaddress="92.243.64.36" AND sourceport=17146)
index=activity AND rg_functionality="Next Generation Firewall" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="208.115.230.243" AND sourceport=16697 OR translatedipaddress="185.126.239.207" AND sourceport=26630 OR translatedipaddress="213.183.57.174" AND sourceport=12517 OR translatedipaddress="213.183.57.72" AND sourceport=12517 OR translatedipaddress="213.183.56.201" AND sourceport=12517 OR translatedipaddress="95.164.45.27" AND sourceport=17426 OR translatedipaddress="45.120.178.161" AND sourceport=11013 OR translatedipaddress="176.120.74.3" AND sourceport=17268 OR translatedipaddress="92.243.64.184" AND sourceport=17146 OR translatedipaddress="92.243.64.36" AND sourceport=17146)
index=activity AND rg_functionality="Next Generation Firewall" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND destinationport=16697 OR destinationtranslatedaddress="185.126.239.207" AND destinationport=26630 OR destinationtranslatedaddress="213.183.57.174" AND destinationport=12517 OR destinationtranslatedaddress="213.183.57.72" AND destinationport=12517 OR destinationtranslatedaddress="213.183.56.201" AND destinationport=12517 OR destinationtranslatedaddress="95.164.45.27" AND destinationport=17426 OR destinationtranslatedaddress="45.120.178.161" AND destinationport=11013 OR destinationtranslatedaddress="176.120.74.3" AND destinationport=17268 OR destinationtranslatedaddress="92.243.64.184" AND destinationport=17146 OR destinationtranslatedaddress="92.243.64.36" AND destinationport=17146)
index=activity AND rg_functionality="Next Generation Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND destinationtranslatedport=16697 OR destinationtranslatedaddress="185.126.239.207" AND destinationtranslatedport=26630 OR destinationtranslatedaddress="213.183.57.174" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="213.183.57.72" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="213.183.56.201" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="95.164.45.27" AND destinationtranslatedport=17426 OR destinationtranslatedaddress="45.120.178.161" AND destinationtranslatedport=11013 OR destinationtranslatedaddress="176.120.74.3" AND destinationtranslatedport=17268 OR destinationtranslatedaddress="92.243.64.184" AND destinationtranslatedport=17146 OR destinationtranslatedaddress="92.243.64.36" AND destinationtranslatedport=17146)
index=activity AND rg_functionality="Next Generation Firewall" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND translatedport=16697 OR destinationtranslatedaddress="185.126.239.207" AND translatedport=26630 OR destinationtranslatedaddress="213.183.57.174" AND translatedport=12517 OR destinationtranslatedaddress="213.183.57.72" AND translatedport=12517 OR destinationtranslatedaddress="213.183.56.201" AND translatedport=12517 OR destinationtranslatedaddress="95.164.45.27" AND translatedport=17426 OR destinationtranslatedaddress="45.120.178.161" AND translatedport=11013 OR destinationtranslatedaddress="176.120.74.3" AND translatedport=17268 OR destinationtranslatedaddress="92.243.64.184" AND translatedport=17146 OR destinationtranslatedaddress="92.243.64.36" AND translatedport=17146)
index=activity AND rg_functionality="Next Generation Firewall" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="89.31.120.126" AND destinationport=11578 OR destinationaddress="91.132.93.33" AND destinationport=11578 OR destinationaddress="91.132.95.28" AND destinationport=8773 OR destinationaddress="91.132.95.204" AND destinationport=8773 OR destinationaddress="91.132.95.135" AND destinationport=8773 OR destinationaddress="194.233.174.22" AND destinationport=45358)
index=activity AND rg_functionality="Next Generation Firewall" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="89.31.120.126" AND sourceport=11578 OR sourceaddress="91.132.93.33" AND sourceport=11578 OR sourceaddress="91.132.95.28" AND sourceport=8773 OR sourceaddress="91.132.95.204" AND sourceport=8773 OR sourceaddress="91.132.95.135" AND sourceport=8773 OR sourceaddress="194.233.174.22" AND sourceport=45358)
index=activity AND rg_functionality="Next Generation Firewall" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="89.31.120.126" AND sourceport=11578 OR translatedipaddress="91.132.93.33" AND sourceport=11578 OR translatedipaddress="91.132.95.28" AND sourceport=8773 OR translatedipaddress="91.132.95.204" AND sourceport=8773 OR translatedipaddress="91.132.95.135" AND sourceport=8773 OR translatedipaddress="194.233.174.22" AND sourceport=45358)
index=activity AND rg_functionality="Next Generation Firewall" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND destinationport=11578 OR destinationtranslatedaddress="91.132.93.33" AND destinationport=11578 OR destinationtranslatedaddress="91.132.95.28" AND destinationport=8773 OR destinationtranslatedaddress="91.132.95.204" AND destinationport=8773 OR destinationtranslatedaddress="91.132.95.135" AND destinationport=8773 OR destinationtranslatedaddress="194.233.174.22" AND destinationport=45358)
index=activity AND rg_functionality="Next Generation Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND destinationtranslatedport=11578 OR destinationtranslatedaddress="91.132.93.33" AND destinationtranslatedport=11578 OR destinationtranslatedaddress="91.132.95.28" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="91.132.95.204" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="91.132.95.135" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="194.233.174.22" AND destinationtranslatedport=45358)
index=activity AND rg_functionality="Next Generation Firewall" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND translatedport=11578 OR destinationtranslatedaddress="91.132.93.33" AND translatedport=11578 OR destinationtranslatedaddress="91.132.95.28" AND translatedport=8773 OR destinationtranslatedaddress="91.132.95.204" AND translatedport=8773 OR destinationtranslatedaddress="91.132.95.135" AND translatedport=8773 OR destinationtranslatedaddress="194.233.174.22" AND translatedport=45358)
index=activity AND rg_functionality="Firewall" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="158.255.212.173" AND destinationport=10862 OR destinationaddress="151.236.25.126" AND destinationport=11331 OR destinationaddress="158.255.215.49" AND destinationport=23079 OR destinationaddress="185.26.239.98" AND destinationport=11076 OR destinationaddress="151.236.25.10" AND destinationport=7205 OR destinationaddress="37.235.53.217" AND destinationport=1358 OR destinationaddress="151.236.23.232" AND destinationport=763 OR destinationaddress="37.235.56.204" AND destinationport=24239 OR destinationaddress="162.252.175.122" AND destinationport=4126 OR destinationaddress="162.252.175.136" AND destinationport=11077)
index=activity AND rg_functionality="Firewall" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="158.255.212.173" AND sourceport=10862 OR sourceaddress="151.236.25.126" AND sourceport=11331 OR sourceaddress="158.255.215.49" AND sourceport=23079 OR sourceaddress="185.26.239.98" AND sourceport=11076 OR sourceaddress="151.236.25.10" AND sourceport=7205 OR sourceaddress="37.235.53.217" AND sourceport=1358 OR sourceaddress="151.236.23.232" AND sourceport=763 OR sourceaddress="37.235.56.204" AND sourceport=24239 OR sourceaddress="162.252.175.122" AND sourceport=4126 OR sourceaddress="162.252.175.136" AND sourceport=11077)
index=activity AND rg_functionality="Firewall" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="158.255.212.173" AND sourceport=10862 OR translatedipaddress="151.236.25.126" AND sourceport=11331 OR translatedipaddress="158.255.215.49" AND sourceport=23079 OR translatedipaddress="185.26.239.98" AND sourceport=11076 OR translatedipaddress="151.236.25.10" AND sourceport=7205 OR translatedipaddress="37.235.53.217" AND sourceport=1358 OR translatedipaddress="151.236.23.232" AND sourceport=763 OR translatedipaddress="37.235.56.204" AND sourceport=24239 OR translatedipaddress="162.252.175.122" AND sourceport=4126 OR translatedipaddress="162.252.175.136" AND sourceport=11077)
index=activity AND rg_functionality="Firewall" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND destinationport=10862 OR destinationtranslatedaddress="151.236.25.126" AND destinationport=11331 OR destinationtranslatedaddress="158.255.215.49" AND destinationport=23079 OR destinationtranslatedaddress="185.26.239.98" AND destinationport=11076 OR destinationtranslatedaddress="151.236.25.10" AND destinationport=7205 OR destinationtranslatedaddress="37.235.53.217" AND destinationport=1358 OR destinationtranslatedaddress="151.236.23.232" AND destinationport=763 OR destinationtranslatedaddress="37.235.56.204" AND destinationport=24239 OR destinationtranslatedaddress="162.252.175.122" AND destinationport=4126 OR destinationtranslatedaddress="162.252.175.136" AND destinationport=11077)
index=activity AND rg_functionality="Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND destinationtranslatedport=10862 OR destinationtranslatedaddress="151.236.25.126" AND destinationtranslatedport=11331 OR destinationtranslatedaddress="158.255.215.49" AND destinationtranslatedport=23079 OR destinationtranslatedaddress="185.26.239.98" AND destinationtranslatedport=11076 OR destinationtranslatedaddress="151.236.25.10" AND destinationtranslatedport=7205 OR destinationtranslatedaddress="37.235.53.217" AND destinationtranslatedport=1358 OR destinationtranslatedaddress="151.236.23.232" AND destinationtranslatedport=763 OR destinationtranslatedaddress="37.235.56.204" AND destinationtranslatedport=24239 OR destinationtranslatedaddress="162.252.175.122" AND destinationtranslatedport=4126 OR destinationtranslatedaddress="162.252.175.136" AND destinationtranslatedport=11077)
index=activity AND rg_functionality="Firewall" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND translatedport=10862 OR destinationtranslatedaddress="151.236.25.126" AND translatedport=11331 OR destinationtranslatedaddress="158.255.215.49" AND translatedport=23079 OR destinationtranslatedaddress="185.26.239.98" AND translatedport=11076 OR destinationtranslatedaddress="151.236.25.10" AND translatedport=7205 OR destinationtranslatedaddress="37.235.53.217" AND translatedport=1358 OR destinationtranslatedaddress="151.236.23.232" AND translatedport=763 OR destinationtranslatedaddress="37.235.56.204" AND translatedport=24239 OR destinationtranslatedaddress="162.252.175.122" AND translatedport=4126 OR destinationtranslatedaddress="162.252.175.136" AND translatedport=11077)
index=activity AND rg_functionality="Firewall" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="162.252.175.163" AND destinationport=28693 OR destinationaddress="162.252.175.90" AND destinationport=845 OR destinationaddress="162.252.175.109" AND destinationport=28330 OR destinationaddress="151.236.20.39" AND destinationport=5524 OR destinationaddress="158.255.208.140" AND destinationport=86 OR destinationaddress="194.68.27.149" AND destinationport=13106 OR destinationaddress="194.68.27.176" AND destinationport=6460 OR destinationaddress="37.143.128.223" AND destinationport=16223 OR destinationaddress="31.40.212.130" AND destinationport=7225 OR destinationaddress="198.244.207.203" AND destinationport=2076)
index=activity AND rg_functionality="Firewall" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="162.252.175.163" AND sourceport=28693 OR sourceaddress="162.252.175.90" AND sourceport=845 OR sourceaddress="162.252.175.109" AND sourceport=28330 OR sourceaddress="151.236.20.39" AND sourceport=5524 OR sourceaddress="158.255.208.140" AND sourceport=86 OR sourceaddress="194.68.27.149" AND sourceport=13106 OR sourceaddress="194.68.27.176" AND sourceport=6460 OR sourceaddress="37.143.128.223" AND sourceport=16223 OR sourceaddress="31.40.212.130" AND sourceport=7225 OR sourceaddress="198.244.207.203" AND sourceport=2076)
index=activity AND rg_functionality="Firewall" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="162.252.175.163" AND sourceport=28693 OR translatedipaddress="162.252.175.90" AND sourceport=845 OR translatedipaddress="162.252.175.109" AND sourceport=28330 OR translatedipaddress="151.236.20.39" AND sourceport=5524 OR translatedipaddress="158.255.208.140" AND sourceport=86 OR translatedipaddress="194.68.27.149" AND sourceport=13106 OR translatedipaddress="194.68.27.176" AND sourceport=6460 OR translatedipaddress="37.143.128.223" AND sourceport=16223 OR translatedipaddress="31.40.212.130" AND sourceport=7225 OR translatedipaddress="198.244.207.203" AND sourceport=2076)
index=activity AND rg_functionality="Firewall" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND destinationport=28693 OR destinationtranslatedaddress="162.252.175.90" AND destinationport=845 OR destinationtranslatedaddress="162.252.175.109" AND destinationport=28330 OR destinationtranslatedaddress="151.236.20.39" AND destinationport=5524 OR destinationtranslatedaddress="158.255.208.140" AND destinationport=86 OR destinationtranslatedaddress="194.68.27.149" AND destinationport=13106 OR destinationtranslatedaddress="194.68.27.176" AND destinationport=6460 OR destinationtranslatedaddress="37.143.128.223" AND destinationport=16223 OR destinationtranslatedaddress="31.40.212.130" AND destinationport=7225 OR destinationtranslatedaddress="198.244.207.203" AND destinationport=2076)
index=activity AND rg_functionality="Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND destinationtranslatedport=28693 OR destinationtranslatedaddress="162.252.175.90" AND destinationtranslatedport=845 OR destinationtranslatedaddress="162.252.175.109" AND destinationtranslatedport=28330 OR destinationtranslatedaddress="151.236.20.39" AND destinationtranslatedport=5524 OR destinationtranslatedaddress="158.255.208.140" AND destinationtranslatedport=86 OR destinationtranslatedaddress="194.68.27.149" AND destinationtranslatedport=13106 OR destinationtranslatedaddress="194.68.27.176" AND destinationtranslatedport=6460 OR destinationtranslatedaddress="37.143.128.223" AND destinationtranslatedport=16223 OR destinationtranslatedaddress="31.40.212.130" AND destinationtranslatedport=7225 OR destinationtranslatedaddress="198.244.207.203" AND destinationtranslatedport=2076)
index=activity AND rg_functionality="Firewall" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND translatedport=28693 OR destinationtranslatedaddress="162.252.175.90" AND translatedport=845 OR destinationtranslatedaddress="162.252.175.109" AND translatedport=28330 OR destinationtranslatedaddress="151.236.20.39" AND translatedport=5524 OR destinationtranslatedaddress="158.255.208.140" AND translatedport=86 OR destinationtranslatedaddress="194.68.27.149" AND translatedport=13106 OR destinationtranslatedaddress="194.68.27.176" AND translatedport=6460 OR destinationtranslatedaddress="37.143.128.223" AND translatedport=16223 OR destinationtranslatedaddress="31.40.212.130" AND translatedport=7225 OR destinationtranslatedaddress="198.244.207.203" AND translatedport=2076)
index=activity AND rg_functionality="Firewall" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="208.115.230.243" AND destinationport=16697 OR destinationaddress="185.126.239.207" AND destinationport=26630 OR destinationaddress="213.183.57.174" AND destinationport=12517 OR destinationaddress="213.183.57.72" AND destinationport=12517 OR destinationaddress="213.183.56.201" AND destinationport=12517 OR destinationaddress="95.164.45.27" AND destinationport=17426 OR destinationaddress="45.120.178.161" AND destinationport=11013 OR destinationaddress="176.120.74.3" AND destinationport=17268 OR destinationaddress="92.243.64.184" AND destinationport=17146 OR destinationaddress="92.243.64.36" AND destinationport=17146)
index=activity AND rg_functionality="Firewall" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="208.115.230.243" AND sourceport=16697 OR sourceaddress="185.126.239.207" AND sourceport=26630 OR sourceaddress="213.183.57.174" AND sourceport=12517 OR sourceaddress="213.183.57.72" AND sourceport=12517 OR sourceaddress="213.183.56.201" AND sourceport=12517 OR sourceaddress="95.164.45.27" AND sourceport=17426 OR sourceaddress="45.120.178.161" AND sourceport=11013 OR sourceaddress="176.120.74.3" AND sourceport=17268 OR sourceaddress="92.243.64.184" AND sourceport=17146 OR sourceaddress="92.243.64.36" AND sourceport=17146)
index=activity AND rg_functionality="Firewall" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="208.115.230.243" AND sourceport=16697 OR translatedipaddress="185.126.239.207" AND sourceport=26630 OR translatedipaddress="213.183.57.174" AND sourceport=12517 OR translatedipaddress="213.183.57.72" AND sourceport=12517 OR translatedipaddress="213.183.56.201" AND sourceport=12517 OR translatedipaddress="95.164.45.27" AND sourceport=17426 OR translatedipaddress="45.120.178.161" AND sourceport=11013 OR translatedipaddress="176.120.74.3" AND sourceport=17268 OR translatedipaddress="92.243.64.184" AND sourceport=17146 OR translatedipaddress="92.243.64.36" AND sourceport=17146)
index=activity AND rg_functionality="Firewall" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND destinationport=16697 OR destinationtranslatedaddress="185.126.239.207" AND destinationport=26630 OR destinationtranslatedaddress="213.183.57.174" AND destinationport=12517 OR destinationtranslatedaddress="213.183.57.72" AND destinationport=12517 OR destinationtranslatedaddress="213.183.56.201" AND destinationport=12517 OR destinationtranslatedaddress="95.164.45.27" AND destinationport=17426 OR destinationtranslatedaddress="45.120.178.161" AND destinationport=11013 OR destinationtranslatedaddress="176.120.74.3" AND destinationport=17268 OR destinationtranslatedaddress="92.243.64.184" AND destinationport=17146 OR destinationtranslatedaddress="92.243.64.36" AND destinationport=17146)
index=activity AND rg_functionality="Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND destinationtranslatedport=16697 OR destinationtranslatedaddress="185.126.239.207" AND destinationtranslatedport=26630 OR destinationtranslatedaddress="213.183.57.174" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="213.183.57.72" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="213.183.56.201" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="95.164.45.27" AND destinationtranslatedport=17426 OR destinationtranslatedaddress="45.120.178.161" AND destinationtranslatedport=11013 OR destinationtranslatedaddress="176.120.74.3" AND destinationtranslatedport=17268 OR destinationtranslatedaddress="92.243.64.184" AND destinationtranslatedport=17146 OR destinationtranslatedaddress="92.243.64.36" AND destinationtranslatedport=17146)
index=activity AND rg_functionality="Firewall" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND translatedport=16697 OR destinationtranslatedaddress="185.126.239.207" AND translatedport=26630 OR destinationtranslatedaddress="213.183.57.174" AND translatedport=12517 OR destinationtranslatedaddress="213.183.57.72" AND translatedport=12517 OR destinationtranslatedaddress="213.183.56.201" AND translatedport=12517 OR destinationtranslatedaddress="95.164.45.27" AND translatedport=17426 OR destinationtranslatedaddress="45.120.178.161" AND translatedport=11013 OR destinationtranslatedaddress="176.120.74.3" AND translatedport=17268 OR destinationtranslatedaddress="92.243.64.184" AND translatedport=17146 OR destinationtranslatedaddress="92.243.64.36" AND translatedport=17146)
index=activity AND rg_functionality="Firewall" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="89.31.120.126" AND destinationport=11578 OR destinationaddress="91.132.93.33" AND destinationport=11578 OR destinationaddress="91.132.95.28" AND destinationport=8773 OR destinationaddress="91.132.95.204" AND destinationport=8773 OR destinationaddress="91.132.95.135" AND destinationport=8773 OR destinationaddress="194.233.174.22" AND destinationport=45358)
index=activity AND rg_functionality="Firewall" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="89.31.120.126" AND sourceport=11578 OR sourceaddress="91.132.93.33" AND sourceport=11578 OR sourceaddress="91.132.95.28" AND sourceport=8773 OR sourceaddress="91.132.95.204" AND sourceport=8773 OR sourceaddress="91.132.95.135" AND sourceport=8773 OR sourceaddress="194.233.174.22" AND sourceport=45358)
index=activity AND rg_functionality="Firewall" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="89.31.120.126" AND sourceport=11578 OR translatedipaddress="91.132.93.33" AND sourceport=11578 OR translatedipaddress="91.132.95.28" AND sourceport=8773 OR translatedipaddress="91.132.95.204" AND sourceport=8773 OR translatedipaddress="91.132.95.135" AND sourceport=8773 OR translatedipaddress="194.233.174.22" AND sourceport=45358)
index=activity AND rg_functionality="Firewall" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND destinationport=11578 OR destinationtranslatedaddress="91.132.93.33" AND destinationport=11578 OR destinationtranslatedaddress="91.132.95.28" AND destinationport=8773 OR destinationtranslatedaddress="91.132.95.204" AND destinationport=8773 OR destinationtranslatedaddress="91.132.95.135" AND destinationport=8773 OR destinationtranslatedaddress="194.233.174.22" AND destinationport=45358)
index=activity AND rg_functionality="Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND destinationtranslatedport=11578 OR destinationtranslatedaddress="91.132.93.33" AND destinationtranslatedport=11578 OR destinationtranslatedaddress="91.132.95.28" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="91.132.95.204" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="91.132.95.135" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="194.233.174.22" AND destinationtranslatedport=45358)
index=activity AND rg_functionality="Firewall" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND translatedport=11578 OR destinationtranslatedaddress="91.132.93.33" AND translatedport=11578 OR destinationtranslatedaddress="91.132.95.28" AND translatedport=8773 OR destinationtranslatedaddress="91.132.95.204" AND translatedport=8773 OR destinationtranslatedaddress="91.132.95.135" AND translatedport=8773 OR destinationtranslatedaddress="194.233.174.22" AND translatedport=45358)
index=activity AND rg_functionality="Web Proxy" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="158.255.212.173" AND destinationport=10862 OR destinationaddress="151.236.25.126" AND destinationport=11331 OR destinationaddress="158.255.215.49" AND destinationport=23079 OR destinationaddress="185.26.239.98" AND destinationport=11076 OR destinationaddress="151.236.25.10" AND destinationport=7205 OR destinationaddress="37.235.53.217" AND destinationport=1358 OR destinationaddress="151.236.23.232" AND destinationport=763 OR destinationaddress="37.235.56.204" AND destinationport=24239 OR destinationaddress="162.252.175.122" AND destinationport=4126 OR destinationaddress="162.252.175.136" AND destinationport=11077)
index=activity AND rg_functionality="Web Proxy" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="158.255.212.173" AND sourceport=10862 OR sourceaddress="151.236.25.126" AND sourceport=11331 OR sourceaddress="158.255.215.49" AND sourceport=23079 OR sourceaddress="185.26.239.98" AND sourceport=11076 OR sourceaddress="151.236.25.10" AND sourceport=7205 OR sourceaddress="37.235.53.217" AND sourceport=1358 OR sourceaddress="151.236.23.232" AND sourceport=763 OR sourceaddress="37.235.56.204" AND sourceport=24239 OR sourceaddress="162.252.175.122" AND sourceport=4126 OR sourceaddress="162.252.175.136" AND sourceport=11077)
index=activity AND rg_functionality="Web Proxy" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="158.255.212.173" AND sourceport=10862 OR translatedipaddress="151.236.25.126" AND sourceport=11331 OR translatedipaddress="158.255.215.49" AND sourceport=23079 OR translatedipaddress="185.26.239.98" AND sourceport=11076 OR translatedipaddress="151.236.25.10" AND sourceport=7205 OR translatedipaddress="37.235.53.217" AND sourceport=1358 OR translatedipaddress="151.236.23.232" AND sourceport=763 OR translatedipaddress="37.235.56.204" AND sourceport=24239 OR translatedipaddress="162.252.175.122" AND sourceport=4126 OR translatedipaddress="162.252.175.136" AND sourceport=11077)
index=activity AND rg_functionality="Web Proxy" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND destinationport=10862 OR destinationtranslatedaddress="151.236.25.126" AND destinationport=11331 OR destinationtranslatedaddress="158.255.215.49" AND destinationport=23079 OR destinationtranslatedaddress="185.26.239.98" AND destinationport=11076 OR destinationtranslatedaddress="151.236.25.10" AND destinationport=7205 OR destinationtranslatedaddress="37.235.53.217" AND destinationport=1358 OR destinationtranslatedaddress="151.236.23.232" AND destinationport=763 OR destinationtranslatedaddress="37.235.56.204" AND destinationport=24239 OR destinationtranslatedaddress="162.252.175.122" AND destinationport=4126 OR destinationtranslatedaddress="162.252.175.136" AND destinationport=11077)
index=activity AND rg_functionality="Web Proxy" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND destinationtranslatedport=10862 OR destinationtranslatedaddress="151.236.25.126" AND destinationtranslatedport=11331 OR destinationtranslatedaddress="158.255.215.49" AND destinationtranslatedport=23079 OR destinationtranslatedaddress="185.26.239.98" AND destinationtranslatedport=11076 OR destinationtranslatedaddress="151.236.25.10" AND destinationtranslatedport=7205 OR destinationtranslatedaddress="37.235.53.217" AND destinationtranslatedport=1358 OR destinationtranslatedaddress="151.236.23.232" AND destinationtranslatedport=763 OR destinationtranslatedaddress="37.235.56.204" AND destinationtranslatedport=24239 OR destinationtranslatedaddress="162.252.175.122" AND destinationtranslatedport=4126 OR destinationtranslatedaddress="162.252.175.136" AND destinationtranslatedport=11077)
index=activity AND rg_functionality="Web Proxy" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND translatedport=10862 OR destinationtranslatedaddress="151.236.25.126" AND translatedport=11331 OR destinationtranslatedaddress="158.255.215.49" AND translatedport=23079 OR destinationtranslatedaddress="185.26.239.98" AND translatedport=11076 OR destinationtranslatedaddress="151.236.25.10" AND translatedport=7205 OR destinationtranslatedaddress="37.235.53.217" AND translatedport=1358 OR destinationtranslatedaddress="151.236.23.232" AND translatedport=763 OR destinationtranslatedaddress="37.235.56.204" AND translatedport=24239 OR destinationtranslatedaddress="162.252.175.122" AND translatedport=4126 OR destinationtranslatedaddress="162.252.175.136" AND translatedport=11077)
index=activity AND rg_functionality="Web Proxy" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="162.252.175.163" AND destinationport=28693 OR destinationaddress="162.252.175.90" AND destinationport=845 OR destinationaddress="162.252.175.109" AND destinationport=28330 OR destinationaddress="151.236.20.39" AND destinationport=5524 OR destinationaddress="158.255.208.140" AND destinationport=86 OR destinationaddress="194.68.27.149" AND destinationport=13106 OR destinationaddress="194.68.27.176" AND destinationport=6460 OR destinationaddress="37.143.128.223" AND destinationport=16223 OR destinationaddress="31.40.212.130" AND destinationport=7225 OR destinationaddress="198.244.207.203" AND destinationport=2076)
index=activity AND rg_functionality="Web Proxy" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="162.252.175.163" AND sourceport=28693 OR sourceaddress="162.252.175.90" AND sourceport=845 OR sourceaddress="162.252.175.109" AND sourceport=28330 OR sourceaddress="151.236.20.39" AND sourceport=5524 OR sourceaddress="158.255.208.140" AND sourceport=86 OR sourceaddress="194.68.27.149" AND sourceport=13106 OR sourceaddress="194.68.27.176" AND sourceport=6460 OR sourceaddress="37.143.128.223" AND sourceport=16223 OR sourceaddress="31.40.212.130" AND sourceport=7225 OR sourceaddress="198.244.207.203" AND sourceport=2076)
index=activity AND rg_functionality="Web Proxy" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="162.252.175.163" AND sourceport=28693 OR translatedipaddress="162.252.175.90" AND sourceport=845 OR translatedipaddress="162.252.175.109" AND sourceport=28330 OR translatedipaddress="151.236.20.39" AND sourceport=5524 OR translatedipaddress="158.255.208.140" AND sourceport=86 OR translatedipaddress="194.68.27.149" AND sourceport=13106 OR translatedipaddress="194.68.27.176" AND sourceport=6460 OR translatedipaddress="37.143.128.223" AND sourceport=16223 OR translatedipaddress="31.40.212.130" AND sourceport=7225 OR translatedipaddress="198.244.207.203" AND sourceport=2076)
index=activity AND rg_functionality="Web Proxy" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND destinationport=28693 OR destinationtranslatedaddress="162.252.175.90" AND destinationport=845 OR destinationtranslatedaddress="162.252.175.109" AND destinationport=28330 OR destinationtranslatedaddress="151.236.20.39" AND destinationport=5524 OR destinationtranslatedaddress="158.255.208.140" AND destinationport=86 OR destinationtranslatedaddress="194.68.27.149" AND destinationport=13106 OR destinationtranslatedaddress="194.68.27.176" AND destinationport=6460 OR destinationtranslatedaddress="37.143.128.223" AND destinationport=16223 OR destinationtranslatedaddress="31.40.212.130" AND destinationport=7225 OR destinationtranslatedaddress="198.244.207.203" AND destinationport=2076)
index=activity AND rg_functionality="Web Proxy" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND destinationtranslatedport=28693 OR destinationtranslatedaddress="162.252.175.90" AND destinationtranslatedport=845 OR destinationtranslatedaddress="162.252.175.109" AND destinationtranslatedport=28330 OR destinationtranslatedaddress="151.236.20.39" AND destinationtranslatedport=5524 OR destinationtranslatedaddress="158.255.208.140" AND destinationtranslatedport=86 OR destinationtranslatedaddress="194.68.27.149" AND destinationtranslatedport=13106 OR destinationtranslatedaddress="194.68.27.176" AND destinationtranslatedport=6460 OR destinationtranslatedaddress="37.143.128.223" AND destinationtranslatedport=16223 OR destinationtranslatedaddress="31.40.212.130" AND destinationtranslatedport=7225 OR destinationtranslatedaddress="198.244.207.203" AND destinationtranslatedport=2076)
index=activity AND rg_functionality="Web Proxy" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND translatedport=28693 OR destinationtranslatedaddress="162.252.175.90" AND translatedport=845 OR destinationtranslatedaddress="162.252.175.109" AND translatedport=28330 OR destinationtranslatedaddress="151.236.20.39" AND translatedport=5524 OR destinationtranslatedaddress="158.255.208.140" AND translatedport=86 OR destinationtranslatedaddress="194.68.27.149" AND translatedport=13106 OR destinationtranslatedaddress="194.68.27.176" AND translatedport=6460 OR destinationtranslatedaddress="37.143.128.223" AND translatedport=16223 OR destinationtranslatedaddress="31.40.212.130" AND translatedport=7225 OR destinationtranslatedaddress="198.244.207.203" AND translatedport=2076)
index=activity AND rg_functionality="Web Proxy" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="208.115.230.243" AND destinationport=16697 OR destinationaddress="185.126.239.207" AND destinationport=26630 OR destinationaddress="213.183.57.174" AND destinationport=12517 OR destinationaddress="213.183.57.72" AND destinationport=12517 OR destinationaddress="213.183.56.201" AND destinationport=12517 OR destinationaddress="95.164.45.27" AND destinationport=17426 OR destinationaddress="45.120.178.161" AND destinationport=11013 OR destinationaddress="176.120.74.3" AND destinationport=17268 OR destinationaddress="92.243.64.184" AND destinationport=17146 OR destinationaddress="92.243.64.36" AND destinationport=17146)
index=activity AND rg_functionality="Web Proxy" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="208.115.230.243" AND sourceport=16697 OR sourceaddress="185.126.239.207" AND sourceport=26630 OR sourceaddress="213.183.57.174" AND sourceport=12517 OR sourceaddress="213.183.57.72" AND sourceport=12517 OR sourceaddress="213.183.56.201" AND sourceport=12517 OR sourceaddress="95.164.45.27" AND sourceport=17426 OR sourceaddress="45.120.178.161" AND sourceport=11013 OR sourceaddress="176.120.74.3" AND sourceport=17268 OR sourceaddress="92.243.64.184" AND sourceport=17146 OR sourceaddress="92.243.64.36" AND sourceport=17146)
index=activity AND rg_functionality="Web Proxy" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="208.115.230.243" AND sourceport=16697 OR translatedipaddress="185.126.239.207" AND sourceport=26630 OR translatedipaddress="213.183.57.174" AND sourceport=12517 OR translatedipaddress="213.183.57.72" AND sourceport=12517 OR translatedipaddress="213.183.56.201" AND sourceport=12517 OR translatedipaddress="95.164.45.27" AND sourceport=17426 OR translatedipaddress="45.120.178.161" AND sourceport=11013 OR translatedipaddress="176.120.74.3" AND sourceport=17268 OR translatedipaddress="92.243.64.184" AND sourceport=17146 OR translatedipaddress="92.243.64.36" AND sourceport=17146)
index=activity AND rg_functionality="Web Proxy" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND destinationport=16697 OR destinationtranslatedaddress="185.126.239.207" AND destinationport=26630 OR destinationtranslatedaddress="213.183.57.174" AND destinationport=12517 OR destinationtranslatedaddress="213.183.57.72" AND destinationport=12517 OR destinationtranslatedaddress="213.183.56.201" AND destinationport=12517 OR destinationtranslatedaddress="95.164.45.27" AND destinationport=17426 OR destinationtranslatedaddress="45.120.178.161" AND destinationport=11013 OR destinationtranslatedaddress="176.120.74.3" AND destinationport=17268 OR destinationtranslatedaddress="92.243.64.184" AND destinationport=17146 OR destinationtranslatedaddress="92.243.64.36" AND destinationport=17146)
index=activity AND rg_functionality="Web Proxy" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND destinationtranslatedport=16697 OR destinationtranslatedaddress="185.126.239.207" AND destinationtranslatedport=26630 OR destinationtranslatedaddress="213.183.57.174" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="213.183.57.72" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="213.183.56.201" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="95.164.45.27" AND destinationtranslatedport=17426 OR destinationtranslatedaddress="45.120.178.161" AND destinationtranslatedport=11013 OR destinationtranslatedaddress="176.120.74.3" AND destinationtranslatedport=17268 OR destinationtranslatedaddress="92.243.64.184" AND destinationtranslatedport=17146 OR destinationtranslatedaddress="92.243.64.36" AND destinationtranslatedport=17146)
index=activity AND rg_functionality="Web Proxy" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND translatedport=16697 OR destinationtranslatedaddress="185.126.239.207" AND translatedport=26630 OR destinationtranslatedaddress="213.183.57.174" AND translatedport=12517 OR destinationtranslatedaddress="213.183.57.72" AND translatedport=12517 OR destinationtranslatedaddress="213.183.56.201" AND translatedport=12517 OR destinationtranslatedaddress="95.164.45.27" AND translatedport=17426 OR destinationtranslatedaddress="45.120.178.161" AND translatedport=11013 OR destinationtranslatedaddress="176.120.74.3" AND translatedport=17268 OR destinationtranslatedaddress="92.243.64.184" AND translatedport=17146 OR destinationtranslatedaddress="92.243.64.36" AND translatedport=17146)
index=activity AND rg_functionality="Web Proxy" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="89.31.120.126" AND destinationport=11578 OR destinationaddress="91.132.93.33" AND destinationport=11578 OR destinationaddress="91.132.95.28" AND destinationport=8773 OR destinationaddress="91.132.95.204" AND destinationport=8773 OR destinationaddress="91.132.95.135" AND destinationport=8773 OR destinationaddress="194.233.174.22" AND destinationport=45358)
index=activity AND rg_functionality="Web Proxy" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="89.31.120.126" AND sourceport=11578 OR sourceaddress="91.132.93.33" AND sourceport=11578 OR sourceaddress="91.132.95.28" AND sourceport=8773 OR sourceaddress="91.132.95.204" AND sourceport=8773 OR sourceaddress="91.132.95.135" AND sourceport=8773 OR sourceaddress="194.233.174.22" AND sourceport=45358)
index=activity AND rg_functionality="Web Proxy" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="89.31.120.126" AND sourceport=11578 OR translatedipaddress="91.132.93.33" AND sourceport=11578 OR translatedipaddress="91.132.95.28" AND sourceport=8773 OR translatedipaddress="91.132.95.204" AND sourceport=8773 OR translatedipaddress="91.132.95.135" AND sourceport=8773 OR translatedipaddress="194.233.174.22" AND sourceport=45358)
index=activity AND rg_functionality="Web Proxy" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND destinationport=11578 OR destinationtranslatedaddress="91.132.93.33" AND destinationport=11578 OR destinationtranslatedaddress="91.132.95.28" AND destinationport=8773 OR destinationtranslatedaddress="91.132.95.204" AND destinationport=8773 OR destinationtranslatedaddress="91.132.95.135" AND destinationport=8773 OR destinationtranslatedaddress="194.233.174.22" AND destinationport=45358)
index=activity AND rg_functionality="Web Proxy" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND destinationtranslatedport=11578 OR destinationtranslatedaddress="91.132.93.33" AND destinationtranslatedport=11578 OR destinationtranslatedaddress="91.132.95.28" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="91.132.95.204" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="91.132.95.135" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="194.233.174.22" AND destinationtranslatedport=45358)
index=activity AND rg_functionality="Web Proxy" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND translatedport=11578 OR destinationtranslatedaddress="91.132.93.33" AND translatedport=11578 OR destinationtranslatedaddress="91.132.95.28" AND translatedport=8773 OR destinationtranslatedaddress="91.132.95.204" AND translatedport=8773 OR destinationtranslatedaddress="91.132.95.135" AND translatedport=8773 OR destinationtranslatedaddress="194.233.174.22" AND translatedport=45358)
index=activity AND rg_functionality="Flow" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="158.255.212.173" AND destinationport=10862 OR destinationaddress="151.236.25.126" AND destinationport=11331 OR destinationaddress="158.255.215.49" AND destinationport=23079 OR destinationaddress="185.26.239.98" AND destinationport=11076 OR destinationaddress="151.236.25.10" AND destinationport=7205 OR destinationaddress="37.235.53.217" AND destinationport=1358 OR destinationaddress="151.236.23.232" AND destinationport=763 OR destinationaddress="37.235.56.204" AND destinationport=24239 OR destinationaddress="162.252.175.122" AND destinationport=4126 OR destinationaddress="162.252.175.136" AND destinationport=11077)
index=activity AND rg_functionality="Flow" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="158.255.212.173" AND sourceport=10862 OR sourceaddress="151.236.25.126" AND sourceport=11331 OR sourceaddress="158.255.215.49" AND sourceport=23079 OR sourceaddress="185.26.239.98" AND sourceport=11076 OR sourceaddress="151.236.25.10" AND sourceport=7205 OR sourceaddress="37.235.53.217" AND sourceport=1358 OR sourceaddress="151.236.23.232" AND sourceport=763 OR sourceaddress="37.235.56.204" AND sourceport=24239 OR sourceaddress="162.252.175.122" AND sourceport=4126 OR sourceaddress="162.252.175.136" AND sourceport=11077)
index=activity AND rg_functionality="Flow" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="158.255.212.173" AND sourceport=10862 OR translatedipaddress="151.236.25.126" AND sourceport=11331 OR translatedipaddress="158.255.215.49" AND sourceport=23079 OR translatedipaddress="185.26.239.98" AND sourceport=11076 OR translatedipaddress="151.236.25.10" AND sourceport=7205 OR translatedipaddress="37.235.53.217" AND sourceport=1358 OR translatedipaddress="151.236.23.232" AND sourceport=763 OR translatedipaddress="37.235.56.204" AND sourceport=24239 OR translatedipaddress="162.252.175.122" AND sourceport=4126 OR translatedipaddress="162.252.175.136" AND sourceport=11077)
index=activity AND rg_functionality="Flow" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND destinationport=10862 OR destinationtranslatedaddress="151.236.25.126" AND destinationport=11331 OR destinationtranslatedaddress="158.255.215.49" AND destinationport=23079 OR destinationtranslatedaddress="185.26.239.98" AND destinationport=11076 OR destinationtranslatedaddress="151.236.25.10" AND destinationport=7205 OR destinationtranslatedaddress="37.235.53.217" AND destinationport=1358 OR destinationtranslatedaddress="151.236.23.232" AND destinationport=763 OR destinationtranslatedaddress="37.235.56.204" AND destinationport=24239 OR destinationtranslatedaddress="162.252.175.122" AND destinationport=4126 OR destinationtranslatedaddress="162.252.175.136" AND destinationport=11077)
index=activity AND rg_functionality="Flow" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND destinationtranslatedport=10862 OR destinationtranslatedaddress="151.236.25.126" AND destinationtranslatedport=11331 OR destinationtranslatedaddress="158.255.215.49" AND destinationtranslatedport=23079 OR destinationtranslatedaddress="185.26.239.98" AND destinationtranslatedport=11076 OR destinationtranslatedaddress="151.236.25.10" AND destinationtranslatedport=7205 OR destinationtranslatedaddress="37.235.53.217" AND destinationtranslatedport=1358 OR destinationtranslatedaddress="151.236.23.232" AND destinationtranslatedport=763 OR destinationtranslatedaddress="37.235.56.204" AND destinationtranslatedport=24239 OR destinationtranslatedaddress="162.252.175.122" AND destinationtranslatedport=4126 OR destinationtranslatedaddress="162.252.175.136" AND destinationtranslatedport=11077)
index=activity AND rg_functionality="Flow" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND translatedport=10862 OR destinationtranslatedaddress="151.236.25.126" AND translatedport=11331 OR destinationtranslatedaddress="158.255.215.49" AND translatedport=23079 OR destinationtranslatedaddress="185.26.239.98" AND translatedport=11076 OR destinationtranslatedaddress="151.236.25.10" AND translatedport=7205 OR destinationtranslatedaddress="37.235.53.217" AND translatedport=1358 OR destinationtranslatedaddress="151.236.23.232" AND translatedport=763 OR destinationtranslatedaddress="37.235.56.204" AND translatedport=24239 OR destinationtranslatedaddress="162.252.175.122" AND translatedport=4126 OR destinationtranslatedaddress="162.252.175.136" AND translatedport=11077)
index=activity AND rg_functionality="Flow" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="162.252.175.163" AND destinationport=28693 OR destinationaddress="162.252.175.90" AND destinationport=845 OR destinationaddress="162.252.175.109" AND destinationport=28330 OR destinationaddress="151.236.20.39" AND destinationport=5524 OR destinationaddress="158.255.208.140" AND destinationport=86 OR destinationaddress="194.68.27.149" AND destinationport=13106 OR destinationaddress="194.68.27.176" AND destinationport=6460 OR destinationaddress="37.143.128.223" AND destinationport=16223 OR destinationaddress="31.40.212.130" AND destinationport=7225 OR destinationaddress="198.244.207.203" AND destinationport=2076)
index=activity AND rg_functionality="Flow" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="162.252.175.163" AND sourceport=28693 OR sourceaddress="162.252.175.90" AND sourceport=845 OR sourceaddress="162.252.175.109" AND sourceport=28330 OR sourceaddress="151.236.20.39" AND sourceport=5524 OR sourceaddress="158.255.208.140" AND sourceport=86 OR sourceaddress="194.68.27.149" AND sourceport=13106 OR sourceaddress="194.68.27.176" AND sourceport=6460 OR sourceaddress="37.143.128.223" AND sourceport=16223 OR sourceaddress="31.40.212.130" AND sourceport=7225 OR sourceaddress="198.244.207.203" AND sourceport=2076)
index=activity AND rg_functionality="Flow" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="162.252.175.163" AND sourceport=28693 OR translatedipaddress="162.252.175.90" AND sourceport=845 OR translatedipaddress="162.252.175.109" AND sourceport=28330 OR translatedipaddress="151.236.20.39" AND sourceport=5524 OR translatedipaddress="158.255.208.140" AND sourceport=86 OR translatedipaddress="194.68.27.149" AND sourceport=13106 OR translatedipaddress="194.68.27.176" AND sourceport=6460 OR translatedipaddress="37.143.128.223" AND sourceport=16223 OR translatedipaddress="31.40.212.130" AND sourceport=7225 OR translatedipaddress="198.244.207.203" AND sourceport=2076)
index=activity AND rg_functionality="Flow" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND destinationport=28693 OR destinationtranslatedaddress="162.252.175.90" AND destinationport=845 OR destinationtranslatedaddress="162.252.175.109" AND destinationport=28330 OR destinationtranslatedaddress="151.236.20.39" AND destinationport=5524 OR destinationtranslatedaddress="158.255.208.140" AND destinationport=86 OR destinationtranslatedaddress="194.68.27.149" AND destinationport=13106 OR destinationtranslatedaddress="194.68.27.176" AND destinationport=6460 OR destinationtranslatedaddress="37.143.128.223" AND destinationport=16223 OR destinationtranslatedaddress="31.40.212.130" AND destinationport=7225 OR destinationtranslatedaddress="198.244.207.203" AND destinationport=2076)
index=activity AND rg_functionality="Flow" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND destinationtranslatedport=28693 OR destinationtranslatedaddress="162.252.175.90" AND destinationtranslatedport=845 OR destinationtranslatedaddress="162.252.175.109" AND destinationtranslatedport=28330 OR destinationtranslatedaddress="151.236.20.39" AND destinationtranslatedport=5524 OR destinationtranslatedaddress="158.255.208.140" AND destinationtranslatedport=86 OR destinationtranslatedaddress="194.68.27.149" AND destinationtranslatedport=13106 OR destinationtranslatedaddress="194.68.27.176" AND destinationtranslatedport=6460 OR destinationtranslatedaddress="37.143.128.223" AND destinationtranslatedport=16223 OR destinationtranslatedaddress="31.40.212.130" AND destinationtranslatedport=7225 OR destinationtranslatedaddress="198.244.207.203" AND destinationtranslatedport=2076)
index=activity AND rg_functionality="Flow" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND translatedport=28693 OR destinationtranslatedaddress="162.252.175.90" AND translatedport=845 OR destinationtranslatedaddress="162.252.175.109" AND translatedport=28330 OR destinationtranslatedaddress="151.236.20.39" AND translatedport=5524 OR destinationtranslatedaddress="158.255.208.140" AND translatedport=86 OR destinationtranslatedaddress="194.68.27.149" AND translatedport=13106 OR destinationtranslatedaddress="194.68.27.176" AND translatedport=6460 OR destinationtranslatedaddress="37.143.128.223" AND translatedport=16223 OR destinationtranslatedaddress="31.40.212.130" AND translatedport=7225 OR destinationtranslatedaddress="198.244.207.203" AND translatedport=2076)
index=activity AND rg_functionality="Flow" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="208.115.230.243" AND destinationport=16697 OR destinationaddress="185.126.239.207" AND destinationport=26630 OR destinationaddress="213.183.57.174" AND destinationport=12517 OR destinationaddress="213.183.57.72" AND destinationport=12517 OR destinationaddress="213.183.56.201" AND destinationport=12517 OR destinationaddress="95.164.45.27" AND destinationport=17426 OR destinationaddress="45.120.178.161" AND destinationport=11013 OR destinationaddress="176.120.74.3" AND destinationport=17268 OR destinationaddress="92.243.64.184" AND destinationport=17146 OR destinationaddress="92.243.64.36" AND destinationport=17146)
index=activity AND rg_functionality="Flow" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="208.115.230.243" AND sourceport=16697 OR sourceaddress="185.126.239.207" AND sourceport=26630 OR sourceaddress="213.183.57.174" AND sourceport=12517 OR sourceaddress="213.183.57.72" AND sourceport=12517 OR sourceaddress="213.183.56.201" AND sourceport=12517 OR sourceaddress="95.164.45.27" AND sourceport=17426 OR sourceaddress="45.120.178.161" AND sourceport=11013 OR sourceaddress="176.120.74.3" AND sourceport=17268 OR sourceaddress="92.243.64.184" AND sourceport=17146 OR sourceaddress="92.243.64.36" AND sourceport=17146)
index=activity AND rg_functionality="Flow" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="208.115.230.243" AND sourceport=16697 OR translatedipaddress="185.126.239.207" AND sourceport=26630 OR translatedipaddress="213.183.57.174" AND sourceport=12517 OR translatedipaddress="213.183.57.72" AND sourceport=12517 OR translatedipaddress="213.183.56.201" AND sourceport=12517 OR translatedipaddress="95.164.45.27" AND sourceport=17426 OR translatedipaddress="45.120.178.161" AND sourceport=11013 OR translatedipaddress="176.120.74.3" AND sourceport=17268 OR translatedipaddress="92.243.64.184" AND sourceport=17146 OR translatedipaddress="92.243.64.36" AND sourceport=17146)
index=activity AND rg_functionality="Flow" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND destinationport=16697 OR destinationtranslatedaddress="185.126.239.207" AND destinationport=26630 OR destinationtranslatedaddress="213.183.57.174" AND destinationport=12517 OR destinationtranslatedaddress="213.183.57.72" AND destinationport=12517 OR destinationtranslatedaddress="213.183.56.201" AND destinationport=12517 OR destinationtranslatedaddress="95.164.45.27" AND destinationport=17426 OR destinationtranslatedaddress="45.120.178.161" AND destinationport=11013 OR destinationtranslatedaddress="176.120.74.3" AND destinationport=17268 OR destinationtranslatedaddress="92.243.64.184" AND destinationport=17146 OR destinationtranslatedaddress="92.243.64.36" AND destinationport=17146)
index=activity AND rg_functionality="Flow" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND destinationtranslatedport=16697 OR destinationtranslatedaddress="185.126.239.207" AND destinationtranslatedport=26630 OR destinationtranslatedaddress="213.183.57.174" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="213.183.57.72" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="213.183.56.201" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="95.164.45.27" AND destinationtranslatedport=17426 OR destinationtranslatedaddress="45.120.178.161" AND destinationtranslatedport=11013 OR destinationtranslatedaddress="176.120.74.3" AND destinationtranslatedport=17268 OR destinationtranslatedaddress="92.243.64.184" AND destinationtranslatedport=17146 OR destinationtranslatedaddress="92.243.64.36" AND destinationtranslatedport=17146)
index=activity AND rg_functionality="Flow" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND translatedport=16697 OR destinationtranslatedaddress="185.126.239.207" AND translatedport=26630 OR destinationtranslatedaddress="213.183.57.174" AND translatedport=12517 OR destinationtranslatedaddress="213.183.57.72" AND translatedport=12517 OR destinationtranslatedaddress="213.183.56.201" AND translatedport=12517 OR destinationtranslatedaddress="95.164.45.27" AND translatedport=17426 OR destinationtranslatedaddress="45.120.178.161" AND translatedport=11013 OR destinationtranslatedaddress="176.120.74.3" AND translatedport=17268 OR destinationtranslatedaddress="92.243.64.184" AND translatedport=17146 OR destinationtranslatedaddress="92.243.64.36" AND translatedport=17146)
index=activity AND rg_functionality="Flow" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="89.31.120.126" AND destinationport=11578 OR destinationaddress="91.132.93.33" AND destinationport=11578 OR destinationaddress="91.132.95.28" AND destinationport=8773 OR destinationaddress="91.132.95.204" AND destinationport=8773 OR destinationaddress="91.132.95.135" AND destinationport=8773 OR destinationaddress="194.233.174.22" AND destinationport=45358)
index=activity AND rg_functionality="Flow" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="89.31.120.126" AND sourceport=11578 OR sourceaddress="91.132.93.33" AND sourceport=11578 OR sourceaddress="91.132.95.28" AND sourceport=8773 OR sourceaddress="91.132.95.204" AND sourceport=8773 OR sourceaddress="91.132.95.135" AND sourceport=8773 OR sourceaddress="194.233.174.22" AND sourceport=45358)
index=activity AND rg_functionality="Flow" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="89.31.120.126" AND sourceport=11578 OR translatedipaddress="91.132.93.33" AND sourceport=11578 OR translatedipaddress="91.132.95.28" AND sourceport=8773 OR translatedipaddress="91.132.95.204" AND sourceport=8773 OR translatedipaddress="91.132.95.135" AND sourceport=8773 OR translatedipaddress="194.233.174.22" AND sourceport=45358)
index=activity AND rg_functionality="Flow" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND destinationport=11578 OR destinationtranslatedaddress="91.132.93.33" AND destinationport=11578 OR destinationtranslatedaddress="91.132.95.28" AND destinationport=8773 OR destinationtranslatedaddress="91.132.95.204" AND destinationport=8773 OR destinationtranslatedaddress="91.132.95.135" AND destinationport=8773 OR destinationtranslatedaddress="194.233.174.22" AND destinationport=45358)
index=activity AND rg_functionality="Flow" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND destinationtranslatedport=11578 OR destinationtranslatedaddress="91.132.93.33" AND destinationtranslatedport=11578 OR destinationtranslatedaddress="91.132.95.28" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="91.132.95.204" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="91.132.95.135" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="194.233.174.22" AND destinationtranslatedport=45358)
index=activity AND rg_functionality="Flow" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND translatedport=11578 OR destinationtranslatedaddress="91.132.93.33" AND translatedport=11578 OR destinationtranslatedaddress="91.132.95.28" AND translatedport=8773 OR destinationtranslatedaddress="91.132.95.204" AND translatedport=8773 OR destinationtranslatedaddress="91.132.95.135" AND translatedport=8773 OR destinationtranslatedaddress="194.233.174.22" AND translatedport=45358)
index=activity AND rg_functionality="Web Server" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="158.255.212.173" AND destinationport=10862 OR destinationaddress="151.236.25.126" AND destinationport=11331 OR destinationaddress="158.255.215.49" AND destinationport=23079 OR destinationaddress="185.26.239.98" AND destinationport=11076 OR destinationaddress="151.236.25.10" AND destinationport=7205 OR destinationaddress="37.235.53.217" AND destinationport=1358 OR destinationaddress="151.236.23.232" AND destinationport=763 OR destinationaddress="37.235.56.204" AND destinationport=24239 OR destinationaddress="162.252.175.122" AND destinationport=4126 OR destinationaddress="162.252.175.136" AND destinationport=11077)
index=activity AND rg_functionality="Web Server" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="158.255.212.173" AND sourceport=10862 OR sourceaddress="151.236.25.126" AND sourceport=11331 OR sourceaddress="158.255.215.49" AND sourceport=23079 OR sourceaddress="185.26.239.98" AND sourceport=11076 OR sourceaddress="151.236.25.10" AND sourceport=7205 OR sourceaddress="37.235.53.217" AND sourceport=1358 OR sourceaddress="151.236.23.232" AND sourceport=763 OR sourceaddress="37.235.56.204" AND sourceport=24239 OR sourceaddress="162.252.175.122" AND sourceport=4126 OR sourceaddress="162.252.175.136" AND sourceport=11077)
index=activity AND rg_functionality="Web Server" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="158.255.212.173" AND sourceport=10862 OR translatedipaddress="151.236.25.126" AND sourceport=11331 OR translatedipaddress="158.255.215.49" AND sourceport=23079 OR translatedipaddress="185.26.239.98" AND sourceport=11076 OR translatedipaddress="151.236.25.10" AND sourceport=7205 OR translatedipaddress="37.235.53.217" AND sourceport=1358 OR translatedipaddress="151.236.23.232" AND sourceport=763 OR translatedipaddress="37.235.56.204" AND sourceport=24239 OR translatedipaddress="162.252.175.122" AND sourceport=4126 OR translatedipaddress="162.252.175.136" AND sourceport=11077)
index=activity AND rg_functionality="Web Server" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND destinationport=10862 OR destinationtranslatedaddress="151.236.25.126" AND destinationport=11331 OR destinationtranslatedaddress="158.255.215.49" AND destinationport=23079 OR destinationtranslatedaddress="185.26.239.98" AND destinationport=11076 OR destinationtranslatedaddress="151.236.25.10" AND destinationport=7205 OR destinationtranslatedaddress="37.235.53.217" AND destinationport=1358 OR destinationtranslatedaddress="151.236.23.232" AND destinationport=763 OR destinationtranslatedaddress="37.235.56.204" AND destinationport=24239 OR destinationtranslatedaddress="162.252.175.122" AND destinationport=4126 OR destinationtranslatedaddress="162.252.175.136" AND destinationport=11077)
index=activity AND rg_functionality="Web Server" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND destinationtranslatedport=10862 OR destinationtranslatedaddress="151.236.25.126" AND destinationtranslatedport=11331 OR destinationtranslatedaddress="158.255.215.49" AND destinationtranslatedport=23079 OR destinationtranslatedaddress="185.26.239.98" AND destinationtranslatedport=11076 OR destinationtranslatedaddress="151.236.25.10" AND destinationtranslatedport=7205 OR destinationtranslatedaddress="37.235.53.217" AND destinationtranslatedport=1358 OR destinationtranslatedaddress="151.236.23.232" AND destinationtranslatedport=763 OR destinationtranslatedaddress="37.235.56.204" AND destinationtranslatedport=24239 OR destinationtranslatedaddress="162.252.175.122" AND destinationtranslatedport=4126 OR destinationtranslatedaddress="162.252.175.136" AND destinationtranslatedport=11077)
index=activity AND rg_functionality="Web Server" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND translatedport=10862 OR destinationtranslatedaddress="151.236.25.126" AND translatedport=11331 OR destinationtranslatedaddress="158.255.215.49" AND translatedport=23079 OR destinationtranslatedaddress="185.26.239.98" AND translatedport=11076 OR destinationtranslatedaddress="151.236.25.10" AND translatedport=7205 OR destinationtranslatedaddress="37.235.53.217" AND translatedport=1358 OR destinationtranslatedaddress="151.236.23.232" AND translatedport=763 OR destinationtranslatedaddress="37.235.56.204" AND translatedport=24239 OR destinationtranslatedaddress="162.252.175.122" AND translatedport=4126 OR destinationtranslatedaddress="162.252.175.136" AND translatedport=11077)
index=activity AND rg_functionality="Web Server" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="162.252.175.163" AND destinationport=28693 OR destinationaddress="162.252.175.90" AND destinationport=845 OR destinationaddress="162.252.175.109" AND destinationport=28330 OR destinationaddress="151.236.20.39" AND destinationport=5524 OR destinationaddress="158.255.208.140" AND destinationport=86 OR destinationaddress="194.68.27.149" AND destinationport=13106 OR destinationaddress="194.68.27.176" AND destinationport=6460 OR destinationaddress="37.143.128.223" AND destinationport=16223 OR destinationaddress="31.40.212.130" AND destinationport=7225 OR destinationaddress="198.244.207.203" AND destinationport=2076)
index=activity AND rg_functionality="Web Server" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="162.252.175.163" AND sourceport=28693 OR sourceaddress="162.252.175.90" AND sourceport=845 OR sourceaddress="162.252.175.109" AND sourceport=28330 OR sourceaddress="151.236.20.39" AND sourceport=5524 OR sourceaddress="158.255.208.140" AND sourceport=86 OR sourceaddress="194.68.27.149" AND sourceport=13106 OR sourceaddress="194.68.27.176" AND sourceport=6460 OR sourceaddress="37.143.128.223" AND sourceport=16223 OR sourceaddress="31.40.212.130" AND sourceport=7225 OR sourceaddress="198.244.207.203" AND sourceport=2076)
index=activity AND rg_functionality="Web Server" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="162.252.175.163" AND sourceport=28693 OR translatedipaddress="162.252.175.90" AND sourceport=845 OR translatedipaddress="162.252.175.109" AND sourceport=28330 OR translatedipaddress="151.236.20.39" AND sourceport=5524 OR translatedipaddress="158.255.208.140" AND sourceport=86 OR translatedipaddress="194.68.27.149" AND sourceport=13106 OR translatedipaddress="194.68.27.176" AND sourceport=6460 OR translatedipaddress="37.143.128.223" AND sourceport=16223 OR translatedipaddress="31.40.212.130" AND sourceport=7225 OR translatedipaddress="198.244.207.203" AND sourceport=2076)
index=activity AND rg_functionality="Web Server" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND destinationport=28693 OR destinationtranslatedaddress="162.252.175.90" AND destinationport=845 OR destinationtranslatedaddress="162.252.175.109" AND destinationport=28330 OR destinationtranslatedaddress="151.236.20.39" AND destinationport=5524 OR destinationtranslatedaddress="158.255.208.140" AND destinationport=86 OR destinationtranslatedaddress="194.68.27.149" AND destinationport=13106 OR destinationtranslatedaddress="194.68.27.176" AND destinationport=6460 OR destinationtranslatedaddress="37.143.128.223" AND destinationport=16223 OR destinationtranslatedaddress="31.40.212.130" AND destinationport=7225 OR destinationtranslatedaddress="198.244.207.203" AND destinationport=2076)
index=activity AND rg_functionality="Web Server" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND destinationtranslatedport=28693 OR destinationtranslatedaddress="162.252.175.90" AND destinationtranslatedport=845 OR destinationtranslatedaddress="162.252.175.109" AND destinationtranslatedport=28330 OR destinationtranslatedaddress="151.236.20.39" AND destinationtranslatedport=5524 OR destinationtranslatedaddress="158.255.208.140" AND destinationtranslatedport=86 OR destinationtranslatedaddress="194.68.27.149" AND destinationtranslatedport=13106 OR destinationtranslatedaddress="194.68.27.176" AND destinationtranslatedport=6460 OR destinationtranslatedaddress="37.143.128.223" AND destinationtranslatedport=16223 OR destinationtranslatedaddress="31.40.212.130" AND destinationtranslatedport=7225 OR destinationtranslatedaddress="198.244.207.203" AND destinationtranslatedport=2076)
index=activity AND rg_functionality="Web Server" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND translatedport=28693 OR destinationtranslatedaddress="162.252.175.90" AND translatedport=845 OR destinationtranslatedaddress="162.252.175.109" AND translatedport=28330 OR destinationtranslatedaddress="151.236.20.39" AND translatedport=5524 OR destinationtranslatedaddress="158.255.208.140" AND translatedport=86 OR destinationtranslatedaddress="194.68.27.149" AND translatedport=13106 OR destinationtranslatedaddress="194.68.27.176" AND translatedport=6460 OR destinationtranslatedaddress="37.143.128.223" AND translatedport=16223 OR destinationtranslatedaddress="31.40.212.130" AND translatedport=7225 OR destinationtranslatedaddress="198.244.207.203" AND translatedport=2076)
index=activity AND rg_functionality="Web Server" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="208.115.230.243" AND destinationport=16697 OR destinationaddress="185.126.239.207" AND destinationport=26630 OR destinationaddress="213.183.57.174" AND destinationport=12517 OR destinationaddress="213.183.57.72" AND destinationport=12517 OR destinationaddress="213.183.56.201" AND destinationport=12517 OR destinationaddress="95.164.45.27" AND destinationport=17426 OR destinationaddress="45.120.178.161" AND destinationport=11013 OR destinationaddress="176.120.74.3" AND destinationport=17268 OR destinationaddress="92.243.64.184" AND destinationport=17146 OR destinationaddress="92.243.64.36" AND destinationport=17146)
index=activity AND rg_functionality="Web Server" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="208.115.230.243" AND sourceport=16697 OR sourceaddress="185.126.239.207" AND sourceport=26630 OR sourceaddress="213.183.57.174" AND sourceport=12517 OR sourceaddress="213.183.57.72" AND sourceport=12517 OR sourceaddress="213.183.56.201" AND sourceport=12517 OR sourceaddress="95.164.45.27" AND sourceport=17426 OR sourceaddress="45.120.178.161" AND sourceport=11013 OR sourceaddress="176.120.74.3" AND sourceport=17268 OR sourceaddress="92.243.64.184" AND sourceport=17146 OR sourceaddress="92.243.64.36" AND sourceport=17146)
index=activity AND rg_functionality="Web Server" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="208.115.230.243" AND sourceport=16697 OR translatedipaddress="185.126.239.207" AND sourceport=26630 OR translatedipaddress="213.183.57.174" AND sourceport=12517 OR translatedipaddress="213.183.57.72" AND sourceport=12517 OR translatedipaddress="213.183.56.201" AND sourceport=12517 OR translatedipaddress="95.164.45.27" AND sourceport=17426 OR translatedipaddress="45.120.178.161" AND sourceport=11013 OR translatedipaddress="176.120.74.3" AND sourceport=17268 OR translatedipaddress="92.243.64.184" AND sourceport=17146 OR translatedipaddress="92.243.64.36" AND sourceport=17146)
index=activity AND rg_functionality="Web Server" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND destinationport=16697 OR destinationtranslatedaddress="185.126.239.207" AND destinationport=26630 OR destinationtranslatedaddress="213.183.57.174" AND destinationport=12517 OR destinationtranslatedaddress="213.183.57.72" AND destinationport=12517 OR destinationtranslatedaddress="213.183.56.201" AND destinationport=12517 OR destinationtranslatedaddress="95.164.45.27" AND destinationport=17426 OR destinationtranslatedaddress="45.120.178.161" AND destinationport=11013 OR destinationtranslatedaddress="176.120.74.3" AND destinationport=17268 OR destinationtranslatedaddress="92.243.64.184" AND destinationport=17146 OR destinationtranslatedaddress="92.243.64.36" AND destinationport=17146)
index=activity AND rg_functionality="Web Server" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND destinationtranslatedport=16697 OR destinationtranslatedaddress="185.126.239.207" AND destinationtranslatedport=26630 OR destinationtranslatedaddress="213.183.57.174" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="213.183.57.72" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="213.183.56.201" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="95.164.45.27" AND destinationtranslatedport=17426 OR destinationtranslatedaddress="45.120.178.161" AND destinationtranslatedport=11013 OR destinationtranslatedaddress="176.120.74.3" AND destinationtranslatedport=17268 OR destinationtranslatedaddress="92.243.64.184" AND destinationtranslatedport=17146 OR destinationtranslatedaddress="92.243.64.36" AND destinationtranslatedport=17146)
index=activity AND rg_functionality="Web Server" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND translatedport=16697 OR destinationtranslatedaddress="185.126.239.207" AND translatedport=26630 OR destinationtranslatedaddress="213.183.57.174" AND translatedport=12517 OR destinationtranslatedaddress="213.183.57.72" AND translatedport=12517 OR destinationtranslatedaddress="213.183.56.201" AND translatedport=12517 OR destinationtranslatedaddress="95.164.45.27" AND translatedport=17426 OR destinationtranslatedaddress="45.120.178.161" AND translatedport=11013 OR destinationtranslatedaddress="176.120.74.3" AND translatedport=17268 OR destinationtranslatedaddress="92.243.64.184" AND translatedport=17146 OR destinationtranslatedaddress="92.243.64.36" AND translatedport=17146)
index=activity AND rg_functionality="Web Server" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="89.31.120.126" AND destinationport=11578 OR destinationaddress="91.132.93.33" AND destinationport=11578 OR destinationaddress="91.132.95.28" AND destinationport=8773 OR destinationaddress="91.132.95.204" AND destinationport=8773 OR destinationaddress="91.132.95.135" AND destinationport=8773 OR destinationaddress="194.233.174.22" AND destinationport=45358)
index=activity AND rg_functionality="Web Server" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="89.31.120.126" AND sourceport=11578 OR sourceaddress="91.132.93.33" AND sourceport=11578 OR sourceaddress="91.132.95.28" AND sourceport=8773 OR sourceaddress="91.132.95.204" AND sourceport=8773 OR sourceaddress="91.132.95.135" AND sourceport=8773 OR sourceaddress="194.233.174.22" AND sourceport=45358)
index=activity AND rg_functionality="Web Server" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="89.31.120.126" AND sourceport=11578 OR translatedipaddress="91.132.93.33" AND sourceport=11578 OR translatedipaddress="91.132.95.28" AND sourceport=8773 OR translatedipaddress="91.132.95.204" AND sourceport=8773 OR translatedipaddress="91.132.95.135" AND sourceport=8773 OR translatedipaddress="194.233.174.22" AND sourceport=45358)
index=activity AND rg_functionality="Web Server" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND destinationport=11578 OR destinationtranslatedaddress="91.132.93.33" AND destinationport=11578 OR destinationtranslatedaddress="91.132.95.28" AND destinationport=8773 OR destinationtranslatedaddress="91.132.95.204" AND destinationport=8773 OR destinationtranslatedaddress="91.132.95.135" AND destinationport=8773 OR destinationtranslatedaddress="194.233.174.22" AND destinationport=45358)
index=activity AND rg_functionality="Web Server" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND destinationtranslatedport=11578 OR destinationtranslatedaddress="91.132.93.33" AND destinationtranslatedport=11578 OR destinationtranslatedaddress="91.132.95.28" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="91.132.95.204" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="91.132.95.135" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="194.233.174.22" AND destinationtranslatedport=45358)
index=activity AND rg_functionality="Web Server" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND translatedport=11578 OR destinationtranslatedaddress="91.132.93.33" AND translatedport=11578 OR destinationtranslatedaddress="91.132.95.28" AND translatedport=8773 OR destinationtranslatedaddress="91.132.95.204" AND translatedport=8773 OR destinationtranslatedaddress="91.132.95.135" AND translatedport=8773 OR destinationtranslatedaddress="194.233.174.22" AND translatedport=45358)
index=activity AND rg_functionality="DNS / DHCP" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="158.255.212.173" AND destinationport=10862 OR destinationaddress="151.236.25.126" AND destinationport=11331 OR destinationaddress="158.255.215.49" AND destinationport=23079 OR destinationaddress="185.26.239.98" AND destinationport=11076 OR destinationaddress="151.236.25.10" AND destinationport=7205 OR destinationaddress="37.235.53.217" AND destinationport=1358 OR destinationaddress="151.236.23.232" AND destinationport=763 OR destinationaddress="37.235.56.204" AND destinationport=24239 OR destinationaddress="162.252.175.122" AND destinationport=4126 OR destinationaddress="162.252.175.136" AND destinationport=11077)
index=activity AND rg_functionality="DNS / DHCP" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="158.255.212.173" AND sourceport=10862 OR sourceaddress="151.236.25.126" AND sourceport=11331 OR sourceaddress="158.255.215.49" AND sourceport=23079 OR sourceaddress="185.26.239.98" AND sourceport=11076 OR sourceaddress="151.236.25.10" AND sourceport=7205 OR sourceaddress="37.235.53.217" AND sourceport=1358 OR sourceaddress="151.236.23.232" AND sourceport=763 OR sourceaddress="37.235.56.204" AND sourceport=24239 OR sourceaddress="162.252.175.122" AND sourceport=4126 OR sourceaddress="162.252.175.136" AND sourceport=11077)
index=activity AND rg_functionality="DNS / DHCP" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="158.255.212.173" AND sourceport=10862 OR translatedipaddress="151.236.25.126" AND sourceport=11331 OR translatedipaddress="158.255.215.49" AND sourceport=23079 OR translatedipaddress="185.26.239.98" AND sourceport=11076 OR translatedipaddress="151.236.25.10" AND sourceport=7205 OR translatedipaddress="37.235.53.217" AND sourceport=1358 OR translatedipaddress="151.236.23.232" AND sourceport=763 OR translatedipaddress="37.235.56.204" AND sourceport=24239 OR translatedipaddress="162.252.175.122" AND sourceport=4126 OR translatedipaddress="162.252.175.136" AND sourceport=11077)
index=activity AND rg_functionality="DNS / DHCP" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND destinationport=10862 OR destinationtranslatedaddress="151.236.25.126" AND destinationport=11331 OR destinationtranslatedaddress="158.255.215.49" AND destinationport=23079 OR destinationtranslatedaddress="185.26.239.98" AND destinationport=11076 OR destinationtranslatedaddress="151.236.25.10" AND destinationport=7205 OR destinationtranslatedaddress="37.235.53.217" AND destinationport=1358 OR destinationtranslatedaddress="151.236.23.232" AND destinationport=763 OR destinationtranslatedaddress="37.235.56.204" AND destinationport=24239 OR destinationtranslatedaddress="162.252.175.122" AND destinationport=4126 OR destinationtranslatedaddress="162.252.175.136" AND destinationport=11077)
index=activity AND rg_functionality="DNS / DHCP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND destinationtranslatedport=10862 OR destinationtranslatedaddress="151.236.25.126" AND destinationtranslatedport=11331 OR destinationtranslatedaddress="158.255.215.49" AND destinationtranslatedport=23079 OR destinationtranslatedaddress="185.26.239.98" AND destinationtranslatedport=11076 OR destinationtranslatedaddress="151.236.25.10" AND destinationtranslatedport=7205 OR destinationtranslatedaddress="37.235.53.217" AND destinationtranslatedport=1358 OR destinationtranslatedaddress="151.236.23.232" AND destinationtranslatedport=763 OR destinationtranslatedaddress="37.235.56.204" AND destinationtranslatedport=24239 OR destinationtranslatedaddress="162.252.175.122" AND destinationtranslatedport=4126 OR destinationtranslatedaddress="162.252.175.136" AND destinationtranslatedport=11077)
index=activity AND rg_functionality="DNS / DHCP" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND translatedport=10862 OR destinationtranslatedaddress="151.236.25.126" AND translatedport=11331 OR destinationtranslatedaddress="158.255.215.49" AND translatedport=23079 OR destinationtranslatedaddress="185.26.239.98" AND translatedport=11076 OR destinationtranslatedaddress="151.236.25.10" AND translatedport=7205 OR destinationtranslatedaddress="37.235.53.217" AND translatedport=1358 OR destinationtranslatedaddress="151.236.23.232" AND translatedport=763 OR destinationtranslatedaddress="37.235.56.204" AND translatedport=24239 OR destinationtranslatedaddress="162.252.175.122" AND translatedport=4126 OR destinationtranslatedaddress="162.252.175.136" AND translatedport=11077)
index=activity AND rg_functionality="DNS / DHCP" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="162.252.175.163" AND destinationport=28693 OR destinationaddress="162.252.175.90" AND destinationport=845 OR destinationaddress="162.252.175.109" AND destinationport=28330 OR destinationaddress="151.236.20.39" AND destinationport=5524 OR destinationaddress="158.255.208.140" AND destinationport=86 OR destinationaddress="194.68.27.149" AND destinationport=13106 OR destinationaddress="194.68.27.176" AND destinationport=6460 OR destinationaddress="37.143.128.223" AND destinationport=16223 OR destinationaddress="31.40.212.130" AND destinationport=7225 OR destinationaddress="198.244.207.203" AND destinationport=2076)
index=activity AND rg_functionality="DNS / DHCP" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="162.252.175.163" AND sourceport=28693 OR sourceaddress="162.252.175.90" AND sourceport=845 OR sourceaddress="162.252.175.109" AND sourceport=28330 OR sourceaddress="151.236.20.39" AND sourceport=5524 OR sourceaddress="158.255.208.140" AND sourceport=86 OR sourceaddress="194.68.27.149" AND sourceport=13106 OR sourceaddress="194.68.27.176" AND sourceport=6460 OR sourceaddress="37.143.128.223" AND sourceport=16223 OR sourceaddress="31.40.212.130" AND sourceport=7225 OR sourceaddress="198.244.207.203" AND sourceport=2076)
index=activity AND rg_functionality="DNS / DHCP" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="162.252.175.163" AND sourceport=28693 OR translatedipaddress="162.252.175.90" AND sourceport=845 OR translatedipaddress="162.252.175.109" AND sourceport=28330 OR translatedipaddress="151.236.20.39" AND sourceport=5524 OR translatedipaddress="158.255.208.140" AND sourceport=86 OR translatedipaddress="194.68.27.149" AND sourceport=13106 OR translatedipaddress="194.68.27.176" AND sourceport=6460 OR translatedipaddress="37.143.128.223" AND sourceport=16223 OR translatedipaddress="31.40.212.130" AND sourceport=7225 OR translatedipaddress="198.244.207.203" AND sourceport=2076)
index=activity AND rg_functionality="DNS / DHCP" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND destinationport=28693 OR destinationtranslatedaddress="162.252.175.90" AND destinationport=845 OR destinationtranslatedaddress="162.252.175.109" AND destinationport=28330 OR destinationtranslatedaddress="151.236.20.39" AND destinationport=5524 OR destinationtranslatedaddress="158.255.208.140" AND destinationport=86 OR destinationtranslatedaddress="194.68.27.149" AND destinationport=13106 OR destinationtranslatedaddress="194.68.27.176" AND destinationport=6460 OR destinationtranslatedaddress="37.143.128.223" AND destinationport=16223 OR destinationtranslatedaddress="31.40.212.130" AND destinationport=7225 OR destinationtranslatedaddress="198.244.207.203" AND destinationport=2076)
index=activity AND rg_functionality="DNS / DHCP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND destinationtranslatedport=28693 OR destinationtranslatedaddress="162.252.175.90" AND destinationtranslatedport=845 OR destinationtranslatedaddress="162.252.175.109" AND destinationtranslatedport=28330 OR destinationtranslatedaddress="151.236.20.39" AND destinationtranslatedport=5524 OR destinationtranslatedaddress="158.255.208.140" AND destinationtranslatedport=86 OR destinationtranslatedaddress="194.68.27.149" AND destinationtranslatedport=13106 OR destinationtranslatedaddress="194.68.27.176" AND destinationtranslatedport=6460 OR destinationtranslatedaddress="37.143.128.223" AND destinationtranslatedport=16223 OR destinationtranslatedaddress="31.40.212.130" AND destinationtranslatedport=7225 OR destinationtranslatedaddress="198.244.207.203" AND destinationtranslatedport=2076)
index=activity AND rg_functionality="DNS / DHCP" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND translatedport=28693 OR destinationtranslatedaddress="162.252.175.90" AND translatedport=845 OR destinationtranslatedaddress="162.252.175.109" AND translatedport=28330 OR destinationtranslatedaddress="151.236.20.39" AND translatedport=5524 OR destinationtranslatedaddress="158.255.208.140" AND translatedport=86 OR destinationtranslatedaddress="194.68.27.149" AND translatedport=13106 OR destinationtranslatedaddress="194.68.27.176" AND translatedport=6460 OR destinationtranslatedaddress="37.143.128.223" AND translatedport=16223 OR destinationtranslatedaddress="31.40.212.130" AND translatedport=7225 OR destinationtranslatedaddress="198.244.207.203" AND translatedport=2076)
index=activity AND rg_functionality="DNS / DHCP" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="208.115.230.243" AND destinationport=16697 OR destinationaddress="185.126.239.207" AND destinationport=26630 OR destinationaddress="213.183.57.174" AND destinationport=12517 OR destinationaddress="213.183.57.72" AND destinationport=12517 OR destinationaddress="213.183.56.201" AND destinationport=12517 OR destinationaddress="95.164.45.27" AND destinationport=17426 OR destinationaddress="45.120.178.161" AND destinationport=11013 OR destinationaddress="176.120.74.3" AND destinationport=17268 OR destinationaddress="92.243.64.184" AND destinationport=17146 OR destinationaddress="92.243.64.36" AND destinationport=17146)
index=activity AND rg_functionality="DNS / DHCP" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="208.115.230.243" AND sourceport=16697 OR sourceaddress="185.126.239.207" AND sourceport=26630 OR sourceaddress="213.183.57.174" AND sourceport=12517 OR sourceaddress="213.183.57.72" AND sourceport=12517 OR sourceaddress="213.183.56.201" AND sourceport=12517 OR sourceaddress="95.164.45.27" AND sourceport=17426 OR sourceaddress="45.120.178.161" AND sourceport=11013 OR sourceaddress="176.120.74.3" AND sourceport=17268 OR sourceaddress="92.243.64.184" AND sourceport=17146 OR sourceaddress="92.243.64.36" AND sourceport=17146)
index=activity AND rg_functionality="DNS / DHCP" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="208.115.230.243" AND sourceport=16697 OR translatedipaddress="185.126.239.207" AND sourceport=26630 OR translatedipaddress="213.183.57.174" AND sourceport=12517 OR translatedipaddress="213.183.57.72" AND sourceport=12517 OR translatedipaddress="213.183.56.201" AND sourceport=12517 OR translatedipaddress="95.164.45.27" AND sourceport=17426 OR translatedipaddress="45.120.178.161" AND sourceport=11013 OR translatedipaddress="176.120.74.3" AND sourceport=17268 OR translatedipaddress="92.243.64.184" AND sourceport=17146 OR translatedipaddress="92.243.64.36" AND sourceport=17146)
index=activity AND rg_functionality="DNS / DHCP" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND destinationport=16697 OR destinationtranslatedaddress="185.126.239.207" AND destinationport=26630 OR destinationtranslatedaddress="213.183.57.174" AND destinationport=12517 OR destinationtranslatedaddress="213.183.57.72" AND destinationport=12517 OR destinationtranslatedaddress="213.183.56.201" AND destinationport=12517 OR destinationtranslatedaddress="95.164.45.27" AND destinationport=17426 OR destinationtranslatedaddress="45.120.178.161" AND destinationport=11013 OR destinationtranslatedaddress="176.120.74.3" AND destinationport=17268 OR destinationtranslatedaddress="92.243.64.184" AND destinationport=17146 OR destinationtranslatedaddress="92.243.64.36" AND destinationport=17146)
index=activity AND rg_functionality="DNS / DHCP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND destinationtranslatedport=16697 OR destinationtranslatedaddress="185.126.239.207" AND destinationtranslatedport=26630 OR destinationtranslatedaddress="213.183.57.174" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="213.183.57.72" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="213.183.56.201" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="95.164.45.27" AND destinationtranslatedport=17426 OR destinationtranslatedaddress="45.120.178.161" AND destinationtranslatedport=11013 OR destinationtranslatedaddress="176.120.74.3" AND destinationtranslatedport=17268 OR destinationtranslatedaddress="92.243.64.184" AND destinationtranslatedport=17146 OR destinationtranslatedaddress="92.243.64.36" AND destinationtranslatedport=17146)
index=activity AND rg_functionality="DNS / DHCP" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND translatedport=16697 OR destinationtranslatedaddress="185.126.239.207" AND translatedport=26630 OR destinationtranslatedaddress="213.183.57.174" AND translatedport=12517 OR destinationtranslatedaddress="213.183.57.72" AND translatedport=12517 OR destinationtranslatedaddress="213.183.56.201" AND translatedport=12517 OR destinationtranslatedaddress="95.164.45.27" AND translatedport=17426 OR destinationtranslatedaddress="45.120.178.161" AND translatedport=11013 OR destinationtranslatedaddress="176.120.74.3" AND translatedport=17268 OR destinationtranslatedaddress="92.243.64.184" AND translatedport=17146 OR destinationtranslatedaddress="92.243.64.36" AND translatedport=17146)
index=activity AND rg_functionality="DNS / DHCP" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="89.31.120.126" AND destinationport=11578 OR destinationaddress="91.132.93.33" AND destinationport=11578 OR destinationaddress="91.132.95.28" AND destinationport=8773 OR destinationaddress="91.132.95.204" AND destinationport=8773 OR destinationaddress="91.132.95.135" AND destinationport=8773 OR destinationaddress="194.233.174.22" AND destinationport=45358)
index=activity AND rg_functionality="DNS / DHCP" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="89.31.120.126" AND sourceport=11578 OR sourceaddress="91.132.93.33" AND sourceport=11578 OR sourceaddress="91.132.95.28" AND sourceport=8773 OR sourceaddress="91.132.95.204" AND sourceport=8773 OR sourceaddress="91.132.95.135" AND sourceport=8773 OR sourceaddress="194.233.174.22" AND sourceport=45358)
index=activity AND rg_functionality="DNS / DHCP" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="89.31.120.126" AND sourceport=11578 OR translatedipaddress="91.132.93.33" AND sourceport=11578 OR translatedipaddress="91.132.95.28" AND sourceport=8773 OR translatedipaddress="91.132.95.204" AND sourceport=8773 OR translatedipaddress="91.132.95.135" AND sourceport=8773 OR translatedipaddress="194.233.174.22" AND sourceport=45358)
index=activity AND rg_functionality="DNS / DHCP" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND destinationport=11578 OR destinationtranslatedaddress="91.132.93.33" AND destinationport=11578 OR destinationtranslatedaddress="91.132.95.28" AND destinationport=8773 OR destinationtranslatedaddress="91.132.95.204" AND destinationport=8773 OR destinationtranslatedaddress="91.132.95.135" AND destinationport=8773 OR destinationtranslatedaddress="194.233.174.22" AND destinationport=45358)
index=activity AND rg_functionality="DNS / DHCP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND destinationtranslatedport=11578 OR destinationtranslatedaddress="91.132.93.33" AND destinationtranslatedport=11578 OR destinationtranslatedaddress="91.132.95.28" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="91.132.95.204" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="91.132.95.135" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="194.233.174.22" AND destinationtranslatedport=45358)
index=activity AND rg_functionality="DNS / DHCP" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND translatedport=11578 OR destinationtranslatedaddress="91.132.93.33" AND translatedport=11578 OR destinationtranslatedaddress="91.132.95.28" AND translatedport=8773 OR destinationtranslatedaddress="91.132.95.204" AND translatedport=8773 OR destinationtranslatedaddress="91.132.95.135" AND translatedport=8773 OR destinationtranslatedaddress="194.233.174.22" AND translatedport=45358)
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="158.255.212.173" AND destinationport=10862 OR destinationaddress="151.236.25.126" AND destinationport=11331 OR destinationaddress="158.255.215.49" AND destinationport=23079 OR destinationaddress="185.26.239.98" AND destinationport=11076 OR destinationaddress="151.236.25.10" AND destinationport=7205 OR destinationaddress="37.235.53.217" AND destinationport=1358 OR destinationaddress="151.236.23.232" AND destinationport=763 OR destinationaddress="37.235.56.204" AND destinationport=24239 OR destinationaddress="162.252.175.122" AND destinationport=4126 OR destinationaddress="162.252.175.136" AND destinationport=11077)
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="158.255.212.173" AND sourceport=10862 OR sourceaddress="151.236.25.126" AND sourceport=11331 OR sourceaddress="158.255.215.49" AND sourceport=23079 OR sourceaddress="185.26.239.98" AND sourceport=11076 OR sourceaddress="151.236.25.10" AND sourceport=7205 OR sourceaddress="37.235.53.217" AND sourceport=1358 OR sourceaddress="151.236.23.232" AND sourceport=763 OR sourceaddress="37.235.56.204" AND sourceport=24239 OR sourceaddress="162.252.175.122" AND sourceport=4126 OR sourceaddress="162.252.175.136" AND sourceport=11077)
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="158.255.212.173" AND sourceport=10862 OR translatedipaddress="151.236.25.126" AND sourceport=11331 OR translatedipaddress="158.255.215.49" AND sourceport=23079 OR translatedipaddress="185.26.239.98" AND sourceport=11076 OR translatedipaddress="151.236.25.10" AND sourceport=7205 OR translatedipaddress="37.235.53.217" AND sourceport=1358 OR translatedipaddress="151.236.23.232" AND sourceport=763 OR translatedipaddress="37.235.56.204" AND sourceport=24239 OR translatedipaddress="162.252.175.122" AND sourceport=4126 OR translatedipaddress="162.252.175.136" AND sourceport=11077)
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND destinationport=10862 OR destinationtranslatedaddress="151.236.25.126" AND destinationport=11331 OR destinationtranslatedaddress="158.255.215.49" AND destinationport=23079 OR destinationtranslatedaddress="185.26.239.98" AND destinationport=11076 OR destinationtranslatedaddress="151.236.25.10" AND destinationport=7205 OR destinationtranslatedaddress="37.235.53.217" AND destinationport=1358 OR destinationtranslatedaddress="151.236.23.232" AND destinationport=763 OR destinationtranslatedaddress="37.235.56.204" AND destinationport=24239 OR destinationtranslatedaddress="162.252.175.122" AND destinationport=4126 OR destinationtranslatedaddress="162.252.175.136" AND destinationport=11077)
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND destinationtranslatedport=10862 OR destinationtranslatedaddress="151.236.25.126" AND destinationtranslatedport=11331 OR destinationtranslatedaddress="158.255.215.49" AND destinationtranslatedport=23079 OR destinationtranslatedaddress="185.26.239.98" AND destinationtranslatedport=11076 OR destinationtranslatedaddress="151.236.25.10" AND destinationtranslatedport=7205 OR destinationtranslatedaddress="37.235.53.217" AND destinationtranslatedport=1358 OR destinationtranslatedaddress="151.236.23.232" AND destinationtranslatedport=763 OR destinationtranslatedaddress="37.235.56.204" AND destinationtranslatedport=24239 OR destinationtranslatedaddress="162.252.175.122" AND destinationtranslatedport=4126 OR destinationtranslatedaddress="162.252.175.136" AND destinationtranslatedport=11077)
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND translatedport=10862 OR destinationtranslatedaddress="151.236.25.126" AND translatedport=11331 OR destinationtranslatedaddress="158.255.215.49" AND translatedport=23079 OR destinationtranslatedaddress="185.26.239.98" AND translatedport=11076 OR destinationtranslatedaddress="151.236.25.10" AND translatedport=7205 OR destinationtranslatedaddress="37.235.53.217" AND translatedport=1358 OR destinationtranslatedaddress="151.236.23.232" AND translatedport=763 OR destinationtranslatedaddress="37.235.56.204" AND translatedport=24239 OR destinationtranslatedaddress="162.252.175.122" AND translatedport=4126 OR destinationtranslatedaddress="162.252.175.136" AND translatedport=11077)
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="162.252.175.163" AND destinationport=28693 OR destinationaddress="162.252.175.90" AND destinationport=845 OR destinationaddress="162.252.175.109" AND destinationport=28330 OR destinationaddress="151.236.20.39" AND destinationport=5524 OR destinationaddress="158.255.208.140" AND destinationport=86 OR destinationaddress="194.68.27.149" AND destinationport=13106 OR destinationaddress="194.68.27.176" AND destinationport=6460 OR destinationaddress="37.143.128.223" AND destinationport=16223 OR destinationaddress="31.40.212.130" AND destinationport=7225 OR destinationaddress="198.244.207.203" AND destinationport=2076)
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="162.252.175.163" AND sourceport=28693 OR sourceaddress="162.252.175.90" AND sourceport=845 OR sourceaddress="162.252.175.109" AND sourceport=28330 OR sourceaddress="151.236.20.39" AND sourceport=5524 OR sourceaddress="158.255.208.140" AND sourceport=86 OR sourceaddress="194.68.27.149" AND sourceport=13106 OR sourceaddress="194.68.27.176" AND sourceport=6460 OR sourceaddress="37.143.128.223" AND sourceport=16223 OR sourceaddress="31.40.212.130" AND sourceport=7225 OR sourceaddress="198.244.207.203" AND sourceport=2076)
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="162.252.175.163" AND sourceport=28693 OR translatedipaddress="162.252.175.90" AND sourceport=845 OR translatedipaddress="162.252.175.109" AND sourceport=28330 OR translatedipaddress="151.236.20.39" AND sourceport=5524 OR translatedipaddress="158.255.208.140" AND sourceport=86 OR translatedipaddress="194.68.27.149" AND sourceport=13106 OR translatedipaddress="194.68.27.176" AND sourceport=6460 OR translatedipaddress="37.143.128.223" AND sourceport=16223 OR translatedipaddress="31.40.212.130" AND sourceport=7225 OR translatedipaddress="198.244.207.203" AND sourceport=2076)
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND destinationport=28693 OR destinationtranslatedaddress="162.252.175.90" AND destinationport=845 OR destinationtranslatedaddress="162.252.175.109" AND destinationport=28330 OR destinationtranslatedaddress="151.236.20.39" AND destinationport=5524 OR destinationtranslatedaddress="158.255.208.140" AND destinationport=86 OR destinationtranslatedaddress="194.68.27.149" AND destinationport=13106 OR destinationtranslatedaddress="194.68.27.176" AND destinationport=6460 OR destinationtranslatedaddress="37.143.128.223" AND destinationport=16223 OR destinationtranslatedaddress="31.40.212.130" AND destinationport=7225 OR destinationtranslatedaddress="198.244.207.203" AND destinationport=2076)
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND destinationtranslatedport=28693 OR destinationtranslatedaddress="162.252.175.90" AND destinationtranslatedport=845 OR destinationtranslatedaddress="162.252.175.109" AND destinationtranslatedport=28330 OR destinationtranslatedaddress="151.236.20.39" AND destinationtranslatedport=5524 OR destinationtranslatedaddress="158.255.208.140" AND destinationtranslatedport=86 OR destinationtranslatedaddress="194.68.27.149" AND destinationtranslatedport=13106 OR destinationtranslatedaddress="194.68.27.176" AND destinationtranslatedport=6460 OR destinationtranslatedaddress="37.143.128.223" AND destinationtranslatedport=16223 OR destinationtranslatedaddress="31.40.212.130" AND destinationtranslatedport=7225 OR destinationtranslatedaddress="198.244.207.203" AND destinationtranslatedport=2076)
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND translatedport=28693 OR destinationtranslatedaddress="162.252.175.90" AND translatedport=845 OR destinationtranslatedaddress="162.252.175.109" AND translatedport=28330 OR destinationtranslatedaddress="151.236.20.39" AND translatedport=5524 OR destinationtranslatedaddress="158.255.208.140" AND translatedport=86 OR destinationtranslatedaddress="194.68.27.149" AND translatedport=13106 OR destinationtranslatedaddress="194.68.27.176" AND translatedport=6460 OR destinationtranslatedaddress="37.143.128.223" AND translatedport=16223 OR destinationtranslatedaddress="31.40.212.130" AND translatedport=7225 OR destinationtranslatedaddress="198.244.207.203" AND translatedport=2076)
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="208.115.230.243" AND destinationport=16697 OR destinationaddress="185.126.239.207" AND destinationport=26630 OR destinationaddress="213.183.57.174" AND destinationport=12517 OR destinationaddress="213.183.57.72" AND destinationport=12517 OR destinationaddress="213.183.56.201" AND destinationport=12517 OR destinationaddress="95.164.45.27" AND destinationport=17426 OR destinationaddress="45.120.178.161" AND destinationport=11013 OR destinationaddress="176.120.74.3" AND destinationport=17268 OR destinationaddress="92.243.64.184" AND destinationport=17146 OR destinationaddress="92.243.64.36" AND destinationport=17146)
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="208.115.230.243" AND sourceport=16697 OR sourceaddress="185.126.239.207" AND sourceport=26630 OR sourceaddress="213.183.57.174" AND sourceport=12517 OR sourceaddress="213.183.57.72" AND sourceport=12517 OR sourceaddress="213.183.56.201" AND sourceport=12517 OR sourceaddress="95.164.45.27" AND sourceport=17426 OR sourceaddress="45.120.178.161" AND sourceport=11013 OR sourceaddress="176.120.74.3" AND sourceport=17268 OR sourceaddress="92.243.64.184" AND sourceport=17146 OR sourceaddress="92.243.64.36" AND sourceport=17146)
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="208.115.230.243" AND sourceport=16697 OR translatedipaddress="185.126.239.207" AND sourceport=26630 OR translatedipaddress="213.183.57.174" AND sourceport=12517 OR translatedipaddress="213.183.57.72" AND sourceport=12517 OR translatedipaddress="213.183.56.201" AND sourceport=12517 OR translatedipaddress="95.164.45.27" AND sourceport=17426 OR translatedipaddress="45.120.178.161" AND sourceport=11013 OR translatedipaddress="176.120.74.3" AND sourceport=17268 OR translatedipaddress="92.243.64.184" AND sourceport=17146 OR translatedipaddress="92.243.64.36" AND sourceport=17146)
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND destinationport=16697 OR destinationtranslatedaddress="185.126.239.207" AND destinationport=26630 OR destinationtranslatedaddress="213.183.57.174" AND destinationport=12517 OR destinationtranslatedaddress="213.183.57.72" AND destinationport=12517 OR destinationtranslatedaddress="213.183.56.201" AND destinationport=12517 OR destinationtranslatedaddress="95.164.45.27" AND destinationport=17426 OR destinationtranslatedaddress="45.120.178.161" AND destinationport=11013 OR destinationtranslatedaddress="176.120.74.3" AND destinationport=17268 OR destinationtranslatedaddress="92.243.64.184" AND destinationport=17146 OR destinationtranslatedaddress="92.243.64.36" AND destinationport=17146)
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND destinationtranslatedport=16697 OR destinationtranslatedaddress="185.126.239.207" AND destinationtranslatedport=26630 OR destinationtranslatedaddress="213.183.57.174" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="213.183.57.72" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="213.183.56.201" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="95.164.45.27" AND destinationtranslatedport=17426 OR destinationtranslatedaddress="45.120.178.161" AND destinationtranslatedport=11013 OR destinationtranslatedaddress="176.120.74.3" AND destinationtranslatedport=17268 OR destinationtranslatedaddress="92.243.64.184" AND destinationtranslatedport=17146 OR destinationtranslatedaddress="92.243.64.36" AND destinationtranslatedport=17146)
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND translatedport=16697 OR destinationtranslatedaddress="185.126.239.207" AND translatedport=26630 OR destinationtranslatedaddress="213.183.57.174" AND translatedport=12517 OR destinationtranslatedaddress="213.183.57.72" AND translatedport=12517 OR destinationtranslatedaddress="213.183.56.201" AND translatedport=12517 OR destinationtranslatedaddress="95.164.45.27" AND translatedport=17426 OR destinationtranslatedaddress="45.120.178.161" AND translatedport=11013 OR destinationtranslatedaddress="176.120.74.3" AND translatedport=17268 OR destinationtranslatedaddress="92.243.64.184" AND translatedport=17146 OR destinationtranslatedaddress="92.243.64.36" AND translatedport=17146)
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="89.31.120.126" AND destinationport=11578 OR destinationaddress="91.132.93.33" AND destinationport=11578 OR destinationaddress="91.132.95.28" AND destinationport=8773 OR destinationaddress="91.132.95.204" AND destinationport=8773 OR destinationaddress="91.132.95.135" AND destinationport=8773 OR destinationaddress="194.233.174.22" AND destinationport=45358)
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="89.31.120.126" AND sourceport=11578 OR sourceaddress="91.132.93.33" AND sourceport=11578 OR sourceaddress="91.132.95.28" AND sourceport=8773 OR sourceaddress="91.132.95.204" AND sourceport=8773 OR sourceaddress="91.132.95.135" AND sourceport=8773 OR sourceaddress="194.233.174.22" AND sourceport=45358)
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="89.31.120.126" AND sourceport=11578 OR translatedipaddress="91.132.93.33" AND sourceport=11578 OR translatedipaddress="91.132.95.28" AND sourceport=8773 OR translatedipaddress="91.132.95.204" AND sourceport=8773 OR translatedipaddress="91.132.95.135" AND sourceport=8773 OR translatedipaddress="194.233.174.22" AND sourceport=45358)
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND destinationport=11578 OR destinationtranslatedaddress="91.132.93.33" AND destinationport=11578 OR destinationtranslatedaddress="91.132.95.28" AND destinationport=8773 OR destinationtranslatedaddress="91.132.95.204" AND destinationport=8773 OR destinationtranslatedaddress="91.132.95.135" AND destinationport=8773 OR destinationtranslatedaddress="194.233.174.22" AND destinationport=45358)
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND destinationtranslatedport=11578 OR destinationtranslatedaddress="91.132.93.33" AND destinationtranslatedport=11578 OR destinationtranslatedaddress="91.132.95.28" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="91.132.95.204" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="91.132.95.135" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="194.233.174.22" AND destinationtranslatedport=45358)
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND translatedport=11578 OR destinationtranslatedaddress="91.132.93.33" AND translatedport=11578 OR destinationtranslatedaddress="91.132.95.28" AND translatedport=8773 OR destinationtranslatedaddress="91.132.95.204" AND translatedport=8773 OR destinationtranslatedaddress="91.132.95.135" AND translatedport=8773 OR destinationtranslatedaddress="194.233.174.22" AND translatedport=45358)
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="158.255.212.173" AND destinationport=10862 OR destinationaddress="151.236.25.126" AND destinationport=11331 OR destinationaddress="158.255.215.49" AND destinationport=23079 OR destinationaddress="185.26.239.98" AND destinationport=11076 OR destinationaddress="151.236.25.10" AND destinationport=7205 OR destinationaddress="37.235.53.217" AND destinationport=1358 OR destinationaddress="151.236.23.232" AND destinationport=763 OR destinationaddress="37.235.56.204" AND destinationport=24239 OR destinationaddress="162.252.175.122" AND destinationport=4126 OR destinationaddress="162.252.175.136" AND destinationport=11077)
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="158.255.212.173" AND sourceport=10862 OR sourceaddress="151.236.25.126" AND sourceport=11331 OR sourceaddress="158.255.215.49" AND sourceport=23079 OR sourceaddress="185.26.239.98" AND sourceport=11076 OR sourceaddress="151.236.25.10" AND sourceport=7205 OR sourceaddress="37.235.53.217" AND sourceport=1358 OR sourceaddress="151.236.23.232" AND sourceport=763 OR sourceaddress="37.235.56.204" AND sourceport=24239 OR sourceaddress="162.252.175.122" AND sourceport=4126 OR sourceaddress="162.252.175.136" AND sourceport=11077)
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="158.255.212.173" AND sourceport=10862 OR translatedipaddress="151.236.25.126" AND sourceport=11331 OR translatedipaddress="158.255.215.49" AND sourceport=23079 OR translatedipaddress="185.26.239.98" AND sourceport=11076 OR translatedipaddress="151.236.25.10" AND sourceport=7205 OR translatedipaddress="37.235.53.217" AND sourceport=1358 OR translatedipaddress="151.236.23.232" AND sourceport=763 OR translatedipaddress="37.235.56.204" AND sourceport=24239 OR translatedipaddress="162.252.175.122" AND sourceport=4126 OR translatedipaddress="162.252.175.136" AND sourceport=11077)
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND destinationport=10862 OR destinationtranslatedaddress="151.236.25.126" AND destinationport=11331 OR destinationtranslatedaddress="158.255.215.49" AND destinationport=23079 OR destinationtranslatedaddress="185.26.239.98" AND destinationport=11076 OR destinationtranslatedaddress="151.236.25.10" AND destinationport=7205 OR destinationtranslatedaddress="37.235.53.217" AND destinationport=1358 OR destinationtranslatedaddress="151.236.23.232" AND destinationport=763 OR destinationtranslatedaddress="37.235.56.204" AND destinationport=24239 OR destinationtranslatedaddress="162.252.175.122" AND destinationport=4126 OR destinationtranslatedaddress="162.252.175.136" AND destinationport=11077)
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND destinationtranslatedport=10862 OR destinationtranslatedaddress="151.236.25.126" AND destinationtranslatedport=11331 OR destinationtranslatedaddress="158.255.215.49" AND destinationtranslatedport=23079 OR destinationtranslatedaddress="185.26.239.98" AND destinationtranslatedport=11076 OR destinationtranslatedaddress="151.236.25.10" AND destinationtranslatedport=7205 OR destinationtranslatedaddress="37.235.53.217" AND destinationtranslatedport=1358 OR destinationtranslatedaddress="151.236.23.232" AND destinationtranslatedport=763 OR destinationtranslatedaddress="37.235.56.204" AND destinationtranslatedport=24239 OR destinationtranslatedaddress="162.252.175.122" AND destinationtranslatedport=4126 OR destinationtranslatedaddress="162.252.175.136" AND destinationtranslatedport=11077)
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND translatedport=10862 OR destinationtranslatedaddress="151.236.25.126" AND translatedport=11331 OR destinationtranslatedaddress="158.255.215.49" AND translatedport=23079 OR destinationtranslatedaddress="185.26.239.98" AND translatedport=11076 OR destinationtranslatedaddress="151.236.25.10" AND translatedport=7205 OR destinationtranslatedaddress="37.235.53.217" AND translatedport=1358 OR destinationtranslatedaddress="151.236.23.232" AND translatedport=763 OR destinationtranslatedaddress="37.235.56.204" AND translatedport=24239 OR destinationtranslatedaddress="162.252.175.122" AND translatedport=4126 OR destinationtranslatedaddress="162.252.175.136" AND translatedport=11077)
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="162.252.175.163" AND destinationport=28693 OR destinationaddress="162.252.175.90" AND destinationport=845 OR destinationaddress="162.252.175.109" AND destinationport=28330 OR destinationaddress="151.236.20.39" AND destinationport=5524 OR destinationaddress="158.255.208.140" AND destinationport=86 OR destinationaddress="194.68.27.149" AND destinationport=13106 OR destinationaddress="194.68.27.176" AND destinationport=6460 OR destinationaddress="37.143.128.223" AND destinationport=16223 OR destinationaddress="31.40.212.130" AND destinationport=7225 OR destinationaddress="198.244.207.203" AND destinationport=2076)
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="162.252.175.163" AND sourceport=28693 OR sourceaddress="162.252.175.90" AND sourceport=845 OR sourceaddress="162.252.175.109" AND sourceport=28330 OR sourceaddress="151.236.20.39" AND sourceport=5524 OR sourceaddress="158.255.208.140" AND sourceport=86 OR sourceaddress="194.68.27.149" AND sourceport=13106 OR sourceaddress="194.68.27.176" AND sourceport=6460 OR sourceaddress="37.143.128.223" AND sourceport=16223 OR sourceaddress="31.40.212.130" AND sourceport=7225 OR sourceaddress="198.244.207.203" AND sourceport=2076)
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="162.252.175.163" AND sourceport=28693 OR translatedipaddress="162.252.175.90" AND sourceport=845 OR translatedipaddress="162.252.175.109" AND sourceport=28330 OR translatedipaddress="151.236.20.39" AND sourceport=5524 OR translatedipaddress="158.255.208.140" AND sourceport=86 OR translatedipaddress="194.68.27.149" AND sourceport=13106 OR translatedipaddress="194.68.27.176" AND sourceport=6460 OR translatedipaddress="37.143.128.223" AND sourceport=16223 OR translatedipaddress="31.40.212.130" AND sourceport=7225 OR translatedipaddress="198.244.207.203" AND sourceport=2076)
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND destinationport=28693 OR destinationtranslatedaddress="162.252.175.90" AND destinationport=845 OR destinationtranslatedaddress="162.252.175.109" AND destinationport=28330 OR destinationtranslatedaddress="151.236.20.39" AND destinationport=5524 OR destinationtranslatedaddress="158.255.208.140" AND destinationport=86 OR destinationtranslatedaddress="194.68.27.149" AND destinationport=13106 OR destinationtranslatedaddress="194.68.27.176" AND destinationport=6460 OR destinationtranslatedaddress="37.143.128.223" AND destinationport=16223 OR destinationtranslatedaddress="31.40.212.130" AND destinationport=7225 OR destinationtranslatedaddress="198.244.207.203" AND destinationport=2076)
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND destinationtranslatedport=28693 OR destinationtranslatedaddress="162.252.175.90" AND destinationtranslatedport=845 OR destinationtranslatedaddress="162.252.175.109" AND destinationtranslatedport=28330 OR destinationtranslatedaddress="151.236.20.39" AND destinationtranslatedport=5524 OR destinationtranslatedaddress="158.255.208.140" AND destinationtranslatedport=86 OR destinationtranslatedaddress="194.68.27.149" AND destinationtranslatedport=13106 OR destinationtranslatedaddress="194.68.27.176" AND destinationtranslatedport=6460 OR destinationtranslatedaddress="37.143.128.223" AND destinationtranslatedport=16223 OR destinationtranslatedaddress="31.40.212.130" AND destinationtranslatedport=7225 OR destinationtranslatedaddress="198.244.207.203" AND destinationtranslatedport=2076)
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND translatedport=28693 OR destinationtranslatedaddress="162.252.175.90" AND translatedport=845 OR destinationtranslatedaddress="162.252.175.109" AND translatedport=28330 OR destinationtranslatedaddress="151.236.20.39" AND translatedport=5524 OR destinationtranslatedaddress="158.255.208.140" AND translatedport=86 OR destinationtranslatedaddress="194.68.27.149" AND translatedport=13106 OR destinationtranslatedaddress="194.68.27.176" AND translatedport=6460 OR destinationtranslatedaddress="37.143.128.223" AND translatedport=16223 OR destinationtranslatedaddress="31.40.212.130" AND translatedport=7225 OR destinationtranslatedaddress="198.244.207.203" AND translatedport=2076)
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="208.115.230.243" AND destinationport=16697 OR destinationaddress="185.126.239.207" AND destinationport=26630 OR destinationaddress="213.183.57.174" AND destinationport=12517 OR destinationaddress="213.183.57.72" AND destinationport=12517 OR destinationaddress="213.183.56.201" AND destinationport=12517 OR destinationaddress="95.164.45.27" AND destinationport=17426 OR destinationaddress="45.120.178.161" AND destinationport=11013 OR destinationaddress="176.120.74.3" AND destinationport=17268 OR destinationaddress="92.243.64.184" AND destinationport=17146 OR destinationaddress="92.243.64.36" AND destinationport=17146)
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="208.115.230.243" AND sourceport=16697 OR sourceaddress="185.126.239.207" AND sourceport=26630 OR sourceaddress="213.183.57.174" AND sourceport=12517 OR sourceaddress="213.183.57.72" AND sourceport=12517 OR sourceaddress="213.183.56.201" AND sourceport=12517 OR sourceaddress="95.164.45.27" AND sourceport=17426 OR sourceaddress="45.120.178.161" AND sourceport=11013 OR sourceaddress="176.120.74.3" AND sourceport=17268 OR sourceaddress="92.243.64.184" AND sourceport=17146 OR sourceaddress="92.243.64.36" AND sourceport=17146)
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="208.115.230.243" AND sourceport=16697 OR translatedipaddress="185.126.239.207" AND sourceport=26630 OR translatedipaddress="213.183.57.174" AND sourceport=12517 OR translatedipaddress="213.183.57.72" AND sourceport=12517 OR translatedipaddress="213.183.56.201" AND sourceport=12517 OR translatedipaddress="95.164.45.27" AND sourceport=17426 OR translatedipaddress="45.120.178.161" AND sourceport=11013 OR translatedipaddress="176.120.74.3" AND sourceport=17268 OR translatedipaddress="92.243.64.184" AND sourceport=17146 OR translatedipaddress="92.243.64.36" AND sourceport=17146)
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND destinationport=16697 OR destinationtranslatedaddress="185.126.239.207" AND destinationport=26630 OR destinationtranslatedaddress="213.183.57.174" AND destinationport=12517 OR destinationtranslatedaddress="213.183.57.72" AND destinationport=12517 OR destinationtranslatedaddress="213.183.56.201" AND destinationport=12517 OR destinationtranslatedaddress="95.164.45.27" AND destinationport=17426 OR destinationtranslatedaddress="45.120.178.161" AND destinationport=11013 OR destinationtranslatedaddress="176.120.74.3" AND destinationport=17268 OR destinationtranslatedaddress="92.243.64.184" AND destinationport=17146 OR destinationtranslatedaddress="92.243.64.36" AND destinationport=17146)
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND destinationtranslatedport=16697 OR destinationtranslatedaddress="185.126.239.207" AND destinationtranslatedport=26630 OR destinationtranslatedaddress="213.183.57.174" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="213.183.57.72" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="213.183.56.201" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="95.164.45.27" AND destinationtranslatedport=17426 OR destinationtranslatedaddress="45.120.178.161" AND destinationtranslatedport=11013 OR destinationtranslatedaddress="176.120.74.3" AND destinationtranslatedport=17268 OR destinationtranslatedaddress="92.243.64.184" AND destinationtranslatedport=17146 OR destinationtranslatedaddress="92.243.64.36" AND destinationtranslatedport=17146)
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND translatedport=16697 OR destinationtranslatedaddress="185.126.239.207" AND translatedport=26630 OR destinationtranslatedaddress="213.183.57.174" AND translatedport=12517 OR destinationtranslatedaddress="213.183.57.72" AND translatedport=12517 OR destinationtranslatedaddress="213.183.56.201" AND translatedport=12517 OR destinationtranslatedaddress="95.164.45.27" AND translatedport=17426 OR destinationtranslatedaddress="45.120.178.161" AND translatedport=11013 OR destinationtranslatedaddress="176.120.74.3" AND translatedport=17268 OR destinationtranslatedaddress="92.243.64.184" AND translatedport=17146 OR destinationtranslatedaddress="92.243.64.36" AND translatedport=17146)
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="89.31.120.126" AND destinationport=11578 OR destinationaddress="91.132.93.33" AND destinationport=11578 OR destinationaddress="91.132.95.28" AND destinationport=8773 OR destinationaddress="91.132.95.204" AND destinationport=8773 OR destinationaddress="91.132.95.135" AND destinationport=8773 OR destinationaddress="194.233.174.22" AND destinationport=45358)
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="89.31.120.126" AND sourceport=11578 OR sourceaddress="91.132.93.33" AND sourceport=11578 OR sourceaddress="91.132.95.28" AND sourceport=8773 OR sourceaddress="91.132.95.204" AND sourceport=8773 OR sourceaddress="91.132.95.135" AND sourceport=8773 OR sourceaddress="194.233.174.22" AND sourceport=45358)
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="89.31.120.126" AND sourceport=11578 OR translatedipaddress="91.132.93.33" AND sourceport=11578 OR translatedipaddress="91.132.95.28" AND sourceport=8773 OR translatedipaddress="91.132.95.204" AND sourceport=8773 OR translatedipaddress="91.132.95.135" AND sourceport=8773 OR translatedipaddress="194.233.174.22" AND sourceport=45358)
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND destinationport=11578 OR destinationtranslatedaddress="91.132.93.33" AND destinationport=11578 OR destinationtranslatedaddress="91.132.95.28" AND destinationport=8773 OR destinationtranslatedaddress="91.132.95.204" AND destinationport=8773 OR destinationtranslatedaddress="91.132.95.135" AND destinationport=8773 OR destinationtranslatedaddress="194.233.174.22" AND destinationport=45358)
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND destinationtranslatedport=11578 OR destinationtranslatedaddress="91.132.93.33" AND destinationtranslatedport=11578 OR destinationtranslatedaddress="91.132.95.28" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="91.132.95.204" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="91.132.95.135" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="194.233.174.22" AND destinationtranslatedport=45358)
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND translatedport=11578 OR destinationtranslatedaddress="91.132.93.33" AND translatedport=11578 OR destinationtranslatedaddress="91.132.95.28" AND translatedport=8773 OR destinationtranslatedaddress="91.132.95.204" AND translatedport=8773 OR destinationtranslatedaddress="91.132.95.135" AND translatedport=8773 OR destinationtranslatedaddress="194.233.174.22" AND translatedport=45358)
index=activity AND rg_functionality="Email / Email Security" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="158.255.212.173" AND destinationport=10862 OR destinationaddress="151.236.25.126" AND destinationport=11331 OR destinationaddress="158.255.215.49" AND destinationport=23079 OR destinationaddress="185.26.239.98" AND destinationport=11076 OR destinationaddress="151.236.25.10" AND destinationport=7205 OR destinationaddress="37.235.53.217" AND destinationport=1358 OR destinationaddress="151.236.23.232" AND destinationport=763 OR destinationaddress="37.235.56.204" AND destinationport=24239 OR destinationaddress="162.252.175.122" AND destinationport=4126 OR destinationaddress="162.252.175.136" AND destinationport=11077)
index=activity AND rg_functionality="Email / Email Security" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="158.255.212.173" AND sourceport=10862 OR sourceaddress="151.236.25.126" AND sourceport=11331 OR sourceaddress="158.255.215.49" AND sourceport=23079 OR sourceaddress="185.26.239.98" AND sourceport=11076 OR sourceaddress="151.236.25.10" AND sourceport=7205 OR sourceaddress="37.235.53.217" AND sourceport=1358 OR sourceaddress="151.236.23.232" AND sourceport=763 OR sourceaddress="37.235.56.204" AND sourceport=24239 OR sourceaddress="162.252.175.122" AND sourceport=4126 OR sourceaddress="162.252.175.136" AND sourceport=11077)
index=activity AND rg_functionality="Email / Email Security" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="158.255.212.173" AND sourceport=10862 OR translatedipaddress="151.236.25.126" AND sourceport=11331 OR translatedipaddress="158.255.215.49" AND sourceport=23079 OR translatedipaddress="185.26.239.98" AND sourceport=11076 OR translatedipaddress="151.236.25.10" AND sourceport=7205 OR translatedipaddress="37.235.53.217" AND sourceport=1358 OR translatedipaddress="151.236.23.232" AND sourceport=763 OR translatedipaddress="37.235.56.204" AND sourceport=24239 OR translatedipaddress="162.252.175.122" AND sourceport=4126 OR translatedipaddress="162.252.175.136" AND sourceport=11077)
index=activity AND rg_functionality="Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND destinationport=10862 OR destinationtranslatedaddress="151.236.25.126" AND destinationport=11331 OR destinationtranslatedaddress="158.255.215.49" AND destinationport=23079 OR destinationtranslatedaddress="185.26.239.98" AND destinationport=11076 OR destinationtranslatedaddress="151.236.25.10" AND destinationport=7205 OR destinationtranslatedaddress="37.235.53.217" AND destinationport=1358 OR destinationtranslatedaddress="151.236.23.232" AND destinationport=763 OR destinationtranslatedaddress="37.235.56.204" AND destinationport=24239 OR destinationtranslatedaddress="162.252.175.122" AND destinationport=4126 OR destinationtranslatedaddress="162.252.175.136" AND destinationport=11077)
index=activity AND rg_functionality="Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND destinationtranslatedport=10862 OR destinationtranslatedaddress="151.236.25.126" AND destinationtranslatedport=11331 OR destinationtranslatedaddress="158.255.215.49" AND destinationtranslatedport=23079 OR destinationtranslatedaddress="185.26.239.98" AND destinationtranslatedport=11076 OR destinationtranslatedaddress="151.236.25.10" AND destinationtranslatedport=7205 OR destinationtranslatedaddress="37.235.53.217" AND destinationtranslatedport=1358 OR destinationtranslatedaddress="151.236.23.232" AND destinationtranslatedport=763 OR destinationtranslatedaddress="37.235.56.204" AND destinationtranslatedport=24239 OR destinationtranslatedaddress="162.252.175.122" AND destinationtranslatedport=4126 OR destinationtranslatedaddress="162.252.175.136" AND destinationtranslatedport=11077)
index=activity AND rg_functionality="Email / Email Security" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND translatedport=10862 OR destinationtranslatedaddress="151.236.25.126" AND translatedport=11331 OR destinationtranslatedaddress="158.255.215.49" AND translatedport=23079 OR destinationtranslatedaddress="185.26.239.98" AND translatedport=11076 OR destinationtranslatedaddress="151.236.25.10" AND translatedport=7205 OR destinationtranslatedaddress="37.235.53.217" AND translatedport=1358 OR destinationtranslatedaddress="151.236.23.232" AND translatedport=763 OR destinationtranslatedaddress="37.235.56.204" AND translatedport=24239 OR destinationtranslatedaddress="162.252.175.122" AND translatedport=4126 OR destinationtranslatedaddress="162.252.175.136" AND translatedport=11077)
index=activity AND rg_functionality="Email / Email Security" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="162.252.175.163" AND destinationport=28693 OR destinationaddress="162.252.175.90" AND destinationport=845 OR destinationaddress="162.252.175.109" AND destinationport=28330 OR destinationaddress="151.236.20.39" AND destinationport=5524 OR destinationaddress="158.255.208.140" AND destinationport=86 OR destinationaddress="194.68.27.149" AND destinationport=13106 OR destinationaddress="194.68.27.176" AND destinationport=6460 OR destinationaddress="37.143.128.223" AND destinationport=16223 OR destinationaddress="31.40.212.130" AND destinationport=7225 OR destinationaddress="198.244.207.203" AND destinationport=2076)
index=activity AND rg_functionality="Email / Email Security" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="162.252.175.163" AND sourceport=28693 OR sourceaddress="162.252.175.90" AND sourceport=845 OR sourceaddress="162.252.175.109" AND sourceport=28330 OR sourceaddress="151.236.20.39" AND sourceport=5524 OR sourceaddress="158.255.208.140" AND sourceport=86 OR sourceaddress="194.68.27.149" AND sourceport=13106 OR sourceaddress="194.68.27.176" AND sourceport=6460 OR sourceaddress="37.143.128.223" AND sourceport=16223 OR sourceaddress="31.40.212.130" AND sourceport=7225 OR sourceaddress="198.244.207.203" AND sourceport=2076)
index=activity AND rg_functionality="Email / Email Security" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="162.252.175.163" AND sourceport=28693 OR translatedipaddress="162.252.175.90" AND sourceport=845 OR translatedipaddress="162.252.175.109" AND sourceport=28330 OR translatedipaddress="151.236.20.39" AND sourceport=5524 OR translatedipaddress="158.255.208.140" AND sourceport=86 OR translatedipaddress="194.68.27.149" AND sourceport=13106 OR translatedipaddress="194.68.27.176" AND sourceport=6460 OR translatedipaddress="37.143.128.223" AND sourceport=16223 OR translatedipaddress="31.40.212.130" AND sourceport=7225 OR translatedipaddress="198.244.207.203" AND sourceport=2076)
index=activity AND rg_functionality="Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND destinationport=28693 OR destinationtranslatedaddress="162.252.175.90" AND destinationport=845 OR destinationtranslatedaddress="162.252.175.109" AND destinationport=28330 OR destinationtranslatedaddress="151.236.20.39" AND destinationport=5524 OR destinationtranslatedaddress="158.255.208.140" AND destinationport=86 OR destinationtranslatedaddress="194.68.27.149" AND destinationport=13106 OR destinationtranslatedaddress="194.68.27.176" AND destinationport=6460 OR destinationtranslatedaddress="37.143.128.223" AND destinationport=16223 OR destinationtranslatedaddress="31.40.212.130" AND destinationport=7225 OR destinationtranslatedaddress="198.244.207.203" AND destinationport=2076)
index=activity AND rg_functionality="Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND destinationtranslatedport=28693 OR destinationtranslatedaddress="162.252.175.90" AND destinationtranslatedport=845 OR destinationtranslatedaddress="162.252.175.109" AND destinationtranslatedport=28330 OR destinationtranslatedaddress="151.236.20.39" AND destinationtranslatedport=5524 OR destinationtranslatedaddress="158.255.208.140" AND destinationtranslatedport=86 OR destinationtranslatedaddress="194.68.27.149" AND destinationtranslatedport=13106 OR destinationtranslatedaddress="194.68.27.176" AND destinationtranslatedport=6460 OR destinationtranslatedaddress="37.143.128.223" AND destinationtranslatedport=16223 OR destinationtranslatedaddress="31.40.212.130" AND destinationtranslatedport=7225 OR destinationtranslatedaddress="198.244.207.203" AND destinationtranslatedport=2076)
index=activity AND rg_functionality="Email / Email Security" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND translatedport=28693 OR destinationtranslatedaddress="162.252.175.90" AND translatedport=845 OR destinationtranslatedaddress="162.252.175.109" AND translatedport=28330 OR destinationtranslatedaddress="151.236.20.39" AND translatedport=5524 OR destinationtranslatedaddress="158.255.208.140" AND translatedport=86 OR destinationtranslatedaddress="194.68.27.149" AND translatedport=13106 OR destinationtranslatedaddress="194.68.27.176" AND translatedport=6460 OR destinationtranslatedaddress="37.143.128.223" AND translatedport=16223 OR destinationtranslatedaddress="31.40.212.130" AND translatedport=7225 OR destinationtranslatedaddress="198.244.207.203" AND translatedport=2076)
index=activity AND rg_functionality="Email / Email Security" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="208.115.230.243" AND destinationport=16697 OR destinationaddress="185.126.239.207" AND destinationport=26630 OR destinationaddress="213.183.57.174" AND destinationport=12517 OR destinationaddress="213.183.57.72" AND destinationport=12517 OR destinationaddress="213.183.56.201" AND destinationport=12517 OR destinationaddress="95.164.45.27" AND destinationport=17426 OR destinationaddress="45.120.178.161" AND destinationport=11013 OR destinationaddress="176.120.74.3" AND destinationport=17268 OR destinationaddress="92.243.64.184" AND destinationport=17146 OR destinationaddress="92.243.64.36" AND destinationport=17146)
index=activity AND rg_functionality="Email / Email Security" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="208.115.230.243" AND sourceport=16697 OR sourceaddress="185.126.239.207" AND sourceport=26630 OR sourceaddress="213.183.57.174" AND sourceport=12517 OR sourceaddress="213.183.57.72" AND sourceport=12517 OR sourceaddress="213.183.56.201" AND sourceport=12517 OR sourceaddress="95.164.45.27" AND sourceport=17426 OR sourceaddress="45.120.178.161" AND sourceport=11013 OR sourceaddress="176.120.74.3" AND sourceport=17268 OR sourceaddress="92.243.64.184" AND sourceport=17146 OR sourceaddress="92.243.64.36" AND sourceport=17146)
index=activity AND rg_functionality="Email / Email Security" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="208.115.230.243" AND sourceport=16697 OR translatedipaddress="185.126.239.207" AND sourceport=26630 OR translatedipaddress="213.183.57.174" AND sourceport=12517 OR translatedipaddress="213.183.57.72" AND sourceport=12517 OR translatedipaddress="213.183.56.201" AND sourceport=12517 OR translatedipaddress="95.164.45.27" AND sourceport=17426 OR translatedipaddress="45.120.178.161" AND sourceport=11013 OR translatedipaddress="176.120.74.3" AND sourceport=17268 OR translatedipaddress="92.243.64.184" AND sourceport=17146 OR translatedipaddress="92.243.64.36" AND sourceport=17146)
index=activity AND rg_functionality="Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND destinationport=16697 OR destinationtranslatedaddress="185.126.239.207" AND destinationport=26630 OR destinationtranslatedaddress="213.183.57.174" AND destinationport=12517 OR destinationtranslatedaddress="213.183.57.72" AND destinationport=12517 OR destinationtranslatedaddress="213.183.56.201" AND destinationport=12517 OR destinationtranslatedaddress="95.164.45.27" AND destinationport=17426 OR destinationtranslatedaddress="45.120.178.161" AND destinationport=11013 OR destinationtranslatedaddress="176.120.74.3" AND destinationport=17268 OR destinationtranslatedaddress="92.243.64.184" AND destinationport=17146 OR destinationtranslatedaddress="92.243.64.36" AND destinationport=17146)
index=activity AND rg_functionality="Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND destinationtranslatedport=16697 OR destinationtranslatedaddress="185.126.239.207" AND destinationtranslatedport=26630 OR destinationtranslatedaddress="213.183.57.174" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="213.183.57.72" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="213.183.56.201" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="95.164.45.27" AND destinationtranslatedport=17426 OR destinationtranslatedaddress="45.120.178.161" AND destinationtranslatedport=11013 OR destinationtranslatedaddress="176.120.74.3" AND destinationtranslatedport=17268 OR destinationtranslatedaddress="92.243.64.184" AND destinationtranslatedport=17146 OR destinationtranslatedaddress="92.243.64.36" AND destinationtranslatedport=17146)
index=activity AND rg_functionality="Email / Email Security" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND translatedport=16697 OR destinationtranslatedaddress="185.126.239.207" AND translatedport=26630 OR destinationtranslatedaddress="213.183.57.174" AND translatedport=12517 OR destinationtranslatedaddress="213.183.57.72" AND translatedport=12517 OR destinationtranslatedaddress="213.183.56.201" AND translatedport=12517 OR destinationtranslatedaddress="95.164.45.27" AND translatedport=17426 OR destinationtranslatedaddress="45.120.178.161" AND translatedport=11013 OR destinationtranslatedaddress="176.120.74.3" AND translatedport=17268 OR destinationtranslatedaddress="92.243.64.184" AND translatedport=17146 OR destinationtranslatedaddress="92.243.64.36" AND translatedport=17146)
index=activity AND rg_functionality="Email / Email Security" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="89.31.120.126" AND destinationport=11578 OR destinationaddress="91.132.93.33" AND destinationport=11578 OR destinationaddress="91.132.95.28" AND destinationport=8773 OR destinationaddress="91.132.95.204" AND destinationport=8773 OR destinationaddress="91.132.95.135" AND destinationport=8773 OR destinationaddress="194.233.174.22" AND destinationport=45358)
index=activity AND rg_functionality="Email / Email Security" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="89.31.120.126" AND sourceport=11578 OR sourceaddress="91.132.93.33" AND sourceport=11578 OR sourceaddress="91.132.95.28" AND sourceport=8773 OR sourceaddress="91.132.95.204" AND sourceport=8773 OR sourceaddress="91.132.95.135" AND sourceport=8773 OR sourceaddress="194.233.174.22" AND sourceport=45358)
index=activity AND rg_functionality="Email / Email Security" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="89.31.120.126" AND sourceport=11578 OR translatedipaddress="91.132.93.33" AND sourceport=11578 OR translatedipaddress="91.132.95.28" AND sourceport=8773 OR translatedipaddress="91.132.95.204" AND sourceport=8773 OR translatedipaddress="91.132.95.135" AND sourceport=8773 OR translatedipaddress="194.233.174.22" AND sourceport=45358)
index=activity AND rg_functionality="Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND destinationport=11578 OR destinationtranslatedaddress="91.132.93.33" AND destinationport=11578 OR destinationtranslatedaddress="91.132.95.28" AND destinationport=8773 OR destinationtranslatedaddress="91.132.95.204" AND destinationport=8773 OR destinationtranslatedaddress="91.132.95.135" AND destinationport=8773 OR destinationtranslatedaddress="194.233.174.22" AND destinationport=45358)
index=activity AND rg_functionality="Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND destinationtranslatedport=11578 OR destinationtranslatedaddress="91.132.93.33" AND destinationtranslatedport=11578 OR destinationtranslatedaddress="91.132.95.28" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="91.132.95.204" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="91.132.95.135" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="194.233.174.22" AND destinationtranslatedport=45358)
index=activity AND rg_functionality="Email / Email Security" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND translatedport=11578 OR destinationtranslatedaddress="91.132.93.33" AND translatedport=11578 OR destinationtranslatedaddress="91.132.95.28" AND translatedport=8773 OR destinationtranslatedaddress="91.132.95.204" AND translatedport=8773 OR destinationtranslatedaddress="91.132.95.135" AND translatedport=8773 OR destinationtranslatedaddress="194.233.174.22" AND translatedport=45358)
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="158.255.212.173" AND destinationport=10862 OR destinationaddress="151.236.25.126" AND destinationport=11331 OR destinationaddress="158.255.215.49" AND destinationport=23079 OR destinationaddress="185.26.239.98" AND destinationport=11076 OR destinationaddress="151.236.25.10" AND destinationport=7205 OR destinationaddress="37.235.53.217" AND destinationport=1358 OR destinationaddress="151.236.23.232" AND destinationport=763 OR destinationaddress="37.235.56.204" AND destinationport=24239 OR destinationaddress="162.252.175.122" AND destinationport=4126 OR destinationaddress="162.252.175.136" AND destinationport=11077)
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="158.255.212.173" AND sourceport=10862 OR sourceaddress="151.236.25.126" AND sourceport=11331 OR sourceaddress="158.255.215.49" AND sourceport=23079 OR sourceaddress="185.26.239.98" AND sourceport=11076 OR sourceaddress="151.236.25.10" AND sourceport=7205 OR sourceaddress="37.235.53.217" AND sourceport=1358 OR sourceaddress="151.236.23.232" AND sourceport=763 OR sourceaddress="37.235.56.204" AND sourceport=24239 OR sourceaddress="162.252.175.122" AND sourceport=4126 OR sourceaddress="162.252.175.136" AND sourceport=11077)
index=activity AND rg_functionality="Cloud Email / Email Security" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="158.255.212.173" AND sourceport=10862 OR translatedipaddress="151.236.25.126" AND sourceport=11331 OR translatedipaddress="158.255.215.49" AND sourceport=23079 OR translatedipaddress="185.26.239.98" AND sourceport=11076 OR translatedipaddress="151.236.25.10" AND sourceport=7205 OR translatedipaddress="37.235.53.217" AND sourceport=1358 OR translatedipaddress="151.236.23.232" AND sourceport=763 OR translatedipaddress="37.235.56.204" AND sourceport=24239 OR translatedipaddress="162.252.175.122" AND sourceport=4126 OR translatedipaddress="162.252.175.136" AND sourceport=11077)
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND destinationport=10862 OR destinationtranslatedaddress="151.236.25.126" AND destinationport=11331 OR destinationtranslatedaddress="158.255.215.49" AND destinationport=23079 OR destinationtranslatedaddress="185.26.239.98" AND destinationport=11076 OR destinationtranslatedaddress="151.236.25.10" AND destinationport=7205 OR destinationtranslatedaddress="37.235.53.217" AND destinationport=1358 OR destinationtranslatedaddress="151.236.23.232" AND destinationport=763 OR destinationtranslatedaddress="37.235.56.204" AND destinationport=24239 OR destinationtranslatedaddress="162.252.175.122" AND destinationport=4126 OR destinationtranslatedaddress="162.252.175.136" AND destinationport=11077)
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND destinationtranslatedport=10862 OR destinationtranslatedaddress="151.236.25.126" AND destinationtranslatedport=11331 OR destinationtranslatedaddress="158.255.215.49" AND destinationtranslatedport=23079 OR destinationtranslatedaddress="185.26.239.98" AND destinationtranslatedport=11076 OR destinationtranslatedaddress="151.236.25.10" AND destinationtranslatedport=7205 OR destinationtranslatedaddress="37.235.53.217" AND destinationtranslatedport=1358 OR destinationtranslatedaddress="151.236.23.232" AND destinationtranslatedport=763 OR destinationtranslatedaddress="37.235.56.204" AND destinationtranslatedport=24239 OR destinationtranslatedaddress="162.252.175.122" AND destinationtranslatedport=4126 OR destinationtranslatedaddress="162.252.175.136" AND destinationtranslatedport=11077)
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND translatedport=10862 OR destinationtranslatedaddress="151.236.25.126" AND translatedport=11331 OR destinationtranslatedaddress="158.255.215.49" AND translatedport=23079 OR destinationtranslatedaddress="185.26.239.98" AND translatedport=11076 OR destinationtranslatedaddress="151.236.25.10" AND translatedport=7205 OR destinationtranslatedaddress="37.235.53.217" AND translatedport=1358 OR destinationtranslatedaddress="151.236.23.232" AND translatedport=763 OR destinationtranslatedaddress="37.235.56.204" AND translatedport=24239 OR destinationtranslatedaddress="162.252.175.122" AND translatedport=4126 OR destinationtranslatedaddress="162.252.175.136" AND translatedport=11077)
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="162.252.175.163" AND destinationport=28693 OR destinationaddress="162.252.175.90" AND destinationport=845 OR destinationaddress="162.252.175.109" AND destinationport=28330 OR destinationaddress="151.236.20.39" AND destinationport=5524 OR destinationaddress="158.255.208.140" AND destinationport=86 OR destinationaddress="194.68.27.149" AND destinationport=13106 OR destinationaddress="194.68.27.176" AND destinationport=6460 OR destinationaddress="37.143.128.223" AND destinationport=16223 OR destinationaddress="31.40.212.130" AND destinationport=7225 OR destinationaddress="198.244.207.203" AND destinationport=2076)
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="162.252.175.163" AND sourceport=28693 OR sourceaddress="162.252.175.90" AND sourceport=845 OR sourceaddress="162.252.175.109" AND sourceport=28330 OR sourceaddress="151.236.20.39" AND sourceport=5524 OR sourceaddress="158.255.208.140" AND sourceport=86 OR sourceaddress="194.68.27.149" AND sourceport=13106 OR sourceaddress="194.68.27.176" AND sourceport=6460 OR sourceaddress="37.143.128.223" AND sourceport=16223 OR sourceaddress="31.40.212.130" AND sourceport=7225 OR sourceaddress="198.244.207.203" AND sourceport=2076)
index=activity AND rg_functionality="Cloud Email / Email Security" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="162.252.175.163" AND sourceport=28693 OR translatedipaddress="162.252.175.90" AND sourceport=845 OR translatedipaddress="162.252.175.109" AND sourceport=28330 OR translatedipaddress="151.236.20.39" AND sourceport=5524 OR translatedipaddress="158.255.208.140" AND sourceport=86 OR translatedipaddress="194.68.27.149" AND sourceport=13106 OR translatedipaddress="194.68.27.176" AND sourceport=6460 OR translatedipaddress="37.143.128.223" AND sourceport=16223 OR translatedipaddress="31.40.212.130" AND sourceport=7225 OR translatedipaddress="198.244.207.203" AND sourceport=2076)
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND destinationport=28693 OR destinationtranslatedaddress="162.252.175.90" AND destinationport=845 OR destinationtranslatedaddress="162.252.175.109" AND destinationport=28330 OR destinationtranslatedaddress="151.236.20.39" AND destinationport=5524 OR destinationtranslatedaddress="158.255.208.140" AND destinationport=86 OR destinationtranslatedaddress="194.68.27.149" AND destinationport=13106 OR destinationtranslatedaddress="194.68.27.176" AND destinationport=6460 OR destinationtranslatedaddress="37.143.128.223" AND destinationport=16223 OR destinationtranslatedaddress="31.40.212.130" AND destinationport=7225 OR destinationtranslatedaddress="198.244.207.203" AND destinationport=2076)
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND destinationtranslatedport=28693 OR destinationtranslatedaddress="162.252.175.90" AND destinationtranslatedport=845 OR destinationtranslatedaddress="162.252.175.109" AND destinationtranslatedport=28330 OR destinationtranslatedaddress="151.236.20.39" AND destinationtranslatedport=5524 OR destinationtranslatedaddress="158.255.208.140" AND destinationtranslatedport=86 OR destinationtranslatedaddress="194.68.27.149" AND destinationtranslatedport=13106 OR destinationtranslatedaddress="194.68.27.176" AND destinationtranslatedport=6460 OR destinationtranslatedaddress="37.143.128.223" AND destinationtranslatedport=16223 OR destinationtranslatedaddress="31.40.212.130" AND destinationtranslatedport=7225 OR destinationtranslatedaddress="198.244.207.203" AND destinationtranslatedport=2076)
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND translatedport=28693 OR destinationtranslatedaddress="162.252.175.90" AND translatedport=845 OR destinationtranslatedaddress="162.252.175.109" AND translatedport=28330 OR destinationtranslatedaddress="151.236.20.39" AND translatedport=5524 OR destinationtranslatedaddress="158.255.208.140" AND translatedport=86 OR destinationtranslatedaddress="194.68.27.149" AND translatedport=13106 OR destinationtranslatedaddress="194.68.27.176" AND translatedport=6460 OR destinationtranslatedaddress="37.143.128.223" AND translatedport=16223 OR destinationtranslatedaddress="31.40.212.130" AND translatedport=7225 OR destinationtranslatedaddress="198.244.207.203" AND translatedport=2076)
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="208.115.230.243" AND destinationport=16697 OR destinationaddress="185.126.239.207" AND destinationport=26630 OR destinationaddress="213.183.57.174" AND destinationport=12517 OR destinationaddress="213.183.57.72" AND destinationport=12517 OR destinationaddress="213.183.56.201" AND destinationport=12517 OR destinationaddress="95.164.45.27" AND destinationport=17426 OR destinationaddress="45.120.178.161" AND destinationport=11013 OR destinationaddress="176.120.74.3" AND destinationport=17268 OR destinationaddress="92.243.64.184" AND destinationport=17146 OR destinationaddress="92.243.64.36" AND destinationport=17146)
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="208.115.230.243" AND sourceport=16697 OR sourceaddress="185.126.239.207" AND sourceport=26630 OR sourceaddress="213.183.57.174" AND sourceport=12517 OR sourceaddress="213.183.57.72" AND sourceport=12517 OR sourceaddress="213.183.56.201" AND sourceport=12517 OR sourceaddress="95.164.45.27" AND sourceport=17426 OR sourceaddress="45.120.178.161" AND sourceport=11013 OR sourceaddress="176.120.74.3" AND sourceport=17268 OR sourceaddress="92.243.64.184" AND sourceport=17146 OR sourceaddress="92.243.64.36" AND sourceport=17146)
index=activity AND rg_functionality="Cloud Email / Email Security" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="208.115.230.243" AND sourceport=16697 OR translatedipaddress="185.126.239.207" AND sourceport=26630 OR translatedipaddress="213.183.57.174" AND sourceport=12517 OR translatedipaddress="213.183.57.72" AND sourceport=12517 OR translatedipaddress="213.183.56.201" AND sourceport=12517 OR translatedipaddress="95.164.45.27" AND sourceport=17426 OR translatedipaddress="45.120.178.161" AND sourceport=11013 OR translatedipaddress="176.120.74.3" AND sourceport=17268 OR translatedipaddress="92.243.64.184" AND sourceport=17146 OR translatedipaddress="92.243.64.36" AND sourceport=17146)
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND destinationport=16697 OR destinationtranslatedaddress="185.126.239.207" AND destinationport=26630 OR destinationtranslatedaddress="213.183.57.174" AND destinationport=12517 OR destinationtranslatedaddress="213.183.57.72" AND destinationport=12517 OR destinationtranslatedaddress="213.183.56.201" AND destinationport=12517 OR destinationtranslatedaddress="95.164.45.27" AND destinationport=17426 OR destinationtranslatedaddress="45.120.178.161" AND destinationport=11013 OR destinationtranslatedaddress="176.120.74.3" AND destinationport=17268 OR destinationtranslatedaddress="92.243.64.184" AND destinationport=17146 OR destinationtranslatedaddress="92.243.64.36" AND destinationport=17146)
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND destinationtranslatedport=16697 OR destinationtranslatedaddress="185.126.239.207" AND destinationtranslatedport=26630 OR destinationtranslatedaddress="213.183.57.174" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="213.183.57.72" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="213.183.56.201" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="95.164.45.27" AND destinationtranslatedport=17426 OR destinationtranslatedaddress="45.120.178.161" AND destinationtranslatedport=11013 OR destinationtranslatedaddress="176.120.74.3" AND destinationtranslatedport=17268 OR destinationtranslatedaddress="92.243.64.184" AND destinationtranslatedport=17146 OR destinationtranslatedaddress="92.243.64.36" AND destinationtranslatedport=17146)
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND translatedport=16697 OR destinationtranslatedaddress="185.126.239.207" AND translatedport=26630 OR destinationtranslatedaddress="213.183.57.174" AND translatedport=12517 OR destinationtranslatedaddress="213.183.57.72" AND translatedport=12517 OR destinationtranslatedaddress="213.183.56.201" AND translatedport=12517 OR destinationtranslatedaddress="95.164.45.27" AND translatedport=17426 OR destinationtranslatedaddress="45.120.178.161" AND translatedport=11013 OR destinationtranslatedaddress="176.120.74.3" AND translatedport=17268 OR destinationtranslatedaddress="92.243.64.184" AND translatedport=17146 OR destinationtranslatedaddress="92.243.64.36" AND translatedport=17146)
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="89.31.120.126" AND destinationport=11578 OR destinationaddress="91.132.93.33" AND destinationport=11578 OR destinationaddress="91.132.95.28" AND destinationport=8773 OR destinationaddress="91.132.95.204" AND destinationport=8773 OR destinationaddress="91.132.95.135" AND destinationport=8773 OR destinationaddress="194.233.174.22" AND destinationport=45358)
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="89.31.120.126" AND sourceport=11578 OR sourceaddress="91.132.93.33" AND sourceport=11578 OR sourceaddress="91.132.95.28" AND sourceport=8773 OR sourceaddress="91.132.95.204" AND sourceport=8773 OR sourceaddress="91.132.95.135" AND sourceport=8773 OR sourceaddress="194.233.174.22" AND sourceport=45358)
index=activity AND rg_functionality="Cloud Email / Email Security" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="89.31.120.126" AND sourceport=11578 OR translatedipaddress="91.132.93.33" AND sourceport=11578 OR translatedipaddress="91.132.95.28" AND sourceport=8773 OR translatedipaddress="91.132.95.204" AND sourceport=8773 OR translatedipaddress="91.132.95.135" AND sourceport=8773 OR translatedipaddress="194.233.174.22" AND sourceport=45358)
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND destinationport=11578 OR destinationtranslatedaddress="91.132.93.33" AND destinationport=11578 OR destinationtranslatedaddress="91.132.95.28" AND destinationport=8773 OR destinationtranslatedaddress="91.132.95.204" AND destinationport=8773 OR destinationtranslatedaddress="91.132.95.135" AND destinationport=8773 OR destinationtranslatedaddress="194.233.174.22" AND destinationport=45358)
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND destinationtranslatedport=11578 OR destinationtranslatedaddress="91.132.93.33" AND destinationtranslatedport=11578 OR destinationtranslatedaddress="91.132.95.28" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="91.132.95.204" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="91.132.95.135" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="194.233.174.22" AND destinationtranslatedport=45358)
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND translatedport=11578 OR destinationtranslatedaddress="91.132.93.33" AND translatedport=11578 OR destinationtranslatedaddress="91.132.95.28" AND translatedport=8773 OR destinationtranslatedaddress="91.132.95.204" AND translatedport=8773 OR destinationtranslatedaddress="91.132.95.135" AND translatedport=8773 OR destinationtranslatedaddress="194.233.174.22" AND translatedport=45358)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="158.255.212.173" AND destinationport=10862 OR destinationaddress="151.236.25.126" AND destinationport=11331 OR destinationaddress="158.255.215.49" AND destinationport=23079 OR destinationaddress="185.26.239.98" AND destinationport=11076 OR destinationaddress="151.236.25.10" AND destinationport=7205 OR destinationaddress="37.235.53.217" AND destinationport=1358 OR destinationaddress="151.236.23.232" AND destinationport=763 OR destinationaddress="37.235.56.204" AND destinationport=24239 OR destinationaddress="162.252.175.122" AND destinationport=4126 OR destinationaddress="162.252.175.136" AND destinationport=11077)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="158.255.212.173" AND sourceport=10862 OR sourceaddress="151.236.25.126" AND sourceport=11331 OR sourceaddress="158.255.215.49" AND sourceport=23079 OR sourceaddress="185.26.239.98" AND sourceport=11076 OR sourceaddress="151.236.25.10" AND sourceport=7205 OR sourceaddress="37.235.53.217" AND sourceport=1358 OR sourceaddress="151.236.23.232" AND sourceport=763 OR sourceaddress="37.235.56.204" AND sourceport=24239 OR sourceaddress="162.252.175.122" AND sourceport=4126 OR sourceaddress="162.252.175.136" AND sourceport=11077)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="158.255.212.173" AND sourceport=10862 OR translatedipaddress="151.236.25.126" AND sourceport=11331 OR translatedipaddress="158.255.215.49" AND sourceport=23079 OR translatedipaddress="185.26.239.98" AND sourceport=11076 OR translatedipaddress="151.236.25.10" AND sourceport=7205 OR translatedipaddress="37.235.53.217" AND sourceport=1358 OR translatedipaddress="151.236.23.232" AND sourceport=763 OR translatedipaddress="37.235.56.204" AND sourceport=24239 OR translatedipaddress="162.252.175.122" AND sourceport=4126 OR translatedipaddress="162.252.175.136" AND sourceport=11077)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND destinationport=10862 OR destinationtranslatedaddress="151.236.25.126" AND destinationport=11331 OR destinationtranslatedaddress="158.255.215.49" AND destinationport=23079 OR destinationtranslatedaddress="185.26.239.98" AND destinationport=11076 OR destinationtranslatedaddress="151.236.25.10" AND destinationport=7205 OR destinationtranslatedaddress="37.235.53.217" AND destinationport=1358 OR destinationtranslatedaddress="151.236.23.232" AND destinationport=763 OR destinationtranslatedaddress="37.235.56.204" AND destinationport=24239 OR destinationtranslatedaddress="162.252.175.122" AND destinationport=4126 OR destinationtranslatedaddress="162.252.175.136" AND destinationport=11077)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND destinationtranslatedport=10862 OR destinationtranslatedaddress="151.236.25.126" AND destinationtranslatedport=11331 OR destinationtranslatedaddress="158.255.215.49" AND destinationtranslatedport=23079 OR destinationtranslatedaddress="185.26.239.98" AND destinationtranslatedport=11076 OR destinationtranslatedaddress="151.236.25.10" AND destinationtranslatedport=7205 OR destinationtranslatedaddress="37.235.53.217" AND destinationtranslatedport=1358 OR destinationtranslatedaddress="151.236.23.232" AND destinationtranslatedport=763 OR destinationtranslatedaddress="37.235.56.204" AND destinationtranslatedport=24239 OR destinationtranslatedaddress="162.252.175.122" AND destinationtranslatedport=4126 OR destinationtranslatedaddress="162.252.175.136" AND destinationtranslatedport=11077)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND translatedport=10862 OR destinationtranslatedaddress="151.236.25.126" AND translatedport=11331 OR destinationtranslatedaddress="158.255.215.49" AND translatedport=23079 OR destinationtranslatedaddress="185.26.239.98" AND translatedport=11076 OR destinationtranslatedaddress="151.236.25.10" AND translatedport=7205 OR destinationtranslatedaddress="37.235.53.217" AND translatedport=1358 OR destinationtranslatedaddress="151.236.23.232" AND translatedport=763 OR destinationtranslatedaddress="37.235.56.204" AND translatedport=24239 OR destinationtranslatedaddress="162.252.175.122" AND translatedport=4126 OR destinationtranslatedaddress="162.252.175.136" AND translatedport=11077)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="162.252.175.163" AND destinationport=28693 OR destinationaddress="162.252.175.90" AND destinationport=845 OR destinationaddress="162.252.175.109" AND destinationport=28330 OR destinationaddress="151.236.20.39" AND destinationport=5524 OR destinationaddress="158.255.208.140" AND destinationport=86 OR destinationaddress="194.68.27.149" AND destinationport=13106 OR destinationaddress="194.68.27.176" AND destinationport=6460 OR destinationaddress="37.143.128.223" AND destinationport=16223 OR destinationaddress="31.40.212.130" AND destinationport=7225 OR destinationaddress="198.244.207.203" AND destinationport=2076)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="162.252.175.163" AND sourceport=28693 OR sourceaddress="162.252.175.90" AND sourceport=845 OR sourceaddress="162.252.175.109" AND sourceport=28330 OR sourceaddress="151.236.20.39" AND sourceport=5524 OR sourceaddress="158.255.208.140" AND sourceport=86 OR sourceaddress="194.68.27.149" AND sourceport=13106 OR sourceaddress="194.68.27.176" AND sourceport=6460 OR sourceaddress="37.143.128.223" AND sourceport=16223 OR sourceaddress="31.40.212.130" AND sourceport=7225 OR sourceaddress="198.244.207.203" AND sourceport=2076)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="162.252.175.163" AND sourceport=28693 OR translatedipaddress="162.252.175.90" AND sourceport=845 OR translatedipaddress="162.252.175.109" AND sourceport=28330 OR translatedipaddress="151.236.20.39" AND sourceport=5524 OR translatedipaddress="158.255.208.140" AND sourceport=86 OR translatedipaddress="194.68.27.149" AND sourceport=13106 OR translatedipaddress="194.68.27.176" AND sourceport=6460 OR translatedipaddress="37.143.128.223" AND sourceport=16223 OR translatedipaddress="31.40.212.130" AND sourceport=7225 OR translatedipaddress="198.244.207.203" AND sourceport=2076)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND destinationport=28693 OR destinationtranslatedaddress="162.252.175.90" AND destinationport=845 OR destinationtranslatedaddress="162.252.175.109" AND destinationport=28330 OR destinationtranslatedaddress="151.236.20.39" AND destinationport=5524 OR destinationtranslatedaddress="158.255.208.140" AND destinationport=86 OR destinationtranslatedaddress="194.68.27.149" AND destinationport=13106 OR destinationtranslatedaddress="194.68.27.176" AND destinationport=6460 OR destinationtranslatedaddress="37.143.128.223" AND destinationport=16223 OR destinationtranslatedaddress="31.40.212.130" AND destinationport=7225 OR destinationtranslatedaddress="198.244.207.203" AND destinationport=2076)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND destinationtranslatedport=28693 OR destinationtranslatedaddress="162.252.175.90" AND destinationtranslatedport=845 OR destinationtranslatedaddress="162.252.175.109" AND destinationtranslatedport=28330 OR destinationtranslatedaddress="151.236.20.39" AND destinationtranslatedport=5524 OR destinationtranslatedaddress="158.255.208.140" AND destinationtranslatedport=86 OR destinationtranslatedaddress="194.68.27.149" AND destinationtranslatedport=13106 OR destinationtranslatedaddress="194.68.27.176" AND destinationtranslatedport=6460 OR destinationtranslatedaddress="37.143.128.223" AND destinationtranslatedport=16223 OR destinationtranslatedaddress="31.40.212.130" AND destinationtranslatedport=7225 OR destinationtranslatedaddress="198.244.207.203" AND destinationtranslatedport=2076)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND translatedport=28693 OR destinationtranslatedaddress="162.252.175.90" AND translatedport=845 OR destinationtranslatedaddress="162.252.175.109" AND translatedport=28330 OR destinationtranslatedaddress="151.236.20.39" AND translatedport=5524 OR destinationtranslatedaddress="158.255.208.140" AND translatedport=86 OR destinationtranslatedaddress="194.68.27.149" AND translatedport=13106 OR destinationtranslatedaddress="194.68.27.176" AND translatedport=6460 OR destinationtranslatedaddress="37.143.128.223" AND translatedport=16223 OR destinationtranslatedaddress="31.40.212.130" AND translatedport=7225 OR destinationtranslatedaddress="198.244.207.203" AND translatedport=2076)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="208.115.230.243" AND destinationport=16697 OR destinationaddress="185.126.239.207" AND destinationport=26630 OR destinationaddress="213.183.57.174" AND destinationport=12517 OR destinationaddress="213.183.57.72" AND destinationport=12517 OR destinationaddress="213.183.56.201" AND destinationport=12517 OR destinationaddress="95.164.45.27" AND destinationport=17426 OR destinationaddress="45.120.178.161" AND destinationport=11013 OR destinationaddress="176.120.74.3" AND destinationport=17268 OR destinationaddress="92.243.64.184" AND destinationport=17146 OR destinationaddress="92.243.64.36" AND destinationport=17146)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="208.115.230.243" AND sourceport=16697 OR sourceaddress="185.126.239.207" AND sourceport=26630 OR sourceaddress="213.183.57.174" AND sourceport=12517 OR sourceaddress="213.183.57.72" AND sourceport=12517 OR sourceaddress="213.183.56.201" AND sourceport=12517 OR sourceaddress="95.164.45.27" AND sourceport=17426 OR sourceaddress="45.120.178.161" AND sourceport=11013 OR sourceaddress="176.120.74.3" AND sourceport=17268 OR sourceaddress="92.243.64.184" AND sourceport=17146 OR sourceaddress="92.243.64.36" AND sourceport=17146)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="208.115.230.243" AND sourceport=16697 OR translatedipaddress="185.126.239.207" AND sourceport=26630 OR translatedipaddress="213.183.57.174" AND sourceport=12517 OR translatedipaddress="213.183.57.72" AND sourceport=12517 OR translatedipaddress="213.183.56.201" AND sourceport=12517 OR translatedipaddress="95.164.45.27" AND sourceport=17426 OR translatedipaddress="45.120.178.161" AND sourceport=11013 OR translatedipaddress="176.120.74.3" AND sourceport=17268 OR translatedipaddress="92.243.64.184" AND sourceport=17146 OR translatedipaddress="92.243.64.36" AND sourceport=17146)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND destinationport=16697 OR destinationtranslatedaddress="185.126.239.207" AND destinationport=26630 OR destinationtranslatedaddress="213.183.57.174" AND destinationport=12517 OR destinationtranslatedaddress="213.183.57.72" AND destinationport=12517 OR destinationtranslatedaddress="213.183.56.201" AND destinationport=12517 OR destinationtranslatedaddress="95.164.45.27" AND destinationport=17426 OR destinationtranslatedaddress="45.120.178.161" AND destinationport=11013 OR destinationtranslatedaddress="176.120.74.3" AND destinationport=17268 OR destinationtranslatedaddress="92.243.64.184" AND destinationport=17146 OR destinationtranslatedaddress="92.243.64.36" AND destinationport=17146)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND destinationtranslatedport=16697 OR destinationtranslatedaddress="185.126.239.207" AND destinationtranslatedport=26630 OR destinationtranslatedaddress="213.183.57.174" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="213.183.57.72" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="213.183.56.201" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="95.164.45.27" AND destinationtranslatedport=17426 OR destinationtranslatedaddress="45.120.178.161" AND destinationtranslatedport=11013 OR destinationtranslatedaddress="176.120.74.3" AND destinationtranslatedport=17268 OR destinationtranslatedaddress="92.243.64.184" AND destinationtranslatedport=17146 OR destinationtranslatedaddress="92.243.64.36" AND destinationtranslatedport=17146)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND translatedport=16697 OR destinationtranslatedaddress="185.126.239.207" AND translatedport=26630 OR destinationtranslatedaddress="213.183.57.174" AND translatedport=12517 OR destinationtranslatedaddress="213.183.57.72" AND translatedport=12517 OR destinationtranslatedaddress="213.183.56.201" AND translatedport=12517 OR destinationtranslatedaddress="95.164.45.27" AND translatedport=17426 OR destinationtranslatedaddress="45.120.178.161" AND translatedport=11013 OR destinationtranslatedaddress="176.120.74.3" AND translatedport=17268 OR destinationtranslatedaddress="92.243.64.184" AND translatedport=17146 OR destinationtranslatedaddress="92.243.64.36" AND translatedport=17146)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="89.31.120.126" AND destinationport=11578 OR destinationaddress="91.132.93.33" AND destinationport=11578 OR destinationaddress="91.132.95.28" AND destinationport=8773 OR destinationaddress="91.132.95.204" AND destinationport=8773 OR destinationaddress="91.132.95.135" AND destinationport=8773 OR destinationaddress="194.233.174.22" AND destinationport=45358)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="89.31.120.126" AND sourceport=11578 OR sourceaddress="91.132.93.33" AND sourceport=11578 OR sourceaddress="91.132.95.28" AND sourceport=8773 OR sourceaddress="91.132.95.204" AND sourceport=8773 OR sourceaddress="91.132.95.135" AND sourceport=8773 OR sourceaddress="194.233.174.22" AND sourceport=45358)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="89.31.120.126" AND sourceport=11578 OR translatedipaddress="91.132.93.33" AND sourceport=11578 OR translatedipaddress="91.132.95.28" AND sourceport=8773 OR translatedipaddress="91.132.95.204" AND sourceport=8773 OR translatedipaddress="91.132.95.135" AND sourceport=8773 OR translatedipaddress="194.233.174.22" AND sourceport=45358)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND destinationport=11578 OR destinationtranslatedaddress="91.132.93.33" AND destinationport=11578 OR destinationtranslatedaddress="91.132.95.28" AND destinationport=8773 OR destinationtranslatedaddress="91.132.95.204" AND destinationport=8773 OR destinationtranslatedaddress="91.132.95.135" AND destinationport=8773 OR destinationtranslatedaddress="194.233.174.22" AND destinationport=45358)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND destinationtranslatedport=11578 OR destinationtranslatedaddress="91.132.93.33" AND destinationtranslatedport=11578 OR destinationtranslatedaddress="91.132.95.28" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="91.132.95.204" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="91.132.95.135" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="194.233.174.22" AND destinationtranslatedport=45358)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND translatedport=11578 OR destinationtranslatedaddress="91.132.93.33" AND translatedport=11578 OR destinationtranslatedaddress="91.132.95.28" AND translatedport=8773 OR destinationtranslatedaddress="91.132.95.204" AND translatedport=8773 OR destinationtranslatedaddress="91.132.95.135" AND translatedport=8773 OR destinationtranslatedaddress="194.233.174.22" AND translatedport=45358)
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="158.255.212.173" AND destinationport=10862 OR destinationaddress="151.236.25.126" AND destinationport=11331 OR destinationaddress="158.255.215.49" AND destinationport=23079 OR destinationaddress="185.26.239.98" AND destinationport=11076 OR destinationaddress="151.236.25.10" AND destinationport=7205 OR destinationaddress="37.235.53.217" AND destinationport=1358 OR destinationaddress="151.236.23.232" AND destinationport=763 OR destinationaddress="37.235.56.204" AND destinationport=24239 OR destinationaddress="162.252.175.122" AND destinationport=4126 OR destinationaddress="162.252.175.136" AND destinationport=11077)
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="158.255.212.173" AND sourceport=10862 OR sourceaddress="151.236.25.126" AND sourceport=11331 OR sourceaddress="158.255.215.49" AND sourceport=23079 OR sourceaddress="185.26.239.98" AND sourceport=11076 OR sourceaddress="151.236.25.10" AND sourceport=7205 OR sourceaddress="37.235.53.217" AND sourceport=1358 OR sourceaddress="151.236.23.232" AND sourceport=763 OR sourceaddress="37.235.56.204" AND sourceport=24239 OR sourceaddress="162.252.175.122" AND sourceport=4126 OR sourceaddress="162.252.175.136" AND sourceport=11077)
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="158.255.212.173" AND sourceport=10862 OR translatedipaddress="151.236.25.126" AND sourceport=11331 OR translatedipaddress="158.255.215.49" AND sourceport=23079 OR translatedipaddress="185.26.239.98" AND sourceport=11076 OR translatedipaddress="151.236.25.10" AND sourceport=7205 OR translatedipaddress="37.235.53.217" AND sourceport=1358 OR translatedipaddress="151.236.23.232" AND sourceport=763 OR translatedipaddress="37.235.56.204" AND sourceport=24239 OR translatedipaddress="162.252.175.122" AND sourceport=4126 OR translatedipaddress="162.252.175.136" AND sourceport=11077)
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND destinationport=10862 OR destinationtranslatedaddress="151.236.25.126" AND destinationport=11331 OR destinationtranslatedaddress="158.255.215.49" AND destinationport=23079 OR destinationtranslatedaddress="185.26.239.98" AND destinationport=11076 OR destinationtranslatedaddress="151.236.25.10" AND destinationport=7205 OR destinationtranslatedaddress="37.235.53.217" AND destinationport=1358 OR destinationtranslatedaddress="151.236.23.232" AND destinationport=763 OR destinationtranslatedaddress="37.235.56.204" AND destinationport=24239 OR destinationtranslatedaddress="162.252.175.122" AND destinationport=4126 OR destinationtranslatedaddress="162.252.175.136" AND destinationport=11077)
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND destinationtranslatedport=10862 OR destinationtranslatedaddress="151.236.25.126" AND destinationtranslatedport=11331 OR destinationtranslatedaddress="158.255.215.49" AND destinationtranslatedport=23079 OR destinationtranslatedaddress="185.26.239.98" AND destinationtranslatedport=11076 OR destinationtranslatedaddress="151.236.25.10" AND destinationtranslatedport=7205 OR destinationtranslatedaddress="37.235.53.217" AND destinationtranslatedport=1358 OR destinationtranslatedaddress="151.236.23.232" AND destinationtranslatedport=763 OR destinationtranslatedaddress="37.235.56.204" AND destinationtranslatedport=24239 OR destinationtranslatedaddress="162.252.175.122" AND destinationtranslatedport=4126 OR destinationtranslatedaddress="162.252.175.136" AND destinationtranslatedport=11077)
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND translatedport=10862 OR destinationtranslatedaddress="151.236.25.126" AND translatedport=11331 OR destinationtranslatedaddress="158.255.215.49" AND translatedport=23079 OR destinationtranslatedaddress="185.26.239.98" AND translatedport=11076 OR destinationtranslatedaddress="151.236.25.10" AND translatedport=7205 OR destinationtranslatedaddress="37.235.53.217" AND translatedport=1358 OR destinationtranslatedaddress="151.236.23.232" AND translatedport=763 OR destinationtranslatedaddress="37.235.56.204" AND translatedport=24239 OR destinationtranslatedaddress="162.252.175.122" AND translatedport=4126 OR destinationtranslatedaddress="162.252.175.136" AND translatedport=11077)
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="162.252.175.163" AND destinationport=28693 OR destinationaddress="162.252.175.90" AND destinationport=845 OR destinationaddress="162.252.175.109" AND destinationport=28330 OR destinationaddress="151.236.20.39" AND destinationport=5524 OR destinationaddress="158.255.208.140" AND destinationport=86 OR destinationaddress="194.68.27.149" AND destinationport=13106 OR destinationaddress="194.68.27.176" AND destinationport=6460 OR destinationaddress="37.143.128.223" AND destinationport=16223 OR destinationaddress="31.40.212.130" AND destinationport=7225 OR destinationaddress="198.244.207.203" AND destinationport=2076)
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="162.252.175.163" AND sourceport=28693 OR sourceaddress="162.252.175.90" AND sourceport=845 OR sourceaddress="162.252.175.109" AND sourceport=28330 OR sourceaddress="151.236.20.39" AND sourceport=5524 OR sourceaddress="158.255.208.140" AND sourceport=86 OR sourceaddress="194.68.27.149" AND sourceport=13106 OR sourceaddress="194.68.27.176" AND sourceport=6460 OR sourceaddress="37.143.128.223" AND sourceport=16223 OR sourceaddress="31.40.212.130" AND sourceport=7225 OR sourceaddress="198.244.207.203" AND sourceport=2076)
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="162.252.175.163" AND sourceport=28693 OR translatedipaddress="162.252.175.90" AND sourceport=845 OR translatedipaddress="162.252.175.109" AND sourceport=28330 OR translatedipaddress="151.236.20.39" AND sourceport=5524 OR translatedipaddress="158.255.208.140" AND sourceport=86 OR translatedipaddress="194.68.27.149" AND sourceport=13106 OR translatedipaddress="194.68.27.176" AND sourceport=6460 OR translatedipaddress="37.143.128.223" AND sourceport=16223 OR translatedipaddress="31.40.212.130" AND sourceport=7225 OR translatedipaddress="198.244.207.203" AND sourceport=2076)
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND destinationport=28693 OR destinationtranslatedaddress="162.252.175.90" AND destinationport=845 OR destinationtranslatedaddress="162.252.175.109" AND destinationport=28330 OR destinationtranslatedaddress="151.236.20.39" AND destinationport=5524 OR destinationtranslatedaddress="158.255.208.140" AND destinationport=86 OR destinationtranslatedaddress="194.68.27.149" AND destinationport=13106 OR destinationtranslatedaddress="194.68.27.176" AND destinationport=6460 OR destinationtranslatedaddress="37.143.128.223" AND destinationport=16223 OR destinationtranslatedaddress="31.40.212.130" AND destinationport=7225 OR destinationtranslatedaddress="198.244.207.203" AND destinationport=2076)
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND destinationtranslatedport=28693 OR destinationtranslatedaddress="162.252.175.90" AND destinationtranslatedport=845 OR destinationtranslatedaddress="162.252.175.109" AND destinationtranslatedport=28330 OR destinationtranslatedaddress="151.236.20.39" AND destinationtranslatedport=5524 OR destinationtranslatedaddress="158.255.208.140" AND destinationtranslatedport=86 OR destinationtranslatedaddress="194.68.27.149" AND destinationtranslatedport=13106 OR destinationtranslatedaddress="194.68.27.176" AND destinationtranslatedport=6460 OR destinationtranslatedaddress="37.143.128.223" AND destinationtranslatedport=16223 OR destinationtranslatedaddress="31.40.212.130" AND destinationtranslatedport=7225 OR destinationtranslatedaddress="198.244.207.203" AND destinationtranslatedport=2076)
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND translatedport=28693 OR destinationtranslatedaddress="162.252.175.90" AND translatedport=845 OR destinationtranslatedaddress="162.252.175.109" AND translatedport=28330 OR destinationtranslatedaddress="151.236.20.39" AND translatedport=5524 OR destinationtranslatedaddress="158.255.208.140" AND translatedport=86 OR destinationtranslatedaddress="194.68.27.149" AND translatedport=13106 OR destinationtranslatedaddress="194.68.27.176" AND translatedport=6460 OR destinationtranslatedaddress="37.143.128.223" AND translatedport=16223 OR destinationtranslatedaddress="31.40.212.130" AND translatedport=7225 OR destinationtranslatedaddress="198.244.207.203" AND translatedport=2076)
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="208.115.230.243" AND destinationport=16697 OR destinationaddress="185.126.239.207" AND destinationport=26630 OR destinationaddress="213.183.57.174" AND destinationport=12517 OR destinationaddress="213.183.57.72" AND destinationport=12517 OR destinationaddress="213.183.56.201" AND destinationport=12517 OR destinationaddress="95.164.45.27" AND destinationport=17426 OR destinationaddress="45.120.178.161" AND destinationport=11013 OR destinationaddress="176.120.74.3" AND destinationport=17268 OR destinationaddress="92.243.64.184" AND destinationport=17146 OR destinationaddress="92.243.64.36" AND destinationport=17146)
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="208.115.230.243" AND sourceport=16697 OR sourceaddress="185.126.239.207" AND sourceport=26630 OR sourceaddress="213.183.57.174" AND sourceport=12517 OR sourceaddress="213.183.57.72" AND sourceport=12517 OR sourceaddress="213.183.56.201" AND sourceport=12517 OR sourceaddress="95.164.45.27" AND sourceport=17426 OR sourceaddress="45.120.178.161" AND sourceport=11013 OR sourceaddress="176.120.74.3" AND sourceport=17268 OR sourceaddress="92.243.64.184" AND sourceport=17146 OR sourceaddress="92.243.64.36" AND sourceport=17146)
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="208.115.230.243" AND sourceport=16697 OR translatedipaddress="185.126.239.207" AND sourceport=26630 OR translatedipaddress="213.183.57.174" AND sourceport=12517 OR translatedipaddress="213.183.57.72" AND sourceport=12517 OR translatedipaddress="213.183.56.201" AND sourceport=12517 OR translatedipaddress="95.164.45.27" AND sourceport=17426 OR translatedipaddress="45.120.178.161" AND sourceport=11013 OR translatedipaddress="176.120.74.3" AND sourceport=17268 OR translatedipaddress="92.243.64.184" AND sourceport=17146 OR translatedipaddress="92.243.64.36" AND sourceport=17146)
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND destinationport=16697 OR destinationtranslatedaddress="185.126.239.207" AND destinationport=26630 OR destinationtranslatedaddress="213.183.57.174" AND destinationport=12517 OR destinationtranslatedaddress="213.183.57.72" AND destinationport=12517 OR destinationtranslatedaddress="213.183.56.201" AND destinationport=12517 OR destinationtranslatedaddress="95.164.45.27" AND destinationport=17426 OR destinationtranslatedaddress="45.120.178.161" AND destinationport=11013 OR destinationtranslatedaddress="176.120.74.3" AND destinationport=17268 OR destinationtranslatedaddress="92.243.64.184" AND destinationport=17146 OR destinationtranslatedaddress="92.243.64.36" AND destinationport=17146)
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND destinationtranslatedport=16697 OR destinationtranslatedaddress="185.126.239.207" AND destinationtranslatedport=26630 OR destinationtranslatedaddress="213.183.57.174" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="213.183.57.72" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="213.183.56.201" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="95.164.45.27" AND destinationtranslatedport=17426 OR destinationtranslatedaddress="45.120.178.161" AND destinationtranslatedport=11013 OR destinationtranslatedaddress="176.120.74.3" AND destinationtranslatedport=17268 OR destinationtranslatedaddress="92.243.64.184" AND destinationtranslatedport=17146 OR destinationtranslatedaddress="92.243.64.36" AND destinationtranslatedport=17146)
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND translatedport=16697 OR destinationtranslatedaddress="185.126.239.207" AND translatedport=26630 OR destinationtranslatedaddress="213.183.57.174" AND translatedport=12517 OR destinationtranslatedaddress="213.183.57.72" AND translatedport=12517 OR destinationtranslatedaddress="213.183.56.201" AND translatedport=12517 OR destinationtranslatedaddress="95.164.45.27" AND translatedport=17426 OR destinationtranslatedaddress="45.120.178.161" AND translatedport=11013 OR destinationtranslatedaddress="176.120.74.3" AND translatedport=17268 OR destinationtranslatedaddress="92.243.64.184" AND translatedport=17146 OR destinationtranslatedaddress="92.243.64.36" AND translatedport=17146)
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="89.31.120.126" AND destinationport=11578 OR destinationaddress="91.132.93.33" AND destinationport=11578 OR destinationaddress="91.132.95.28" AND destinationport=8773 OR destinationaddress="91.132.95.204" AND destinationport=8773 OR destinationaddress="91.132.95.135" AND destinationport=8773 OR destinationaddress="194.233.174.22" AND destinationport=45358)
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="89.31.120.126" AND sourceport=11578 OR sourceaddress="91.132.93.33" AND sourceport=11578 OR sourceaddress="91.132.95.28" AND sourceport=8773 OR sourceaddress="91.132.95.204" AND sourceport=8773 OR sourceaddress="91.132.95.135" AND sourceport=8773 OR sourceaddress="194.233.174.22" AND sourceport=45358)
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="89.31.120.126" AND sourceport=11578 OR translatedipaddress="91.132.93.33" AND sourceport=11578 OR translatedipaddress="91.132.95.28" AND sourceport=8773 OR translatedipaddress="91.132.95.204" AND sourceport=8773 OR translatedipaddress="91.132.95.135" AND sourceport=8773 OR translatedipaddress="194.233.174.22" AND sourceport=45358)
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND destinationport=11578 OR destinationtranslatedaddress="91.132.93.33" AND destinationport=11578 OR destinationtranslatedaddress="91.132.95.28" AND destinationport=8773 OR destinationtranslatedaddress="91.132.95.204" AND destinationport=8773 OR destinationtranslatedaddress="91.132.95.135" AND destinationport=8773 OR destinationtranslatedaddress="194.233.174.22" AND destinationport=45358)
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND destinationtranslatedport=11578 OR destinationtranslatedaddress="91.132.93.33" AND destinationtranslatedport=11578 OR destinationtranslatedaddress="91.132.95.28" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="91.132.95.204" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="91.132.95.135" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="194.233.174.22" AND destinationtranslatedport=45358)
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND translatedport=11578 OR destinationtranslatedaddress="91.132.93.33" AND translatedport=11578 OR destinationtranslatedaddress="91.132.95.28" AND translatedport=8773 OR destinationtranslatedaddress="91.132.95.204" AND translatedport=8773 OR destinationtranslatedaddress="91.132.95.135" AND translatedport=8773 OR destinationtranslatedaddress="194.233.174.22" AND translatedport=45358)
index=activity AND rg_functionality="Web Application Firewall" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="158.255.212.173" AND destinationport=10862 OR destinationaddress="151.236.25.126" AND destinationport=11331 OR destinationaddress="158.255.215.49" AND destinationport=23079 OR destinationaddress="185.26.239.98" AND destinationport=11076 OR destinationaddress="151.236.25.10" AND destinationport=7205 OR destinationaddress="37.235.53.217" AND destinationport=1358 OR destinationaddress="151.236.23.232" AND destinationport=763 OR destinationaddress="37.235.56.204" AND destinationport=24239 OR destinationaddress="162.252.175.122" AND destinationport=4126 OR destinationaddress="162.252.175.136" AND destinationport=11077)
index=activity AND rg_functionality="Web Application Firewall" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="158.255.212.173" AND sourceport=10862 OR sourceaddress="151.236.25.126" AND sourceport=11331 OR sourceaddress="158.255.215.49" AND sourceport=23079 OR sourceaddress="185.26.239.98" AND sourceport=11076 OR sourceaddress="151.236.25.10" AND sourceport=7205 OR sourceaddress="37.235.53.217" AND sourceport=1358 OR sourceaddress="151.236.23.232" AND sourceport=763 OR sourceaddress="37.235.56.204" AND sourceport=24239 OR sourceaddress="162.252.175.122" AND sourceport=4126 OR sourceaddress="162.252.175.136" AND sourceport=11077)
index=activity AND rg_functionality="Web Application Firewall" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="158.255.212.173" AND sourceport=10862 OR translatedipaddress="151.236.25.126" AND sourceport=11331 OR translatedipaddress="158.255.215.49" AND sourceport=23079 OR translatedipaddress="185.26.239.98" AND sourceport=11076 OR translatedipaddress="151.236.25.10" AND sourceport=7205 OR translatedipaddress="37.235.53.217" AND sourceport=1358 OR translatedipaddress="151.236.23.232" AND sourceport=763 OR translatedipaddress="37.235.56.204" AND sourceport=24239 OR translatedipaddress="162.252.175.122" AND sourceport=4126 OR translatedipaddress="162.252.175.136" AND sourceport=11077)
index=activity AND rg_functionality="Web Application Firewall" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND destinationport=10862 OR destinationtranslatedaddress="151.236.25.126" AND destinationport=11331 OR destinationtranslatedaddress="158.255.215.49" AND destinationport=23079 OR destinationtranslatedaddress="185.26.239.98" AND destinationport=11076 OR destinationtranslatedaddress="151.236.25.10" AND destinationport=7205 OR destinationtranslatedaddress="37.235.53.217" AND destinationport=1358 OR destinationtranslatedaddress="151.236.23.232" AND destinationport=763 OR destinationtranslatedaddress="37.235.56.204" AND destinationport=24239 OR destinationtranslatedaddress="162.252.175.122" AND destinationport=4126 OR destinationtranslatedaddress="162.252.175.136" AND destinationport=11077)
index=activity AND rg_functionality="Web Application Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND destinationtranslatedport=10862 OR destinationtranslatedaddress="151.236.25.126" AND destinationtranslatedport=11331 OR destinationtranslatedaddress="158.255.215.49" AND destinationtranslatedport=23079 OR destinationtranslatedaddress="185.26.239.98" AND destinationtranslatedport=11076 OR destinationtranslatedaddress="151.236.25.10" AND destinationtranslatedport=7205 OR destinationtranslatedaddress="37.235.53.217" AND destinationtranslatedport=1358 OR destinationtranslatedaddress="151.236.23.232" AND destinationtranslatedport=763 OR destinationtranslatedaddress="37.235.56.204" AND destinationtranslatedport=24239 OR destinationtranslatedaddress="162.252.175.122" AND destinationtranslatedport=4126 OR destinationtranslatedaddress="162.252.175.136" AND destinationtranslatedport=11077)
index=activity AND rg_functionality="Web Application Firewall" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND translatedport=10862 OR destinationtranslatedaddress="151.236.25.126" AND translatedport=11331 OR destinationtranslatedaddress="158.255.215.49" AND translatedport=23079 OR destinationtranslatedaddress="185.26.239.98" AND translatedport=11076 OR destinationtranslatedaddress="151.236.25.10" AND translatedport=7205 OR destinationtranslatedaddress="37.235.53.217" AND translatedport=1358 OR destinationtranslatedaddress="151.236.23.232" AND translatedport=763 OR destinationtranslatedaddress="37.235.56.204" AND translatedport=24239 OR destinationtranslatedaddress="162.252.175.122" AND translatedport=4126 OR destinationtranslatedaddress="162.252.175.136" AND translatedport=11077)
index=activity AND rg_functionality="Web Application Firewall" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="162.252.175.163" AND destinationport=28693 OR destinationaddress="162.252.175.90" AND destinationport=845 OR destinationaddress="162.252.175.109" AND destinationport=28330 OR destinationaddress="151.236.20.39" AND destinationport=5524 OR destinationaddress="158.255.208.140" AND destinationport=86 OR destinationaddress="194.68.27.149" AND destinationport=13106 OR destinationaddress="194.68.27.176" AND destinationport=6460 OR destinationaddress="37.143.128.223" AND destinationport=16223 OR destinationaddress="31.40.212.130" AND destinationport=7225 OR destinationaddress="198.244.207.203" AND destinationport=2076)
index=activity AND rg_functionality="Web Application Firewall" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="162.252.175.163" AND sourceport=28693 OR sourceaddress="162.252.175.90" AND sourceport=845 OR sourceaddress="162.252.175.109" AND sourceport=28330 OR sourceaddress="151.236.20.39" AND sourceport=5524 OR sourceaddress="158.255.208.140" AND sourceport=86 OR sourceaddress="194.68.27.149" AND sourceport=13106 OR sourceaddress="194.68.27.176" AND sourceport=6460 OR sourceaddress="37.143.128.223" AND sourceport=16223 OR sourceaddress="31.40.212.130" AND sourceport=7225 OR sourceaddress="198.244.207.203" AND sourceport=2076)
index=activity AND rg_functionality="Web Application Firewall" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="162.252.175.163" AND sourceport=28693 OR translatedipaddress="162.252.175.90" AND sourceport=845 OR translatedipaddress="162.252.175.109" AND sourceport=28330 OR translatedipaddress="151.236.20.39" AND sourceport=5524 OR translatedipaddress="158.255.208.140" AND sourceport=86 OR translatedipaddress="194.68.27.149" AND sourceport=13106 OR translatedipaddress="194.68.27.176" AND sourceport=6460 OR translatedipaddress="37.143.128.223" AND sourceport=16223 OR translatedipaddress="31.40.212.130" AND sourceport=7225 OR translatedipaddress="198.244.207.203" AND sourceport=2076)
index=activity AND rg_functionality="Web Application Firewall" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND destinationport=28693 OR destinationtranslatedaddress="162.252.175.90" AND destinationport=845 OR destinationtranslatedaddress="162.252.175.109" AND destinationport=28330 OR destinationtranslatedaddress="151.236.20.39" AND destinationport=5524 OR destinationtranslatedaddress="158.255.208.140" AND destinationport=86 OR destinationtranslatedaddress="194.68.27.149" AND destinationport=13106 OR destinationtranslatedaddress="194.68.27.176" AND destinationport=6460 OR destinationtranslatedaddress="37.143.128.223" AND destinationport=16223 OR destinationtranslatedaddress="31.40.212.130" AND destinationport=7225 OR destinationtranslatedaddress="198.244.207.203" AND destinationport=2076)
index=activity AND rg_functionality="Web Application Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND destinationtranslatedport=28693 OR destinationtranslatedaddress="162.252.175.90" AND destinationtranslatedport=845 OR destinationtranslatedaddress="162.252.175.109" AND destinationtranslatedport=28330 OR destinationtranslatedaddress="151.236.20.39" AND destinationtranslatedport=5524 OR destinationtranslatedaddress="158.255.208.140" AND destinationtranslatedport=86 OR destinationtranslatedaddress="194.68.27.149" AND destinationtranslatedport=13106 OR destinationtranslatedaddress="194.68.27.176" AND destinationtranslatedport=6460 OR destinationtranslatedaddress="37.143.128.223" AND destinationtranslatedport=16223 OR destinationtranslatedaddress="31.40.212.130" AND destinationtranslatedport=7225 OR destinationtranslatedaddress="198.244.207.203" AND destinationtranslatedport=2076)
index=activity AND rg_functionality="Web Application Firewall" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND translatedport=28693 OR destinationtranslatedaddress="162.252.175.90" AND translatedport=845 OR destinationtranslatedaddress="162.252.175.109" AND translatedport=28330 OR destinationtranslatedaddress="151.236.20.39" AND translatedport=5524 OR destinationtranslatedaddress="158.255.208.140" AND translatedport=86 OR destinationtranslatedaddress="194.68.27.149" AND translatedport=13106 OR destinationtranslatedaddress="194.68.27.176" AND translatedport=6460 OR destinationtranslatedaddress="37.143.128.223" AND translatedport=16223 OR destinationtranslatedaddress="31.40.212.130" AND translatedport=7225 OR destinationtranslatedaddress="198.244.207.203" AND translatedport=2076)
index=activity AND rg_functionality="Web Application Firewall" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="208.115.230.243" AND destinationport=16697 OR destinationaddress="185.126.239.207" AND destinationport=26630 OR destinationaddress="213.183.57.174" AND destinationport=12517 OR destinationaddress="213.183.57.72" AND destinationport=12517 OR destinationaddress="213.183.56.201" AND destinationport=12517 OR destinationaddress="95.164.45.27" AND destinationport=17426 OR destinationaddress="45.120.178.161" AND destinationport=11013 OR destinationaddress="176.120.74.3" AND destinationport=17268 OR destinationaddress="92.243.64.184" AND destinationport=17146 OR destinationaddress="92.243.64.36" AND destinationport=17146)
index=activity AND rg_functionality="Web Application Firewall" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="208.115.230.243" AND sourceport=16697 OR sourceaddress="185.126.239.207" AND sourceport=26630 OR sourceaddress="213.183.57.174" AND sourceport=12517 OR sourceaddress="213.183.57.72" AND sourceport=12517 OR sourceaddress="213.183.56.201" AND sourceport=12517 OR sourceaddress="95.164.45.27" AND sourceport=17426 OR sourceaddress="45.120.178.161" AND sourceport=11013 OR sourceaddress="176.120.74.3" AND sourceport=17268 OR sourceaddress="92.243.64.184" AND sourceport=17146 OR sourceaddress="92.243.64.36" AND sourceport=17146)
index=activity AND rg_functionality="Web Application Firewall" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="208.115.230.243" AND sourceport=16697 OR translatedipaddress="185.126.239.207" AND sourceport=26630 OR translatedipaddress="213.183.57.174" AND sourceport=12517 OR translatedipaddress="213.183.57.72" AND sourceport=12517 OR translatedipaddress="213.183.56.201" AND sourceport=12517 OR translatedipaddress="95.164.45.27" AND sourceport=17426 OR translatedipaddress="45.120.178.161" AND sourceport=11013 OR translatedipaddress="176.120.74.3" AND sourceport=17268 OR translatedipaddress="92.243.64.184" AND sourceport=17146 OR translatedipaddress="92.243.64.36" AND sourceport=17146)
index=activity AND rg_functionality="Web Application Firewall" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND destinationport=16697 OR destinationtranslatedaddress="185.126.239.207" AND destinationport=26630 OR destinationtranslatedaddress="213.183.57.174" AND destinationport=12517 OR destinationtranslatedaddress="213.183.57.72" AND destinationport=12517 OR destinationtranslatedaddress="213.183.56.201" AND destinationport=12517 OR destinationtranslatedaddress="95.164.45.27" AND destinationport=17426 OR destinationtranslatedaddress="45.120.178.161" AND destinationport=11013 OR destinationtranslatedaddress="176.120.74.3" AND destinationport=17268 OR destinationtranslatedaddress="92.243.64.184" AND destinationport=17146 OR destinationtranslatedaddress="92.243.64.36" AND destinationport=17146)
index=activity AND rg_functionality="Web Application Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND destinationtranslatedport=16697 OR destinationtranslatedaddress="185.126.239.207" AND destinationtranslatedport=26630 OR destinationtranslatedaddress="213.183.57.174" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="213.183.57.72" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="213.183.56.201" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="95.164.45.27" AND destinationtranslatedport=17426 OR destinationtranslatedaddress="45.120.178.161" AND destinationtranslatedport=11013 OR destinationtranslatedaddress="176.120.74.3" AND destinationtranslatedport=17268 OR destinationtranslatedaddress="92.243.64.184" AND destinationtranslatedport=17146 OR destinationtranslatedaddress="92.243.64.36" AND destinationtranslatedport=17146)
index=activity AND rg_functionality="Web Application Firewall" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND translatedport=16697 OR destinationtranslatedaddress="185.126.239.207" AND translatedport=26630 OR destinationtranslatedaddress="213.183.57.174" AND translatedport=12517 OR destinationtranslatedaddress="213.183.57.72" AND translatedport=12517 OR destinationtranslatedaddress="213.183.56.201" AND translatedport=12517 OR destinationtranslatedaddress="95.164.45.27" AND translatedport=17426 OR destinationtranslatedaddress="45.120.178.161" AND translatedport=11013 OR destinationtranslatedaddress="176.120.74.3" AND translatedport=17268 OR destinationtranslatedaddress="92.243.64.184" AND translatedport=17146 OR destinationtranslatedaddress="92.243.64.36" AND translatedport=17146)
index=activity AND rg_functionality="Web Application Firewall" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="89.31.120.126" AND destinationport=11578 OR destinationaddress="91.132.93.33" AND destinationport=11578 OR destinationaddress="91.132.95.28" AND destinationport=8773 OR destinationaddress="91.132.95.204" AND destinationport=8773 OR destinationaddress="91.132.95.135" AND destinationport=8773 OR destinationaddress="194.233.174.22" AND destinationport=45358)
index=activity AND rg_functionality="Web Application Firewall" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="89.31.120.126" AND sourceport=11578 OR sourceaddress="91.132.93.33" AND sourceport=11578 OR sourceaddress="91.132.95.28" AND sourceport=8773 OR sourceaddress="91.132.95.204" AND sourceport=8773 OR sourceaddress="91.132.95.135" AND sourceport=8773 OR sourceaddress="194.233.174.22" AND sourceport=45358)
index=activity AND rg_functionality="Web Application Firewall" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="89.31.120.126" AND sourceport=11578 OR translatedipaddress="91.132.93.33" AND sourceport=11578 OR translatedipaddress="91.132.95.28" AND sourceport=8773 OR translatedipaddress="91.132.95.204" AND sourceport=8773 OR translatedipaddress="91.132.95.135" AND sourceport=8773 OR translatedipaddress="194.233.174.22" AND sourceport=45358)
index=activity AND rg_functionality="Web Application Firewall" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND destinationport=11578 OR destinationtranslatedaddress="91.132.93.33" AND destinationport=11578 OR destinationtranslatedaddress="91.132.95.28" AND destinationport=8773 OR destinationtranslatedaddress="91.132.95.204" AND destinationport=8773 OR destinationtranslatedaddress="91.132.95.135" AND destinationport=8773 OR destinationtranslatedaddress="194.233.174.22" AND destinationport=45358)
index=activity AND rg_functionality="Web Application Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND destinationtranslatedport=11578 OR destinationtranslatedaddress="91.132.93.33" AND destinationtranslatedport=11578 OR destinationtranslatedaddress="91.132.95.28" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="91.132.95.204" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="91.132.95.135" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="194.233.174.22" AND destinationtranslatedport=45358)
index=activity AND rg_functionality="Web Application Firewall" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND translatedport=11578 OR destinationtranslatedaddress="91.132.93.33" AND translatedport=11578 OR destinationtranslatedaddress="91.132.95.28" AND translatedport=8773 OR destinationtranslatedaddress="91.132.95.204" AND translatedport=8773 OR destinationtranslatedaddress="91.132.95.135" AND translatedport=8773 OR destinationtranslatedaddress="194.233.174.22" AND translatedport=45358)
index=activity AND rg_functionality="Endpoint management systems" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="158.255.212.173" AND destinationport=10862 OR destinationaddress="151.236.25.126" AND destinationport=11331 OR destinationaddress="158.255.215.49" AND destinationport=23079 OR destinationaddress="185.26.239.98" AND destinationport=11076 OR destinationaddress="151.236.25.10" AND destinationport=7205 OR destinationaddress="37.235.53.217" AND destinationport=1358 OR destinationaddress="151.236.23.232" AND destinationport=763 OR destinationaddress="37.235.56.204" AND destinationport=24239 OR destinationaddress="162.252.175.122" AND destinationport=4126 OR destinationaddress="162.252.175.136" AND destinationport=11077)
index=activity AND rg_functionality="Endpoint management systems" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="158.255.212.173" AND sourceport=10862 OR sourceaddress="151.236.25.126" AND sourceport=11331 OR sourceaddress="158.255.215.49" AND sourceport=23079 OR sourceaddress="185.26.239.98" AND sourceport=11076 OR sourceaddress="151.236.25.10" AND sourceport=7205 OR sourceaddress="37.235.53.217" AND sourceport=1358 OR sourceaddress="151.236.23.232" AND sourceport=763 OR sourceaddress="37.235.56.204" AND sourceport=24239 OR sourceaddress="162.252.175.122" AND sourceport=4126 OR sourceaddress="162.252.175.136" AND sourceport=11077)
index=activity AND rg_functionality="Endpoint management systems" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="158.255.212.173" AND sourceport=10862 OR translatedipaddress="151.236.25.126" AND sourceport=11331 OR translatedipaddress="158.255.215.49" AND sourceport=23079 OR translatedipaddress="185.26.239.98" AND sourceport=11076 OR translatedipaddress="151.236.25.10" AND sourceport=7205 OR translatedipaddress="37.235.53.217" AND sourceport=1358 OR translatedipaddress="151.236.23.232" AND sourceport=763 OR translatedipaddress="37.235.56.204" AND sourceport=24239 OR translatedipaddress="162.252.175.122" AND sourceport=4126 OR translatedipaddress="162.252.175.136" AND sourceport=11077)
index=activity AND rg_functionality="Endpoint management systems" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND destinationport=10862 OR destinationtranslatedaddress="151.236.25.126" AND destinationport=11331 OR destinationtranslatedaddress="158.255.215.49" AND destinationport=23079 OR destinationtranslatedaddress="185.26.239.98" AND destinationport=11076 OR destinationtranslatedaddress="151.236.25.10" AND destinationport=7205 OR destinationtranslatedaddress="37.235.53.217" AND destinationport=1358 OR destinationtranslatedaddress="151.236.23.232" AND destinationport=763 OR destinationtranslatedaddress="37.235.56.204" AND destinationport=24239 OR destinationtranslatedaddress="162.252.175.122" AND destinationport=4126 OR destinationtranslatedaddress="162.252.175.136" AND destinationport=11077)
index=activity AND rg_functionality="Endpoint management systems" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND destinationtranslatedport=10862 OR destinationtranslatedaddress="151.236.25.126" AND destinationtranslatedport=11331 OR destinationtranslatedaddress="158.255.215.49" AND destinationtranslatedport=23079 OR destinationtranslatedaddress="185.26.239.98" AND destinationtranslatedport=11076 OR destinationtranslatedaddress="151.236.25.10" AND destinationtranslatedport=7205 OR destinationtranslatedaddress="37.235.53.217" AND destinationtranslatedport=1358 OR destinationtranslatedaddress="151.236.23.232" AND destinationtranslatedport=763 OR destinationtranslatedaddress="37.235.56.204" AND destinationtranslatedport=24239 OR destinationtranslatedaddress="162.252.175.122" AND destinationtranslatedport=4126 OR destinationtranslatedaddress="162.252.175.136" AND destinationtranslatedport=11077)
index=activity AND rg_functionality="Endpoint management systems" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND translatedport=10862 OR destinationtranslatedaddress="151.236.25.126" AND translatedport=11331 OR destinationtranslatedaddress="158.255.215.49" AND translatedport=23079 OR destinationtranslatedaddress="185.26.239.98" AND translatedport=11076 OR destinationtranslatedaddress="151.236.25.10" AND translatedport=7205 OR destinationtranslatedaddress="37.235.53.217" AND translatedport=1358 OR destinationtranslatedaddress="151.236.23.232" AND translatedport=763 OR destinationtranslatedaddress="37.235.56.204" AND translatedport=24239 OR destinationtranslatedaddress="162.252.175.122" AND translatedport=4126 OR destinationtranslatedaddress="162.252.175.136" AND translatedport=11077)
index=activity AND rg_functionality="Endpoint management systems" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="162.252.175.163" AND destinationport=28693 OR destinationaddress="162.252.175.90" AND destinationport=845 OR destinationaddress="162.252.175.109" AND destinationport=28330 OR destinationaddress="151.236.20.39" AND destinationport=5524 OR destinationaddress="158.255.208.140" AND destinationport=86 OR destinationaddress="194.68.27.149" AND destinationport=13106 OR destinationaddress="194.68.27.176" AND destinationport=6460 OR destinationaddress="37.143.128.223" AND destinationport=16223 OR destinationaddress="31.40.212.130" AND destinationport=7225 OR destinationaddress="198.244.207.203" AND destinationport=2076)
index=activity AND rg_functionality="Endpoint management systems" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="162.252.175.163" AND sourceport=28693 OR sourceaddress="162.252.175.90" AND sourceport=845 OR sourceaddress="162.252.175.109" AND sourceport=28330 OR sourceaddress="151.236.20.39" AND sourceport=5524 OR sourceaddress="158.255.208.140" AND sourceport=86 OR sourceaddress="194.68.27.149" AND sourceport=13106 OR sourceaddress="194.68.27.176" AND sourceport=6460 OR sourceaddress="37.143.128.223" AND sourceport=16223 OR sourceaddress="31.40.212.130" AND sourceport=7225 OR sourceaddress="198.244.207.203" AND sourceport=2076)
index=activity AND rg_functionality="Endpoint management systems" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="162.252.175.163" AND sourceport=28693 OR translatedipaddress="162.252.175.90" AND sourceport=845 OR translatedipaddress="162.252.175.109" AND sourceport=28330 OR translatedipaddress="151.236.20.39" AND sourceport=5524 OR translatedipaddress="158.255.208.140" AND sourceport=86 OR translatedipaddress="194.68.27.149" AND sourceport=13106 OR translatedipaddress="194.68.27.176" AND sourceport=6460 OR translatedipaddress="37.143.128.223" AND sourceport=16223 OR translatedipaddress="31.40.212.130" AND sourceport=7225 OR translatedipaddress="198.244.207.203" AND sourceport=2076)
index=activity AND rg_functionality="Endpoint management systems" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND destinationport=28693 OR destinationtranslatedaddress="162.252.175.90" AND destinationport=845 OR destinationtranslatedaddress="162.252.175.109" AND destinationport=28330 OR destinationtranslatedaddress="151.236.20.39" AND destinationport=5524 OR destinationtranslatedaddress="158.255.208.140" AND destinationport=86 OR destinationtranslatedaddress="194.68.27.149" AND destinationport=13106 OR destinationtranslatedaddress="194.68.27.176" AND destinationport=6460 OR destinationtranslatedaddress="37.143.128.223" AND destinationport=16223 OR destinationtranslatedaddress="31.40.212.130" AND destinationport=7225 OR destinationtranslatedaddress="198.244.207.203" AND destinationport=2076)
index=activity AND rg_functionality="Endpoint management systems" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND destinationtranslatedport=28693 OR destinationtranslatedaddress="162.252.175.90" AND destinationtranslatedport=845 OR destinationtranslatedaddress="162.252.175.109" AND destinationtranslatedport=28330 OR destinationtranslatedaddress="151.236.20.39" AND destinationtranslatedport=5524 OR destinationtranslatedaddress="158.255.208.140" AND destinationtranslatedport=86 OR destinationtranslatedaddress="194.68.27.149" AND destinationtranslatedport=13106 OR destinationtranslatedaddress="194.68.27.176" AND destinationtranslatedport=6460 OR destinationtranslatedaddress="37.143.128.223" AND destinationtranslatedport=16223 OR destinationtranslatedaddress="31.40.212.130" AND destinationtranslatedport=7225 OR destinationtranslatedaddress="198.244.207.203" AND destinationtranslatedport=2076)
index=activity AND rg_functionality="Endpoint management systems" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND translatedport=28693 OR destinationtranslatedaddress="162.252.175.90" AND translatedport=845 OR destinationtranslatedaddress="162.252.175.109" AND translatedport=28330 OR destinationtranslatedaddress="151.236.20.39" AND translatedport=5524 OR destinationtranslatedaddress="158.255.208.140" AND translatedport=86 OR destinationtranslatedaddress="194.68.27.149" AND translatedport=13106 OR destinationtranslatedaddress="194.68.27.176" AND translatedport=6460 OR destinationtranslatedaddress="37.143.128.223" AND translatedport=16223 OR destinationtranslatedaddress="31.40.212.130" AND translatedport=7225 OR destinationtranslatedaddress="198.244.207.203" AND translatedport=2076)
index=activity AND rg_functionality="Endpoint management systems" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="208.115.230.243" AND destinationport=16697 OR destinationaddress="185.126.239.207" AND destinationport=26630 OR destinationaddress="213.183.57.174" AND destinationport=12517 OR destinationaddress="213.183.57.72" AND destinationport=12517 OR destinationaddress="213.183.56.201" AND destinationport=12517 OR destinationaddress="95.164.45.27" AND destinationport=17426 OR destinationaddress="45.120.178.161" AND destinationport=11013 OR destinationaddress="176.120.74.3" AND destinationport=17268 OR destinationaddress="92.243.64.184" AND destinationport=17146 OR destinationaddress="92.243.64.36" AND destinationport=17146)
index=activity AND rg_functionality="Endpoint management systems" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="208.115.230.243" AND sourceport=16697 OR sourceaddress="185.126.239.207" AND sourceport=26630 OR sourceaddress="213.183.57.174" AND sourceport=12517 OR sourceaddress="213.183.57.72" AND sourceport=12517 OR sourceaddress="213.183.56.201" AND sourceport=12517 OR sourceaddress="95.164.45.27" AND sourceport=17426 OR sourceaddress="45.120.178.161" AND sourceport=11013 OR sourceaddress="176.120.74.3" AND sourceport=17268 OR sourceaddress="92.243.64.184" AND sourceport=17146 OR sourceaddress="92.243.64.36" AND sourceport=17146)
index=activity AND rg_functionality="Endpoint management systems" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="208.115.230.243" AND sourceport=16697 OR translatedipaddress="185.126.239.207" AND sourceport=26630 OR translatedipaddress="213.183.57.174" AND sourceport=12517 OR translatedipaddress="213.183.57.72" AND sourceport=12517 OR translatedipaddress="213.183.56.201" AND sourceport=12517 OR translatedipaddress="95.164.45.27" AND sourceport=17426 OR translatedipaddress="45.120.178.161" AND sourceport=11013 OR translatedipaddress="176.120.74.3" AND sourceport=17268 OR translatedipaddress="92.243.64.184" AND sourceport=17146 OR translatedipaddress="92.243.64.36" AND sourceport=17146)
index=activity AND rg_functionality="Endpoint management systems" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND destinationport=16697 OR destinationtranslatedaddress="185.126.239.207" AND destinationport=26630 OR destinationtranslatedaddress="213.183.57.174" AND destinationport=12517 OR destinationtranslatedaddress="213.183.57.72" AND destinationport=12517 OR destinationtranslatedaddress="213.183.56.201" AND destinationport=12517 OR destinationtranslatedaddress="95.164.45.27" AND destinationport=17426 OR destinationtranslatedaddress="45.120.178.161" AND destinationport=11013 OR destinationtranslatedaddress="176.120.74.3" AND destinationport=17268 OR destinationtranslatedaddress="92.243.64.184" AND destinationport=17146 OR destinationtranslatedaddress="92.243.64.36" AND destinationport=17146)
index=activity AND rg_functionality="Endpoint management systems" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND destinationtranslatedport=16697 OR destinationtranslatedaddress="185.126.239.207" AND destinationtranslatedport=26630 OR destinationtranslatedaddress="213.183.57.174" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="213.183.57.72" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="213.183.56.201" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="95.164.45.27" AND destinationtranslatedport=17426 OR destinationtranslatedaddress="45.120.178.161" AND destinationtranslatedport=11013 OR destinationtranslatedaddress="176.120.74.3" AND destinationtranslatedport=17268 OR destinationtranslatedaddress="92.243.64.184" AND destinationtranslatedport=17146 OR destinationtranslatedaddress="92.243.64.36" AND destinationtranslatedport=17146)
index=activity AND rg_functionality="Endpoint management systems" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND translatedport=16697 OR destinationtranslatedaddress="185.126.239.207" AND translatedport=26630 OR destinationtranslatedaddress="213.183.57.174" AND translatedport=12517 OR destinationtranslatedaddress="213.183.57.72" AND translatedport=12517 OR destinationtranslatedaddress="213.183.56.201" AND translatedport=12517 OR destinationtranslatedaddress="95.164.45.27" AND translatedport=17426 OR destinationtranslatedaddress="45.120.178.161" AND translatedport=11013 OR destinationtranslatedaddress="176.120.74.3" AND translatedport=17268 OR destinationtranslatedaddress="92.243.64.184" AND translatedport=17146 OR destinationtranslatedaddress="92.243.64.36" AND translatedport=17146)
index=activity AND rg_functionality="Endpoint management systems" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="89.31.120.126" AND destinationport=11578 OR destinationaddress="91.132.93.33" AND destinationport=11578 OR destinationaddress="91.132.95.28" AND destinationport=8773 OR destinationaddress="91.132.95.204" AND destinationport=8773 OR destinationaddress="91.132.95.135" AND destinationport=8773 OR destinationaddress="194.233.174.22" AND destinationport=45358)
index=activity AND rg_functionality="Endpoint management systems" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="89.31.120.126" AND sourceport=11578 OR sourceaddress="91.132.93.33" AND sourceport=11578 OR sourceaddress="91.132.95.28" AND sourceport=8773 OR sourceaddress="91.132.95.204" AND sourceport=8773 OR sourceaddress="91.132.95.135" AND sourceport=8773 OR sourceaddress="194.233.174.22" AND sourceport=45358)
index=activity AND rg_functionality="Endpoint management systems" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="89.31.120.126" AND sourceport=11578 OR translatedipaddress="91.132.93.33" AND sourceport=11578 OR translatedipaddress="91.132.95.28" AND sourceport=8773 OR translatedipaddress="91.132.95.204" AND sourceport=8773 OR translatedipaddress="91.132.95.135" AND sourceport=8773 OR translatedipaddress="194.233.174.22" AND sourceport=45358)
index=activity AND rg_functionality="Endpoint management systems" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND destinationport=11578 OR destinationtranslatedaddress="91.132.93.33" AND destinationport=11578 OR destinationtranslatedaddress="91.132.95.28" AND destinationport=8773 OR destinationtranslatedaddress="91.132.95.204" AND destinationport=8773 OR destinationtranslatedaddress="91.132.95.135" AND destinationport=8773 OR destinationtranslatedaddress="194.233.174.22" AND destinationport=45358)
index=activity AND rg_functionality="Endpoint management systems" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND destinationtranslatedport=11578 OR destinationtranslatedaddress="91.132.93.33" AND destinationtranslatedport=11578 OR destinationtranslatedaddress="91.132.95.28" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="91.132.95.204" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="91.132.95.135" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="194.233.174.22" AND destinationtranslatedport=45358)
index=activity AND rg_functionality="Endpoint management systems" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND translatedport=11578 OR destinationtranslatedaddress="91.132.93.33" AND translatedport=11578 OR destinationtranslatedaddress="91.132.95.28" AND translatedport=8773 OR destinationtranslatedaddress="91.132.95.204" AND translatedport=8773 OR destinationtranslatedaddress="91.132.95.135" AND translatedport=8773 OR destinationtranslatedaddress="194.233.174.22" AND translatedport=45358)
index=activity AND rg_functionality="Cloud Content Management System" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="158.255.212.173" AND destinationport=10862 OR destinationaddress="151.236.25.126" AND destinationport=11331 OR destinationaddress="158.255.215.49" AND destinationport=23079 OR destinationaddress="185.26.239.98" AND destinationport=11076 OR destinationaddress="151.236.25.10" AND destinationport=7205 OR destinationaddress="37.235.53.217" AND destinationport=1358 OR destinationaddress="151.236.23.232" AND destinationport=763 OR destinationaddress="37.235.56.204" AND destinationport=24239 OR destinationaddress="162.252.175.122" AND destinationport=4126 OR destinationaddress="162.252.175.136" AND destinationport=11077)
index=activity AND rg_functionality="Cloud Content Management System" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="158.255.212.173" AND sourceport=10862 OR sourceaddress="151.236.25.126" AND sourceport=11331 OR sourceaddress="158.255.215.49" AND sourceport=23079 OR sourceaddress="185.26.239.98" AND sourceport=11076 OR sourceaddress="151.236.25.10" AND sourceport=7205 OR sourceaddress="37.235.53.217" AND sourceport=1358 OR sourceaddress="151.236.23.232" AND sourceport=763 OR sourceaddress="37.235.56.204" AND sourceport=24239 OR sourceaddress="162.252.175.122" AND sourceport=4126 OR sourceaddress="162.252.175.136" AND sourceport=11077)
index=activity AND rg_functionality="Cloud Content Management System" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="158.255.212.173" AND sourceport=10862 OR translatedipaddress="151.236.25.126" AND sourceport=11331 OR translatedipaddress="158.255.215.49" AND sourceport=23079 OR translatedipaddress="185.26.239.98" AND sourceport=11076 OR translatedipaddress="151.236.25.10" AND sourceport=7205 OR translatedipaddress="37.235.53.217" AND sourceport=1358 OR translatedipaddress="151.236.23.232" AND sourceport=763 OR translatedipaddress="37.235.56.204" AND sourceport=24239 OR translatedipaddress="162.252.175.122" AND sourceport=4126 OR translatedipaddress="162.252.175.136" AND sourceport=11077)
index=activity AND rg_functionality="Cloud Content Management System" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND destinationport=10862 OR destinationtranslatedaddress="151.236.25.126" AND destinationport=11331 OR destinationtranslatedaddress="158.255.215.49" AND destinationport=23079 OR destinationtranslatedaddress="185.26.239.98" AND destinationport=11076 OR destinationtranslatedaddress="151.236.25.10" AND destinationport=7205 OR destinationtranslatedaddress="37.235.53.217" AND destinationport=1358 OR destinationtranslatedaddress="151.236.23.232" AND destinationport=763 OR destinationtranslatedaddress="37.235.56.204" AND destinationport=24239 OR destinationtranslatedaddress="162.252.175.122" AND destinationport=4126 OR destinationtranslatedaddress="162.252.175.136" AND destinationport=11077)
index=activity AND rg_functionality="Cloud Content Management System" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND destinationtranslatedport=10862 OR destinationtranslatedaddress="151.236.25.126" AND destinationtranslatedport=11331 OR destinationtranslatedaddress="158.255.215.49" AND destinationtranslatedport=23079 OR destinationtranslatedaddress="185.26.239.98" AND destinationtranslatedport=11076 OR destinationtranslatedaddress="151.236.25.10" AND destinationtranslatedport=7205 OR destinationtranslatedaddress="37.235.53.217" AND destinationtranslatedport=1358 OR destinationtranslatedaddress="151.236.23.232" AND destinationtranslatedport=763 OR destinationtranslatedaddress="37.235.56.204" AND destinationtranslatedport=24239 OR destinationtranslatedaddress="162.252.175.122" AND destinationtranslatedport=4126 OR destinationtranslatedaddress="162.252.175.136" AND destinationtranslatedport=11077)
index=activity AND rg_functionality="Cloud Content Management System" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND translatedport=10862 OR destinationtranslatedaddress="151.236.25.126" AND translatedport=11331 OR destinationtranslatedaddress="158.255.215.49" AND translatedport=23079 OR destinationtranslatedaddress="185.26.239.98" AND translatedport=11076 OR destinationtranslatedaddress="151.236.25.10" AND translatedport=7205 OR destinationtranslatedaddress="37.235.53.217" AND translatedport=1358 OR destinationtranslatedaddress="151.236.23.232" AND translatedport=763 OR destinationtranslatedaddress="37.235.56.204" AND translatedport=24239 OR destinationtranslatedaddress="162.252.175.122" AND translatedport=4126 OR destinationtranslatedaddress="162.252.175.136" AND translatedport=11077)
index=activity AND rg_functionality="Cloud Content Management System" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="162.252.175.163" AND destinationport=28693 OR destinationaddress="162.252.175.90" AND destinationport=845 OR destinationaddress="162.252.175.109" AND destinationport=28330 OR destinationaddress="151.236.20.39" AND destinationport=5524 OR destinationaddress="158.255.208.140" AND destinationport=86 OR destinationaddress="194.68.27.149" AND destinationport=13106 OR destinationaddress="194.68.27.176" AND destinationport=6460 OR destinationaddress="37.143.128.223" AND destinationport=16223 OR destinationaddress="31.40.212.130" AND destinationport=7225 OR destinationaddress="198.244.207.203" AND destinationport=2076)
index=activity AND rg_functionality="Cloud Content Management System" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="162.252.175.163" AND sourceport=28693 OR sourceaddress="162.252.175.90" AND sourceport=845 OR sourceaddress="162.252.175.109" AND sourceport=28330 OR sourceaddress="151.236.20.39" AND sourceport=5524 OR sourceaddress="158.255.208.140" AND sourceport=86 OR sourceaddress="194.68.27.149" AND sourceport=13106 OR sourceaddress="194.68.27.176" AND sourceport=6460 OR sourceaddress="37.143.128.223" AND sourceport=16223 OR sourceaddress="31.40.212.130" AND sourceport=7225 OR sourceaddress="198.244.207.203" AND sourceport=2076)
index=activity AND rg_functionality="Cloud Content Management System" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="162.252.175.163" AND sourceport=28693 OR translatedipaddress="162.252.175.90" AND sourceport=845 OR translatedipaddress="162.252.175.109" AND sourceport=28330 OR translatedipaddress="151.236.20.39" AND sourceport=5524 OR translatedipaddress="158.255.208.140" AND sourceport=86 OR translatedipaddress="194.68.27.149" AND sourceport=13106 OR translatedipaddress="194.68.27.176" AND sourceport=6460 OR translatedipaddress="37.143.128.223" AND sourceport=16223 OR translatedipaddress="31.40.212.130" AND sourceport=7225 OR translatedipaddress="198.244.207.203" AND sourceport=2076)
index=activity AND rg_functionality="Cloud Content Management System" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND destinationport=28693 OR destinationtranslatedaddress="162.252.175.90" AND destinationport=845 OR destinationtranslatedaddress="162.252.175.109" AND destinationport=28330 OR destinationtranslatedaddress="151.236.20.39" AND destinationport=5524 OR destinationtranslatedaddress="158.255.208.140" AND destinationport=86 OR destinationtranslatedaddress="194.68.27.149" AND destinationport=13106 OR destinationtranslatedaddress="194.68.27.176" AND destinationport=6460 OR destinationtranslatedaddress="37.143.128.223" AND destinationport=16223 OR destinationtranslatedaddress="31.40.212.130" AND destinationport=7225 OR destinationtranslatedaddress="198.244.207.203" AND destinationport=2076)
index=activity AND rg_functionality="Cloud Content Management System" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND destinationtranslatedport=28693 OR destinationtranslatedaddress="162.252.175.90" AND destinationtranslatedport=845 OR destinationtranslatedaddress="162.252.175.109" AND destinationtranslatedport=28330 OR destinationtranslatedaddress="151.236.20.39" AND destinationtranslatedport=5524 OR destinationtranslatedaddress="158.255.208.140" AND destinationtranslatedport=86 OR destinationtranslatedaddress="194.68.27.149" AND destinationtranslatedport=13106 OR destinationtranslatedaddress="194.68.27.176" AND destinationtranslatedport=6460 OR destinationtranslatedaddress="37.143.128.223" AND destinationtranslatedport=16223 OR destinationtranslatedaddress="31.40.212.130" AND destinationtranslatedport=7225 OR destinationtranslatedaddress="198.244.207.203" AND destinationtranslatedport=2076)
index=activity AND rg_functionality="Cloud Content Management System" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND translatedport=28693 OR destinationtranslatedaddress="162.252.175.90" AND translatedport=845 OR destinationtranslatedaddress="162.252.175.109" AND translatedport=28330 OR destinationtranslatedaddress="151.236.20.39" AND translatedport=5524 OR destinationtranslatedaddress="158.255.208.140" AND translatedport=86 OR destinationtranslatedaddress="194.68.27.149" AND translatedport=13106 OR destinationtranslatedaddress="194.68.27.176" AND translatedport=6460 OR destinationtranslatedaddress="37.143.128.223" AND translatedport=16223 OR destinationtranslatedaddress="31.40.212.130" AND translatedport=7225 OR destinationtranslatedaddress="198.244.207.203" AND translatedport=2076)
index=activity AND rg_functionality="Cloud Content Management System" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="208.115.230.243" AND destinationport=16697 OR destinationaddress="185.126.239.207" AND destinationport=26630 OR destinationaddress="213.183.57.174" AND destinationport=12517 OR destinationaddress="213.183.57.72" AND destinationport=12517 OR destinationaddress="213.183.56.201" AND destinationport=12517 OR destinationaddress="95.164.45.27" AND destinationport=17426 OR destinationaddress="45.120.178.161" AND destinationport=11013 OR destinationaddress="176.120.74.3" AND destinationport=17268 OR destinationaddress="92.243.64.184" AND destinationport=17146 OR destinationaddress="92.243.64.36" AND destinationport=17146)
index=activity AND rg_functionality="Cloud Content Management System" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="208.115.230.243" AND sourceport=16697 OR sourceaddress="185.126.239.207" AND sourceport=26630 OR sourceaddress="213.183.57.174" AND sourceport=12517 OR sourceaddress="213.183.57.72" AND sourceport=12517 OR sourceaddress="213.183.56.201" AND sourceport=12517 OR sourceaddress="95.164.45.27" AND sourceport=17426 OR sourceaddress="45.120.178.161" AND sourceport=11013 OR sourceaddress="176.120.74.3" AND sourceport=17268 OR sourceaddress="92.243.64.184" AND sourceport=17146 OR sourceaddress="92.243.64.36" AND sourceport=17146)
index=activity AND rg_functionality="Cloud Content Management System" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="208.115.230.243" AND sourceport=16697 OR translatedipaddress="185.126.239.207" AND sourceport=26630 OR translatedipaddress="213.183.57.174" AND sourceport=12517 OR translatedipaddress="213.183.57.72" AND sourceport=12517 OR translatedipaddress="213.183.56.201" AND sourceport=12517 OR translatedipaddress="95.164.45.27" AND sourceport=17426 OR translatedipaddress="45.120.178.161" AND sourceport=11013 OR translatedipaddress="176.120.74.3" AND sourceport=17268 OR translatedipaddress="92.243.64.184" AND sourceport=17146 OR translatedipaddress="92.243.64.36" AND sourceport=17146)
index=activity AND rg_functionality="Cloud Content Management System" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND destinationport=16697 OR destinationtranslatedaddress="185.126.239.207" AND destinationport=26630 OR destinationtranslatedaddress="213.183.57.174" AND destinationport=12517 OR destinationtranslatedaddress="213.183.57.72" AND destinationport=12517 OR destinationtranslatedaddress="213.183.56.201" AND destinationport=12517 OR destinationtranslatedaddress="95.164.45.27" AND destinationport=17426 OR destinationtranslatedaddress="45.120.178.161" AND destinationport=11013 OR destinationtranslatedaddress="176.120.74.3" AND destinationport=17268 OR destinationtranslatedaddress="92.243.64.184" AND destinationport=17146 OR destinationtranslatedaddress="92.243.64.36" AND destinationport=17146)
index=activity AND rg_functionality="Cloud Content Management System" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND destinationtranslatedport=16697 OR destinationtranslatedaddress="185.126.239.207" AND destinationtranslatedport=26630 OR destinationtranslatedaddress="213.183.57.174" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="213.183.57.72" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="213.183.56.201" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="95.164.45.27" AND destinationtranslatedport=17426 OR destinationtranslatedaddress="45.120.178.161" AND destinationtranslatedport=11013 OR destinationtranslatedaddress="176.120.74.3" AND destinationtranslatedport=17268 OR destinationtranslatedaddress="92.243.64.184" AND destinationtranslatedport=17146 OR destinationtranslatedaddress="92.243.64.36" AND destinationtranslatedport=17146)
index=activity AND rg_functionality="Cloud Content Management System" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND translatedport=16697 OR destinationtranslatedaddress="185.126.239.207" AND translatedport=26630 OR destinationtranslatedaddress="213.183.57.174" AND translatedport=12517 OR destinationtranslatedaddress="213.183.57.72" AND translatedport=12517 OR destinationtranslatedaddress="213.183.56.201" AND translatedport=12517 OR destinationtranslatedaddress="95.164.45.27" AND translatedport=17426 OR destinationtranslatedaddress="45.120.178.161" AND translatedport=11013 OR destinationtranslatedaddress="176.120.74.3" AND translatedport=17268 OR destinationtranslatedaddress="92.243.64.184" AND translatedport=17146 OR destinationtranslatedaddress="92.243.64.36" AND translatedport=17146)
index=activity AND rg_functionality="Cloud Content Management System" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="89.31.120.126" AND destinationport=11578 OR destinationaddress="91.132.93.33" AND destinationport=11578 OR destinationaddress="91.132.95.28" AND destinationport=8773 OR destinationaddress="91.132.95.204" AND destinationport=8773 OR destinationaddress="91.132.95.135" AND destinationport=8773 OR destinationaddress="194.233.174.22" AND destinationport=45358)
index=activity AND rg_functionality="Cloud Content Management System" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="89.31.120.126" AND sourceport=11578 OR sourceaddress="91.132.93.33" AND sourceport=11578 OR sourceaddress="91.132.95.28" AND sourceport=8773 OR sourceaddress="91.132.95.204" AND sourceport=8773 OR sourceaddress="91.132.95.135" AND sourceport=8773 OR sourceaddress="194.233.174.22" AND sourceport=45358)
index=activity AND rg_functionality="Cloud Content Management System" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="89.31.120.126" AND sourceport=11578 OR translatedipaddress="91.132.93.33" AND sourceport=11578 OR translatedipaddress="91.132.95.28" AND sourceport=8773 OR translatedipaddress="91.132.95.204" AND sourceport=8773 OR translatedipaddress="91.132.95.135" AND sourceport=8773 OR translatedipaddress="194.233.174.22" AND sourceport=45358)
index=activity AND rg_functionality="Cloud Content Management System" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND destinationport=11578 OR destinationtranslatedaddress="91.132.93.33" AND destinationport=11578 OR destinationtranslatedaddress="91.132.95.28" AND destinationport=8773 OR destinationtranslatedaddress="91.132.95.204" AND destinationport=8773 OR destinationtranslatedaddress="91.132.95.135" AND destinationport=8773 OR destinationtranslatedaddress="194.233.174.22" AND destinationport=45358)
index=activity AND rg_functionality="Cloud Content Management System" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND destinationtranslatedport=11578 OR destinationtranslatedaddress="91.132.93.33" AND destinationtranslatedport=11578 OR destinationtranslatedaddress="91.132.95.28" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="91.132.95.204" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="91.132.95.135" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="194.233.174.22" AND destinationtranslatedport=45358)
index=activity AND rg_functionality="Cloud Content Management System" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND translatedport=11578 OR destinationtranslatedaddress="91.132.93.33" AND translatedport=11578 OR destinationtranslatedaddress="91.132.95.28" AND translatedport=8773 OR destinationtranslatedaddress="91.132.95.204" AND translatedport=8773 OR destinationtranslatedaddress="91.132.95.135" AND translatedport=8773 OR destinationtranslatedaddress="194.233.174.22" AND translatedport=45358)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="158.255.212.173" AND destinationport=10862 OR destinationaddress="151.236.25.126" AND destinationport=11331 OR destinationaddress="158.255.215.49" AND destinationport=23079 OR destinationaddress="185.26.239.98" AND destinationport=11076 OR destinationaddress="151.236.25.10" AND destinationport=7205 OR destinationaddress="37.235.53.217" AND destinationport=1358 OR destinationaddress="151.236.23.232" AND destinationport=763 OR destinationaddress="37.235.56.204" AND destinationport=24239 OR destinationaddress="162.252.175.122" AND destinationport=4126 OR destinationaddress="162.252.175.136" AND destinationport=11077)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="158.255.212.173" AND sourceport=10862 OR sourceaddress="151.236.25.126" AND sourceport=11331 OR sourceaddress="158.255.215.49" AND sourceport=23079 OR sourceaddress="185.26.239.98" AND sourceport=11076 OR sourceaddress="151.236.25.10" AND sourceport=7205 OR sourceaddress="37.235.53.217" AND sourceport=1358 OR sourceaddress="151.236.23.232" AND sourceport=763 OR sourceaddress="37.235.56.204" AND sourceport=24239 OR sourceaddress="162.252.175.122" AND sourceport=4126 OR sourceaddress="162.252.175.136" AND sourceport=11077)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="158.255.212.173" AND sourceport=10862 OR translatedipaddress="151.236.25.126" AND sourceport=11331 OR translatedipaddress="158.255.215.49" AND sourceport=23079 OR translatedipaddress="185.26.239.98" AND sourceport=11076 OR translatedipaddress="151.236.25.10" AND sourceport=7205 OR translatedipaddress="37.235.53.217" AND sourceport=1358 OR translatedipaddress="151.236.23.232" AND sourceport=763 OR translatedipaddress="37.235.56.204" AND sourceport=24239 OR translatedipaddress="162.252.175.122" AND sourceport=4126 OR translatedipaddress="162.252.175.136" AND sourceport=11077)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND destinationport=10862 OR destinationtranslatedaddress="151.236.25.126" AND destinationport=11331 OR destinationtranslatedaddress="158.255.215.49" AND destinationport=23079 OR destinationtranslatedaddress="185.26.239.98" AND destinationport=11076 OR destinationtranslatedaddress="151.236.25.10" AND destinationport=7205 OR destinationtranslatedaddress="37.235.53.217" AND destinationport=1358 OR destinationtranslatedaddress="151.236.23.232" AND destinationport=763 OR destinationtranslatedaddress="37.235.56.204" AND destinationport=24239 OR destinationtranslatedaddress="162.252.175.122" AND destinationport=4126 OR destinationtranslatedaddress="162.252.175.136" AND destinationport=11077)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND destinationtranslatedport=10862 OR destinationtranslatedaddress="151.236.25.126" AND destinationtranslatedport=11331 OR destinationtranslatedaddress="158.255.215.49" AND destinationtranslatedport=23079 OR destinationtranslatedaddress="185.26.239.98" AND destinationtranslatedport=11076 OR destinationtranslatedaddress="151.236.25.10" AND destinationtranslatedport=7205 OR destinationtranslatedaddress="37.235.53.217" AND destinationtranslatedport=1358 OR destinationtranslatedaddress="151.236.23.232" AND destinationtranslatedport=763 OR destinationtranslatedaddress="37.235.56.204" AND destinationtranslatedport=24239 OR destinationtranslatedaddress="162.252.175.122" AND destinationtranslatedport=4126 OR destinationtranslatedaddress="162.252.175.136" AND destinationtranslatedport=11077)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND translatedport=10862 OR destinationtranslatedaddress="151.236.25.126" AND translatedport=11331 OR destinationtranslatedaddress="158.255.215.49" AND translatedport=23079 OR destinationtranslatedaddress="185.26.239.98" AND translatedport=11076 OR destinationtranslatedaddress="151.236.25.10" AND translatedport=7205 OR destinationtranslatedaddress="37.235.53.217" AND translatedport=1358 OR destinationtranslatedaddress="151.236.23.232" AND translatedport=763 OR destinationtranslatedaddress="37.235.56.204" AND translatedport=24239 OR destinationtranslatedaddress="162.252.175.122" AND translatedport=4126 OR destinationtranslatedaddress="162.252.175.136" AND translatedport=11077)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="162.252.175.163" AND destinationport=28693 OR destinationaddress="162.252.175.90" AND destinationport=845 OR destinationaddress="162.252.175.109" AND destinationport=28330 OR destinationaddress="151.236.20.39" AND destinationport=5524 OR destinationaddress="158.255.208.140" AND destinationport=86 OR destinationaddress="194.68.27.149" AND destinationport=13106 OR destinationaddress="194.68.27.176" AND destinationport=6460 OR destinationaddress="37.143.128.223" AND destinationport=16223 OR destinationaddress="31.40.212.130" AND destinationport=7225 OR destinationaddress="198.244.207.203" AND destinationport=2076)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="162.252.175.163" AND sourceport=28693 OR sourceaddress="162.252.175.90" AND sourceport=845 OR sourceaddress="162.252.175.109" AND sourceport=28330 OR sourceaddress="151.236.20.39" AND sourceport=5524 OR sourceaddress="158.255.208.140" AND sourceport=86 OR sourceaddress="194.68.27.149" AND sourceport=13106 OR sourceaddress="194.68.27.176" AND sourceport=6460 OR sourceaddress="37.143.128.223" AND sourceport=16223 OR sourceaddress="31.40.212.130" AND sourceport=7225 OR sourceaddress="198.244.207.203" AND sourceport=2076)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="162.252.175.163" AND sourceport=28693 OR translatedipaddress="162.252.175.90" AND sourceport=845 OR translatedipaddress="162.252.175.109" AND sourceport=28330 OR translatedipaddress="151.236.20.39" AND sourceport=5524 OR translatedipaddress="158.255.208.140" AND sourceport=86 OR translatedipaddress="194.68.27.149" AND sourceport=13106 OR translatedipaddress="194.68.27.176" AND sourceport=6460 OR translatedipaddress="37.143.128.223" AND sourceport=16223 OR translatedipaddress="31.40.212.130" AND sourceport=7225 OR translatedipaddress="198.244.207.203" AND sourceport=2076)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND destinationport=28693 OR destinationtranslatedaddress="162.252.175.90" AND destinationport=845 OR destinationtranslatedaddress="162.252.175.109" AND destinationport=28330 OR destinationtranslatedaddress="151.236.20.39" AND destinationport=5524 OR destinationtranslatedaddress="158.255.208.140" AND destinationport=86 OR destinationtranslatedaddress="194.68.27.149" AND destinationport=13106 OR destinationtranslatedaddress="194.68.27.176" AND destinationport=6460 OR destinationtranslatedaddress="37.143.128.223" AND destinationport=16223 OR destinationtranslatedaddress="31.40.212.130" AND destinationport=7225 OR destinationtranslatedaddress="198.244.207.203" AND destinationport=2076)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND destinationtranslatedport=28693 OR destinationtranslatedaddress="162.252.175.90" AND destinationtranslatedport=845 OR destinationtranslatedaddress="162.252.175.109" AND destinationtranslatedport=28330 OR destinationtranslatedaddress="151.236.20.39" AND destinationtranslatedport=5524 OR destinationtranslatedaddress="158.255.208.140" AND destinationtranslatedport=86 OR destinationtranslatedaddress="194.68.27.149" AND destinationtranslatedport=13106 OR destinationtranslatedaddress="194.68.27.176" AND destinationtranslatedport=6460 OR destinationtranslatedaddress="37.143.128.223" AND destinationtranslatedport=16223 OR destinationtranslatedaddress="31.40.212.130" AND destinationtranslatedport=7225 OR destinationtranslatedaddress="198.244.207.203" AND destinationtranslatedport=2076)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND translatedport=28693 OR destinationtranslatedaddress="162.252.175.90" AND translatedport=845 OR destinationtranslatedaddress="162.252.175.109" AND translatedport=28330 OR destinationtranslatedaddress="151.236.20.39" AND translatedport=5524 OR destinationtranslatedaddress="158.255.208.140" AND translatedport=86 OR destinationtranslatedaddress="194.68.27.149" AND translatedport=13106 OR destinationtranslatedaddress="194.68.27.176" AND translatedport=6460 OR destinationtranslatedaddress="37.143.128.223" AND translatedport=16223 OR destinationtranslatedaddress="31.40.212.130" AND translatedport=7225 OR destinationtranslatedaddress="198.244.207.203" AND translatedport=2076)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="208.115.230.243" AND destinationport=16697 OR destinationaddress="185.126.239.207" AND destinationport=26630 OR destinationaddress="213.183.57.174" AND destinationport=12517 OR destinationaddress="213.183.57.72" AND destinationport=12517 OR destinationaddress="213.183.56.201" AND destinationport=12517 OR destinationaddress="95.164.45.27" AND destinationport=17426 OR destinationaddress="45.120.178.161" AND destinationport=11013 OR destinationaddress="176.120.74.3" AND destinationport=17268 OR destinationaddress="92.243.64.184" AND destinationport=17146 OR destinationaddress="92.243.64.36" AND destinationport=17146)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="208.115.230.243" AND sourceport=16697 OR sourceaddress="185.126.239.207" AND sourceport=26630 OR sourceaddress="213.183.57.174" AND sourceport=12517 OR sourceaddress="213.183.57.72" AND sourceport=12517 OR sourceaddress="213.183.56.201" AND sourceport=12517 OR sourceaddress="95.164.45.27" AND sourceport=17426 OR sourceaddress="45.120.178.161" AND sourceport=11013 OR sourceaddress="176.120.74.3" AND sourceport=17268 OR sourceaddress="92.243.64.184" AND sourceport=17146 OR sourceaddress="92.243.64.36" AND sourceport=17146)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="208.115.230.243" AND sourceport=16697 OR translatedipaddress="185.126.239.207" AND sourceport=26630 OR translatedipaddress="213.183.57.174" AND sourceport=12517 OR translatedipaddress="213.183.57.72" AND sourceport=12517 OR translatedipaddress="213.183.56.201" AND sourceport=12517 OR translatedipaddress="95.164.45.27" AND sourceport=17426 OR translatedipaddress="45.120.178.161" AND sourceport=11013 OR translatedipaddress="176.120.74.3" AND sourceport=17268 OR translatedipaddress="92.243.64.184" AND sourceport=17146 OR translatedipaddress="92.243.64.36" AND sourceport=17146)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND destinationport=16697 OR destinationtranslatedaddress="185.126.239.207" AND destinationport=26630 OR destinationtranslatedaddress="213.183.57.174" AND destinationport=12517 OR destinationtranslatedaddress="213.183.57.72" AND destinationport=12517 OR destinationtranslatedaddress="213.183.56.201" AND destinationport=12517 OR destinationtranslatedaddress="95.164.45.27" AND destinationport=17426 OR destinationtranslatedaddress="45.120.178.161" AND destinationport=11013 OR destinationtranslatedaddress="176.120.74.3" AND destinationport=17268 OR destinationtranslatedaddress="92.243.64.184" AND destinationport=17146 OR destinationtranslatedaddress="92.243.64.36" AND destinationport=17146)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND destinationtranslatedport=16697 OR destinationtranslatedaddress="185.126.239.207" AND destinationtranslatedport=26630 OR destinationtranslatedaddress="213.183.57.174" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="213.183.57.72" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="213.183.56.201" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="95.164.45.27" AND destinationtranslatedport=17426 OR destinationtranslatedaddress="45.120.178.161" AND destinationtranslatedport=11013 OR destinationtranslatedaddress="176.120.74.3" AND destinationtranslatedport=17268 OR destinationtranslatedaddress="92.243.64.184" AND destinationtranslatedport=17146 OR destinationtranslatedaddress="92.243.64.36" AND destinationtranslatedport=17146)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND translatedport=16697 OR destinationtranslatedaddress="185.126.239.207" AND translatedport=26630 OR destinationtranslatedaddress="213.183.57.174" AND translatedport=12517 OR destinationtranslatedaddress="213.183.57.72" AND translatedport=12517 OR destinationtranslatedaddress="213.183.56.201" AND translatedport=12517 OR destinationtranslatedaddress="95.164.45.27" AND translatedport=17426 OR destinationtranslatedaddress="45.120.178.161" AND translatedport=11013 OR destinationtranslatedaddress="176.120.74.3" AND translatedport=17268 OR destinationtranslatedaddress="92.243.64.184" AND translatedport=17146 OR destinationtranslatedaddress="92.243.64.36" AND translatedport=17146)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="89.31.120.126" AND destinationport=11578 OR destinationaddress="91.132.93.33" AND destinationport=11578 OR destinationaddress="91.132.95.28" AND destinationport=8773 OR destinationaddress="91.132.95.204" AND destinationport=8773 OR destinationaddress="91.132.95.135" AND destinationport=8773 OR destinationaddress="194.233.174.22" AND destinationport=45358)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="89.31.120.126" AND sourceport=11578 OR sourceaddress="91.132.93.33" AND sourceport=11578 OR sourceaddress="91.132.95.28" AND sourceport=8773 OR sourceaddress="91.132.95.204" AND sourceport=8773 OR sourceaddress="91.132.95.135" AND sourceport=8773 OR sourceaddress="194.233.174.22" AND sourceport=45358)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="89.31.120.126" AND sourceport=11578 OR translatedipaddress="91.132.93.33" AND sourceport=11578 OR translatedipaddress="91.132.95.28" AND sourceport=8773 OR translatedipaddress="91.132.95.204" AND sourceport=8773 OR translatedipaddress="91.132.95.135" AND sourceport=8773 OR translatedipaddress="194.233.174.22" AND sourceport=45358)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND destinationport=11578 OR destinationtranslatedaddress="91.132.93.33" AND destinationport=11578 OR destinationtranslatedaddress="91.132.95.28" AND destinationport=8773 OR destinationtranslatedaddress="91.132.95.204" AND destinationport=8773 OR destinationtranslatedaddress="91.132.95.135" AND destinationport=8773 OR destinationtranslatedaddress="194.233.174.22" AND destinationport=45358)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND destinationtranslatedport=11578 OR destinationtranslatedaddress="91.132.93.33" AND destinationtranslatedport=11578 OR destinationtranslatedaddress="91.132.95.28" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="91.132.95.204" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="91.132.95.135" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="194.233.174.22" AND destinationtranslatedport=45358)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND translatedport=11578 OR destinationtranslatedaddress="91.132.93.33" AND translatedport=11578 OR destinationtranslatedaddress="91.132.95.28" AND translatedport=8773 OR destinationtranslatedaddress="91.132.95.204" AND translatedport=8773 OR destinationtranslatedaddress="91.132.95.135" AND translatedport=8773 OR destinationtranslatedaddress="194.233.174.22" AND translatedport=45358)
index=activity AND rg_functionality="Microsoft Windows" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="158.255.212.173" AND destinationport=10862 OR destinationaddress="151.236.25.126" AND destinationport=11331 OR destinationaddress="158.255.215.49" AND destinationport=23079 OR destinationaddress="185.26.239.98" AND destinationport=11076 OR destinationaddress="151.236.25.10" AND destinationport=7205 OR destinationaddress="37.235.53.217" AND destinationport=1358 OR destinationaddress="151.236.23.232" AND destinationport=763 OR destinationaddress="37.235.56.204" AND destinationport=24239 OR destinationaddress="162.252.175.122" AND destinationport=4126 OR destinationaddress="162.252.175.136" AND destinationport=11077)
index=activity AND rg_functionality="Microsoft Windows" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="158.255.212.173" AND sourceport=10862 OR sourceaddress="151.236.25.126" AND sourceport=11331 OR sourceaddress="158.255.215.49" AND sourceport=23079 OR sourceaddress="185.26.239.98" AND sourceport=11076 OR sourceaddress="151.236.25.10" AND sourceport=7205 OR sourceaddress="37.235.53.217" AND sourceport=1358 OR sourceaddress="151.236.23.232" AND sourceport=763 OR sourceaddress="37.235.56.204" AND sourceport=24239 OR sourceaddress="162.252.175.122" AND sourceport=4126 OR sourceaddress="162.252.175.136" AND sourceport=11077)
index=activity AND rg_functionality="Microsoft Windows" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="158.255.212.173" AND sourceport=10862 OR translatedipaddress="151.236.25.126" AND sourceport=11331 OR translatedipaddress="158.255.215.49" AND sourceport=23079 OR translatedipaddress="185.26.239.98" AND sourceport=11076 OR translatedipaddress="151.236.25.10" AND sourceport=7205 OR translatedipaddress="37.235.53.217" AND sourceport=1358 OR translatedipaddress="151.236.23.232" AND sourceport=763 OR translatedipaddress="37.235.56.204" AND sourceport=24239 OR translatedipaddress="162.252.175.122" AND sourceport=4126 OR translatedipaddress="162.252.175.136" AND sourceport=11077)
index=activity AND rg_functionality="Microsoft Windows" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND destinationport=10862 OR destinationtranslatedaddress="151.236.25.126" AND destinationport=11331 OR destinationtranslatedaddress="158.255.215.49" AND destinationport=23079 OR destinationtranslatedaddress="185.26.239.98" AND destinationport=11076 OR destinationtranslatedaddress="151.236.25.10" AND destinationport=7205 OR destinationtranslatedaddress="37.235.53.217" AND destinationport=1358 OR destinationtranslatedaddress="151.236.23.232" AND destinationport=763 OR destinationtranslatedaddress="37.235.56.204" AND destinationport=24239 OR destinationtranslatedaddress="162.252.175.122" AND destinationport=4126 OR destinationtranslatedaddress="162.252.175.136" AND destinationport=11077)
index=activity AND rg_functionality="Microsoft Windows" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND destinationtranslatedport=10862 OR destinationtranslatedaddress="151.236.25.126" AND destinationtranslatedport=11331 OR destinationtranslatedaddress="158.255.215.49" AND destinationtranslatedport=23079 OR destinationtranslatedaddress="185.26.239.98" AND destinationtranslatedport=11076 OR destinationtranslatedaddress="151.236.25.10" AND destinationtranslatedport=7205 OR destinationtranslatedaddress="37.235.53.217" AND destinationtranslatedport=1358 OR destinationtranslatedaddress="151.236.23.232" AND destinationtranslatedport=763 OR destinationtranslatedaddress="37.235.56.204" AND destinationtranslatedport=24239 OR destinationtranslatedaddress="162.252.175.122" AND destinationtranslatedport=4126 OR destinationtranslatedaddress="162.252.175.136" AND destinationtranslatedport=11077)
index=activity AND rg_functionality="Microsoft Windows" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND translatedport=10862 OR destinationtranslatedaddress="151.236.25.126" AND translatedport=11331 OR destinationtranslatedaddress="158.255.215.49" AND translatedport=23079 OR destinationtranslatedaddress="185.26.239.98" AND translatedport=11076 OR destinationtranslatedaddress="151.236.25.10" AND translatedport=7205 OR destinationtranslatedaddress="37.235.53.217" AND translatedport=1358 OR destinationtranslatedaddress="151.236.23.232" AND translatedport=763 OR destinationtranslatedaddress="37.235.56.204" AND translatedport=24239 OR destinationtranslatedaddress="162.252.175.122" AND translatedport=4126 OR destinationtranslatedaddress="162.252.175.136" AND translatedport=11077)
index=activity AND rg_functionality="Microsoft Windows" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="162.252.175.163" AND destinationport=28693 OR destinationaddress="162.252.175.90" AND destinationport=845 OR destinationaddress="162.252.175.109" AND destinationport=28330 OR destinationaddress="151.236.20.39" AND destinationport=5524 OR destinationaddress="158.255.208.140" AND destinationport=86 OR destinationaddress="194.68.27.149" AND destinationport=13106 OR destinationaddress="194.68.27.176" AND destinationport=6460 OR destinationaddress="37.143.128.223" AND destinationport=16223 OR destinationaddress="31.40.212.130" AND destinationport=7225 OR destinationaddress="198.244.207.203" AND destinationport=2076)
index=activity AND rg_functionality="Microsoft Windows" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="162.252.175.163" AND sourceport=28693 OR sourceaddress="162.252.175.90" AND sourceport=845 OR sourceaddress="162.252.175.109" AND sourceport=28330 OR sourceaddress="151.236.20.39" AND sourceport=5524 OR sourceaddress="158.255.208.140" AND sourceport=86 OR sourceaddress="194.68.27.149" AND sourceport=13106 OR sourceaddress="194.68.27.176" AND sourceport=6460 OR sourceaddress="37.143.128.223" AND sourceport=16223 OR sourceaddress="31.40.212.130" AND sourceport=7225 OR sourceaddress="198.244.207.203" AND sourceport=2076)
index=activity AND rg_functionality="Microsoft Windows" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="162.252.175.163" AND sourceport=28693 OR translatedipaddress="162.252.175.90" AND sourceport=845 OR translatedipaddress="162.252.175.109" AND sourceport=28330 OR translatedipaddress="151.236.20.39" AND sourceport=5524 OR translatedipaddress="158.255.208.140" AND sourceport=86 OR translatedipaddress="194.68.27.149" AND sourceport=13106 OR translatedipaddress="194.68.27.176" AND sourceport=6460 OR translatedipaddress="37.143.128.223" AND sourceport=16223 OR translatedipaddress="31.40.212.130" AND sourceport=7225 OR translatedipaddress="198.244.207.203" AND sourceport=2076)
index=activity AND rg_functionality="Microsoft Windows" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND destinationport=28693 OR destinationtranslatedaddress="162.252.175.90" AND destinationport=845 OR destinationtranslatedaddress="162.252.175.109" AND destinationport=28330 OR destinationtranslatedaddress="151.236.20.39" AND destinationport=5524 OR destinationtranslatedaddress="158.255.208.140" AND destinationport=86 OR destinationtranslatedaddress="194.68.27.149" AND destinationport=13106 OR destinationtranslatedaddress="194.68.27.176" AND destinationport=6460 OR destinationtranslatedaddress="37.143.128.223" AND destinationport=16223 OR destinationtranslatedaddress="31.40.212.130" AND destinationport=7225 OR destinationtranslatedaddress="198.244.207.203" AND destinationport=2076)
index=activity AND rg_functionality="Microsoft Windows" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND destinationtranslatedport=28693 OR destinationtranslatedaddress="162.252.175.90" AND destinationtranslatedport=845 OR destinationtranslatedaddress="162.252.175.109" AND destinationtranslatedport=28330 OR destinationtranslatedaddress="151.236.20.39" AND destinationtranslatedport=5524 OR destinationtranslatedaddress="158.255.208.140" AND destinationtranslatedport=86 OR destinationtranslatedaddress="194.68.27.149" AND destinationtranslatedport=13106 OR destinationtranslatedaddress="194.68.27.176" AND destinationtranslatedport=6460 OR destinationtranslatedaddress="37.143.128.223" AND destinationtranslatedport=16223 OR destinationtranslatedaddress="31.40.212.130" AND destinationtranslatedport=7225 OR destinationtranslatedaddress="198.244.207.203" AND destinationtranslatedport=2076)
index=activity AND rg_functionality="Microsoft Windows" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND translatedport=28693 OR destinationtranslatedaddress="162.252.175.90" AND translatedport=845 OR destinationtranslatedaddress="162.252.175.109" AND translatedport=28330 OR destinationtranslatedaddress="151.236.20.39" AND translatedport=5524 OR destinationtranslatedaddress="158.255.208.140" AND translatedport=86 OR destinationtranslatedaddress="194.68.27.149" AND translatedport=13106 OR destinationtranslatedaddress="194.68.27.176" AND translatedport=6460 OR destinationtranslatedaddress="37.143.128.223" AND translatedport=16223 OR destinationtranslatedaddress="31.40.212.130" AND translatedport=7225 OR destinationtranslatedaddress="198.244.207.203" AND translatedport=2076)
index=activity AND rg_functionality="Microsoft Windows" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="208.115.230.243" AND destinationport=16697 OR destinationaddress="185.126.239.207" AND destinationport=26630 OR destinationaddress="213.183.57.174" AND destinationport=12517 OR destinationaddress="213.183.57.72" AND destinationport=12517 OR destinationaddress="213.183.56.201" AND destinationport=12517 OR destinationaddress="95.164.45.27" AND destinationport=17426 OR destinationaddress="45.120.178.161" AND destinationport=11013 OR destinationaddress="176.120.74.3" AND destinationport=17268 OR destinationaddress="92.243.64.184" AND destinationport=17146 OR destinationaddress="92.243.64.36" AND destinationport=17146)
index=activity AND rg_functionality="Microsoft Windows" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="208.115.230.243" AND sourceport=16697 OR sourceaddress="185.126.239.207" AND sourceport=26630 OR sourceaddress="213.183.57.174" AND sourceport=12517 OR sourceaddress="213.183.57.72" AND sourceport=12517 OR sourceaddress="213.183.56.201" AND sourceport=12517 OR sourceaddress="95.164.45.27" AND sourceport=17426 OR sourceaddress="45.120.178.161" AND sourceport=11013 OR sourceaddress="176.120.74.3" AND sourceport=17268 OR sourceaddress="92.243.64.184" AND sourceport=17146 OR sourceaddress="92.243.64.36" AND sourceport=17146)
index=activity AND rg_functionality="Microsoft Windows" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="208.115.230.243" AND sourceport=16697 OR translatedipaddress="185.126.239.207" AND sourceport=26630 OR translatedipaddress="213.183.57.174" AND sourceport=12517 OR translatedipaddress="213.183.57.72" AND sourceport=12517 OR translatedipaddress="213.183.56.201" AND sourceport=12517 OR translatedipaddress="95.164.45.27" AND sourceport=17426 OR translatedipaddress="45.120.178.161" AND sourceport=11013 OR translatedipaddress="176.120.74.3" AND sourceport=17268 OR translatedipaddress="92.243.64.184" AND sourceport=17146 OR translatedipaddress="92.243.64.36" AND sourceport=17146)
index=activity AND rg_functionality="Microsoft Windows" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND destinationport=16697 OR destinationtranslatedaddress="185.126.239.207" AND destinationport=26630 OR destinationtranslatedaddress="213.183.57.174" AND destinationport=12517 OR destinationtranslatedaddress="213.183.57.72" AND destinationport=12517 OR destinationtranslatedaddress="213.183.56.201" AND destinationport=12517 OR destinationtranslatedaddress="95.164.45.27" AND destinationport=17426 OR destinationtranslatedaddress="45.120.178.161" AND destinationport=11013 OR destinationtranslatedaddress="176.120.74.3" AND destinationport=17268 OR destinationtranslatedaddress="92.243.64.184" AND destinationport=17146 OR destinationtranslatedaddress="92.243.64.36" AND destinationport=17146)
index=activity AND rg_functionality="Microsoft Windows" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND destinationtranslatedport=16697 OR destinationtranslatedaddress="185.126.239.207" AND destinationtranslatedport=26630 OR destinationtranslatedaddress="213.183.57.174" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="213.183.57.72" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="213.183.56.201" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="95.164.45.27" AND destinationtranslatedport=17426 OR destinationtranslatedaddress="45.120.178.161" AND destinationtranslatedport=11013 OR destinationtranslatedaddress="176.120.74.3" AND destinationtranslatedport=17268 OR destinationtranslatedaddress="92.243.64.184" AND destinationtranslatedport=17146 OR destinationtranslatedaddress="92.243.64.36" AND destinationtranslatedport=17146)
index=activity AND rg_functionality="Microsoft Windows" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND translatedport=16697 OR destinationtranslatedaddress="185.126.239.207" AND translatedport=26630 OR destinationtranslatedaddress="213.183.57.174" AND translatedport=12517 OR destinationtranslatedaddress="213.183.57.72" AND translatedport=12517 OR destinationtranslatedaddress="213.183.56.201" AND translatedport=12517 OR destinationtranslatedaddress="95.164.45.27" AND translatedport=17426 OR destinationtranslatedaddress="45.120.178.161" AND translatedport=11013 OR destinationtranslatedaddress="176.120.74.3" AND translatedport=17268 OR destinationtranslatedaddress="92.243.64.184" AND translatedport=17146 OR destinationtranslatedaddress="92.243.64.36" AND translatedport=17146)
index=activity AND rg_functionality="Microsoft Windows" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="89.31.120.126" AND destinationport=11578 OR destinationaddress="91.132.93.33" AND destinationport=11578 OR destinationaddress="91.132.95.28" AND destinationport=8773 OR destinationaddress="91.132.95.204" AND destinationport=8773 OR destinationaddress="91.132.95.135" AND destinationport=8773 OR destinationaddress="194.233.174.22" AND destinationport=45358)
index=activity AND rg_functionality="Microsoft Windows" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="89.31.120.126" AND sourceport=11578 OR sourceaddress="91.132.93.33" AND sourceport=11578 OR sourceaddress="91.132.95.28" AND sourceport=8773 OR sourceaddress="91.132.95.204" AND sourceport=8773 OR sourceaddress="91.132.95.135" AND sourceport=8773 OR sourceaddress="194.233.174.22" AND sourceport=45358)
index=activity AND rg_functionality="Microsoft Windows" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="89.31.120.126" AND sourceport=11578 OR translatedipaddress="91.132.93.33" AND sourceport=11578 OR translatedipaddress="91.132.95.28" AND sourceport=8773 OR translatedipaddress="91.132.95.204" AND sourceport=8773 OR translatedipaddress="91.132.95.135" AND sourceport=8773 OR translatedipaddress="194.233.174.22" AND sourceport=45358)
index=activity AND rg_functionality="Microsoft Windows" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND destinationport=11578 OR destinationtranslatedaddress="91.132.93.33" AND destinationport=11578 OR destinationtranslatedaddress="91.132.95.28" AND destinationport=8773 OR destinationtranslatedaddress="91.132.95.204" AND destinationport=8773 OR destinationtranslatedaddress="91.132.95.135" AND destinationport=8773 OR destinationtranslatedaddress="194.233.174.22" AND destinationport=45358)
index=activity AND rg_functionality="Microsoft Windows" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND destinationtranslatedport=11578 OR destinationtranslatedaddress="91.132.93.33" AND destinationtranslatedport=11578 OR destinationtranslatedaddress="91.132.95.28" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="91.132.95.204" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="91.132.95.135" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="194.233.174.22" AND destinationtranslatedport=45358)
index=activity AND rg_functionality="Microsoft Windows" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND translatedport=11578 OR destinationtranslatedaddress="91.132.93.33" AND translatedport=11578 OR destinationtranslatedaddress="91.132.95.28" AND translatedport=8773 OR destinationtranslatedaddress="91.132.95.204" AND translatedport=8773 OR destinationtranslatedaddress="91.132.95.135" AND translatedport=8773 OR destinationtranslatedaddress="194.233.174.22" AND translatedport=45358)
index=activity AND rg_functionality="Cloud Services / Applications" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="158.255.212.173" AND destinationport=10862 OR destinationaddress="151.236.25.126" AND destinationport=11331 OR destinationaddress="158.255.215.49" AND destinationport=23079 OR destinationaddress="185.26.239.98" AND destinationport=11076 OR destinationaddress="151.236.25.10" AND destinationport=7205 OR destinationaddress="37.235.53.217" AND destinationport=1358 OR destinationaddress="151.236.23.232" AND destinationport=763 OR destinationaddress="37.235.56.204" AND destinationport=24239 OR destinationaddress="162.252.175.122" AND destinationport=4126 OR destinationaddress="162.252.175.136" AND destinationport=11077)
index=activity AND rg_functionality="Cloud Services / Applications" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="158.255.212.173" AND sourceport=10862 OR sourceaddress="151.236.25.126" AND sourceport=11331 OR sourceaddress="158.255.215.49" AND sourceport=23079 OR sourceaddress="185.26.239.98" AND sourceport=11076 OR sourceaddress="151.236.25.10" AND sourceport=7205 OR sourceaddress="37.235.53.217" AND sourceport=1358 OR sourceaddress="151.236.23.232" AND sourceport=763 OR sourceaddress="37.235.56.204" AND sourceport=24239 OR sourceaddress="162.252.175.122" AND sourceport=4126 OR sourceaddress="162.252.175.136" AND sourceport=11077)
index=activity AND rg_functionality="Cloud Services / Applications" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="158.255.212.173" AND sourceport=10862 OR translatedipaddress="151.236.25.126" AND sourceport=11331 OR translatedipaddress="158.255.215.49" AND sourceport=23079 OR translatedipaddress="185.26.239.98" AND sourceport=11076 OR translatedipaddress="151.236.25.10" AND sourceport=7205 OR translatedipaddress="37.235.53.217" AND sourceport=1358 OR translatedipaddress="151.236.23.232" AND sourceport=763 OR translatedipaddress="37.235.56.204" AND sourceport=24239 OR translatedipaddress="162.252.175.122" AND sourceport=4126 OR translatedipaddress="162.252.175.136" AND sourceport=11077)
index=activity AND rg_functionality="Cloud Services / Applications" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND destinationport=10862 OR destinationtranslatedaddress="151.236.25.126" AND destinationport=11331 OR destinationtranslatedaddress="158.255.215.49" AND destinationport=23079 OR destinationtranslatedaddress="185.26.239.98" AND destinationport=11076 OR destinationtranslatedaddress="151.236.25.10" AND destinationport=7205 OR destinationtranslatedaddress="37.235.53.217" AND destinationport=1358 OR destinationtranslatedaddress="151.236.23.232" AND destinationport=763 OR destinationtranslatedaddress="37.235.56.204" AND destinationport=24239 OR destinationtranslatedaddress="162.252.175.122" AND destinationport=4126 OR destinationtranslatedaddress="162.252.175.136" AND destinationport=11077)
index=activity AND rg_functionality="Cloud Services / Applications" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND destinationtranslatedport=10862 OR destinationtranslatedaddress="151.236.25.126" AND destinationtranslatedport=11331 OR destinationtranslatedaddress="158.255.215.49" AND destinationtranslatedport=23079 OR destinationtranslatedaddress="185.26.239.98" AND destinationtranslatedport=11076 OR destinationtranslatedaddress="151.236.25.10" AND destinationtranslatedport=7205 OR destinationtranslatedaddress="37.235.53.217" AND destinationtranslatedport=1358 OR destinationtranslatedaddress="151.236.23.232" AND destinationtranslatedport=763 OR destinationtranslatedaddress="37.235.56.204" AND destinationtranslatedport=24239 OR destinationtranslatedaddress="162.252.175.122" AND destinationtranslatedport=4126 OR destinationtranslatedaddress="162.252.175.136" AND destinationtranslatedport=11077)
index=activity AND rg_functionality="Cloud Services / Applications" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND translatedport=10862 OR destinationtranslatedaddress="151.236.25.126" AND translatedport=11331 OR destinationtranslatedaddress="158.255.215.49" AND translatedport=23079 OR destinationtranslatedaddress="185.26.239.98" AND translatedport=11076 OR destinationtranslatedaddress="151.236.25.10" AND translatedport=7205 OR destinationtranslatedaddress="37.235.53.217" AND translatedport=1358 OR destinationtranslatedaddress="151.236.23.232" AND translatedport=763 OR destinationtranslatedaddress="37.235.56.204" AND translatedport=24239 OR destinationtranslatedaddress="162.252.175.122" AND translatedport=4126 OR destinationtranslatedaddress="162.252.175.136" AND translatedport=11077)
index=activity AND rg_functionality="Cloud Services / Applications" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="162.252.175.163" AND destinationport=28693 OR destinationaddress="162.252.175.90" AND destinationport=845 OR destinationaddress="162.252.175.109" AND destinationport=28330 OR destinationaddress="151.236.20.39" AND destinationport=5524 OR destinationaddress="158.255.208.140" AND destinationport=86 OR destinationaddress="194.68.27.149" AND destinationport=13106 OR destinationaddress="194.68.27.176" AND destinationport=6460 OR destinationaddress="37.143.128.223" AND destinationport=16223 OR destinationaddress="31.40.212.130" AND destinationport=7225 OR destinationaddress="198.244.207.203" AND destinationport=2076)
index=activity AND rg_functionality="Cloud Services / Applications" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="162.252.175.163" AND sourceport=28693 OR sourceaddress="162.252.175.90" AND sourceport=845 OR sourceaddress="162.252.175.109" AND sourceport=28330 OR sourceaddress="151.236.20.39" AND sourceport=5524 OR sourceaddress="158.255.208.140" AND sourceport=86 OR sourceaddress="194.68.27.149" AND sourceport=13106 OR sourceaddress="194.68.27.176" AND sourceport=6460 OR sourceaddress="37.143.128.223" AND sourceport=16223 OR sourceaddress="31.40.212.130" AND sourceport=7225 OR sourceaddress="198.244.207.203" AND sourceport=2076)
index=activity AND rg_functionality="Cloud Services / Applications" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="162.252.175.163" AND sourceport=28693 OR translatedipaddress="162.252.175.90" AND sourceport=845 OR translatedipaddress="162.252.175.109" AND sourceport=28330 OR translatedipaddress="151.236.20.39" AND sourceport=5524 OR translatedipaddress="158.255.208.140" AND sourceport=86 OR translatedipaddress="194.68.27.149" AND sourceport=13106 OR translatedipaddress="194.68.27.176" AND sourceport=6460 OR translatedipaddress="37.143.128.223" AND sourceport=16223 OR translatedipaddress="31.40.212.130" AND sourceport=7225 OR translatedipaddress="198.244.207.203" AND sourceport=2076)
index=activity AND rg_functionality="Cloud Services / Applications" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND destinationport=28693 OR destinationtranslatedaddress="162.252.175.90" AND destinationport=845 OR destinationtranslatedaddress="162.252.175.109" AND destinationport=28330 OR destinationtranslatedaddress="151.236.20.39" AND destinationport=5524 OR destinationtranslatedaddress="158.255.208.140" AND destinationport=86 OR destinationtranslatedaddress="194.68.27.149" AND destinationport=13106 OR destinationtranslatedaddress="194.68.27.176" AND destinationport=6460 OR destinationtranslatedaddress="37.143.128.223" AND destinationport=16223 OR destinationtranslatedaddress="31.40.212.130" AND destinationport=7225 OR destinationtranslatedaddress="198.244.207.203" AND destinationport=2076)
index=activity AND rg_functionality="Cloud Services / Applications" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND destinationtranslatedport=28693 OR destinationtranslatedaddress="162.252.175.90" AND destinationtranslatedport=845 OR destinationtranslatedaddress="162.252.175.109" AND destinationtranslatedport=28330 OR destinationtranslatedaddress="151.236.20.39" AND destinationtranslatedport=5524 OR destinationtranslatedaddress="158.255.208.140" AND destinationtranslatedport=86 OR destinationtranslatedaddress="194.68.27.149" AND destinationtranslatedport=13106 OR destinationtranslatedaddress="194.68.27.176" AND destinationtranslatedport=6460 OR destinationtranslatedaddress="37.143.128.223" AND destinationtranslatedport=16223 OR destinationtranslatedaddress="31.40.212.130" AND destinationtranslatedport=7225 OR destinationtranslatedaddress="198.244.207.203" AND destinationtranslatedport=2076)
index=activity AND rg_functionality="Cloud Services / Applications" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND translatedport=28693 OR destinationtranslatedaddress="162.252.175.90" AND translatedport=845 OR destinationtranslatedaddress="162.252.175.109" AND translatedport=28330 OR destinationtranslatedaddress="151.236.20.39" AND translatedport=5524 OR destinationtranslatedaddress="158.255.208.140" AND translatedport=86 OR destinationtranslatedaddress="194.68.27.149" AND translatedport=13106 OR destinationtranslatedaddress="194.68.27.176" AND translatedport=6460 OR destinationtranslatedaddress="37.143.128.223" AND translatedport=16223 OR destinationtranslatedaddress="31.40.212.130" AND translatedport=7225 OR destinationtranslatedaddress="198.244.207.203" AND translatedport=2076)
index=activity AND rg_functionality="Cloud Services / Applications" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="208.115.230.243" AND destinationport=16697 OR destinationaddress="185.126.239.207" AND destinationport=26630 OR destinationaddress="213.183.57.174" AND destinationport=12517 OR destinationaddress="213.183.57.72" AND destinationport=12517 OR destinationaddress="213.183.56.201" AND destinationport=12517 OR destinationaddress="95.164.45.27" AND destinationport=17426 OR destinationaddress="45.120.178.161" AND destinationport=11013 OR destinationaddress="176.120.74.3" AND destinationport=17268 OR destinationaddress="92.243.64.184" AND destinationport=17146 OR destinationaddress="92.243.64.36" AND destinationport=17146)
index=activity AND rg_functionality="Cloud Services / Applications" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="208.115.230.243" AND sourceport=16697 OR sourceaddress="185.126.239.207" AND sourceport=26630 OR sourceaddress="213.183.57.174" AND sourceport=12517 OR sourceaddress="213.183.57.72" AND sourceport=12517 OR sourceaddress="213.183.56.201" AND sourceport=12517 OR sourceaddress="95.164.45.27" AND sourceport=17426 OR sourceaddress="45.120.178.161" AND sourceport=11013 OR sourceaddress="176.120.74.3" AND sourceport=17268 OR sourceaddress="92.243.64.184" AND sourceport=17146 OR sourceaddress="92.243.64.36" AND sourceport=17146)
index=activity AND rg_functionality="Cloud Services / Applications" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="208.115.230.243" AND sourceport=16697 OR translatedipaddress="185.126.239.207" AND sourceport=26630 OR translatedipaddress="213.183.57.174" AND sourceport=12517 OR translatedipaddress="213.183.57.72" AND sourceport=12517 OR translatedipaddress="213.183.56.201" AND sourceport=12517 OR translatedipaddress="95.164.45.27" AND sourceport=17426 OR translatedipaddress="45.120.178.161" AND sourceport=11013 OR translatedipaddress="176.120.74.3" AND sourceport=17268 OR translatedipaddress="92.243.64.184" AND sourceport=17146 OR translatedipaddress="92.243.64.36" AND sourceport=17146)
index=activity AND rg_functionality="Cloud Services / Applications" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND destinationport=16697 OR destinationtranslatedaddress="185.126.239.207" AND destinationport=26630 OR destinationtranslatedaddress="213.183.57.174" AND destinationport=12517 OR destinationtranslatedaddress="213.183.57.72" AND destinationport=12517 OR destinationtranslatedaddress="213.183.56.201" AND destinationport=12517 OR destinationtranslatedaddress="95.164.45.27" AND destinationport=17426 OR destinationtranslatedaddress="45.120.178.161" AND destinationport=11013 OR destinationtranslatedaddress="176.120.74.3" AND destinationport=17268 OR destinationtranslatedaddress="92.243.64.184" AND destinationport=17146 OR destinationtranslatedaddress="92.243.64.36" AND destinationport=17146)
index=activity AND rg_functionality="Cloud Services / Applications" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND destinationtranslatedport=16697 OR destinationtranslatedaddress="185.126.239.207" AND destinationtranslatedport=26630 OR destinationtranslatedaddress="213.183.57.174" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="213.183.57.72" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="213.183.56.201" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="95.164.45.27" AND destinationtranslatedport=17426 OR destinationtranslatedaddress="45.120.178.161" AND destinationtranslatedport=11013 OR destinationtranslatedaddress="176.120.74.3" AND destinationtranslatedport=17268 OR destinationtranslatedaddress="92.243.64.184" AND destinationtranslatedport=17146 OR destinationtranslatedaddress="92.243.64.36" AND destinationtranslatedport=17146)
index=activity AND rg_functionality="Cloud Services / Applications" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND translatedport=16697 OR destinationtranslatedaddress="185.126.239.207" AND translatedport=26630 OR destinationtranslatedaddress="213.183.57.174" AND translatedport=12517 OR destinationtranslatedaddress="213.183.57.72" AND translatedport=12517 OR destinationtranslatedaddress="213.183.56.201" AND translatedport=12517 OR destinationtranslatedaddress="95.164.45.27" AND translatedport=17426 OR destinationtranslatedaddress="45.120.178.161" AND translatedport=11013 OR destinationtranslatedaddress="176.120.74.3" AND translatedport=17268 OR destinationtranslatedaddress="92.243.64.184" AND translatedport=17146 OR destinationtranslatedaddress="92.243.64.36" AND translatedport=17146)
index=activity AND rg_functionality="Cloud Services / Applications" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="89.31.120.126" AND destinationport=11578 OR destinationaddress="91.132.93.33" AND destinationport=11578 OR destinationaddress="91.132.95.28" AND destinationport=8773 OR destinationaddress="91.132.95.204" AND destinationport=8773 OR destinationaddress="91.132.95.135" AND destinationport=8773 OR destinationaddress="194.233.174.22" AND destinationport=45358)
index=activity AND rg_functionality="Cloud Services / Applications" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="89.31.120.126" AND sourceport=11578 OR sourceaddress="91.132.93.33" AND sourceport=11578 OR sourceaddress="91.132.95.28" AND sourceport=8773 OR sourceaddress="91.132.95.204" AND sourceport=8773 OR sourceaddress="91.132.95.135" AND sourceport=8773 OR sourceaddress="194.233.174.22" AND sourceport=45358)
index=activity AND rg_functionality="Cloud Services / Applications" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="89.31.120.126" AND sourceport=11578 OR translatedipaddress="91.132.93.33" AND sourceport=11578 OR translatedipaddress="91.132.95.28" AND sourceport=8773 OR translatedipaddress="91.132.95.204" AND sourceport=8773 OR translatedipaddress="91.132.95.135" AND sourceport=8773 OR translatedipaddress="194.233.174.22" AND sourceport=45358)
index=activity AND rg_functionality="Cloud Services / Applications" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND destinationport=11578 OR destinationtranslatedaddress="91.132.93.33" AND destinationport=11578 OR destinationtranslatedaddress="91.132.95.28" AND destinationport=8773 OR destinationtranslatedaddress="91.132.95.204" AND destinationport=8773 OR destinationtranslatedaddress="91.132.95.135" AND destinationport=8773 OR destinationtranslatedaddress="194.233.174.22" AND destinationport=45358)
index=activity AND rg_functionality="Cloud Services / Applications" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND destinationtranslatedport=11578 OR destinationtranslatedaddress="91.132.93.33" AND destinationtranslatedport=11578 OR destinationtranslatedaddress="91.132.95.28" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="91.132.95.204" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="91.132.95.135" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="194.233.174.22" AND destinationtranslatedport=45358)
index=activity AND rg_functionality="Cloud Services / Applications" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND translatedport=11578 OR destinationtranslatedaddress="91.132.93.33" AND translatedport=11578 OR destinationtranslatedaddress="91.132.95.28" AND translatedport=8773 OR destinationtranslatedaddress="91.132.95.204" AND translatedport=8773 OR destinationtranslatedaddress="91.132.95.135" AND translatedport=8773 OR destinationtranslatedaddress="194.233.174.22" AND translatedport=45358)
index=activity AND rg_functionality="Cloud Application Audit" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="158.255.212.173" AND destinationport=10862 OR destinationaddress="151.236.25.126" AND destinationport=11331 OR destinationaddress="158.255.215.49" AND destinationport=23079 OR destinationaddress="185.26.239.98" AND destinationport=11076 OR destinationaddress="151.236.25.10" AND destinationport=7205 OR destinationaddress="37.235.53.217" AND destinationport=1358 OR destinationaddress="151.236.23.232" AND destinationport=763 OR destinationaddress="37.235.56.204" AND destinationport=24239 OR destinationaddress="162.252.175.122" AND destinationport=4126 OR destinationaddress="162.252.175.136" AND destinationport=11077)
index=activity AND rg_functionality="Cloud Application Audit" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="158.255.212.173" AND sourceport=10862 OR sourceaddress="151.236.25.126" AND sourceport=11331 OR sourceaddress="158.255.215.49" AND sourceport=23079 OR sourceaddress="185.26.239.98" AND sourceport=11076 OR sourceaddress="151.236.25.10" AND sourceport=7205 OR sourceaddress="37.235.53.217" AND sourceport=1358 OR sourceaddress="151.236.23.232" AND sourceport=763 OR sourceaddress="37.235.56.204" AND sourceport=24239 OR sourceaddress="162.252.175.122" AND sourceport=4126 OR sourceaddress="162.252.175.136" AND sourceport=11077)
index=activity AND rg_functionality="Cloud Application Audit" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="158.255.212.173" AND sourceport=10862 OR translatedipaddress="151.236.25.126" AND sourceport=11331 OR translatedipaddress="158.255.215.49" AND sourceport=23079 OR translatedipaddress="185.26.239.98" AND sourceport=11076 OR translatedipaddress="151.236.25.10" AND sourceport=7205 OR translatedipaddress="37.235.53.217" AND sourceport=1358 OR translatedipaddress="151.236.23.232" AND sourceport=763 OR translatedipaddress="37.235.56.204" AND sourceport=24239 OR translatedipaddress="162.252.175.122" AND sourceport=4126 OR translatedipaddress="162.252.175.136" AND sourceport=11077)
index=activity AND rg_functionality="Cloud Application Audit" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND destinationport=10862 OR destinationtranslatedaddress="151.236.25.126" AND destinationport=11331 OR destinationtranslatedaddress="158.255.215.49" AND destinationport=23079 OR destinationtranslatedaddress="185.26.239.98" AND destinationport=11076 OR destinationtranslatedaddress="151.236.25.10" AND destinationport=7205 OR destinationtranslatedaddress="37.235.53.217" AND destinationport=1358 OR destinationtranslatedaddress="151.236.23.232" AND destinationport=763 OR destinationtranslatedaddress="37.235.56.204" AND destinationport=24239 OR destinationtranslatedaddress="162.252.175.122" AND destinationport=4126 OR destinationtranslatedaddress="162.252.175.136" AND destinationport=11077)
index=activity AND rg_functionality="Cloud Application Audit" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND destinationtranslatedport=10862 OR destinationtranslatedaddress="151.236.25.126" AND destinationtranslatedport=11331 OR destinationtranslatedaddress="158.255.215.49" AND destinationtranslatedport=23079 OR destinationtranslatedaddress="185.26.239.98" AND destinationtranslatedport=11076 OR destinationtranslatedaddress="151.236.25.10" AND destinationtranslatedport=7205 OR destinationtranslatedaddress="37.235.53.217" AND destinationtranslatedport=1358 OR destinationtranslatedaddress="151.236.23.232" AND destinationtranslatedport=763 OR destinationtranslatedaddress="37.235.56.204" AND destinationtranslatedport=24239 OR destinationtranslatedaddress="162.252.175.122" AND destinationtranslatedport=4126 OR destinationtranslatedaddress="162.252.175.136" AND destinationtranslatedport=11077)
index=activity AND rg_functionality="Cloud Application Audit" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND translatedport=10862 OR destinationtranslatedaddress="151.236.25.126" AND translatedport=11331 OR destinationtranslatedaddress="158.255.215.49" AND translatedport=23079 OR destinationtranslatedaddress="185.26.239.98" AND translatedport=11076 OR destinationtranslatedaddress="151.236.25.10" AND translatedport=7205 OR destinationtranslatedaddress="37.235.53.217" AND translatedport=1358 OR destinationtranslatedaddress="151.236.23.232" AND translatedport=763 OR destinationtranslatedaddress="37.235.56.204" AND translatedport=24239 OR destinationtranslatedaddress="162.252.175.122" AND translatedport=4126 OR destinationtranslatedaddress="162.252.175.136" AND translatedport=11077)
index=activity AND rg_functionality="Cloud Application Audit" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="162.252.175.163" AND destinationport=28693 OR destinationaddress="162.252.175.90" AND destinationport=845 OR destinationaddress="162.252.175.109" AND destinationport=28330 OR destinationaddress="151.236.20.39" AND destinationport=5524 OR destinationaddress="158.255.208.140" AND destinationport=86 OR destinationaddress="194.68.27.149" AND destinationport=13106 OR destinationaddress="194.68.27.176" AND destinationport=6460 OR destinationaddress="37.143.128.223" AND destinationport=16223 OR destinationaddress="31.40.212.130" AND destinationport=7225 OR destinationaddress="198.244.207.203" AND destinationport=2076)
index=activity AND rg_functionality="Cloud Application Audit" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="162.252.175.163" AND sourceport=28693 OR sourceaddress="162.252.175.90" AND sourceport=845 OR sourceaddress="162.252.175.109" AND sourceport=28330 OR sourceaddress="151.236.20.39" AND sourceport=5524 OR sourceaddress="158.255.208.140" AND sourceport=86 OR sourceaddress="194.68.27.149" AND sourceport=13106 OR sourceaddress="194.68.27.176" AND sourceport=6460 OR sourceaddress="37.143.128.223" AND sourceport=16223 OR sourceaddress="31.40.212.130" AND sourceport=7225 OR sourceaddress="198.244.207.203" AND sourceport=2076)
index=activity AND rg_functionality="Cloud Application Audit" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="162.252.175.163" AND sourceport=28693 OR translatedipaddress="162.252.175.90" AND sourceport=845 OR translatedipaddress="162.252.175.109" AND sourceport=28330 OR translatedipaddress="151.236.20.39" AND sourceport=5524 OR translatedipaddress="158.255.208.140" AND sourceport=86 OR translatedipaddress="194.68.27.149" AND sourceport=13106 OR translatedipaddress="194.68.27.176" AND sourceport=6460 OR translatedipaddress="37.143.128.223" AND sourceport=16223 OR translatedipaddress="31.40.212.130" AND sourceport=7225 OR translatedipaddress="198.244.207.203" AND sourceport=2076)
index=activity AND rg_functionality="Cloud Application Audit" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND destinationport=28693 OR destinationtranslatedaddress="162.252.175.90" AND destinationport=845 OR destinationtranslatedaddress="162.252.175.109" AND destinationport=28330 OR destinationtranslatedaddress="151.236.20.39" AND destinationport=5524 OR destinationtranslatedaddress="158.255.208.140" AND destinationport=86 OR destinationtranslatedaddress="194.68.27.149" AND destinationport=13106 OR destinationtranslatedaddress="194.68.27.176" AND destinationport=6460 OR destinationtranslatedaddress="37.143.128.223" AND destinationport=16223 OR destinationtranslatedaddress="31.40.212.130" AND destinationport=7225 OR destinationtranslatedaddress="198.244.207.203" AND destinationport=2076)
index=activity AND rg_functionality="Cloud Application Audit" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND destinationtranslatedport=28693 OR destinationtranslatedaddress="162.252.175.90" AND destinationtranslatedport=845 OR destinationtranslatedaddress="162.252.175.109" AND destinationtranslatedport=28330 OR destinationtranslatedaddress="151.236.20.39" AND destinationtranslatedport=5524 OR destinationtranslatedaddress="158.255.208.140" AND destinationtranslatedport=86 OR destinationtranslatedaddress="194.68.27.149" AND destinationtranslatedport=13106 OR destinationtranslatedaddress="194.68.27.176" AND destinationtranslatedport=6460 OR destinationtranslatedaddress="37.143.128.223" AND destinationtranslatedport=16223 OR destinationtranslatedaddress="31.40.212.130" AND destinationtranslatedport=7225 OR destinationtranslatedaddress="198.244.207.203" AND destinationtranslatedport=2076)
index=activity AND rg_functionality="Cloud Application Audit" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND translatedport=28693 OR destinationtranslatedaddress="162.252.175.90" AND translatedport=845 OR destinationtranslatedaddress="162.252.175.109" AND translatedport=28330 OR destinationtranslatedaddress="151.236.20.39" AND translatedport=5524 OR destinationtranslatedaddress="158.255.208.140" AND translatedport=86 OR destinationtranslatedaddress="194.68.27.149" AND translatedport=13106 OR destinationtranslatedaddress="194.68.27.176" AND translatedport=6460 OR destinationtranslatedaddress="37.143.128.223" AND translatedport=16223 OR destinationtranslatedaddress="31.40.212.130" AND translatedport=7225 OR destinationtranslatedaddress="198.244.207.203" AND translatedport=2076)
index=activity AND rg_functionality="Cloud Application Audit" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="208.115.230.243" AND destinationport=16697 OR destinationaddress="185.126.239.207" AND destinationport=26630 OR destinationaddress="213.183.57.174" AND destinationport=12517 OR destinationaddress="213.183.57.72" AND destinationport=12517 OR destinationaddress="213.183.56.201" AND destinationport=12517 OR destinationaddress="95.164.45.27" AND destinationport=17426 OR destinationaddress="45.120.178.161" AND destinationport=11013 OR destinationaddress="176.120.74.3" AND destinationport=17268 OR destinationaddress="92.243.64.184" AND destinationport=17146 OR destinationaddress="92.243.64.36" AND destinationport=17146)
index=activity AND rg_functionality="Cloud Application Audit" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="208.115.230.243" AND sourceport=16697 OR sourceaddress="185.126.239.207" AND sourceport=26630 OR sourceaddress="213.183.57.174" AND sourceport=12517 OR sourceaddress="213.183.57.72" AND sourceport=12517 OR sourceaddress="213.183.56.201" AND sourceport=12517 OR sourceaddress="95.164.45.27" AND sourceport=17426 OR sourceaddress="45.120.178.161" AND sourceport=11013 OR sourceaddress="176.120.74.3" AND sourceport=17268 OR sourceaddress="92.243.64.184" AND sourceport=17146 OR sourceaddress="92.243.64.36" AND sourceport=17146)
index=activity AND rg_functionality="Cloud Application Audit" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="208.115.230.243" AND sourceport=16697 OR translatedipaddress="185.126.239.207" AND sourceport=26630 OR translatedipaddress="213.183.57.174" AND sourceport=12517 OR translatedipaddress="213.183.57.72" AND sourceport=12517 OR translatedipaddress="213.183.56.201" AND sourceport=12517 OR translatedipaddress="95.164.45.27" AND sourceport=17426 OR translatedipaddress="45.120.178.161" AND sourceport=11013 OR translatedipaddress="176.120.74.3" AND sourceport=17268 OR translatedipaddress="92.243.64.184" AND sourceport=17146 OR translatedipaddress="92.243.64.36" AND sourceport=17146)
index=activity AND rg_functionality="Cloud Application Audit" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND destinationport=16697 OR destinationtranslatedaddress="185.126.239.207" AND destinationport=26630 OR destinationtranslatedaddress="213.183.57.174" AND destinationport=12517 OR destinationtranslatedaddress="213.183.57.72" AND destinationport=12517 OR destinationtranslatedaddress="213.183.56.201" AND destinationport=12517 OR destinationtranslatedaddress="95.164.45.27" AND destinationport=17426 OR destinationtranslatedaddress="45.120.178.161" AND destinationport=11013 OR destinationtranslatedaddress="176.120.74.3" AND destinationport=17268 OR destinationtranslatedaddress="92.243.64.184" AND destinationport=17146 OR destinationtranslatedaddress="92.243.64.36" AND destinationport=17146)
index=activity AND rg_functionality="Cloud Application Audit" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND destinationtranslatedport=16697 OR destinationtranslatedaddress="185.126.239.207" AND destinationtranslatedport=26630 OR destinationtranslatedaddress="213.183.57.174" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="213.183.57.72" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="213.183.56.201" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="95.164.45.27" AND destinationtranslatedport=17426 OR destinationtranslatedaddress="45.120.178.161" AND destinationtranslatedport=11013 OR destinationtranslatedaddress="176.120.74.3" AND destinationtranslatedport=17268 OR destinationtranslatedaddress="92.243.64.184" AND destinationtranslatedport=17146 OR destinationtranslatedaddress="92.243.64.36" AND destinationtranslatedport=17146)
index=activity AND rg_functionality="Cloud Application Audit" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND translatedport=16697 OR destinationtranslatedaddress="185.126.239.207" AND translatedport=26630 OR destinationtranslatedaddress="213.183.57.174" AND translatedport=12517 OR destinationtranslatedaddress="213.183.57.72" AND translatedport=12517 OR destinationtranslatedaddress="213.183.56.201" AND translatedport=12517 OR destinationtranslatedaddress="95.164.45.27" AND translatedport=17426 OR destinationtranslatedaddress="45.120.178.161" AND translatedport=11013 OR destinationtranslatedaddress="176.120.74.3" AND translatedport=17268 OR destinationtranslatedaddress="92.243.64.184" AND translatedport=17146 OR destinationtranslatedaddress="92.243.64.36" AND translatedport=17146)
index=activity AND rg_functionality="Cloud Application Audit" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="89.31.120.126" AND destinationport=11578 OR destinationaddress="91.132.93.33" AND destinationport=11578 OR destinationaddress="91.132.95.28" AND destinationport=8773 OR destinationaddress="91.132.95.204" AND destinationport=8773 OR destinationaddress="91.132.95.135" AND destinationport=8773 OR destinationaddress="194.233.174.22" AND destinationport=45358)
index=activity AND rg_functionality="Cloud Application Audit" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="89.31.120.126" AND sourceport=11578 OR sourceaddress="91.132.93.33" AND sourceport=11578 OR sourceaddress="91.132.95.28" AND sourceport=8773 OR sourceaddress="91.132.95.204" AND sourceport=8773 OR sourceaddress="91.132.95.135" AND sourceport=8773 OR sourceaddress="194.233.174.22" AND sourceport=45358)
index=activity AND rg_functionality="Cloud Application Audit" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="89.31.120.126" AND sourceport=11578 OR translatedipaddress="91.132.93.33" AND sourceport=11578 OR translatedipaddress="91.132.95.28" AND sourceport=8773 OR translatedipaddress="91.132.95.204" AND sourceport=8773 OR translatedipaddress="91.132.95.135" AND sourceport=8773 OR translatedipaddress="194.233.174.22" AND sourceport=45358)
index=activity AND rg_functionality="Cloud Application Audit" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND destinationport=11578 OR destinationtranslatedaddress="91.132.93.33" AND destinationport=11578 OR destinationtranslatedaddress="91.132.95.28" AND destinationport=8773 OR destinationtranslatedaddress="91.132.95.204" AND destinationport=8773 OR destinationtranslatedaddress="91.132.95.135" AND destinationport=8773 OR destinationtranslatedaddress="194.233.174.22" AND destinationport=45358)
index=activity AND rg_functionality="Cloud Application Audit" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND destinationtranslatedport=11578 OR destinationtranslatedaddress="91.132.93.33" AND destinationtranslatedport=11578 OR destinationtranslatedaddress="91.132.95.28" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="91.132.95.204" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="91.132.95.135" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="194.233.174.22" AND destinationtranslatedport=45358)
index=activity AND rg_functionality="Cloud Application Audit" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND translatedport=11578 OR destinationtranslatedaddress="91.132.93.33" AND translatedport=11578 OR destinationtranslatedaddress="91.132.95.28" AND translatedport=8773 OR destinationtranslatedaddress="91.132.95.204" AND translatedport=8773 OR destinationtranslatedaddress="91.132.95.135" AND translatedport=8773 OR destinationtranslatedaddress="194.233.174.22" AND translatedport=45358)
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="158.255.212.173" AND destinationport=10862 OR destinationaddress="151.236.25.126" AND destinationport=11331 OR destinationaddress="158.255.215.49" AND destinationport=23079 OR destinationaddress="185.26.239.98" AND destinationport=11076 OR destinationaddress="151.236.25.10" AND destinationport=7205 OR destinationaddress="37.235.53.217" AND destinationport=1358 OR destinationaddress="151.236.23.232" AND destinationport=763 OR destinationaddress="37.235.56.204" AND destinationport=24239 OR destinationaddress="162.252.175.122" AND destinationport=4126 OR destinationaddress="162.252.175.136" AND destinationport=11077)
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="158.255.212.173" AND sourceport=10862 OR sourceaddress="151.236.25.126" AND sourceport=11331 OR sourceaddress="158.255.215.49" AND sourceport=23079 OR sourceaddress="185.26.239.98" AND sourceport=11076 OR sourceaddress="151.236.25.10" AND sourceport=7205 OR sourceaddress="37.235.53.217" AND sourceport=1358 OR sourceaddress="151.236.23.232" AND sourceport=763 OR sourceaddress="37.235.56.204" AND sourceport=24239 OR sourceaddress="162.252.175.122" AND sourceport=4126 OR sourceaddress="162.252.175.136" AND sourceport=11077)
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="158.255.212.173" AND sourceport=10862 OR translatedipaddress="151.236.25.126" AND sourceport=11331 OR translatedipaddress="158.255.215.49" AND sourceport=23079 OR translatedipaddress="185.26.239.98" AND sourceport=11076 OR translatedipaddress="151.236.25.10" AND sourceport=7205 OR translatedipaddress="37.235.53.217" AND sourceport=1358 OR translatedipaddress="151.236.23.232" AND sourceport=763 OR translatedipaddress="37.235.56.204" AND sourceport=24239 OR translatedipaddress="162.252.175.122" AND sourceport=4126 OR translatedipaddress="162.252.175.136" AND sourceport=11077)
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND destinationport=10862 OR destinationtranslatedaddress="151.236.25.126" AND destinationport=11331 OR destinationtranslatedaddress="158.255.215.49" AND destinationport=23079 OR destinationtranslatedaddress="185.26.239.98" AND destinationport=11076 OR destinationtranslatedaddress="151.236.25.10" AND destinationport=7205 OR destinationtranslatedaddress="37.235.53.217" AND destinationport=1358 OR destinationtranslatedaddress="151.236.23.232" AND destinationport=763 OR destinationtranslatedaddress="37.235.56.204" AND destinationport=24239 OR destinationtranslatedaddress="162.252.175.122" AND destinationport=4126 OR destinationtranslatedaddress="162.252.175.136" AND destinationport=11077)
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND destinationtranslatedport=10862 OR destinationtranslatedaddress="151.236.25.126" AND destinationtranslatedport=11331 OR destinationtranslatedaddress="158.255.215.49" AND destinationtranslatedport=23079 OR destinationtranslatedaddress="185.26.239.98" AND destinationtranslatedport=11076 OR destinationtranslatedaddress="151.236.25.10" AND destinationtranslatedport=7205 OR destinationtranslatedaddress="37.235.53.217" AND destinationtranslatedport=1358 OR destinationtranslatedaddress="151.236.23.232" AND destinationtranslatedport=763 OR destinationtranslatedaddress="37.235.56.204" AND destinationtranslatedport=24239 OR destinationtranslatedaddress="162.252.175.122" AND destinationtranslatedport=4126 OR destinationtranslatedaddress="162.252.175.136" AND destinationtranslatedport=11077)
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND translatedport=10862 OR destinationtranslatedaddress="151.236.25.126" AND translatedport=11331 OR destinationtranslatedaddress="158.255.215.49" AND translatedport=23079 OR destinationtranslatedaddress="185.26.239.98" AND translatedport=11076 OR destinationtranslatedaddress="151.236.25.10" AND translatedport=7205 OR destinationtranslatedaddress="37.235.53.217" AND translatedport=1358 OR destinationtranslatedaddress="151.236.23.232" AND translatedport=763 OR destinationtranslatedaddress="37.235.56.204" AND translatedport=24239 OR destinationtranslatedaddress="162.252.175.122" AND translatedport=4126 OR destinationtranslatedaddress="162.252.175.136" AND translatedport=11077)
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="162.252.175.163" AND destinationport=28693 OR destinationaddress="162.252.175.90" AND destinationport=845 OR destinationaddress="162.252.175.109" AND destinationport=28330 OR destinationaddress="151.236.20.39" AND destinationport=5524 OR destinationaddress="158.255.208.140" AND destinationport=86 OR destinationaddress="194.68.27.149" AND destinationport=13106 OR destinationaddress="194.68.27.176" AND destinationport=6460 OR destinationaddress="37.143.128.223" AND destinationport=16223 OR destinationaddress="31.40.212.130" AND destinationport=7225 OR destinationaddress="198.244.207.203" AND destinationport=2076)
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="162.252.175.163" AND sourceport=28693 OR sourceaddress="162.252.175.90" AND sourceport=845 OR sourceaddress="162.252.175.109" AND sourceport=28330 OR sourceaddress="151.236.20.39" AND sourceport=5524 OR sourceaddress="158.255.208.140" AND sourceport=86 OR sourceaddress="194.68.27.149" AND sourceport=13106 OR sourceaddress="194.68.27.176" AND sourceport=6460 OR sourceaddress="37.143.128.223" AND sourceport=16223 OR sourceaddress="31.40.212.130" AND sourceport=7225 OR sourceaddress="198.244.207.203" AND sourceport=2076)
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="162.252.175.163" AND sourceport=28693 OR translatedipaddress="162.252.175.90" AND sourceport=845 OR translatedipaddress="162.252.175.109" AND sourceport=28330 OR translatedipaddress="151.236.20.39" AND sourceport=5524 OR translatedipaddress="158.255.208.140" AND sourceport=86 OR translatedipaddress="194.68.27.149" AND sourceport=13106 OR translatedipaddress="194.68.27.176" AND sourceport=6460 OR translatedipaddress="37.143.128.223" AND sourceport=16223 OR translatedipaddress="31.40.212.130" AND sourceport=7225 OR translatedipaddress="198.244.207.203" AND sourceport=2076)
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND destinationport=28693 OR destinationtranslatedaddress="162.252.175.90" AND destinationport=845 OR destinationtranslatedaddress="162.252.175.109" AND destinationport=28330 OR destinationtranslatedaddress="151.236.20.39" AND destinationport=5524 OR destinationtranslatedaddress="158.255.208.140" AND destinationport=86 OR destinationtranslatedaddress="194.68.27.149" AND destinationport=13106 OR destinationtranslatedaddress="194.68.27.176" AND destinationport=6460 OR destinationtranslatedaddress="37.143.128.223" AND destinationport=16223 OR destinationtranslatedaddress="31.40.212.130" AND destinationport=7225 OR destinationtranslatedaddress="198.244.207.203" AND destinationport=2076)
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND destinationtranslatedport=28693 OR destinationtranslatedaddress="162.252.175.90" AND destinationtranslatedport=845 OR destinationtranslatedaddress="162.252.175.109" AND destinationtranslatedport=28330 OR destinationtranslatedaddress="151.236.20.39" AND destinationtranslatedport=5524 OR destinationtranslatedaddress="158.255.208.140" AND destinationtranslatedport=86 OR destinationtranslatedaddress="194.68.27.149" AND destinationtranslatedport=13106 OR destinationtranslatedaddress="194.68.27.176" AND destinationtranslatedport=6460 OR destinationtranslatedaddress="37.143.128.223" AND destinationtranslatedport=16223 OR destinationtranslatedaddress="31.40.212.130" AND destinationtranslatedport=7225 OR destinationtranslatedaddress="198.244.207.203" AND destinationtranslatedport=2076)
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND translatedport=28693 OR destinationtranslatedaddress="162.252.175.90" AND translatedport=845 OR destinationtranslatedaddress="162.252.175.109" AND translatedport=28330 OR destinationtranslatedaddress="151.236.20.39" AND translatedport=5524 OR destinationtranslatedaddress="158.255.208.140" AND translatedport=86 OR destinationtranslatedaddress="194.68.27.149" AND translatedport=13106 OR destinationtranslatedaddress="194.68.27.176" AND translatedport=6460 OR destinationtranslatedaddress="37.143.128.223" AND translatedport=16223 OR destinationtranslatedaddress="31.40.212.130" AND translatedport=7225 OR destinationtranslatedaddress="198.244.207.203" AND translatedport=2076)
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="208.115.230.243" AND destinationport=16697 OR destinationaddress="185.126.239.207" AND destinationport=26630 OR destinationaddress="213.183.57.174" AND destinationport=12517 OR destinationaddress="213.183.57.72" AND destinationport=12517 OR destinationaddress="213.183.56.201" AND destinationport=12517 OR destinationaddress="95.164.45.27" AND destinationport=17426 OR destinationaddress="45.120.178.161" AND destinationport=11013 OR destinationaddress="176.120.74.3" AND destinationport=17268 OR destinationaddress="92.243.64.184" AND destinationport=17146 OR destinationaddress="92.243.64.36" AND destinationport=17146)
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="208.115.230.243" AND sourceport=16697 OR sourceaddress="185.126.239.207" AND sourceport=26630 OR sourceaddress="213.183.57.174" AND sourceport=12517 OR sourceaddress="213.183.57.72" AND sourceport=12517 OR sourceaddress="213.183.56.201" AND sourceport=12517 OR sourceaddress="95.164.45.27" AND sourceport=17426 OR sourceaddress="45.120.178.161" AND sourceport=11013 OR sourceaddress="176.120.74.3" AND sourceport=17268 OR sourceaddress="92.243.64.184" AND sourceport=17146 OR sourceaddress="92.243.64.36" AND sourceport=17146)
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="208.115.230.243" AND sourceport=16697 OR translatedipaddress="185.126.239.207" AND sourceport=26630 OR translatedipaddress="213.183.57.174" AND sourceport=12517 OR translatedipaddress="213.183.57.72" AND sourceport=12517 OR translatedipaddress="213.183.56.201" AND sourceport=12517 OR translatedipaddress="95.164.45.27" AND sourceport=17426 OR translatedipaddress="45.120.178.161" AND sourceport=11013 OR translatedipaddress="176.120.74.3" AND sourceport=17268 OR translatedipaddress="92.243.64.184" AND sourceport=17146 OR translatedipaddress="92.243.64.36" AND sourceport=17146)
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND destinationport=16697 OR destinationtranslatedaddress="185.126.239.207" AND destinationport=26630 OR destinationtranslatedaddress="213.183.57.174" AND destinationport=12517 OR destinationtranslatedaddress="213.183.57.72" AND destinationport=12517 OR destinationtranslatedaddress="213.183.56.201" AND destinationport=12517 OR destinationtranslatedaddress="95.164.45.27" AND destinationport=17426 OR destinationtranslatedaddress="45.120.178.161" AND destinationport=11013 OR destinationtranslatedaddress="176.120.74.3" AND destinationport=17268 OR destinationtranslatedaddress="92.243.64.184" AND destinationport=17146 OR destinationtranslatedaddress="92.243.64.36" AND destinationport=17146)
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND destinationtranslatedport=16697 OR destinationtranslatedaddress="185.126.239.207" AND destinationtranslatedport=26630 OR destinationtranslatedaddress="213.183.57.174" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="213.183.57.72" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="213.183.56.201" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="95.164.45.27" AND destinationtranslatedport=17426 OR destinationtranslatedaddress="45.120.178.161" AND destinationtranslatedport=11013 OR destinationtranslatedaddress="176.120.74.3" AND destinationtranslatedport=17268 OR destinationtranslatedaddress="92.243.64.184" AND destinationtranslatedport=17146 OR destinationtranslatedaddress="92.243.64.36" AND destinationtranslatedport=17146)
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND translatedport=16697 OR destinationtranslatedaddress="185.126.239.207" AND translatedport=26630 OR destinationtranslatedaddress="213.183.57.174" AND translatedport=12517 OR destinationtranslatedaddress="213.183.57.72" AND translatedport=12517 OR destinationtranslatedaddress="213.183.56.201" AND translatedport=12517 OR destinationtranslatedaddress="95.164.45.27" AND translatedport=17426 OR destinationtranslatedaddress="45.120.178.161" AND translatedport=11013 OR destinationtranslatedaddress="176.120.74.3" AND translatedport=17268 OR destinationtranslatedaddress="92.243.64.184" AND translatedport=17146 OR destinationtranslatedaddress="92.243.64.36" AND translatedport=17146)
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="89.31.120.126" AND destinationport=11578 OR destinationaddress="91.132.93.33" AND destinationport=11578 OR destinationaddress="91.132.95.28" AND destinationport=8773 OR destinationaddress="91.132.95.204" AND destinationport=8773 OR destinationaddress="91.132.95.135" AND destinationport=8773 OR destinationaddress="194.233.174.22" AND destinationport=45358)
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="89.31.120.126" AND sourceport=11578 OR sourceaddress="91.132.93.33" AND sourceport=11578 OR sourceaddress="91.132.95.28" AND sourceport=8773 OR sourceaddress="91.132.95.204" AND sourceport=8773 OR sourceaddress="91.132.95.135" AND sourceport=8773 OR sourceaddress="194.233.174.22" AND sourceport=45358)
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="89.31.120.126" AND sourceport=11578 OR translatedipaddress="91.132.93.33" AND sourceport=11578 OR translatedipaddress="91.132.95.28" AND sourceport=8773 OR translatedipaddress="91.132.95.204" AND sourceport=8773 OR translatedipaddress="91.132.95.135" AND sourceport=8773 OR translatedipaddress="194.233.174.22" AND sourceport=45358)
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND destinationport=11578 OR destinationtranslatedaddress="91.132.93.33" AND destinationport=11578 OR destinationtranslatedaddress="91.132.95.28" AND destinationport=8773 OR destinationtranslatedaddress="91.132.95.204" AND destinationport=8773 OR destinationtranslatedaddress="91.132.95.135" AND destinationport=8773 OR destinationtranslatedaddress="194.233.174.22" AND destinationport=45358)
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND destinationtranslatedport=11578 OR destinationtranslatedaddress="91.132.93.33" AND destinationtranslatedport=11578 OR destinationtranslatedaddress="91.132.95.28" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="91.132.95.204" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="91.132.95.135" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="194.233.174.22" AND destinationtranslatedport=45358)
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND translatedport=11578 OR destinationtranslatedaddress="91.132.93.33" AND translatedport=11578 OR destinationtranslatedaddress="91.132.95.28" AND translatedport=8773 OR destinationtranslatedaddress="91.132.95.204" AND translatedport=8773 OR destinationtranslatedaddress="91.132.95.135" AND translatedport=8773 OR destinationtranslatedaddress="194.233.174.22" AND translatedport=45358)
index=activity AND rg_functionality="Authentication / VPN" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="158.255.212.173" AND destinationport=10862 OR destinationaddress="151.236.25.126" AND destinationport=11331 OR destinationaddress="158.255.215.49" AND destinationport=23079 OR destinationaddress="185.26.239.98" AND destinationport=11076 OR destinationaddress="151.236.25.10" AND destinationport=7205 OR destinationaddress="37.235.53.217" AND destinationport=1358 OR destinationaddress="151.236.23.232" AND destinationport=763 OR destinationaddress="37.235.56.204" AND destinationport=24239 OR destinationaddress="162.252.175.122" AND destinationport=4126 OR destinationaddress="162.252.175.136" AND destinationport=11077)
index=activity AND rg_functionality="Authentication / VPN" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="158.255.212.173" AND sourceport=10862 OR sourceaddress="151.236.25.126" AND sourceport=11331 OR sourceaddress="158.255.215.49" AND sourceport=23079 OR sourceaddress="185.26.239.98" AND sourceport=11076 OR sourceaddress="151.236.25.10" AND sourceport=7205 OR sourceaddress="37.235.53.217" AND sourceport=1358 OR sourceaddress="151.236.23.232" AND sourceport=763 OR sourceaddress="37.235.56.204" AND sourceport=24239 OR sourceaddress="162.252.175.122" AND sourceport=4126 OR sourceaddress="162.252.175.136" AND sourceport=11077)
index=activity AND rg_functionality="Authentication / VPN" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="158.255.212.173" AND sourceport=10862 OR translatedipaddress="151.236.25.126" AND sourceport=11331 OR translatedipaddress="158.255.215.49" AND sourceport=23079 OR translatedipaddress="185.26.239.98" AND sourceport=11076 OR translatedipaddress="151.236.25.10" AND sourceport=7205 OR translatedipaddress="37.235.53.217" AND sourceport=1358 OR translatedipaddress="151.236.23.232" AND sourceport=763 OR translatedipaddress="37.235.56.204" AND sourceport=24239 OR translatedipaddress="162.252.175.122" AND sourceport=4126 OR translatedipaddress="162.252.175.136" AND sourceport=11077)
index=activity AND rg_functionality="Authentication / VPN" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND destinationport=10862 OR destinationtranslatedaddress="151.236.25.126" AND destinationport=11331 OR destinationtranslatedaddress="158.255.215.49" AND destinationport=23079 OR destinationtranslatedaddress="185.26.239.98" AND destinationport=11076 OR destinationtranslatedaddress="151.236.25.10" AND destinationport=7205 OR destinationtranslatedaddress="37.235.53.217" AND destinationport=1358 OR destinationtranslatedaddress="151.236.23.232" AND destinationport=763 OR destinationtranslatedaddress="37.235.56.204" AND destinationport=24239 OR destinationtranslatedaddress="162.252.175.122" AND destinationport=4126 OR destinationtranslatedaddress="162.252.175.136" AND destinationport=11077)
index=activity AND rg_functionality="Authentication / VPN" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND destinationtranslatedport=10862 OR destinationtranslatedaddress="151.236.25.126" AND destinationtranslatedport=11331 OR destinationtranslatedaddress="158.255.215.49" AND destinationtranslatedport=23079 OR destinationtranslatedaddress="185.26.239.98" AND destinationtranslatedport=11076 OR destinationtranslatedaddress="151.236.25.10" AND destinationtranslatedport=7205 OR destinationtranslatedaddress="37.235.53.217" AND destinationtranslatedport=1358 OR destinationtranslatedaddress="151.236.23.232" AND destinationtranslatedport=763 OR destinationtranslatedaddress="37.235.56.204" AND destinationtranslatedport=24239 OR destinationtranslatedaddress="162.252.175.122" AND destinationtranslatedport=4126 OR destinationtranslatedaddress="162.252.175.136" AND destinationtranslatedport=11077)
index=activity AND rg_functionality="Authentication / VPN" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND translatedport=10862 OR destinationtranslatedaddress="151.236.25.126" AND translatedport=11331 OR destinationtranslatedaddress="158.255.215.49" AND translatedport=23079 OR destinationtranslatedaddress="185.26.239.98" AND translatedport=11076 OR destinationtranslatedaddress="151.236.25.10" AND translatedport=7205 OR destinationtranslatedaddress="37.235.53.217" AND translatedport=1358 OR destinationtranslatedaddress="151.236.23.232" AND translatedport=763 OR destinationtranslatedaddress="37.235.56.204" AND translatedport=24239 OR destinationtranslatedaddress="162.252.175.122" AND translatedport=4126 OR destinationtranslatedaddress="162.252.175.136" AND translatedport=11077)
index=activity AND rg_functionality="Authentication / VPN" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="162.252.175.163" AND destinationport=28693 OR destinationaddress="162.252.175.90" AND destinationport=845 OR destinationaddress="162.252.175.109" AND destinationport=28330 OR destinationaddress="151.236.20.39" AND destinationport=5524 OR destinationaddress="158.255.208.140" AND destinationport=86 OR destinationaddress="194.68.27.149" AND destinationport=13106 OR destinationaddress="194.68.27.176" AND destinationport=6460 OR destinationaddress="37.143.128.223" AND destinationport=16223 OR destinationaddress="31.40.212.130" AND destinationport=7225 OR destinationaddress="198.244.207.203" AND destinationport=2076)
index=activity AND rg_functionality="Authentication / VPN" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="162.252.175.163" AND sourceport=28693 OR sourceaddress="162.252.175.90" AND sourceport=845 OR sourceaddress="162.252.175.109" AND sourceport=28330 OR sourceaddress="151.236.20.39" AND sourceport=5524 OR sourceaddress="158.255.208.140" AND sourceport=86 OR sourceaddress="194.68.27.149" AND sourceport=13106 OR sourceaddress="194.68.27.176" AND sourceport=6460 OR sourceaddress="37.143.128.223" AND sourceport=16223 OR sourceaddress="31.40.212.130" AND sourceport=7225 OR sourceaddress="198.244.207.203" AND sourceport=2076)
index=activity AND rg_functionality="Authentication / VPN" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="162.252.175.163" AND sourceport=28693 OR translatedipaddress="162.252.175.90" AND sourceport=845 OR translatedipaddress="162.252.175.109" AND sourceport=28330 OR translatedipaddress="151.236.20.39" AND sourceport=5524 OR translatedipaddress="158.255.208.140" AND sourceport=86 OR translatedipaddress="194.68.27.149" AND sourceport=13106 OR translatedipaddress="194.68.27.176" AND sourceport=6460 OR translatedipaddress="37.143.128.223" AND sourceport=16223 OR translatedipaddress="31.40.212.130" AND sourceport=7225 OR translatedipaddress="198.244.207.203" AND sourceport=2076)
index=activity AND rg_functionality="Authentication / VPN" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND destinationport=28693 OR destinationtranslatedaddress="162.252.175.90" AND destinationport=845 OR destinationtranslatedaddress="162.252.175.109" AND destinationport=28330 OR destinationtranslatedaddress="151.236.20.39" AND destinationport=5524 OR destinationtranslatedaddress="158.255.208.140" AND destinationport=86 OR destinationtranslatedaddress="194.68.27.149" AND destinationport=13106 OR destinationtranslatedaddress="194.68.27.176" AND destinationport=6460 OR destinationtranslatedaddress="37.143.128.223" AND destinationport=16223 OR destinationtranslatedaddress="31.40.212.130" AND destinationport=7225 OR destinationtranslatedaddress="198.244.207.203" AND destinationport=2076)
index=activity AND rg_functionality="Authentication / VPN" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND destinationtranslatedport=28693 OR destinationtranslatedaddress="162.252.175.90" AND destinationtranslatedport=845 OR destinationtranslatedaddress="162.252.175.109" AND destinationtranslatedport=28330 OR destinationtranslatedaddress="151.236.20.39" AND destinationtranslatedport=5524 OR destinationtranslatedaddress="158.255.208.140" AND destinationtranslatedport=86 OR destinationtranslatedaddress="194.68.27.149" AND destinationtranslatedport=13106 OR destinationtranslatedaddress="194.68.27.176" AND destinationtranslatedport=6460 OR destinationtranslatedaddress="37.143.128.223" AND destinationtranslatedport=16223 OR destinationtranslatedaddress="31.40.212.130" AND destinationtranslatedport=7225 OR destinationtranslatedaddress="198.244.207.203" AND destinationtranslatedport=2076)
index=activity AND rg_functionality="Authentication / VPN" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND translatedport=28693 OR destinationtranslatedaddress="162.252.175.90" AND translatedport=845 OR destinationtranslatedaddress="162.252.175.109" AND translatedport=28330 OR destinationtranslatedaddress="151.236.20.39" AND translatedport=5524 OR destinationtranslatedaddress="158.255.208.140" AND translatedport=86 OR destinationtranslatedaddress="194.68.27.149" AND translatedport=13106 OR destinationtranslatedaddress="194.68.27.176" AND translatedport=6460 OR destinationtranslatedaddress="37.143.128.223" AND translatedport=16223 OR destinationtranslatedaddress="31.40.212.130" AND translatedport=7225 OR destinationtranslatedaddress="198.244.207.203" AND translatedport=2076)
index=activity AND rg_functionality="Authentication / VPN" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="208.115.230.243" AND destinationport=16697 OR destinationaddress="185.126.239.207" AND destinationport=26630 OR destinationaddress="213.183.57.174" AND destinationport=12517 OR destinationaddress="213.183.57.72" AND destinationport=12517 OR destinationaddress="213.183.56.201" AND destinationport=12517 OR destinationaddress="95.164.45.27" AND destinationport=17426 OR destinationaddress="45.120.178.161" AND destinationport=11013 OR destinationaddress="176.120.74.3" AND destinationport=17268 OR destinationaddress="92.243.64.184" AND destinationport=17146 OR destinationaddress="92.243.64.36" AND destinationport=17146)
index=activity AND rg_functionality="Authentication / VPN" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="208.115.230.243" AND sourceport=16697 OR sourceaddress="185.126.239.207" AND sourceport=26630 OR sourceaddress="213.183.57.174" AND sourceport=12517 OR sourceaddress="213.183.57.72" AND sourceport=12517 OR sourceaddress="213.183.56.201" AND sourceport=12517 OR sourceaddress="95.164.45.27" AND sourceport=17426 OR sourceaddress="45.120.178.161" AND sourceport=11013 OR sourceaddress="176.120.74.3" AND sourceport=17268 OR sourceaddress="92.243.64.184" AND sourceport=17146 OR sourceaddress="92.243.64.36" AND sourceport=17146)
index=activity AND rg_functionality="Authentication / VPN" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="208.115.230.243" AND sourceport=16697 OR translatedipaddress="185.126.239.207" AND sourceport=26630 OR translatedipaddress="213.183.57.174" AND sourceport=12517 OR translatedipaddress="213.183.57.72" AND sourceport=12517 OR translatedipaddress="213.183.56.201" AND sourceport=12517 OR translatedipaddress="95.164.45.27" AND sourceport=17426 OR translatedipaddress="45.120.178.161" AND sourceport=11013 OR translatedipaddress="176.120.74.3" AND sourceport=17268 OR translatedipaddress="92.243.64.184" AND sourceport=17146 OR translatedipaddress="92.243.64.36" AND sourceport=17146)
index=activity AND rg_functionality="Authentication / VPN" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND destinationport=16697 OR destinationtranslatedaddress="185.126.239.207" AND destinationport=26630 OR destinationtranslatedaddress="213.183.57.174" AND destinationport=12517 OR destinationtranslatedaddress="213.183.57.72" AND destinationport=12517 OR destinationtranslatedaddress="213.183.56.201" AND destinationport=12517 OR destinationtranslatedaddress="95.164.45.27" AND destinationport=17426 OR destinationtranslatedaddress="45.120.178.161" AND destinationport=11013 OR destinationtranslatedaddress="176.120.74.3" AND destinationport=17268 OR destinationtranslatedaddress="92.243.64.184" AND destinationport=17146 OR destinationtranslatedaddress="92.243.64.36" AND destinationport=17146)
index=activity AND rg_functionality="Authentication / VPN" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND destinationtranslatedport=16697 OR destinationtranslatedaddress="185.126.239.207" AND destinationtranslatedport=26630 OR destinationtranslatedaddress="213.183.57.174" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="213.183.57.72" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="213.183.56.201" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="95.164.45.27" AND destinationtranslatedport=17426 OR destinationtranslatedaddress="45.120.178.161" AND destinationtranslatedport=11013 OR destinationtranslatedaddress="176.120.74.3" AND destinationtranslatedport=17268 OR destinationtranslatedaddress="92.243.64.184" AND destinationtranslatedport=17146 OR destinationtranslatedaddress="92.243.64.36" AND destinationtranslatedport=17146)
index=activity AND rg_functionality="Authentication / VPN" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND translatedport=16697 OR destinationtranslatedaddress="185.126.239.207" AND translatedport=26630 OR destinationtranslatedaddress="213.183.57.174" AND translatedport=12517 OR destinationtranslatedaddress="213.183.57.72" AND translatedport=12517 OR destinationtranslatedaddress="213.183.56.201" AND translatedport=12517 OR destinationtranslatedaddress="95.164.45.27" AND translatedport=17426 OR destinationtranslatedaddress="45.120.178.161" AND translatedport=11013 OR destinationtranslatedaddress="176.120.74.3" AND translatedport=17268 OR destinationtranslatedaddress="92.243.64.184" AND translatedport=17146 OR destinationtranslatedaddress="92.243.64.36" AND translatedport=17146)
index=activity AND rg_functionality="Authentication / VPN" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="89.31.120.126" AND destinationport=11578 OR destinationaddress="91.132.93.33" AND destinationport=11578 OR destinationaddress="91.132.95.28" AND destinationport=8773 OR destinationaddress="91.132.95.204" AND destinationport=8773 OR destinationaddress="91.132.95.135" AND destinationport=8773 OR destinationaddress="194.233.174.22" AND destinationport=45358)
index=activity AND rg_functionality="Authentication / VPN" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="89.31.120.126" AND sourceport=11578 OR sourceaddress="91.132.93.33" AND sourceport=11578 OR sourceaddress="91.132.95.28" AND sourceport=8773 OR sourceaddress="91.132.95.204" AND sourceport=8773 OR sourceaddress="91.132.95.135" AND sourceport=8773 OR sourceaddress="194.233.174.22" AND sourceport=45358)
index=activity AND rg_functionality="Authentication / VPN" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="89.31.120.126" AND sourceport=11578 OR translatedipaddress="91.132.93.33" AND sourceport=11578 OR translatedipaddress="91.132.95.28" AND sourceport=8773 OR translatedipaddress="91.132.95.204" AND sourceport=8773 OR translatedipaddress="91.132.95.135" AND sourceport=8773 OR translatedipaddress="194.233.174.22" AND sourceport=45358)
index=activity AND rg_functionality="Authentication / VPN" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND destinationport=11578 OR destinationtranslatedaddress="91.132.93.33" AND destinationport=11578 OR destinationtranslatedaddress="91.132.95.28" AND destinationport=8773 OR destinationtranslatedaddress="91.132.95.204" AND destinationport=8773 OR destinationtranslatedaddress="91.132.95.135" AND destinationport=8773 OR destinationtranslatedaddress="194.233.174.22" AND destinationport=45358)
index=activity AND rg_functionality="Authentication / VPN" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND destinationtranslatedport=11578 OR destinationtranslatedaddress="91.132.93.33" AND destinationtranslatedport=11578 OR destinationtranslatedaddress="91.132.95.28" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="91.132.95.204" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="91.132.95.135" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="194.233.174.22" AND destinationtranslatedport=45358)
index=activity AND rg_functionality="Authentication / VPN" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND translatedport=11578 OR destinationtranslatedaddress="91.132.93.33" AND translatedport=11578 OR destinationtranslatedaddress="91.132.95.28" AND translatedport=8773 OR destinationtranslatedaddress="91.132.95.204" AND translatedport=8773 OR destinationtranslatedaddress="91.132.95.135" AND translatedport=8773 OR destinationtranslatedaddress="194.233.174.22" AND translatedport=45358)
index=activity AND rg_functionality="Content Management System" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="158.255.212.173" AND destinationport=10862 OR destinationaddress="151.236.25.126" AND destinationport=11331 OR destinationaddress="158.255.215.49" AND destinationport=23079 OR destinationaddress="185.26.239.98" AND destinationport=11076 OR destinationaddress="151.236.25.10" AND destinationport=7205 OR destinationaddress="37.235.53.217" AND destinationport=1358 OR destinationaddress="151.236.23.232" AND destinationport=763 OR destinationaddress="37.235.56.204" AND destinationport=24239 OR destinationaddress="162.252.175.122" AND destinationport=4126 OR destinationaddress="162.252.175.136" AND destinationport=11077)
index=activity AND rg_functionality="Content Management System" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="158.255.212.173" AND sourceport=10862 OR sourceaddress="151.236.25.126" AND sourceport=11331 OR sourceaddress="158.255.215.49" AND sourceport=23079 OR sourceaddress="185.26.239.98" AND sourceport=11076 OR sourceaddress="151.236.25.10" AND sourceport=7205 OR sourceaddress="37.235.53.217" AND sourceport=1358 OR sourceaddress="151.236.23.232" AND sourceport=763 OR sourceaddress="37.235.56.204" AND sourceport=24239 OR sourceaddress="162.252.175.122" AND sourceport=4126 OR sourceaddress="162.252.175.136" AND sourceport=11077)
index=activity AND rg_functionality="Content Management System" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="158.255.212.173" AND sourceport=10862 OR translatedipaddress="151.236.25.126" AND sourceport=11331 OR translatedipaddress="158.255.215.49" AND sourceport=23079 OR translatedipaddress="185.26.239.98" AND sourceport=11076 OR translatedipaddress="151.236.25.10" AND sourceport=7205 OR translatedipaddress="37.235.53.217" AND sourceport=1358 OR translatedipaddress="151.236.23.232" AND sourceport=763 OR translatedipaddress="37.235.56.204" AND sourceport=24239 OR translatedipaddress="162.252.175.122" AND sourceport=4126 OR translatedipaddress="162.252.175.136" AND sourceport=11077)
index=activity AND rg_functionality="Content Management System" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND destinationport=10862 OR destinationtranslatedaddress="151.236.25.126" AND destinationport=11331 OR destinationtranslatedaddress="158.255.215.49" AND destinationport=23079 OR destinationtranslatedaddress="185.26.239.98" AND destinationport=11076 OR destinationtranslatedaddress="151.236.25.10" AND destinationport=7205 OR destinationtranslatedaddress="37.235.53.217" AND destinationport=1358 OR destinationtranslatedaddress="151.236.23.232" AND destinationport=763 OR destinationtranslatedaddress="37.235.56.204" AND destinationport=24239 OR destinationtranslatedaddress="162.252.175.122" AND destinationport=4126 OR destinationtranslatedaddress="162.252.175.136" AND destinationport=11077)
index=activity AND rg_functionality="Content Management System" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND destinationtranslatedport=10862 OR destinationtranslatedaddress="151.236.25.126" AND destinationtranslatedport=11331 OR destinationtranslatedaddress="158.255.215.49" AND destinationtranslatedport=23079 OR destinationtranslatedaddress="185.26.239.98" AND destinationtranslatedport=11076 OR destinationtranslatedaddress="151.236.25.10" AND destinationtranslatedport=7205 OR destinationtranslatedaddress="37.235.53.217" AND destinationtranslatedport=1358 OR destinationtranslatedaddress="151.236.23.232" AND destinationtranslatedport=763 OR destinationtranslatedaddress="37.235.56.204" AND destinationtranslatedport=24239 OR destinationtranslatedaddress="162.252.175.122" AND destinationtranslatedport=4126 OR destinationtranslatedaddress="162.252.175.136" AND destinationtranslatedport=11077)
index=activity AND rg_functionality="Content Management System" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND translatedport=10862 OR destinationtranslatedaddress="151.236.25.126" AND translatedport=11331 OR destinationtranslatedaddress="158.255.215.49" AND translatedport=23079 OR destinationtranslatedaddress="185.26.239.98" AND translatedport=11076 OR destinationtranslatedaddress="151.236.25.10" AND translatedport=7205 OR destinationtranslatedaddress="37.235.53.217" AND translatedport=1358 OR destinationtranslatedaddress="151.236.23.232" AND translatedport=763 OR destinationtranslatedaddress="37.235.56.204" AND translatedport=24239 OR destinationtranslatedaddress="162.252.175.122" AND translatedport=4126 OR destinationtranslatedaddress="162.252.175.136" AND translatedport=11077)
index=activity AND rg_functionality="Content Management System" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="162.252.175.163" AND destinationport=28693 OR destinationaddress="162.252.175.90" AND destinationport=845 OR destinationaddress="162.252.175.109" AND destinationport=28330 OR destinationaddress="151.236.20.39" AND destinationport=5524 OR destinationaddress="158.255.208.140" AND destinationport=86 OR destinationaddress="194.68.27.149" AND destinationport=13106 OR destinationaddress="194.68.27.176" AND destinationport=6460 OR destinationaddress="37.143.128.223" AND destinationport=16223 OR destinationaddress="31.40.212.130" AND destinationport=7225 OR destinationaddress="198.244.207.203" AND destinationport=2076)
index=activity AND rg_functionality="Content Management System" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="162.252.175.163" AND sourceport=28693 OR sourceaddress="162.252.175.90" AND sourceport=845 OR sourceaddress="162.252.175.109" AND sourceport=28330 OR sourceaddress="151.236.20.39" AND sourceport=5524 OR sourceaddress="158.255.208.140" AND sourceport=86 OR sourceaddress="194.68.27.149" AND sourceport=13106 OR sourceaddress="194.68.27.176" AND sourceport=6460 OR sourceaddress="37.143.128.223" AND sourceport=16223 OR sourceaddress="31.40.212.130" AND sourceport=7225 OR sourceaddress="198.244.207.203" AND sourceport=2076)
index=activity AND rg_functionality="Content Management System" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="162.252.175.163" AND sourceport=28693 OR translatedipaddress="162.252.175.90" AND sourceport=845 OR translatedipaddress="162.252.175.109" AND sourceport=28330 OR translatedipaddress="151.236.20.39" AND sourceport=5524 OR translatedipaddress="158.255.208.140" AND sourceport=86 OR translatedipaddress="194.68.27.149" AND sourceport=13106 OR translatedipaddress="194.68.27.176" AND sourceport=6460 OR translatedipaddress="37.143.128.223" AND sourceport=16223 OR translatedipaddress="31.40.212.130" AND sourceport=7225 OR translatedipaddress="198.244.207.203" AND sourceport=2076)
index=activity AND rg_functionality="Content Management System" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND destinationport=28693 OR destinationtranslatedaddress="162.252.175.90" AND destinationport=845 OR destinationtranslatedaddress="162.252.175.109" AND destinationport=28330 OR destinationtranslatedaddress="151.236.20.39" AND destinationport=5524 OR destinationtranslatedaddress="158.255.208.140" AND destinationport=86 OR destinationtranslatedaddress="194.68.27.149" AND destinationport=13106 OR destinationtranslatedaddress="194.68.27.176" AND destinationport=6460 OR destinationtranslatedaddress="37.143.128.223" AND destinationport=16223 OR destinationtranslatedaddress="31.40.212.130" AND destinationport=7225 OR destinationtranslatedaddress="198.244.207.203" AND destinationport=2076)
index=activity AND rg_functionality="Content Management System" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND destinationtranslatedport=28693 OR destinationtranslatedaddress="162.252.175.90" AND destinationtranslatedport=845 OR destinationtranslatedaddress="162.252.175.109" AND destinationtranslatedport=28330 OR destinationtranslatedaddress="151.236.20.39" AND destinationtranslatedport=5524 OR destinationtranslatedaddress="158.255.208.140" AND destinationtranslatedport=86 OR destinationtranslatedaddress="194.68.27.149" AND destinationtranslatedport=13106 OR destinationtranslatedaddress="194.68.27.176" AND destinationtranslatedport=6460 OR destinationtranslatedaddress="37.143.128.223" AND destinationtranslatedport=16223 OR destinationtranslatedaddress="31.40.212.130" AND destinationtranslatedport=7225 OR destinationtranslatedaddress="198.244.207.203" AND destinationtranslatedport=2076)
index=activity AND rg_functionality="Content Management System" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND translatedport=28693 OR destinationtranslatedaddress="162.252.175.90" AND translatedport=845 OR destinationtranslatedaddress="162.252.175.109" AND translatedport=28330 OR destinationtranslatedaddress="151.236.20.39" AND translatedport=5524 OR destinationtranslatedaddress="158.255.208.140" AND translatedport=86 OR destinationtranslatedaddress="194.68.27.149" AND translatedport=13106 OR destinationtranslatedaddress="194.68.27.176" AND translatedport=6460 OR destinationtranslatedaddress="37.143.128.223" AND translatedport=16223 OR destinationtranslatedaddress="31.40.212.130" AND translatedport=7225 OR destinationtranslatedaddress="198.244.207.203" AND translatedport=2076)
index=activity AND rg_functionality="Content Management System" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="208.115.230.243" AND destinationport=16697 OR destinationaddress="185.126.239.207" AND destinationport=26630 OR destinationaddress="213.183.57.174" AND destinationport=12517 OR destinationaddress="213.183.57.72" AND destinationport=12517 OR destinationaddress="213.183.56.201" AND destinationport=12517 OR destinationaddress="95.164.45.27" AND destinationport=17426 OR destinationaddress="45.120.178.161" AND destinationport=11013 OR destinationaddress="176.120.74.3" AND destinationport=17268 OR destinationaddress="92.243.64.184" AND destinationport=17146 OR destinationaddress="92.243.64.36" AND destinationport=17146)
index=activity AND rg_functionality="Content Management System" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="208.115.230.243" AND sourceport=16697 OR sourceaddress="185.126.239.207" AND sourceport=26630 OR sourceaddress="213.183.57.174" AND sourceport=12517 OR sourceaddress="213.183.57.72" AND sourceport=12517 OR sourceaddress="213.183.56.201" AND sourceport=12517 OR sourceaddress="95.164.45.27" AND sourceport=17426 OR sourceaddress="45.120.178.161" AND sourceport=11013 OR sourceaddress="176.120.74.3" AND sourceport=17268 OR sourceaddress="92.243.64.184" AND sourceport=17146 OR sourceaddress="92.243.64.36" AND sourceport=17146)
index=activity AND rg_functionality="Content Management System" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="208.115.230.243" AND sourceport=16697 OR translatedipaddress="185.126.239.207" AND sourceport=26630 OR translatedipaddress="213.183.57.174" AND sourceport=12517 OR translatedipaddress="213.183.57.72" AND sourceport=12517 OR translatedipaddress="213.183.56.201" AND sourceport=12517 OR translatedipaddress="95.164.45.27" AND sourceport=17426 OR translatedipaddress="45.120.178.161" AND sourceport=11013 OR translatedipaddress="176.120.74.3" AND sourceport=17268 OR translatedipaddress="92.243.64.184" AND sourceport=17146 OR translatedipaddress="92.243.64.36" AND sourceport=17146)
index=activity AND rg_functionality="Content Management System" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND destinationport=16697 OR destinationtranslatedaddress="185.126.239.207" AND destinationport=26630 OR destinationtranslatedaddress="213.183.57.174" AND destinationport=12517 OR destinationtranslatedaddress="213.183.57.72" AND destinationport=12517 OR destinationtranslatedaddress="213.183.56.201" AND destinationport=12517 OR destinationtranslatedaddress="95.164.45.27" AND destinationport=17426 OR destinationtranslatedaddress="45.120.178.161" AND destinationport=11013 OR destinationtranslatedaddress="176.120.74.3" AND destinationport=17268 OR destinationtranslatedaddress="92.243.64.184" AND destinationport=17146 OR destinationtranslatedaddress="92.243.64.36" AND destinationport=17146)
index=activity AND rg_functionality="Content Management System" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND destinationtranslatedport=16697 OR destinationtranslatedaddress="185.126.239.207" AND destinationtranslatedport=26630 OR destinationtranslatedaddress="213.183.57.174" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="213.183.57.72" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="213.183.56.201" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="95.164.45.27" AND destinationtranslatedport=17426 OR destinationtranslatedaddress="45.120.178.161" AND destinationtranslatedport=11013 OR destinationtranslatedaddress="176.120.74.3" AND destinationtranslatedport=17268 OR destinationtranslatedaddress="92.243.64.184" AND destinationtranslatedport=17146 OR destinationtranslatedaddress="92.243.64.36" AND destinationtranslatedport=17146)
index=activity AND rg_functionality="Content Management System" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND translatedport=16697 OR destinationtranslatedaddress="185.126.239.207" AND translatedport=26630 OR destinationtranslatedaddress="213.183.57.174" AND translatedport=12517 OR destinationtranslatedaddress="213.183.57.72" AND translatedport=12517 OR destinationtranslatedaddress="213.183.56.201" AND translatedport=12517 OR destinationtranslatedaddress="95.164.45.27" AND translatedport=17426 OR destinationtranslatedaddress="45.120.178.161" AND translatedport=11013 OR destinationtranslatedaddress="176.120.74.3" AND translatedport=17268 OR destinationtranslatedaddress="92.243.64.184" AND translatedport=17146 OR destinationtranslatedaddress="92.243.64.36" AND translatedport=17146)
index=activity AND rg_functionality="Content Management System" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="89.31.120.126" AND destinationport=11578 OR destinationaddress="91.132.93.33" AND destinationport=11578 OR destinationaddress="91.132.95.28" AND destinationport=8773 OR destinationaddress="91.132.95.204" AND destinationport=8773 OR destinationaddress="91.132.95.135" AND destinationport=8773 OR destinationaddress="194.233.174.22" AND destinationport=45358)
index=activity AND rg_functionality="Content Management System" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="89.31.120.126" AND sourceport=11578 OR sourceaddress="91.132.93.33" AND sourceport=11578 OR sourceaddress="91.132.95.28" AND sourceport=8773 OR sourceaddress="91.132.95.204" AND sourceport=8773 OR sourceaddress="91.132.95.135" AND sourceport=8773 OR sourceaddress="194.233.174.22" AND sourceport=45358)
index=activity AND rg_functionality="Content Management System" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="89.31.120.126" AND sourceport=11578 OR translatedipaddress="91.132.93.33" AND sourceport=11578 OR translatedipaddress="91.132.95.28" AND sourceport=8773 OR translatedipaddress="91.132.95.204" AND sourceport=8773 OR translatedipaddress="91.132.95.135" AND sourceport=8773 OR translatedipaddress="194.233.174.22" AND sourceport=45358)
index=activity AND rg_functionality="Content Management System" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND destinationport=11578 OR destinationtranslatedaddress="91.132.93.33" AND destinationport=11578 OR destinationtranslatedaddress="91.132.95.28" AND destinationport=8773 OR destinationtranslatedaddress="91.132.95.204" AND destinationport=8773 OR destinationtranslatedaddress="91.132.95.135" AND destinationport=8773 OR destinationtranslatedaddress="194.233.174.22" AND destinationport=45358)
index=activity AND rg_functionality="Content Management System" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND destinationtranslatedport=11578 OR destinationtranslatedaddress="91.132.93.33" AND destinationtranslatedport=11578 OR destinationtranslatedaddress="91.132.95.28" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="91.132.95.204" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="91.132.95.135" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="194.233.174.22" AND destinationtranslatedport=45358)
index=activity AND rg_functionality="Content Management System" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND translatedport=11578 OR destinationtranslatedaddress="91.132.93.33" AND translatedport=11578 OR destinationtranslatedaddress="91.132.95.28" AND translatedport=8773 OR destinationtranslatedaddress="91.132.95.204" AND translatedport=8773 OR destinationtranslatedaddress="91.132.95.135" AND translatedport=8773 OR destinationtranslatedaddress="194.233.174.22" AND translatedport=45358)
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="158.255.212.173" AND destinationport=10862 OR destinationaddress="151.236.25.126" AND destinationport=11331 OR destinationaddress="158.255.215.49" AND destinationport=23079 OR destinationaddress="185.26.239.98" AND destinationport=11076 OR destinationaddress="151.236.25.10" AND destinationport=7205 OR destinationaddress="37.235.53.217" AND destinationport=1358 OR destinationaddress="151.236.23.232" AND destinationport=763 OR destinationaddress="37.235.56.204" AND destinationport=24239 OR destinationaddress="162.252.175.122" AND destinationport=4126 OR destinationaddress="162.252.175.136" AND destinationport=11077)
index=activity AND rg_functionality="Unix / Linux / AIX" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="158.255.212.173" AND sourceport=10862 OR sourceaddress="151.236.25.126" AND sourceport=11331 OR sourceaddress="158.255.215.49" AND sourceport=23079 OR sourceaddress="185.26.239.98" AND sourceport=11076 OR sourceaddress="151.236.25.10" AND sourceport=7205 OR sourceaddress="37.235.53.217" AND sourceport=1358 OR sourceaddress="151.236.23.232" AND sourceport=763 OR sourceaddress="37.235.56.204" AND sourceport=24239 OR sourceaddress="162.252.175.122" AND sourceport=4126 OR sourceaddress="162.252.175.136" AND sourceport=11077)
index=activity AND rg_functionality="Unix / Linux / AIX" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="158.255.212.173" AND sourceport=10862 OR translatedipaddress="151.236.25.126" AND sourceport=11331 OR translatedipaddress="158.255.215.49" AND sourceport=23079 OR translatedipaddress="185.26.239.98" AND sourceport=11076 OR translatedipaddress="151.236.25.10" AND sourceport=7205 OR translatedipaddress="37.235.53.217" AND sourceport=1358 OR translatedipaddress="151.236.23.232" AND sourceport=763 OR translatedipaddress="37.235.56.204" AND sourceport=24239 OR translatedipaddress="162.252.175.122" AND sourceport=4126 OR translatedipaddress="162.252.175.136" AND sourceport=11077)
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND destinationport=10862 OR destinationtranslatedaddress="151.236.25.126" AND destinationport=11331 OR destinationtranslatedaddress="158.255.215.49" AND destinationport=23079 OR destinationtranslatedaddress="185.26.239.98" AND destinationport=11076 OR destinationtranslatedaddress="151.236.25.10" AND destinationport=7205 OR destinationtranslatedaddress="37.235.53.217" AND destinationport=1358 OR destinationtranslatedaddress="151.236.23.232" AND destinationport=763 OR destinationtranslatedaddress="37.235.56.204" AND destinationport=24239 OR destinationtranslatedaddress="162.252.175.122" AND destinationport=4126 OR destinationtranslatedaddress="162.252.175.136" AND destinationport=11077)
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND destinationtranslatedport=10862 OR destinationtranslatedaddress="151.236.25.126" AND destinationtranslatedport=11331 OR destinationtranslatedaddress="158.255.215.49" AND destinationtranslatedport=23079 OR destinationtranslatedaddress="185.26.239.98" AND destinationtranslatedport=11076 OR destinationtranslatedaddress="151.236.25.10" AND destinationtranslatedport=7205 OR destinationtranslatedaddress="37.235.53.217" AND destinationtranslatedport=1358 OR destinationtranslatedaddress="151.236.23.232" AND destinationtranslatedport=763 OR destinationtranslatedaddress="37.235.56.204" AND destinationtranslatedport=24239 OR destinationtranslatedaddress="162.252.175.122" AND destinationtranslatedport=4126 OR destinationtranslatedaddress="162.252.175.136" AND destinationtranslatedport=11077)
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND translatedport=10862 OR destinationtranslatedaddress="151.236.25.126" AND translatedport=11331 OR destinationtranslatedaddress="158.255.215.49" AND translatedport=23079 OR destinationtranslatedaddress="185.26.239.98" AND translatedport=11076 OR destinationtranslatedaddress="151.236.25.10" AND translatedport=7205 OR destinationtranslatedaddress="37.235.53.217" AND translatedport=1358 OR destinationtranslatedaddress="151.236.23.232" AND translatedport=763 OR destinationtranslatedaddress="37.235.56.204" AND translatedport=24239 OR destinationtranslatedaddress="162.252.175.122" AND translatedport=4126 OR destinationtranslatedaddress="162.252.175.136" AND translatedport=11077)
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="162.252.175.163" AND destinationport=28693 OR destinationaddress="162.252.175.90" AND destinationport=845 OR destinationaddress="162.252.175.109" AND destinationport=28330 OR destinationaddress="151.236.20.39" AND destinationport=5524 OR destinationaddress="158.255.208.140" AND destinationport=86 OR destinationaddress="194.68.27.149" AND destinationport=13106 OR destinationaddress="194.68.27.176" AND destinationport=6460 OR destinationaddress="37.143.128.223" AND destinationport=16223 OR destinationaddress="31.40.212.130" AND destinationport=7225 OR destinationaddress="198.244.207.203" AND destinationport=2076)
index=activity AND rg_functionality="Unix / Linux / AIX" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="162.252.175.163" AND sourceport=28693 OR sourceaddress="162.252.175.90" AND sourceport=845 OR sourceaddress="162.252.175.109" AND sourceport=28330 OR sourceaddress="151.236.20.39" AND sourceport=5524 OR sourceaddress="158.255.208.140" AND sourceport=86 OR sourceaddress="194.68.27.149" AND sourceport=13106 OR sourceaddress="194.68.27.176" AND sourceport=6460 OR sourceaddress="37.143.128.223" AND sourceport=16223 OR sourceaddress="31.40.212.130" AND sourceport=7225 OR sourceaddress="198.244.207.203" AND sourceport=2076)
index=activity AND rg_functionality="Unix / Linux / AIX" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="162.252.175.163" AND sourceport=28693 OR translatedipaddress="162.252.175.90" AND sourceport=845 OR translatedipaddress="162.252.175.109" AND sourceport=28330 OR translatedipaddress="151.236.20.39" AND sourceport=5524 OR translatedipaddress="158.255.208.140" AND sourceport=86 OR translatedipaddress="194.68.27.149" AND sourceport=13106 OR translatedipaddress="194.68.27.176" AND sourceport=6460 OR translatedipaddress="37.143.128.223" AND sourceport=16223 OR translatedipaddress="31.40.212.130" AND sourceport=7225 OR translatedipaddress="198.244.207.203" AND sourceport=2076)
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND destinationport=28693 OR destinationtranslatedaddress="162.252.175.90" AND destinationport=845 OR destinationtranslatedaddress="162.252.175.109" AND destinationport=28330 OR destinationtranslatedaddress="151.236.20.39" AND destinationport=5524 OR destinationtranslatedaddress="158.255.208.140" AND destinationport=86 OR destinationtranslatedaddress="194.68.27.149" AND destinationport=13106 OR destinationtranslatedaddress="194.68.27.176" AND destinationport=6460 OR destinationtranslatedaddress="37.143.128.223" AND destinationport=16223 OR destinationtranslatedaddress="31.40.212.130" AND destinationport=7225 OR destinationtranslatedaddress="198.244.207.203" AND destinationport=2076)
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND destinationtranslatedport=28693 OR destinationtranslatedaddress="162.252.175.90" AND destinationtranslatedport=845 OR destinationtranslatedaddress="162.252.175.109" AND destinationtranslatedport=28330 OR destinationtranslatedaddress="151.236.20.39" AND destinationtranslatedport=5524 OR destinationtranslatedaddress="158.255.208.140" AND destinationtranslatedport=86 OR destinationtranslatedaddress="194.68.27.149" AND destinationtranslatedport=13106 OR destinationtranslatedaddress="194.68.27.176" AND destinationtranslatedport=6460 OR destinationtranslatedaddress="37.143.128.223" AND destinationtranslatedport=16223 OR destinationtranslatedaddress="31.40.212.130" AND destinationtranslatedport=7225 OR destinationtranslatedaddress="198.244.207.203" AND destinationtranslatedport=2076)
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND translatedport=28693 OR destinationtranslatedaddress="162.252.175.90" AND translatedport=845 OR destinationtranslatedaddress="162.252.175.109" AND translatedport=28330 OR destinationtranslatedaddress="151.236.20.39" AND translatedport=5524 OR destinationtranslatedaddress="158.255.208.140" AND translatedport=86 OR destinationtranslatedaddress="194.68.27.149" AND translatedport=13106 OR destinationtranslatedaddress="194.68.27.176" AND translatedport=6460 OR destinationtranslatedaddress="37.143.128.223" AND translatedport=16223 OR destinationtranslatedaddress="31.40.212.130" AND translatedport=7225 OR destinationtranslatedaddress="198.244.207.203" AND translatedport=2076)
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="208.115.230.243" AND destinationport=16697 OR destinationaddress="185.126.239.207" AND destinationport=26630 OR destinationaddress="213.183.57.174" AND destinationport=12517 OR destinationaddress="213.183.57.72" AND destinationport=12517 OR destinationaddress="213.183.56.201" AND destinationport=12517 OR destinationaddress="95.164.45.27" AND destinationport=17426 OR destinationaddress="45.120.178.161" AND destinationport=11013 OR destinationaddress="176.120.74.3" AND destinationport=17268 OR destinationaddress="92.243.64.184" AND destinationport=17146 OR destinationaddress="92.243.64.36" AND destinationport=17146)
index=activity AND rg_functionality="Unix / Linux / AIX" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="208.115.230.243" AND sourceport=16697 OR sourceaddress="185.126.239.207" AND sourceport=26630 OR sourceaddress="213.183.57.174" AND sourceport=12517 OR sourceaddress="213.183.57.72" AND sourceport=12517 OR sourceaddress="213.183.56.201" AND sourceport=12517 OR sourceaddress="95.164.45.27" AND sourceport=17426 OR sourceaddress="45.120.178.161" AND sourceport=11013 OR sourceaddress="176.120.74.3" AND sourceport=17268 OR sourceaddress="92.243.64.184" AND sourceport=17146 OR sourceaddress="92.243.64.36" AND sourceport=17146)
index=activity AND rg_functionality="Unix / Linux / AIX" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="208.115.230.243" AND sourceport=16697 OR translatedipaddress="185.126.239.207" AND sourceport=26630 OR translatedipaddress="213.183.57.174" AND sourceport=12517 OR translatedipaddress="213.183.57.72" AND sourceport=12517 OR translatedipaddress="213.183.56.201" AND sourceport=12517 OR translatedipaddress="95.164.45.27" AND sourceport=17426 OR translatedipaddress="45.120.178.161" AND sourceport=11013 OR translatedipaddress="176.120.74.3" AND sourceport=17268 OR translatedipaddress="92.243.64.184" AND sourceport=17146 OR translatedipaddress="92.243.64.36" AND sourceport=17146)
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND destinationport=16697 OR destinationtranslatedaddress="185.126.239.207" AND destinationport=26630 OR destinationtranslatedaddress="213.183.57.174" AND destinationport=12517 OR destinationtranslatedaddress="213.183.57.72" AND destinationport=12517 OR destinationtranslatedaddress="213.183.56.201" AND destinationport=12517 OR destinationtranslatedaddress="95.164.45.27" AND destinationport=17426 OR destinationtranslatedaddress="45.120.178.161" AND destinationport=11013 OR destinationtranslatedaddress="176.120.74.3" AND destinationport=17268 OR destinationtranslatedaddress="92.243.64.184" AND destinationport=17146 OR destinationtranslatedaddress="92.243.64.36" AND destinationport=17146)
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND destinationtranslatedport=16697 OR destinationtranslatedaddress="185.126.239.207" AND destinationtranslatedport=26630 OR destinationtranslatedaddress="213.183.57.174" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="213.183.57.72" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="213.183.56.201" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="95.164.45.27" AND destinationtranslatedport=17426 OR destinationtranslatedaddress="45.120.178.161" AND destinationtranslatedport=11013 OR destinationtranslatedaddress="176.120.74.3" AND destinationtranslatedport=17268 OR destinationtranslatedaddress="92.243.64.184" AND destinationtranslatedport=17146 OR destinationtranslatedaddress="92.243.64.36" AND destinationtranslatedport=17146)
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND translatedport=16697 OR destinationtranslatedaddress="185.126.239.207" AND translatedport=26630 OR destinationtranslatedaddress="213.183.57.174" AND translatedport=12517 OR destinationtranslatedaddress="213.183.57.72" AND translatedport=12517 OR destinationtranslatedaddress="213.183.56.201" AND translatedport=12517 OR destinationtranslatedaddress="95.164.45.27" AND translatedport=17426 OR destinationtranslatedaddress="45.120.178.161" AND translatedport=11013 OR destinationtranslatedaddress="176.120.74.3" AND translatedport=17268 OR destinationtranslatedaddress="92.243.64.184" AND translatedport=17146 OR destinationtranslatedaddress="92.243.64.36" AND translatedport=17146)
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="89.31.120.126" AND destinationport=11578 OR destinationaddress="91.132.93.33" AND destinationport=11578 OR destinationaddress="91.132.95.28" AND destinationport=8773 OR destinationaddress="91.132.95.204" AND destinationport=8773 OR destinationaddress="91.132.95.135" AND destinationport=8773 OR destinationaddress="194.233.174.22" AND destinationport=45358)
index=activity AND rg_functionality="Unix / Linux / AIX" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="89.31.120.126" AND sourceport=11578 OR sourceaddress="91.132.93.33" AND sourceport=11578 OR sourceaddress="91.132.95.28" AND sourceport=8773 OR sourceaddress="91.132.95.204" AND sourceport=8773 OR sourceaddress="91.132.95.135" AND sourceport=8773 OR sourceaddress="194.233.174.22" AND sourceport=45358)
index=activity AND rg_functionality="Unix / Linux / AIX" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="89.31.120.126" AND sourceport=11578 OR translatedipaddress="91.132.93.33" AND sourceport=11578 OR translatedipaddress="91.132.95.28" AND sourceport=8773 OR translatedipaddress="91.132.95.204" AND sourceport=8773 OR translatedipaddress="91.132.95.135" AND sourceport=8773 OR translatedipaddress="194.233.174.22" AND sourceport=45358)
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND destinationport=11578 OR destinationtranslatedaddress="91.132.93.33" AND destinationport=11578 OR destinationtranslatedaddress="91.132.95.28" AND destinationport=8773 OR destinationtranslatedaddress="91.132.95.204" AND destinationport=8773 OR destinationtranslatedaddress="91.132.95.135" AND destinationport=8773 OR destinationtranslatedaddress="194.233.174.22" AND destinationport=45358)
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND destinationtranslatedport=11578 OR destinationtranslatedaddress="91.132.93.33" AND destinationtranslatedport=11578 OR destinationtranslatedaddress="91.132.95.28" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="91.132.95.204" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="91.132.95.135" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="194.233.174.22" AND destinationtranslatedport=45358)
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND translatedport=11578 OR destinationtranslatedaddress="91.132.93.33" AND translatedport=11578 OR destinationtranslatedaddress="91.132.95.28" AND translatedport=8773 OR destinationtranslatedaddress="91.132.95.204" AND translatedport=8773 OR destinationtranslatedaddress="91.132.95.135" AND translatedport=8773 OR destinationtranslatedaddress="194.233.174.22" AND translatedport=45358)
index=activity AND rg_functionality="Network Access Control / NAC" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="158.255.212.173" AND destinationport=10862 OR destinationaddress="151.236.25.126" AND destinationport=11331 OR destinationaddress="158.255.215.49" AND destinationport=23079 OR destinationaddress="185.26.239.98" AND destinationport=11076 OR destinationaddress="151.236.25.10" AND destinationport=7205 OR destinationaddress="37.235.53.217" AND destinationport=1358 OR destinationaddress="151.236.23.232" AND destinationport=763 OR destinationaddress="37.235.56.204" AND destinationport=24239 OR destinationaddress="162.252.175.122" AND destinationport=4126 OR destinationaddress="162.252.175.136" AND destinationport=11077)
index=activity AND rg_functionality="Network Access Control / NAC" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="158.255.212.173" AND sourceport=10862 OR sourceaddress="151.236.25.126" AND sourceport=11331 OR sourceaddress="158.255.215.49" AND sourceport=23079 OR sourceaddress="185.26.239.98" AND sourceport=11076 OR sourceaddress="151.236.25.10" AND sourceport=7205 OR sourceaddress="37.235.53.217" AND sourceport=1358 OR sourceaddress="151.236.23.232" AND sourceport=763 OR sourceaddress="37.235.56.204" AND sourceport=24239 OR sourceaddress="162.252.175.122" AND sourceport=4126 OR sourceaddress="162.252.175.136" AND sourceport=11077)
index=activity AND rg_functionality="Network Access Control / NAC" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="158.255.212.173" AND sourceport=10862 OR translatedipaddress="151.236.25.126" AND sourceport=11331 OR translatedipaddress="158.255.215.49" AND sourceport=23079 OR translatedipaddress="185.26.239.98" AND sourceport=11076 OR translatedipaddress="151.236.25.10" AND sourceport=7205 OR translatedipaddress="37.235.53.217" AND sourceport=1358 OR translatedipaddress="151.236.23.232" AND sourceport=763 OR translatedipaddress="37.235.56.204" AND sourceport=24239 OR translatedipaddress="162.252.175.122" AND sourceport=4126 OR translatedipaddress="162.252.175.136" AND sourceport=11077)
index=activity AND rg_functionality="Network Access Control / NAC" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND destinationport=10862 OR destinationtranslatedaddress="151.236.25.126" AND destinationport=11331 OR destinationtranslatedaddress="158.255.215.49" AND destinationport=23079 OR destinationtranslatedaddress="185.26.239.98" AND destinationport=11076 OR destinationtranslatedaddress="151.236.25.10" AND destinationport=7205 OR destinationtranslatedaddress="37.235.53.217" AND destinationport=1358 OR destinationtranslatedaddress="151.236.23.232" AND destinationport=763 OR destinationtranslatedaddress="37.235.56.204" AND destinationport=24239 OR destinationtranslatedaddress="162.252.175.122" AND destinationport=4126 OR destinationtranslatedaddress="162.252.175.136" AND destinationport=11077)
index=activity AND rg_functionality="Network Access Control / NAC" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND destinationtranslatedport=10862 OR destinationtranslatedaddress="151.236.25.126" AND destinationtranslatedport=11331 OR destinationtranslatedaddress="158.255.215.49" AND destinationtranslatedport=23079 OR destinationtranslatedaddress="185.26.239.98" AND destinationtranslatedport=11076 OR destinationtranslatedaddress="151.236.25.10" AND destinationtranslatedport=7205 OR destinationtranslatedaddress="37.235.53.217" AND destinationtranslatedport=1358 OR destinationtranslatedaddress="151.236.23.232" AND destinationtranslatedport=763 OR destinationtranslatedaddress="37.235.56.204" AND destinationtranslatedport=24239 OR destinationtranslatedaddress="162.252.175.122" AND destinationtranslatedport=4126 OR destinationtranslatedaddress="162.252.175.136" AND destinationtranslatedport=11077)
index=activity AND rg_functionality="Network Access Control / NAC" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND translatedport=10862 OR destinationtranslatedaddress="151.236.25.126" AND translatedport=11331 OR destinationtranslatedaddress="158.255.215.49" AND translatedport=23079 OR destinationtranslatedaddress="185.26.239.98" AND translatedport=11076 OR destinationtranslatedaddress="151.236.25.10" AND translatedport=7205 OR destinationtranslatedaddress="37.235.53.217" AND translatedport=1358 OR destinationtranslatedaddress="151.236.23.232" AND translatedport=763 OR destinationtranslatedaddress="37.235.56.204" AND translatedport=24239 OR destinationtranslatedaddress="162.252.175.122" AND translatedport=4126 OR destinationtranslatedaddress="162.252.175.136" AND translatedport=11077)
index=activity AND rg_functionality="Network Access Control / NAC" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="162.252.175.163" AND destinationport=28693 OR destinationaddress="162.252.175.90" AND destinationport=845 OR destinationaddress="162.252.175.109" AND destinationport=28330 OR destinationaddress="151.236.20.39" AND destinationport=5524 OR destinationaddress="158.255.208.140" AND destinationport=86 OR destinationaddress="194.68.27.149" AND destinationport=13106 OR destinationaddress="194.68.27.176" AND destinationport=6460 OR destinationaddress="37.143.128.223" AND destinationport=16223 OR destinationaddress="31.40.212.130" AND destinationport=7225 OR destinationaddress="198.244.207.203" AND destinationport=2076)
index=activity AND rg_functionality="Network Access Control / NAC" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="162.252.175.163" AND sourceport=28693 OR sourceaddress="162.252.175.90" AND sourceport=845 OR sourceaddress="162.252.175.109" AND sourceport=28330 OR sourceaddress="151.236.20.39" AND sourceport=5524 OR sourceaddress="158.255.208.140" AND sourceport=86 OR sourceaddress="194.68.27.149" AND sourceport=13106 OR sourceaddress="194.68.27.176" AND sourceport=6460 OR sourceaddress="37.143.128.223" AND sourceport=16223 OR sourceaddress="31.40.212.130" AND sourceport=7225 OR sourceaddress="198.244.207.203" AND sourceport=2076)
index=activity AND rg_functionality="Network Access Control / NAC" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="162.252.175.163" AND sourceport=28693 OR translatedipaddress="162.252.175.90" AND sourceport=845 OR translatedipaddress="162.252.175.109" AND sourceport=28330 OR translatedipaddress="151.236.20.39" AND sourceport=5524 OR translatedipaddress="158.255.208.140" AND sourceport=86 OR translatedipaddress="194.68.27.149" AND sourceport=13106 OR translatedipaddress="194.68.27.176" AND sourceport=6460 OR translatedipaddress="37.143.128.223" AND sourceport=16223 OR translatedipaddress="31.40.212.130" AND sourceport=7225 OR translatedipaddress="198.244.207.203" AND sourceport=2076)
index=activity AND rg_functionality="Network Access Control / NAC" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND destinationport=28693 OR destinationtranslatedaddress="162.252.175.90" AND destinationport=845 OR destinationtranslatedaddress="162.252.175.109" AND destinationport=28330 OR destinationtranslatedaddress="151.236.20.39" AND destinationport=5524 OR destinationtranslatedaddress="158.255.208.140" AND destinationport=86 OR destinationtranslatedaddress="194.68.27.149" AND destinationport=13106 OR destinationtranslatedaddress="194.68.27.176" AND destinationport=6460 OR destinationtranslatedaddress="37.143.128.223" AND destinationport=16223 OR destinationtranslatedaddress="31.40.212.130" AND destinationport=7225 OR destinationtranslatedaddress="198.244.207.203" AND destinationport=2076)
index=activity AND rg_functionality="Network Access Control / NAC" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND destinationtranslatedport=28693 OR destinationtranslatedaddress="162.252.175.90" AND destinationtranslatedport=845 OR destinationtranslatedaddress="162.252.175.109" AND destinationtranslatedport=28330 OR destinationtranslatedaddress="151.236.20.39" AND destinationtranslatedport=5524 OR destinationtranslatedaddress="158.255.208.140" AND destinationtranslatedport=86 OR destinationtranslatedaddress="194.68.27.149" AND destinationtranslatedport=13106 OR destinationtranslatedaddress="194.68.27.176" AND destinationtranslatedport=6460 OR destinationtranslatedaddress="37.143.128.223" AND destinationtranslatedport=16223 OR destinationtranslatedaddress="31.40.212.130" AND destinationtranslatedport=7225 OR destinationtranslatedaddress="198.244.207.203" AND destinationtranslatedport=2076)
index=activity AND rg_functionality="Network Access Control / NAC" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND translatedport=28693 OR destinationtranslatedaddress="162.252.175.90" AND translatedport=845 OR destinationtranslatedaddress="162.252.175.109" AND translatedport=28330 OR destinationtranslatedaddress="151.236.20.39" AND translatedport=5524 OR destinationtranslatedaddress="158.255.208.140" AND translatedport=86 OR destinationtranslatedaddress="194.68.27.149" AND translatedport=13106 OR destinationtranslatedaddress="194.68.27.176" AND translatedport=6460 OR destinationtranslatedaddress="37.143.128.223" AND translatedport=16223 OR destinationtranslatedaddress="31.40.212.130" AND translatedport=7225 OR destinationtranslatedaddress="198.244.207.203" AND translatedport=2076)
index=activity AND rg_functionality="Network Access Control / NAC" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="208.115.230.243" AND destinationport=16697 OR destinationaddress="185.126.239.207" AND destinationport=26630 OR destinationaddress="213.183.57.174" AND destinationport=12517 OR destinationaddress="213.183.57.72" AND destinationport=12517 OR destinationaddress="213.183.56.201" AND destinationport=12517 OR destinationaddress="95.164.45.27" AND destinationport=17426 OR destinationaddress="45.120.178.161" AND destinationport=11013 OR destinationaddress="176.120.74.3" AND destinationport=17268 OR destinationaddress="92.243.64.184" AND destinationport=17146 OR destinationaddress="92.243.64.36" AND destinationport=17146)
index=activity AND rg_functionality="Network Access Control / NAC" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="208.115.230.243" AND sourceport=16697 OR sourceaddress="185.126.239.207" AND sourceport=26630 OR sourceaddress="213.183.57.174" AND sourceport=12517 OR sourceaddress="213.183.57.72" AND sourceport=12517 OR sourceaddress="213.183.56.201" AND sourceport=12517 OR sourceaddress="95.164.45.27" AND sourceport=17426 OR sourceaddress="45.120.178.161" AND sourceport=11013 OR sourceaddress="176.120.74.3" AND sourceport=17268 OR sourceaddress="92.243.64.184" AND sourceport=17146 OR sourceaddress="92.243.64.36" AND sourceport=17146)
index=activity AND rg_functionality="Network Access Control / NAC" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="208.115.230.243" AND sourceport=16697 OR translatedipaddress="185.126.239.207" AND sourceport=26630 OR translatedipaddress="213.183.57.174" AND sourceport=12517 OR translatedipaddress="213.183.57.72" AND sourceport=12517 OR translatedipaddress="213.183.56.201" AND sourceport=12517 OR translatedipaddress="95.164.45.27" AND sourceport=17426 OR translatedipaddress="45.120.178.161" AND sourceport=11013 OR translatedipaddress="176.120.74.3" AND sourceport=17268 OR translatedipaddress="92.243.64.184" AND sourceport=17146 OR translatedipaddress="92.243.64.36" AND sourceport=17146)
index=activity AND rg_functionality="Network Access Control / NAC" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND destinationport=16697 OR destinationtranslatedaddress="185.126.239.207" AND destinationport=26630 OR destinationtranslatedaddress="213.183.57.174" AND destinationport=12517 OR destinationtranslatedaddress="213.183.57.72" AND destinationport=12517 OR destinationtranslatedaddress="213.183.56.201" AND destinationport=12517 OR destinationtranslatedaddress="95.164.45.27" AND destinationport=17426 OR destinationtranslatedaddress="45.120.178.161" AND destinationport=11013 OR destinationtranslatedaddress="176.120.74.3" AND destinationport=17268 OR destinationtranslatedaddress="92.243.64.184" AND destinationport=17146 OR destinationtranslatedaddress="92.243.64.36" AND destinationport=17146)
index=activity AND rg_functionality="Network Access Control / NAC" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND destinationtranslatedport=16697 OR destinationtranslatedaddress="185.126.239.207" AND destinationtranslatedport=26630 OR destinationtranslatedaddress="213.183.57.174" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="213.183.57.72" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="213.183.56.201" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="95.164.45.27" AND destinationtranslatedport=17426 OR destinationtranslatedaddress="45.120.178.161" AND destinationtranslatedport=11013 OR destinationtranslatedaddress="176.120.74.3" AND destinationtranslatedport=17268 OR destinationtranslatedaddress="92.243.64.184" AND destinationtranslatedport=17146 OR destinationtranslatedaddress="92.243.64.36" AND destinationtranslatedport=17146)
index=activity AND rg_functionality="Network Access Control / NAC" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND translatedport=16697 OR destinationtranslatedaddress="185.126.239.207" AND translatedport=26630 OR destinationtranslatedaddress="213.183.57.174" AND translatedport=12517 OR destinationtranslatedaddress="213.183.57.72" AND translatedport=12517 OR destinationtranslatedaddress="213.183.56.201" AND translatedport=12517 OR destinationtranslatedaddress="95.164.45.27" AND translatedport=17426 OR destinationtranslatedaddress="45.120.178.161" AND translatedport=11013 OR destinationtranslatedaddress="176.120.74.3" AND translatedport=17268 OR destinationtranslatedaddress="92.243.64.184" AND translatedport=17146 OR destinationtranslatedaddress="92.243.64.36" AND translatedport=17146)
index=activity AND rg_functionality="Network Access Control / NAC" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="89.31.120.126" AND destinationport=11578 OR destinationaddress="91.132.93.33" AND destinationport=11578 OR destinationaddress="91.132.95.28" AND destinationport=8773 OR destinationaddress="91.132.95.204" AND destinationport=8773 OR destinationaddress="91.132.95.135" AND destinationport=8773 OR destinationaddress="194.233.174.22" AND destinationport=45358)
index=activity AND rg_functionality="Network Access Control / NAC" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="89.31.120.126" AND sourceport=11578 OR sourceaddress="91.132.93.33" AND sourceport=11578 OR sourceaddress="91.132.95.28" AND sourceport=8773 OR sourceaddress="91.132.95.204" AND sourceport=8773 OR sourceaddress="91.132.95.135" AND sourceport=8773 OR sourceaddress="194.233.174.22" AND sourceport=45358)
index=activity AND rg_functionality="Network Access Control / NAC" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="89.31.120.126" AND sourceport=11578 OR translatedipaddress="91.132.93.33" AND sourceport=11578 OR translatedipaddress="91.132.95.28" AND sourceport=8773 OR translatedipaddress="91.132.95.204" AND sourceport=8773 OR translatedipaddress="91.132.95.135" AND sourceport=8773 OR translatedipaddress="194.233.174.22" AND sourceport=45358)
index=activity AND rg_functionality="Network Access Control / NAC" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND destinationport=11578 OR destinationtranslatedaddress="91.132.93.33" AND destinationport=11578 OR destinationtranslatedaddress="91.132.95.28" AND destinationport=8773 OR destinationtranslatedaddress="91.132.95.204" AND destinationport=8773 OR destinationtranslatedaddress="91.132.95.135" AND destinationport=8773 OR destinationtranslatedaddress="194.233.174.22" AND destinationport=45358)
index=activity AND rg_functionality="Network Access Control / NAC" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND destinationtranslatedport=11578 OR destinationtranslatedaddress="91.132.93.33" AND destinationtranslatedport=11578 OR destinationtranslatedaddress="91.132.95.28" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="91.132.95.204" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="91.132.95.135" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="194.233.174.22" AND destinationtranslatedport=45358)
index=activity AND rg_functionality="Network Access Control / NAC" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND translatedport=11578 OR destinationtranslatedaddress="91.132.93.33" AND translatedport=11578 OR destinationtranslatedaddress="91.132.95.28" AND translatedport=8773 OR destinationtranslatedaddress="91.132.95.204" AND translatedport=8773 OR destinationtranslatedaddress="91.132.95.135" AND translatedport=8773 OR destinationtranslatedaddress="194.233.174.22" AND translatedport=45358)
index=activity AND rg_functionality="Virtualization / Containers" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="158.255.212.173" AND destinationport=10862 OR destinationaddress="151.236.25.126" AND destinationport=11331 OR destinationaddress="158.255.215.49" AND destinationport=23079 OR destinationaddress="185.26.239.98" AND destinationport=11076 OR destinationaddress="151.236.25.10" AND destinationport=7205 OR destinationaddress="37.235.53.217" AND destinationport=1358 OR destinationaddress="151.236.23.232" AND destinationport=763 OR destinationaddress="37.235.56.204" AND destinationport=24239 OR destinationaddress="162.252.175.122" AND destinationport=4126 OR destinationaddress="162.252.175.136" AND destinationport=11077)
index=activity AND rg_functionality="Virtualization / Containers" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="158.255.212.173" AND sourceport=10862 OR sourceaddress="151.236.25.126" AND sourceport=11331 OR sourceaddress="158.255.215.49" AND sourceport=23079 OR sourceaddress="185.26.239.98" AND sourceport=11076 OR sourceaddress="151.236.25.10" AND sourceport=7205 OR sourceaddress="37.235.53.217" AND sourceport=1358 OR sourceaddress="151.236.23.232" AND sourceport=763 OR sourceaddress="37.235.56.204" AND sourceport=24239 OR sourceaddress="162.252.175.122" AND sourceport=4126 OR sourceaddress="162.252.175.136" AND sourceport=11077)
index=activity AND rg_functionality="Virtualization / Containers" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="158.255.212.173" AND sourceport=10862 OR translatedipaddress="151.236.25.126" AND sourceport=11331 OR translatedipaddress="158.255.215.49" AND sourceport=23079 OR translatedipaddress="185.26.239.98" AND sourceport=11076 OR translatedipaddress="151.236.25.10" AND sourceport=7205 OR translatedipaddress="37.235.53.217" AND sourceport=1358 OR translatedipaddress="151.236.23.232" AND sourceport=763 OR translatedipaddress="37.235.56.204" AND sourceport=24239 OR translatedipaddress="162.252.175.122" AND sourceport=4126 OR translatedipaddress="162.252.175.136" AND sourceport=11077)
index=activity AND rg_functionality="Virtualization / Containers" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND destinationport=10862 OR destinationtranslatedaddress="151.236.25.126" AND destinationport=11331 OR destinationtranslatedaddress="158.255.215.49" AND destinationport=23079 OR destinationtranslatedaddress="185.26.239.98" AND destinationport=11076 OR destinationtranslatedaddress="151.236.25.10" AND destinationport=7205 OR destinationtranslatedaddress="37.235.53.217" AND destinationport=1358 OR destinationtranslatedaddress="151.236.23.232" AND destinationport=763 OR destinationtranslatedaddress="37.235.56.204" AND destinationport=24239 OR destinationtranslatedaddress="162.252.175.122" AND destinationport=4126 OR destinationtranslatedaddress="162.252.175.136" AND destinationport=11077)
index=activity AND rg_functionality="Virtualization / Containers" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND destinationtranslatedport=10862 OR destinationtranslatedaddress="151.236.25.126" AND destinationtranslatedport=11331 OR destinationtranslatedaddress="158.255.215.49" AND destinationtranslatedport=23079 OR destinationtranslatedaddress="185.26.239.98" AND destinationtranslatedport=11076 OR destinationtranslatedaddress="151.236.25.10" AND destinationtranslatedport=7205 OR destinationtranslatedaddress="37.235.53.217" AND destinationtranslatedport=1358 OR destinationtranslatedaddress="151.236.23.232" AND destinationtranslatedport=763 OR destinationtranslatedaddress="37.235.56.204" AND destinationtranslatedport=24239 OR destinationtranslatedaddress="162.252.175.122" AND destinationtranslatedport=4126 OR destinationtranslatedaddress="162.252.175.136" AND destinationtranslatedport=11077)
index=activity AND rg_functionality="Virtualization / Containers" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND translatedport=10862 OR destinationtranslatedaddress="151.236.25.126" AND translatedport=11331 OR destinationtranslatedaddress="158.255.215.49" AND translatedport=23079 OR destinationtranslatedaddress="185.26.239.98" AND translatedport=11076 OR destinationtranslatedaddress="151.236.25.10" AND translatedport=7205 OR destinationtranslatedaddress="37.235.53.217" AND translatedport=1358 OR destinationtranslatedaddress="151.236.23.232" AND translatedport=763 OR destinationtranslatedaddress="37.235.56.204" AND translatedport=24239 OR destinationtranslatedaddress="162.252.175.122" AND translatedport=4126 OR destinationtranslatedaddress="162.252.175.136" AND translatedport=11077)
index=activity AND rg_functionality="Virtualization / Containers" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="162.252.175.163" AND destinationport=28693 OR destinationaddress="162.252.175.90" AND destinationport=845 OR destinationaddress="162.252.175.109" AND destinationport=28330 OR destinationaddress="151.236.20.39" AND destinationport=5524 OR destinationaddress="158.255.208.140" AND destinationport=86 OR destinationaddress="194.68.27.149" AND destinationport=13106 OR destinationaddress="194.68.27.176" AND destinationport=6460 OR destinationaddress="37.143.128.223" AND destinationport=16223 OR destinationaddress="31.40.212.130" AND destinationport=7225 OR destinationaddress="198.244.207.203" AND destinationport=2076)
index=activity AND rg_functionality="Virtualization / Containers" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="162.252.175.163" AND sourceport=28693 OR sourceaddress="162.252.175.90" AND sourceport=845 OR sourceaddress="162.252.175.109" AND sourceport=28330 OR sourceaddress="151.236.20.39" AND sourceport=5524 OR sourceaddress="158.255.208.140" AND sourceport=86 OR sourceaddress="194.68.27.149" AND sourceport=13106 OR sourceaddress="194.68.27.176" AND sourceport=6460 OR sourceaddress="37.143.128.223" AND sourceport=16223 OR sourceaddress="31.40.212.130" AND sourceport=7225 OR sourceaddress="198.244.207.203" AND sourceport=2076)
index=activity AND rg_functionality="Virtualization / Containers" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="162.252.175.163" AND sourceport=28693 OR translatedipaddress="162.252.175.90" AND sourceport=845 OR translatedipaddress="162.252.175.109" AND sourceport=28330 OR translatedipaddress="151.236.20.39" AND sourceport=5524 OR translatedipaddress="158.255.208.140" AND sourceport=86 OR translatedipaddress="194.68.27.149" AND sourceport=13106 OR translatedipaddress="194.68.27.176" AND sourceport=6460 OR translatedipaddress="37.143.128.223" AND sourceport=16223 OR translatedipaddress="31.40.212.130" AND sourceport=7225 OR translatedipaddress="198.244.207.203" AND sourceport=2076)
index=activity AND rg_functionality="Virtualization / Containers" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND destinationport=28693 OR destinationtranslatedaddress="162.252.175.90" AND destinationport=845 OR destinationtranslatedaddress="162.252.175.109" AND destinationport=28330 OR destinationtranslatedaddress="151.236.20.39" AND destinationport=5524 OR destinationtranslatedaddress="158.255.208.140" AND destinationport=86 OR destinationtranslatedaddress="194.68.27.149" AND destinationport=13106 OR destinationtranslatedaddress="194.68.27.176" AND destinationport=6460 OR destinationtranslatedaddress="37.143.128.223" AND destinationport=16223 OR destinationtranslatedaddress="31.40.212.130" AND destinationport=7225 OR destinationtranslatedaddress="198.244.207.203" AND destinationport=2076)
index=activity AND rg_functionality="Virtualization / Containers" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND destinationtranslatedport=28693 OR destinationtranslatedaddress="162.252.175.90" AND destinationtranslatedport=845 OR destinationtranslatedaddress="162.252.175.109" AND destinationtranslatedport=28330 OR destinationtranslatedaddress="151.236.20.39" AND destinationtranslatedport=5524 OR destinationtranslatedaddress="158.255.208.140" AND destinationtranslatedport=86 OR destinationtranslatedaddress="194.68.27.149" AND destinationtranslatedport=13106 OR destinationtranslatedaddress="194.68.27.176" AND destinationtranslatedport=6460 OR destinationtranslatedaddress="37.143.128.223" AND destinationtranslatedport=16223 OR destinationtranslatedaddress="31.40.212.130" AND destinationtranslatedport=7225 OR destinationtranslatedaddress="198.244.207.203" AND destinationtranslatedport=2076)
index=activity AND rg_functionality="Virtualization / Containers" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND translatedport=28693 OR destinationtranslatedaddress="162.252.175.90" AND translatedport=845 OR destinationtranslatedaddress="162.252.175.109" AND translatedport=28330 OR destinationtranslatedaddress="151.236.20.39" AND translatedport=5524 OR destinationtranslatedaddress="158.255.208.140" AND translatedport=86 OR destinationtranslatedaddress="194.68.27.149" AND translatedport=13106 OR destinationtranslatedaddress="194.68.27.176" AND translatedport=6460 OR destinationtranslatedaddress="37.143.128.223" AND translatedport=16223 OR destinationtranslatedaddress="31.40.212.130" AND translatedport=7225 OR destinationtranslatedaddress="198.244.207.203" AND translatedport=2076)
index=activity AND rg_functionality="Virtualization / Containers" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="208.115.230.243" AND destinationport=16697 OR destinationaddress="185.126.239.207" AND destinationport=26630 OR destinationaddress="213.183.57.174" AND destinationport=12517 OR destinationaddress="213.183.57.72" AND destinationport=12517 OR destinationaddress="213.183.56.201" AND destinationport=12517 OR destinationaddress="95.164.45.27" AND destinationport=17426 OR destinationaddress="45.120.178.161" AND destinationport=11013 OR destinationaddress="176.120.74.3" AND destinationport=17268 OR destinationaddress="92.243.64.184" AND destinationport=17146 OR destinationaddress="92.243.64.36" AND destinationport=17146)
index=activity AND rg_functionality="Virtualization / Containers" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="208.115.230.243" AND sourceport=16697 OR sourceaddress="185.126.239.207" AND sourceport=26630 OR sourceaddress="213.183.57.174" AND sourceport=12517 OR sourceaddress="213.183.57.72" AND sourceport=12517 OR sourceaddress="213.183.56.201" AND sourceport=12517 OR sourceaddress="95.164.45.27" AND sourceport=17426 OR sourceaddress="45.120.178.161" AND sourceport=11013 OR sourceaddress="176.120.74.3" AND sourceport=17268 OR sourceaddress="92.243.64.184" AND sourceport=17146 OR sourceaddress="92.243.64.36" AND sourceport=17146)
index=activity AND rg_functionality="Virtualization / Containers" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="208.115.230.243" AND sourceport=16697 OR translatedipaddress="185.126.239.207" AND sourceport=26630 OR translatedipaddress="213.183.57.174" AND sourceport=12517 OR translatedipaddress="213.183.57.72" AND sourceport=12517 OR translatedipaddress="213.183.56.201" AND sourceport=12517 OR translatedipaddress="95.164.45.27" AND sourceport=17426 OR translatedipaddress="45.120.178.161" AND sourceport=11013 OR translatedipaddress="176.120.74.3" AND sourceport=17268 OR translatedipaddress="92.243.64.184" AND sourceport=17146 OR translatedipaddress="92.243.64.36" AND sourceport=17146)
index=activity AND rg_functionality="Virtualization / Containers" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND destinationport=16697 OR destinationtranslatedaddress="185.126.239.207" AND destinationport=26630 OR destinationtranslatedaddress="213.183.57.174" AND destinationport=12517 OR destinationtranslatedaddress="213.183.57.72" AND destinationport=12517 OR destinationtranslatedaddress="213.183.56.201" AND destinationport=12517 OR destinationtranslatedaddress="95.164.45.27" AND destinationport=17426 OR destinationtranslatedaddress="45.120.178.161" AND destinationport=11013 OR destinationtranslatedaddress="176.120.74.3" AND destinationport=17268 OR destinationtranslatedaddress="92.243.64.184" AND destinationport=17146 OR destinationtranslatedaddress="92.243.64.36" AND destinationport=17146)
index=activity AND rg_functionality="Virtualization / Containers" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND destinationtranslatedport=16697 OR destinationtranslatedaddress="185.126.239.207" AND destinationtranslatedport=26630 OR destinationtranslatedaddress="213.183.57.174" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="213.183.57.72" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="213.183.56.201" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="95.164.45.27" AND destinationtranslatedport=17426 OR destinationtranslatedaddress="45.120.178.161" AND destinationtranslatedport=11013 OR destinationtranslatedaddress="176.120.74.3" AND destinationtranslatedport=17268 OR destinationtranslatedaddress="92.243.64.184" AND destinationtranslatedport=17146 OR destinationtranslatedaddress="92.243.64.36" AND destinationtranslatedport=17146)
index=activity AND rg_functionality="Virtualization / Containers" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND translatedport=16697 OR destinationtranslatedaddress="185.126.239.207" AND translatedport=26630 OR destinationtranslatedaddress="213.183.57.174" AND translatedport=12517 OR destinationtranslatedaddress="213.183.57.72" AND translatedport=12517 OR destinationtranslatedaddress="213.183.56.201" AND translatedport=12517 OR destinationtranslatedaddress="95.164.45.27" AND translatedport=17426 OR destinationtranslatedaddress="45.120.178.161" AND translatedport=11013 OR destinationtranslatedaddress="176.120.74.3" AND translatedport=17268 OR destinationtranslatedaddress="92.243.64.184" AND translatedport=17146 OR destinationtranslatedaddress="92.243.64.36" AND translatedport=17146)
index=activity AND rg_functionality="Virtualization / Containers" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="89.31.120.126" AND destinationport=11578 OR destinationaddress="91.132.93.33" AND destinationport=11578 OR destinationaddress="91.132.95.28" AND destinationport=8773 OR destinationaddress="91.132.95.204" AND destinationport=8773 OR destinationaddress="91.132.95.135" AND destinationport=8773 OR destinationaddress="194.233.174.22" AND destinationport=45358)
index=activity AND rg_functionality="Virtualization / Containers" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="89.31.120.126" AND sourceport=11578 OR sourceaddress="91.132.93.33" AND sourceport=11578 OR sourceaddress="91.132.95.28" AND sourceport=8773 OR sourceaddress="91.132.95.204" AND sourceport=8773 OR sourceaddress="91.132.95.135" AND sourceport=8773 OR sourceaddress="194.233.174.22" AND sourceport=45358)
index=activity AND rg_functionality="Virtualization / Containers" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="89.31.120.126" AND sourceport=11578 OR translatedipaddress="91.132.93.33" AND sourceport=11578 OR translatedipaddress="91.132.95.28" AND sourceport=8773 OR translatedipaddress="91.132.95.204" AND sourceport=8773 OR translatedipaddress="91.132.95.135" AND sourceport=8773 OR translatedipaddress="194.233.174.22" AND sourceport=45358)
index=activity AND rg_functionality="Virtualization / Containers" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND destinationport=11578 OR destinationtranslatedaddress="91.132.93.33" AND destinationport=11578 OR destinationtranslatedaddress="91.132.95.28" AND destinationport=8773 OR destinationtranslatedaddress="91.132.95.204" AND destinationport=8773 OR destinationtranslatedaddress="91.132.95.135" AND destinationport=8773 OR destinationtranslatedaddress="194.233.174.22" AND destinationport=45358)
index=activity AND rg_functionality="Virtualization / Containers" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND destinationtranslatedport=11578 OR destinationtranslatedaddress="91.132.93.33" AND destinationtranslatedport=11578 OR destinationtranslatedaddress="91.132.95.28" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="91.132.95.204" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="91.132.95.135" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="194.233.174.22" AND destinationtranslatedport=45358)
index=activity AND rg_functionality="Virtualization / Containers" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND translatedport=11578 OR destinationtranslatedaddress="91.132.93.33" AND translatedport=11578 OR destinationtranslatedaddress="91.132.95.28" AND translatedport=8773 OR destinationtranslatedaddress="91.132.95.204" AND translatedport=8773 OR destinationtranslatedaddress="91.132.95.135" AND translatedport=8773 OR destinationtranslatedaddress="194.233.174.22" AND translatedport=45358)
index=activity AND rg_functionality="Access / Privileged User" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="158.255.212.173" AND destinationport=10862 OR destinationaddress="151.236.25.126" AND destinationport=11331 OR destinationaddress="158.255.215.49" AND destinationport=23079 OR destinationaddress="185.26.239.98" AND destinationport=11076 OR destinationaddress="151.236.25.10" AND destinationport=7205 OR destinationaddress="37.235.53.217" AND destinationport=1358 OR destinationaddress="151.236.23.232" AND destinationport=763 OR destinationaddress="37.235.56.204" AND destinationport=24239 OR destinationaddress="162.252.175.122" AND destinationport=4126 OR destinationaddress="162.252.175.136" AND destinationport=11077)
index=activity AND rg_functionality="Access / Privileged User" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="158.255.212.173" AND sourceport=10862 OR sourceaddress="151.236.25.126" AND sourceport=11331 OR sourceaddress="158.255.215.49" AND sourceport=23079 OR sourceaddress="185.26.239.98" AND sourceport=11076 OR sourceaddress="151.236.25.10" AND sourceport=7205 OR sourceaddress="37.235.53.217" AND sourceport=1358 OR sourceaddress="151.236.23.232" AND sourceport=763 OR sourceaddress="37.235.56.204" AND sourceport=24239 OR sourceaddress="162.252.175.122" AND sourceport=4126 OR sourceaddress="162.252.175.136" AND sourceport=11077)
index=activity AND rg_functionality="Access / Privileged User" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="158.255.212.173" AND sourceport=10862 OR translatedipaddress="151.236.25.126" AND sourceport=11331 OR translatedipaddress="158.255.215.49" AND sourceport=23079 OR translatedipaddress="185.26.239.98" AND sourceport=11076 OR translatedipaddress="151.236.25.10" AND sourceport=7205 OR translatedipaddress="37.235.53.217" AND sourceport=1358 OR translatedipaddress="151.236.23.232" AND sourceport=763 OR translatedipaddress="37.235.56.204" AND sourceport=24239 OR translatedipaddress="162.252.175.122" AND sourceport=4126 OR translatedipaddress="162.252.175.136" AND sourceport=11077)
index=activity AND rg_functionality="Access / Privileged User" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND destinationport=10862 OR destinationtranslatedaddress="151.236.25.126" AND destinationport=11331 OR destinationtranslatedaddress="158.255.215.49" AND destinationport=23079 OR destinationtranslatedaddress="185.26.239.98" AND destinationport=11076 OR destinationtranslatedaddress="151.236.25.10" AND destinationport=7205 OR destinationtranslatedaddress="37.235.53.217" AND destinationport=1358 OR destinationtranslatedaddress="151.236.23.232" AND destinationport=763 OR destinationtranslatedaddress="37.235.56.204" AND destinationport=24239 OR destinationtranslatedaddress="162.252.175.122" AND destinationport=4126 OR destinationtranslatedaddress="162.252.175.136" AND destinationport=11077)
index=activity AND rg_functionality="Access / Privileged User" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND destinationtranslatedport=10862 OR destinationtranslatedaddress="151.236.25.126" AND destinationtranslatedport=11331 OR destinationtranslatedaddress="158.255.215.49" AND destinationtranslatedport=23079 OR destinationtranslatedaddress="185.26.239.98" AND destinationtranslatedport=11076 OR destinationtranslatedaddress="151.236.25.10" AND destinationtranslatedport=7205 OR destinationtranslatedaddress="37.235.53.217" AND destinationtranslatedport=1358 OR destinationtranslatedaddress="151.236.23.232" AND destinationtranslatedport=763 OR destinationtranslatedaddress="37.235.56.204" AND destinationtranslatedport=24239 OR destinationtranslatedaddress="162.252.175.122" AND destinationtranslatedport=4126 OR destinationtranslatedaddress="162.252.175.136" AND destinationtranslatedport=11077)
index=activity AND rg_functionality="Access / Privileged User" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND translatedport=10862 OR destinationtranslatedaddress="151.236.25.126" AND translatedport=11331 OR destinationtranslatedaddress="158.255.215.49" AND translatedport=23079 OR destinationtranslatedaddress="185.26.239.98" AND translatedport=11076 OR destinationtranslatedaddress="151.236.25.10" AND translatedport=7205 OR destinationtranslatedaddress="37.235.53.217" AND translatedport=1358 OR destinationtranslatedaddress="151.236.23.232" AND translatedport=763 OR destinationtranslatedaddress="37.235.56.204" AND translatedport=24239 OR destinationtranslatedaddress="162.252.175.122" AND translatedport=4126 OR destinationtranslatedaddress="162.252.175.136" AND translatedport=11077)
index=activity AND rg_functionality="Access / Privileged User" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="162.252.175.163" AND destinationport=28693 OR destinationaddress="162.252.175.90" AND destinationport=845 OR destinationaddress="162.252.175.109" AND destinationport=28330 OR destinationaddress="151.236.20.39" AND destinationport=5524 OR destinationaddress="158.255.208.140" AND destinationport=86 OR destinationaddress="194.68.27.149" AND destinationport=13106 OR destinationaddress="194.68.27.176" AND destinationport=6460 OR destinationaddress="37.143.128.223" AND destinationport=16223 OR destinationaddress="31.40.212.130" AND destinationport=7225 OR destinationaddress="198.244.207.203" AND destinationport=2076)
index=activity AND rg_functionality="Access / Privileged User" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="162.252.175.163" AND sourceport=28693 OR sourceaddress="162.252.175.90" AND sourceport=845 OR sourceaddress="162.252.175.109" AND sourceport=28330 OR sourceaddress="151.236.20.39" AND sourceport=5524 OR sourceaddress="158.255.208.140" AND sourceport=86 OR sourceaddress="194.68.27.149" AND sourceport=13106 OR sourceaddress="194.68.27.176" AND sourceport=6460 OR sourceaddress="37.143.128.223" AND sourceport=16223 OR sourceaddress="31.40.212.130" AND sourceport=7225 OR sourceaddress="198.244.207.203" AND sourceport=2076)
index=activity AND rg_functionality="Access / Privileged User" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="162.252.175.163" AND sourceport=28693 OR translatedipaddress="162.252.175.90" AND sourceport=845 OR translatedipaddress="162.252.175.109" AND sourceport=28330 OR translatedipaddress="151.236.20.39" AND sourceport=5524 OR translatedipaddress="158.255.208.140" AND sourceport=86 OR translatedipaddress="194.68.27.149" AND sourceport=13106 OR translatedipaddress="194.68.27.176" AND sourceport=6460 OR translatedipaddress="37.143.128.223" AND sourceport=16223 OR translatedipaddress="31.40.212.130" AND sourceport=7225 OR translatedipaddress="198.244.207.203" AND sourceport=2076)
index=activity AND rg_functionality="Access / Privileged User" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND destinationport=28693 OR destinationtranslatedaddress="162.252.175.90" AND destinationport=845 OR destinationtranslatedaddress="162.252.175.109" AND destinationport=28330 OR destinationtranslatedaddress="151.236.20.39" AND destinationport=5524 OR destinationtranslatedaddress="158.255.208.140" AND destinationport=86 OR destinationtranslatedaddress="194.68.27.149" AND destinationport=13106 OR destinationtranslatedaddress="194.68.27.176" AND destinationport=6460 OR destinationtranslatedaddress="37.143.128.223" AND destinationport=16223 OR destinationtranslatedaddress="31.40.212.130" AND destinationport=7225 OR destinationtranslatedaddress="198.244.207.203" AND destinationport=2076)
index=activity AND rg_functionality="Access / Privileged User" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND destinationtranslatedport=28693 OR destinationtranslatedaddress="162.252.175.90" AND destinationtranslatedport=845 OR destinationtranslatedaddress="162.252.175.109" AND destinationtranslatedport=28330 OR destinationtranslatedaddress="151.236.20.39" AND destinationtranslatedport=5524 OR destinationtranslatedaddress="158.255.208.140" AND destinationtranslatedport=86 OR destinationtranslatedaddress="194.68.27.149" AND destinationtranslatedport=13106 OR destinationtranslatedaddress="194.68.27.176" AND destinationtranslatedport=6460 OR destinationtranslatedaddress="37.143.128.223" AND destinationtranslatedport=16223 OR destinationtranslatedaddress="31.40.212.130" AND destinationtranslatedport=7225 OR destinationtranslatedaddress="198.244.207.203" AND destinationtranslatedport=2076)
index=activity AND rg_functionality="Access / Privileged User" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND translatedport=28693 OR destinationtranslatedaddress="162.252.175.90" AND translatedport=845 OR destinationtranslatedaddress="162.252.175.109" AND translatedport=28330 OR destinationtranslatedaddress="151.236.20.39" AND translatedport=5524 OR destinationtranslatedaddress="158.255.208.140" AND translatedport=86 OR destinationtranslatedaddress="194.68.27.149" AND translatedport=13106 OR destinationtranslatedaddress="194.68.27.176" AND translatedport=6460 OR destinationtranslatedaddress="37.143.128.223" AND translatedport=16223 OR destinationtranslatedaddress="31.40.212.130" AND translatedport=7225 OR destinationtranslatedaddress="198.244.207.203" AND translatedport=2076)
index=activity AND rg_functionality="Access / Privileged User" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="208.115.230.243" AND destinationport=16697 OR destinationaddress="185.126.239.207" AND destinationport=26630 OR destinationaddress="213.183.57.174" AND destinationport=12517 OR destinationaddress="213.183.57.72" AND destinationport=12517 OR destinationaddress="213.183.56.201" AND destinationport=12517 OR destinationaddress="95.164.45.27" AND destinationport=17426 OR destinationaddress="45.120.178.161" AND destinationport=11013 OR destinationaddress="176.120.74.3" AND destinationport=17268 OR destinationaddress="92.243.64.184" AND destinationport=17146 OR destinationaddress="92.243.64.36" AND destinationport=17146)
index=activity AND rg_functionality="Access / Privileged User" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="208.115.230.243" AND sourceport=16697 OR sourceaddress="185.126.239.207" AND sourceport=26630 OR sourceaddress="213.183.57.174" AND sourceport=12517 OR sourceaddress="213.183.57.72" AND sourceport=12517 OR sourceaddress="213.183.56.201" AND sourceport=12517 OR sourceaddress="95.164.45.27" AND sourceport=17426 OR sourceaddress="45.120.178.161" AND sourceport=11013 OR sourceaddress="176.120.74.3" AND sourceport=17268 OR sourceaddress="92.243.64.184" AND sourceport=17146 OR sourceaddress="92.243.64.36" AND sourceport=17146)
index=activity AND rg_functionality="Access / Privileged User" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="208.115.230.243" AND sourceport=16697 OR translatedipaddress="185.126.239.207" AND sourceport=26630 OR translatedipaddress="213.183.57.174" AND sourceport=12517 OR translatedipaddress="213.183.57.72" AND sourceport=12517 OR translatedipaddress="213.183.56.201" AND sourceport=12517 OR translatedipaddress="95.164.45.27" AND sourceport=17426 OR translatedipaddress="45.120.178.161" AND sourceport=11013 OR translatedipaddress="176.120.74.3" AND sourceport=17268 OR translatedipaddress="92.243.64.184" AND sourceport=17146 OR translatedipaddress="92.243.64.36" AND sourceport=17146)
index=activity AND rg_functionality="Access / Privileged User" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND destinationport=16697 OR destinationtranslatedaddress="185.126.239.207" AND destinationport=26630 OR destinationtranslatedaddress="213.183.57.174" AND destinationport=12517 OR destinationtranslatedaddress="213.183.57.72" AND destinationport=12517 OR destinationtranslatedaddress="213.183.56.201" AND destinationport=12517 OR destinationtranslatedaddress="95.164.45.27" AND destinationport=17426 OR destinationtranslatedaddress="45.120.178.161" AND destinationport=11013 OR destinationtranslatedaddress="176.120.74.3" AND destinationport=17268 OR destinationtranslatedaddress="92.243.64.184" AND destinationport=17146 OR destinationtranslatedaddress="92.243.64.36" AND destinationport=17146)
index=activity AND rg_functionality="Access / Privileged User" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND destinationtranslatedport=16697 OR destinationtranslatedaddress="185.126.239.207" AND destinationtranslatedport=26630 OR destinationtranslatedaddress="213.183.57.174" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="213.183.57.72" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="213.183.56.201" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="95.164.45.27" AND destinationtranslatedport=17426 OR destinationtranslatedaddress="45.120.178.161" AND destinationtranslatedport=11013 OR destinationtranslatedaddress="176.120.74.3" AND destinationtranslatedport=17268 OR destinationtranslatedaddress="92.243.64.184" AND destinationtranslatedport=17146 OR destinationtranslatedaddress="92.243.64.36" AND destinationtranslatedport=17146)
index=activity AND rg_functionality="Access / Privileged User" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND translatedport=16697 OR destinationtranslatedaddress="185.126.239.207" AND translatedport=26630 OR destinationtranslatedaddress="213.183.57.174" AND translatedport=12517 OR destinationtranslatedaddress="213.183.57.72" AND translatedport=12517 OR destinationtranslatedaddress="213.183.56.201" AND translatedport=12517 OR destinationtranslatedaddress="95.164.45.27" AND translatedport=17426 OR destinationtranslatedaddress="45.120.178.161" AND translatedport=11013 OR destinationtranslatedaddress="176.120.74.3" AND translatedport=17268 OR destinationtranslatedaddress="92.243.64.184" AND translatedport=17146 OR destinationtranslatedaddress="92.243.64.36" AND translatedport=17146)
index=activity AND rg_functionality="Access / Privileged User" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="89.31.120.126" AND destinationport=11578 OR destinationaddress="91.132.93.33" AND destinationport=11578 OR destinationaddress="91.132.95.28" AND destinationport=8773 OR destinationaddress="91.132.95.204" AND destinationport=8773 OR destinationaddress="91.132.95.135" AND destinationport=8773 OR destinationaddress="194.233.174.22" AND destinationport=45358)
index=activity AND rg_functionality="Access / Privileged User" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="89.31.120.126" AND sourceport=11578 OR sourceaddress="91.132.93.33" AND sourceport=11578 OR sourceaddress="91.132.95.28" AND sourceport=8773 OR sourceaddress="91.132.95.204" AND sourceport=8773 OR sourceaddress="91.132.95.135" AND sourceport=8773 OR sourceaddress="194.233.174.22" AND sourceport=45358)
index=activity AND rg_functionality="Access / Privileged User" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="89.31.120.126" AND sourceport=11578 OR translatedipaddress="91.132.93.33" AND sourceport=11578 OR translatedipaddress="91.132.95.28" AND sourceport=8773 OR translatedipaddress="91.132.95.204" AND sourceport=8773 OR translatedipaddress="91.132.95.135" AND sourceport=8773 OR translatedipaddress="194.233.174.22" AND sourceport=45358)
index=activity AND rg_functionality="Access / Privileged User" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND destinationport=11578 OR destinationtranslatedaddress="91.132.93.33" AND destinationport=11578 OR destinationtranslatedaddress="91.132.95.28" AND destinationport=8773 OR destinationtranslatedaddress="91.132.95.204" AND destinationport=8773 OR destinationtranslatedaddress="91.132.95.135" AND destinationport=8773 OR destinationtranslatedaddress="194.233.174.22" AND destinationport=45358)
index=activity AND rg_functionality="Access / Privileged User" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND destinationtranslatedport=11578 OR destinationtranslatedaddress="91.132.93.33" AND destinationtranslatedport=11578 OR destinationtranslatedaddress="91.132.95.28" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="91.132.95.204" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="91.132.95.135" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="194.233.174.22" AND destinationtranslatedport=45358)
index=activity AND rg_functionality="Access / Privileged User" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND translatedport=11578 OR destinationtranslatedaddress="91.132.93.33" AND translatedport=11578 OR destinationtranslatedaddress="91.132.95.28" AND translatedport=8773 OR destinationtranslatedaddress="91.132.95.204" AND translatedport=8773 OR destinationtranslatedaddress="91.132.95.135" AND translatedport=8773 OR destinationtranslatedaddress="194.233.174.22" AND translatedport=45358)
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="158.255.212.173" AND destinationport=10862 OR destinationaddress="151.236.25.126" AND destinationport=11331 OR destinationaddress="158.255.215.49" AND destinationport=23079 OR destinationaddress="185.26.239.98" AND destinationport=11076 OR destinationaddress="151.236.25.10" AND destinationport=7205 OR destinationaddress="37.235.53.217" AND destinationport=1358 OR destinationaddress="151.236.23.232" AND destinationport=763 OR destinationaddress="37.235.56.204" AND destinationport=24239 OR destinationaddress="162.252.175.122" AND destinationport=4126 OR destinationaddress="162.252.175.136" AND destinationport=11077)
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="158.255.212.173" AND sourceport=10862 OR sourceaddress="151.236.25.126" AND sourceport=11331 OR sourceaddress="158.255.215.49" AND sourceport=23079 OR sourceaddress="185.26.239.98" AND sourceport=11076 OR sourceaddress="151.236.25.10" AND sourceport=7205 OR sourceaddress="37.235.53.217" AND sourceport=1358 OR sourceaddress="151.236.23.232" AND sourceport=763 OR sourceaddress="37.235.56.204" AND sourceport=24239 OR sourceaddress="162.252.175.122" AND sourceport=4126 OR sourceaddress="162.252.175.136" AND sourceport=11077)
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="158.255.212.173" AND sourceport=10862 OR translatedipaddress="151.236.25.126" AND sourceport=11331 OR translatedipaddress="158.255.215.49" AND sourceport=23079 OR translatedipaddress="185.26.239.98" AND sourceport=11076 OR translatedipaddress="151.236.25.10" AND sourceport=7205 OR translatedipaddress="37.235.53.217" AND sourceport=1358 OR translatedipaddress="151.236.23.232" AND sourceport=763 OR translatedipaddress="37.235.56.204" AND sourceport=24239 OR translatedipaddress="162.252.175.122" AND sourceport=4126 OR translatedipaddress="162.252.175.136" AND sourceport=11077)
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND destinationport=10862 OR destinationtranslatedaddress="151.236.25.126" AND destinationport=11331 OR destinationtranslatedaddress="158.255.215.49" AND destinationport=23079 OR destinationtranslatedaddress="185.26.239.98" AND destinationport=11076 OR destinationtranslatedaddress="151.236.25.10" AND destinationport=7205 OR destinationtranslatedaddress="37.235.53.217" AND destinationport=1358 OR destinationtranslatedaddress="151.236.23.232" AND destinationport=763 OR destinationtranslatedaddress="37.235.56.204" AND destinationport=24239 OR destinationtranslatedaddress="162.252.175.122" AND destinationport=4126 OR destinationtranslatedaddress="162.252.175.136" AND destinationport=11077)
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND destinationtranslatedport=10862 OR destinationtranslatedaddress="151.236.25.126" AND destinationtranslatedport=11331 OR destinationtranslatedaddress="158.255.215.49" AND destinationtranslatedport=23079 OR destinationtranslatedaddress="185.26.239.98" AND destinationtranslatedport=11076 OR destinationtranslatedaddress="151.236.25.10" AND destinationtranslatedport=7205 OR destinationtranslatedaddress="37.235.53.217" AND destinationtranslatedport=1358 OR destinationtranslatedaddress="151.236.23.232" AND destinationtranslatedport=763 OR destinationtranslatedaddress="37.235.56.204" AND destinationtranslatedport=24239 OR destinationtranslatedaddress="162.252.175.122" AND destinationtranslatedport=4126 OR destinationtranslatedaddress="162.252.175.136" AND destinationtranslatedport=11077)
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND translatedport=10862 OR destinationtranslatedaddress="151.236.25.126" AND translatedport=11331 OR destinationtranslatedaddress="158.255.215.49" AND translatedport=23079 OR destinationtranslatedaddress="185.26.239.98" AND translatedport=11076 OR destinationtranslatedaddress="151.236.25.10" AND translatedport=7205 OR destinationtranslatedaddress="37.235.53.217" AND translatedport=1358 OR destinationtranslatedaddress="151.236.23.232" AND translatedport=763 OR destinationtranslatedaddress="37.235.56.204" AND translatedport=24239 OR destinationtranslatedaddress="162.252.175.122" AND translatedport=4126 OR destinationtranslatedaddress="162.252.175.136" AND translatedport=11077)
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="162.252.175.163" AND destinationport=28693 OR destinationaddress="162.252.175.90" AND destinationport=845 OR destinationaddress="162.252.175.109" AND destinationport=28330 OR destinationaddress="151.236.20.39" AND destinationport=5524 OR destinationaddress="158.255.208.140" AND destinationport=86 OR destinationaddress="194.68.27.149" AND destinationport=13106 OR destinationaddress="194.68.27.176" AND destinationport=6460 OR destinationaddress="37.143.128.223" AND destinationport=16223 OR destinationaddress="31.40.212.130" AND destinationport=7225 OR destinationaddress="198.244.207.203" AND destinationport=2076)
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="162.252.175.163" AND sourceport=28693 OR sourceaddress="162.252.175.90" AND sourceport=845 OR sourceaddress="162.252.175.109" AND sourceport=28330 OR sourceaddress="151.236.20.39" AND sourceport=5524 OR sourceaddress="158.255.208.140" AND sourceport=86 OR sourceaddress="194.68.27.149" AND sourceport=13106 OR sourceaddress="194.68.27.176" AND sourceport=6460 OR sourceaddress="37.143.128.223" AND sourceport=16223 OR sourceaddress="31.40.212.130" AND sourceport=7225 OR sourceaddress="198.244.207.203" AND sourceport=2076)
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="162.252.175.163" AND sourceport=28693 OR translatedipaddress="162.252.175.90" AND sourceport=845 OR translatedipaddress="162.252.175.109" AND sourceport=28330 OR translatedipaddress="151.236.20.39" AND sourceport=5524 OR translatedipaddress="158.255.208.140" AND sourceport=86 OR translatedipaddress="194.68.27.149" AND sourceport=13106 OR translatedipaddress="194.68.27.176" AND sourceport=6460 OR translatedipaddress="37.143.128.223" AND sourceport=16223 OR translatedipaddress="31.40.212.130" AND sourceport=7225 OR translatedipaddress="198.244.207.203" AND sourceport=2076)
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND destinationport=28693 OR destinationtranslatedaddress="162.252.175.90" AND destinationport=845 OR destinationtranslatedaddress="162.252.175.109" AND destinationport=28330 OR destinationtranslatedaddress="151.236.20.39" AND destinationport=5524 OR destinationtranslatedaddress="158.255.208.140" AND destinationport=86 OR destinationtranslatedaddress="194.68.27.149" AND destinationport=13106 OR destinationtranslatedaddress="194.68.27.176" AND destinationport=6460 OR destinationtranslatedaddress="37.143.128.223" AND destinationport=16223 OR destinationtranslatedaddress="31.40.212.130" AND destinationport=7225 OR destinationtranslatedaddress="198.244.207.203" AND destinationport=2076)
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND destinationtranslatedport=28693 OR destinationtranslatedaddress="162.252.175.90" AND destinationtranslatedport=845 OR destinationtranslatedaddress="162.252.175.109" AND destinationtranslatedport=28330 OR destinationtranslatedaddress="151.236.20.39" AND destinationtranslatedport=5524 OR destinationtranslatedaddress="158.255.208.140" AND destinationtranslatedport=86 OR destinationtranslatedaddress="194.68.27.149" AND destinationtranslatedport=13106 OR destinationtranslatedaddress="194.68.27.176" AND destinationtranslatedport=6460 OR destinationtranslatedaddress="37.143.128.223" AND destinationtranslatedport=16223 OR destinationtranslatedaddress="31.40.212.130" AND destinationtranslatedport=7225 OR destinationtranslatedaddress="198.244.207.203" AND destinationtranslatedport=2076)
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND translatedport=28693 OR destinationtranslatedaddress="162.252.175.90" AND translatedport=845 OR destinationtranslatedaddress="162.252.175.109" AND translatedport=28330 OR destinationtranslatedaddress="151.236.20.39" AND translatedport=5524 OR destinationtranslatedaddress="158.255.208.140" AND translatedport=86 OR destinationtranslatedaddress="194.68.27.149" AND translatedport=13106 OR destinationtranslatedaddress="194.68.27.176" AND translatedport=6460 OR destinationtranslatedaddress="37.143.128.223" AND translatedport=16223 OR destinationtranslatedaddress="31.40.212.130" AND translatedport=7225 OR destinationtranslatedaddress="198.244.207.203" AND translatedport=2076)
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="208.115.230.243" AND destinationport=16697 OR destinationaddress="185.126.239.207" AND destinationport=26630 OR destinationaddress="213.183.57.174" AND destinationport=12517 OR destinationaddress="213.183.57.72" AND destinationport=12517 OR destinationaddress="213.183.56.201" AND destinationport=12517 OR destinationaddress="95.164.45.27" AND destinationport=17426 OR destinationaddress="45.120.178.161" AND destinationport=11013 OR destinationaddress="176.120.74.3" AND destinationport=17268 OR destinationaddress="92.243.64.184" AND destinationport=17146 OR destinationaddress="92.243.64.36" AND destinationport=17146)
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="208.115.230.243" AND sourceport=16697 OR sourceaddress="185.126.239.207" AND sourceport=26630 OR sourceaddress="213.183.57.174" AND sourceport=12517 OR sourceaddress="213.183.57.72" AND sourceport=12517 OR sourceaddress="213.183.56.201" AND sourceport=12517 OR sourceaddress="95.164.45.27" AND sourceport=17426 OR sourceaddress="45.120.178.161" AND sourceport=11013 OR sourceaddress="176.120.74.3" AND sourceport=17268 OR sourceaddress="92.243.64.184" AND sourceport=17146 OR sourceaddress="92.243.64.36" AND sourceport=17146)
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="208.115.230.243" AND sourceport=16697 OR translatedipaddress="185.126.239.207" AND sourceport=26630 OR translatedipaddress="213.183.57.174" AND sourceport=12517 OR translatedipaddress="213.183.57.72" AND sourceport=12517 OR translatedipaddress="213.183.56.201" AND sourceport=12517 OR translatedipaddress="95.164.45.27" AND sourceport=17426 OR translatedipaddress="45.120.178.161" AND sourceport=11013 OR translatedipaddress="176.120.74.3" AND sourceport=17268 OR translatedipaddress="92.243.64.184" AND sourceport=17146 OR translatedipaddress="92.243.64.36" AND sourceport=17146)
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND destinationport=16697 OR destinationtranslatedaddress="185.126.239.207" AND destinationport=26630 OR destinationtranslatedaddress="213.183.57.174" AND destinationport=12517 OR destinationtranslatedaddress="213.183.57.72" AND destinationport=12517 OR destinationtranslatedaddress="213.183.56.201" AND destinationport=12517 OR destinationtranslatedaddress="95.164.45.27" AND destinationport=17426 OR destinationtranslatedaddress="45.120.178.161" AND destinationport=11013 OR destinationtranslatedaddress="176.120.74.3" AND destinationport=17268 OR destinationtranslatedaddress="92.243.64.184" AND destinationport=17146 OR destinationtranslatedaddress="92.243.64.36" AND destinationport=17146)
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND destinationtranslatedport=16697 OR destinationtranslatedaddress="185.126.239.207" AND destinationtranslatedport=26630 OR destinationtranslatedaddress="213.183.57.174" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="213.183.57.72" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="213.183.56.201" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="95.164.45.27" AND destinationtranslatedport=17426 OR destinationtranslatedaddress="45.120.178.161" AND destinationtranslatedport=11013 OR destinationtranslatedaddress="176.120.74.3" AND destinationtranslatedport=17268 OR destinationtranslatedaddress="92.243.64.184" AND destinationtranslatedport=17146 OR destinationtranslatedaddress="92.243.64.36" AND destinationtranslatedport=17146)
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND translatedport=16697 OR destinationtranslatedaddress="185.126.239.207" AND translatedport=26630 OR destinationtranslatedaddress="213.183.57.174" AND translatedport=12517 OR destinationtranslatedaddress="213.183.57.72" AND translatedport=12517 OR destinationtranslatedaddress="213.183.56.201" AND translatedport=12517 OR destinationtranslatedaddress="95.164.45.27" AND translatedport=17426 OR destinationtranslatedaddress="45.120.178.161" AND translatedport=11013 OR destinationtranslatedaddress="176.120.74.3" AND translatedport=17268 OR destinationtranslatedaddress="92.243.64.184" AND translatedport=17146 OR destinationtranslatedaddress="92.243.64.36" AND translatedport=17146)
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="89.31.120.126" AND destinationport=11578 OR destinationaddress="91.132.93.33" AND destinationport=11578 OR destinationaddress="91.132.95.28" AND destinationport=8773 OR destinationaddress="91.132.95.204" AND destinationport=8773 OR destinationaddress="91.132.95.135" AND destinationport=8773 OR destinationaddress="194.233.174.22" AND destinationport=45358)
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="89.31.120.126" AND sourceport=11578 OR sourceaddress="91.132.93.33" AND sourceport=11578 OR sourceaddress="91.132.95.28" AND sourceport=8773 OR sourceaddress="91.132.95.204" AND sourceport=8773 OR sourceaddress="91.132.95.135" AND sourceport=8773 OR sourceaddress="194.233.174.22" AND sourceport=45358)
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="89.31.120.126" AND sourceport=11578 OR translatedipaddress="91.132.93.33" AND sourceport=11578 OR translatedipaddress="91.132.95.28" AND sourceport=8773 OR translatedipaddress="91.132.95.204" AND sourceport=8773 OR translatedipaddress="91.132.95.135" AND sourceport=8773 OR translatedipaddress="194.233.174.22" AND sourceport=45358)
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND destinationport=11578 OR destinationtranslatedaddress="91.132.93.33" AND destinationport=11578 OR destinationtranslatedaddress="91.132.95.28" AND destinationport=8773 OR destinationtranslatedaddress="91.132.95.204" AND destinationport=8773 OR destinationtranslatedaddress="91.132.95.135" AND destinationport=8773 OR destinationtranslatedaddress="194.233.174.22" AND destinationport=45358)
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND destinationtranslatedport=11578 OR destinationtranslatedaddress="91.132.93.33" AND destinationtranslatedport=11578 OR destinationtranslatedaddress="91.132.95.28" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="91.132.95.204" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="91.132.95.135" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="194.233.174.22" AND destinationtranslatedport=45358)
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND translatedport=11578 OR destinationtranslatedaddress="91.132.93.33" AND translatedport=11578 OR destinationtranslatedaddress="91.132.95.28" AND translatedport=8773 OR destinationtranslatedaddress="91.132.95.204" AND translatedport=8773 OR destinationtranslatedaddress="91.132.95.135" AND translatedport=8773 OR destinationtranslatedaddress="194.233.174.22" AND translatedport=45358)
index=activity AND rg_functionality="Access / Identity Management" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="158.255.212.173" AND destinationport=10862 OR destinationaddress="151.236.25.126" AND destinationport=11331 OR destinationaddress="158.255.215.49" AND destinationport=23079 OR destinationaddress="185.26.239.98" AND destinationport=11076 OR destinationaddress="151.236.25.10" AND destinationport=7205 OR destinationaddress="37.235.53.217" AND destinationport=1358 OR destinationaddress="151.236.23.232" AND destinationport=763 OR destinationaddress="37.235.56.204" AND destinationport=24239 OR destinationaddress="162.252.175.122" AND destinationport=4126 OR destinationaddress="162.252.175.136" AND destinationport=11077)
index=activity AND rg_functionality="Access / Identity Management" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="158.255.212.173" AND sourceport=10862 OR sourceaddress="151.236.25.126" AND sourceport=11331 OR sourceaddress="158.255.215.49" AND sourceport=23079 OR sourceaddress="185.26.239.98" AND sourceport=11076 OR sourceaddress="151.236.25.10" AND sourceport=7205 OR sourceaddress="37.235.53.217" AND sourceport=1358 OR sourceaddress="151.236.23.232" AND sourceport=763 OR sourceaddress="37.235.56.204" AND sourceport=24239 OR sourceaddress="162.252.175.122" AND sourceport=4126 OR sourceaddress="162.252.175.136" AND sourceport=11077)
index=activity AND rg_functionality="Access / Identity Management" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="158.255.212.173" AND sourceport=10862 OR translatedipaddress="151.236.25.126" AND sourceport=11331 OR translatedipaddress="158.255.215.49" AND sourceport=23079 OR translatedipaddress="185.26.239.98" AND sourceport=11076 OR translatedipaddress="151.236.25.10" AND sourceport=7205 OR translatedipaddress="37.235.53.217" AND sourceport=1358 OR translatedipaddress="151.236.23.232" AND sourceport=763 OR translatedipaddress="37.235.56.204" AND sourceport=24239 OR translatedipaddress="162.252.175.122" AND sourceport=4126 OR translatedipaddress="162.252.175.136" AND sourceport=11077)
index=activity AND rg_functionality="Access / Identity Management" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND destinationport=10862 OR destinationtranslatedaddress="151.236.25.126" AND destinationport=11331 OR destinationtranslatedaddress="158.255.215.49" AND destinationport=23079 OR destinationtranslatedaddress="185.26.239.98" AND destinationport=11076 OR destinationtranslatedaddress="151.236.25.10" AND destinationport=7205 OR destinationtranslatedaddress="37.235.53.217" AND destinationport=1358 OR destinationtranslatedaddress="151.236.23.232" AND destinationport=763 OR destinationtranslatedaddress="37.235.56.204" AND destinationport=24239 OR destinationtranslatedaddress="162.252.175.122" AND destinationport=4126 OR destinationtranslatedaddress="162.252.175.136" AND destinationport=11077)
index=activity AND rg_functionality="Access / Identity Management" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND destinationtranslatedport=10862 OR destinationtranslatedaddress="151.236.25.126" AND destinationtranslatedport=11331 OR destinationtranslatedaddress="158.255.215.49" AND destinationtranslatedport=23079 OR destinationtranslatedaddress="185.26.239.98" AND destinationtranslatedport=11076 OR destinationtranslatedaddress="151.236.25.10" AND destinationtranslatedport=7205 OR destinationtranslatedaddress="37.235.53.217" AND destinationtranslatedport=1358 OR destinationtranslatedaddress="151.236.23.232" AND destinationtranslatedport=763 OR destinationtranslatedaddress="37.235.56.204" AND destinationtranslatedport=24239 OR destinationtranslatedaddress="162.252.175.122" AND destinationtranslatedport=4126 OR destinationtranslatedaddress="162.252.175.136" AND destinationtranslatedport=11077)
index=activity AND rg_functionality="Access / Identity Management" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND translatedport=10862 OR destinationtranslatedaddress="151.236.25.126" AND translatedport=11331 OR destinationtranslatedaddress="158.255.215.49" AND translatedport=23079 OR destinationtranslatedaddress="185.26.239.98" AND translatedport=11076 OR destinationtranslatedaddress="151.236.25.10" AND translatedport=7205 OR destinationtranslatedaddress="37.235.53.217" AND translatedport=1358 OR destinationtranslatedaddress="151.236.23.232" AND translatedport=763 OR destinationtranslatedaddress="37.235.56.204" AND translatedport=24239 OR destinationtranslatedaddress="162.252.175.122" AND translatedport=4126 OR destinationtranslatedaddress="162.252.175.136" AND translatedport=11077)
index=activity AND rg_functionality="Access / Identity Management" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="162.252.175.163" AND destinationport=28693 OR destinationaddress="162.252.175.90" AND destinationport=845 OR destinationaddress="162.252.175.109" AND destinationport=28330 OR destinationaddress="151.236.20.39" AND destinationport=5524 OR destinationaddress="158.255.208.140" AND destinationport=86 OR destinationaddress="194.68.27.149" AND destinationport=13106 OR destinationaddress="194.68.27.176" AND destinationport=6460 OR destinationaddress="37.143.128.223" AND destinationport=16223 OR destinationaddress="31.40.212.130" AND destinationport=7225 OR destinationaddress="198.244.207.203" AND destinationport=2076)
index=activity AND rg_functionality="Access / Identity Management" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="162.252.175.163" AND sourceport=28693 OR sourceaddress="162.252.175.90" AND sourceport=845 OR sourceaddress="162.252.175.109" AND sourceport=28330 OR sourceaddress="151.236.20.39" AND sourceport=5524 OR sourceaddress="158.255.208.140" AND sourceport=86 OR sourceaddress="194.68.27.149" AND sourceport=13106 OR sourceaddress="194.68.27.176" AND sourceport=6460 OR sourceaddress="37.143.128.223" AND sourceport=16223 OR sourceaddress="31.40.212.130" AND sourceport=7225 OR sourceaddress="198.244.207.203" AND sourceport=2076)
index=activity AND rg_functionality="Access / Identity Management" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="162.252.175.163" AND sourceport=28693 OR translatedipaddress="162.252.175.90" AND sourceport=845 OR translatedipaddress="162.252.175.109" AND sourceport=28330 OR translatedipaddress="151.236.20.39" AND sourceport=5524 OR translatedipaddress="158.255.208.140" AND sourceport=86 OR translatedipaddress="194.68.27.149" AND sourceport=13106 OR translatedipaddress="194.68.27.176" AND sourceport=6460 OR translatedipaddress="37.143.128.223" AND sourceport=16223 OR translatedipaddress="31.40.212.130" AND sourceport=7225 OR translatedipaddress="198.244.207.203" AND sourceport=2076)
index=activity AND rg_functionality="Access / Identity Management" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND destinationport=28693 OR destinationtranslatedaddress="162.252.175.90" AND destinationport=845 OR destinationtranslatedaddress="162.252.175.109" AND destinationport=28330 OR destinationtranslatedaddress="151.236.20.39" AND destinationport=5524 OR destinationtranslatedaddress="158.255.208.140" AND destinationport=86 OR destinationtranslatedaddress="194.68.27.149" AND destinationport=13106 OR destinationtranslatedaddress="194.68.27.176" AND destinationport=6460 OR destinationtranslatedaddress="37.143.128.223" AND destinationport=16223 OR destinationtranslatedaddress="31.40.212.130" AND destinationport=7225 OR destinationtranslatedaddress="198.244.207.203" AND destinationport=2076)
index=activity AND rg_functionality="Access / Identity Management" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND destinationtranslatedport=28693 OR destinationtranslatedaddress="162.252.175.90" AND destinationtranslatedport=845 OR destinationtranslatedaddress="162.252.175.109" AND destinationtranslatedport=28330 OR destinationtranslatedaddress="151.236.20.39" AND destinationtranslatedport=5524 OR destinationtranslatedaddress="158.255.208.140" AND destinationtranslatedport=86 OR destinationtranslatedaddress="194.68.27.149" AND destinationtranslatedport=13106 OR destinationtranslatedaddress="194.68.27.176" AND destinationtranslatedport=6460 OR destinationtranslatedaddress="37.143.128.223" AND destinationtranslatedport=16223 OR destinationtranslatedaddress="31.40.212.130" AND destinationtranslatedport=7225 OR destinationtranslatedaddress="198.244.207.203" AND destinationtranslatedport=2076)
index=activity AND rg_functionality="Access / Identity Management" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND translatedport=28693 OR destinationtranslatedaddress="162.252.175.90" AND translatedport=845 OR destinationtranslatedaddress="162.252.175.109" AND translatedport=28330 OR destinationtranslatedaddress="151.236.20.39" AND translatedport=5524 OR destinationtranslatedaddress="158.255.208.140" AND translatedport=86 OR destinationtranslatedaddress="194.68.27.149" AND translatedport=13106 OR destinationtranslatedaddress="194.68.27.176" AND translatedport=6460 OR destinationtranslatedaddress="37.143.128.223" AND translatedport=16223 OR destinationtranslatedaddress="31.40.212.130" AND translatedport=7225 OR destinationtranslatedaddress="198.244.207.203" AND translatedport=2076)
index=activity AND rg_functionality="Access / Identity Management" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="208.115.230.243" AND destinationport=16697 OR destinationaddress="185.126.239.207" AND destinationport=26630 OR destinationaddress="213.183.57.174" AND destinationport=12517 OR destinationaddress="213.183.57.72" AND destinationport=12517 OR destinationaddress="213.183.56.201" AND destinationport=12517 OR destinationaddress="95.164.45.27" AND destinationport=17426 OR destinationaddress="45.120.178.161" AND destinationport=11013 OR destinationaddress="176.120.74.3" AND destinationport=17268 OR destinationaddress="92.243.64.184" AND destinationport=17146 OR destinationaddress="92.243.64.36" AND destinationport=17146)
index=activity AND rg_functionality="Access / Identity Management" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="208.115.230.243" AND sourceport=16697 OR sourceaddress="185.126.239.207" AND sourceport=26630 OR sourceaddress="213.183.57.174" AND sourceport=12517 OR sourceaddress="213.183.57.72" AND sourceport=12517 OR sourceaddress="213.183.56.201" AND sourceport=12517 OR sourceaddress="95.164.45.27" AND sourceport=17426 OR sourceaddress="45.120.178.161" AND sourceport=11013 OR sourceaddress="176.120.74.3" AND sourceport=17268 OR sourceaddress="92.243.64.184" AND sourceport=17146 OR sourceaddress="92.243.64.36" AND sourceport=17146)
index=activity AND rg_functionality="Access / Identity Management" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="208.115.230.243" AND sourceport=16697 OR translatedipaddress="185.126.239.207" AND sourceport=26630 OR translatedipaddress="213.183.57.174" AND sourceport=12517 OR translatedipaddress="213.183.57.72" AND sourceport=12517 OR translatedipaddress="213.183.56.201" AND sourceport=12517 OR translatedipaddress="95.164.45.27" AND sourceport=17426 OR translatedipaddress="45.120.178.161" AND sourceport=11013 OR translatedipaddress="176.120.74.3" AND sourceport=17268 OR translatedipaddress="92.243.64.184" AND sourceport=17146 OR translatedipaddress="92.243.64.36" AND sourceport=17146)
index=activity AND rg_functionality="Access / Identity Management" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND destinationport=16697 OR destinationtranslatedaddress="185.126.239.207" AND destinationport=26630 OR destinationtranslatedaddress="213.183.57.174" AND destinationport=12517 OR destinationtranslatedaddress="213.183.57.72" AND destinationport=12517 OR destinationtranslatedaddress="213.183.56.201" AND destinationport=12517 OR destinationtranslatedaddress="95.164.45.27" AND destinationport=17426 OR destinationtranslatedaddress="45.120.178.161" AND destinationport=11013 OR destinationtranslatedaddress="176.120.74.3" AND destinationport=17268 OR destinationtranslatedaddress="92.243.64.184" AND destinationport=17146 OR destinationtranslatedaddress="92.243.64.36" AND destinationport=17146)
index=activity AND rg_functionality="Access / Identity Management" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND destinationtranslatedport=16697 OR destinationtranslatedaddress="185.126.239.207" AND destinationtranslatedport=26630 OR destinationtranslatedaddress="213.183.57.174" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="213.183.57.72" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="213.183.56.201" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="95.164.45.27" AND destinationtranslatedport=17426 OR destinationtranslatedaddress="45.120.178.161" AND destinationtranslatedport=11013 OR destinationtranslatedaddress="176.120.74.3" AND destinationtranslatedport=17268 OR destinationtranslatedaddress="92.243.64.184" AND destinationtranslatedport=17146 OR destinationtranslatedaddress="92.243.64.36" AND destinationtranslatedport=17146)
index=activity AND rg_functionality="Access / Identity Management" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND translatedport=16697 OR destinationtranslatedaddress="185.126.239.207" AND translatedport=26630 OR destinationtranslatedaddress="213.183.57.174" AND translatedport=12517 OR destinationtranslatedaddress="213.183.57.72" AND translatedport=12517 OR destinationtranslatedaddress="213.183.56.201" AND translatedport=12517 OR destinationtranslatedaddress="95.164.45.27" AND translatedport=17426 OR destinationtranslatedaddress="45.120.178.161" AND translatedport=11013 OR destinationtranslatedaddress="176.120.74.3" AND translatedport=17268 OR destinationtranslatedaddress="92.243.64.184" AND translatedport=17146 OR destinationtranslatedaddress="92.243.64.36" AND translatedport=17146)
index=activity AND rg_functionality="Access / Identity Management" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="89.31.120.126" AND destinationport=11578 OR destinationaddress="91.132.93.33" AND destinationport=11578 OR destinationaddress="91.132.95.28" AND destinationport=8773 OR destinationaddress="91.132.95.204" AND destinationport=8773 OR destinationaddress="91.132.95.135" AND destinationport=8773 OR destinationaddress="194.233.174.22" AND destinationport=45358)
index=activity AND rg_functionality="Access / Identity Management" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="89.31.120.126" AND sourceport=11578 OR sourceaddress="91.132.93.33" AND sourceport=11578 OR sourceaddress="91.132.95.28" AND sourceport=8773 OR sourceaddress="91.132.95.204" AND sourceport=8773 OR sourceaddress="91.132.95.135" AND sourceport=8773 OR sourceaddress="194.233.174.22" AND sourceport=45358)
index=activity AND rg_functionality="Access / Identity Management" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="89.31.120.126" AND sourceport=11578 OR translatedipaddress="91.132.93.33" AND sourceport=11578 OR translatedipaddress="91.132.95.28" AND sourceport=8773 OR translatedipaddress="91.132.95.204" AND sourceport=8773 OR translatedipaddress="91.132.95.135" AND sourceport=8773 OR translatedipaddress="194.233.174.22" AND sourceport=45358)
index=activity AND rg_functionality="Access / Identity Management" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND destinationport=11578 OR destinationtranslatedaddress="91.132.93.33" AND destinationport=11578 OR destinationtranslatedaddress="91.132.95.28" AND destinationport=8773 OR destinationtranslatedaddress="91.132.95.204" AND destinationport=8773 OR destinationtranslatedaddress="91.132.95.135" AND destinationport=8773 OR destinationtranslatedaddress="194.233.174.22" AND destinationport=45358)
index=activity AND rg_functionality="Access / Identity Management" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND destinationtranslatedport=11578 OR destinationtranslatedaddress="91.132.93.33" AND destinationtranslatedport=11578 OR destinationtranslatedaddress="91.132.95.28" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="91.132.95.204" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="91.132.95.135" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="194.233.174.22" AND destinationtranslatedport=45358)
index=activity AND rg_functionality="Access / Identity Management" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND translatedport=11578 OR destinationtranslatedaddress="91.132.93.33" AND translatedport=11578 OR destinationtranslatedaddress="91.132.95.28" AND translatedport=8773 OR destinationtranslatedaddress="91.132.95.204" AND translatedport=8773 OR destinationtranslatedaddress="91.132.95.135" AND translatedport=8773 OR destinationtranslatedaddress="194.233.174.22" AND translatedport=45358)
index=activity AND rg_functionality="Identity Access Management" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="158.255.212.173" AND destinationport=10862 OR destinationaddress="151.236.25.126" AND destinationport=11331 OR destinationaddress="158.255.215.49" AND destinationport=23079 OR destinationaddress="185.26.239.98" AND destinationport=11076 OR destinationaddress="151.236.25.10" AND destinationport=7205 OR destinationaddress="37.235.53.217" AND destinationport=1358 OR destinationaddress="151.236.23.232" AND destinationport=763 OR destinationaddress="37.235.56.204" AND destinationport=24239 OR destinationaddress="162.252.175.122" AND destinationport=4126 OR destinationaddress="162.252.175.136" AND destinationport=11077)
index=activity AND rg_functionality="Identity Access Management" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="158.255.212.173" AND sourceport=10862 OR sourceaddress="151.236.25.126" AND sourceport=11331 OR sourceaddress="158.255.215.49" AND sourceport=23079 OR sourceaddress="185.26.239.98" AND sourceport=11076 OR sourceaddress="151.236.25.10" AND sourceport=7205 OR sourceaddress="37.235.53.217" AND sourceport=1358 OR sourceaddress="151.236.23.232" AND sourceport=763 OR sourceaddress="37.235.56.204" AND sourceport=24239 OR sourceaddress="162.252.175.122" AND sourceport=4126 OR sourceaddress="162.252.175.136" AND sourceport=11077)
index=activity AND rg_functionality="Identity Access Management" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="158.255.212.173" AND sourceport=10862 OR translatedipaddress="151.236.25.126" AND sourceport=11331 OR translatedipaddress="158.255.215.49" AND sourceport=23079 OR translatedipaddress="185.26.239.98" AND sourceport=11076 OR translatedipaddress="151.236.25.10" AND sourceport=7205 OR translatedipaddress="37.235.53.217" AND sourceport=1358 OR translatedipaddress="151.236.23.232" AND sourceport=763 OR translatedipaddress="37.235.56.204" AND sourceport=24239 OR translatedipaddress="162.252.175.122" AND sourceport=4126 OR translatedipaddress="162.252.175.136" AND sourceport=11077)
index=activity AND rg_functionality="Identity Access Management" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND destinationport=10862 OR destinationtranslatedaddress="151.236.25.126" AND destinationport=11331 OR destinationtranslatedaddress="158.255.215.49" AND destinationport=23079 OR destinationtranslatedaddress="185.26.239.98" AND destinationport=11076 OR destinationtranslatedaddress="151.236.25.10" AND destinationport=7205 OR destinationtranslatedaddress="37.235.53.217" AND destinationport=1358 OR destinationtranslatedaddress="151.236.23.232" AND destinationport=763 OR destinationtranslatedaddress="37.235.56.204" AND destinationport=24239 OR destinationtranslatedaddress="162.252.175.122" AND destinationport=4126 OR destinationtranslatedaddress="162.252.175.136" AND destinationport=11077)
index=activity AND rg_functionality="Identity Access Management" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND destinationtranslatedport=10862 OR destinationtranslatedaddress="151.236.25.126" AND destinationtranslatedport=11331 OR destinationtranslatedaddress="158.255.215.49" AND destinationtranslatedport=23079 OR destinationtranslatedaddress="185.26.239.98" AND destinationtranslatedport=11076 OR destinationtranslatedaddress="151.236.25.10" AND destinationtranslatedport=7205 OR destinationtranslatedaddress="37.235.53.217" AND destinationtranslatedport=1358 OR destinationtranslatedaddress="151.236.23.232" AND destinationtranslatedport=763 OR destinationtranslatedaddress="37.235.56.204" AND destinationtranslatedport=24239 OR destinationtranslatedaddress="162.252.175.122" AND destinationtranslatedport=4126 OR destinationtranslatedaddress="162.252.175.136" AND destinationtranslatedport=11077)
index=activity AND rg_functionality="Identity Access Management" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND translatedport=10862 OR destinationtranslatedaddress="151.236.25.126" AND translatedport=11331 OR destinationtranslatedaddress="158.255.215.49" AND translatedport=23079 OR destinationtranslatedaddress="185.26.239.98" AND translatedport=11076 OR destinationtranslatedaddress="151.236.25.10" AND translatedport=7205 OR destinationtranslatedaddress="37.235.53.217" AND translatedport=1358 OR destinationtranslatedaddress="151.236.23.232" AND translatedport=763 OR destinationtranslatedaddress="37.235.56.204" AND translatedport=24239 OR destinationtranslatedaddress="162.252.175.122" AND translatedport=4126 OR destinationtranslatedaddress="162.252.175.136" AND translatedport=11077)
index=activity AND rg_functionality="Identity Access Management" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="162.252.175.163" AND destinationport=28693 OR destinationaddress="162.252.175.90" AND destinationport=845 OR destinationaddress="162.252.175.109" AND destinationport=28330 OR destinationaddress="151.236.20.39" AND destinationport=5524 OR destinationaddress="158.255.208.140" AND destinationport=86 OR destinationaddress="194.68.27.149" AND destinationport=13106 OR destinationaddress="194.68.27.176" AND destinationport=6460 OR destinationaddress="37.143.128.223" AND destinationport=16223 OR destinationaddress="31.40.212.130" AND destinationport=7225 OR destinationaddress="198.244.207.203" AND destinationport=2076)
index=activity AND rg_functionality="Identity Access Management" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="162.252.175.163" AND sourceport=28693 OR sourceaddress="162.252.175.90" AND sourceport=845 OR sourceaddress="162.252.175.109" AND sourceport=28330 OR sourceaddress="151.236.20.39" AND sourceport=5524 OR sourceaddress="158.255.208.140" AND sourceport=86 OR sourceaddress="194.68.27.149" AND sourceport=13106 OR sourceaddress="194.68.27.176" AND sourceport=6460 OR sourceaddress="37.143.128.223" AND sourceport=16223 OR sourceaddress="31.40.212.130" AND sourceport=7225 OR sourceaddress="198.244.207.203" AND sourceport=2076)
index=activity AND rg_functionality="Identity Access Management" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="162.252.175.163" AND sourceport=28693 OR translatedipaddress="162.252.175.90" AND sourceport=845 OR translatedipaddress="162.252.175.109" AND sourceport=28330 OR translatedipaddress="151.236.20.39" AND sourceport=5524 OR translatedipaddress="158.255.208.140" AND sourceport=86 OR translatedipaddress="194.68.27.149" AND sourceport=13106 OR translatedipaddress="194.68.27.176" AND sourceport=6460 OR translatedipaddress="37.143.128.223" AND sourceport=16223 OR translatedipaddress="31.40.212.130" AND sourceport=7225 OR translatedipaddress="198.244.207.203" AND sourceport=2076)
index=activity AND rg_functionality="Identity Access Management" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND destinationport=28693 OR destinationtranslatedaddress="162.252.175.90" AND destinationport=845 OR destinationtranslatedaddress="162.252.175.109" AND destinationport=28330 OR destinationtranslatedaddress="151.236.20.39" AND destinationport=5524 OR destinationtranslatedaddress="158.255.208.140" AND destinationport=86 OR destinationtranslatedaddress="194.68.27.149" AND destinationport=13106 OR destinationtranslatedaddress="194.68.27.176" AND destinationport=6460 OR destinationtranslatedaddress="37.143.128.223" AND destinationport=16223 OR destinationtranslatedaddress="31.40.212.130" AND destinationport=7225 OR destinationtranslatedaddress="198.244.207.203" AND destinationport=2076)
index=activity AND rg_functionality="Identity Access Management" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND destinationtranslatedport=28693 OR destinationtranslatedaddress="162.252.175.90" AND destinationtranslatedport=845 OR destinationtranslatedaddress="162.252.175.109" AND destinationtranslatedport=28330 OR destinationtranslatedaddress="151.236.20.39" AND destinationtranslatedport=5524 OR destinationtranslatedaddress="158.255.208.140" AND destinationtranslatedport=86 OR destinationtranslatedaddress="194.68.27.149" AND destinationtranslatedport=13106 OR destinationtranslatedaddress="194.68.27.176" AND destinationtranslatedport=6460 OR destinationtranslatedaddress="37.143.128.223" AND destinationtranslatedport=16223 OR destinationtranslatedaddress="31.40.212.130" AND destinationtranslatedport=7225 OR destinationtranslatedaddress="198.244.207.203" AND destinationtranslatedport=2076)
index=activity AND rg_functionality="Identity Access Management" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND translatedport=28693 OR destinationtranslatedaddress="162.252.175.90" AND translatedport=845 OR destinationtranslatedaddress="162.252.175.109" AND translatedport=28330 OR destinationtranslatedaddress="151.236.20.39" AND translatedport=5524 OR destinationtranslatedaddress="158.255.208.140" AND translatedport=86 OR destinationtranslatedaddress="194.68.27.149" AND translatedport=13106 OR destinationtranslatedaddress="194.68.27.176" AND translatedport=6460 OR destinationtranslatedaddress="37.143.128.223" AND translatedport=16223 OR destinationtranslatedaddress="31.40.212.130" AND translatedport=7225 OR destinationtranslatedaddress="198.244.207.203" AND translatedport=2076)
index=activity AND rg_functionality="Identity Access Management" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="208.115.230.243" AND destinationport=16697 OR destinationaddress="185.126.239.207" AND destinationport=26630 OR destinationaddress="213.183.57.174" AND destinationport=12517 OR destinationaddress="213.183.57.72" AND destinationport=12517 OR destinationaddress="213.183.56.201" AND destinationport=12517 OR destinationaddress="95.164.45.27" AND destinationport=17426 OR destinationaddress="45.120.178.161" AND destinationport=11013 OR destinationaddress="176.120.74.3" AND destinationport=17268 OR destinationaddress="92.243.64.184" AND destinationport=17146 OR destinationaddress="92.243.64.36" AND destinationport=17146)
index=activity AND rg_functionality="Identity Access Management" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="208.115.230.243" AND sourceport=16697 OR sourceaddress="185.126.239.207" AND sourceport=26630 OR sourceaddress="213.183.57.174" AND sourceport=12517 OR sourceaddress="213.183.57.72" AND sourceport=12517 OR sourceaddress="213.183.56.201" AND sourceport=12517 OR sourceaddress="95.164.45.27" AND sourceport=17426 OR sourceaddress="45.120.178.161" AND sourceport=11013 OR sourceaddress="176.120.74.3" AND sourceport=17268 OR sourceaddress="92.243.64.184" AND sourceport=17146 OR sourceaddress="92.243.64.36" AND sourceport=17146)
index=activity AND rg_functionality="Identity Access Management" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="208.115.230.243" AND sourceport=16697 OR translatedipaddress="185.126.239.207" AND sourceport=26630 OR translatedipaddress="213.183.57.174" AND sourceport=12517 OR translatedipaddress="213.183.57.72" AND sourceport=12517 OR translatedipaddress="213.183.56.201" AND sourceport=12517 OR translatedipaddress="95.164.45.27" AND sourceport=17426 OR translatedipaddress="45.120.178.161" AND sourceport=11013 OR translatedipaddress="176.120.74.3" AND sourceport=17268 OR translatedipaddress="92.243.64.184" AND sourceport=17146 OR translatedipaddress="92.243.64.36" AND sourceport=17146)
index=activity AND rg_functionality="Identity Access Management" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND destinationport=16697 OR destinationtranslatedaddress="185.126.239.207" AND destinationport=26630 OR destinationtranslatedaddress="213.183.57.174" AND destinationport=12517 OR destinationtranslatedaddress="213.183.57.72" AND destinationport=12517 OR destinationtranslatedaddress="213.183.56.201" AND destinationport=12517 OR destinationtranslatedaddress="95.164.45.27" AND destinationport=17426 OR destinationtranslatedaddress="45.120.178.161" AND destinationport=11013 OR destinationtranslatedaddress="176.120.74.3" AND destinationport=17268 OR destinationtranslatedaddress="92.243.64.184" AND destinationport=17146 OR destinationtranslatedaddress="92.243.64.36" AND destinationport=17146)
index=activity AND rg_functionality="Identity Access Management" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND destinationtranslatedport=16697 OR destinationtranslatedaddress="185.126.239.207" AND destinationtranslatedport=26630 OR destinationtranslatedaddress="213.183.57.174" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="213.183.57.72" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="213.183.56.201" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="95.164.45.27" AND destinationtranslatedport=17426 OR destinationtranslatedaddress="45.120.178.161" AND destinationtranslatedport=11013 OR destinationtranslatedaddress="176.120.74.3" AND destinationtranslatedport=17268 OR destinationtranslatedaddress="92.243.64.184" AND destinationtranslatedport=17146 OR destinationtranslatedaddress="92.243.64.36" AND destinationtranslatedport=17146)
index=activity AND rg_functionality="Identity Access Management" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND translatedport=16697 OR destinationtranslatedaddress="185.126.239.207" AND translatedport=26630 OR destinationtranslatedaddress="213.183.57.174" AND translatedport=12517 OR destinationtranslatedaddress="213.183.57.72" AND translatedport=12517 OR destinationtranslatedaddress="213.183.56.201" AND translatedport=12517 OR destinationtranslatedaddress="95.164.45.27" AND translatedport=17426 OR destinationtranslatedaddress="45.120.178.161" AND translatedport=11013 OR destinationtranslatedaddress="176.120.74.3" AND translatedport=17268 OR destinationtranslatedaddress="92.243.64.184" AND translatedport=17146 OR destinationtranslatedaddress="92.243.64.36" AND translatedport=17146)
index=activity AND rg_functionality="Identity Access Management" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="89.31.120.126" AND destinationport=11578 OR destinationaddress="91.132.93.33" AND destinationport=11578 OR destinationaddress="91.132.95.28" AND destinationport=8773 OR destinationaddress="91.132.95.204" AND destinationport=8773 OR destinationaddress="91.132.95.135" AND destinationport=8773 OR destinationaddress="194.233.174.22" AND destinationport=45358)
index=activity AND rg_functionality="Identity Access Management" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="89.31.120.126" AND sourceport=11578 OR sourceaddress="91.132.93.33" AND sourceport=11578 OR sourceaddress="91.132.95.28" AND sourceport=8773 OR sourceaddress="91.132.95.204" AND sourceport=8773 OR sourceaddress="91.132.95.135" AND sourceport=8773 OR sourceaddress="194.233.174.22" AND sourceport=45358)
index=activity AND rg_functionality="Identity Access Management" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="89.31.120.126" AND sourceport=11578 OR translatedipaddress="91.132.93.33" AND sourceport=11578 OR translatedipaddress="91.132.95.28" AND sourceport=8773 OR translatedipaddress="91.132.95.204" AND sourceport=8773 OR translatedipaddress="91.132.95.135" AND sourceport=8773 OR translatedipaddress="194.233.174.22" AND sourceport=45358)
index=activity AND rg_functionality="Identity Access Management" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND destinationport=11578 OR destinationtranslatedaddress="91.132.93.33" AND destinationport=11578 OR destinationtranslatedaddress="91.132.95.28" AND destinationport=8773 OR destinationtranslatedaddress="91.132.95.204" AND destinationport=8773 OR destinationtranslatedaddress="91.132.95.135" AND destinationport=8773 OR destinationtranslatedaddress="194.233.174.22" AND destinationport=45358)
index=activity AND rg_functionality="Identity Access Management" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND destinationtranslatedport=11578 OR destinationtranslatedaddress="91.132.93.33" AND destinationtranslatedport=11578 OR destinationtranslatedaddress="91.132.95.28" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="91.132.95.204" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="91.132.95.135" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="194.233.174.22" AND destinationtranslatedport=45358)
index=activity AND rg_functionality="Identity Access Management" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND translatedport=11578 OR destinationtranslatedaddress="91.132.93.33" AND translatedport=11578 OR destinationtranslatedaddress="91.132.95.28" AND translatedport=8773 OR destinationtranslatedaddress="91.132.95.204" AND translatedport=8773 OR destinationtranslatedaddress="91.132.95.135" AND translatedport=8773 OR destinationtranslatedaddress="194.233.174.22" AND translatedport=45358)
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="158.255.212.173" AND destinationport=10862 OR destinationaddress="151.236.25.126" AND destinationport=11331 OR destinationaddress="158.255.215.49" AND destinationport=23079 OR destinationaddress="185.26.239.98" AND destinationport=11076 OR destinationaddress="151.236.25.10" AND destinationport=7205 OR destinationaddress="37.235.53.217" AND destinationport=1358 OR destinationaddress="151.236.23.232" AND destinationport=763 OR destinationaddress="37.235.56.204" AND destinationport=24239 OR destinationaddress="162.252.175.122" AND destinationport=4126 OR destinationaddress="162.252.175.136" AND destinationport=11077)
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="158.255.212.173" AND sourceport=10862 OR sourceaddress="151.236.25.126" AND sourceport=11331 OR sourceaddress="158.255.215.49" AND sourceport=23079 OR sourceaddress="185.26.239.98" AND sourceport=11076 OR sourceaddress="151.236.25.10" AND sourceport=7205 OR sourceaddress="37.235.53.217" AND sourceport=1358 OR sourceaddress="151.236.23.232" AND sourceport=763 OR sourceaddress="37.235.56.204" AND sourceport=24239 OR sourceaddress="162.252.175.122" AND sourceport=4126 OR sourceaddress="162.252.175.136" AND sourceport=11077)
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="158.255.212.173" AND sourceport=10862 OR translatedipaddress="151.236.25.126" AND sourceport=11331 OR translatedipaddress="158.255.215.49" AND sourceport=23079 OR translatedipaddress="185.26.239.98" AND sourceport=11076 OR translatedipaddress="151.236.25.10" AND sourceport=7205 OR translatedipaddress="37.235.53.217" AND sourceport=1358 OR translatedipaddress="151.236.23.232" AND sourceport=763 OR translatedipaddress="37.235.56.204" AND sourceport=24239 OR translatedipaddress="162.252.175.122" AND sourceport=4126 OR translatedipaddress="162.252.175.136" AND sourceport=11077)
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND destinationport=10862 OR destinationtranslatedaddress="151.236.25.126" AND destinationport=11331 OR destinationtranslatedaddress="158.255.215.49" AND destinationport=23079 OR destinationtranslatedaddress="185.26.239.98" AND destinationport=11076 OR destinationtranslatedaddress="151.236.25.10" AND destinationport=7205 OR destinationtranslatedaddress="37.235.53.217" AND destinationport=1358 OR destinationtranslatedaddress="151.236.23.232" AND destinationport=763 OR destinationtranslatedaddress="37.235.56.204" AND destinationport=24239 OR destinationtranslatedaddress="162.252.175.122" AND destinationport=4126 OR destinationtranslatedaddress="162.252.175.136" AND destinationport=11077)
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND destinationtranslatedport=10862 OR destinationtranslatedaddress="151.236.25.126" AND destinationtranslatedport=11331 OR destinationtranslatedaddress="158.255.215.49" AND destinationtranslatedport=23079 OR destinationtranslatedaddress="185.26.239.98" AND destinationtranslatedport=11076 OR destinationtranslatedaddress="151.236.25.10" AND destinationtranslatedport=7205 OR destinationtranslatedaddress="37.235.53.217" AND destinationtranslatedport=1358 OR destinationtranslatedaddress="151.236.23.232" AND destinationtranslatedport=763 OR destinationtranslatedaddress="37.235.56.204" AND destinationtranslatedport=24239 OR destinationtranslatedaddress="162.252.175.122" AND destinationtranslatedport=4126 OR destinationtranslatedaddress="162.252.175.136" AND destinationtranslatedport=11077)
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND translatedport=10862 OR destinationtranslatedaddress="151.236.25.126" AND translatedport=11331 OR destinationtranslatedaddress="158.255.215.49" AND translatedport=23079 OR destinationtranslatedaddress="185.26.239.98" AND translatedport=11076 OR destinationtranslatedaddress="151.236.25.10" AND translatedport=7205 OR destinationtranslatedaddress="37.235.53.217" AND translatedport=1358 OR destinationtranslatedaddress="151.236.23.232" AND translatedport=763 OR destinationtranslatedaddress="37.235.56.204" AND translatedport=24239 OR destinationtranslatedaddress="162.252.175.122" AND translatedport=4126 OR destinationtranslatedaddress="162.252.175.136" AND translatedport=11077)
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="162.252.175.163" AND destinationport=28693 OR destinationaddress="162.252.175.90" AND destinationport=845 OR destinationaddress="162.252.175.109" AND destinationport=28330 OR destinationaddress="151.236.20.39" AND destinationport=5524 OR destinationaddress="158.255.208.140" AND destinationport=86 OR destinationaddress="194.68.27.149" AND destinationport=13106 OR destinationaddress="194.68.27.176" AND destinationport=6460 OR destinationaddress="37.143.128.223" AND destinationport=16223 OR destinationaddress="31.40.212.130" AND destinationport=7225 OR destinationaddress="198.244.207.203" AND destinationport=2076)
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="162.252.175.163" AND sourceport=28693 OR sourceaddress="162.252.175.90" AND sourceport=845 OR sourceaddress="162.252.175.109" AND sourceport=28330 OR sourceaddress="151.236.20.39" AND sourceport=5524 OR sourceaddress="158.255.208.140" AND sourceport=86 OR sourceaddress="194.68.27.149" AND sourceport=13106 OR sourceaddress="194.68.27.176" AND sourceport=6460 OR sourceaddress="37.143.128.223" AND sourceport=16223 OR sourceaddress="31.40.212.130" AND sourceport=7225 OR sourceaddress="198.244.207.203" AND sourceport=2076)
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="162.252.175.163" AND sourceport=28693 OR translatedipaddress="162.252.175.90" AND sourceport=845 OR translatedipaddress="162.252.175.109" AND sourceport=28330 OR translatedipaddress="151.236.20.39" AND sourceport=5524 OR translatedipaddress="158.255.208.140" AND sourceport=86 OR translatedipaddress="194.68.27.149" AND sourceport=13106 OR translatedipaddress="194.68.27.176" AND sourceport=6460 OR translatedipaddress="37.143.128.223" AND sourceport=16223 OR translatedipaddress="31.40.212.130" AND sourceport=7225 OR translatedipaddress="198.244.207.203" AND sourceport=2076)
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND destinationport=28693 OR destinationtranslatedaddress="162.252.175.90" AND destinationport=845 OR destinationtranslatedaddress="162.252.175.109" AND destinationport=28330 OR destinationtranslatedaddress="151.236.20.39" AND destinationport=5524 OR destinationtranslatedaddress="158.255.208.140" AND destinationport=86 OR destinationtranslatedaddress="194.68.27.149" AND destinationport=13106 OR destinationtranslatedaddress="194.68.27.176" AND destinationport=6460 OR destinationtranslatedaddress="37.143.128.223" AND destinationport=16223 OR destinationtranslatedaddress="31.40.212.130" AND destinationport=7225 OR destinationtranslatedaddress="198.244.207.203" AND destinationport=2076)
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND destinationtranslatedport=28693 OR destinationtranslatedaddress="162.252.175.90" AND destinationtranslatedport=845 OR destinationtranslatedaddress="162.252.175.109" AND destinationtranslatedport=28330 OR destinationtranslatedaddress="151.236.20.39" AND destinationtranslatedport=5524 OR destinationtranslatedaddress="158.255.208.140" AND destinationtranslatedport=86 OR destinationtranslatedaddress="194.68.27.149" AND destinationtranslatedport=13106 OR destinationtranslatedaddress="194.68.27.176" AND destinationtranslatedport=6460 OR destinationtranslatedaddress="37.143.128.223" AND destinationtranslatedport=16223 OR destinationtranslatedaddress="31.40.212.130" AND destinationtranslatedport=7225 OR destinationtranslatedaddress="198.244.207.203" AND destinationtranslatedport=2076)
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND translatedport=28693 OR destinationtranslatedaddress="162.252.175.90" AND translatedport=845 OR destinationtranslatedaddress="162.252.175.109" AND translatedport=28330 OR destinationtranslatedaddress="151.236.20.39" AND translatedport=5524 OR destinationtranslatedaddress="158.255.208.140" AND translatedport=86 OR destinationtranslatedaddress="194.68.27.149" AND translatedport=13106 OR destinationtranslatedaddress="194.68.27.176" AND translatedport=6460 OR destinationtranslatedaddress="37.143.128.223" AND translatedport=16223 OR destinationtranslatedaddress="31.40.212.130" AND translatedport=7225 OR destinationtranslatedaddress="198.244.207.203" AND translatedport=2076)
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="208.115.230.243" AND destinationport=16697 OR destinationaddress="185.126.239.207" AND destinationport=26630 OR destinationaddress="213.183.57.174" AND destinationport=12517 OR destinationaddress="213.183.57.72" AND destinationport=12517 OR destinationaddress="213.183.56.201" AND destinationport=12517 OR destinationaddress="95.164.45.27" AND destinationport=17426 OR destinationaddress="45.120.178.161" AND destinationport=11013 OR destinationaddress="176.120.74.3" AND destinationport=17268 OR destinationaddress="92.243.64.184" AND destinationport=17146 OR destinationaddress="92.243.64.36" AND destinationport=17146)
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="208.115.230.243" AND sourceport=16697 OR sourceaddress="185.126.239.207" AND sourceport=26630 OR sourceaddress="213.183.57.174" AND sourceport=12517 OR sourceaddress="213.183.57.72" AND sourceport=12517 OR sourceaddress="213.183.56.201" AND sourceport=12517 OR sourceaddress="95.164.45.27" AND sourceport=17426 OR sourceaddress="45.120.178.161" AND sourceport=11013 OR sourceaddress="176.120.74.3" AND sourceport=17268 OR sourceaddress="92.243.64.184" AND sourceport=17146 OR sourceaddress="92.243.64.36" AND sourceport=17146)
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="208.115.230.243" AND sourceport=16697 OR translatedipaddress="185.126.239.207" AND sourceport=26630 OR translatedipaddress="213.183.57.174" AND sourceport=12517 OR translatedipaddress="213.183.57.72" AND sourceport=12517 OR translatedipaddress="213.183.56.201" AND sourceport=12517 OR translatedipaddress="95.164.45.27" AND sourceport=17426 OR translatedipaddress="45.120.178.161" AND sourceport=11013 OR translatedipaddress="176.120.74.3" AND sourceport=17268 OR translatedipaddress="92.243.64.184" AND sourceport=17146 OR translatedipaddress="92.243.64.36" AND sourceport=17146)
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND destinationport=16697 OR destinationtranslatedaddress="185.126.239.207" AND destinationport=26630 OR destinationtranslatedaddress="213.183.57.174" AND destinationport=12517 OR destinationtranslatedaddress="213.183.57.72" AND destinationport=12517 OR destinationtranslatedaddress="213.183.56.201" AND destinationport=12517 OR destinationtranslatedaddress="95.164.45.27" AND destinationport=17426 OR destinationtranslatedaddress="45.120.178.161" AND destinationport=11013 OR destinationtranslatedaddress="176.120.74.3" AND destinationport=17268 OR destinationtranslatedaddress="92.243.64.184" AND destinationport=17146 OR destinationtranslatedaddress="92.243.64.36" AND destinationport=17146)
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND destinationtranslatedport=16697 OR destinationtranslatedaddress="185.126.239.207" AND destinationtranslatedport=26630 OR destinationtranslatedaddress="213.183.57.174" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="213.183.57.72" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="213.183.56.201" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="95.164.45.27" AND destinationtranslatedport=17426 OR destinationtranslatedaddress="45.120.178.161" AND destinationtranslatedport=11013 OR destinationtranslatedaddress="176.120.74.3" AND destinationtranslatedport=17268 OR destinationtranslatedaddress="92.243.64.184" AND destinationtranslatedport=17146 OR destinationtranslatedaddress="92.243.64.36" AND destinationtranslatedport=17146)
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND translatedport=16697 OR destinationtranslatedaddress="185.126.239.207" AND translatedport=26630 OR destinationtranslatedaddress="213.183.57.174" AND translatedport=12517 OR destinationtranslatedaddress="213.183.57.72" AND translatedport=12517 OR destinationtranslatedaddress="213.183.56.201" AND translatedport=12517 OR destinationtranslatedaddress="95.164.45.27" AND translatedport=17426 OR destinationtranslatedaddress="45.120.178.161" AND translatedport=11013 OR destinationtranslatedaddress="176.120.74.3" AND translatedport=17268 OR destinationtranslatedaddress="92.243.64.184" AND translatedport=17146 OR destinationtranslatedaddress="92.243.64.36" AND translatedport=17146)
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="89.31.120.126" AND destinationport=11578 OR destinationaddress="91.132.93.33" AND destinationport=11578 OR destinationaddress="91.132.95.28" AND destinationport=8773 OR destinationaddress="91.132.95.204" AND destinationport=8773 OR destinationaddress="91.132.95.135" AND destinationport=8773 OR destinationaddress="194.233.174.22" AND destinationport=45358)
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="89.31.120.126" AND sourceport=11578 OR sourceaddress="91.132.93.33" AND sourceport=11578 OR sourceaddress="91.132.95.28" AND sourceport=8773 OR sourceaddress="91.132.95.204" AND sourceport=8773 OR sourceaddress="91.132.95.135" AND sourceport=8773 OR sourceaddress="194.233.174.22" AND sourceport=45358)
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="89.31.120.126" AND sourceport=11578 OR translatedipaddress="91.132.93.33" AND sourceport=11578 OR translatedipaddress="91.132.95.28" AND sourceport=8773 OR translatedipaddress="91.132.95.204" AND sourceport=8773 OR translatedipaddress="91.132.95.135" AND sourceport=8773 OR translatedipaddress="194.233.174.22" AND sourceport=45358)
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND destinationport=11578 OR destinationtranslatedaddress="91.132.93.33" AND destinationport=11578 OR destinationtranslatedaddress="91.132.95.28" AND destinationport=8773 OR destinationtranslatedaddress="91.132.95.204" AND destinationport=8773 OR destinationtranslatedaddress="91.132.95.135" AND destinationport=8773 OR destinationtranslatedaddress="194.233.174.22" AND destinationport=45358)
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND destinationtranslatedport=11578 OR destinationtranslatedaddress="91.132.93.33" AND destinationtranslatedport=11578 OR destinationtranslatedaddress="91.132.95.28" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="91.132.95.204" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="91.132.95.135" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="194.233.174.22" AND destinationtranslatedport=45358)
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND translatedport=11578 OR destinationtranslatedaddress="91.132.93.33" AND translatedport=11578 OR destinationtranslatedaddress="91.132.95.28" AND translatedport=8773 OR destinationtranslatedaddress="91.132.95.204" AND translatedport=8773 OR destinationtranslatedaddress="91.132.95.135" AND translatedport=8773 OR destinationtranslatedaddress="194.233.174.22" AND translatedport=45358)
index=activity AND rg_functionality="Authentication / WiFi" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="158.255.212.173" AND destinationport=10862 OR destinationaddress="151.236.25.126" AND destinationport=11331 OR destinationaddress="158.255.215.49" AND destinationport=23079 OR destinationaddress="185.26.239.98" AND destinationport=11076 OR destinationaddress="151.236.25.10" AND destinationport=7205 OR destinationaddress="37.235.53.217" AND destinationport=1358 OR destinationaddress="151.236.23.232" AND destinationport=763 OR destinationaddress="37.235.56.204" AND destinationport=24239 OR destinationaddress="162.252.175.122" AND destinationport=4126 OR destinationaddress="162.252.175.136" AND destinationport=11077)
index=activity AND rg_functionality="Authentication / WiFi" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="158.255.212.173" AND sourceport=10862 OR sourceaddress="151.236.25.126" AND sourceport=11331 OR sourceaddress="158.255.215.49" AND sourceport=23079 OR sourceaddress="185.26.239.98" AND sourceport=11076 OR sourceaddress="151.236.25.10" AND sourceport=7205 OR sourceaddress="37.235.53.217" AND sourceport=1358 OR sourceaddress="151.236.23.232" AND sourceport=763 OR sourceaddress="37.235.56.204" AND sourceport=24239 OR sourceaddress="162.252.175.122" AND sourceport=4126 OR sourceaddress="162.252.175.136" AND sourceport=11077)
index=activity AND rg_functionality="Authentication / WiFi" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="158.255.212.173" AND sourceport=10862 OR translatedipaddress="151.236.25.126" AND sourceport=11331 OR translatedipaddress="158.255.215.49" AND sourceport=23079 OR translatedipaddress="185.26.239.98" AND sourceport=11076 OR translatedipaddress="151.236.25.10" AND sourceport=7205 OR translatedipaddress="37.235.53.217" AND sourceport=1358 OR translatedipaddress="151.236.23.232" AND sourceport=763 OR translatedipaddress="37.235.56.204" AND sourceport=24239 OR translatedipaddress="162.252.175.122" AND sourceport=4126 OR translatedipaddress="162.252.175.136" AND sourceport=11077)
index=activity AND rg_functionality="Authentication / WiFi" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND destinationport=10862 OR destinationtranslatedaddress="151.236.25.126" AND destinationport=11331 OR destinationtranslatedaddress="158.255.215.49" AND destinationport=23079 OR destinationtranslatedaddress="185.26.239.98" AND destinationport=11076 OR destinationtranslatedaddress="151.236.25.10" AND destinationport=7205 OR destinationtranslatedaddress="37.235.53.217" AND destinationport=1358 OR destinationtranslatedaddress="151.236.23.232" AND destinationport=763 OR destinationtranslatedaddress="37.235.56.204" AND destinationport=24239 OR destinationtranslatedaddress="162.252.175.122" AND destinationport=4126 OR destinationtranslatedaddress="162.252.175.136" AND destinationport=11077)
index=activity AND rg_functionality="Authentication / WiFi" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND destinationtranslatedport=10862 OR destinationtranslatedaddress="151.236.25.126" AND destinationtranslatedport=11331 OR destinationtranslatedaddress="158.255.215.49" AND destinationtranslatedport=23079 OR destinationtranslatedaddress="185.26.239.98" AND destinationtranslatedport=11076 OR destinationtranslatedaddress="151.236.25.10" AND destinationtranslatedport=7205 OR destinationtranslatedaddress="37.235.53.217" AND destinationtranslatedport=1358 OR destinationtranslatedaddress="151.236.23.232" AND destinationtranslatedport=763 OR destinationtranslatedaddress="37.235.56.204" AND destinationtranslatedport=24239 OR destinationtranslatedaddress="162.252.175.122" AND destinationtranslatedport=4126 OR destinationtranslatedaddress="162.252.175.136" AND destinationtranslatedport=11077)
index=activity AND rg_functionality="Authentication / WiFi" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND translatedport=10862 OR destinationtranslatedaddress="151.236.25.126" AND translatedport=11331 OR destinationtranslatedaddress="158.255.215.49" AND translatedport=23079 OR destinationtranslatedaddress="185.26.239.98" AND translatedport=11076 OR destinationtranslatedaddress="151.236.25.10" AND translatedport=7205 OR destinationtranslatedaddress="37.235.53.217" AND translatedport=1358 OR destinationtranslatedaddress="151.236.23.232" AND translatedport=763 OR destinationtranslatedaddress="37.235.56.204" AND translatedport=24239 OR destinationtranslatedaddress="162.252.175.122" AND translatedport=4126 OR destinationtranslatedaddress="162.252.175.136" AND translatedport=11077)
index=activity AND rg_functionality="Authentication / WiFi" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="162.252.175.163" AND destinationport=28693 OR destinationaddress="162.252.175.90" AND destinationport=845 OR destinationaddress="162.252.175.109" AND destinationport=28330 OR destinationaddress="151.236.20.39" AND destinationport=5524 OR destinationaddress="158.255.208.140" AND destinationport=86 OR destinationaddress="194.68.27.149" AND destinationport=13106 OR destinationaddress="194.68.27.176" AND destinationport=6460 OR destinationaddress="37.143.128.223" AND destinationport=16223 OR destinationaddress="31.40.212.130" AND destinationport=7225 OR destinationaddress="198.244.207.203" AND destinationport=2076)
index=activity AND rg_functionality="Authentication / WiFi" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="162.252.175.163" AND sourceport=28693 OR sourceaddress="162.252.175.90" AND sourceport=845 OR sourceaddress="162.252.175.109" AND sourceport=28330 OR sourceaddress="151.236.20.39" AND sourceport=5524 OR sourceaddress="158.255.208.140" AND sourceport=86 OR sourceaddress="194.68.27.149" AND sourceport=13106 OR sourceaddress="194.68.27.176" AND sourceport=6460 OR sourceaddress="37.143.128.223" AND sourceport=16223 OR sourceaddress="31.40.212.130" AND sourceport=7225 OR sourceaddress="198.244.207.203" AND sourceport=2076)
index=activity AND rg_functionality="Authentication / WiFi" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="162.252.175.163" AND sourceport=28693 OR translatedipaddress="162.252.175.90" AND sourceport=845 OR translatedipaddress="162.252.175.109" AND sourceport=28330 OR translatedipaddress="151.236.20.39" AND sourceport=5524 OR translatedipaddress="158.255.208.140" AND sourceport=86 OR translatedipaddress="194.68.27.149" AND sourceport=13106 OR translatedipaddress="194.68.27.176" AND sourceport=6460 OR translatedipaddress="37.143.128.223" AND sourceport=16223 OR translatedipaddress="31.40.212.130" AND sourceport=7225 OR translatedipaddress="198.244.207.203" AND sourceport=2076)
index=activity AND rg_functionality="Authentication / WiFi" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND destinationport=28693 OR destinationtranslatedaddress="162.252.175.90" AND destinationport=845 OR destinationtranslatedaddress="162.252.175.109" AND destinationport=28330 OR destinationtranslatedaddress="151.236.20.39" AND destinationport=5524 OR destinationtranslatedaddress="158.255.208.140" AND destinationport=86 OR destinationtranslatedaddress="194.68.27.149" AND destinationport=13106 OR destinationtranslatedaddress="194.68.27.176" AND destinationport=6460 OR destinationtranslatedaddress="37.143.128.223" AND destinationport=16223 OR destinationtranslatedaddress="31.40.212.130" AND destinationport=7225 OR destinationtranslatedaddress="198.244.207.203" AND destinationport=2076)
index=activity AND rg_functionality="Authentication / WiFi" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND destinationtranslatedport=28693 OR destinationtranslatedaddress="162.252.175.90" AND destinationtranslatedport=845 OR destinationtranslatedaddress="162.252.175.109" AND destinationtranslatedport=28330 OR destinationtranslatedaddress="151.236.20.39" AND destinationtranslatedport=5524 OR destinationtranslatedaddress="158.255.208.140" AND destinationtranslatedport=86 OR destinationtranslatedaddress="194.68.27.149" AND destinationtranslatedport=13106 OR destinationtranslatedaddress="194.68.27.176" AND destinationtranslatedport=6460 OR destinationtranslatedaddress="37.143.128.223" AND destinationtranslatedport=16223 OR destinationtranslatedaddress="31.40.212.130" AND destinationtranslatedport=7225 OR destinationtranslatedaddress="198.244.207.203" AND destinationtranslatedport=2076)
index=activity AND rg_functionality="Authentication / WiFi" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND translatedport=28693 OR destinationtranslatedaddress="162.252.175.90" AND translatedport=845 OR destinationtranslatedaddress="162.252.175.109" AND translatedport=28330 OR destinationtranslatedaddress="151.236.20.39" AND translatedport=5524 OR destinationtranslatedaddress="158.255.208.140" AND translatedport=86 OR destinationtranslatedaddress="194.68.27.149" AND translatedport=13106 OR destinationtranslatedaddress="194.68.27.176" AND translatedport=6460 OR destinationtranslatedaddress="37.143.128.223" AND translatedport=16223 OR destinationtranslatedaddress="31.40.212.130" AND translatedport=7225 OR destinationtranslatedaddress="198.244.207.203" AND translatedport=2076)
index=activity AND rg_functionality="Authentication / WiFi" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="208.115.230.243" AND destinationport=16697 OR destinationaddress="185.126.239.207" AND destinationport=26630 OR destinationaddress="213.183.57.174" AND destinationport=12517 OR destinationaddress="213.183.57.72" AND destinationport=12517 OR destinationaddress="213.183.56.201" AND destinationport=12517 OR destinationaddress="95.164.45.27" AND destinationport=17426 OR destinationaddress="45.120.178.161" AND destinationport=11013 OR destinationaddress="176.120.74.3" AND destinationport=17268 OR destinationaddress="92.243.64.184" AND destinationport=17146 OR destinationaddress="92.243.64.36" AND destinationport=17146)
index=activity AND rg_functionality="Authentication / WiFi" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="208.115.230.243" AND sourceport=16697 OR sourceaddress="185.126.239.207" AND sourceport=26630 OR sourceaddress="213.183.57.174" AND sourceport=12517 OR sourceaddress="213.183.57.72" AND sourceport=12517 OR sourceaddress="213.183.56.201" AND sourceport=12517 OR sourceaddress="95.164.45.27" AND sourceport=17426 OR sourceaddress="45.120.178.161" AND sourceport=11013 OR sourceaddress="176.120.74.3" AND sourceport=17268 OR sourceaddress="92.243.64.184" AND sourceport=17146 OR sourceaddress="92.243.64.36" AND sourceport=17146)
index=activity AND rg_functionality="Authentication / WiFi" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="208.115.230.243" AND sourceport=16697 OR translatedipaddress="185.126.239.207" AND sourceport=26630 OR translatedipaddress="213.183.57.174" AND sourceport=12517 OR translatedipaddress="213.183.57.72" AND sourceport=12517 OR translatedipaddress="213.183.56.201" AND sourceport=12517 OR translatedipaddress="95.164.45.27" AND sourceport=17426 OR translatedipaddress="45.120.178.161" AND sourceport=11013 OR translatedipaddress="176.120.74.3" AND sourceport=17268 OR translatedipaddress="92.243.64.184" AND sourceport=17146 OR translatedipaddress="92.243.64.36" AND sourceport=17146)
index=activity AND rg_functionality="Authentication / WiFi" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND destinationport=16697 OR destinationtranslatedaddress="185.126.239.207" AND destinationport=26630 OR destinationtranslatedaddress="213.183.57.174" AND destinationport=12517 OR destinationtranslatedaddress="213.183.57.72" AND destinationport=12517 OR destinationtranslatedaddress="213.183.56.201" AND destinationport=12517 OR destinationtranslatedaddress="95.164.45.27" AND destinationport=17426 OR destinationtranslatedaddress="45.120.178.161" AND destinationport=11013 OR destinationtranslatedaddress="176.120.74.3" AND destinationport=17268 OR destinationtranslatedaddress="92.243.64.184" AND destinationport=17146 OR destinationtranslatedaddress="92.243.64.36" AND destinationport=17146)
index=activity AND rg_functionality="Authentication / WiFi" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND destinationtranslatedport=16697 OR destinationtranslatedaddress="185.126.239.207" AND destinationtranslatedport=26630 OR destinationtranslatedaddress="213.183.57.174" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="213.183.57.72" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="213.183.56.201" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="95.164.45.27" AND destinationtranslatedport=17426 OR destinationtranslatedaddress="45.120.178.161" AND destinationtranslatedport=11013 OR destinationtranslatedaddress="176.120.74.3" AND destinationtranslatedport=17268 OR destinationtranslatedaddress="92.243.64.184" AND destinationtranslatedport=17146 OR destinationtranslatedaddress="92.243.64.36" AND destinationtranslatedport=17146)
index=activity AND rg_functionality="Authentication / WiFi" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND translatedport=16697 OR destinationtranslatedaddress="185.126.239.207" AND translatedport=26630 OR destinationtranslatedaddress="213.183.57.174" AND translatedport=12517 OR destinationtranslatedaddress="213.183.57.72" AND translatedport=12517 OR destinationtranslatedaddress="213.183.56.201" AND translatedport=12517 OR destinationtranslatedaddress="95.164.45.27" AND translatedport=17426 OR destinationtranslatedaddress="45.120.178.161" AND translatedport=11013 OR destinationtranslatedaddress="176.120.74.3" AND translatedport=17268 OR destinationtranslatedaddress="92.243.64.184" AND translatedport=17146 OR destinationtranslatedaddress="92.243.64.36" AND translatedport=17146)
index=activity AND rg_functionality="Authentication / WiFi" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="89.31.120.126" AND destinationport=11578 OR destinationaddress="91.132.93.33" AND destinationport=11578 OR destinationaddress="91.132.95.28" AND destinationport=8773 OR destinationaddress="91.132.95.204" AND destinationport=8773 OR destinationaddress="91.132.95.135" AND destinationport=8773 OR destinationaddress="194.233.174.22" AND destinationport=45358)
index=activity AND rg_functionality="Authentication / WiFi" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="89.31.120.126" AND sourceport=11578 OR sourceaddress="91.132.93.33" AND sourceport=11578 OR sourceaddress="91.132.95.28" AND sourceport=8773 OR sourceaddress="91.132.95.204" AND sourceport=8773 OR sourceaddress="91.132.95.135" AND sourceport=8773 OR sourceaddress="194.233.174.22" AND sourceport=45358)
index=activity AND rg_functionality="Authentication / WiFi" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="89.31.120.126" AND sourceport=11578 OR translatedipaddress="91.132.93.33" AND sourceport=11578 OR translatedipaddress="91.132.95.28" AND sourceport=8773 OR translatedipaddress="91.132.95.204" AND sourceport=8773 OR translatedipaddress="91.132.95.135" AND sourceport=8773 OR translatedipaddress="194.233.174.22" AND sourceport=45358)
index=activity AND rg_functionality="Authentication / WiFi" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND destinationport=11578 OR destinationtranslatedaddress="91.132.93.33" AND destinationport=11578 OR destinationtranslatedaddress="91.132.95.28" AND destinationport=8773 OR destinationtranslatedaddress="91.132.95.204" AND destinationport=8773 OR destinationtranslatedaddress="91.132.95.135" AND destinationport=8773 OR destinationtranslatedaddress="194.233.174.22" AND destinationport=45358)
index=activity AND rg_functionality="Authentication / WiFi" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND destinationtranslatedport=11578 OR destinationtranslatedaddress="91.132.93.33" AND destinationtranslatedport=11578 OR destinationtranslatedaddress="91.132.95.28" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="91.132.95.204" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="91.132.95.135" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="194.233.174.22" AND destinationtranslatedport=45358)
index=activity AND rg_functionality="Authentication / WiFi" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND translatedport=11578 OR destinationtranslatedaddress="91.132.93.33" AND translatedport=11578 OR destinationtranslatedaddress="91.132.95.28" AND translatedport=8773 OR destinationtranslatedaddress="91.132.95.204" AND translatedport=8773 OR destinationtranslatedaddress="91.132.95.135" AND translatedport=8773 OR destinationtranslatedaddress="194.233.174.22" AND translatedport=45358)
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="158.255.212.173" AND destinationport=10862 OR destinationaddress="151.236.25.126" AND destinationport=11331 OR destinationaddress="158.255.215.49" AND destinationport=23079 OR destinationaddress="185.26.239.98" AND destinationport=11076 OR destinationaddress="151.236.25.10" AND destinationport=7205 OR destinationaddress="37.235.53.217" AND destinationport=1358 OR destinationaddress="151.236.23.232" AND destinationport=763 OR destinationaddress="37.235.56.204" AND destinationport=24239 OR destinationaddress="162.252.175.122" AND destinationport=4126 OR destinationaddress="162.252.175.136" AND destinationport=11077)
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="158.255.212.173" AND sourceport=10862 OR sourceaddress="151.236.25.126" AND sourceport=11331 OR sourceaddress="158.255.215.49" AND sourceport=23079 OR sourceaddress="185.26.239.98" AND sourceport=11076 OR sourceaddress="151.236.25.10" AND sourceport=7205 OR sourceaddress="37.235.53.217" AND sourceport=1358 OR sourceaddress="151.236.23.232" AND sourceport=763 OR sourceaddress="37.235.56.204" AND sourceport=24239 OR sourceaddress="162.252.175.122" AND sourceport=4126 OR sourceaddress="162.252.175.136" AND sourceport=11077)
index=activity AND rg_functionality="Cloud Application Security Broker" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="158.255.212.173" AND sourceport=10862 OR translatedipaddress="151.236.25.126" AND sourceport=11331 OR translatedipaddress="158.255.215.49" AND sourceport=23079 OR translatedipaddress="185.26.239.98" AND sourceport=11076 OR translatedipaddress="151.236.25.10" AND sourceport=7205 OR translatedipaddress="37.235.53.217" AND sourceport=1358 OR translatedipaddress="151.236.23.232" AND sourceport=763 OR translatedipaddress="37.235.56.204" AND sourceport=24239 OR translatedipaddress="162.252.175.122" AND sourceport=4126 OR translatedipaddress="162.252.175.136" AND sourceport=11077)
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND destinationport=10862 OR destinationtranslatedaddress="151.236.25.126" AND destinationport=11331 OR destinationtranslatedaddress="158.255.215.49" AND destinationport=23079 OR destinationtranslatedaddress="185.26.239.98" AND destinationport=11076 OR destinationtranslatedaddress="151.236.25.10" AND destinationport=7205 OR destinationtranslatedaddress="37.235.53.217" AND destinationport=1358 OR destinationtranslatedaddress="151.236.23.232" AND destinationport=763 OR destinationtranslatedaddress="37.235.56.204" AND destinationport=24239 OR destinationtranslatedaddress="162.252.175.122" AND destinationport=4126 OR destinationtranslatedaddress="162.252.175.136" AND destinationport=11077)
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND destinationtranslatedport=10862 OR destinationtranslatedaddress="151.236.25.126" AND destinationtranslatedport=11331 OR destinationtranslatedaddress="158.255.215.49" AND destinationtranslatedport=23079 OR destinationtranslatedaddress="185.26.239.98" AND destinationtranslatedport=11076 OR destinationtranslatedaddress="151.236.25.10" AND destinationtranslatedport=7205 OR destinationtranslatedaddress="37.235.53.217" AND destinationtranslatedport=1358 OR destinationtranslatedaddress="151.236.23.232" AND destinationtranslatedport=763 OR destinationtranslatedaddress="37.235.56.204" AND destinationtranslatedport=24239 OR destinationtranslatedaddress="162.252.175.122" AND destinationtranslatedport=4126 OR destinationtranslatedaddress="162.252.175.136" AND destinationtranslatedport=11077)
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND translatedport=10862 OR destinationtranslatedaddress="151.236.25.126" AND translatedport=11331 OR destinationtranslatedaddress="158.255.215.49" AND translatedport=23079 OR destinationtranslatedaddress="185.26.239.98" AND translatedport=11076 OR destinationtranslatedaddress="151.236.25.10" AND translatedport=7205 OR destinationtranslatedaddress="37.235.53.217" AND translatedport=1358 OR destinationtranslatedaddress="151.236.23.232" AND translatedport=763 OR destinationtranslatedaddress="37.235.56.204" AND translatedport=24239 OR destinationtranslatedaddress="162.252.175.122" AND translatedport=4126 OR destinationtranslatedaddress="162.252.175.136" AND translatedport=11077)
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="162.252.175.163" AND destinationport=28693 OR destinationaddress="162.252.175.90" AND destinationport=845 OR destinationaddress="162.252.175.109" AND destinationport=28330 OR destinationaddress="151.236.20.39" AND destinationport=5524 OR destinationaddress="158.255.208.140" AND destinationport=86 OR destinationaddress="194.68.27.149" AND destinationport=13106 OR destinationaddress="194.68.27.176" AND destinationport=6460 OR destinationaddress="37.143.128.223" AND destinationport=16223 OR destinationaddress="31.40.212.130" AND destinationport=7225 OR destinationaddress="198.244.207.203" AND destinationport=2076)
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="162.252.175.163" AND sourceport=28693 OR sourceaddress="162.252.175.90" AND sourceport=845 OR sourceaddress="162.252.175.109" AND sourceport=28330 OR sourceaddress="151.236.20.39" AND sourceport=5524 OR sourceaddress="158.255.208.140" AND sourceport=86 OR sourceaddress="194.68.27.149" AND sourceport=13106 OR sourceaddress="194.68.27.176" AND sourceport=6460 OR sourceaddress="37.143.128.223" AND sourceport=16223 OR sourceaddress="31.40.212.130" AND sourceport=7225 OR sourceaddress="198.244.207.203" AND sourceport=2076)
index=activity AND rg_functionality="Cloud Application Security Broker" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="162.252.175.163" AND sourceport=28693 OR translatedipaddress="162.252.175.90" AND sourceport=845 OR translatedipaddress="162.252.175.109" AND sourceport=28330 OR translatedipaddress="151.236.20.39" AND sourceport=5524 OR translatedipaddress="158.255.208.140" AND sourceport=86 OR translatedipaddress="194.68.27.149" AND sourceport=13106 OR translatedipaddress="194.68.27.176" AND sourceport=6460 OR translatedipaddress="37.143.128.223" AND sourceport=16223 OR translatedipaddress="31.40.212.130" AND sourceport=7225 OR translatedipaddress="198.244.207.203" AND sourceport=2076)
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND destinationport=28693 OR destinationtranslatedaddress="162.252.175.90" AND destinationport=845 OR destinationtranslatedaddress="162.252.175.109" AND destinationport=28330 OR destinationtranslatedaddress="151.236.20.39" AND destinationport=5524 OR destinationtranslatedaddress="158.255.208.140" AND destinationport=86 OR destinationtranslatedaddress="194.68.27.149" AND destinationport=13106 OR destinationtranslatedaddress="194.68.27.176" AND destinationport=6460 OR destinationtranslatedaddress="37.143.128.223" AND destinationport=16223 OR destinationtranslatedaddress="31.40.212.130" AND destinationport=7225 OR destinationtranslatedaddress="198.244.207.203" AND destinationport=2076)
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND destinationtranslatedport=28693 OR destinationtranslatedaddress="162.252.175.90" AND destinationtranslatedport=845 OR destinationtranslatedaddress="162.252.175.109" AND destinationtranslatedport=28330 OR destinationtranslatedaddress="151.236.20.39" AND destinationtranslatedport=5524 OR destinationtranslatedaddress="158.255.208.140" AND destinationtranslatedport=86 OR destinationtranslatedaddress="194.68.27.149" AND destinationtranslatedport=13106 OR destinationtranslatedaddress="194.68.27.176" AND destinationtranslatedport=6460 OR destinationtranslatedaddress="37.143.128.223" AND destinationtranslatedport=16223 OR destinationtranslatedaddress="31.40.212.130" AND destinationtranslatedport=7225 OR destinationtranslatedaddress="198.244.207.203" AND destinationtranslatedport=2076)
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND translatedport=28693 OR destinationtranslatedaddress="162.252.175.90" AND translatedport=845 OR destinationtranslatedaddress="162.252.175.109" AND translatedport=28330 OR destinationtranslatedaddress="151.236.20.39" AND translatedport=5524 OR destinationtranslatedaddress="158.255.208.140" AND translatedport=86 OR destinationtranslatedaddress="194.68.27.149" AND translatedport=13106 OR destinationtranslatedaddress="194.68.27.176" AND translatedport=6460 OR destinationtranslatedaddress="37.143.128.223" AND translatedport=16223 OR destinationtranslatedaddress="31.40.212.130" AND translatedport=7225 OR destinationtranslatedaddress="198.244.207.203" AND translatedport=2076)
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="208.115.230.243" AND destinationport=16697 OR destinationaddress="185.126.239.207" AND destinationport=26630 OR destinationaddress="213.183.57.174" AND destinationport=12517 OR destinationaddress="213.183.57.72" AND destinationport=12517 OR destinationaddress="213.183.56.201" AND destinationport=12517 OR destinationaddress="95.164.45.27" AND destinationport=17426 OR destinationaddress="45.120.178.161" AND destinationport=11013 OR destinationaddress="176.120.74.3" AND destinationport=17268 OR destinationaddress="92.243.64.184" AND destinationport=17146 OR destinationaddress="92.243.64.36" AND destinationport=17146)
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="208.115.230.243" AND sourceport=16697 OR sourceaddress="185.126.239.207" AND sourceport=26630 OR sourceaddress="213.183.57.174" AND sourceport=12517 OR sourceaddress="213.183.57.72" AND sourceport=12517 OR sourceaddress="213.183.56.201" AND sourceport=12517 OR sourceaddress="95.164.45.27" AND sourceport=17426 OR sourceaddress="45.120.178.161" AND sourceport=11013 OR sourceaddress="176.120.74.3" AND sourceport=17268 OR sourceaddress="92.243.64.184" AND sourceport=17146 OR sourceaddress="92.243.64.36" AND sourceport=17146)
index=activity AND rg_functionality="Cloud Application Security Broker" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="208.115.230.243" AND sourceport=16697 OR translatedipaddress="185.126.239.207" AND sourceport=26630 OR translatedipaddress="213.183.57.174" AND sourceport=12517 OR translatedipaddress="213.183.57.72" AND sourceport=12517 OR translatedipaddress="213.183.56.201" AND sourceport=12517 OR translatedipaddress="95.164.45.27" AND sourceport=17426 OR translatedipaddress="45.120.178.161" AND sourceport=11013 OR translatedipaddress="176.120.74.3" AND sourceport=17268 OR translatedipaddress="92.243.64.184" AND sourceport=17146 OR translatedipaddress="92.243.64.36" AND sourceport=17146)
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND destinationport=16697 OR destinationtranslatedaddress="185.126.239.207" AND destinationport=26630 OR destinationtranslatedaddress="213.183.57.174" AND destinationport=12517 OR destinationtranslatedaddress="213.183.57.72" AND destinationport=12517 OR destinationtranslatedaddress="213.183.56.201" AND destinationport=12517 OR destinationtranslatedaddress="95.164.45.27" AND destinationport=17426 OR destinationtranslatedaddress="45.120.178.161" AND destinationport=11013 OR destinationtranslatedaddress="176.120.74.3" AND destinationport=17268 OR destinationtranslatedaddress="92.243.64.184" AND destinationport=17146 OR destinationtranslatedaddress="92.243.64.36" AND destinationport=17146)
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND destinationtranslatedport=16697 OR destinationtranslatedaddress="185.126.239.207" AND destinationtranslatedport=26630 OR destinationtranslatedaddress="213.183.57.174" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="213.183.57.72" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="213.183.56.201" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="95.164.45.27" AND destinationtranslatedport=17426 OR destinationtranslatedaddress="45.120.178.161" AND destinationtranslatedport=11013 OR destinationtranslatedaddress="176.120.74.3" AND destinationtranslatedport=17268 OR destinationtranslatedaddress="92.243.64.184" AND destinationtranslatedport=17146 OR destinationtranslatedaddress="92.243.64.36" AND destinationtranslatedport=17146)
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND translatedport=16697 OR destinationtranslatedaddress="185.126.239.207" AND translatedport=26630 OR destinationtranslatedaddress="213.183.57.174" AND translatedport=12517 OR destinationtranslatedaddress="213.183.57.72" AND translatedport=12517 OR destinationtranslatedaddress="213.183.56.201" AND translatedport=12517 OR destinationtranslatedaddress="95.164.45.27" AND translatedport=17426 OR destinationtranslatedaddress="45.120.178.161" AND translatedport=11013 OR destinationtranslatedaddress="176.120.74.3" AND translatedport=17268 OR destinationtranslatedaddress="92.243.64.184" AND translatedport=17146 OR destinationtranslatedaddress="92.243.64.36" AND translatedport=17146)
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="89.31.120.126" AND destinationport=11578 OR destinationaddress="91.132.93.33" AND destinationport=11578 OR destinationaddress="91.132.95.28" AND destinationport=8773 OR destinationaddress="91.132.95.204" AND destinationport=8773 OR destinationaddress="91.132.95.135" AND destinationport=8773 OR destinationaddress="194.233.174.22" AND destinationport=45358)
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="89.31.120.126" AND sourceport=11578 OR sourceaddress="91.132.93.33" AND sourceport=11578 OR sourceaddress="91.132.95.28" AND sourceport=8773 OR sourceaddress="91.132.95.204" AND sourceport=8773 OR sourceaddress="91.132.95.135" AND sourceport=8773 OR sourceaddress="194.233.174.22" AND sourceport=45358)
index=activity AND rg_functionality="Cloud Application Security Broker" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="89.31.120.126" AND sourceport=11578 OR translatedipaddress="91.132.93.33" AND sourceport=11578 OR translatedipaddress="91.132.95.28" AND sourceport=8773 OR translatedipaddress="91.132.95.204" AND sourceport=8773 OR translatedipaddress="91.132.95.135" AND sourceport=8773 OR translatedipaddress="194.233.174.22" AND sourceport=45358)
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND destinationport=11578 OR destinationtranslatedaddress="91.132.93.33" AND destinationport=11578 OR destinationtranslatedaddress="91.132.95.28" AND destinationport=8773 OR destinationtranslatedaddress="91.132.95.204" AND destinationport=8773 OR destinationtranslatedaddress="91.132.95.135" AND destinationport=8773 OR destinationtranslatedaddress="194.233.174.22" AND destinationport=45358)
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND destinationtranslatedport=11578 OR destinationtranslatedaddress="91.132.93.33" AND destinationtranslatedport=11578 OR destinationtranslatedaddress="91.132.95.28" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="91.132.95.204" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="91.132.95.135" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="194.233.174.22" AND destinationtranslatedport=45358)
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND translatedport=11578 OR destinationtranslatedaddress="91.132.93.33" AND translatedport=11578 OR destinationtranslatedaddress="91.132.95.28" AND translatedport=8773 OR destinationtranslatedaddress="91.132.95.204" AND translatedport=8773 OR destinationtranslatedaddress="91.132.95.135" AND translatedport=8773 OR destinationtranslatedaddress="194.233.174.22" AND translatedport=45358)
index=activity AND rg_functionality="Source Code Repository" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="158.255.212.173" AND destinationport=10862 OR destinationaddress="151.236.25.126" AND destinationport=11331 OR destinationaddress="158.255.215.49" AND destinationport=23079 OR destinationaddress="185.26.239.98" AND destinationport=11076 OR destinationaddress="151.236.25.10" AND destinationport=7205 OR destinationaddress="37.235.53.217" AND destinationport=1358 OR destinationaddress="151.236.23.232" AND destinationport=763 OR destinationaddress="37.235.56.204" AND destinationport=24239 OR destinationaddress="162.252.175.122" AND destinationport=4126 OR destinationaddress="162.252.175.136" AND destinationport=11077)
index=activity AND rg_functionality="Source Code Repository" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="158.255.212.173" AND sourceport=10862 OR sourceaddress="151.236.25.126" AND sourceport=11331 OR sourceaddress="158.255.215.49" AND sourceport=23079 OR sourceaddress="185.26.239.98" AND sourceport=11076 OR sourceaddress="151.236.25.10" AND sourceport=7205 OR sourceaddress="37.235.53.217" AND sourceport=1358 OR sourceaddress="151.236.23.232" AND sourceport=763 OR sourceaddress="37.235.56.204" AND sourceport=24239 OR sourceaddress="162.252.175.122" AND sourceport=4126 OR sourceaddress="162.252.175.136" AND sourceport=11077)
index=activity AND rg_functionality="Source Code Repository" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="158.255.212.173" AND sourceport=10862 OR translatedipaddress="151.236.25.126" AND sourceport=11331 OR translatedipaddress="158.255.215.49" AND sourceport=23079 OR translatedipaddress="185.26.239.98" AND sourceport=11076 OR translatedipaddress="151.236.25.10" AND sourceport=7205 OR translatedipaddress="37.235.53.217" AND sourceport=1358 OR translatedipaddress="151.236.23.232" AND sourceport=763 OR translatedipaddress="37.235.56.204" AND sourceport=24239 OR translatedipaddress="162.252.175.122" AND sourceport=4126 OR translatedipaddress="162.252.175.136" AND sourceport=11077)
index=activity AND rg_functionality="Source Code Repository" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND destinationport=10862 OR destinationtranslatedaddress="151.236.25.126" AND destinationport=11331 OR destinationtranslatedaddress="158.255.215.49" AND destinationport=23079 OR destinationtranslatedaddress="185.26.239.98" AND destinationport=11076 OR destinationtranslatedaddress="151.236.25.10" AND destinationport=7205 OR destinationtranslatedaddress="37.235.53.217" AND destinationport=1358 OR destinationtranslatedaddress="151.236.23.232" AND destinationport=763 OR destinationtranslatedaddress="37.235.56.204" AND destinationport=24239 OR destinationtranslatedaddress="162.252.175.122" AND destinationport=4126 OR destinationtranslatedaddress="162.252.175.136" AND destinationport=11077)
index=activity AND rg_functionality="Source Code Repository" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND destinationtranslatedport=10862 OR destinationtranslatedaddress="151.236.25.126" AND destinationtranslatedport=11331 OR destinationtranslatedaddress="158.255.215.49" AND destinationtranslatedport=23079 OR destinationtranslatedaddress="185.26.239.98" AND destinationtranslatedport=11076 OR destinationtranslatedaddress="151.236.25.10" AND destinationtranslatedport=7205 OR destinationtranslatedaddress="37.235.53.217" AND destinationtranslatedport=1358 OR destinationtranslatedaddress="151.236.23.232" AND destinationtranslatedport=763 OR destinationtranslatedaddress="37.235.56.204" AND destinationtranslatedport=24239 OR destinationtranslatedaddress="162.252.175.122" AND destinationtranslatedport=4126 OR destinationtranslatedaddress="162.252.175.136" AND destinationtranslatedport=11077)
index=activity AND rg_functionality="Source Code Repository" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND translatedport=10862 OR destinationtranslatedaddress="151.236.25.126" AND translatedport=11331 OR destinationtranslatedaddress="158.255.215.49" AND translatedport=23079 OR destinationtranslatedaddress="185.26.239.98" AND translatedport=11076 OR destinationtranslatedaddress="151.236.25.10" AND translatedport=7205 OR destinationtranslatedaddress="37.235.53.217" AND translatedport=1358 OR destinationtranslatedaddress="151.236.23.232" AND translatedport=763 OR destinationtranslatedaddress="37.235.56.204" AND translatedport=24239 OR destinationtranslatedaddress="162.252.175.122" AND translatedport=4126 OR destinationtranslatedaddress="162.252.175.136" AND translatedport=11077)
index=activity AND rg_functionality="Source Code Repository" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="162.252.175.163" AND destinationport=28693 OR destinationaddress="162.252.175.90" AND destinationport=845 OR destinationaddress="162.252.175.109" AND destinationport=28330 OR destinationaddress="151.236.20.39" AND destinationport=5524 OR destinationaddress="158.255.208.140" AND destinationport=86 OR destinationaddress="194.68.27.149" AND destinationport=13106 OR destinationaddress="194.68.27.176" AND destinationport=6460 OR destinationaddress="37.143.128.223" AND destinationport=16223 OR destinationaddress="31.40.212.130" AND destinationport=7225 OR destinationaddress="198.244.207.203" AND destinationport=2076)
index=activity AND rg_functionality="Source Code Repository" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="162.252.175.163" AND sourceport=28693 OR sourceaddress="162.252.175.90" AND sourceport=845 OR sourceaddress="162.252.175.109" AND sourceport=28330 OR sourceaddress="151.236.20.39" AND sourceport=5524 OR sourceaddress="158.255.208.140" AND sourceport=86 OR sourceaddress="194.68.27.149" AND sourceport=13106 OR sourceaddress="194.68.27.176" AND sourceport=6460 OR sourceaddress="37.143.128.223" AND sourceport=16223 OR sourceaddress="31.40.212.130" AND sourceport=7225 OR sourceaddress="198.244.207.203" AND sourceport=2076)
index=activity AND rg_functionality="Source Code Repository" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="162.252.175.163" AND sourceport=28693 OR translatedipaddress="162.252.175.90" AND sourceport=845 OR translatedipaddress="162.252.175.109" AND sourceport=28330 OR translatedipaddress="151.236.20.39" AND sourceport=5524 OR translatedipaddress="158.255.208.140" AND sourceport=86 OR translatedipaddress="194.68.27.149" AND sourceport=13106 OR translatedipaddress="194.68.27.176" AND sourceport=6460 OR translatedipaddress="37.143.128.223" AND sourceport=16223 OR translatedipaddress="31.40.212.130" AND sourceport=7225 OR translatedipaddress="198.244.207.203" AND sourceport=2076)
index=activity AND rg_functionality="Source Code Repository" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND destinationport=28693 OR destinationtranslatedaddress="162.252.175.90" AND destinationport=845 OR destinationtranslatedaddress="162.252.175.109" AND destinationport=28330 OR destinationtranslatedaddress="151.236.20.39" AND destinationport=5524 OR destinationtranslatedaddress="158.255.208.140" AND destinationport=86 OR destinationtranslatedaddress="194.68.27.149" AND destinationport=13106 OR destinationtranslatedaddress="194.68.27.176" AND destinationport=6460 OR destinationtranslatedaddress="37.143.128.223" AND destinationport=16223 OR destinationtranslatedaddress="31.40.212.130" AND destinationport=7225 OR destinationtranslatedaddress="198.244.207.203" AND destinationport=2076)
index=activity AND rg_functionality="Source Code Repository" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND destinationtranslatedport=28693 OR destinationtranslatedaddress="162.252.175.90" AND destinationtranslatedport=845 OR destinationtranslatedaddress="162.252.175.109" AND destinationtranslatedport=28330 OR destinationtranslatedaddress="151.236.20.39" AND destinationtranslatedport=5524 OR destinationtranslatedaddress="158.255.208.140" AND destinationtranslatedport=86 OR destinationtranslatedaddress="194.68.27.149" AND destinationtranslatedport=13106 OR destinationtranslatedaddress="194.68.27.176" AND destinationtranslatedport=6460 OR destinationtranslatedaddress="37.143.128.223" AND destinationtranslatedport=16223 OR destinationtranslatedaddress="31.40.212.130" AND destinationtranslatedport=7225 OR destinationtranslatedaddress="198.244.207.203" AND destinationtranslatedport=2076)
index=activity AND rg_functionality="Source Code Repository" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND translatedport=28693 OR destinationtranslatedaddress="162.252.175.90" AND translatedport=845 OR destinationtranslatedaddress="162.252.175.109" AND translatedport=28330 OR destinationtranslatedaddress="151.236.20.39" AND translatedport=5524 OR destinationtranslatedaddress="158.255.208.140" AND translatedport=86 OR destinationtranslatedaddress="194.68.27.149" AND translatedport=13106 OR destinationtranslatedaddress="194.68.27.176" AND translatedport=6460 OR destinationtranslatedaddress="37.143.128.223" AND translatedport=16223 OR destinationtranslatedaddress="31.40.212.130" AND translatedport=7225 OR destinationtranslatedaddress="198.244.207.203" AND translatedport=2076)
index=activity AND rg_functionality="Source Code Repository" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="208.115.230.243" AND destinationport=16697 OR destinationaddress="185.126.239.207" AND destinationport=26630 OR destinationaddress="213.183.57.174" AND destinationport=12517 OR destinationaddress="213.183.57.72" AND destinationport=12517 OR destinationaddress="213.183.56.201" AND destinationport=12517 OR destinationaddress="95.164.45.27" AND destinationport=17426 OR destinationaddress="45.120.178.161" AND destinationport=11013 OR destinationaddress="176.120.74.3" AND destinationport=17268 OR destinationaddress="92.243.64.184" AND destinationport=17146 OR destinationaddress="92.243.64.36" AND destinationport=17146)
index=activity AND rg_functionality="Source Code Repository" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="208.115.230.243" AND sourceport=16697 OR sourceaddress="185.126.239.207" AND sourceport=26630 OR sourceaddress="213.183.57.174" AND sourceport=12517 OR sourceaddress="213.183.57.72" AND sourceport=12517 OR sourceaddress="213.183.56.201" AND sourceport=12517 OR sourceaddress="95.164.45.27" AND sourceport=17426 OR sourceaddress="45.120.178.161" AND sourceport=11013 OR sourceaddress="176.120.74.3" AND sourceport=17268 OR sourceaddress="92.243.64.184" AND sourceport=17146 OR sourceaddress="92.243.64.36" AND sourceport=17146)
index=activity AND rg_functionality="Source Code Repository" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="208.115.230.243" AND sourceport=16697 OR translatedipaddress="185.126.239.207" AND sourceport=26630 OR translatedipaddress="213.183.57.174" AND sourceport=12517 OR translatedipaddress="213.183.57.72" AND sourceport=12517 OR translatedipaddress="213.183.56.201" AND sourceport=12517 OR translatedipaddress="95.164.45.27" AND sourceport=17426 OR translatedipaddress="45.120.178.161" AND sourceport=11013 OR translatedipaddress="176.120.74.3" AND sourceport=17268 OR translatedipaddress="92.243.64.184" AND sourceport=17146 OR translatedipaddress="92.243.64.36" AND sourceport=17146)
index=activity AND rg_functionality="Source Code Repository" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND destinationport=16697 OR destinationtranslatedaddress="185.126.239.207" AND destinationport=26630 OR destinationtranslatedaddress="213.183.57.174" AND destinationport=12517 OR destinationtranslatedaddress="213.183.57.72" AND destinationport=12517 OR destinationtranslatedaddress="213.183.56.201" AND destinationport=12517 OR destinationtranslatedaddress="95.164.45.27" AND destinationport=17426 OR destinationtranslatedaddress="45.120.178.161" AND destinationport=11013 OR destinationtranslatedaddress="176.120.74.3" AND destinationport=17268 OR destinationtranslatedaddress="92.243.64.184" AND destinationport=17146 OR destinationtranslatedaddress="92.243.64.36" AND destinationport=17146)
index=activity AND rg_functionality="Source Code Repository" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND destinationtranslatedport=16697 OR destinationtranslatedaddress="185.126.239.207" AND destinationtranslatedport=26630 OR destinationtranslatedaddress="213.183.57.174" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="213.183.57.72" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="213.183.56.201" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="95.164.45.27" AND destinationtranslatedport=17426 OR destinationtranslatedaddress="45.120.178.161" AND destinationtranslatedport=11013 OR destinationtranslatedaddress="176.120.74.3" AND destinationtranslatedport=17268 OR destinationtranslatedaddress="92.243.64.184" AND destinationtranslatedport=17146 OR destinationtranslatedaddress="92.243.64.36" AND destinationtranslatedport=17146)
index=activity AND rg_functionality="Source Code Repository" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND translatedport=16697 OR destinationtranslatedaddress="185.126.239.207" AND translatedport=26630 OR destinationtranslatedaddress="213.183.57.174" AND translatedport=12517 OR destinationtranslatedaddress="213.183.57.72" AND translatedport=12517 OR destinationtranslatedaddress="213.183.56.201" AND translatedport=12517 OR destinationtranslatedaddress="95.164.45.27" AND translatedport=17426 OR destinationtranslatedaddress="45.120.178.161" AND translatedport=11013 OR destinationtranslatedaddress="176.120.74.3" AND translatedport=17268 OR destinationtranslatedaddress="92.243.64.184" AND translatedport=17146 OR destinationtranslatedaddress="92.243.64.36" AND translatedport=17146)
index=activity AND rg_functionality="Source Code Repository" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="89.31.120.126" AND destinationport=11578 OR destinationaddress="91.132.93.33" AND destinationport=11578 OR destinationaddress="91.132.95.28" AND destinationport=8773 OR destinationaddress="91.132.95.204" AND destinationport=8773 OR destinationaddress="91.132.95.135" AND destinationport=8773 OR destinationaddress="194.233.174.22" AND destinationport=45358)
index=activity AND rg_functionality="Source Code Repository" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="89.31.120.126" AND sourceport=11578 OR sourceaddress="91.132.93.33" AND sourceport=11578 OR sourceaddress="91.132.95.28" AND sourceport=8773 OR sourceaddress="91.132.95.204" AND sourceport=8773 OR sourceaddress="91.132.95.135" AND sourceport=8773 OR sourceaddress="194.233.174.22" AND sourceport=45358)
index=activity AND rg_functionality="Source Code Repository" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="89.31.120.126" AND sourceport=11578 OR translatedipaddress="91.132.93.33" AND sourceport=11578 OR translatedipaddress="91.132.95.28" AND sourceport=8773 OR translatedipaddress="91.132.95.204" AND sourceport=8773 OR translatedipaddress="91.132.95.135" AND sourceport=8773 OR translatedipaddress="194.233.174.22" AND sourceport=45358)
index=activity AND rg_functionality="Source Code Repository" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND destinationport=11578 OR destinationtranslatedaddress="91.132.93.33" AND destinationport=11578 OR destinationtranslatedaddress="91.132.95.28" AND destinationport=8773 OR destinationtranslatedaddress="91.132.95.204" AND destinationport=8773 OR destinationtranslatedaddress="91.132.95.135" AND destinationport=8773 OR destinationtranslatedaddress="194.233.174.22" AND destinationport=45358)
index=activity AND rg_functionality="Source Code Repository" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND destinationtranslatedport=11578 OR destinationtranslatedaddress="91.132.93.33" AND destinationtranslatedport=11578 OR destinationtranslatedaddress="91.132.95.28" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="91.132.95.204" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="91.132.95.135" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="194.233.174.22" AND destinationtranslatedport=45358)
index=activity AND rg_functionality="Source Code Repository" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND translatedport=11578 OR destinationtranslatedaddress="91.132.93.33" AND translatedport=11578 OR destinationtranslatedaddress="91.132.95.28" AND translatedport=8773 OR destinationtranslatedaddress="91.132.95.204" AND translatedport=8773 OR destinationtranslatedaddress="91.132.95.135" AND translatedport=8773 OR destinationtranslatedaddress="194.233.174.22" AND translatedport=45358)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="158.255.212.173" AND destinationport=10862 OR destinationaddress="151.236.25.126" AND destinationport=11331 OR destinationaddress="158.255.215.49" AND destinationport=23079 OR destinationaddress="185.26.239.98" AND destinationport=11076 OR destinationaddress="151.236.25.10" AND destinationport=7205 OR destinationaddress="37.235.53.217" AND destinationport=1358 OR destinationaddress="151.236.23.232" AND destinationport=763 OR destinationaddress="37.235.56.204" AND destinationport=24239 OR destinationaddress="162.252.175.122" AND destinationport=4126 OR destinationaddress="162.252.175.136" AND destinationport=11077)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="158.255.212.173" AND sourceport=10862 OR sourceaddress="151.236.25.126" AND sourceport=11331 OR sourceaddress="158.255.215.49" AND sourceport=23079 OR sourceaddress="185.26.239.98" AND sourceport=11076 OR sourceaddress="151.236.25.10" AND sourceport=7205 OR sourceaddress="37.235.53.217" AND sourceport=1358 OR sourceaddress="151.236.23.232" AND sourceport=763 OR sourceaddress="37.235.56.204" AND sourceport=24239 OR sourceaddress="162.252.175.122" AND sourceport=4126 OR sourceaddress="162.252.175.136" AND sourceport=11077)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="158.255.212.173" AND sourceport=10862 OR translatedipaddress="151.236.25.126" AND sourceport=11331 OR translatedipaddress="158.255.215.49" AND sourceport=23079 OR translatedipaddress="185.26.239.98" AND sourceport=11076 OR translatedipaddress="151.236.25.10" AND sourceport=7205 OR translatedipaddress="37.235.53.217" AND sourceport=1358 OR translatedipaddress="151.236.23.232" AND sourceport=763 OR translatedipaddress="37.235.56.204" AND sourceport=24239 OR translatedipaddress="162.252.175.122" AND sourceport=4126 OR translatedipaddress="162.252.175.136" AND sourceport=11077)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND destinationport=10862 OR destinationtranslatedaddress="151.236.25.126" AND destinationport=11331 OR destinationtranslatedaddress="158.255.215.49" AND destinationport=23079 OR destinationtranslatedaddress="185.26.239.98" AND destinationport=11076 OR destinationtranslatedaddress="151.236.25.10" AND destinationport=7205 OR destinationtranslatedaddress="37.235.53.217" AND destinationport=1358 OR destinationtranslatedaddress="151.236.23.232" AND destinationport=763 OR destinationtranslatedaddress="37.235.56.204" AND destinationport=24239 OR destinationtranslatedaddress="162.252.175.122" AND destinationport=4126 OR destinationtranslatedaddress="162.252.175.136" AND destinationport=11077)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND destinationtranslatedport=10862 OR destinationtranslatedaddress="151.236.25.126" AND destinationtranslatedport=11331 OR destinationtranslatedaddress="158.255.215.49" AND destinationtranslatedport=23079 OR destinationtranslatedaddress="185.26.239.98" AND destinationtranslatedport=11076 OR destinationtranslatedaddress="151.236.25.10" AND destinationtranslatedport=7205 OR destinationtranslatedaddress="37.235.53.217" AND destinationtranslatedport=1358 OR destinationtranslatedaddress="151.236.23.232" AND destinationtranslatedport=763 OR destinationtranslatedaddress="37.235.56.204" AND destinationtranslatedport=24239 OR destinationtranslatedaddress="162.252.175.122" AND destinationtranslatedport=4126 OR destinationtranslatedaddress="162.252.175.136" AND destinationtranslatedport=11077)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND translatedport=10862 OR destinationtranslatedaddress="151.236.25.126" AND translatedport=11331 OR destinationtranslatedaddress="158.255.215.49" AND translatedport=23079 OR destinationtranslatedaddress="185.26.239.98" AND translatedport=11076 OR destinationtranslatedaddress="151.236.25.10" AND translatedport=7205 OR destinationtranslatedaddress="37.235.53.217" AND translatedport=1358 OR destinationtranslatedaddress="151.236.23.232" AND translatedport=763 OR destinationtranslatedaddress="37.235.56.204" AND translatedport=24239 OR destinationtranslatedaddress="162.252.175.122" AND translatedport=4126 OR destinationtranslatedaddress="162.252.175.136" AND translatedport=11077)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="162.252.175.163" AND destinationport=28693 OR destinationaddress="162.252.175.90" AND destinationport=845 OR destinationaddress="162.252.175.109" AND destinationport=28330 OR destinationaddress="151.236.20.39" AND destinationport=5524 OR destinationaddress="158.255.208.140" AND destinationport=86 OR destinationaddress="194.68.27.149" AND destinationport=13106 OR destinationaddress="194.68.27.176" AND destinationport=6460 OR destinationaddress="37.143.128.223" AND destinationport=16223 OR destinationaddress="31.40.212.130" AND destinationport=7225 OR destinationaddress="198.244.207.203" AND destinationport=2076)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="162.252.175.163" AND sourceport=28693 OR sourceaddress="162.252.175.90" AND sourceport=845 OR sourceaddress="162.252.175.109" AND sourceport=28330 OR sourceaddress="151.236.20.39" AND sourceport=5524 OR sourceaddress="158.255.208.140" AND sourceport=86 OR sourceaddress="194.68.27.149" AND sourceport=13106 OR sourceaddress="194.68.27.176" AND sourceport=6460 OR sourceaddress="37.143.128.223" AND sourceport=16223 OR sourceaddress="31.40.212.130" AND sourceport=7225 OR sourceaddress="198.244.207.203" AND sourceport=2076)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="162.252.175.163" AND sourceport=28693 OR translatedipaddress="162.252.175.90" AND sourceport=845 OR translatedipaddress="162.252.175.109" AND sourceport=28330 OR translatedipaddress="151.236.20.39" AND sourceport=5524 OR translatedipaddress="158.255.208.140" AND sourceport=86 OR translatedipaddress="194.68.27.149" AND sourceport=13106 OR translatedipaddress="194.68.27.176" AND sourceport=6460 OR translatedipaddress="37.143.128.223" AND sourceport=16223 OR translatedipaddress="31.40.212.130" AND sourceport=7225 OR translatedipaddress="198.244.207.203" AND sourceport=2076)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND destinationport=28693 OR destinationtranslatedaddress="162.252.175.90" AND destinationport=845 OR destinationtranslatedaddress="162.252.175.109" AND destinationport=28330 OR destinationtranslatedaddress="151.236.20.39" AND destinationport=5524 OR destinationtranslatedaddress="158.255.208.140" AND destinationport=86 OR destinationtranslatedaddress="194.68.27.149" AND destinationport=13106 OR destinationtranslatedaddress="194.68.27.176" AND destinationport=6460 OR destinationtranslatedaddress="37.143.128.223" AND destinationport=16223 OR destinationtranslatedaddress="31.40.212.130" AND destinationport=7225 OR destinationtranslatedaddress="198.244.207.203" AND destinationport=2076)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND destinationtranslatedport=28693 OR destinationtranslatedaddress="162.252.175.90" AND destinationtranslatedport=845 OR destinationtranslatedaddress="162.252.175.109" AND destinationtranslatedport=28330 OR destinationtranslatedaddress="151.236.20.39" AND destinationtranslatedport=5524 OR destinationtranslatedaddress="158.255.208.140" AND destinationtranslatedport=86 OR destinationtranslatedaddress="194.68.27.149" AND destinationtranslatedport=13106 OR destinationtranslatedaddress="194.68.27.176" AND destinationtranslatedport=6460 OR destinationtranslatedaddress="37.143.128.223" AND destinationtranslatedport=16223 OR destinationtranslatedaddress="31.40.212.130" AND destinationtranslatedport=7225 OR destinationtranslatedaddress="198.244.207.203" AND destinationtranslatedport=2076)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND translatedport=28693 OR destinationtranslatedaddress="162.252.175.90" AND translatedport=845 OR destinationtranslatedaddress="162.252.175.109" AND translatedport=28330 OR destinationtranslatedaddress="151.236.20.39" AND translatedport=5524 OR destinationtranslatedaddress="158.255.208.140" AND translatedport=86 OR destinationtranslatedaddress="194.68.27.149" AND translatedport=13106 OR destinationtranslatedaddress="194.68.27.176" AND translatedport=6460 OR destinationtranslatedaddress="37.143.128.223" AND translatedport=16223 OR destinationtranslatedaddress="31.40.212.130" AND translatedport=7225 OR destinationtranslatedaddress="198.244.207.203" AND translatedport=2076)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="208.115.230.243" AND destinationport=16697 OR destinationaddress="185.126.239.207" AND destinationport=26630 OR destinationaddress="213.183.57.174" AND destinationport=12517 OR destinationaddress="213.183.57.72" AND destinationport=12517 OR destinationaddress="213.183.56.201" AND destinationport=12517 OR destinationaddress="95.164.45.27" AND destinationport=17426 OR destinationaddress="45.120.178.161" AND destinationport=11013 OR destinationaddress="176.120.74.3" AND destinationport=17268 OR destinationaddress="92.243.64.184" AND destinationport=17146 OR destinationaddress="92.243.64.36" AND destinationport=17146)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="208.115.230.243" AND sourceport=16697 OR sourceaddress="185.126.239.207" AND sourceport=26630 OR sourceaddress="213.183.57.174" AND sourceport=12517 OR sourceaddress="213.183.57.72" AND sourceport=12517 OR sourceaddress="213.183.56.201" AND sourceport=12517 OR sourceaddress="95.164.45.27" AND sourceport=17426 OR sourceaddress="45.120.178.161" AND sourceport=11013 OR sourceaddress="176.120.74.3" AND sourceport=17268 OR sourceaddress="92.243.64.184" AND sourceport=17146 OR sourceaddress="92.243.64.36" AND sourceport=17146)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="208.115.230.243" AND sourceport=16697 OR translatedipaddress="185.126.239.207" AND sourceport=26630 OR translatedipaddress="213.183.57.174" AND sourceport=12517 OR translatedipaddress="213.183.57.72" AND sourceport=12517 OR translatedipaddress="213.183.56.201" AND sourceport=12517 OR translatedipaddress="95.164.45.27" AND sourceport=17426 OR translatedipaddress="45.120.178.161" AND sourceport=11013 OR translatedipaddress="176.120.74.3" AND sourceport=17268 OR translatedipaddress="92.243.64.184" AND sourceport=17146 OR translatedipaddress="92.243.64.36" AND sourceport=17146)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND destinationport=16697 OR destinationtranslatedaddress="185.126.239.207" AND destinationport=26630 OR destinationtranslatedaddress="213.183.57.174" AND destinationport=12517 OR destinationtranslatedaddress="213.183.57.72" AND destinationport=12517 OR destinationtranslatedaddress="213.183.56.201" AND destinationport=12517 OR destinationtranslatedaddress="95.164.45.27" AND destinationport=17426 OR destinationtranslatedaddress="45.120.178.161" AND destinationport=11013 OR destinationtranslatedaddress="176.120.74.3" AND destinationport=17268 OR destinationtranslatedaddress="92.243.64.184" AND destinationport=17146 OR destinationtranslatedaddress="92.243.64.36" AND destinationport=17146)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND destinationtranslatedport=16697 OR destinationtranslatedaddress="185.126.239.207" AND destinationtranslatedport=26630 OR destinationtranslatedaddress="213.183.57.174" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="213.183.57.72" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="213.183.56.201" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="95.164.45.27" AND destinationtranslatedport=17426 OR destinationtranslatedaddress="45.120.178.161" AND destinationtranslatedport=11013 OR destinationtranslatedaddress="176.120.74.3" AND destinationtranslatedport=17268 OR destinationtranslatedaddress="92.243.64.184" AND destinationtranslatedport=17146 OR destinationtranslatedaddress="92.243.64.36" AND destinationtranslatedport=17146)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND translatedport=16697 OR destinationtranslatedaddress="185.126.239.207" AND translatedport=26630 OR destinationtranslatedaddress="213.183.57.174" AND translatedport=12517 OR destinationtranslatedaddress="213.183.57.72" AND translatedport=12517 OR destinationtranslatedaddress="213.183.56.201" AND translatedport=12517 OR destinationtranslatedaddress="95.164.45.27" AND translatedport=17426 OR destinationtranslatedaddress="45.120.178.161" AND translatedport=11013 OR destinationtranslatedaddress="176.120.74.3" AND translatedport=17268 OR destinationtranslatedaddress="92.243.64.184" AND translatedport=17146 OR destinationtranslatedaddress="92.243.64.36" AND translatedport=17146)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="89.31.120.126" AND destinationport=11578 OR destinationaddress="91.132.93.33" AND destinationport=11578 OR destinationaddress="91.132.95.28" AND destinationport=8773 OR destinationaddress="91.132.95.204" AND destinationport=8773 OR destinationaddress="91.132.95.135" AND destinationport=8773 OR destinationaddress="194.233.174.22" AND destinationport=45358)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="89.31.120.126" AND sourceport=11578 OR sourceaddress="91.132.93.33" AND sourceport=11578 OR sourceaddress="91.132.95.28" AND sourceport=8773 OR sourceaddress="91.132.95.204" AND sourceport=8773 OR sourceaddress="91.132.95.135" AND sourceport=8773 OR sourceaddress="194.233.174.22" AND sourceport=45358)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="89.31.120.126" AND sourceport=11578 OR translatedipaddress="91.132.93.33" AND sourceport=11578 OR translatedipaddress="91.132.95.28" AND sourceport=8773 OR translatedipaddress="91.132.95.204" AND sourceport=8773 OR translatedipaddress="91.132.95.135" AND sourceport=8773 OR translatedipaddress="194.233.174.22" AND sourceport=45358)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND destinationport=11578 OR destinationtranslatedaddress="91.132.93.33" AND destinationport=11578 OR destinationtranslatedaddress="91.132.95.28" AND destinationport=8773 OR destinationtranslatedaddress="91.132.95.204" AND destinationport=8773 OR destinationtranslatedaddress="91.132.95.135" AND destinationport=8773 OR destinationtranslatedaddress="194.233.174.22" AND destinationport=45358)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND destinationtranslatedport=11578 OR destinationtranslatedaddress="91.132.93.33" AND destinationtranslatedport=11578 OR destinationtranslatedaddress="91.132.95.28" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="91.132.95.204" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="91.132.95.135" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="194.233.174.22" AND destinationtranslatedport=45358)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND translatedport=11578 OR destinationtranslatedaddress="91.132.93.33" AND translatedport=11578 OR destinationtranslatedaddress="91.132.95.28" AND translatedport=8773 OR destinationtranslatedaddress="91.132.95.204" AND translatedport=8773 OR destinationtranslatedaddress="91.132.95.135" AND translatedport=8773 OR destinationtranslatedaddress="194.233.174.22" AND translatedport=45358)
index=activity AND rg_functionality="Endpoint Management Systems" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="158.255.212.173" AND destinationport=10862 OR destinationaddress="151.236.25.126" AND destinationport=11331 OR destinationaddress="158.255.215.49" AND destinationport=23079 OR destinationaddress="185.26.239.98" AND destinationport=11076 OR destinationaddress="151.236.25.10" AND destinationport=7205 OR destinationaddress="37.235.53.217" AND destinationport=1358 OR destinationaddress="151.236.23.232" AND destinationport=763 OR destinationaddress="37.235.56.204" AND destinationport=24239 OR destinationaddress="162.252.175.122" AND destinationport=4126 OR destinationaddress="162.252.175.136" AND destinationport=11077)
index=activity AND rg_functionality="Endpoint Management Systems" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="158.255.212.173" AND sourceport=10862 OR sourceaddress="151.236.25.126" AND sourceport=11331 OR sourceaddress="158.255.215.49" AND sourceport=23079 OR sourceaddress="185.26.239.98" AND sourceport=11076 OR sourceaddress="151.236.25.10" AND sourceport=7205 OR sourceaddress="37.235.53.217" AND sourceport=1358 OR sourceaddress="151.236.23.232" AND sourceport=763 OR sourceaddress="37.235.56.204" AND sourceport=24239 OR sourceaddress="162.252.175.122" AND sourceport=4126 OR sourceaddress="162.252.175.136" AND sourceport=11077)
index=activity AND rg_functionality="Endpoint Management Systems" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="158.255.212.173" AND sourceport=10862 OR translatedipaddress="151.236.25.126" AND sourceport=11331 OR translatedipaddress="158.255.215.49" AND sourceport=23079 OR translatedipaddress="185.26.239.98" AND sourceport=11076 OR translatedipaddress="151.236.25.10" AND sourceport=7205 OR translatedipaddress="37.235.53.217" AND sourceport=1358 OR translatedipaddress="151.236.23.232" AND sourceport=763 OR translatedipaddress="37.235.56.204" AND sourceport=24239 OR translatedipaddress="162.252.175.122" AND sourceport=4126 OR translatedipaddress="162.252.175.136" AND sourceport=11077)
index=activity AND rg_functionality="Endpoint Management Systems" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND destinationport=10862 OR destinationtranslatedaddress="151.236.25.126" AND destinationport=11331 OR destinationtranslatedaddress="158.255.215.49" AND destinationport=23079 OR destinationtranslatedaddress="185.26.239.98" AND destinationport=11076 OR destinationtranslatedaddress="151.236.25.10" AND destinationport=7205 OR destinationtranslatedaddress="37.235.53.217" AND destinationport=1358 OR destinationtranslatedaddress="151.236.23.232" AND destinationport=763 OR destinationtranslatedaddress="37.235.56.204" AND destinationport=24239 OR destinationtranslatedaddress="162.252.175.122" AND destinationport=4126 OR destinationtranslatedaddress="162.252.175.136" AND destinationport=11077)
index=activity AND rg_functionality="Endpoint Management Systems" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND destinationtranslatedport=10862 OR destinationtranslatedaddress="151.236.25.126" AND destinationtranslatedport=11331 OR destinationtranslatedaddress="158.255.215.49" AND destinationtranslatedport=23079 OR destinationtranslatedaddress="185.26.239.98" AND destinationtranslatedport=11076 OR destinationtranslatedaddress="151.236.25.10" AND destinationtranslatedport=7205 OR destinationtranslatedaddress="37.235.53.217" AND destinationtranslatedport=1358 OR destinationtranslatedaddress="151.236.23.232" AND destinationtranslatedport=763 OR destinationtranslatedaddress="37.235.56.204" AND destinationtranslatedport=24239 OR destinationtranslatedaddress="162.252.175.122" AND destinationtranslatedport=4126 OR destinationtranslatedaddress="162.252.175.136" AND destinationtranslatedport=11077)
index=activity AND rg_functionality="Endpoint Management Systems" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND translatedport=10862 OR destinationtranslatedaddress="151.236.25.126" AND translatedport=11331 OR destinationtranslatedaddress="158.255.215.49" AND translatedport=23079 OR destinationtranslatedaddress="185.26.239.98" AND translatedport=11076 OR destinationtranslatedaddress="151.236.25.10" AND translatedport=7205 OR destinationtranslatedaddress="37.235.53.217" AND translatedport=1358 OR destinationtranslatedaddress="151.236.23.232" AND translatedport=763 OR destinationtranslatedaddress="37.235.56.204" AND translatedport=24239 OR destinationtranslatedaddress="162.252.175.122" AND translatedport=4126 OR destinationtranslatedaddress="162.252.175.136" AND translatedport=11077)
index=activity AND rg_functionality="Endpoint Management Systems" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="162.252.175.163" AND destinationport=28693 OR destinationaddress="162.252.175.90" AND destinationport=845 OR destinationaddress="162.252.175.109" AND destinationport=28330 OR destinationaddress="151.236.20.39" AND destinationport=5524 OR destinationaddress="158.255.208.140" AND destinationport=86 OR destinationaddress="194.68.27.149" AND destinationport=13106 OR destinationaddress="194.68.27.176" AND destinationport=6460 OR destinationaddress="37.143.128.223" AND destinationport=16223 OR destinationaddress="31.40.212.130" AND destinationport=7225 OR destinationaddress="198.244.207.203" AND destinationport=2076)
index=activity AND rg_functionality="Endpoint Management Systems" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="162.252.175.163" AND sourceport=28693 OR sourceaddress="162.252.175.90" AND sourceport=845 OR sourceaddress="162.252.175.109" AND sourceport=28330 OR sourceaddress="151.236.20.39" AND sourceport=5524 OR sourceaddress="158.255.208.140" AND sourceport=86 OR sourceaddress="194.68.27.149" AND sourceport=13106 OR sourceaddress="194.68.27.176" AND sourceport=6460 OR sourceaddress="37.143.128.223" AND sourceport=16223 OR sourceaddress="31.40.212.130" AND sourceport=7225 OR sourceaddress="198.244.207.203" AND sourceport=2076)
index=activity AND rg_functionality="Endpoint Management Systems" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="162.252.175.163" AND sourceport=28693 OR translatedipaddress="162.252.175.90" AND sourceport=845 OR translatedipaddress="162.252.175.109" AND sourceport=28330 OR translatedipaddress="151.236.20.39" AND sourceport=5524 OR translatedipaddress="158.255.208.140" AND sourceport=86 OR translatedipaddress="194.68.27.149" AND sourceport=13106 OR translatedipaddress="194.68.27.176" AND sourceport=6460 OR translatedipaddress="37.143.128.223" AND sourceport=16223 OR translatedipaddress="31.40.212.130" AND sourceport=7225 OR translatedipaddress="198.244.207.203" AND sourceport=2076)
index=activity AND rg_functionality="Endpoint Management Systems" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND destinationport=28693 OR destinationtranslatedaddress="162.252.175.90" AND destinationport=845 OR destinationtranslatedaddress="162.252.175.109" AND destinationport=28330 OR destinationtranslatedaddress="151.236.20.39" AND destinationport=5524 OR destinationtranslatedaddress="158.255.208.140" AND destinationport=86 OR destinationtranslatedaddress="194.68.27.149" AND destinationport=13106 OR destinationtranslatedaddress="194.68.27.176" AND destinationport=6460 OR destinationtranslatedaddress="37.143.128.223" AND destinationport=16223 OR destinationtranslatedaddress="31.40.212.130" AND destinationport=7225 OR destinationtranslatedaddress="198.244.207.203" AND destinationport=2076)
index=activity AND rg_functionality="Endpoint Management Systems" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND destinationtranslatedport=28693 OR destinationtranslatedaddress="162.252.175.90" AND destinationtranslatedport=845 OR destinationtranslatedaddress="162.252.175.109" AND destinationtranslatedport=28330 OR destinationtranslatedaddress="151.236.20.39" AND destinationtranslatedport=5524 OR destinationtranslatedaddress="158.255.208.140" AND destinationtranslatedport=86 OR destinationtranslatedaddress="194.68.27.149" AND destinationtranslatedport=13106 OR destinationtranslatedaddress="194.68.27.176" AND destinationtranslatedport=6460 OR destinationtranslatedaddress="37.143.128.223" AND destinationtranslatedport=16223 OR destinationtranslatedaddress="31.40.212.130" AND destinationtranslatedport=7225 OR destinationtranslatedaddress="198.244.207.203" AND destinationtranslatedport=2076)
index=activity AND rg_functionality="Endpoint Management Systems" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND translatedport=28693 OR destinationtranslatedaddress="162.252.175.90" AND translatedport=845 OR destinationtranslatedaddress="162.252.175.109" AND translatedport=28330 OR destinationtranslatedaddress="151.236.20.39" AND translatedport=5524 OR destinationtranslatedaddress="158.255.208.140" AND translatedport=86 OR destinationtranslatedaddress="194.68.27.149" AND translatedport=13106 OR destinationtranslatedaddress="194.68.27.176" AND translatedport=6460 OR destinationtranslatedaddress="37.143.128.223" AND translatedport=16223 OR destinationtranslatedaddress="31.40.212.130" AND translatedport=7225 OR destinationtranslatedaddress="198.244.207.203" AND translatedport=2076)
index=activity AND rg_functionality="Endpoint Management Systems" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="208.115.230.243" AND destinationport=16697 OR destinationaddress="185.126.239.207" AND destinationport=26630 OR destinationaddress="213.183.57.174" AND destinationport=12517 OR destinationaddress="213.183.57.72" AND destinationport=12517 OR destinationaddress="213.183.56.201" AND destinationport=12517 OR destinationaddress="95.164.45.27" AND destinationport=17426 OR destinationaddress="45.120.178.161" AND destinationport=11013 OR destinationaddress="176.120.74.3" AND destinationport=17268 OR destinationaddress="92.243.64.184" AND destinationport=17146 OR destinationaddress="92.243.64.36" AND destinationport=17146)
index=activity AND rg_functionality="Endpoint Management Systems" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="208.115.230.243" AND sourceport=16697 OR sourceaddress="185.126.239.207" AND sourceport=26630 OR sourceaddress="213.183.57.174" AND sourceport=12517 OR sourceaddress="213.183.57.72" AND sourceport=12517 OR sourceaddress="213.183.56.201" AND sourceport=12517 OR sourceaddress="95.164.45.27" AND sourceport=17426 OR sourceaddress="45.120.178.161" AND sourceport=11013 OR sourceaddress="176.120.74.3" AND sourceport=17268 OR sourceaddress="92.243.64.184" AND sourceport=17146 OR sourceaddress="92.243.64.36" AND sourceport=17146)
index=activity AND rg_functionality="Endpoint Management Systems" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="208.115.230.243" AND sourceport=16697 OR translatedipaddress="185.126.239.207" AND sourceport=26630 OR translatedipaddress="213.183.57.174" AND sourceport=12517 OR translatedipaddress="213.183.57.72" AND sourceport=12517 OR translatedipaddress="213.183.56.201" AND sourceport=12517 OR translatedipaddress="95.164.45.27" AND sourceport=17426 OR translatedipaddress="45.120.178.161" AND sourceport=11013 OR translatedipaddress="176.120.74.3" AND sourceport=17268 OR translatedipaddress="92.243.64.184" AND sourceport=17146 OR translatedipaddress="92.243.64.36" AND sourceport=17146)
index=activity AND rg_functionality="Endpoint Management Systems" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND destinationport=16697 OR destinationtranslatedaddress="185.126.239.207" AND destinationport=26630 OR destinationtranslatedaddress="213.183.57.174" AND destinationport=12517 OR destinationtranslatedaddress="213.183.57.72" AND destinationport=12517 OR destinationtranslatedaddress="213.183.56.201" AND destinationport=12517 OR destinationtranslatedaddress="95.164.45.27" AND destinationport=17426 OR destinationtranslatedaddress="45.120.178.161" AND destinationport=11013 OR destinationtranslatedaddress="176.120.74.3" AND destinationport=17268 OR destinationtranslatedaddress="92.243.64.184" AND destinationport=17146 OR destinationtranslatedaddress="92.243.64.36" AND destinationport=17146)
index=activity AND rg_functionality="Endpoint Management Systems" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND destinationtranslatedport=16697 OR destinationtranslatedaddress="185.126.239.207" AND destinationtranslatedport=26630 OR destinationtranslatedaddress="213.183.57.174" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="213.183.57.72" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="213.183.56.201" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="95.164.45.27" AND destinationtranslatedport=17426 OR destinationtranslatedaddress="45.120.178.161" AND destinationtranslatedport=11013 OR destinationtranslatedaddress="176.120.74.3" AND destinationtranslatedport=17268 OR destinationtranslatedaddress="92.243.64.184" AND destinationtranslatedport=17146 OR destinationtranslatedaddress="92.243.64.36" AND destinationtranslatedport=17146)
index=activity AND rg_functionality="Endpoint Management Systems" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND translatedport=16697 OR destinationtranslatedaddress="185.126.239.207" AND translatedport=26630 OR destinationtranslatedaddress="213.183.57.174" AND translatedport=12517 OR destinationtranslatedaddress="213.183.57.72" AND translatedport=12517 OR destinationtranslatedaddress="213.183.56.201" AND translatedport=12517 OR destinationtranslatedaddress="95.164.45.27" AND translatedport=17426 OR destinationtranslatedaddress="45.120.178.161" AND translatedport=11013 OR destinationtranslatedaddress="176.120.74.3" AND translatedport=17268 OR destinationtranslatedaddress="92.243.64.184" AND translatedport=17146 OR destinationtranslatedaddress="92.243.64.36" AND translatedport=17146)
index=activity AND rg_functionality="Endpoint Management Systems" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="89.31.120.126" AND destinationport=11578 OR destinationaddress="91.132.93.33" AND destinationport=11578 OR destinationaddress="91.132.95.28" AND destinationport=8773 OR destinationaddress="91.132.95.204" AND destinationport=8773 OR destinationaddress="91.132.95.135" AND destinationport=8773 OR destinationaddress="194.233.174.22" AND destinationport=45358)
index=activity AND rg_functionality="Endpoint Management Systems" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="89.31.120.126" AND sourceport=11578 OR sourceaddress="91.132.93.33" AND sourceport=11578 OR sourceaddress="91.132.95.28" AND sourceport=8773 OR sourceaddress="91.132.95.204" AND sourceport=8773 OR sourceaddress="91.132.95.135" AND sourceport=8773 OR sourceaddress="194.233.174.22" AND sourceport=45358)
index=activity AND rg_functionality="Endpoint Management Systems" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="89.31.120.126" AND sourceport=11578 OR translatedipaddress="91.132.93.33" AND sourceport=11578 OR translatedipaddress="91.132.95.28" AND sourceport=8773 OR translatedipaddress="91.132.95.204" AND sourceport=8773 OR translatedipaddress="91.132.95.135" AND sourceport=8773 OR translatedipaddress="194.233.174.22" AND sourceport=45358)
index=activity AND rg_functionality="Endpoint Management Systems" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND destinationport=11578 OR destinationtranslatedaddress="91.132.93.33" AND destinationport=11578 OR destinationtranslatedaddress="91.132.95.28" AND destinationport=8773 OR destinationtranslatedaddress="91.132.95.204" AND destinationport=8773 OR destinationtranslatedaddress="91.132.95.135" AND destinationport=8773 OR destinationtranslatedaddress="194.233.174.22" AND destinationport=45358)
index=activity AND rg_functionality="Endpoint Management Systems" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND destinationtranslatedport=11578 OR destinationtranslatedaddress="91.132.93.33" AND destinationtranslatedport=11578 OR destinationtranslatedaddress="91.132.95.28" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="91.132.95.204" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="91.132.95.135" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="194.233.174.22" AND destinationtranslatedport=45358)
index=activity AND rg_functionality="Endpoint Management Systems" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND translatedport=11578 OR destinationtranslatedaddress="91.132.93.33" AND translatedport=11578 OR destinationtranslatedaddress="91.132.95.28" AND translatedport=8773 OR destinationtranslatedaddress="91.132.95.204" AND translatedport=8773 OR destinationtranslatedaddress="91.132.95.135" AND translatedport=8773 OR destinationtranslatedaddress="194.233.174.22" AND translatedport=45358)
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="158.255.212.173" AND destinationport=10862 OR destinationaddress="151.236.25.126" AND destinationport=11331 OR destinationaddress="158.255.215.49" AND destinationport=23079 OR destinationaddress="185.26.239.98" AND destinationport=11076 OR destinationaddress="151.236.25.10" AND destinationport=7205 OR destinationaddress="37.235.53.217" AND destinationport=1358 OR destinationaddress="151.236.23.232" AND destinationport=763 OR destinationaddress="37.235.56.204" AND destinationport=24239 OR destinationaddress="162.252.175.122" AND destinationport=4126 OR destinationaddress="162.252.175.136" AND destinationport=11077)
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="158.255.212.173" AND sourceport=10862 OR sourceaddress="151.236.25.126" AND sourceport=11331 OR sourceaddress="158.255.215.49" AND sourceport=23079 OR sourceaddress="185.26.239.98" AND sourceport=11076 OR sourceaddress="151.236.25.10" AND sourceport=7205 OR sourceaddress="37.235.53.217" AND sourceport=1358 OR sourceaddress="151.236.23.232" AND sourceport=763 OR sourceaddress="37.235.56.204" AND sourceport=24239 OR sourceaddress="162.252.175.122" AND sourceport=4126 OR sourceaddress="162.252.175.136" AND sourceport=11077)
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="158.255.212.173" AND sourceport=10862 OR translatedipaddress="151.236.25.126" AND sourceport=11331 OR translatedipaddress="158.255.215.49" AND sourceport=23079 OR translatedipaddress="185.26.239.98" AND sourceport=11076 OR translatedipaddress="151.236.25.10" AND sourceport=7205 OR translatedipaddress="37.235.53.217" AND sourceport=1358 OR translatedipaddress="151.236.23.232" AND sourceport=763 OR translatedipaddress="37.235.56.204" AND sourceport=24239 OR translatedipaddress="162.252.175.122" AND sourceport=4126 OR translatedipaddress="162.252.175.136" AND sourceport=11077)
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND destinationport=10862 OR destinationtranslatedaddress="151.236.25.126" AND destinationport=11331 OR destinationtranslatedaddress="158.255.215.49" AND destinationport=23079 OR destinationtranslatedaddress="185.26.239.98" AND destinationport=11076 OR destinationtranslatedaddress="151.236.25.10" AND destinationport=7205 OR destinationtranslatedaddress="37.235.53.217" AND destinationport=1358 OR destinationtranslatedaddress="151.236.23.232" AND destinationport=763 OR destinationtranslatedaddress="37.235.56.204" AND destinationport=24239 OR destinationtranslatedaddress="162.252.175.122" AND destinationport=4126 OR destinationtranslatedaddress="162.252.175.136" AND destinationport=11077)
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND destinationtranslatedport=10862 OR destinationtranslatedaddress="151.236.25.126" AND destinationtranslatedport=11331 OR destinationtranslatedaddress="158.255.215.49" AND destinationtranslatedport=23079 OR destinationtranslatedaddress="185.26.239.98" AND destinationtranslatedport=11076 OR destinationtranslatedaddress="151.236.25.10" AND destinationtranslatedport=7205 OR destinationtranslatedaddress="37.235.53.217" AND destinationtranslatedport=1358 OR destinationtranslatedaddress="151.236.23.232" AND destinationtranslatedport=763 OR destinationtranslatedaddress="37.235.56.204" AND destinationtranslatedport=24239 OR destinationtranslatedaddress="162.252.175.122" AND destinationtranslatedport=4126 OR destinationtranslatedaddress="162.252.175.136" AND destinationtranslatedport=11077)
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND translatedport=10862 OR destinationtranslatedaddress="151.236.25.126" AND translatedport=11331 OR destinationtranslatedaddress="158.255.215.49" AND translatedport=23079 OR destinationtranslatedaddress="185.26.239.98" AND translatedport=11076 OR destinationtranslatedaddress="151.236.25.10" AND translatedport=7205 OR destinationtranslatedaddress="37.235.53.217" AND translatedport=1358 OR destinationtranslatedaddress="151.236.23.232" AND translatedport=763 OR destinationtranslatedaddress="37.235.56.204" AND translatedport=24239 OR destinationtranslatedaddress="162.252.175.122" AND translatedport=4126 OR destinationtranslatedaddress="162.252.175.136" AND translatedport=11077)
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="162.252.175.163" AND destinationport=28693 OR destinationaddress="162.252.175.90" AND destinationport=845 OR destinationaddress="162.252.175.109" AND destinationport=28330 OR destinationaddress="151.236.20.39" AND destinationport=5524 OR destinationaddress="158.255.208.140" AND destinationport=86 OR destinationaddress="194.68.27.149" AND destinationport=13106 OR destinationaddress="194.68.27.176" AND destinationport=6460 OR destinationaddress="37.143.128.223" AND destinationport=16223 OR destinationaddress="31.40.212.130" AND destinationport=7225 OR destinationaddress="198.244.207.203" AND destinationport=2076)
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="162.252.175.163" AND sourceport=28693 OR sourceaddress="162.252.175.90" AND sourceport=845 OR sourceaddress="162.252.175.109" AND sourceport=28330 OR sourceaddress="151.236.20.39" AND sourceport=5524 OR sourceaddress="158.255.208.140" AND sourceport=86 OR sourceaddress="194.68.27.149" AND sourceport=13106 OR sourceaddress="194.68.27.176" AND sourceport=6460 OR sourceaddress="37.143.128.223" AND sourceport=16223 OR sourceaddress="31.40.212.130" AND sourceport=7225 OR sourceaddress="198.244.207.203" AND sourceport=2076)
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="162.252.175.163" AND sourceport=28693 OR translatedipaddress="162.252.175.90" AND sourceport=845 OR translatedipaddress="162.252.175.109" AND sourceport=28330 OR translatedipaddress="151.236.20.39" AND sourceport=5524 OR translatedipaddress="158.255.208.140" AND sourceport=86 OR translatedipaddress="194.68.27.149" AND sourceport=13106 OR translatedipaddress="194.68.27.176" AND sourceport=6460 OR translatedipaddress="37.143.128.223" AND sourceport=16223 OR translatedipaddress="31.40.212.130" AND sourceport=7225 OR translatedipaddress="198.244.207.203" AND sourceport=2076)
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND destinationport=28693 OR destinationtranslatedaddress="162.252.175.90" AND destinationport=845 OR destinationtranslatedaddress="162.252.175.109" AND destinationport=28330 OR destinationtranslatedaddress="151.236.20.39" AND destinationport=5524 OR destinationtranslatedaddress="158.255.208.140" AND destinationport=86 OR destinationtranslatedaddress="194.68.27.149" AND destinationport=13106 OR destinationtranslatedaddress="194.68.27.176" AND destinationport=6460 OR destinationtranslatedaddress="37.143.128.223" AND destinationport=16223 OR destinationtranslatedaddress="31.40.212.130" AND destinationport=7225 OR destinationtranslatedaddress="198.244.207.203" AND destinationport=2076)
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND destinationtranslatedport=28693 OR destinationtranslatedaddress="162.252.175.90" AND destinationtranslatedport=845 OR destinationtranslatedaddress="162.252.175.109" AND destinationtranslatedport=28330 OR destinationtranslatedaddress="151.236.20.39" AND destinationtranslatedport=5524 OR destinationtranslatedaddress="158.255.208.140" AND destinationtranslatedport=86 OR destinationtranslatedaddress="194.68.27.149" AND destinationtranslatedport=13106 OR destinationtranslatedaddress="194.68.27.176" AND destinationtranslatedport=6460 OR destinationtranslatedaddress="37.143.128.223" AND destinationtranslatedport=16223 OR destinationtranslatedaddress="31.40.212.130" AND destinationtranslatedport=7225 OR destinationtranslatedaddress="198.244.207.203" AND destinationtranslatedport=2076)
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND translatedport=28693 OR destinationtranslatedaddress="162.252.175.90" AND translatedport=845 OR destinationtranslatedaddress="162.252.175.109" AND translatedport=28330 OR destinationtranslatedaddress="151.236.20.39" AND translatedport=5524 OR destinationtranslatedaddress="158.255.208.140" AND translatedport=86 OR destinationtranslatedaddress="194.68.27.149" AND translatedport=13106 OR destinationtranslatedaddress="194.68.27.176" AND translatedport=6460 OR destinationtranslatedaddress="37.143.128.223" AND translatedport=16223 OR destinationtranslatedaddress="31.40.212.130" AND translatedport=7225 OR destinationtranslatedaddress="198.244.207.203" AND translatedport=2076)
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="208.115.230.243" AND destinationport=16697 OR destinationaddress="185.126.239.207" AND destinationport=26630 OR destinationaddress="213.183.57.174" AND destinationport=12517 OR destinationaddress="213.183.57.72" AND destinationport=12517 OR destinationaddress="213.183.56.201" AND destinationport=12517 OR destinationaddress="95.164.45.27" AND destinationport=17426 OR destinationaddress="45.120.178.161" AND destinationport=11013 OR destinationaddress="176.120.74.3" AND destinationport=17268 OR destinationaddress="92.243.64.184" AND destinationport=17146 OR destinationaddress="92.243.64.36" AND destinationport=17146)
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="208.115.230.243" AND sourceport=16697 OR sourceaddress="185.126.239.207" AND sourceport=26630 OR sourceaddress="213.183.57.174" AND sourceport=12517 OR sourceaddress="213.183.57.72" AND sourceport=12517 OR sourceaddress="213.183.56.201" AND sourceport=12517 OR sourceaddress="95.164.45.27" AND sourceport=17426 OR sourceaddress="45.120.178.161" AND sourceport=11013 OR sourceaddress="176.120.74.3" AND sourceport=17268 OR sourceaddress="92.243.64.184" AND sourceport=17146 OR sourceaddress="92.243.64.36" AND sourceport=17146)
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="208.115.230.243" AND sourceport=16697 OR translatedipaddress="185.126.239.207" AND sourceport=26630 OR translatedipaddress="213.183.57.174" AND sourceport=12517 OR translatedipaddress="213.183.57.72" AND sourceport=12517 OR translatedipaddress="213.183.56.201" AND sourceport=12517 OR translatedipaddress="95.164.45.27" AND sourceport=17426 OR translatedipaddress="45.120.178.161" AND sourceport=11013 OR translatedipaddress="176.120.74.3" AND sourceport=17268 OR translatedipaddress="92.243.64.184" AND sourceport=17146 OR translatedipaddress="92.243.64.36" AND sourceport=17146)
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND destinationport=16697 OR destinationtranslatedaddress="185.126.239.207" AND destinationport=26630 OR destinationtranslatedaddress="213.183.57.174" AND destinationport=12517 OR destinationtranslatedaddress="213.183.57.72" AND destinationport=12517 OR destinationtranslatedaddress="213.183.56.201" AND destinationport=12517 OR destinationtranslatedaddress="95.164.45.27" AND destinationport=17426 OR destinationtranslatedaddress="45.120.178.161" AND destinationport=11013 OR destinationtranslatedaddress="176.120.74.3" AND destinationport=17268 OR destinationtranslatedaddress="92.243.64.184" AND destinationport=17146 OR destinationtranslatedaddress="92.243.64.36" AND destinationport=17146)
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND destinationtranslatedport=16697 OR destinationtranslatedaddress="185.126.239.207" AND destinationtranslatedport=26630 OR destinationtranslatedaddress="213.183.57.174" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="213.183.57.72" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="213.183.56.201" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="95.164.45.27" AND destinationtranslatedport=17426 OR destinationtranslatedaddress="45.120.178.161" AND destinationtranslatedport=11013 OR destinationtranslatedaddress="176.120.74.3" AND destinationtranslatedport=17268 OR destinationtranslatedaddress="92.243.64.184" AND destinationtranslatedport=17146 OR destinationtranslatedaddress="92.243.64.36" AND destinationtranslatedport=17146)
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND translatedport=16697 OR destinationtranslatedaddress="185.126.239.207" AND translatedport=26630 OR destinationtranslatedaddress="213.183.57.174" AND translatedport=12517 OR destinationtranslatedaddress="213.183.57.72" AND translatedport=12517 OR destinationtranslatedaddress="213.183.56.201" AND translatedport=12517 OR destinationtranslatedaddress="95.164.45.27" AND translatedport=17426 OR destinationtranslatedaddress="45.120.178.161" AND translatedport=11013 OR destinationtranslatedaddress="176.120.74.3" AND translatedport=17268 OR destinationtranslatedaddress="92.243.64.184" AND translatedport=17146 OR destinationtranslatedaddress="92.243.64.36" AND translatedport=17146)
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="89.31.120.126" AND destinationport=11578 OR destinationaddress="91.132.93.33" AND destinationport=11578 OR destinationaddress="91.132.95.28" AND destinationport=8773 OR destinationaddress="91.132.95.204" AND destinationport=8773 OR destinationaddress="91.132.95.135" AND destinationport=8773 OR destinationaddress="194.233.174.22" AND destinationport=45358)
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="89.31.120.126" AND sourceport=11578 OR sourceaddress="91.132.93.33" AND sourceport=11578 OR sourceaddress="91.132.95.28" AND sourceport=8773 OR sourceaddress="91.132.95.204" AND sourceport=8773 OR sourceaddress="91.132.95.135" AND sourceport=8773 OR sourceaddress="194.233.174.22" AND sourceport=45358)
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="89.31.120.126" AND sourceport=11578 OR translatedipaddress="91.132.93.33" AND sourceport=11578 OR translatedipaddress="91.132.95.28" AND sourceport=8773 OR translatedipaddress="91.132.95.204" AND sourceport=8773 OR translatedipaddress="91.132.95.135" AND sourceport=8773 OR translatedipaddress="194.233.174.22" AND sourceport=45358)
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND destinationport=11578 OR destinationtranslatedaddress="91.132.93.33" AND destinationport=11578 OR destinationtranslatedaddress="91.132.95.28" AND destinationport=8773 OR destinationtranslatedaddress="91.132.95.204" AND destinationport=8773 OR destinationtranslatedaddress="91.132.95.135" AND destinationport=8773 OR destinationtranslatedaddress="194.233.174.22" AND destinationport=45358)
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND destinationtranslatedport=11578 OR destinationtranslatedaddress="91.132.93.33" AND destinationtranslatedport=11578 OR destinationtranslatedaddress="91.132.95.28" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="91.132.95.204" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="91.132.95.135" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="194.233.174.22" AND destinationtranslatedport=45358)
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND translatedport=11578 OR destinationtranslatedaddress="91.132.93.33" AND translatedport=11578 OR destinationtranslatedaddress="91.132.95.28" AND translatedport=8773 OR destinationtranslatedaddress="91.132.95.204" AND translatedport=8773 OR destinationtranslatedaddress="91.132.95.135" AND translatedport=8773 OR destinationtranslatedaddress="194.233.174.22" AND translatedport=45358)
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="158.255.212.173" AND destinationport=10862 OR destinationaddress="151.236.25.126" AND destinationport=11331 OR destinationaddress="158.255.215.49" AND destinationport=23079 OR destinationaddress="185.26.239.98" AND destinationport=11076 OR destinationaddress="151.236.25.10" AND destinationport=7205 OR destinationaddress="37.235.53.217" AND destinationport=1358 OR destinationaddress="151.236.23.232" AND destinationport=763 OR destinationaddress="37.235.56.204" AND destinationport=24239 OR destinationaddress="162.252.175.122" AND destinationport=4126 OR destinationaddress="162.252.175.136" AND destinationport=11077)
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="158.255.212.173" AND sourceport=10862 OR sourceaddress="151.236.25.126" AND sourceport=11331 OR sourceaddress="158.255.215.49" AND sourceport=23079 OR sourceaddress="185.26.239.98" AND sourceport=11076 OR sourceaddress="151.236.25.10" AND sourceport=7205 OR sourceaddress="37.235.53.217" AND sourceport=1358 OR sourceaddress="151.236.23.232" AND sourceport=763 OR sourceaddress="37.235.56.204" AND sourceport=24239 OR sourceaddress="162.252.175.122" AND sourceport=4126 OR sourceaddress="162.252.175.136" AND sourceport=11077)
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="158.255.212.173" AND sourceport=10862 OR translatedipaddress="151.236.25.126" AND sourceport=11331 OR translatedipaddress="158.255.215.49" AND sourceport=23079 OR translatedipaddress="185.26.239.98" AND sourceport=11076 OR translatedipaddress="151.236.25.10" AND sourceport=7205 OR translatedipaddress="37.235.53.217" AND sourceport=1358 OR translatedipaddress="151.236.23.232" AND sourceport=763 OR translatedipaddress="37.235.56.204" AND sourceport=24239 OR translatedipaddress="162.252.175.122" AND sourceport=4126 OR translatedipaddress="162.252.175.136" AND sourceport=11077)
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND destinationport=10862 OR destinationtranslatedaddress="151.236.25.126" AND destinationport=11331 OR destinationtranslatedaddress="158.255.215.49" AND destinationport=23079 OR destinationtranslatedaddress="185.26.239.98" AND destinationport=11076 OR destinationtranslatedaddress="151.236.25.10" AND destinationport=7205 OR destinationtranslatedaddress="37.235.53.217" AND destinationport=1358 OR destinationtranslatedaddress="151.236.23.232" AND destinationport=763 OR destinationtranslatedaddress="37.235.56.204" AND destinationport=24239 OR destinationtranslatedaddress="162.252.175.122" AND destinationport=4126 OR destinationtranslatedaddress="162.252.175.136" AND destinationport=11077)
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND destinationtranslatedport=10862 OR destinationtranslatedaddress="151.236.25.126" AND destinationtranslatedport=11331 OR destinationtranslatedaddress="158.255.215.49" AND destinationtranslatedport=23079 OR destinationtranslatedaddress="185.26.239.98" AND destinationtranslatedport=11076 OR destinationtranslatedaddress="151.236.25.10" AND destinationtranslatedport=7205 OR destinationtranslatedaddress="37.235.53.217" AND destinationtranslatedport=1358 OR destinationtranslatedaddress="151.236.23.232" AND destinationtranslatedport=763 OR destinationtranslatedaddress="37.235.56.204" AND destinationtranslatedport=24239 OR destinationtranslatedaddress="162.252.175.122" AND destinationtranslatedport=4126 OR destinationtranslatedaddress="162.252.175.136" AND destinationtranslatedport=11077)
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND translatedport=10862 OR destinationtranslatedaddress="151.236.25.126" AND translatedport=11331 OR destinationtranslatedaddress="158.255.215.49" AND translatedport=23079 OR destinationtranslatedaddress="185.26.239.98" AND translatedport=11076 OR destinationtranslatedaddress="151.236.25.10" AND translatedport=7205 OR destinationtranslatedaddress="37.235.53.217" AND translatedport=1358 OR destinationtranslatedaddress="151.236.23.232" AND translatedport=763 OR destinationtranslatedaddress="37.235.56.204" AND translatedport=24239 OR destinationtranslatedaddress="162.252.175.122" AND translatedport=4126 OR destinationtranslatedaddress="162.252.175.136" AND translatedport=11077)
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="162.252.175.163" AND destinationport=28693 OR destinationaddress="162.252.175.90" AND destinationport=845 OR destinationaddress="162.252.175.109" AND destinationport=28330 OR destinationaddress="151.236.20.39" AND destinationport=5524 OR destinationaddress="158.255.208.140" AND destinationport=86 OR destinationaddress="194.68.27.149" AND destinationport=13106 OR destinationaddress="194.68.27.176" AND destinationport=6460 OR destinationaddress="37.143.128.223" AND destinationport=16223 OR destinationaddress="31.40.212.130" AND destinationport=7225 OR destinationaddress="198.244.207.203" AND destinationport=2076)
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="162.252.175.163" AND sourceport=28693 OR sourceaddress="162.252.175.90" AND sourceport=845 OR sourceaddress="162.252.175.109" AND sourceport=28330 OR sourceaddress="151.236.20.39" AND sourceport=5524 OR sourceaddress="158.255.208.140" AND sourceport=86 OR sourceaddress="194.68.27.149" AND sourceport=13106 OR sourceaddress="194.68.27.176" AND sourceport=6460 OR sourceaddress="37.143.128.223" AND sourceport=16223 OR sourceaddress="31.40.212.130" AND sourceport=7225 OR sourceaddress="198.244.207.203" AND sourceport=2076)
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="162.252.175.163" AND sourceport=28693 OR translatedipaddress="162.252.175.90" AND sourceport=845 OR translatedipaddress="162.252.175.109" AND sourceport=28330 OR translatedipaddress="151.236.20.39" AND sourceport=5524 OR translatedipaddress="158.255.208.140" AND sourceport=86 OR translatedipaddress="194.68.27.149" AND sourceport=13106 OR translatedipaddress="194.68.27.176" AND sourceport=6460 OR translatedipaddress="37.143.128.223" AND sourceport=16223 OR translatedipaddress="31.40.212.130" AND sourceport=7225 OR translatedipaddress="198.244.207.203" AND sourceport=2076)
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND destinationport=28693 OR destinationtranslatedaddress="162.252.175.90" AND destinationport=845 OR destinationtranslatedaddress="162.252.175.109" AND destinationport=28330 OR destinationtranslatedaddress="151.236.20.39" AND destinationport=5524 OR destinationtranslatedaddress="158.255.208.140" AND destinationport=86 OR destinationtranslatedaddress="194.68.27.149" AND destinationport=13106 OR destinationtranslatedaddress="194.68.27.176" AND destinationport=6460 OR destinationtranslatedaddress="37.143.128.223" AND destinationport=16223 OR destinationtranslatedaddress="31.40.212.130" AND destinationport=7225 OR destinationtranslatedaddress="198.244.207.203" AND destinationport=2076)
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND destinationtranslatedport=28693 OR destinationtranslatedaddress="162.252.175.90" AND destinationtranslatedport=845 OR destinationtranslatedaddress="162.252.175.109" AND destinationtranslatedport=28330 OR destinationtranslatedaddress="151.236.20.39" AND destinationtranslatedport=5524 OR destinationtranslatedaddress="158.255.208.140" AND destinationtranslatedport=86 OR destinationtranslatedaddress="194.68.27.149" AND destinationtranslatedport=13106 OR destinationtranslatedaddress="194.68.27.176" AND destinationtranslatedport=6460 OR destinationtranslatedaddress="37.143.128.223" AND destinationtranslatedport=16223 OR destinationtranslatedaddress="31.40.212.130" AND destinationtranslatedport=7225 OR destinationtranslatedaddress="198.244.207.203" AND destinationtranslatedport=2076)
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND translatedport=28693 OR destinationtranslatedaddress="162.252.175.90" AND translatedport=845 OR destinationtranslatedaddress="162.252.175.109" AND translatedport=28330 OR destinationtranslatedaddress="151.236.20.39" AND translatedport=5524 OR destinationtranslatedaddress="158.255.208.140" AND translatedport=86 OR destinationtranslatedaddress="194.68.27.149" AND translatedport=13106 OR destinationtranslatedaddress="194.68.27.176" AND translatedport=6460 OR destinationtranslatedaddress="37.143.128.223" AND translatedport=16223 OR destinationtranslatedaddress="31.40.212.130" AND translatedport=7225 OR destinationtranslatedaddress="198.244.207.203" AND translatedport=2076)
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="208.115.230.243" AND destinationport=16697 OR destinationaddress="185.126.239.207" AND destinationport=26630 OR destinationaddress="213.183.57.174" AND destinationport=12517 OR destinationaddress="213.183.57.72" AND destinationport=12517 OR destinationaddress="213.183.56.201" AND destinationport=12517 OR destinationaddress="95.164.45.27" AND destinationport=17426 OR destinationaddress="45.120.178.161" AND destinationport=11013 OR destinationaddress="176.120.74.3" AND destinationport=17268 OR destinationaddress="92.243.64.184" AND destinationport=17146 OR destinationaddress="92.243.64.36" AND destinationport=17146)
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="208.115.230.243" AND sourceport=16697 OR sourceaddress="185.126.239.207" AND sourceport=26630 OR sourceaddress="213.183.57.174" AND sourceport=12517 OR sourceaddress="213.183.57.72" AND sourceport=12517 OR sourceaddress="213.183.56.201" AND sourceport=12517 OR sourceaddress="95.164.45.27" AND sourceport=17426 OR sourceaddress="45.120.178.161" AND sourceport=11013 OR sourceaddress="176.120.74.3" AND sourceport=17268 OR sourceaddress="92.243.64.184" AND sourceport=17146 OR sourceaddress="92.243.64.36" AND sourceport=17146)
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="208.115.230.243" AND sourceport=16697 OR translatedipaddress="185.126.239.207" AND sourceport=26630 OR translatedipaddress="213.183.57.174" AND sourceport=12517 OR translatedipaddress="213.183.57.72" AND sourceport=12517 OR translatedipaddress="213.183.56.201" AND sourceport=12517 OR translatedipaddress="95.164.45.27" AND sourceport=17426 OR translatedipaddress="45.120.178.161" AND sourceport=11013 OR translatedipaddress="176.120.74.3" AND sourceport=17268 OR translatedipaddress="92.243.64.184" AND sourceport=17146 OR translatedipaddress="92.243.64.36" AND sourceport=17146)
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND destinationport=16697 OR destinationtranslatedaddress="185.126.239.207" AND destinationport=26630 OR destinationtranslatedaddress="213.183.57.174" AND destinationport=12517 OR destinationtranslatedaddress="213.183.57.72" AND destinationport=12517 OR destinationtranslatedaddress="213.183.56.201" AND destinationport=12517 OR destinationtranslatedaddress="95.164.45.27" AND destinationport=17426 OR destinationtranslatedaddress="45.120.178.161" AND destinationport=11013 OR destinationtranslatedaddress="176.120.74.3" AND destinationport=17268 OR destinationtranslatedaddress="92.243.64.184" AND destinationport=17146 OR destinationtranslatedaddress="92.243.64.36" AND destinationport=17146)
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND destinationtranslatedport=16697 OR destinationtranslatedaddress="185.126.239.207" AND destinationtranslatedport=26630 OR destinationtranslatedaddress="213.183.57.174" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="213.183.57.72" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="213.183.56.201" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="95.164.45.27" AND destinationtranslatedport=17426 OR destinationtranslatedaddress="45.120.178.161" AND destinationtranslatedport=11013 OR destinationtranslatedaddress="176.120.74.3" AND destinationtranslatedport=17268 OR destinationtranslatedaddress="92.243.64.184" AND destinationtranslatedport=17146 OR destinationtranslatedaddress="92.243.64.36" AND destinationtranslatedport=17146)
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND translatedport=16697 OR destinationtranslatedaddress="185.126.239.207" AND translatedport=26630 OR destinationtranslatedaddress="213.183.57.174" AND translatedport=12517 OR destinationtranslatedaddress="213.183.57.72" AND translatedport=12517 OR destinationtranslatedaddress="213.183.56.201" AND translatedport=12517 OR destinationtranslatedaddress="95.164.45.27" AND translatedport=17426 OR destinationtranslatedaddress="45.120.178.161" AND translatedport=11013 OR destinationtranslatedaddress="176.120.74.3" AND translatedport=17268 OR destinationtranslatedaddress="92.243.64.184" AND translatedport=17146 OR destinationtranslatedaddress="92.243.64.36" AND translatedport=17146)
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="89.31.120.126" AND destinationport=11578 OR destinationaddress="91.132.93.33" AND destinationport=11578 OR destinationaddress="91.132.95.28" AND destinationport=8773 OR destinationaddress="91.132.95.204" AND destinationport=8773 OR destinationaddress="91.132.95.135" AND destinationport=8773 OR destinationaddress="194.233.174.22" AND destinationport=45358)
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="89.31.120.126" AND sourceport=11578 OR sourceaddress="91.132.93.33" AND sourceport=11578 OR sourceaddress="91.132.95.28" AND sourceport=8773 OR sourceaddress="91.132.95.204" AND sourceport=8773 OR sourceaddress="91.132.95.135" AND sourceport=8773 OR sourceaddress="194.233.174.22" AND sourceport=45358)
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="89.31.120.126" AND sourceport=11578 OR translatedipaddress="91.132.93.33" AND sourceport=11578 OR translatedipaddress="91.132.95.28" AND sourceport=8773 OR translatedipaddress="91.132.95.204" AND sourceport=8773 OR translatedipaddress="91.132.95.135" AND sourceport=8773 OR translatedipaddress="194.233.174.22" AND sourceport=45358)
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND destinationport=11578 OR destinationtranslatedaddress="91.132.93.33" AND destinationport=11578 OR destinationtranslatedaddress="91.132.95.28" AND destinationport=8773 OR destinationtranslatedaddress="91.132.95.204" AND destinationport=8773 OR destinationtranslatedaddress="91.132.95.135" AND destinationport=8773 OR destinationtranslatedaddress="194.233.174.22" AND destinationport=45358)
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND destinationtranslatedport=11578 OR destinationtranslatedaddress="91.132.93.33" AND destinationtranslatedport=11578 OR destinationtranslatedaddress="91.132.95.28" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="91.132.95.204" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="91.132.95.135" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="194.233.174.22" AND destinationtranslatedport=45358)
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND translatedport=11578 OR destinationtranslatedaddress="91.132.93.33" AND translatedport=11578 OR destinationtranslatedaddress="91.132.95.28" AND translatedport=8773 OR destinationtranslatedaddress="91.132.95.204" AND translatedport=8773 OR destinationtranslatedaddress="91.132.95.135" AND translatedport=8773 OR destinationtranslatedaddress="194.233.174.22" AND translatedport=45358)
index=activity AND rg_functionality="Email / Email Security" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="158.255.212.173" AND destinationport=10862 OR destinationaddress="151.236.25.126" AND destinationport=11331 OR destinationaddress="158.255.215.49" AND destinationport=23079 OR destinationaddress="185.26.239.98" AND destinationport=11076 OR destinationaddress="151.236.25.10" AND destinationport=7205 OR destinationaddress="37.235.53.217" AND destinationport=1358 OR destinationaddress="151.236.23.232" AND destinationport=763 OR destinationaddress="37.235.56.204" AND destinationport=24239 OR destinationaddress="162.252.175.122" AND destinationport=4126 OR destinationaddress="162.252.175.136" AND destinationport=11077)
index=activity AND rg_functionality="Email / Email Security" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="158.255.212.173" AND sourceport=10862 OR sourceaddress="151.236.25.126" AND sourceport=11331 OR sourceaddress="158.255.215.49" AND sourceport=23079 OR sourceaddress="185.26.239.98" AND sourceport=11076 OR sourceaddress="151.236.25.10" AND sourceport=7205 OR sourceaddress="37.235.53.217" AND sourceport=1358 OR sourceaddress="151.236.23.232" AND sourceport=763 OR sourceaddress="37.235.56.204" AND sourceport=24239 OR sourceaddress="162.252.175.122" AND sourceport=4126 OR sourceaddress="162.252.175.136" AND sourceport=11077)
index=activity AND rg_functionality="Email / Email Security" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="158.255.212.173" AND sourceport=10862 OR translatedipaddress="151.236.25.126" AND sourceport=11331 OR translatedipaddress="158.255.215.49" AND sourceport=23079 OR translatedipaddress="185.26.239.98" AND sourceport=11076 OR translatedipaddress="151.236.25.10" AND sourceport=7205 OR translatedipaddress="37.235.53.217" AND sourceport=1358 OR translatedipaddress="151.236.23.232" AND sourceport=763 OR translatedipaddress="37.235.56.204" AND sourceport=24239 OR translatedipaddress="162.252.175.122" AND sourceport=4126 OR translatedipaddress="162.252.175.136" AND sourceport=11077)
index=activity AND rg_functionality="Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND destinationport=10862 OR destinationtranslatedaddress="151.236.25.126" AND destinationport=11331 OR destinationtranslatedaddress="158.255.215.49" AND destinationport=23079 OR destinationtranslatedaddress="185.26.239.98" AND destinationport=11076 OR destinationtranslatedaddress="151.236.25.10" AND destinationport=7205 OR destinationtranslatedaddress="37.235.53.217" AND destinationport=1358 OR destinationtranslatedaddress="151.236.23.232" AND destinationport=763 OR destinationtranslatedaddress="37.235.56.204" AND destinationport=24239 OR destinationtranslatedaddress="162.252.175.122" AND destinationport=4126 OR destinationtranslatedaddress="162.252.175.136" AND destinationport=11077)
index=activity AND rg_functionality="Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND destinationtranslatedport=10862 OR destinationtranslatedaddress="151.236.25.126" AND destinationtranslatedport=11331 OR destinationtranslatedaddress="158.255.215.49" AND destinationtranslatedport=23079 OR destinationtranslatedaddress="185.26.239.98" AND destinationtranslatedport=11076 OR destinationtranslatedaddress="151.236.25.10" AND destinationtranslatedport=7205 OR destinationtranslatedaddress="37.235.53.217" AND destinationtranslatedport=1358 OR destinationtranslatedaddress="151.236.23.232" AND destinationtranslatedport=763 OR destinationtranslatedaddress="37.235.56.204" AND destinationtranslatedport=24239 OR destinationtranslatedaddress="162.252.175.122" AND destinationtranslatedport=4126 OR destinationtranslatedaddress="162.252.175.136" AND destinationtranslatedport=11077)
index=activity AND rg_functionality="Email / Email Security" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND translatedport=10862 OR destinationtranslatedaddress="151.236.25.126" AND translatedport=11331 OR destinationtranslatedaddress="158.255.215.49" AND translatedport=23079 OR destinationtranslatedaddress="185.26.239.98" AND translatedport=11076 OR destinationtranslatedaddress="151.236.25.10" AND translatedport=7205 OR destinationtranslatedaddress="37.235.53.217" AND translatedport=1358 OR destinationtranslatedaddress="151.236.23.232" AND translatedport=763 OR destinationtranslatedaddress="37.235.56.204" AND translatedport=24239 OR destinationtranslatedaddress="162.252.175.122" AND translatedport=4126 OR destinationtranslatedaddress="162.252.175.136" AND translatedport=11077)
index=activity AND rg_functionality="Email / Email Security" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="162.252.175.163" AND destinationport=28693 OR destinationaddress="162.252.175.90" AND destinationport=845 OR destinationaddress="162.252.175.109" AND destinationport=28330 OR destinationaddress="151.236.20.39" AND destinationport=5524 OR destinationaddress="158.255.208.140" AND destinationport=86 OR destinationaddress="194.68.27.149" AND destinationport=13106 OR destinationaddress="194.68.27.176" AND destinationport=6460 OR destinationaddress="37.143.128.223" AND destinationport=16223 OR destinationaddress="31.40.212.130" AND destinationport=7225 OR destinationaddress="198.244.207.203" AND destinationport=2076)
index=activity AND rg_functionality="Email / Email Security" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="162.252.175.163" AND sourceport=28693 OR sourceaddress="162.252.175.90" AND sourceport=845 OR sourceaddress="162.252.175.109" AND sourceport=28330 OR sourceaddress="151.236.20.39" AND sourceport=5524 OR sourceaddress="158.255.208.140" AND sourceport=86 OR sourceaddress="194.68.27.149" AND sourceport=13106 OR sourceaddress="194.68.27.176" AND sourceport=6460 OR sourceaddress="37.143.128.223" AND sourceport=16223 OR sourceaddress="31.40.212.130" AND sourceport=7225 OR sourceaddress="198.244.207.203" AND sourceport=2076)
index=activity AND rg_functionality="Email / Email Security" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="162.252.175.163" AND sourceport=28693 OR translatedipaddress="162.252.175.90" AND sourceport=845 OR translatedipaddress="162.252.175.109" AND sourceport=28330 OR translatedipaddress="151.236.20.39" AND sourceport=5524 OR translatedipaddress="158.255.208.140" AND sourceport=86 OR translatedipaddress="194.68.27.149" AND sourceport=13106 OR translatedipaddress="194.68.27.176" AND sourceport=6460 OR translatedipaddress="37.143.128.223" AND sourceport=16223 OR translatedipaddress="31.40.212.130" AND sourceport=7225 OR translatedipaddress="198.244.207.203" AND sourceport=2076)
index=activity AND rg_functionality="Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND destinationport=28693 OR destinationtranslatedaddress="162.252.175.90" AND destinationport=845 OR destinationtranslatedaddress="162.252.175.109" AND destinationport=28330 OR destinationtranslatedaddress="151.236.20.39" AND destinationport=5524 OR destinationtranslatedaddress="158.255.208.140" AND destinationport=86 OR destinationtranslatedaddress="194.68.27.149" AND destinationport=13106 OR destinationtranslatedaddress="194.68.27.176" AND destinationport=6460 OR destinationtranslatedaddress="37.143.128.223" AND destinationport=16223 OR destinationtranslatedaddress="31.40.212.130" AND destinationport=7225 OR destinationtranslatedaddress="198.244.207.203" AND destinationport=2076)
index=activity AND rg_functionality="Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND destinationtranslatedport=28693 OR destinationtranslatedaddress="162.252.175.90" AND destinationtranslatedport=845 OR destinationtranslatedaddress="162.252.175.109" AND destinationtranslatedport=28330 OR destinationtranslatedaddress="151.236.20.39" AND destinationtranslatedport=5524 OR destinationtranslatedaddress="158.255.208.140" AND destinationtranslatedport=86 OR destinationtranslatedaddress="194.68.27.149" AND destinationtranslatedport=13106 OR destinationtranslatedaddress="194.68.27.176" AND destinationtranslatedport=6460 OR destinationtranslatedaddress="37.143.128.223" AND destinationtranslatedport=16223 OR destinationtranslatedaddress="31.40.212.130" AND destinationtranslatedport=7225 OR destinationtranslatedaddress="198.244.207.203" AND destinationtranslatedport=2076)
index=activity AND rg_functionality="Email / Email Security" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND translatedport=28693 OR destinationtranslatedaddress="162.252.175.90" AND translatedport=845 OR destinationtranslatedaddress="162.252.175.109" AND translatedport=28330 OR destinationtranslatedaddress="151.236.20.39" AND translatedport=5524 OR destinationtranslatedaddress="158.255.208.140" AND translatedport=86 OR destinationtranslatedaddress="194.68.27.149" AND translatedport=13106 OR destinationtranslatedaddress="194.68.27.176" AND translatedport=6460 OR destinationtranslatedaddress="37.143.128.223" AND translatedport=16223 OR destinationtranslatedaddress="31.40.212.130" AND translatedport=7225 OR destinationtranslatedaddress="198.244.207.203" AND translatedport=2076)
index=activity AND rg_functionality="Email / Email Security" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="208.115.230.243" AND destinationport=16697 OR destinationaddress="185.126.239.207" AND destinationport=26630 OR destinationaddress="213.183.57.174" AND destinationport=12517 OR destinationaddress="213.183.57.72" AND destinationport=12517 OR destinationaddress="213.183.56.201" AND destinationport=12517 OR destinationaddress="95.164.45.27" AND destinationport=17426 OR destinationaddress="45.120.178.161" AND destinationport=11013 OR destinationaddress="176.120.74.3" AND destinationport=17268 OR destinationaddress="92.243.64.184" AND destinationport=17146 OR destinationaddress="92.243.64.36" AND destinationport=17146)
index=activity AND rg_functionality="Email / Email Security" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="208.115.230.243" AND sourceport=16697 OR sourceaddress="185.126.239.207" AND sourceport=26630 OR sourceaddress="213.183.57.174" AND sourceport=12517 OR sourceaddress="213.183.57.72" AND sourceport=12517 OR sourceaddress="213.183.56.201" AND sourceport=12517 OR sourceaddress="95.164.45.27" AND sourceport=17426 OR sourceaddress="45.120.178.161" AND sourceport=11013 OR sourceaddress="176.120.74.3" AND sourceport=17268 OR sourceaddress="92.243.64.184" AND sourceport=17146 OR sourceaddress="92.243.64.36" AND sourceport=17146)
index=activity AND rg_functionality="Email / Email Security" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="208.115.230.243" AND sourceport=16697 OR translatedipaddress="185.126.239.207" AND sourceport=26630 OR translatedipaddress="213.183.57.174" AND sourceport=12517 OR translatedipaddress="213.183.57.72" AND sourceport=12517 OR translatedipaddress="213.183.56.201" AND sourceport=12517 OR translatedipaddress="95.164.45.27" AND sourceport=17426 OR translatedipaddress="45.120.178.161" AND sourceport=11013 OR translatedipaddress="176.120.74.3" AND sourceport=17268 OR translatedipaddress="92.243.64.184" AND sourceport=17146 OR translatedipaddress="92.243.64.36" AND sourceport=17146)
index=activity AND rg_functionality="Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND destinationport=16697 OR destinationtranslatedaddress="185.126.239.207" AND destinationport=26630 OR destinationtranslatedaddress="213.183.57.174" AND destinationport=12517 OR destinationtranslatedaddress="213.183.57.72" AND destinationport=12517 OR destinationtranslatedaddress="213.183.56.201" AND destinationport=12517 OR destinationtranslatedaddress="95.164.45.27" AND destinationport=17426 OR destinationtranslatedaddress="45.120.178.161" AND destinationport=11013 OR destinationtranslatedaddress="176.120.74.3" AND destinationport=17268 OR destinationtranslatedaddress="92.243.64.184" AND destinationport=17146 OR destinationtranslatedaddress="92.243.64.36" AND destinationport=17146)
index=activity AND rg_functionality="Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND destinationtranslatedport=16697 OR destinationtranslatedaddress="185.126.239.207" AND destinationtranslatedport=26630 OR destinationtranslatedaddress="213.183.57.174" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="213.183.57.72" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="213.183.56.201" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="95.164.45.27" AND destinationtranslatedport=17426 OR destinationtranslatedaddress="45.120.178.161" AND destinationtranslatedport=11013 OR destinationtranslatedaddress="176.120.74.3" AND destinationtranslatedport=17268 OR destinationtranslatedaddress="92.243.64.184" AND destinationtranslatedport=17146 OR destinationtranslatedaddress="92.243.64.36" AND destinationtranslatedport=17146)
index=activity AND rg_functionality="Email / Email Security" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND translatedport=16697 OR destinationtranslatedaddress="185.126.239.207" AND translatedport=26630 OR destinationtranslatedaddress="213.183.57.174" AND translatedport=12517 OR destinationtranslatedaddress="213.183.57.72" AND translatedport=12517 OR destinationtranslatedaddress="213.183.56.201" AND translatedport=12517 OR destinationtranslatedaddress="95.164.45.27" AND translatedport=17426 OR destinationtranslatedaddress="45.120.178.161" AND translatedport=11013 OR destinationtranslatedaddress="176.120.74.3" AND translatedport=17268 OR destinationtranslatedaddress="92.243.64.184" AND translatedport=17146 OR destinationtranslatedaddress="92.243.64.36" AND translatedport=17146)
index=activity AND rg_functionality="Email / Email Security" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="89.31.120.126" AND destinationport=11578 OR destinationaddress="91.132.93.33" AND destinationport=11578 OR destinationaddress="91.132.95.28" AND destinationport=8773 OR destinationaddress="91.132.95.204" AND destinationport=8773 OR destinationaddress="91.132.95.135" AND destinationport=8773 OR destinationaddress="194.233.174.22" AND destinationport=45358)
index=activity AND rg_functionality="Email / Email Security" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="89.31.120.126" AND sourceport=11578 OR sourceaddress="91.132.93.33" AND sourceport=11578 OR sourceaddress="91.132.95.28" AND sourceport=8773 OR sourceaddress="91.132.95.204" AND sourceport=8773 OR sourceaddress="91.132.95.135" AND sourceport=8773 OR sourceaddress="194.233.174.22" AND sourceport=45358)
index=activity AND rg_functionality="Email / Email Security" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="89.31.120.126" AND sourceport=11578 OR translatedipaddress="91.132.93.33" AND sourceport=11578 OR translatedipaddress="91.132.95.28" AND sourceport=8773 OR translatedipaddress="91.132.95.204" AND sourceport=8773 OR translatedipaddress="91.132.95.135" AND sourceport=8773 OR translatedipaddress="194.233.174.22" AND sourceport=45358)
index=activity AND rg_functionality="Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND destinationport=11578 OR destinationtranslatedaddress="91.132.93.33" AND destinationport=11578 OR destinationtranslatedaddress="91.132.95.28" AND destinationport=8773 OR destinationtranslatedaddress="91.132.95.204" AND destinationport=8773 OR destinationtranslatedaddress="91.132.95.135" AND destinationport=8773 OR destinationtranslatedaddress="194.233.174.22" AND destinationport=45358)
index=activity AND rg_functionality="Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND destinationtranslatedport=11578 OR destinationtranslatedaddress="91.132.93.33" AND destinationtranslatedport=11578 OR destinationtranslatedaddress="91.132.95.28" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="91.132.95.204" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="91.132.95.135" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="194.233.174.22" AND destinationtranslatedport=45358)
index=activity AND rg_functionality="Email / Email Security" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND translatedport=11578 OR destinationtranslatedaddress="91.132.93.33" AND translatedport=11578 OR destinationtranslatedaddress="91.132.95.28" AND translatedport=8773 OR destinationtranslatedaddress="91.132.95.204" AND translatedport=8773 OR destinationtranslatedaddress="91.132.95.135" AND translatedport=8773 OR destinationtranslatedaddress="194.233.174.22" AND translatedport=45358)
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="158.255.212.173" AND destinationport=10862 OR destinationaddress="151.236.25.126" AND destinationport=11331 OR destinationaddress="158.255.215.49" AND destinationport=23079 OR destinationaddress="185.26.239.98" AND destinationport=11076 OR destinationaddress="151.236.25.10" AND destinationport=7205 OR destinationaddress="37.235.53.217" AND destinationport=1358 OR destinationaddress="151.236.23.232" AND destinationport=763 OR destinationaddress="37.235.56.204" AND destinationport=24239 OR destinationaddress="162.252.175.122" AND destinationport=4126 OR destinationaddress="162.252.175.136" AND destinationport=11077)
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="158.255.212.173" AND sourceport=10862 OR sourceaddress="151.236.25.126" AND sourceport=11331 OR sourceaddress="158.255.215.49" AND sourceport=23079 OR sourceaddress="185.26.239.98" AND sourceport=11076 OR sourceaddress="151.236.25.10" AND sourceport=7205 OR sourceaddress="37.235.53.217" AND sourceport=1358 OR sourceaddress="151.236.23.232" AND sourceport=763 OR sourceaddress="37.235.56.204" AND sourceport=24239 OR sourceaddress="162.252.175.122" AND sourceport=4126 OR sourceaddress="162.252.175.136" AND sourceport=11077)
index=activity AND rg_functionality="Cloud Email / Email Security" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="158.255.212.173" AND sourceport=10862 OR translatedipaddress="151.236.25.126" AND sourceport=11331 OR translatedipaddress="158.255.215.49" AND sourceport=23079 OR translatedipaddress="185.26.239.98" AND sourceport=11076 OR translatedipaddress="151.236.25.10" AND sourceport=7205 OR translatedipaddress="37.235.53.217" AND sourceport=1358 OR translatedipaddress="151.236.23.232" AND sourceport=763 OR translatedipaddress="37.235.56.204" AND sourceport=24239 OR translatedipaddress="162.252.175.122" AND sourceport=4126 OR translatedipaddress="162.252.175.136" AND sourceport=11077)
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND destinationport=10862 OR destinationtranslatedaddress="151.236.25.126" AND destinationport=11331 OR destinationtranslatedaddress="158.255.215.49" AND destinationport=23079 OR destinationtranslatedaddress="185.26.239.98" AND destinationport=11076 OR destinationtranslatedaddress="151.236.25.10" AND destinationport=7205 OR destinationtranslatedaddress="37.235.53.217" AND destinationport=1358 OR destinationtranslatedaddress="151.236.23.232" AND destinationport=763 OR destinationtranslatedaddress="37.235.56.204" AND destinationport=24239 OR destinationtranslatedaddress="162.252.175.122" AND destinationport=4126 OR destinationtranslatedaddress="162.252.175.136" AND destinationport=11077)
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND destinationtranslatedport=10862 OR destinationtranslatedaddress="151.236.25.126" AND destinationtranslatedport=11331 OR destinationtranslatedaddress="158.255.215.49" AND destinationtranslatedport=23079 OR destinationtranslatedaddress="185.26.239.98" AND destinationtranslatedport=11076 OR destinationtranslatedaddress="151.236.25.10" AND destinationtranslatedport=7205 OR destinationtranslatedaddress="37.235.53.217" AND destinationtranslatedport=1358 OR destinationtranslatedaddress="151.236.23.232" AND destinationtranslatedport=763 OR destinationtranslatedaddress="37.235.56.204" AND destinationtranslatedport=24239 OR destinationtranslatedaddress="162.252.175.122" AND destinationtranslatedport=4126 OR destinationtranslatedaddress="162.252.175.136" AND destinationtranslatedport=11077)
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND translatedport=10862 OR destinationtranslatedaddress="151.236.25.126" AND translatedport=11331 OR destinationtranslatedaddress="158.255.215.49" AND translatedport=23079 OR destinationtranslatedaddress="185.26.239.98" AND translatedport=11076 OR destinationtranslatedaddress="151.236.25.10" AND translatedport=7205 OR destinationtranslatedaddress="37.235.53.217" AND translatedport=1358 OR destinationtranslatedaddress="151.236.23.232" AND translatedport=763 OR destinationtranslatedaddress="37.235.56.204" AND translatedport=24239 OR destinationtranslatedaddress="162.252.175.122" AND translatedport=4126 OR destinationtranslatedaddress="162.252.175.136" AND translatedport=11077)
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="162.252.175.163" AND destinationport=28693 OR destinationaddress="162.252.175.90" AND destinationport=845 OR destinationaddress="162.252.175.109" AND destinationport=28330 OR destinationaddress="151.236.20.39" AND destinationport=5524 OR destinationaddress="158.255.208.140" AND destinationport=86 OR destinationaddress="194.68.27.149" AND destinationport=13106 OR destinationaddress="194.68.27.176" AND destinationport=6460 OR destinationaddress="37.143.128.223" AND destinationport=16223 OR destinationaddress="31.40.212.130" AND destinationport=7225 OR destinationaddress="198.244.207.203" AND destinationport=2076)
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="162.252.175.163" AND sourceport=28693 OR sourceaddress="162.252.175.90" AND sourceport=845 OR sourceaddress="162.252.175.109" AND sourceport=28330 OR sourceaddress="151.236.20.39" AND sourceport=5524 OR sourceaddress="158.255.208.140" AND sourceport=86 OR sourceaddress="194.68.27.149" AND sourceport=13106 OR sourceaddress="194.68.27.176" AND sourceport=6460 OR sourceaddress="37.143.128.223" AND sourceport=16223 OR sourceaddress="31.40.212.130" AND sourceport=7225 OR sourceaddress="198.244.207.203" AND sourceport=2076)
index=activity AND rg_functionality="Cloud Email / Email Security" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="162.252.175.163" AND sourceport=28693 OR translatedipaddress="162.252.175.90" AND sourceport=845 OR translatedipaddress="162.252.175.109" AND sourceport=28330 OR translatedipaddress="151.236.20.39" AND sourceport=5524 OR translatedipaddress="158.255.208.140" AND sourceport=86 OR translatedipaddress="194.68.27.149" AND sourceport=13106 OR translatedipaddress="194.68.27.176" AND sourceport=6460 OR translatedipaddress="37.143.128.223" AND sourceport=16223 OR translatedipaddress="31.40.212.130" AND sourceport=7225 OR translatedipaddress="198.244.207.203" AND sourceport=2076)
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND destinationport=28693 OR destinationtranslatedaddress="162.252.175.90" AND destinationport=845 OR destinationtranslatedaddress="162.252.175.109" AND destinationport=28330 OR destinationtranslatedaddress="151.236.20.39" AND destinationport=5524 OR destinationtranslatedaddress="158.255.208.140" AND destinationport=86 OR destinationtranslatedaddress="194.68.27.149" AND destinationport=13106 OR destinationtranslatedaddress="194.68.27.176" AND destinationport=6460 OR destinationtranslatedaddress="37.143.128.223" AND destinationport=16223 OR destinationtranslatedaddress="31.40.212.130" AND destinationport=7225 OR destinationtranslatedaddress="198.244.207.203" AND destinationport=2076)
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND destinationtranslatedport=28693 OR destinationtranslatedaddress="162.252.175.90" AND destinationtranslatedport=845 OR destinationtranslatedaddress="162.252.175.109" AND destinationtranslatedport=28330 OR destinationtranslatedaddress="151.236.20.39" AND destinationtranslatedport=5524 OR destinationtranslatedaddress="158.255.208.140" AND destinationtranslatedport=86 OR destinationtranslatedaddress="194.68.27.149" AND destinationtranslatedport=13106 OR destinationtranslatedaddress="194.68.27.176" AND destinationtranslatedport=6460 OR destinationtranslatedaddress="37.143.128.223" AND destinationtranslatedport=16223 OR destinationtranslatedaddress="31.40.212.130" AND destinationtranslatedport=7225 OR destinationtranslatedaddress="198.244.207.203" AND destinationtranslatedport=2076)
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND translatedport=28693 OR destinationtranslatedaddress="162.252.175.90" AND translatedport=845 OR destinationtranslatedaddress="162.252.175.109" AND translatedport=28330 OR destinationtranslatedaddress="151.236.20.39" AND translatedport=5524 OR destinationtranslatedaddress="158.255.208.140" AND translatedport=86 OR destinationtranslatedaddress="194.68.27.149" AND translatedport=13106 OR destinationtranslatedaddress="194.68.27.176" AND translatedport=6460 OR destinationtranslatedaddress="37.143.128.223" AND translatedport=16223 OR destinationtranslatedaddress="31.40.212.130" AND translatedport=7225 OR destinationtranslatedaddress="198.244.207.203" AND translatedport=2076)
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="208.115.230.243" AND destinationport=16697 OR destinationaddress="185.126.239.207" AND destinationport=26630 OR destinationaddress="213.183.57.174" AND destinationport=12517 OR destinationaddress="213.183.57.72" AND destinationport=12517 OR destinationaddress="213.183.56.201" AND destinationport=12517 OR destinationaddress="95.164.45.27" AND destinationport=17426 OR destinationaddress="45.120.178.161" AND destinationport=11013 OR destinationaddress="176.120.74.3" AND destinationport=17268 OR destinationaddress="92.243.64.184" AND destinationport=17146 OR destinationaddress="92.243.64.36" AND destinationport=17146)
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="208.115.230.243" AND sourceport=16697 OR sourceaddress="185.126.239.207" AND sourceport=26630 OR sourceaddress="213.183.57.174" AND sourceport=12517 OR sourceaddress="213.183.57.72" AND sourceport=12517 OR sourceaddress="213.183.56.201" AND sourceport=12517 OR sourceaddress="95.164.45.27" AND sourceport=17426 OR sourceaddress="45.120.178.161" AND sourceport=11013 OR sourceaddress="176.120.74.3" AND sourceport=17268 OR sourceaddress="92.243.64.184" AND sourceport=17146 OR sourceaddress="92.243.64.36" AND sourceport=17146)
index=activity AND rg_functionality="Cloud Email / Email Security" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="208.115.230.243" AND sourceport=16697 OR translatedipaddress="185.126.239.207" AND sourceport=26630 OR translatedipaddress="213.183.57.174" AND sourceport=12517 OR translatedipaddress="213.183.57.72" AND sourceport=12517 OR translatedipaddress="213.183.56.201" AND sourceport=12517 OR translatedipaddress="95.164.45.27" AND sourceport=17426 OR translatedipaddress="45.120.178.161" AND sourceport=11013 OR translatedipaddress="176.120.74.3" AND sourceport=17268 OR translatedipaddress="92.243.64.184" AND sourceport=17146 OR translatedipaddress="92.243.64.36" AND sourceport=17146)
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND destinationport=16697 OR destinationtranslatedaddress="185.126.239.207" AND destinationport=26630 OR destinationtranslatedaddress="213.183.57.174" AND destinationport=12517 OR destinationtranslatedaddress="213.183.57.72" AND destinationport=12517 OR destinationtranslatedaddress="213.183.56.201" AND destinationport=12517 OR destinationtranslatedaddress="95.164.45.27" AND destinationport=17426 OR destinationtranslatedaddress="45.120.178.161" AND destinationport=11013 OR destinationtranslatedaddress="176.120.74.3" AND destinationport=17268 OR destinationtranslatedaddress="92.243.64.184" AND destinationport=17146 OR destinationtranslatedaddress="92.243.64.36" AND destinationport=17146)
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND destinationtranslatedport=16697 OR destinationtranslatedaddress="185.126.239.207" AND destinationtranslatedport=26630 OR destinationtranslatedaddress="213.183.57.174" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="213.183.57.72" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="213.183.56.201" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="95.164.45.27" AND destinationtranslatedport=17426 OR destinationtranslatedaddress="45.120.178.161" AND destinationtranslatedport=11013 OR destinationtranslatedaddress="176.120.74.3" AND destinationtranslatedport=17268 OR destinationtranslatedaddress="92.243.64.184" AND destinationtranslatedport=17146 OR destinationtranslatedaddress="92.243.64.36" AND destinationtranslatedport=17146)
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND translatedport=16697 OR destinationtranslatedaddress="185.126.239.207" AND translatedport=26630 OR destinationtranslatedaddress="213.183.57.174" AND translatedport=12517 OR destinationtranslatedaddress="213.183.57.72" AND translatedport=12517 OR destinationtranslatedaddress="213.183.56.201" AND translatedport=12517 OR destinationtranslatedaddress="95.164.45.27" AND translatedport=17426 OR destinationtranslatedaddress="45.120.178.161" AND translatedport=11013 OR destinationtranslatedaddress="176.120.74.3" AND translatedport=17268 OR destinationtranslatedaddress="92.243.64.184" AND translatedport=17146 OR destinationtranslatedaddress="92.243.64.36" AND translatedport=17146)
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="89.31.120.126" AND destinationport=11578 OR destinationaddress="91.132.93.33" AND destinationport=11578 OR destinationaddress="91.132.95.28" AND destinationport=8773 OR destinationaddress="91.132.95.204" AND destinationport=8773 OR destinationaddress="91.132.95.135" AND destinationport=8773 OR destinationaddress="194.233.174.22" AND destinationport=45358)
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="89.31.120.126" AND sourceport=11578 OR sourceaddress="91.132.93.33" AND sourceport=11578 OR sourceaddress="91.132.95.28" AND sourceport=8773 OR sourceaddress="91.132.95.204" AND sourceport=8773 OR sourceaddress="91.132.95.135" AND sourceport=8773 OR sourceaddress="194.233.174.22" AND sourceport=45358)
index=activity AND rg_functionality="Cloud Email / Email Security" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="89.31.120.126" AND sourceport=11578 OR translatedipaddress="91.132.93.33" AND sourceport=11578 OR translatedipaddress="91.132.95.28" AND sourceport=8773 OR translatedipaddress="91.132.95.204" AND sourceport=8773 OR translatedipaddress="91.132.95.135" AND sourceport=8773 OR translatedipaddress="194.233.174.22" AND sourceport=45358)
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND destinationport=11578 OR destinationtranslatedaddress="91.132.93.33" AND destinationport=11578 OR destinationtranslatedaddress="91.132.95.28" AND destinationport=8773 OR destinationtranslatedaddress="91.132.95.204" AND destinationport=8773 OR destinationtranslatedaddress="91.132.95.135" AND destinationport=8773 OR destinationtranslatedaddress="194.233.174.22" AND destinationport=45358)
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND destinationtranslatedport=11578 OR destinationtranslatedaddress="91.132.93.33" AND destinationtranslatedport=11578 OR destinationtranslatedaddress="91.132.95.28" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="91.132.95.204" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="91.132.95.135" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="194.233.174.22" AND destinationtranslatedport=45358)
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND translatedport=11578 OR destinationtranslatedaddress="91.132.93.33" AND translatedport=11578 OR destinationtranslatedaddress="91.132.95.28" AND translatedport=8773 OR destinationtranslatedaddress="91.132.95.204" AND translatedport=8773 OR destinationtranslatedaddress="91.132.95.135" AND translatedport=8773 OR destinationtranslatedaddress="194.233.174.22" AND translatedport=45358)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="158.255.212.173" AND destinationport=10862 OR destinationaddress="151.236.25.126" AND destinationport=11331 OR destinationaddress="158.255.215.49" AND destinationport=23079 OR destinationaddress="185.26.239.98" AND destinationport=11076 OR destinationaddress="151.236.25.10" AND destinationport=7205 OR destinationaddress="37.235.53.217" AND destinationport=1358 OR destinationaddress="151.236.23.232" AND destinationport=763 OR destinationaddress="37.235.56.204" AND destinationport=24239 OR destinationaddress="162.252.175.122" AND destinationport=4126 OR destinationaddress="162.252.175.136" AND destinationport=11077)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="158.255.212.173" AND sourceport=10862 OR sourceaddress="151.236.25.126" AND sourceport=11331 OR sourceaddress="158.255.215.49" AND sourceport=23079 OR sourceaddress="185.26.239.98" AND sourceport=11076 OR sourceaddress="151.236.25.10" AND sourceport=7205 OR sourceaddress="37.235.53.217" AND sourceport=1358 OR sourceaddress="151.236.23.232" AND sourceport=763 OR sourceaddress="37.235.56.204" AND sourceport=24239 OR sourceaddress="162.252.175.122" AND sourceport=4126 OR sourceaddress="162.252.175.136" AND sourceport=11077)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="158.255.212.173" AND sourceport=10862 OR translatedipaddress="151.236.25.126" AND sourceport=11331 OR translatedipaddress="158.255.215.49" AND sourceport=23079 OR translatedipaddress="185.26.239.98" AND sourceport=11076 OR translatedipaddress="151.236.25.10" AND sourceport=7205 OR translatedipaddress="37.235.53.217" AND sourceport=1358 OR translatedipaddress="151.236.23.232" AND sourceport=763 OR translatedipaddress="37.235.56.204" AND sourceport=24239 OR translatedipaddress="162.252.175.122" AND sourceport=4126 OR translatedipaddress="162.252.175.136" AND sourceport=11077)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND destinationport=10862 OR destinationtranslatedaddress="151.236.25.126" AND destinationport=11331 OR destinationtranslatedaddress="158.255.215.49" AND destinationport=23079 OR destinationtranslatedaddress="185.26.239.98" AND destinationport=11076 OR destinationtranslatedaddress="151.236.25.10" AND destinationport=7205 OR destinationtranslatedaddress="37.235.53.217" AND destinationport=1358 OR destinationtranslatedaddress="151.236.23.232" AND destinationport=763 OR destinationtranslatedaddress="37.235.56.204" AND destinationport=24239 OR destinationtranslatedaddress="162.252.175.122" AND destinationport=4126 OR destinationtranslatedaddress="162.252.175.136" AND destinationport=11077)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND destinationtranslatedport=10862 OR destinationtranslatedaddress="151.236.25.126" AND destinationtranslatedport=11331 OR destinationtranslatedaddress="158.255.215.49" AND destinationtranslatedport=23079 OR destinationtranslatedaddress="185.26.239.98" AND destinationtranslatedport=11076 OR destinationtranslatedaddress="151.236.25.10" AND destinationtranslatedport=7205 OR destinationtranslatedaddress="37.235.53.217" AND destinationtranslatedport=1358 OR destinationtranslatedaddress="151.236.23.232" AND destinationtranslatedport=763 OR destinationtranslatedaddress="37.235.56.204" AND destinationtranslatedport=24239 OR destinationtranslatedaddress="162.252.175.122" AND destinationtranslatedport=4126 OR destinationtranslatedaddress="162.252.175.136" AND destinationtranslatedport=11077)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND translatedport=10862 OR destinationtranslatedaddress="151.236.25.126" AND translatedport=11331 OR destinationtranslatedaddress="158.255.215.49" AND translatedport=23079 OR destinationtranslatedaddress="185.26.239.98" AND translatedport=11076 OR destinationtranslatedaddress="151.236.25.10" AND translatedport=7205 OR destinationtranslatedaddress="37.235.53.217" AND translatedport=1358 OR destinationtranslatedaddress="151.236.23.232" AND translatedport=763 OR destinationtranslatedaddress="37.235.56.204" AND translatedport=24239 OR destinationtranslatedaddress="162.252.175.122" AND translatedport=4126 OR destinationtranslatedaddress="162.252.175.136" AND translatedport=11077)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="162.252.175.163" AND destinationport=28693 OR destinationaddress="162.252.175.90" AND destinationport=845 OR destinationaddress="162.252.175.109" AND destinationport=28330 OR destinationaddress="151.236.20.39" AND destinationport=5524 OR destinationaddress="158.255.208.140" AND destinationport=86 OR destinationaddress="194.68.27.149" AND destinationport=13106 OR destinationaddress="194.68.27.176" AND destinationport=6460 OR destinationaddress="37.143.128.223" AND destinationport=16223 OR destinationaddress="31.40.212.130" AND destinationport=7225 OR destinationaddress="198.244.207.203" AND destinationport=2076)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="162.252.175.163" AND sourceport=28693 OR sourceaddress="162.252.175.90" AND sourceport=845 OR sourceaddress="162.252.175.109" AND sourceport=28330 OR sourceaddress="151.236.20.39" AND sourceport=5524 OR sourceaddress="158.255.208.140" AND sourceport=86 OR sourceaddress="194.68.27.149" AND sourceport=13106 OR sourceaddress="194.68.27.176" AND sourceport=6460 OR sourceaddress="37.143.128.223" AND sourceport=16223 OR sourceaddress="31.40.212.130" AND sourceport=7225 OR sourceaddress="198.244.207.203" AND sourceport=2076)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="162.252.175.163" AND sourceport=28693 OR translatedipaddress="162.252.175.90" AND sourceport=845 OR translatedipaddress="162.252.175.109" AND sourceport=28330 OR translatedipaddress="151.236.20.39" AND sourceport=5524 OR translatedipaddress="158.255.208.140" AND sourceport=86 OR translatedipaddress="194.68.27.149" AND sourceport=13106 OR translatedipaddress="194.68.27.176" AND sourceport=6460 OR translatedipaddress="37.143.128.223" AND sourceport=16223 OR translatedipaddress="31.40.212.130" AND sourceport=7225 OR translatedipaddress="198.244.207.203" AND sourceport=2076)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND destinationport=28693 OR destinationtranslatedaddress="162.252.175.90" AND destinationport=845 OR destinationtranslatedaddress="162.252.175.109" AND destinationport=28330 OR destinationtranslatedaddress="151.236.20.39" AND destinationport=5524 OR destinationtranslatedaddress="158.255.208.140" AND destinationport=86 OR destinationtranslatedaddress="194.68.27.149" AND destinationport=13106 OR destinationtranslatedaddress="194.68.27.176" AND destinationport=6460 OR destinationtranslatedaddress="37.143.128.223" AND destinationport=16223 OR destinationtranslatedaddress="31.40.212.130" AND destinationport=7225 OR destinationtranslatedaddress="198.244.207.203" AND destinationport=2076)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND destinationtranslatedport=28693 OR destinationtranslatedaddress="162.252.175.90" AND destinationtranslatedport=845 OR destinationtranslatedaddress="162.252.175.109" AND destinationtranslatedport=28330 OR destinationtranslatedaddress="151.236.20.39" AND destinationtranslatedport=5524 OR destinationtranslatedaddress="158.255.208.140" AND destinationtranslatedport=86 OR destinationtranslatedaddress="194.68.27.149" AND destinationtranslatedport=13106 OR destinationtranslatedaddress="194.68.27.176" AND destinationtranslatedport=6460 OR destinationtranslatedaddress="37.143.128.223" AND destinationtranslatedport=16223 OR destinationtranslatedaddress="31.40.212.130" AND destinationtranslatedport=7225 OR destinationtranslatedaddress="198.244.207.203" AND destinationtranslatedport=2076)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND translatedport=28693 OR destinationtranslatedaddress="162.252.175.90" AND translatedport=845 OR destinationtranslatedaddress="162.252.175.109" AND translatedport=28330 OR destinationtranslatedaddress="151.236.20.39" AND translatedport=5524 OR destinationtranslatedaddress="158.255.208.140" AND translatedport=86 OR destinationtranslatedaddress="194.68.27.149" AND translatedport=13106 OR destinationtranslatedaddress="194.68.27.176" AND translatedport=6460 OR destinationtranslatedaddress="37.143.128.223" AND translatedport=16223 OR destinationtranslatedaddress="31.40.212.130" AND translatedport=7225 OR destinationtranslatedaddress="198.244.207.203" AND translatedport=2076)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="208.115.230.243" AND destinationport=16697 OR destinationaddress="185.126.239.207" AND destinationport=26630 OR destinationaddress="213.183.57.174" AND destinationport=12517 OR destinationaddress="213.183.57.72" AND destinationport=12517 OR destinationaddress="213.183.56.201" AND destinationport=12517 OR destinationaddress="95.164.45.27" AND destinationport=17426 OR destinationaddress="45.120.178.161" AND destinationport=11013 OR destinationaddress="176.120.74.3" AND destinationport=17268 OR destinationaddress="92.243.64.184" AND destinationport=17146 OR destinationaddress="92.243.64.36" AND destinationport=17146)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="208.115.230.243" AND sourceport=16697 OR sourceaddress="185.126.239.207" AND sourceport=26630 OR sourceaddress="213.183.57.174" AND sourceport=12517 OR sourceaddress="213.183.57.72" AND sourceport=12517 OR sourceaddress="213.183.56.201" AND sourceport=12517 OR sourceaddress="95.164.45.27" AND sourceport=17426 OR sourceaddress="45.120.178.161" AND sourceport=11013 OR sourceaddress="176.120.74.3" AND sourceport=17268 OR sourceaddress="92.243.64.184" AND sourceport=17146 OR sourceaddress="92.243.64.36" AND sourceport=17146)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="208.115.230.243" AND sourceport=16697 OR translatedipaddress="185.126.239.207" AND sourceport=26630 OR translatedipaddress="213.183.57.174" AND sourceport=12517 OR translatedipaddress="213.183.57.72" AND sourceport=12517 OR translatedipaddress="213.183.56.201" AND sourceport=12517 OR translatedipaddress="95.164.45.27" AND sourceport=17426 OR translatedipaddress="45.120.178.161" AND sourceport=11013 OR translatedipaddress="176.120.74.3" AND sourceport=17268 OR translatedipaddress="92.243.64.184" AND sourceport=17146 OR translatedipaddress="92.243.64.36" AND sourceport=17146)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND destinationport=16697 OR destinationtranslatedaddress="185.126.239.207" AND destinationport=26630 OR destinationtranslatedaddress="213.183.57.174" AND destinationport=12517 OR destinationtranslatedaddress="213.183.57.72" AND destinationport=12517 OR destinationtranslatedaddress="213.183.56.201" AND destinationport=12517 OR destinationtranslatedaddress="95.164.45.27" AND destinationport=17426 OR destinationtranslatedaddress="45.120.178.161" AND destinationport=11013 OR destinationtranslatedaddress="176.120.74.3" AND destinationport=17268 OR destinationtranslatedaddress="92.243.64.184" AND destinationport=17146 OR destinationtranslatedaddress="92.243.64.36" AND destinationport=17146)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND destinationtranslatedport=16697 OR destinationtranslatedaddress="185.126.239.207" AND destinationtranslatedport=26630 OR destinationtranslatedaddress="213.183.57.174" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="213.183.57.72" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="213.183.56.201" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="95.164.45.27" AND destinationtranslatedport=17426 OR destinationtranslatedaddress="45.120.178.161" AND destinationtranslatedport=11013 OR destinationtranslatedaddress="176.120.74.3" AND destinationtranslatedport=17268 OR destinationtranslatedaddress="92.243.64.184" AND destinationtranslatedport=17146 OR destinationtranslatedaddress="92.243.64.36" AND destinationtranslatedport=17146)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND translatedport=16697 OR destinationtranslatedaddress="185.126.239.207" AND translatedport=26630 OR destinationtranslatedaddress="213.183.57.174" AND translatedport=12517 OR destinationtranslatedaddress="213.183.57.72" AND translatedport=12517 OR destinationtranslatedaddress="213.183.56.201" AND translatedport=12517 OR destinationtranslatedaddress="95.164.45.27" AND translatedport=17426 OR destinationtranslatedaddress="45.120.178.161" AND translatedport=11013 OR destinationtranslatedaddress="176.120.74.3" AND translatedport=17268 OR destinationtranslatedaddress="92.243.64.184" AND translatedport=17146 OR destinationtranslatedaddress="92.243.64.36" AND translatedport=17146)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="89.31.120.126" AND destinationport=11578 OR destinationaddress="91.132.93.33" AND destinationport=11578 OR destinationaddress="91.132.95.28" AND destinationport=8773 OR destinationaddress="91.132.95.204" AND destinationport=8773 OR destinationaddress="91.132.95.135" AND destinationport=8773 OR destinationaddress="194.233.174.22" AND destinationport=45358)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="89.31.120.126" AND sourceport=11578 OR sourceaddress="91.132.93.33" AND sourceport=11578 OR sourceaddress="91.132.95.28" AND sourceport=8773 OR sourceaddress="91.132.95.204" AND sourceport=8773 OR sourceaddress="91.132.95.135" AND sourceport=8773 OR sourceaddress="194.233.174.22" AND sourceport=45358)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="89.31.120.126" AND sourceport=11578 OR translatedipaddress="91.132.93.33" AND sourceport=11578 OR translatedipaddress="91.132.95.28" AND sourceport=8773 OR translatedipaddress="91.132.95.204" AND sourceport=8773 OR translatedipaddress="91.132.95.135" AND sourceport=8773 OR translatedipaddress="194.233.174.22" AND sourceport=45358)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND destinationport=11578 OR destinationtranslatedaddress="91.132.93.33" AND destinationport=11578 OR destinationtranslatedaddress="91.132.95.28" AND destinationport=8773 OR destinationtranslatedaddress="91.132.95.204" AND destinationport=8773 OR destinationtranslatedaddress="91.132.95.135" AND destinationport=8773 OR destinationtranslatedaddress="194.233.174.22" AND destinationport=45358)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND destinationtranslatedport=11578 OR destinationtranslatedaddress="91.132.93.33" AND destinationtranslatedport=11578 OR destinationtranslatedaddress="91.132.95.28" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="91.132.95.204" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="91.132.95.135" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="194.233.174.22" AND destinationtranslatedport=45358)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND translatedport=11578 OR destinationtranslatedaddress="91.132.93.33" AND translatedport=11578 OR destinationtranslatedaddress="91.132.95.28" AND translatedport=8773 OR destinationtranslatedaddress="91.132.95.204" AND translatedport=8773 OR destinationtranslatedaddress="91.132.95.135" AND translatedport=8773 OR destinationtranslatedaddress="194.233.174.22" AND translatedport=45358)
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="158.255.212.173" AND destinationport=10862 OR destinationaddress="151.236.25.126" AND destinationport=11331 OR destinationaddress="158.255.215.49" AND destinationport=23079 OR destinationaddress="185.26.239.98" AND destinationport=11076 OR destinationaddress="151.236.25.10" AND destinationport=7205 OR destinationaddress="37.235.53.217" AND destinationport=1358 OR destinationaddress="151.236.23.232" AND destinationport=763 OR destinationaddress="37.235.56.204" AND destinationport=24239 OR destinationaddress="162.252.175.122" AND destinationport=4126 OR destinationaddress="162.252.175.136" AND destinationport=11077)
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="158.255.212.173" AND sourceport=10862 OR sourceaddress="151.236.25.126" AND sourceport=11331 OR sourceaddress="158.255.215.49" AND sourceport=23079 OR sourceaddress="185.26.239.98" AND sourceport=11076 OR sourceaddress="151.236.25.10" AND sourceport=7205 OR sourceaddress="37.235.53.217" AND sourceport=1358 OR sourceaddress="151.236.23.232" AND sourceport=763 OR sourceaddress="37.235.56.204" AND sourceport=24239 OR sourceaddress="162.252.175.122" AND sourceport=4126 OR sourceaddress="162.252.175.136" AND sourceport=11077)
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="158.255.212.173" AND sourceport=10862 OR translatedipaddress="151.236.25.126" AND sourceport=11331 OR translatedipaddress="158.255.215.49" AND sourceport=23079 OR translatedipaddress="185.26.239.98" AND sourceport=11076 OR translatedipaddress="151.236.25.10" AND sourceport=7205 OR translatedipaddress="37.235.53.217" AND sourceport=1358 OR translatedipaddress="151.236.23.232" AND sourceport=763 OR translatedipaddress="37.235.56.204" AND sourceport=24239 OR translatedipaddress="162.252.175.122" AND sourceport=4126 OR translatedipaddress="162.252.175.136" AND sourceport=11077)
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND destinationport=10862 OR destinationtranslatedaddress="151.236.25.126" AND destinationport=11331 OR destinationtranslatedaddress="158.255.215.49" AND destinationport=23079 OR destinationtranslatedaddress="185.26.239.98" AND destinationport=11076 OR destinationtranslatedaddress="151.236.25.10" AND destinationport=7205 OR destinationtranslatedaddress="37.235.53.217" AND destinationport=1358 OR destinationtranslatedaddress="151.236.23.232" AND destinationport=763 OR destinationtranslatedaddress="37.235.56.204" AND destinationport=24239 OR destinationtranslatedaddress="162.252.175.122" AND destinationport=4126 OR destinationtranslatedaddress="162.252.175.136" AND destinationport=11077)
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND destinationtranslatedport=10862 OR destinationtranslatedaddress="151.236.25.126" AND destinationtranslatedport=11331 OR destinationtranslatedaddress="158.255.215.49" AND destinationtranslatedport=23079 OR destinationtranslatedaddress="185.26.239.98" AND destinationtranslatedport=11076 OR destinationtranslatedaddress="151.236.25.10" AND destinationtranslatedport=7205 OR destinationtranslatedaddress="37.235.53.217" AND destinationtranslatedport=1358 OR destinationtranslatedaddress="151.236.23.232" AND destinationtranslatedport=763 OR destinationtranslatedaddress="37.235.56.204" AND destinationtranslatedport=24239 OR destinationtranslatedaddress="162.252.175.122" AND destinationtranslatedport=4126 OR destinationtranslatedaddress="162.252.175.136" AND destinationtranslatedport=11077)
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND translatedport=10862 OR destinationtranslatedaddress="151.236.25.126" AND translatedport=11331 OR destinationtranslatedaddress="158.255.215.49" AND translatedport=23079 OR destinationtranslatedaddress="185.26.239.98" AND translatedport=11076 OR destinationtranslatedaddress="151.236.25.10" AND translatedport=7205 OR destinationtranslatedaddress="37.235.53.217" AND translatedport=1358 OR destinationtranslatedaddress="151.236.23.232" AND translatedport=763 OR destinationtranslatedaddress="37.235.56.204" AND translatedport=24239 OR destinationtranslatedaddress="162.252.175.122" AND translatedport=4126 OR destinationtranslatedaddress="162.252.175.136" AND translatedport=11077)
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="162.252.175.163" AND destinationport=28693 OR destinationaddress="162.252.175.90" AND destinationport=845 OR destinationaddress="162.252.175.109" AND destinationport=28330 OR destinationaddress="151.236.20.39" AND destinationport=5524 OR destinationaddress="158.255.208.140" AND destinationport=86 OR destinationaddress="194.68.27.149" AND destinationport=13106 OR destinationaddress="194.68.27.176" AND destinationport=6460 OR destinationaddress="37.143.128.223" AND destinationport=16223 OR destinationaddress="31.40.212.130" AND destinationport=7225 OR destinationaddress="198.244.207.203" AND destinationport=2076)
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="162.252.175.163" AND sourceport=28693 OR sourceaddress="162.252.175.90" AND sourceport=845 OR sourceaddress="162.252.175.109" AND sourceport=28330 OR sourceaddress="151.236.20.39" AND sourceport=5524 OR sourceaddress="158.255.208.140" AND sourceport=86 OR sourceaddress="194.68.27.149" AND sourceport=13106 OR sourceaddress="194.68.27.176" AND sourceport=6460 OR sourceaddress="37.143.128.223" AND sourceport=16223 OR sourceaddress="31.40.212.130" AND sourceport=7225 OR sourceaddress="198.244.207.203" AND sourceport=2076)
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="162.252.175.163" AND sourceport=28693 OR translatedipaddress="162.252.175.90" AND sourceport=845 OR translatedipaddress="162.252.175.109" AND sourceport=28330 OR translatedipaddress="151.236.20.39" AND sourceport=5524 OR translatedipaddress="158.255.208.140" AND sourceport=86 OR translatedipaddress="194.68.27.149" AND sourceport=13106 OR translatedipaddress="194.68.27.176" AND sourceport=6460 OR translatedipaddress="37.143.128.223" AND sourceport=16223 OR translatedipaddress="31.40.212.130" AND sourceport=7225 OR translatedipaddress="198.244.207.203" AND sourceport=2076)
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND destinationport=28693 OR destinationtranslatedaddress="162.252.175.90" AND destinationport=845 OR destinationtranslatedaddress="162.252.175.109" AND destinationport=28330 OR destinationtranslatedaddress="151.236.20.39" AND destinationport=5524 OR destinationtranslatedaddress="158.255.208.140" AND destinationport=86 OR destinationtranslatedaddress="194.68.27.149" AND destinationport=13106 OR destinationtranslatedaddress="194.68.27.176" AND destinationport=6460 OR destinationtranslatedaddress="37.143.128.223" AND destinationport=16223 OR destinationtranslatedaddress="31.40.212.130" AND destinationport=7225 OR destinationtranslatedaddress="198.244.207.203" AND destinationport=2076)
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND destinationtranslatedport=28693 OR destinationtranslatedaddress="162.252.175.90" AND destinationtranslatedport=845 OR destinationtranslatedaddress="162.252.175.109" AND destinationtranslatedport=28330 OR destinationtranslatedaddress="151.236.20.39" AND destinationtranslatedport=5524 OR destinationtranslatedaddress="158.255.208.140" AND destinationtranslatedport=86 OR destinationtranslatedaddress="194.68.27.149" AND destinationtranslatedport=13106 OR destinationtranslatedaddress="194.68.27.176" AND destinationtranslatedport=6460 OR destinationtranslatedaddress="37.143.128.223" AND destinationtranslatedport=16223 OR destinationtranslatedaddress="31.40.212.130" AND destinationtranslatedport=7225 OR destinationtranslatedaddress="198.244.207.203" AND destinationtranslatedport=2076)
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND translatedport=28693 OR destinationtranslatedaddress="162.252.175.90" AND translatedport=845 OR destinationtranslatedaddress="162.252.175.109" AND translatedport=28330 OR destinationtranslatedaddress="151.236.20.39" AND translatedport=5524 OR destinationtranslatedaddress="158.255.208.140" AND translatedport=86 OR destinationtranslatedaddress="194.68.27.149" AND translatedport=13106 OR destinationtranslatedaddress="194.68.27.176" AND translatedport=6460 OR destinationtranslatedaddress="37.143.128.223" AND translatedport=16223 OR destinationtranslatedaddress="31.40.212.130" AND translatedport=7225 OR destinationtranslatedaddress="198.244.207.203" AND translatedport=2076)
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="208.115.230.243" AND destinationport=16697 OR destinationaddress="185.126.239.207" AND destinationport=26630 OR destinationaddress="213.183.57.174" AND destinationport=12517 OR destinationaddress="213.183.57.72" AND destinationport=12517 OR destinationaddress="213.183.56.201" AND destinationport=12517 OR destinationaddress="95.164.45.27" AND destinationport=17426 OR destinationaddress="45.120.178.161" AND destinationport=11013 OR destinationaddress="176.120.74.3" AND destinationport=17268 OR destinationaddress="92.243.64.184" AND destinationport=17146 OR destinationaddress="92.243.64.36" AND destinationport=17146)
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="208.115.230.243" AND sourceport=16697 OR sourceaddress="185.126.239.207" AND sourceport=26630 OR sourceaddress="213.183.57.174" AND sourceport=12517 OR sourceaddress="213.183.57.72" AND sourceport=12517 OR sourceaddress="213.183.56.201" AND sourceport=12517 OR sourceaddress="95.164.45.27" AND sourceport=17426 OR sourceaddress="45.120.178.161" AND sourceport=11013 OR sourceaddress="176.120.74.3" AND sourceport=17268 OR sourceaddress="92.243.64.184" AND sourceport=17146 OR sourceaddress="92.243.64.36" AND sourceport=17146)
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="208.115.230.243" AND sourceport=16697 OR translatedipaddress="185.126.239.207" AND sourceport=26630 OR translatedipaddress="213.183.57.174" AND sourceport=12517 OR translatedipaddress="213.183.57.72" AND sourceport=12517 OR translatedipaddress="213.183.56.201" AND sourceport=12517 OR translatedipaddress="95.164.45.27" AND sourceport=17426 OR translatedipaddress="45.120.178.161" AND sourceport=11013 OR translatedipaddress="176.120.74.3" AND sourceport=17268 OR translatedipaddress="92.243.64.184" AND sourceport=17146 OR translatedipaddress="92.243.64.36" AND sourceport=17146)
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND destinationport=16697 OR destinationtranslatedaddress="185.126.239.207" AND destinationport=26630 OR destinationtranslatedaddress="213.183.57.174" AND destinationport=12517 OR destinationtranslatedaddress="213.183.57.72" AND destinationport=12517 OR destinationtranslatedaddress="213.183.56.201" AND destinationport=12517 OR destinationtranslatedaddress="95.164.45.27" AND destinationport=17426 OR destinationtranslatedaddress="45.120.178.161" AND destinationport=11013 OR destinationtranslatedaddress="176.120.74.3" AND destinationport=17268 OR destinationtranslatedaddress="92.243.64.184" AND destinationport=17146 OR destinationtranslatedaddress="92.243.64.36" AND destinationport=17146)
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND destinationtranslatedport=16697 OR destinationtranslatedaddress="185.126.239.207" AND destinationtranslatedport=26630 OR destinationtranslatedaddress="213.183.57.174" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="213.183.57.72" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="213.183.56.201" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="95.164.45.27" AND destinationtranslatedport=17426 OR destinationtranslatedaddress="45.120.178.161" AND destinationtranslatedport=11013 OR destinationtranslatedaddress="176.120.74.3" AND destinationtranslatedport=17268 OR destinationtranslatedaddress="92.243.64.184" AND destinationtranslatedport=17146 OR destinationtranslatedaddress="92.243.64.36" AND destinationtranslatedport=17146)
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND translatedport=16697 OR destinationtranslatedaddress="185.126.239.207" AND translatedport=26630 OR destinationtranslatedaddress="213.183.57.174" AND translatedport=12517 OR destinationtranslatedaddress="213.183.57.72" AND translatedport=12517 OR destinationtranslatedaddress="213.183.56.201" AND translatedport=12517 OR destinationtranslatedaddress="95.164.45.27" AND translatedport=17426 OR destinationtranslatedaddress="45.120.178.161" AND translatedport=11013 OR destinationtranslatedaddress="176.120.74.3" AND translatedport=17268 OR destinationtranslatedaddress="92.243.64.184" AND translatedport=17146 OR destinationtranslatedaddress="92.243.64.36" AND translatedport=17146)
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="89.31.120.126" AND destinationport=11578 OR destinationaddress="91.132.93.33" AND destinationport=11578 OR destinationaddress="91.132.95.28" AND destinationport=8773 OR destinationaddress="91.132.95.204" AND destinationport=8773 OR destinationaddress="91.132.95.135" AND destinationport=8773 OR destinationaddress="194.233.174.22" AND destinationport=45358)
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="89.31.120.126" AND sourceport=11578 OR sourceaddress="91.132.93.33" AND sourceport=11578 OR sourceaddress="91.132.95.28" AND sourceport=8773 OR sourceaddress="91.132.95.204" AND sourceport=8773 OR sourceaddress="91.132.95.135" AND sourceport=8773 OR sourceaddress="194.233.174.22" AND sourceport=45358)
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="89.31.120.126" AND sourceport=11578 OR translatedipaddress="91.132.93.33" AND sourceport=11578 OR translatedipaddress="91.132.95.28" AND sourceport=8773 OR translatedipaddress="91.132.95.204" AND sourceport=8773 OR translatedipaddress="91.132.95.135" AND sourceport=8773 OR translatedipaddress="194.233.174.22" AND sourceport=45358)
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND destinationport=11578 OR destinationtranslatedaddress="91.132.93.33" AND destinationport=11578 OR destinationtranslatedaddress="91.132.95.28" AND destinationport=8773 OR destinationtranslatedaddress="91.132.95.204" AND destinationport=8773 OR destinationtranslatedaddress="91.132.95.135" AND destinationport=8773 OR destinationtranslatedaddress="194.233.174.22" AND destinationport=45358)
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND destinationtranslatedport=11578 OR destinationtranslatedaddress="91.132.93.33" AND destinationtranslatedport=11578 OR destinationtranslatedaddress="91.132.95.28" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="91.132.95.204" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="91.132.95.135" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="194.233.174.22" AND destinationtranslatedport=45358)
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND translatedport=11578 OR destinationtranslatedaddress="91.132.93.33" AND translatedport=11578 OR destinationtranslatedaddress="91.132.95.28" AND translatedport=8773 OR destinationtranslatedaddress="91.132.95.204" AND translatedport=8773 OR destinationtranslatedaddress="91.132.95.135" AND translatedport=8773 OR destinationtranslatedaddress="194.233.174.22" AND translatedport=45358)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="158.255.212.173" AND destinationport=10862 OR destinationaddress="151.236.25.126" AND destinationport=11331 OR destinationaddress="158.255.215.49" AND destinationport=23079 OR destinationaddress="185.26.239.98" AND destinationport=11076 OR destinationaddress="151.236.25.10" AND destinationport=7205 OR destinationaddress="37.235.53.217" AND destinationport=1358 OR destinationaddress="151.236.23.232" AND destinationport=763 OR destinationaddress="37.235.56.204" AND destinationport=24239 OR destinationaddress="162.252.175.122" AND destinationport=4126 OR destinationaddress="162.252.175.136" AND destinationport=11077)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="158.255.212.173" AND sourceport=10862 OR sourceaddress="151.236.25.126" AND sourceport=11331 OR sourceaddress="158.255.215.49" AND sourceport=23079 OR sourceaddress="185.26.239.98" AND sourceport=11076 OR sourceaddress="151.236.25.10" AND sourceport=7205 OR sourceaddress="37.235.53.217" AND sourceport=1358 OR sourceaddress="151.236.23.232" AND sourceport=763 OR sourceaddress="37.235.56.204" AND sourceport=24239 OR sourceaddress="162.252.175.122" AND sourceport=4126 OR sourceaddress="162.252.175.136" AND sourceport=11077)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="158.255.212.173" AND sourceport=10862 OR translatedipaddress="151.236.25.126" AND sourceport=11331 OR translatedipaddress="158.255.215.49" AND sourceport=23079 OR translatedipaddress="185.26.239.98" AND sourceport=11076 OR translatedipaddress="151.236.25.10" AND sourceport=7205 OR translatedipaddress="37.235.53.217" AND sourceport=1358 OR translatedipaddress="151.236.23.232" AND sourceport=763 OR translatedipaddress="37.235.56.204" AND sourceport=24239 OR translatedipaddress="162.252.175.122" AND sourceport=4126 OR translatedipaddress="162.252.175.136" AND sourceport=11077)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND destinationport=10862 OR destinationtranslatedaddress="151.236.25.126" AND destinationport=11331 OR destinationtranslatedaddress="158.255.215.49" AND destinationport=23079 OR destinationtranslatedaddress="185.26.239.98" AND destinationport=11076 OR destinationtranslatedaddress="151.236.25.10" AND destinationport=7205 OR destinationtranslatedaddress="37.235.53.217" AND destinationport=1358 OR destinationtranslatedaddress="151.236.23.232" AND destinationport=763 OR destinationtranslatedaddress="37.235.56.204" AND destinationport=24239 OR destinationtranslatedaddress="162.252.175.122" AND destinationport=4126 OR destinationtranslatedaddress="162.252.175.136" AND destinationport=11077)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND destinationtranslatedport=10862 OR destinationtranslatedaddress="151.236.25.126" AND destinationtranslatedport=11331 OR destinationtranslatedaddress="158.255.215.49" AND destinationtranslatedport=23079 OR destinationtranslatedaddress="185.26.239.98" AND destinationtranslatedport=11076 OR destinationtranslatedaddress="151.236.25.10" AND destinationtranslatedport=7205 OR destinationtranslatedaddress="37.235.53.217" AND destinationtranslatedport=1358 OR destinationtranslatedaddress="151.236.23.232" AND destinationtranslatedport=763 OR destinationtranslatedaddress="37.235.56.204" AND destinationtranslatedport=24239 OR destinationtranslatedaddress="162.252.175.122" AND destinationtranslatedport=4126 OR destinationtranslatedaddress="162.252.175.136" AND destinationtranslatedport=11077)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND translatedport=10862 OR destinationtranslatedaddress="151.236.25.126" AND translatedport=11331 OR destinationtranslatedaddress="158.255.215.49" AND translatedport=23079 OR destinationtranslatedaddress="185.26.239.98" AND translatedport=11076 OR destinationtranslatedaddress="151.236.25.10" AND translatedport=7205 OR destinationtranslatedaddress="37.235.53.217" AND translatedport=1358 OR destinationtranslatedaddress="151.236.23.232" AND translatedport=763 OR destinationtranslatedaddress="37.235.56.204" AND translatedport=24239 OR destinationtranslatedaddress="162.252.175.122" AND translatedport=4126 OR destinationtranslatedaddress="162.252.175.136" AND translatedport=11077)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="162.252.175.163" AND destinationport=28693 OR destinationaddress="162.252.175.90" AND destinationport=845 OR destinationaddress="162.252.175.109" AND destinationport=28330 OR destinationaddress="151.236.20.39" AND destinationport=5524 OR destinationaddress="158.255.208.140" AND destinationport=86 OR destinationaddress="194.68.27.149" AND destinationport=13106 OR destinationaddress="194.68.27.176" AND destinationport=6460 OR destinationaddress="37.143.128.223" AND destinationport=16223 OR destinationaddress="31.40.212.130" AND destinationport=7225 OR destinationaddress="198.244.207.203" AND destinationport=2076)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="162.252.175.163" AND sourceport=28693 OR sourceaddress="162.252.175.90" AND sourceport=845 OR sourceaddress="162.252.175.109" AND sourceport=28330 OR sourceaddress="151.236.20.39" AND sourceport=5524 OR sourceaddress="158.255.208.140" AND sourceport=86 OR sourceaddress="194.68.27.149" AND sourceport=13106 OR sourceaddress="194.68.27.176" AND sourceport=6460 OR sourceaddress="37.143.128.223" AND sourceport=16223 OR sourceaddress="31.40.212.130" AND sourceport=7225 OR sourceaddress="198.244.207.203" AND sourceport=2076)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="162.252.175.163" AND sourceport=28693 OR translatedipaddress="162.252.175.90" AND sourceport=845 OR translatedipaddress="162.252.175.109" AND sourceport=28330 OR translatedipaddress="151.236.20.39" AND sourceport=5524 OR translatedipaddress="158.255.208.140" AND sourceport=86 OR translatedipaddress="194.68.27.149" AND sourceport=13106 OR translatedipaddress="194.68.27.176" AND sourceport=6460 OR translatedipaddress="37.143.128.223" AND sourceport=16223 OR translatedipaddress="31.40.212.130" AND sourceport=7225 OR translatedipaddress="198.244.207.203" AND sourceport=2076)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND destinationport=28693 OR destinationtranslatedaddress="162.252.175.90" AND destinationport=845 OR destinationtranslatedaddress="162.252.175.109" AND destinationport=28330 OR destinationtranslatedaddress="151.236.20.39" AND destinationport=5524 OR destinationtranslatedaddress="158.255.208.140" AND destinationport=86 OR destinationtranslatedaddress="194.68.27.149" AND destinationport=13106 OR destinationtranslatedaddress="194.68.27.176" AND destinationport=6460 OR destinationtranslatedaddress="37.143.128.223" AND destinationport=16223 OR destinationtranslatedaddress="31.40.212.130" AND destinationport=7225 OR destinationtranslatedaddress="198.244.207.203" AND destinationport=2076)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND destinationtranslatedport=28693 OR destinationtranslatedaddress="162.252.175.90" AND destinationtranslatedport=845 OR destinationtranslatedaddress="162.252.175.109" AND destinationtranslatedport=28330 OR destinationtranslatedaddress="151.236.20.39" AND destinationtranslatedport=5524 OR destinationtranslatedaddress="158.255.208.140" AND destinationtranslatedport=86 OR destinationtranslatedaddress="194.68.27.149" AND destinationtranslatedport=13106 OR destinationtranslatedaddress="194.68.27.176" AND destinationtranslatedport=6460 OR destinationtranslatedaddress="37.143.128.223" AND destinationtranslatedport=16223 OR destinationtranslatedaddress="31.40.212.130" AND destinationtranslatedport=7225 OR destinationtranslatedaddress="198.244.207.203" AND destinationtranslatedport=2076)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND translatedport=28693 OR destinationtranslatedaddress="162.252.175.90" AND translatedport=845 OR destinationtranslatedaddress="162.252.175.109" AND translatedport=28330 OR destinationtranslatedaddress="151.236.20.39" AND translatedport=5524 OR destinationtranslatedaddress="158.255.208.140" AND translatedport=86 OR destinationtranslatedaddress="194.68.27.149" AND translatedport=13106 OR destinationtranslatedaddress="194.68.27.176" AND translatedport=6460 OR destinationtranslatedaddress="37.143.128.223" AND translatedport=16223 OR destinationtranslatedaddress="31.40.212.130" AND translatedport=7225 OR destinationtranslatedaddress="198.244.207.203" AND translatedport=2076)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="208.115.230.243" AND destinationport=16697 OR destinationaddress="185.126.239.207" AND destinationport=26630 OR destinationaddress="213.183.57.174" AND destinationport=12517 OR destinationaddress="213.183.57.72" AND destinationport=12517 OR destinationaddress="213.183.56.201" AND destinationport=12517 OR destinationaddress="95.164.45.27" AND destinationport=17426 OR destinationaddress="45.120.178.161" AND destinationport=11013 OR destinationaddress="176.120.74.3" AND destinationport=17268 OR destinationaddress="92.243.64.184" AND destinationport=17146 OR destinationaddress="92.243.64.36" AND destinationport=17146)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="208.115.230.243" AND sourceport=16697 OR sourceaddress="185.126.239.207" AND sourceport=26630 OR sourceaddress="213.183.57.174" AND sourceport=12517 OR sourceaddress="213.183.57.72" AND sourceport=12517 OR sourceaddress="213.183.56.201" AND sourceport=12517 OR sourceaddress="95.164.45.27" AND sourceport=17426 OR sourceaddress="45.120.178.161" AND sourceport=11013 OR sourceaddress="176.120.74.3" AND sourceport=17268 OR sourceaddress="92.243.64.184" AND sourceport=17146 OR sourceaddress="92.243.64.36" AND sourceport=17146)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="208.115.230.243" AND sourceport=16697 OR translatedipaddress="185.126.239.207" AND sourceport=26630 OR translatedipaddress="213.183.57.174" AND sourceport=12517 OR translatedipaddress="213.183.57.72" AND sourceport=12517 OR translatedipaddress="213.183.56.201" AND sourceport=12517 OR translatedipaddress="95.164.45.27" AND sourceport=17426 OR translatedipaddress="45.120.178.161" AND sourceport=11013 OR translatedipaddress="176.120.74.3" AND sourceport=17268 OR translatedipaddress="92.243.64.184" AND sourceport=17146 OR translatedipaddress="92.243.64.36" AND sourceport=17146)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND destinationport=16697 OR destinationtranslatedaddress="185.126.239.207" AND destinationport=26630 OR destinationtranslatedaddress="213.183.57.174" AND destinationport=12517 OR destinationtranslatedaddress="213.183.57.72" AND destinationport=12517 OR destinationtranslatedaddress="213.183.56.201" AND destinationport=12517 OR destinationtranslatedaddress="95.164.45.27" AND destinationport=17426 OR destinationtranslatedaddress="45.120.178.161" AND destinationport=11013 OR destinationtranslatedaddress="176.120.74.3" AND destinationport=17268 OR destinationtranslatedaddress="92.243.64.184" AND destinationport=17146 OR destinationtranslatedaddress="92.243.64.36" AND destinationport=17146)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND destinationtranslatedport=16697 OR destinationtranslatedaddress="185.126.239.207" AND destinationtranslatedport=26630 OR destinationtranslatedaddress="213.183.57.174" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="213.183.57.72" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="213.183.56.201" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="95.164.45.27" AND destinationtranslatedport=17426 OR destinationtranslatedaddress="45.120.178.161" AND destinationtranslatedport=11013 OR destinationtranslatedaddress="176.120.74.3" AND destinationtranslatedport=17268 OR destinationtranslatedaddress="92.243.64.184" AND destinationtranslatedport=17146 OR destinationtranslatedaddress="92.243.64.36" AND destinationtranslatedport=17146)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND translatedport=16697 OR destinationtranslatedaddress="185.126.239.207" AND translatedport=26630 OR destinationtranslatedaddress="213.183.57.174" AND translatedport=12517 OR destinationtranslatedaddress="213.183.57.72" AND translatedport=12517 OR destinationtranslatedaddress="213.183.56.201" AND translatedport=12517 OR destinationtranslatedaddress="95.164.45.27" AND translatedport=17426 OR destinationtranslatedaddress="45.120.178.161" AND translatedport=11013 OR destinationtranslatedaddress="176.120.74.3" AND translatedport=17268 OR destinationtranslatedaddress="92.243.64.184" AND translatedport=17146 OR destinationtranslatedaddress="92.243.64.36" AND translatedport=17146)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="89.31.120.126" AND destinationport=11578 OR destinationaddress="91.132.93.33" AND destinationport=11578 OR destinationaddress="91.132.95.28" AND destinationport=8773 OR destinationaddress="91.132.95.204" AND destinationport=8773 OR destinationaddress="91.132.95.135" AND destinationport=8773 OR destinationaddress="194.233.174.22" AND destinationport=45358)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="89.31.120.126" AND sourceport=11578 OR sourceaddress="91.132.93.33" AND sourceport=11578 OR sourceaddress="91.132.95.28" AND sourceport=8773 OR sourceaddress="91.132.95.204" AND sourceport=8773 OR sourceaddress="91.132.95.135" AND sourceport=8773 OR sourceaddress="194.233.174.22" AND sourceport=45358)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="89.31.120.126" AND sourceport=11578 OR translatedipaddress="91.132.93.33" AND sourceport=11578 OR translatedipaddress="91.132.95.28" AND sourceport=8773 OR translatedipaddress="91.132.95.204" AND sourceport=8773 OR translatedipaddress="91.132.95.135" AND sourceport=8773 OR translatedipaddress="194.233.174.22" AND sourceport=45358)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND destinationport=11578 OR destinationtranslatedaddress="91.132.93.33" AND destinationport=11578 OR destinationtranslatedaddress="91.132.95.28" AND destinationport=8773 OR destinationtranslatedaddress="91.132.95.204" AND destinationport=8773 OR destinationtranslatedaddress="91.132.95.135" AND destinationport=8773 OR destinationtranslatedaddress="194.233.174.22" AND destinationport=45358)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND destinationtranslatedport=11578 OR destinationtranslatedaddress="91.132.93.33" AND destinationtranslatedport=11578 OR destinationtranslatedaddress="91.132.95.28" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="91.132.95.204" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="91.132.95.135" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="194.233.174.22" AND destinationtranslatedport=45358)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND translatedport=11578 OR destinationtranslatedaddress="91.132.93.33" AND translatedport=11578 OR destinationtranslatedaddress="91.132.95.28" AND translatedport=8773 OR destinationtranslatedaddress="91.132.95.204" AND translatedport=8773 OR destinationtranslatedaddress="91.132.95.135" AND translatedport=8773 OR destinationtranslatedaddress="194.233.174.22" AND translatedport=45358)
index=activity AND rg_functionality="Next Generation Firewall" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="158.255.212.173" AND destinationport=10862 OR destinationaddress="151.236.25.126" AND destinationport=11331 OR destinationaddress="158.255.215.49" AND destinationport=23079 OR destinationaddress="185.26.239.98" AND destinationport=11076 OR destinationaddress="151.236.25.10" AND destinationport=7205 OR destinationaddress="37.235.53.217" AND destinationport=1358 OR destinationaddress="151.236.23.232" AND destinationport=763 OR destinationaddress="37.235.56.204" AND destinationport=24239 OR destinationaddress="162.252.175.122" AND destinationport=4126 OR destinationaddress="162.252.175.136" AND destinationport=11077)
index=activity AND rg_functionality="Next Generation Firewall" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="158.255.212.173" AND sourceport=10862 OR sourceaddress="151.236.25.126" AND sourceport=11331 OR sourceaddress="158.255.215.49" AND sourceport=23079 OR sourceaddress="185.26.239.98" AND sourceport=11076 OR sourceaddress="151.236.25.10" AND sourceport=7205 OR sourceaddress="37.235.53.217" AND sourceport=1358 OR sourceaddress="151.236.23.232" AND sourceport=763 OR sourceaddress="37.235.56.204" AND sourceport=24239 OR sourceaddress="162.252.175.122" AND sourceport=4126 OR sourceaddress="162.252.175.136" AND sourceport=11077)
index=activity AND rg_functionality="Next Generation Firewall" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="158.255.212.173" AND sourceport=10862 OR translatedipaddress="151.236.25.126" AND sourceport=11331 OR translatedipaddress="158.255.215.49" AND sourceport=23079 OR translatedipaddress="185.26.239.98" AND sourceport=11076 OR translatedipaddress="151.236.25.10" AND sourceport=7205 OR translatedipaddress="37.235.53.217" AND sourceport=1358 OR translatedipaddress="151.236.23.232" AND sourceport=763 OR translatedipaddress="37.235.56.204" AND sourceport=24239 OR translatedipaddress="162.252.175.122" AND sourceport=4126 OR translatedipaddress="162.252.175.136" AND sourceport=11077)
index=activity AND rg_functionality="Next Generation Firewall" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND destinationport=10862 OR destinationtranslatedaddress="151.236.25.126" AND destinationport=11331 OR destinationtranslatedaddress="158.255.215.49" AND destinationport=23079 OR destinationtranslatedaddress="185.26.239.98" AND destinationport=11076 OR destinationtranslatedaddress="151.236.25.10" AND destinationport=7205 OR destinationtranslatedaddress="37.235.53.217" AND destinationport=1358 OR destinationtranslatedaddress="151.236.23.232" AND destinationport=763 OR destinationtranslatedaddress="37.235.56.204" AND destinationport=24239 OR destinationtranslatedaddress="162.252.175.122" AND destinationport=4126 OR destinationtranslatedaddress="162.252.175.136" AND destinationport=11077)
index=activity AND rg_functionality="Next Generation Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND destinationtranslatedport=10862 OR destinationtranslatedaddress="151.236.25.126" AND destinationtranslatedport=11331 OR destinationtranslatedaddress="158.255.215.49" AND destinationtranslatedport=23079 OR destinationtranslatedaddress="185.26.239.98" AND destinationtranslatedport=11076 OR destinationtranslatedaddress="151.236.25.10" AND destinationtranslatedport=7205 OR destinationtranslatedaddress="37.235.53.217" AND destinationtranslatedport=1358 OR destinationtranslatedaddress="151.236.23.232" AND destinationtranslatedport=763 OR destinationtranslatedaddress="37.235.56.204" AND destinationtranslatedport=24239 OR destinationtranslatedaddress="162.252.175.122" AND destinationtranslatedport=4126 OR destinationtranslatedaddress="162.252.175.136" AND destinationtranslatedport=11077)
index=activity AND rg_functionality="Next Generation Firewall" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND translatedport=10862 OR destinationtranslatedaddress="151.236.25.126" AND translatedport=11331 OR destinationtranslatedaddress="158.255.215.49" AND translatedport=23079 OR destinationtranslatedaddress="185.26.239.98" AND translatedport=11076 OR destinationtranslatedaddress="151.236.25.10" AND translatedport=7205 OR destinationtranslatedaddress="37.235.53.217" AND translatedport=1358 OR destinationtranslatedaddress="151.236.23.232" AND translatedport=763 OR destinationtranslatedaddress="37.235.56.204" AND translatedport=24239 OR destinationtranslatedaddress="162.252.175.122" AND translatedport=4126 OR destinationtranslatedaddress="162.252.175.136" AND translatedport=11077)
index=activity AND rg_functionality="Next Generation Firewall" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="162.252.175.163" AND destinationport=28693 OR destinationaddress="162.252.175.90" AND destinationport=845 OR destinationaddress="162.252.175.109" AND destinationport=28330 OR destinationaddress="151.236.20.39" AND destinationport=5524 OR destinationaddress="158.255.208.140" AND destinationport=86 OR destinationaddress="194.68.27.149" AND destinationport=13106 OR destinationaddress="194.68.27.176" AND destinationport=6460 OR destinationaddress="37.143.128.223" AND destinationport=16223 OR destinationaddress="31.40.212.130" AND destinationport=7225 OR destinationaddress="198.244.207.203" AND destinationport=2076)
index=activity AND rg_functionality="Next Generation Firewall" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="162.252.175.163" AND sourceport=28693 OR sourceaddress="162.252.175.90" AND sourceport=845 OR sourceaddress="162.252.175.109" AND sourceport=28330 OR sourceaddress="151.236.20.39" AND sourceport=5524 OR sourceaddress="158.255.208.140" AND sourceport=86 OR sourceaddress="194.68.27.149" AND sourceport=13106 OR sourceaddress="194.68.27.176" AND sourceport=6460 OR sourceaddress="37.143.128.223" AND sourceport=16223 OR sourceaddress="31.40.212.130" AND sourceport=7225 OR sourceaddress="198.244.207.203" AND sourceport=2076)
index=activity AND rg_functionality="Next Generation Firewall" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="162.252.175.163" AND sourceport=28693 OR translatedipaddress="162.252.175.90" AND sourceport=845 OR translatedipaddress="162.252.175.109" AND sourceport=28330 OR translatedipaddress="151.236.20.39" AND sourceport=5524 OR translatedipaddress="158.255.208.140" AND sourceport=86 OR translatedipaddress="194.68.27.149" AND sourceport=13106 OR translatedipaddress="194.68.27.176" AND sourceport=6460 OR translatedipaddress="37.143.128.223" AND sourceport=16223 OR translatedipaddress="31.40.212.130" AND sourceport=7225 OR translatedipaddress="198.244.207.203" AND sourceport=2076)
index=activity AND rg_functionality="Next Generation Firewall" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND destinationport=28693 OR destinationtranslatedaddress="162.252.175.90" AND destinationport=845 OR destinationtranslatedaddress="162.252.175.109" AND destinationport=28330 OR destinationtranslatedaddress="151.236.20.39" AND destinationport=5524 OR destinationtranslatedaddress="158.255.208.140" AND destinationport=86 OR destinationtranslatedaddress="194.68.27.149" AND destinationport=13106 OR destinationtranslatedaddress="194.68.27.176" AND destinationport=6460 OR destinationtranslatedaddress="37.143.128.223" AND destinationport=16223 OR destinationtranslatedaddress="31.40.212.130" AND destinationport=7225 OR destinationtranslatedaddress="198.244.207.203" AND destinationport=2076)
index=activity AND rg_functionality="Next Generation Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND destinationtranslatedport=28693 OR destinationtranslatedaddress="162.252.175.90" AND destinationtranslatedport=845 OR destinationtranslatedaddress="162.252.175.109" AND destinationtranslatedport=28330 OR destinationtranslatedaddress="151.236.20.39" AND destinationtranslatedport=5524 OR destinationtranslatedaddress="158.255.208.140" AND destinationtranslatedport=86 OR destinationtranslatedaddress="194.68.27.149" AND destinationtranslatedport=13106 OR destinationtranslatedaddress="194.68.27.176" AND destinationtranslatedport=6460 OR destinationtranslatedaddress="37.143.128.223" AND destinationtranslatedport=16223 OR destinationtranslatedaddress="31.40.212.130" AND destinationtranslatedport=7225 OR destinationtranslatedaddress="198.244.207.203" AND destinationtranslatedport=2076)
index=activity AND rg_functionality="Next Generation Firewall" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND translatedport=28693 OR destinationtranslatedaddress="162.252.175.90" AND translatedport=845 OR destinationtranslatedaddress="162.252.175.109" AND translatedport=28330 OR destinationtranslatedaddress="151.236.20.39" AND translatedport=5524 OR destinationtranslatedaddress="158.255.208.140" AND translatedport=86 OR destinationtranslatedaddress="194.68.27.149" AND translatedport=13106 OR destinationtranslatedaddress="194.68.27.176" AND translatedport=6460 OR destinationtranslatedaddress="37.143.128.223" AND translatedport=16223 OR destinationtranslatedaddress="31.40.212.130" AND translatedport=7225 OR destinationtranslatedaddress="198.244.207.203" AND translatedport=2076)
index=activity AND rg_functionality="Next Generation Firewall" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="208.115.230.243" AND destinationport=16697 OR destinationaddress="185.126.239.207" AND destinationport=26630 OR destinationaddress="213.183.57.174" AND destinationport=12517 OR destinationaddress="213.183.57.72" AND destinationport=12517 OR destinationaddress="213.183.56.201" AND destinationport=12517 OR destinationaddress="95.164.45.27" AND destinationport=17426 OR destinationaddress="45.120.178.161" AND destinationport=11013 OR destinationaddress="176.120.74.3" AND destinationport=17268 OR destinationaddress="92.243.64.184" AND destinationport=17146 OR destinationaddress="92.243.64.36" AND destinationport=17146)
index=activity AND rg_functionality="Next Generation Firewall" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="208.115.230.243" AND sourceport=16697 OR sourceaddress="185.126.239.207" AND sourceport=26630 OR sourceaddress="213.183.57.174" AND sourceport=12517 OR sourceaddress="213.183.57.72" AND sourceport=12517 OR sourceaddress="213.183.56.201" AND sourceport=12517 OR sourceaddress="95.164.45.27" AND sourceport=17426 OR sourceaddress="45.120.178.161" AND sourceport=11013 OR sourceaddress="176.120.74.3" AND sourceport=17268 OR sourceaddress="92.243.64.184" AND sourceport=17146 OR sourceaddress="92.243.64.36" AND sourceport=17146)
index=activity AND rg_functionality="Next Generation Firewall" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="208.115.230.243" AND sourceport=16697 OR translatedipaddress="185.126.239.207" AND sourceport=26630 OR translatedipaddress="213.183.57.174" AND sourceport=12517 OR translatedipaddress="213.183.57.72" AND sourceport=12517 OR translatedipaddress="213.183.56.201" AND sourceport=12517 OR translatedipaddress="95.164.45.27" AND sourceport=17426 OR translatedipaddress="45.120.178.161" AND sourceport=11013 OR translatedipaddress="176.120.74.3" AND sourceport=17268 OR translatedipaddress="92.243.64.184" AND sourceport=17146 OR translatedipaddress="92.243.64.36" AND sourceport=17146)
index=activity AND rg_functionality="Next Generation Firewall" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND destinationport=16697 OR destinationtranslatedaddress="185.126.239.207" AND destinationport=26630 OR destinationtranslatedaddress="213.183.57.174" AND destinationport=12517 OR destinationtranslatedaddress="213.183.57.72" AND destinationport=12517 OR destinationtranslatedaddress="213.183.56.201" AND destinationport=12517 OR destinationtranslatedaddress="95.164.45.27" AND destinationport=17426 OR destinationtranslatedaddress="45.120.178.161" AND destinationport=11013 OR destinationtranslatedaddress="176.120.74.3" AND destinationport=17268 OR destinationtranslatedaddress="92.243.64.184" AND destinationport=17146 OR destinationtranslatedaddress="92.243.64.36" AND destinationport=17146)
index=activity AND rg_functionality="Next Generation Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND destinationtranslatedport=16697 OR destinationtranslatedaddress="185.126.239.207" AND destinationtranslatedport=26630 OR destinationtranslatedaddress="213.183.57.174" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="213.183.57.72" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="213.183.56.201" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="95.164.45.27" AND destinationtranslatedport=17426 OR destinationtranslatedaddress="45.120.178.161" AND destinationtranslatedport=11013 OR destinationtranslatedaddress="176.120.74.3" AND destinationtranslatedport=17268 OR destinationtranslatedaddress="92.243.64.184" AND destinationtranslatedport=17146 OR destinationtranslatedaddress="92.243.64.36" AND destinationtranslatedport=17146)
index=activity AND rg_functionality="Next Generation Firewall" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND translatedport=16697 OR destinationtranslatedaddress="185.126.239.207" AND translatedport=26630 OR destinationtranslatedaddress="213.183.57.174" AND translatedport=12517 OR destinationtranslatedaddress="213.183.57.72" AND translatedport=12517 OR destinationtranslatedaddress="213.183.56.201" AND translatedport=12517 OR destinationtranslatedaddress="95.164.45.27" AND translatedport=17426 OR destinationtranslatedaddress="45.120.178.161" AND translatedport=11013 OR destinationtranslatedaddress="176.120.74.3" AND translatedport=17268 OR destinationtranslatedaddress="92.243.64.184" AND translatedport=17146 OR destinationtranslatedaddress="92.243.64.36" AND translatedport=17146)
index=activity AND rg_functionality="Next Generation Firewall" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="89.31.120.126" AND destinationport=11578 OR destinationaddress="91.132.93.33" AND destinationport=11578 OR destinationaddress="91.132.95.28" AND destinationport=8773 OR destinationaddress="91.132.95.204" AND destinationport=8773 OR destinationaddress="91.132.95.135" AND destinationport=8773 OR destinationaddress="194.233.174.22" AND destinationport=45358)
index=activity AND rg_functionality="Next Generation Firewall" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="89.31.120.126" AND sourceport=11578 OR sourceaddress="91.132.93.33" AND sourceport=11578 OR sourceaddress="91.132.95.28" AND sourceport=8773 OR sourceaddress="91.132.95.204" AND sourceport=8773 OR sourceaddress="91.132.95.135" AND sourceport=8773 OR sourceaddress="194.233.174.22" AND sourceport=45358)
index=activity AND rg_functionality="Next Generation Firewall" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="89.31.120.126" AND sourceport=11578 OR translatedipaddress="91.132.93.33" AND sourceport=11578 OR translatedipaddress="91.132.95.28" AND sourceport=8773 OR translatedipaddress="91.132.95.204" AND sourceport=8773 OR translatedipaddress="91.132.95.135" AND sourceport=8773 OR translatedipaddress="194.233.174.22" AND sourceport=45358)
index=activity AND rg_functionality="Next Generation Firewall" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND destinationport=11578 OR destinationtranslatedaddress="91.132.93.33" AND destinationport=11578 OR destinationtranslatedaddress="91.132.95.28" AND destinationport=8773 OR destinationtranslatedaddress="91.132.95.204" AND destinationport=8773 OR destinationtranslatedaddress="91.132.95.135" AND destinationport=8773 OR destinationtranslatedaddress="194.233.174.22" AND destinationport=45358)
index=activity AND rg_functionality="Next Generation Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND destinationtranslatedport=11578 OR destinationtranslatedaddress="91.132.93.33" AND destinationtranslatedport=11578 OR destinationtranslatedaddress="91.132.95.28" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="91.132.95.204" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="91.132.95.135" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="194.233.174.22" AND destinationtranslatedport=45358)
index=activity AND rg_functionality="Next Generation Firewall" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND translatedport=11578 OR destinationtranslatedaddress="91.132.93.33" AND translatedport=11578 OR destinationtranslatedaddress="91.132.95.28" AND translatedport=8773 OR destinationtranslatedaddress="91.132.95.204" AND translatedport=8773 OR destinationtranslatedaddress="91.132.95.135" AND translatedport=8773 OR destinationtranslatedaddress="194.233.174.22" AND translatedport=45358)
index=activity AND rg_functionality="Firewall" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="158.255.212.173" AND destinationport=10862 OR destinationaddress="151.236.25.126" AND destinationport=11331 OR destinationaddress="158.255.215.49" AND destinationport=23079 OR destinationaddress="185.26.239.98" AND destinationport=11076 OR destinationaddress="151.236.25.10" AND destinationport=7205 OR destinationaddress="37.235.53.217" AND destinationport=1358 OR destinationaddress="151.236.23.232" AND destinationport=763 OR destinationaddress="37.235.56.204" AND destinationport=24239 OR destinationaddress="162.252.175.122" AND destinationport=4126 OR destinationaddress="162.252.175.136" AND destinationport=11077)
index=activity AND rg_functionality="Firewall" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="158.255.212.173" AND sourceport=10862 OR sourceaddress="151.236.25.126" AND sourceport=11331 OR sourceaddress="158.255.215.49" AND sourceport=23079 OR sourceaddress="185.26.239.98" AND sourceport=11076 OR sourceaddress="151.236.25.10" AND sourceport=7205 OR sourceaddress="37.235.53.217" AND sourceport=1358 OR sourceaddress="151.236.23.232" AND sourceport=763 OR sourceaddress="37.235.56.204" AND sourceport=24239 OR sourceaddress="162.252.175.122" AND sourceport=4126 OR sourceaddress="162.252.175.136" AND sourceport=11077)
index=activity AND rg_functionality="Firewall" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="158.255.212.173" AND sourceport=10862 OR translatedipaddress="151.236.25.126" AND sourceport=11331 OR translatedipaddress="158.255.215.49" AND sourceport=23079 OR translatedipaddress="185.26.239.98" AND sourceport=11076 OR translatedipaddress="151.236.25.10" AND sourceport=7205 OR translatedipaddress="37.235.53.217" AND sourceport=1358 OR translatedipaddress="151.236.23.232" AND sourceport=763 OR translatedipaddress="37.235.56.204" AND sourceport=24239 OR translatedipaddress="162.252.175.122" AND sourceport=4126 OR translatedipaddress="162.252.175.136" AND sourceport=11077)
index=activity AND rg_functionality="Firewall" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND destinationport=10862 OR destinationtranslatedaddress="151.236.25.126" AND destinationport=11331 OR destinationtranslatedaddress="158.255.215.49" AND destinationport=23079 OR destinationtranslatedaddress="185.26.239.98" AND destinationport=11076 OR destinationtranslatedaddress="151.236.25.10" AND destinationport=7205 OR destinationtranslatedaddress="37.235.53.217" AND destinationport=1358 OR destinationtranslatedaddress="151.236.23.232" AND destinationport=763 OR destinationtranslatedaddress="37.235.56.204" AND destinationport=24239 OR destinationtranslatedaddress="162.252.175.122" AND destinationport=4126 OR destinationtranslatedaddress="162.252.175.136" AND destinationport=11077)
index=activity AND rg_functionality="Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND destinationtranslatedport=10862 OR destinationtranslatedaddress="151.236.25.126" AND destinationtranslatedport=11331 OR destinationtranslatedaddress="158.255.215.49" AND destinationtranslatedport=23079 OR destinationtranslatedaddress="185.26.239.98" AND destinationtranslatedport=11076 OR destinationtranslatedaddress="151.236.25.10" AND destinationtranslatedport=7205 OR destinationtranslatedaddress="37.235.53.217" AND destinationtranslatedport=1358 OR destinationtranslatedaddress="151.236.23.232" AND destinationtranslatedport=763 OR destinationtranslatedaddress="37.235.56.204" AND destinationtranslatedport=24239 OR destinationtranslatedaddress="162.252.175.122" AND destinationtranslatedport=4126 OR destinationtranslatedaddress="162.252.175.136" AND destinationtranslatedport=11077)
index=activity AND rg_functionality="Firewall" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND translatedport=10862 OR destinationtranslatedaddress="151.236.25.126" AND translatedport=11331 OR destinationtranslatedaddress="158.255.215.49" AND translatedport=23079 OR destinationtranslatedaddress="185.26.239.98" AND translatedport=11076 OR destinationtranslatedaddress="151.236.25.10" AND translatedport=7205 OR destinationtranslatedaddress="37.235.53.217" AND translatedport=1358 OR destinationtranslatedaddress="151.236.23.232" AND translatedport=763 OR destinationtranslatedaddress="37.235.56.204" AND translatedport=24239 OR destinationtranslatedaddress="162.252.175.122" AND translatedport=4126 OR destinationtranslatedaddress="162.252.175.136" AND translatedport=11077)
index=activity AND rg_functionality="Firewall" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="162.252.175.163" AND destinationport=28693 OR destinationaddress="162.252.175.90" AND destinationport=845 OR destinationaddress="162.252.175.109" AND destinationport=28330 OR destinationaddress="151.236.20.39" AND destinationport=5524 OR destinationaddress="158.255.208.140" AND destinationport=86 OR destinationaddress="194.68.27.149" AND destinationport=13106 OR destinationaddress="194.68.27.176" AND destinationport=6460 OR destinationaddress="37.143.128.223" AND destinationport=16223 OR destinationaddress="31.40.212.130" AND destinationport=7225 OR destinationaddress="198.244.207.203" AND destinationport=2076)
index=activity AND rg_functionality="Firewall" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="162.252.175.163" AND sourceport=28693 OR sourceaddress="162.252.175.90" AND sourceport=845 OR sourceaddress="162.252.175.109" AND sourceport=28330 OR sourceaddress="151.236.20.39" AND sourceport=5524 OR sourceaddress="158.255.208.140" AND sourceport=86 OR sourceaddress="194.68.27.149" AND sourceport=13106 OR sourceaddress="194.68.27.176" AND sourceport=6460 OR sourceaddress="37.143.128.223" AND sourceport=16223 OR sourceaddress="31.40.212.130" AND sourceport=7225 OR sourceaddress="198.244.207.203" AND sourceport=2076)
index=activity AND rg_functionality="Firewall" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="162.252.175.163" AND sourceport=28693 OR translatedipaddress="162.252.175.90" AND sourceport=845 OR translatedipaddress="162.252.175.109" AND sourceport=28330 OR translatedipaddress="151.236.20.39" AND sourceport=5524 OR translatedipaddress="158.255.208.140" AND sourceport=86 OR translatedipaddress="194.68.27.149" AND sourceport=13106 OR translatedipaddress="194.68.27.176" AND sourceport=6460 OR translatedipaddress="37.143.128.223" AND sourceport=16223 OR translatedipaddress="31.40.212.130" AND sourceport=7225 OR translatedipaddress="198.244.207.203" AND sourceport=2076)
index=activity AND rg_functionality="Firewall" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND destinationport=28693 OR destinationtranslatedaddress="162.252.175.90" AND destinationport=845 OR destinationtranslatedaddress="162.252.175.109" AND destinationport=28330 OR destinationtranslatedaddress="151.236.20.39" AND destinationport=5524 OR destinationtranslatedaddress="158.255.208.140" AND destinationport=86 OR destinationtranslatedaddress="194.68.27.149" AND destinationport=13106 OR destinationtranslatedaddress="194.68.27.176" AND destinationport=6460 OR destinationtranslatedaddress="37.143.128.223" AND destinationport=16223 OR destinationtranslatedaddress="31.40.212.130" AND destinationport=7225 OR destinationtranslatedaddress="198.244.207.203" AND destinationport=2076)
index=activity AND rg_functionality="Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND destinationtranslatedport=28693 OR destinationtranslatedaddress="162.252.175.90" AND destinationtranslatedport=845 OR destinationtranslatedaddress="162.252.175.109" AND destinationtranslatedport=28330 OR destinationtranslatedaddress="151.236.20.39" AND destinationtranslatedport=5524 OR destinationtranslatedaddress="158.255.208.140" AND destinationtranslatedport=86 OR destinationtranslatedaddress="194.68.27.149" AND destinationtranslatedport=13106 OR destinationtranslatedaddress="194.68.27.176" AND destinationtranslatedport=6460 OR destinationtranslatedaddress="37.143.128.223" AND destinationtranslatedport=16223 OR destinationtranslatedaddress="31.40.212.130" AND destinationtranslatedport=7225 OR destinationtranslatedaddress="198.244.207.203" AND destinationtranslatedport=2076)
index=activity AND rg_functionality="Firewall" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND translatedport=28693 OR destinationtranslatedaddress="162.252.175.90" AND translatedport=845 OR destinationtranslatedaddress="162.252.175.109" AND translatedport=28330 OR destinationtranslatedaddress="151.236.20.39" AND translatedport=5524 OR destinationtranslatedaddress="158.255.208.140" AND translatedport=86 OR destinationtranslatedaddress="194.68.27.149" AND translatedport=13106 OR destinationtranslatedaddress="194.68.27.176" AND translatedport=6460 OR destinationtranslatedaddress="37.143.128.223" AND translatedport=16223 OR destinationtranslatedaddress="31.40.212.130" AND translatedport=7225 OR destinationtranslatedaddress="198.244.207.203" AND translatedport=2076)
index=activity AND rg_functionality="Firewall" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="208.115.230.243" AND destinationport=16697 OR destinationaddress="185.126.239.207" AND destinationport=26630 OR destinationaddress="213.183.57.174" AND destinationport=12517 OR destinationaddress="213.183.57.72" AND destinationport=12517 OR destinationaddress="213.183.56.201" AND destinationport=12517 OR destinationaddress="95.164.45.27" AND destinationport=17426 OR destinationaddress="45.120.178.161" AND destinationport=11013 OR destinationaddress="176.120.74.3" AND destinationport=17268 OR destinationaddress="92.243.64.184" AND destinationport=17146 OR destinationaddress="92.243.64.36" AND destinationport=17146)
index=activity AND rg_functionality="Firewall" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="208.115.230.243" AND sourceport=16697 OR sourceaddress="185.126.239.207" AND sourceport=26630 OR sourceaddress="213.183.57.174" AND sourceport=12517 OR sourceaddress="213.183.57.72" AND sourceport=12517 OR sourceaddress="213.183.56.201" AND sourceport=12517 OR sourceaddress="95.164.45.27" AND sourceport=17426 OR sourceaddress="45.120.178.161" AND sourceport=11013 OR sourceaddress="176.120.74.3" AND sourceport=17268 OR sourceaddress="92.243.64.184" AND sourceport=17146 OR sourceaddress="92.243.64.36" AND sourceport=17146)
index=activity AND rg_functionality="Firewall" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="208.115.230.243" AND sourceport=16697 OR translatedipaddress="185.126.239.207" AND sourceport=26630 OR translatedipaddress="213.183.57.174" AND sourceport=12517 OR translatedipaddress="213.183.57.72" AND sourceport=12517 OR translatedipaddress="213.183.56.201" AND sourceport=12517 OR translatedipaddress="95.164.45.27" AND sourceport=17426 OR translatedipaddress="45.120.178.161" AND sourceport=11013 OR translatedipaddress="176.120.74.3" AND sourceport=17268 OR translatedipaddress="92.243.64.184" AND sourceport=17146 OR translatedipaddress="92.243.64.36" AND sourceport=17146)
index=activity AND rg_functionality="Firewall" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND destinationport=16697 OR destinationtranslatedaddress="185.126.239.207" AND destinationport=26630 OR destinationtranslatedaddress="213.183.57.174" AND destinationport=12517 OR destinationtranslatedaddress="213.183.57.72" AND destinationport=12517 OR destinationtranslatedaddress="213.183.56.201" AND destinationport=12517 OR destinationtranslatedaddress="95.164.45.27" AND destinationport=17426 OR destinationtranslatedaddress="45.120.178.161" AND destinationport=11013 OR destinationtranslatedaddress="176.120.74.3" AND destinationport=17268 OR destinationtranslatedaddress="92.243.64.184" AND destinationport=17146 OR destinationtranslatedaddress="92.243.64.36" AND destinationport=17146)
index=activity AND rg_functionality="Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND destinationtranslatedport=16697 OR destinationtranslatedaddress="185.126.239.207" AND destinationtranslatedport=26630 OR destinationtranslatedaddress="213.183.57.174" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="213.183.57.72" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="213.183.56.201" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="95.164.45.27" AND destinationtranslatedport=17426 OR destinationtranslatedaddress="45.120.178.161" AND destinationtranslatedport=11013 OR destinationtranslatedaddress="176.120.74.3" AND destinationtranslatedport=17268 OR destinationtranslatedaddress="92.243.64.184" AND destinationtranslatedport=17146 OR destinationtranslatedaddress="92.243.64.36" AND destinationtranslatedport=17146)
index=activity AND rg_functionality="Firewall" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND translatedport=16697 OR destinationtranslatedaddress="185.126.239.207" AND translatedport=26630 OR destinationtranslatedaddress="213.183.57.174" AND translatedport=12517 OR destinationtranslatedaddress="213.183.57.72" AND translatedport=12517 OR destinationtranslatedaddress="213.183.56.201" AND translatedport=12517 OR destinationtranslatedaddress="95.164.45.27" AND translatedport=17426 OR destinationtranslatedaddress="45.120.178.161" AND translatedport=11013 OR destinationtranslatedaddress="176.120.74.3" AND translatedport=17268 OR destinationtranslatedaddress="92.243.64.184" AND translatedport=17146 OR destinationtranslatedaddress="92.243.64.36" AND translatedport=17146)
index=activity AND rg_functionality="Firewall" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="89.31.120.126" AND destinationport=11578 OR destinationaddress="91.132.93.33" AND destinationport=11578 OR destinationaddress="91.132.95.28" AND destinationport=8773 OR destinationaddress="91.132.95.204" AND destinationport=8773 OR destinationaddress="91.132.95.135" AND destinationport=8773 OR destinationaddress="194.233.174.22" AND destinationport=45358)
index=activity AND rg_functionality="Firewall" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="89.31.120.126" AND sourceport=11578 OR sourceaddress="91.132.93.33" AND sourceport=11578 OR sourceaddress="91.132.95.28" AND sourceport=8773 OR sourceaddress="91.132.95.204" AND sourceport=8773 OR sourceaddress="91.132.95.135" AND sourceport=8773 OR sourceaddress="194.233.174.22" AND sourceport=45358)
index=activity AND rg_functionality="Firewall" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="89.31.120.126" AND sourceport=11578 OR translatedipaddress="91.132.93.33" AND sourceport=11578 OR translatedipaddress="91.132.95.28" AND sourceport=8773 OR translatedipaddress="91.132.95.204" AND sourceport=8773 OR translatedipaddress="91.132.95.135" AND sourceport=8773 OR translatedipaddress="194.233.174.22" AND sourceport=45358)
index=activity AND rg_functionality="Firewall" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND destinationport=11578 OR destinationtranslatedaddress="91.132.93.33" AND destinationport=11578 OR destinationtranslatedaddress="91.132.95.28" AND destinationport=8773 OR destinationtranslatedaddress="91.132.95.204" AND destinationport=8773 OR destinationtranslatedaddress="91.132.95.135" AND destinationport=8773 OR destinationtranslatedaddress="194.233.174.22" AND destinationport=45358)
index=activity AND rg_functionality="Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND destinationtranslatedport=11578 OR destinationtranslatedaddress="91.132.93.33" AND destinationtranslatedport=11578 OR destinationtranslatedaddress="91.132.95.28" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="91.132.95.204" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="91.132.95.135" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="194.233.174.22" AND destinationtranslatedport=45358)
index=activity AND rg_functionality="Firewall" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND translatedport=11578 OR destinationtranslatedaddress="91.132.93.33" AND translatedport=11578 OR destinationtranslatedaddress="91.132.95.28" AND translatedport=8773 OR destinationtranslatedaddress="91.132.95.204" AND translatedport=8773 OR destinationtranslatedaddress="91.132.95.135" AND translatedport=8773 OR destinationtranslatedaddress="194.233.174.22" AND translatedport=45358)
index=activity AND rg_functionality="Web Proxy" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="158.255.212.173" AND destinationport=10862 OR destinationaddress="151.236.25.126" AND destinationport=11331 OR destinationaddress="158.255.215.49" AND destinationport=23079 OR destinationaddress="185.26.239.98" AND destinationport=11076 OR destinationaddress="151.236.25.10" AND destinationport=7205 OR destinationaddress="37.235.53.217" AND destinationport=1358 OR destinationaddress="151.236.23.232" AND destinationport=763 OR destinationaddress="37.235.56.204" AND destinationport=24239 OR destinationaddress="162.252.175.122" AND destinationport=4126 OR destinationaddress="162.252.175.136" AND destinationport=11077)
index=activity AND rg_functionality="Web Proxy" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="158.255.212.173" AND sourceport=10862 OR sourceaddress="151.236.25.126" AND sourceport=11331 OR sourceaddress="158.255.215.49" AND sourceport=23079 OR sourceaddress="185.26.239.98" AND sourceport=11076 OR sourceaddress="151.236.25.10" AND sourceport=7205 OR sourceaddress="37.235.53.217" AND sourceport=1358 OR sourceaddress="151.236.23.232" AND sourceport=763 OR sourceaddress="37.235.56.204" AND sourceport=24239 OR sourceaddress="162.252.175.122" AND sourceport=4126 OR sourceaddress="162.252.175.136" AND sourceport=11077)
index=activity AND rg_functionality="Web Proxy" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="158.255.212.173" AND sourceport=10862 OR translatedipaddress="151.236.25.126" AND sourceport=11331 OR translatedipaddress="158.255.215.49" AND sourceport=23079 OR translatedipaddress="185.26.239.98" AND sourceport=11076 OR translatedipaddress="151.236.25.10" AND sourceport=7205 OR translatedipaddress="37.235.53.217" AND sourceport=1358 OR translatedipaddress="151.236.23.232" AND sourceport=763 OR translatedipaddress="37.235.56.204" AND sourceport=24239 OR translatedipaddress="162.252.175.122" AND sourceport=4126 OR translatedipaddress="162.252.175.136" AND sourceport=11077)
index=activity AND rg_functionality="Web Proxy" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND destinationport=10862 OR destinationtranslatedaddress="151.236.25.126" AND destinationport=11331 OR destinationtranslatedaddress="158.255.215.49" AND destinationport=23079 OR destinationtranslatedaddress="185.26.239.98" AND destinationport=11076 OR destinationtranslatedaddress="151.236.25.10" AND destinationport=7205 OR destinationtranslatedaddress="37.235.53.217" AND destinationport=1358 OR destinationtranslatedaddress="151.236.23.232" AND destinationport=763 OR destinationtranslatedaddress="37.235.56.204" AND destinationport=24239 OR destinationtranslatedaddress="162.252.175.122" AND destinationport=4126 OR destinationtranslatedaddress="162.252.175.136" AND destinationport=11077)
index=activity AND rg_functionality="Web Proxy" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND destinationtranslatedport=10862 OR destinationtranslatedaddress="151.236.25.126" AND destinationtranslatedport=11331 OR destinationtranslatedaddress="158.255.215.49" AND destinationtranslatedport=23079 OR destinationtranslatedaddress="185.26.239.98" AND destinationtranslatedport=11076 OR destinationtranslatedaddress="151.236.25.10" AND destinationtranslatedport=7205 OR destinationtranslatedaddress="37.235.53.217" AND destinationtranslatedport=1358 OR destinationtranslatedaddress="151.236.23.232" AND destinationtranslatedport=763 OR destinationtranslatedaddress="37.235.56.204" AND destinationtranslatedport=24239 OR destinationtranslatedaddress="162.252.175.122" AND destinationtranslatedport=4126 OR destinationtranslatedaddress="162.252.175.136" AND destinationtranslatedport=11077)
index=activity AND rg_functionality="Web Proxy" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND translatedport=10862 OR destinationtranslatedaddress="151.236.25.126" AND translatedport=11331 OR destinationtranslatedaddress="158.255.215.49" AND translatedport=23079 OR destinationtranslatedaddress="185.26.239.98" AND translatedport=11076 OR destinationtranslatedaddress="151.236.25.10" AND translatedport=7205 OR destinationtranslatedaddress="37.235.53.217" AND translatedport=1358 OR destinationtranslatedaddress="151.236.23.232" AND translatedport=763 OR destinationtranslatedaddress="37.235.56.204" AND translatedport=24239 OR destinationtranslatedaddress="162.252.175.122" AND translatedport=4126 OR destinationtranslatedaddress="162.252.175.136" AND translatedport=11077)
index=activity AND rg_functionality="Web Proxy" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="162.252.175.163" AND destinationport=28693 OR destinationaddress="162.252.175.90" AND destinationport=845 OR destinationaddress="162.252.175.109" AND destinationport=28330 OR destinationaddress="151.236.20.39" AND destinationport=5524 OR destinationaddress="158.255.208.140" AND destinationport=86 OR destinationaddress="194.68.27.149" AND destinationport=13106 OR destinationaddress="194.68.27.176" AND destinationport=6460 OR destinationaddress="37.143.128.223" AND destinationport=16223 OR destinationaddress="31.40.212.130" AND destinationport=7225 OR destinationaddress="198.244.207.203" AND destinationport=2076)
index=activity AND rg_functionality="Web Proxy" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="162.252.175.163" AND sourceport=28693 OR sourceaddress="162.252.175.90" AND sourceport=845 OR sourceaddress="162.252.175.109" AND sourceport=28330 OR sourceaddress="151.236.20.39" AND sourceport=5524 OR sourceaddress="158.255.208.140" AND sourceport=86 OR sourceaddress="194.68.27.149" AND sourceport=13106 OR sourceaddress="194.68.27.176" AND sourceport=6460 OR sourceaddress="37.143.128.223" AND sourceport=16223 OR sourceaddress="31.40.212.130" AND sourceport=7225 OR sourceaddress="198.244.207.203" AND sourceport=2076)
index=activity AND rg_functionality="Web Proxy" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="162.252.175.163" AND sourceport=28693 OR translatedipaddress="162.252.175.90" AND sourceport=845 OR translatedipaddress="162.252.175.109" AND sourceport=28330 OR translatedipaddress="151.236.20.39" AND sourceport=5524 OR translatedipaddress="158.255.208.140" AND sourceport=86 OR translatedipaddress="194.68.27.149" AND sourceport=13106 OR translatedipaddress="194.68.27.176" AND sourceport=6460 OR translatedipaddress="37.143.128.223" AND sourceport=16223 OR translatedipaddress="31.40.212.130" AND sourceport=7225 OR translatedipaddress="198.244.207.203" AND sourceport=2076)
index=activity AND rg_functionality="Web Proxy" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND destinationport=28693 OR destinationtranslatedaddress="162.252.175.90" AND destinationport=845 OR destinationtranslatedaddress="162.252.175.109" AND destinationport=28330 OR destinationtranslatedaddress="151.236.20.39" AND destinationport=5524 OR destinationtranslatedaddress="158.255.208.140" AND destinationport=86 OR destinationtranslatedaddress="194.68.27.149" AND destinationport=13106 OR destinationtranslatedaddress="194.68.27.176" AND destinationport=6460 OR destinationtranslatedaddress="37.143.128.223" AND destinationport=16223 OR destinationtranslatedaddress="31.40.212.130" AND destinationport=7225 OR destinationtranslatedaddress="198.244.207.203" AND destinationport=2076)
index=activity AND rg_functionality="Web Proxy" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND destinationtranslatedport=28693 OR destinationtranslatedaddress="162.252.175.90" AND destinationtranslatedport=845 OR destinationtranslatedaddress="162.252.175.109" AND destinationtranslatedport=28330 OR destinationtranslatedaddress="151.236.20.39" AND destinationtranslatedport=5524 OR destinationtranslatedaddress="158.255.208.140" AND destinationtranslatedport=86 OR destinationtranslatedaddress="194.68.27.149" AND destinationtranslatedport=13106 OR destinationtranslatedaddress="194.68.27.176" AND destinationtranslatedport=6460 OR destinationtranslatedaddress="37.143.128.223" AND destinationtranslatedport=16223 OR destinationtranslatedaddress="31.40.212.130" AND destinationtranslatedport=7225 OR destinationtranslatedaddress="198.244.207.203" AND destinationtranslatedport=2076)
index=activity AND rg_functionality="Web Proxy" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND translatedport=28693 OR destinationtranslatedaddress="162.252.175.90" AND translatedport=845 OR destinationtranslatedaddress="162.252.175.109" AND translatedport=28330 OR destinationtranslatedaddress="151.236.20.39" AND translatedport=5524 OR destinationtranslatedaddress="158.255.208.140" AND translatedport=86 OR destinationtranslatedaddress="194.68.27.149" AND translatedport=13106 OR destinationtranslatedaddress="194.68.27.176" AND translatedport=6460 OR destinationtranslatedaddress="37.143.128.223" AND translatedport=16223 OR destinationtranslatedaddress="31.40.212.130" AND translatedport=7225 OR destinationtranslatedaddress="198.244.207.203" AND translatedport=2076)
index=activity AND rg_functionality="Web Proxy" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="208.115.230.243" AND destinationport=16697 OR destinationaddress="185.126.239.207" AND destinationport=26630 OR destinationaddress="213.183.57.174" AND destinationport=12517 OR destinationaddress="213.183.57.72" AND destinationport=12517 OR destinationaddress="213.183.56.201" AND destinationport=12517 OR destinationaddress="95.164.45.27" AND destinationport=17426 OR destinationaddress="45.120.178.161" AND destinationport=11013 OR destinationaddress="176.120.74.3" AND destinationport=17268 OR destinationaddress="92.243.64.184" AND destinationport=17146 OR destinationaddress="92.243.64.36" AND destinationport=17146)
index=activity AND rg_functionality="Web Proxy" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="208.115.230.243" AND sourceport=16697 OR sourceaddress="185.126.239.207" AND sourceport=26630 OR sourceaddress="213.183.57.174" AND sourceport=12517 OR sourceaddress="213.183.57.72" AND sourceport=12517 OR sourceaddress="213.183.56.201" AND sourceport=12517 OR sourceaddress="95.164.45.27" AND sourceport=17426 OR sourceaddress="45.120.178.161" AND sourceport=11013 OR sourceaddress="176.120.74.3" AND sourceport=17268 OR sourceaddress="92.243.64.184" AND sourceport=17146 OR sourceaddress="92.243.64.36" AND sourceport=17146)
index=activity AND rg_functionality="Web Proxy" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="208.115.230.243" AND sourceport=16697 OR translatedipaddress="185.126.239.207" AND sourceport=26630 OR translatedipaddress="213.183.57.174" AND sourceport=12517 OR translatedipaddress="213.183.57.72" AND sourceport=12517 OR translatedipaddress="213.183.56.201" AND sourceport=12517 OR translatedipaddress="95.164.45.27" AND sourceport=17426 OR translatedipaddress="45.120.178.161" AND sourceport=11013 OR translatedipaddress="176.120.74.3" AND sourceport=17268 OR translatedipaddress="92.243.64.184" AND sourceport=17146 OR translatedipaddress="92.243.64.36" AND sourceport=17146)
index=activity AND rg_functionality="Web Proxy" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND destinationport=16697 OR destinationtranslatedaddress="185.126.239.207" AND destinationport=26630 OR destinationtranslatedaddress="213.183.57.174" AND destinationport=12517 OR destinationtranslatedaddress="213.183.57.72" AND destinationport=12517 OR destinationtranslatedaddress="213.183.56.201" AND destinationport=12517 OR destinationtranslatedaddress="95.164.45.27" AND destinationport=17426 OR destinationtranslatedaddress="45.120.178.161" AND destinationport=11013 OR destinationtranslatedaddress="176.120.74.3" AND destinationport=17268 OR destinationtranslatedaddress="92.243.64.184" AND destinationport=17146 OR destinationtranslatedaddress="92.243.64.36" AND destinationport=17146)
index=activity AND rg_functionality="Web Proxy" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND destinationtranslatedport=16697 OR destinationtranslatedaddress="185.126.239.207" AND destinationtranslatedport=26630 OR destinationtranslatedaddress="213.183.57.174" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="213.183.57.72" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="213.183.56.201" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="95.164.45.27" AND destinationtranslatedport=17426 OR destinationtranslatedaddress="45.120.178.161" AND destinationtranslatedport=11013 OR destinationtranslatedaddress="176.120.74.3" AND destinationtranslatedport=17268 OR destinationtranslatedaddress="92.243.64.184" AND destinationtranslatedport=17146 OR destinationtranslatedaddress="92.243.64.36" AND destinationtranslatedport=17146)
index=activity AND rg_functionality="Web Proxy" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND translatedport=16697 OR destinationtranslatedaddress="185.126.239.207" AND translatedport=26630 OR destinationtranslatedaddress="213.183.57.174" AND translatedport=12517 OR destinationtranslatedaddress="213.183.57.72" AND translatedport=12517 OR destinationtranslatedaddress="213.183.56.201" AND translatedport=12517 OR destinationtranslatedaddress="95.164.45.27" AND translatedport=17426 OR destinationtranslatedaddress="45.120.178.161" AND translatedport=11013 OR destinationtranslatedaddress="176.120.74.3" AND translatedport=17268 OR destinationtranslatedaddress="92.243.64.184" AND translatedport=17146 OR destinationtranslatedaddress="92.243.64.36" AND translatedport=17146)
index=activity AND rg_functionality="Web Proxy" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="89.31.120.126" AND destinationport=11578 OR destinationaddress="91.132.93.33" AND destinationport=11578 OR destinationaddress="91.132.95.28" AND destinationport=8773 OR destinationaddress="91.132.95.204" AND destinationport=8773 OR destinationaddress="91.132.95.135" AND destinationport=8773 OR destinationaddress="194.233.174.22" AND destinationport=45358)
index=activity AND rg_functionality="Web Proxy" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="89.31.120.126" AND sourceport=11578 OR sourceaddress="91.132.93.33" AND sourceport=11578 OR sourceaddress="91.132.95.28" AND sourceport=8773 OR sourceaddress="91.132.95.204" AND sourceport=8773 OR sourceaddress="91.132.95.135" AND sourceport=8773 OR sourceaddress="194.233.174.22" AND sourceport=45358)
index=activity AND rg_functionality="Web Proxy" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="89.31.120.126" AND sourceport=11578 OR translatedipaddress="91.132.93.33" AND sourceport=11578 OR translatedipaddress="91.132.95.28" AND sourceport=8773 OR translatedipaddress="91.132.95.204" AND sourceport=8773 OR translatedipaddress="91.132.95.135" AND sourceport=8773 OR translatedipaddress="194.233.174.22" AND sourceport=45358)
index=activity AND rg_functionality="Web Proxy" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND destinationport=11578 OR destinationtranslatedaddress="91.132.93.33" AND destinationport=11578 OR destinationtranslatedaddress="91.132.95.28" AND destinationport=8773 OR destinationtranslatedaddress="91.132.95.204" AND destinationport=8773 OR destinationtranslatedaddress="91.132.95.135" AND destinationport=8773 OR destinationtranslatedaddress="194.233.174.22" AND destinationport=45358)
index=activity AND rg_functionality="Web Proxy" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND destinationtranslatedport=11578 OR destinationtranslatedaddress="91.132.93.33" AND destinationtranslatedport=11578 OR destinationtranslatedaddress="91.132.95.28" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="91.132.95.204" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="91.132.95.135" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="194.233.174.22" AND destinationtranslatedport=45358)
index=activity AND rg_functionality="Web Proxy" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND translatedport=11578 OR destinationtranslatedaddress="91.132.93.33" AND translatedport=11578 OR destinationtranslatedaddress="91.132.95.28" AND translatedport=8773 OR destinationtranslatedaddress="91.132.95.204" AND translatedport=8773 OR destinationtranslatedaddress="91.132.95.135" AND translatedport=8773 OR destinationtranslatedaddress="194.233.174.22" AND translatedport=45358)
index=activity AND rg_functionality="Flow" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="158.255.212.173" AND destinationport=10862 OR destinationaddress="151.236.25.126" AND destinationport=11331 OR destinationaddress="158.255.215.49" AND destinationport=23079 OR destinationaddress="185.26.239.98" AND destinationport=11076 OR destinationaddress="151.236.25.10" AND destinationport=7205 OR destinationaddress="37.235.53.217" AND destinationport=1358 OR destinationaddress="151.236.23.232" AND destinationport=763 OR destinationaddress="37.235.56.204" AND destinationport=24239 OR destinationaddress="162.252.175.122" AND destinationport=4126 OR destinationaddress="162.252.175.136" AND destinationport=11077)
index=activity AND rg_functionality="Flow" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="158.255.212.173" AND sourceport=10862 OR sourceaddress="151.236.25.126" AND sourceport=11331 OR sourceaddress="158.255.215.49" AND sourceport=23079 OR sourceaddress="185.26.239.98" AND sourceport=11076 OR sourceaddress="151.236.25.10" AND sourceport=7205 OR sourceaddress="37.235.53.217" AND sourceport=1358 OR sourceaddress="151.236.23.232" AND sourceport=763 OR sourceaddress="37.235.56.204" AND sourceport=24239 OR sourceaddress="162.252.175.122" AND sourceport=4126 OR sourceaddress="162.252.175.136" AND sourceport=11077)
index=activity AND rg_functionality="Flow" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="158.255.212.173" AND sourceport=10862 OR translatedipaddress="151.236.25.126" AND sourceport=11331 OR translatedipaddress="158.255.215.49" AND sourceport=23079 OR translatedipaddress="185.26.239.98" AND sourceport=11076 OR translatedipaddress="151.236.25.10" AND sourceport=7205 OR translatedipaddress="37.235.53.217" AND sourceport=1358 OR translatedipaddress="151.236.23.232" AND sourceport=763 OR translatedipaddress="37.235.56.204" AND sourceport=24239 OR translatedipaddress="162.252.175.122" AND sourceport=4126 OR translatedipaddress="162.252.175.136" AND sourceport=11077)
index=activity AND rg_functionality="Flow" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND destinationport=10862 OR destinationtranslatedaddress="151.236.25.126" AND destinationport=11331 OR destinationtranslatedaddress="158.255.215.49" AND destinationport=23079 OR destinationtranslatedaddress="185.26.239.98" AND destinationport=11076 OR destinationtranslatedaddress="151.236.25.10" AND destinationport=7205 OR destinationtranslatedaddress="37.235.53.217" AND destinationport=1358 OR destinationtranslatedaddress="151.236.23.232" AND destinationport=763 OR destinationtranslatedaddress="37.235.56.204" AND destinationport=24239 OR destinationtranslatedaddress="162.252.175.122" AND destinationport=4126 OR destinationtranslatedaddress="162.252.175.136" AND destinationport=11077)
index=activity AND rg_functionality="Flow" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND destinationtranslatedport=10862 OR destinationtranslatedaddress="151.236.25.126" AND destinationtranslatedport=11331 OR destinationtranslatedaddress="158.255.215.49" AND destinationtranslatedport=23079 OR destinationtranslatedaddress="185.26.239.98" AND destinationtranslatedport=11076 OR destinationtranslatedaddress="151.236.25.10" AND destinationtranslatedport=7205 OR destinationtranslatedaddress="37.235.53.217" AND destinationtranslatedport=1358 OR destinationtranslatedaddress="151.236.23.232" AND destinationtranslatedport=763 OR destinationtranslatedaddress="37.235.56.204" AND destinationtranslatedport=24239 OR destinationtranslatedaddress="162.252.175.122" AND destinationtranslatedport=4126 OR destinationtranslatedaddress="162.252.175.136" AND destinationtranslatedport=11077)
index=activity AND rg_functionality="Flow" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND translatedport=10862 OR destinationtranslatedaddress="151.236.25.126" AND translatedport=11331 OR destinationtranslatedaddress="158.255.215.49" AND translatedport=23079 OR destinationtranslatedaddress="185.26.239.98" AND translatedport=11076 OR destinationtranslatedaddress="151.236.25.10" AND translatedport=7205 OR destinationtranslatedaddress="37.235.53.217" AND translatedport=1358 OR destinationtranslatedaddress="151.236.23.232" AND translatedport=763 OR destinationtranslatedaddress="37.235.56.204" AND translatedport=24239 OR destinationtranslatedaddress="162.252.175.122" AND translatedport=4126 OR destinationtranslatedaddress="162.252.175.136" AND translatedport=11077)
index=activity AND rg_functionality="Flow" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="162.252.175.163" AND destinationport=28693 OR destinationaddress="162.252.175.90" AND destinationport=845 OR destinationaddress="162.252.175.109" AND destinationport=28330 OR destinationaddress="151.236.20.39" AND destinationport=5524 OR destinationaddress="158.255.208.140" AND destinationport=86 OR destinationaddress="194.68.27.149" AND destinationport=13106 OR destinationaddress="194.68.27.176" AND destinationport=6460 OR destinationaddress="37.143.128.223" AND destinationport=16223 OR destinationaddress="31.40.212.130" AND destinationport=7225 OR destinationaddress="198.244.207.203" AND destinationport=2076)
index=activity AND rg_functionality="Flow" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="162.252.175.163" AND sourceport=28693 OR sourceaddress="162.252.175.90" AND sourceport=845 OR sourceaddress="162.252.175.109" AND sourceport=28330 OR sourceaddress="151.236.20.39" AND sourceport=5524 OR sourceaddress="158.255.208.140" AND sourceport=86 OR sourceaddress="194.68.27.149" AND sourceport=13106 OR sourceaddress="194.68.27.176" AND sourceport=6460 OR sourceaddress="37.143.128.223" AND sourceport=16223 OR sourceaddress="31.40.212.130" AND sourceport=7225 OR sourceaddress="198.244.207.203" AND sourceport=2076)
index=activity AND rg_functionality="Flow" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="162.252.175.163" AND sourceport=28693 OR translatedipaddress="162.252.175.90" AND sourceport=845 OR translatedipaddress="162.252.175.109" AND sourceport=28330 OR translatedipaddress="151.236.20.39" AND sourceport=5524 OR translatedipaddress="158.255.208.140" AND sourceport=86 OR translatedipaddress="194.68.27.149" AND sourceport=13106 OR translatedipaddress="194.68.27.176" AND sourceport=6460 OR translatedipaddress="37.143.128.223" AND sourceport=16223 OR translatedipaddress="31.40.212.130" AND sourceport=7225 OR translatedipaddress="198.244.207.203" AND sourceport=2076)
index=activity AND rg_functionality="Flow" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND destinationport=28693 OR destinationtranslatedaddress="162.252.175.90" AND destinationport=845 OR destinationtranslatedaddress="162.252.175.109" AND destinationport=28330 OR destinationtranslatedaddress="151.236.20.39" AND destinationport=5524 OR destinationtranslatedaddress="158.255.208.140" AND destinationport=86 OR destinationtranslatedaddress="194.68.27.149" AND destinationport=13106 OR destinationtranslatedaddress="194.68.27.176" AND destinationport=6460 OR destinationtranslatedaddress="37.143.128.223" AND destinationport=16223 OR destinationtranslatedaddress="31.40.212.130" AND destinationport=7225 OR destinationtranslatedaddress="198.244.207.203" AND destinationport=2076)
index=activity AND rg_functionality="Flow" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND destinationtranslatedport=28693 OR destinationtranslatedaddress="162.252.175.90" AND destinationtranslatedport=845 OR destinationtranslatedaddress="162.252.175.109" AND destinationtranslatedport=28330 OR destinationtranslatedaddress="151.236.20.39" AND destinationtranslatedport=5524 OR destinationtranslatedaddress="158.255.208.140" AND destinationtranslatedport=86 OR destinationtranslatedaddress="194.68.27.149" AND destinationtranslatedport=13106 OR destinationtranslatedaddress="194.68.27.176" AND destinationtranslatedport=6460 OR destinationtranslatedaddress="37.143.128.223" AND destinationtranslatedport=16223 OR destinationtranslatedaddress="31.40.212.130" AND destinationtranslatedport=7225 OR destinationtranslatedaddress="198.244.207.203" AND destinationtranslatedport=2076)
index=activity AND rg_functionality="Flow" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND translatedport=28693 OR destinationtranslatedaddress="162.252.175.90" AND translatedport=845 OR destinationtranslatedaddress="162.252.175.109" AND translatedport=28330 OR destinationtranslatedaddress="151.236.20.39" AND translatedport=5524 OR destinationtranslatedaddress="158.255.208.140" AND translatedport=86 OR destinationtranslatedaddress="194.68.27.149" AND translatedport=13106 OR destinationtranslatedaddress="194.68.27.176" AND translatedport=6460 OR destinationtranslatedaddress="37.143.128.223" AND translatedport=16223 OR destinationtranslatedaddress="31.40.212.130" AND translatedport=7225 OR destinationtranslatedaddress="198.244.207.203" AND translatedport=2076)
index=activity AND rg_functionality="Flow" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="208.115.230.243" AND destinationport=16697 OR destinationaddress="185.126.239.207" AND destinationport=26630 OR destinationaddress="213.183.57.174" AND destinationport=12517 OR destinationaddress="213.183.57.72" AND destinationport=12517 OR destinationaddress="213.183.56.201" AND destinationport=12517 OR destinationaddress="95.164.45.27" AND destinationport=17426 OR destinationaddress="45.120.178.161" AND destinationport=11013 OR destinationaddress="176.120.74.3" AND destinationport=17268 OR destinationaddress="92.243.64.184" AND destinationport=17146 OR destinationaddress="92.243.64.36" AND destinationport=17146)
index=activity AND rg_functionality="Flow" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="208.115.230.243" AND sourceport=16697 OR sourceaddress="185.126.239.207" AND sourceport=26630 OR sourceaddress="213.183.57.174" AND sourceport=12517 OR sourceaddress="213.183.57.72" AND sourceport=12517 OR sourceaddress="213.183.56.201" AND sourceport=12517 OR sourceaddress="95.164.45.27" AND sourceport=17426 OR sourceaddress="45.120.178.161" AND sourceport=11013 OR sourceaddress="176.120.74.3" AND sourceport=17268 OR sourceaddress="92.243.64.184" AND sourceport=17146 OR sourceaddress="92.243.64.36" AND sourceport=17146)
index=activity AND rg_functionality="Flow" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="208.115.230.243" AND sourceport=16697 OR translatedipaddress="185.126.239.207" AND sourceport=26630 OR translatedipaddress="213.183.57.174" AND sourceport=12517 OR translatedipaddress="213.183.57.72" AND sourceport=12517 OR translatedipaddress="213.183.56.201" AND sourceport=12517 OR translatedipaddress="95.164.45.27" AND sourceport=17426 OR translatedipaddress="45.120.178.161" AND sourceport=11013 OR translatedipaddress="176.120.74.3" AND sourceport=17268 OR translatedipaddress="92.243.64.184" AND sourceport=17146 OR translatedipaddress="92.243.64.36" AND sourceport=17146)
index=activity AND rg_functionality="Flow" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND destinationport=16697 OR destinationtranslatedaddress="185.126.239.207" AND destinationport=26630 OR destinationtranslatedaddress="213.183.57.174" AND destinationport=12517 OR destinationtranslatedaddress="213.183.57.72" AND destinationport=12517 OR destinationtranslatedaddress="213.183.56.201" AND destinationport=12517 OR destinationtranslatedaddress="95.164.45.27" AND destinationport=17426 OR destinationtranslatedaddress="45.120.178.161" AND destinationport=11013 OR destinationtranslatedaddress="176.120.74.3" AND destinationport=17268 OR destinationtranslatedaddress="92.243.64.184" AND destinationport=17146 OR destinationtranslatedaddress="92.243.64.36" AND destinationport=17146)
index=activity AND rg_functionality="Flow" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND destinationtranslatedport=16697 OR destinationtranslatedaddress="185.126.239.207" AND destinationtranslatedport=26630 OR destinationtranslatedaddress="213.183.57.174" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="213.183.57.72" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="213.183.56.201" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="95.164.45.27" AND destinationtranslatedport=17426 OR destinationtranslatedaddress="45.120.178.161" AND destinationtranslatedport=11013 OR destinationtranslatedaddress="176.120.74.3" AND destinationtranslatedport=17268 OR destinationtranslatedaddress="92.243.64.184" AND destinationtranslatedport=17146 OR destinationtranslatedaddress="92.243.64.36" AND destinationtranslatedport=17146)
index=activity AND rg_functionality="Flow" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND translatedport=16697 OR destinationtranslatedaddress="185.126.239.207" AND translatedport=26630 OR destinationtranslatedaddress="213.183.57.174" AND translatedport=12517 OR destinationtranslatedaddress="213.183.57.72" AND translatedport=12517 OR destinationtranslatedaddress="213.183.56.201" AND translatedport=12517 OR destinationtranslatedaddress="95.164.45.27" AND translatedport=17426 OR destinationtranslatedaddress="45.120.178.161" AND translatedport=11013 OR destinationtranslatedaddress="176.120.74.3" AND translatedport=17268 OR destinationtranslatedaddress="92.243.64.184" AND translatedport=17146 OR destinationtranslatedaddress="92.243.64.36" AND translatedport=17146)
index=activity AND rg_functionality="Flow" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="89.31.120.126" AND destinationport=11578 OR destinationaddress="91.132.93.33" AND destinationport=11578 OR destinationaddress="91.132.95.28" AND destinationport=8773 OR destinationaddress="91.132.95.204" AND destinationport=8773 OR destinationaddress="91.132.95.135" AND destinationport=8773 OR destinationaddress="194.233.174.22" AND destinationport=45358)
index=activity AND rg_functionality="Flow" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="89.31.120.126" AND sourceport=11578 OR sourceaddress="91.132.93.33" AND sourceport=11578 OR sourceaddress="91.132.95.28" AND sourceport=8773 OR sourceaddress="91.132.95.204" AND sourceport=8773 OR sourceaddress="91.132.95.135" AND sourceport=8773 OR sourceaddress="194.233.174.22" AND sourceport=45358)
index=activity AND rg_functionality="Flow" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="89.31.120.126" AND sourceport=11578 OR translatedipaddress="91.132.93.33" AND sourceport=11578 OR translatedipaddress="91.132.95.28" AND sourceport=8773 OR translatedipaddress="91.132.95.204" AND sourceport=8773 OR translatedipaddress="91.132.95.135" AND sourceport=8773 OR translatedipaddress="194.233.174.22" AND sourceport=45358)
index=activity AND rg_functionality="Flow" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND destinationport=11578 OR destinationtranslatedaddress="91.132.93.33" AND destinationport=11578 OR destinationtranslatedaddress="91.132.95.28" AND destinationport=8773 OR destinationtranslatedaddress="91.132.95.204" AND destinationport=8773 OR destinationtranslatedaddress="91.132.95.135" AND destinationport=8773 OR destinationtranslatedaddress="194.233.174.22" AND destinationport=45358)
index=activity AND rg_functionality="Flow" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND destinationtranslatedport=11578 OR destinationtranslatedaddress="91.132.93.33" AND destinationtranslatedport=11578 OR destinationtranslatedaddress="91.132.95.28" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="91.132.95.204" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="91.132.95.135" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="194.233.174.22" AND destinationtranslatedport=45358)
index=activity AND rg_functionality="Flow" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND translatedport=11578 OR destinationtranslatedaddress="91.132.93.33" AND translatedport=11578 OR destinationtranslatedaddress="91.132.95.28" AND translatedport=8773 OR destinationtranslatedaddress="91.132.95.204" AND translatedport=8773 OR destinationtranslatedaddress="91.132.95.135" AND translatedport=8773 OR destinationtranslatedaddress="194.233.174.22" AND translatedport=45358)
index=activity AND rg_functionality="Web Server" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="158.255.212.173" AND destinationport=10862 OR destinationaddress="151.236.25.126" AND destinationport=11331 OR destinationaddress="158.255.215.49" AND destinationport=23079 OR destinationaddress="185.26.239.98" AND destinationport=11076 OR destinationaddress="151.236.25.10" AND destinationport=7205 OR destinationaddress="37.235.53.217" AND destinationport=1358 OR destinationaddress="151.236.23.232" AND destinationport=763 OR destinationaddress="37.235.56.204" AND destinationport=24239 OR destinationaddress="162.252.175.122" AND destinationport=4126 OR destinationaddress="162.252.175.136" AND destinationport=11077)
index=activity AND rg_functionality="Web Server" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="158.255.212.173" AND sourceport=10862 OR sourceaddress="151.236.25.126" AND sourceport=11331 OR sourceaddress="158.255.215.49" AND sourceport=23079 OR sourceaddress="185.26.239.98" AND sourceport=11076 OR sourceaddress="151.236.25.10" AND sourceport=7205 OR sourceaddress="37.235.53.217" AND sourceport=1358 OR sourceaddress="151.236.23.232" AND sourceport=763 OR sourceaddress="37.235.56.204" AND sourceport=24239 OR sourceaddress="162.252.175.122" AND sourceport=4126 OR sourceaddress="162.252.175.136" AND sourceport=11077)
index=activity AND rg_functionality="Web Server" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="158.255.212.173" AND sourceport=10862 OR translatedipaddress="151.236.25.126" AND sourceport=11331 OR translatedipaddress="158.255.215.49" AND sourceport=23079 OR translatedipaddress="185.26.239.98" AND sourceport=11076 OR translatedipaddress="151.236.25.10" AND sourceport=7205 OR translatedipaddress="37.235.53.217" AND sourceport=1358 OR translatedipaddress="151.236.23.232" AND sourceport=763 OR translatedipaddress="37.235.56.204" AND sourceport=24239 OR translatedipaddress="162.252.175.122" AND sourceport=4126 OR translatedipaddress="162.252.175.136" AND sourceport=11077)
index=activity AND rg_functionality="Web Server" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND destinationport=10862 OR destinationtranslatedaddress="151.236.25.126" AND destinationport=11331 OR destinationtranslatedaddress="158.255.215.49" AND destinationport=23079 OR destinationtranslatedaddress="185.26.239.98" AND destinationport=11076 OR destinationtranslatedaddress="151.236.25.10" AND destinationport=7205 OR destinationtranslatedaddress="37.235.53.217" AND destinationport=1358 OR destinationtranslatedaddress="151.236.23.232" AND destinationport=763 OR destinationtranslatedaddress="37.235.56.204" AND destinationport=24239 OR destinationtranslatedaddress="162.252.175.122" AND destinationport=4126 OR destinationtranslatedaddress="162.252.175.136" AND destinationport=11077)
index=activity AND rg_functionality="Web Server" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND destinationtranslatedport=10862 OR destinationtranslatedaddress="151.236.25.126" AND destinationtranslatedport=11331 OR destinationtranslatedaddress="158.255.215.49" AND destinationtranslatedport=23079 OR destinationtranslatedaddress="185.26.239.98" AND destinationtranslatedport=11076 OR destinationtranslatedaddress="151.236.25.10" AND destinationtranslatedport=7205 OR destinationtranslatedaddress="37.235.53.217" AND destinationtranslatedport=1358 OR destinationtranslatedaddress="151.236.23.232" AND destinationtranslatedport=763 OR destinationtranslatedaddress="37.235.56.204" AND destinationtranslatedport=24239 OR destinationtranslatedaddress="162.252.175.122" AND destinationtranslatedport=4126 OR destinationtranslatedaddress="162.252.175.136" AND destinationtranslatedport=11077)
index=activity AND rg_functionality="Web Server" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND translatedport=10862 OR destinationtranslatedaddress="151.236.25.126" AND translatedport=11331 OR destinationtranslatedaddress="158.255.215.49" AND translatedport=23079 OR destinationtranslatedaddress="185.26.239.98" AND translatedport=11076 OR destinationtranslatedaddress="151.236.25.10" AND translatedport=7205 OR destinationtranslatedaddress="37.235.53.217" AND translatedport=1358 OR destinationtranslatedaddress="151.236.23.232" AND translatedport=763 OR destinationtranslatedaddress="37.235.56.204" AND translatedport=24239 OR destinationtranslatedaddress="162.252.175.122" AND translatedport=4126 OR destinationtranslatedaddress="162.252.175.136" AND translatedport=11077)
index=activity AND rg_functionality="Web Server" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="162.252.175.163" AND destinationport=28693 OR destinationaddress="162.252.175.90" AND destinationport=845 OR destinationaddress="162.252.175.109" AND destinationport=28330 OR destinationaddress="151.236.20.39" AND destinationport=5524 OR destinationaddress="158.255.208.140" AND destinationport=86 OR destinationaddress="194.68.27.149" AND destinationport=13106 OR destinationaddress="194.68.27.176" AND destinationport=6460 OR destinationaddress="37.143.128.223" AND destinationport=16223 OR destinationaddress="31.40.212.130" AND destinationport=7225 OR destinationaddress="198.244.207.203" AND destinationport=2076)
index=activity AND rg_functionality="Web Server" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="162.252.175.163" AND sourceport=28693 OR sourceaddress="162.252.175.90" AND sourceport=845 OR sourceaddress="162.252.175.109" AND sourceport=28330 OR sourceaddress="151.236.20.39" AND sourceport=5524 OR sourceaddress="158.255.208.140" AND sourceport=86 OR sourceaddress="194.68.27.149" AND sourceport=13106 OR sourceaddress="194.68.27.176" AND sourceport=6460 OR sourceaddress="37.143.128.223" AND sourceport=16223 OR sourceaddress="31.40.212.130" AND sourceport=7225 OR sourceaddress="198.244.207.203" AND sourceport=2076)
index=activity AND rg_functionality="Web Server" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="162.252.175.163" AND sourceport=28693 OR translatedipaddress="162.252.175.90" AND sourceport=845 OR translatedipaddress="162.252.175.109" AND sourceport=28330 OR translatedipaddress="151.236.20.39" AND sourceport=5524 OR translatedipaddress="158.255.208.140" AND sourceport=86 OR translatedipaddress="194.68.27.149" AND sourceport=13106 OR translatedipaddress="194.68.27.176" AND sourceport=6460 OR translatedipaddress="37.143.128.223" AND sourceport=16223 OR translatedipaddress="31.40.212.130" AND sourceport=7225 OR translatedipaddress="198.244.207.203" AND sourceport=2076)
index=activity AND rg_functionality="Web Server" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND destinationport=28693 OR destinationtranslatedaddress="162.252.175.90" AND destinationport=845 OR destinationtranslatedaddress="162.252.175.109" AND destinationport=28330 OR destinationtranslatedaddress="151.236.20.39" AND destinationport=5524 OR destinationtranslatedaddress="158.255.208.140" AND destinationport=86 OR destinationtranslatedaddress="194.68.27.149" AND destinationport=13106 OR destinationtranslatedaddress="194.68.27.176" AND destinationport=6460 OR destinationtranslatedaddress="37.143.128.223" AND destinationport=16223 OR destinationtranslatedaddress="31.40.212.130" AND destinationport=7225 OR destinationtranslatedaddress="198.244.207.203" AND destinationport=2076)
index=activity AND rg_functionality="Web Server" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND destinationtranslatedport=28693 OR destinationtranslatedaddress="162.252.175.90" AND destinationtranslatedport=845 OR destinationtranslatedaddress="162.252.175.109" AND destinationtranslatedport=28330 OR destinationtranslatedaddress="151.236.20.39" AND destinationtranslatedport=5524 OR destinationtranslatedaddress="158.255.208.140" AND destinationtranslatedport=86 OR destinationtranslatedaddress="194.68.27.149" AND destinationtranslatedport=13106 OR destinationtranslatedaddress="194.68.27.176" AND destinationtranslatedport=6460 OR destinationtranslatedaddress="37.143.128.223" AND destinationtranslatedport=16223 OR destinationtranslatedaddress="31.40.212.130" AND destinationtranslatedport=7225 OR destinationtranslatedaddress="198.244.207.203" AND destinationtranslatedport=2076)
index=activity AND rg_functionality="Web Server" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND translatedport=28693 OR destinationtranslatedaddress="162.252.175.90" AND translatedport=845 OR destinationtranslatedaddress="162.252.175.109" AND translatedport=28330 OR destinationtranslatedaddress="151.236.20.39" AND translatedport=5524 OR destinationtranslatedaddress="158.255.208.140" AND translatedport=86 OR destinationtranslatedaddress="194.68.27.149" AND translatedport=13106 OR destinationtranslatedaddress="194.68.27.176" AND translatedport=6460 OR destinationtranslatedaddress="37.143.128.223" AND translatedport=16223 OR destinationtranslatedaddress="31.40.212.130" AND translatedport=7225 OR destinationtranslatedaddress="198.244.207.203" AND translatedport=2076)
index=activity AND rg_functionality="Web Server" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="208.115.230.243" AND destinationport=16697 OR destinationaddress="185.126.239.207" AND destinationport=26630 OR destinationaddress="213.183.57.174" AND destinationport=12517 OR destinationaddress="213.183.57.72" AND destinationport=12517 OR destinationaddress="213.183.56.201" AND destinationport=12517 OR destinationaddress="95.164.45.27" AND destinationport=17426 OR destinationaddress="45.120.178.161" AND destinationport=11013 OR destinationaddress="176.120.74.3" AND destinationport=17268 OR destinationaddress="92.243.64.184" AND destinationport=17146 OR destinationaddress="92.243.64.36" AND destinationport=17146)
index=activity AND rg_functionality="Web Server" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="208.115.230.243" AND sourceport=16697 OR sourceaddress="185.126.239.207" AND sourceport=26630 OR sourceaddress="213.183.57.174" AND sourceport=12517 OR sourceaddress="213.183.57.72" AND sourceport=12517 OR sourceaddress="213.183.56.201" AND sourceport=12517 OR sourceaddress="95.164.45.27" AND sourceport=17426 OR sourceaddress="45.120.178.161" AND sourceport=11013 OR sourceaddress="176.120.74.3" AND sourceport=17268 OR sourceaddress="92.243.64.184" AND sourceport=17146 OR sourceaddress="92.243.64.36" AND sourceport=17146)
index=activity AND rg_functionality="Web Server" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="208.115.230.243" AND sourceport=16697 OR translatedipaddress="185.126.239.207" AND sourceport=26630 OR translatedipaddress="213.183.57.174" AND sourceport=12517 OR translatedipaddress="213.183.57.72" AND sourceport=12517 OR translatedipaddress="213.183.56.201" AND sourceport=12517 OR translatedipaddress="95.164.45.27" AND sourceport=17426 OR translatedipaddress="45.120.178.161" AND sourceport=11013 OR translatedipaddress="176.120.74.3" AND sourceport=17268 OR translatedipaddress="92.243.64.184" AND sourceport=17146 OR translatedipaddress="92.243.64.36" AND sourceport=17146)
index=activity AND rg_functionality="Web Server" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND destinationport=16697 OR destinationtranslatedaddress="185.126.239.207" AND destinationport=26630 OR destinationtranslatedaddress="213.183.57.174" AND destinationport=12517 OR destinationtranslatedaddress="213.183.57.72" AND destinationport=12517 OR destinationtranslatedaddress="213.183.56.201" AND destinationport=12517 OR destinationtranslatedaddress="95.164.45.27" AND destinationport=17426 OR destinationtranslatedaddress="45.120.178.161" AND destinationport=11013 OR destinationtranslatedaddress="176.120.74.3" AND destinationport=17268 OR destinationtranslatedaddress="92.243.64.184" AND destinationport=17146 OR destinationtranslatedaddress="92.243.64.36" AND destinationport=17146)
index=activity AND rg_functionality="Web Server" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND destinationtranslatedport=16697 OR destinationtranslatedaddress="185.126.239.207" AND destinationtranslatedport=26630 OR destinationtranslatedaddress="213.183.57.174" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="213.183.57.72" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="213.183.56.201" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="95.164.45.27" AND destinationtranslatedport=17426 OR destinationtranslatedaddress="45.120.178.161" AND destinationtranslatedport=11013 OR destinationtranslatedaddress="176.120.74.3" AND destinationtranslatedport=17268 OR destinationtranslatedaddress="92.243.64.184" AND destinationtranslatedport=17146 OR destinationtranslatedaddress="92.243.64.36" AND destinationtranslatedport=17146)
index=activity AND rg_functionality="Web Server" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND translatedport=16697 OR destinationtranslatedaddress="185.126.239.207" AND translatedport=26630 OR destinationtranslatedaddress="213.183.57.174" AND translatedport=12517 OR destinationtranslatedaddress="213.183.57.72" AND translatedport=12517 OR destinationtranslatedaddress="213.183.56.201" AND translatedport=12517 OR destinationtranslatedaddress="95.164.45.27" AND translatedport=17426 OR destinationtranslatedaddress="45.120.178.161" AND translatedport=11013 OR destinationtranslatedaddress="176.120.74.3" AND translatedport=17268 OR destinationtranslatedaddress="92.243.64.184" AND translatedport=17146 OR destinationtranslatedaddress="92.243.64.36" AND translatedport=17146)
index=activity AND rg_functionality="Web Server" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="89.31.120.126" AND destinationport=11578 OR destinationaddress="91.132.93.33" AND destinationport=11578 OR destinationaddress="91.132.95.28" AND destinationport=8773 OR destinationaddress="91.132.95.204" AND destinationport=8773 OR destinationaddress="91.132.95.135" AND destinationport=8773 OR destinationaddress="194.233.174.22" AND destinationport=45358)
index=activity AND rg_functionality="Web Server" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="89.31.120.126" AND sourceport=11578 OR sourceaddress="91.132.93.33" AND sourceport=11578 OR sourceaddress="91.132.95.28" AND sourceport=8773 OR sourceaddress="91.132.95.204" AND sourceport=8773 OR sourceaddress="91.132.95.135" AND sourceport=8773 OR sourceaddress="194.233.174.22" AND sourceport=45358)
index=activity AND rg_functionality="Web Server" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="89.31.120.126" AND sourceport=11578 OR translatedipaddress="91.132.93.33" AND sourceport=11578 OR translatedipaddress="91.132.95.28" AND sourceport=8773 OR translatedipaddress="91.132.95.204" AND sourceport=8773 OR translatedipaddress="91.132.95.135" AND sourceport=8773 OR translatedipaddress="194.233.174.22" AND sourceport=45358)
index=activity AND rg_functionality="Web Server" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND destinationport=11578 OR destinationtranslatedaddress="91.132.93.33" AND destinationport=11578 OR destinationtranslatedaddress="91.132.95.28" AND destinationport=8773 OR destinationtranslatedaddress="91.132.95.204" AND destinationport=8773 OR destinationtranslatedaddress="91.132.95.135" AND destinationport=8773 OR destinationtranslatedaddress="194.233.174.22" AND destinationport=45358)
index=activity AND rg_functionality="Web Server" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND destinationtranslatedport=11578 OR destinationtranslatedaddress="91.132.93.33" AND destinationtranslatedport=11578 OR destinationtranslatedaddress="91.132.95.28" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="91.132.95.204" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="91.132.95.135" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="194.233.174.22" AND destinationtranslatedport=45358)
index=activity AND rg_functionality="Web Server" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND translatedport=11578 OR destinationtranslatedaddress="91.132.93.33" AND translatedport=11578 OR destinationtranslatedaddress="91.132.95.28" AND translatedport=8773 OR destinationtranslatedaddress="91.132.95.204" AND translatedport=8773 OR destinationtranslatedaddress="91.132.95.135" AND translatedport=8773 OR destinationtranslatedaddress="194.233.174.22" AND translatedport=45358)
index=activity AND rg_functionality="Web Application Firewall" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="158.255.212.173" AND destinationport=10862 OR destinationaddress="151.236.25.126" AND destinationport=11331 OR destinationaddress="158.255.215.49" AND destinationport=23079 OR destinationaddress="185.26.239.98" AND destinationport=11076 OR destinationaddress="151.236.25.10" AND destinationport=7205 OR destinationaddress="37.235.53.217" AND destinationport=1358 OR destinationaddress="151.236.23.232" AND destinationport=763 OR destinationaddress="37.235.56.204" AND destinationport=24239 OR destinationaddress="162.252.175.122" AND destinationport=4126 OR destinationaddress="162.252.175.136" AND destinationport=11077)
index=activity AND rg_functionality="Web Application Firewall" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="158.255.212.173" AND sourceport=10862 OR sourceaddress="151.236.25.126" AND sourceport=11331 OR sourceaddress="158.255.215.49" AND sourceport=23079 OR sourceaddress="185.26.239.98" AND sourceport=11076 OR sourceaddress="151.236.25.10" AND sourceport=7205 OR sourceaddress="37.235.53.217" AND sourceport=1358 OR sourceaddress="151.236.23.232" AND sourceport=763 OR sourceaddress="37.235.56.204" AND sourceport=24239 OR sourceaddress="162.252.175.122" AND sourceport=4126 OR sourceaddress="162.252.175.136" AND sourceport=11077)
index=activity AND rg_functionality="Web Application Firewall" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="158.255.212.173" AND sourceport=10862 OR translatedipaddress="151.236.25.126" AND sourceport=11331 OR translatedipaddress="158.255.215.49" AND sourceport=23079 OR translatedipaddress="185.26.239.98" AND sourceport=11076 OR translatedipaddress="151.236.25.10" AND sourceport=7205 OR translatedipaddress="37.235.53.217" AND sourceport=1358 OR translatedipaddress="151.236.23.232" AND sourceport=763 OR translatedipaddress="37.235.56.204" AND sourceport=24239 OR translatedipaddress="162.252.175.122" AND sourceport=4126 OR translatedipaddress="162.252.175.136" AND sourceport=11077)
index=activity AND rg_functionality="Web Application Firewall" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND destinationport=10862 OR destinationtranslatedaddress="151.236.25.126" AND destinationport=11331 OR destinationtranslatedaddress="158.255.215.49" AND destinationport=23079 OR destinationtranslatedaddress="185.26.239.98" AND destinationport=11076 OR destinationtranslatedaddress="151.236.25.10" AND destinationport=7205 OR destinationtranslatedaddress="37.235.53.217" AND destinationport=1358 OR destinationtranslatedaddress="151.236.23.232" AND destinationport=763 OR destinationtranslatedaddress="37.235.56.204" AND destinationport=24239 OR destinationtranslatedaddress="162.252.175.122" AND destinationport=4126 OR destinationtranslatedaddress="162.252.175.136" AND destinationport=11077)
index=activity AND rg_functionality="Web Application Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND destinationtranslatedport=10862 OR destinationtranslatedaddress="151.236.25.126" AND destinationtranslatedport=11331 OR destinationtranslatedaddress="158.255.215.49" AND destinationtranslatedport=23079 OR destinationtranslatedaddress="185.26.239.98" AND destinationtranslatedport=11076 OR destinationtranslatedaddress="151.236.25.10" AND destinationtranslatedport=7205 OR destinationtranslatedaddress="37.235.53.217" AND destinationtranslatedport=1358 OR destinationtranslatedaddress="151.236.23.232" AND destinationtranslatedport=763 OR destinationtranslatedaddress="37.235.56.204" AND destinationtranslatedport=24239 OR destinationtranslatedaddress="162.252.175.122" AND destinationtranslatedport=4126 OR destinationtranslatedaddress="162.252.175.136" AND destinationtranslatedport=11077)
index=activity AND rg_functionality="Web Application Firewall" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND translatedport=10862 OR destinationtranslatedaddress="151.236.25.126" AND translatedport=11331 OR destinationtranslatedaddress="158.255.215.49" AND translatedport=23079 OR destinationtranslatedaddress="185.26.239.98" AND translatedport=11076 OR destinationtranslatedaddress="151.236.25.10" AND translatedport=7205 OR destinationtranslatedaddress="37.235.53.217" AND translatedport=1358 OR destinationtranslatedaddress="151.236.23.232" AND translatedport=763 OR destinationtranslatedaddress="37.235.56.204" AND translatedport=24239 OR destinationtranslatedaddress="162.252.175.122" AND translatedport=4126 OR destinationtranslatedaddress="162.252.175.136" AND translatedport=11077)
index=activity AND rg_functionality="Web Application Firewall" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="162.252.175.163" AND destinationport=28693 OR destinationaddress="162.252.175.90" AND destinationport=845 OR destinationaddress="162.252.175.109" AND destinationport=28330 OR destinationaddress="151.236.20.39" AND destinationport=5524 OR destinationaddress="158.255.208.140" AND destinationport=86 OR destinationaddress="194.68.27.149" AND destinationport=13106 OR destinationaddress="194.68.27.176" AND destinationport=6460 OR destinationaddress="37.143.128.223" AND destinationport=16223 OR destinationaddress="31.40.212.130" AND destinationport=7225 OR destinationaddress="198.244.207.203" AND destinationport=2076)
index=activity AND rg_functionality="Web Application Firewall" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="162.252.175.163" AND sourceport=28693 OR sourceaddress="162.252.175.90" AND sourceport=845 OR sourceaddress="162.252.175.109" AND sourceport=28330 OR sourceaddress="151.236.20.39" AND sourceport=5524 OR sourceaddress="158.255.208.140" AND sourceport=86 OR sourceaddress="194.68.27.149" AND sourceport=13106 OR sourceaddress="194.68.27.176" AND sourceport=6460 OR sourceaddress="37.143.128.223" AND sourceport=16223 OR sourceaddress="31.40.212.130" AND sourceport=7225 OR sourceaddress="198.244.207.203" AND sourceport=2076)
index=activity AND rg_functionality="Web Application Firewall" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="162.252.175.163" AND sourceport=28693 OR translatedipaddress="162.252.175.90" AND sourceport=845 OR translatedipaddress="162.252.175.109" AND sourceport=28330 OR translatedipaddress="151.236.20.39" AND sourceport=5524 OR translatedipaddress="158.255.208.140" AND sourceport=86 OR translatedipaddress="194.68.27.149" AND sourceport=13106 OR translatedipaddress="194.68.27.176" AND sourceport=6460 OR translatedipaddress="37.143.128.223" AND sourceport=16223 OR translatedipaddress="31.40.212.130" AND sourceport=7225 OR translatedipaddress="198.244.207.203" AND sourceport=2076)
index=activity AND rg_functionality="Web Application Firewall" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND destinationport=28693 OR destinationtranslatedaddress="162.252.175.90" AND destinationport=845 OR destinationtranslatedaddress="162.252.175.109" AND destinationport=28330 OR destinationtranslatedaddress="151.236.20.39" AND destinationport=5524 OR destinationtranslatedaddress="158.255.208.140" AND destinationport=86 OR destinationtranslatedaddress="194.68.27.149" AND destinationport=13106 OR destinationtranslatedaddress="194.68.27.176" AND destinationport=6460 OR destinationtranslatedaddress="37.143.128.223" AND destinationport=16223 OR destinationtranslatedaddress="31.40.212.130" AND destinationport=7225 OR destinationtranslatedaddress="198.244.207.203" AND destinationport=2076)
index=activity AND rg_functionality="Web Application Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND destinationtranslatedport=28693 OR destinationtranslatedaddress="162.252.175.90" AND destinationtranslatedport=845 OR destinationtranslatedaddress="162.252.175.109" AND destinationtranslatedport=28330 OR destinationtranslatedaddress="151.236.20.39" AND destinationtranslatedport=5524 OR destinationtranslatedaddress="158.255.208.140" AND destinationtranslatedport=86 OR destinationtranslatedaddress="194.68.27.149" AND destinationtranslatedport=13106 OR destinationtranslatedaddress="194.68.27.176" AND destinationtranslatedport=6460 OR destinationtranslatedaddress="37.143.128.223" AND destinationtranslatedport=16223 OR destinationtranslatedaddress="31.40.212.130" AND destinationtranslatedport=7225 OR destinationtranslatedaddress="198.244.207.203" AND destinationtranslatedport=2076)
index=activity AND rg_functionality="Web Application Firewall" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND translatedport=28693 OR destinationtranslatedaddress="162.252.175.90" AND translatedport=845 OR destinationtranslatedaddress="162.252.175.109" AND translatedport=28330 OR destinationtranslatedaddress="151.236.20.39" AND translatedport=5524 OR destinationtranslatedaddress="158.255.208.140" AND translatedport=86 OR destinationtranslatedaddress="194.68.27.149" AND translatedport=13106 OR destinationtranslatedaddress="194.68.27.176" AND translatedport=6460 OR destinationtranslatedaddress="37.143.128.223" AND translatedport=16223 OR destinationtranslatedaddress="31.40.212.130" AND translatedport=7225 OR destinationtranslatedaddress="198.244.207.203" AND translatedport=2076)
index=activity AND rg_functionality="Web Application Firewall" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="208.115.230.243" AND destinationport=16697 OR destinationaddress="185.126.239.207" AND destinationport=26630 OR destinationaddress="213.183.57.174" AND destinationport=12517 OR destinationaddress="213.183.57.72" AND destinationport=12517 OR destinationaddress="213.183.56.201" AND destinationport=12517 OR destinationaddress="95.164.45.27" AND destinationport=17426 OR destinationaddress="45.120.178.161" AND destinationport=11013 OR destinationaddress="176.120.74.3" AND destinationport=17268 OR destinationaddress="92.243.64.184" AND destinationport=17146 OR destinationaddress="92.243.64.36" AND destinationport=17146)
index=activity AND rg_functionality="Web Application Firewall" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="208.115.230.243" AND sourceport=16697 OR sourceaddress="185.126.239.207" AND sourceport=26630 OR sourceaddress="213.183.57.174" AND sourceport=12517 OR sourceaddress="213.183.57.72" AND sourceport=12517 OR sourceaddress="213.183.56.201" AND sourceport=12517 OR sourceaddress="95.164.45.27" AND sourceport=17426 OR sourceaddress="45.120.178.161" AND sourceport=11013 OR sourceaddress="176.120.74.3" AND sourceport=17268 OR sourceaddress="92.243.64.184" AND sourceport=17146 OR sourceaddress="92.243.64.36" AND sourceport=17146)
index=activity AND rg_functionality="Web Application Firewall" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="208.115.230.243" AND sourceport=16697 OR translatedipaddress="185.126.239.207" AND sourceport=26630 OR translatedipaddress="213.183.57.174" AND sourceport=12517 OR translatedipaddress="213.183.57.72" AND sourceport=12517 OR translatedipaddress="213.183.56.201" AND sourceport=12517 OR translatedipaddress="95.164.45.27" AND sourceport=17426 OR translatedipaddress="45.120.178.161" AND sourceport=11013 OR translatedipaddress="176.120.74.3" AND sourceport=17268 OR translatedipaddress="92.243.64.184" AND sourceport=17146 OR translatedipaddress="92.243.64.36" AND sourceport=17146)
index=activity AND rg_functionality="Web Application Firewall" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND destinationport=16697 OR destinationtranslatedaddress="185.126.239.207" AND destinationport=26630 OR destinationtranslatedaddress="213.183.57.174" AND destinationport=12517 OR destinationtranslatedaddress="213.183.57.72" AND destinationport=12517 OR destinationtranslatedaddress="213.183.56.201" AND destinationport=12517 OR destinationtranslatedaddress="95.164.45.27" AND destinationport=17426 OR destinationtranslatedaddress="45.120.178.161" AND destinationport=11013 OR destinationtranslatedaddress="176.120.74.3" AND destinationport=17268 OR destinationtranslatedaddress="92.243.64.184" AND destinationport=17146 OR destinationtranslatedaddress="92.243.64.36" AND destinationport=17146)
index=activity AND rg_functionality="Web Application Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND destinationtranslatedport=16697 OR destinationtranslatedaddress="185.126.239.207" AND destinationtranslatedport=26630 OR destinationtranslatedaddress="213.183.57.174" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="213.183.57.72" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="213.183.56.201" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="95.164.45.27" AND destinationtranslatedport=17426 OR destinationtranslatedaddress="45.120.178.161" AND destinationtranslatedport=11013 OR destinationtranslatedaddress="176.120.74.3" AND destinationtranslatedport=17268 OR destinationtranslatedaddress="92.243.64.184" AND destinationtranslatedport=17146 OR destinationtranslatedaddress="92.243.64.36" AND destinationtranslatedport=17146)
index=activity AND rg_functionality="Web Application Firewall" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND translatedport=16697 OR destinationtranslatedaddress="185.126.239.207" AND translatedport=26630 OR destinationtranslatedaddress="213.183.57.174" AND translatedport=12517 OR destinationtranslatedaddress="213.183.57.72" AND translatedport=12517 OR destinationtranslatedaddress="213.183.56.201" AND translatedport=12517 OR destinationtranslatedaddress="95.164.45.27" AND translatedport=17426 OR destinationtranslatedaddress="45.120.178.161" AND translatedport=11013 OR destinationtranslatedaddress="176.120.74.3" AND translatedport=17268 OR destinationtranslatedaddress="92.243.64.184" AND translatedport=17146 OR destinationtranslatedaddress="92.243.64.36" AND translatedport=17146)
index=activity AND rg_functionality="Web Application Firewall" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="89.31.120.126" AND destinationport=11578 OR destinationaddress="91.132.93.33" AND destinationport=11578 OR destinationaddress="91.132.95.28" AND destinationport=8773 OR destinationaddress="91.132.95.204" AND destinationport=8773 OR destinationaddress="91.132.95.135" AND destinationport=8773 OR destinationaddress="194.233.174.22" AND destinationport=45358)
index=activity AND rg_functionality="Web Application Firewall" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="89.31.120.126" AND sourceport=11578 OR sourceaddress="91.132.93.33" AND sourceport=11578 OR sourceaddress="91.132.95.28" AND sourceport=8773 OR sourceaddress="91.132.95.204" AND sourceport=8773 OR sourceaddress="91.132.95.135" AND sourceport=8773 OR sourceaddress="194.233.174.22" AND sourceport=45358)
index=activity AND rg_functionality="Web Application Firewall" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="89.31.120.126" AND sourceport=11578 OR translatedipaddress="91.132.93.33" AND sourceport=11578 OR translatedipaddress="91.132.95.28" AND sourceport=8773 OR translatedipaddress="91.132.95.204" AND sourceport=8773 OR translatedipaddress="91.132.95.135" AND sourceport=8773 OR translatedipaddress="194.233.174.22" AND sourceport=45358)
index=activity AND rg_functionality="Web Application Firewall" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND destinationport=11578 OR destinationtranslatedaddress="91.132.93.33" AND destinationport=11578 OR destinationtranslatedaddress="91.132.95.28" AND destinationport=8773 OR destinationtranslatedaddress="91.132.95.204" AND destinationport=8773 OR destinationtranslatedaddress="91.132.95.135" AND destinationport=8773 OR destinationtranslatedaddress="194.233.174.22" AND destinationport=45358)
index=activity AND rg_functionality="Web Application Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND destinationtranslatedport=11578 OR destinationtranslatedaddress="91.132.93.33" AND destinationtranslatedport=11578 OR destinationtranslatedaddress="91.132.95.28" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="91.132.95.204" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="91.132.95.135" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="194.233.174.22" AND destinationtranslatedport=45358)
index=activity AND rg_functionality="Web Application Firewall" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND translatedport=11578 OR destinationtranslatedaddress="91.132.93.33" AND translatedport=11578 OR destinationtranslatedaddress="91.132.95.28" AND translatedport=8773 OR destinationtranslatedaddress="91.132.95.204" AND translatedport=8773 OR destinationtranslatedaddress="91.132.95.135" AND translatedport=8773 OR destinationtranslatedaddress="194.233.174.22" AND translatedport=45358)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="158.255.212.173" AND destinationport=10862 OR destinationaddress="151.236.25.126" AND destinationport=11331 OR destinationaddress="158.255.215.49" AND destinationport=23079 OR destinationaddress="185.26.239.98" AND destinationport=11076 OR destinationaddress="151.236.25.10" AND destinationport=7205 OR destinationaddress="37.235.53.217" AND destinationport=1358 OR destinationaddress="151.236.23.232" AND destinationport=763 OR destinationaddress="37.235.56.204" AND destinationport=24239 OR destinationaddress="162.252.175.122" AND destinationport=4126 OR destinationaddress="162.252.175.136" AND destinationport=11077)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="158.255.212.173" AND sourceport=10862 OR sourceaddress="151.236.25.126" AND sourceport=11331 OR sourceaddress="158.255.215.49" AND sourceport=23079 OR sourceaddress="185.26.239.98" AND sourceport=11076 OR sourceaddress="151.236.25.10" AND sourceport=7205 OR sourceaddress="37.235.53.217" AND sourceport=1358 OR sourceaddress="151.236.23.232" AND sourceport=763 OR sourceaddress="37.235.56.204" AND sourceport=24239 OR sourceaddress="162.252.175.122" AND sourceport=4126 OR sourceaddress="162.252.175.136" AND sourceport=11077)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="158.255.212.173" AND sourceport=10862 OR translatedipaddress="151.236.25.126" AND sourceport=11331 OR translatedipaddress="158.255.215.49" AND sourceport=23079 OR translatedipaddress="185.26.239.98" AND sourceport=11076 OR translatedipaddress="151.236.25.10" AND sourceport=7205 OR translatedipaddress="37.235.53.217" AND sourceport=1358 OR translatedipaddress="151.236.23.232" AND sourceport=763 OR translatedipaddress="37.235.56.204" AND sourceport=24239 OR translatedipaddress="162.252.175.122" AND sourceport=4126 OR translatedipaddress="162.252.175.136" AND sourceport=11077)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND destinationport=10862 OR destinationtranslatedaddress="151.236.25.126" AND destinationport=11331 OR destinationtranslatedaddress="158.255.215.49" AND destinationport=23079 OR destinationtranslatedaddress="185.26.239.98" AND destinationport=11076 OR destinationtranslatedaddress="151.236.25.10" AND destinationport=7205 OR destinationtranslatedaddress="37.235.53.217" AND destinationport=1358 OR destinationtranslatedaddress="151.236.23.232" AND destinationport=763 OR destinationtranslatedaddress="37.235.56.204" AND destinationport=24239 OR destinationtranslatedaddress="162.252.175.122" AND destinationport=4126 OR destinationtranslatedaddress="162.252.175.136" AND destinationport=11077)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND destinationtranslatedport=10862 OR destinationtranslatedaddress="151.236.25.126" AND destinationtranslatedport=11331 OR destinationtranslatedaddress="158.255.215.49" AND destinationtranslatedport=23079 OR destinationtranslatedaddress="185.26.239.98" AND destinationtranslatedport=11076 OR destinationtranslatedaddress="151.236.25.10" AND destinationtranslatedport=7205 OR destinationtranslatedaddress="37.235.53.217" AND destinationtranslatedport=1358 OR destinationtranslatedaddress="151.236.23.232" AND destinationtranslatedport=763 OR destinationtranslatedaddress="37.235.56.204" AND destinationtranslatedport=24239 OR destinationtranslatedaddress="162.252.175.122" AND destinationtranslatedport=4126 OR destinationtranslatedaddress="162.252.175.136" AND destinationtranslatedport=11077)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND translatedport=10862 OR destinationtranslatedaddress="151.236.25.126" AND translatedport=11331 OR destinationtranslatedaddress="158.255.215.49" AND translatedport=23079 OR destinationtranslatedaddress="185.26.239.98" AND translatedport=11076 OR destinationtranslatedaddress="151.236.25.10" AND translatedport=7205 OR destinationtranslatedaddress="37.235.53.217" AND translatedport=1358 OR destinationtranslatedaddress="151.236.23.232" AND translatedport=763 OR destinationtranslatedaddress="37.235.56.204" AND translatedport=24239 OR destinationtranslatedaddress="162.252.175.122" AND translatedport=4126 OR destinationtranslatedaddress="162.252.175.136" AND translatedport=11077)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="162.252.175.163" AND destinationport=28693 OR destinationaddress="162.252.175.90" AND destinationport=845 OR destinationaddress="162.252.175.109" AND destinationport=28330 OR destinationaddress="151.236.20.39" AND destinationport=5524 OR destinationaddress="158.255.208.140" AND destinationport=86 OR destinationaddress="194.68.27.149" AND destinationport=13106 OR destinationaddress="194.68.27.176" AND destinationport=6460 OR destinationaddress="37.143.128.223" AND destinationport=16223 OR destinationaddress="31.40.212.130" AND destinationport=7225 OR destinationaddress="198.244.207.203" AND destinationport=2076)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="162.252.175.163" AND sourceport=28693 OR sourceaddress="162.252.175.90" AND sourceport=845 OR sourceaddress="162.252.175.109" AND sourceport=28330 OR sourceaddress="151.236.20.39" AND sourceport=5524 OR sourceaddress="158.255.208.140" AND sourceport=86 OR sourceaddress="194.68.27.149" AND sourceport=13106 OR sourceaddress="194.68.27.176" AND sourceport=6460 OR sourceaddress="37.143.128.223" AND sourceport=16223 OR sourceaddress="31.40.212.130" AND sourceport=7225 OR sourceaddress="198.244.207.203" AND sourceport=2076)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="162.252.175.163" AND sourceport=28693 OR translatedipaddress="162.252.175.90" AND sourceport=845 OR translatedipaddress="162.252.175.109" AND sourceport=28330 OR translatedipaddress="151.236.20.39" AND sourceport=5524 OR translatedipaddress="158.255.208.140" AND sourceport=86 OR translatedipaddress="194.68.27.149" AND sourceport=13106 OR translatedipaddress="194.68.27.176" AND sourceport=6460 OR translatedipaddress="37.143.128.223" AND sourceport=16223 OR translatedipaddress="31.40.212.130" AND sourceport=7225 OR translatedipaddress="198.244.207.203" AND sourceport=2076)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND destinationport=28693 OR destinationtranslatedaddress="162.252.175.90" AND destinationport=845 OR destinationtranslatedaddress="162.252.175.109" AND destinationport=28330 OR destinationtranslatedaddress="151.236.20.39" AND destinationport=5524 OR destinationtranslatedaddress="158.255.208.140" AND destinationport=86 OR destinationtranslatedaddress="194.68.27.149" AND destinationport=13106 OR destinationtranslatedaddress="194.68.27.176" AND destinationport=6460 OR destinationtranslatedaddress="37.143.128.223" AND destinationport=16223 OR destinationtranslatedaddress="31.40.212.130" AND destinationport=7225 OR destinationtranslatedaddress="198.244.207.203" AND destinationport=2076)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND destinationtranslatedport=28693 OR destinationtranslatedaddress="162.252.175.90" AND destinationtranslatedport=845 OR destinationtranslatedaddress="162.252.175.109" AND destinationtranslatedport=28330 OR destinationtranslatedaddress="151.236.20.39" AND destinationtranslatedport=5524 OR destinationtranslatedaddress="158.255.208.140" AND destinationtranslatedport=86 OR destinationtranslatedaddress="194.68.27.149" AND destinationtranslatedport=13106 OR destinationtranslatedaddress="194.68.27.176" AND destinationtranslatedport=6460 OR destinationtranslatedaddress="37.143.128.223" AND destinationtranslatedport=16223 OR destinationtranslatedaddress="31.40.212.130" AND destinationtranslatedport=7225 OR destinationtranslatedaddress="198.244.207.203" AND destinationtranslatedport=2076)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND translatedport=28693 OR destinationtranslatedaddress="162.252.175.90" AND translatedport=845 OR destinationtranslatedaddress="162.252.175.109" AND translatedport=28330 OR destinationtranslatedaddress="151.236.20.39" AND translatedport=5524 OR destinationtranslatedaddress="158.255.208.140" AND translatedport=86 OR destinationtranslatedaddress="194.68.27.149" AND translatedport=13106 OR destinationtranslatedaddress="194.68.27.176" AND translatedport=6460 OR destinationtranslatedaddress="37.143.128.223" AND translatedport=16223 OR destinationtranslatedaddress="31.40.212.130" AND translatedport=7225 OR destinationtranslatedaddress="198.244.207.203" AND translatedport=2076)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="208.115.230.243" AND destinationport=16697 OR destinationaddress="185.126.239.207" AND destinationport=26630 OR destinationaddress="213.183.57.174" AND destinationport=12517 OR destinationaddress="213.183.57.72" AND destinationport=12517 OR destinationaddress="213.183.56.201" AND destinationport=12517 OR destinationaddress="95.164.45.27" AND destinationport=17426 OR destinationaddress="45.120.178.161" AND destinationport=11013 OR destinationaddress="176.120.74.3" AND destinationport=17268 OR destinationaddress="92.243.64.184" AND destinationport=17146 OR destinationaddress="92.243.64.36" AND destinationport=17146)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="208.115.230.243" AND sourceport=16697 OR sourceaddress="185.126.239.207" AND sourceport=26630 OR sourceaddress="213.183.57.174" AND sourceport=12517 OR sourceaddress="213.183.57.72" AND sourceport=12517 OR sourceaddress="213.183.56.201" AND sourceport=12517 OR sourceaddress="95.164.45.27" AND sourceport=17426 OR sourceaddress="45.120.178.161" AND sourceport=11013 OR sourceaddress="176.120.74.3" AND sourceport=17268 OR sourceaddress="92.243.64.184" AND sourceport=17146 OR sourceaddress="92.243.64.36" AND sourceport=17146)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="208.115.230.243" AND sourceport=16697 OR translatedipaddress="185.126.239.207" AND sourceport=26630 OR translatedipaddress="213.183.57.174" AND sourceport=12517 OR translatedipaddress="213.183.57.72" AND sourceport=12517 OR translatedipaddress="213.183.56.201" AND sourceport=12517 OR translatedipaddress="95.164.45.27" AND sourceport=17426 OR translatedipaddress="45.120.178.161" AND sourceport=11013 OR translatedipaddress="176.120.74.3" AND sourceport=17268 OR translatedipaddress="92.243.64.184" AND sourceport=17146 OR translatedipaddress="92.243.64.36" AND sourceport=17146)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND destinationport=16697 OR destinationtranslatedaddress="185.126.239.207" AND destinationport=26630 OR destinationtranslatedaddress="213.183.57.174" AND destinationport=12517 OR destinationtranslatedaddress="213.183.57.72" AND destinationport=12517 OR destinationtranslatedaddress="213.183.56.201" AND destinationport=12517 OR destinationtranslatedaddress="95.164.45.27" AND destinationport=17426 OR destinationtranslatedaddress="45.120.178.161" AND destinationport=11013 OR destinationtranslatedaddress="176.120.74.3" AND destinationport=17268 OR destinationtranslatedaddress="92.243.64.184" AND destinationport=17146 OR destinationtranslatedaddress="92.243.64.36" AND destinationport=17146)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND destinationtranslatedport=16697 OR destinationtranslatedaddress="185.126.239.207" AND destinationtranslatedport=26630 OR destinationtranslatedaddress="213.183.57.174" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="213.183.57.72" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="213.183.56.201" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="95.164.45.27" AND destinationtranslatedport=17426 OR destinationtranslatedaddress="45.120.178.161" AND destinationtranslatedport=11013 OR destinationtranslatedaddress="176.120.74.3" AND destinationtranslatedport=17268 OR destinationtranslatedaddress="92.243.64.184" AND destinationtranslatedport=17146 OR destinationtranslatedaddress="92.243.64.36" AND destinationtranslatedport=17146)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND translatedport=16697 OR destinationtranslatedaddress="185.126.239.207" AND translatedport=26630 OR destinationtranslatedaddress="213.183.57.174" AND translatedport=12517 OR destinationtranslatedaddress="213.183.57.72" AND translatedport=12517 OR destinationtranslatedaddress="213.183.56.201" AND translatedport=12517 OR destinationtranslatedaddress="95.164.45.27" AND translatedport=17426 OR destinationtranslatedaddress="45.120.178.161" AND translatedport=11013 OR destinationtranslatedaddress="176.120.74.3" AND translatedport=17268 OR destinationtranslatedaddress="92.243.64.184" AND translatedport=17146 OR destinationtranslatedaddress="92.243.64.36" AND translatedport=17146)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="89.31.120.126" AND destinationport=11578 OR destinationaddress="91.132.93.33" AND destinationport=11578 OR destinationaddress="91.132.95.28" AND destinationport=8773 OR destinationaddress="91.132.95.204" AND destinationport=8773 OR destinationaddress="91.132.95.135" AND destinationport=8773 OR destinationaddress="194.233.174.22" AND destinationport=45358)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="89.31.120.126" AND sourceport=11578 OR sourceaddress="91.132.93.33" AND sourceport=11578 OR sourceaddress="91.132.95.28" AND sourceport=8773 OR sourceaddress="91.132.95.204" AND sourceport=8773 OR sourceaddress="91.132.95.135" AND sourceport=8773 OR sourceaddress="194.233.174.22" AND sourceport=45358)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="89.31.120.126" AND sourceport=11578 OR translatedipaddress="91.132.93.33" AND sourceport=11578 OR translatedipaddress="91.132.95.28" AND sourceport=8773 OR translatedipaddress="91.132.95.204" AND sourceport=8773 OR translatedipaddress="91.132.95.135" AND sourceport=8773 OR translatedipaddress="194.233.174.22" AND sourceport=45358)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND destinationport=11578 OR destinationtranslatedaddress="91.132.93.33" AND destinationport=11578 OR destinationtranslatedaddress="91.132.95.28" AND destinationport=8773 OR destinationtranslatedaddress="91.132.95.204" AND destinationport=8773 OR destinationtranslatedaddress="91.132.95.135" AND destinationport=8773 OR destinationtranslatedaddress="194.233.174.22" AND destinationport=45358)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND destinationtranslatedport=11578 OR destinationtranslatedaddress="91.132.93.33" AND destinationtranslatedport=11578 OR destinationtranslatedaddress="91.132.95.28" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="91.132.95.204" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="91.132.95.135" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="194.233.174.22" AND destinationtranslatedport=45358)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND translatedport=11578 OR destinationtranslatedaddress="91.132.93.33" AND translatedport=11578 OR destinationtranslatedaddress="91.132.95.28" AND translatedport=8773 OR destinationtranslatedaddress="91.132.95.204" AND translatedport=8773 OR destinationtranslatedaddress="91.132.95.135" AND translatedport=8773 OR destinationtranslatedaddress="194.233.174.22" AND translatedport=45358)
index=activity AND rg_functionality="Cloud Services / Applications" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="158.255.212.173" AND destinationport=10862 OR destinationaddress="151.236.25.126" AND destinationport=11331 OR destinationaddress="158.255.215.49" AND destinationport=23079 OR destinationaddress="185.26.239.98" AND destinationport=11076 OR destinationaddress="151.236.25.10" AND destinationport=7205 OR destinationaddress="37.235.53.217" AND destinationport=1358 OR destinationaddress="151.236.23.232" AND destinationport=763 OR destinationaddress="37.235.56.204" AND destinationport=24239 OR destinationaddress="162.252.175.122" AND destinationport=4126 OR destinationaddress="162.252.175.136" AND destinationport=11077)
index=activity AND rg_functionality="Cloud Services / Applications" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="158.255.212.173" AND sourceport=10862 OR sourceaddress="151.236.25.126" AND sourceport=11331 OR sourceaddress="158.255.215.49" AND sourceport=23079 OR sourceaddress="185.26.239.98" AND sourceport=11076 OR sourceaddress="151.236.25.10" AND sourceport=7205 OR sourceaddress="37.235.53.217" AND sourceport=1358 OR sourceaddress="151.236.23.232" AND sourceport=763 OR sourceaddress="37.235.56.204" AND sourceport=24239 OR sourceaddress="162.252.175.122" AND sourceport=4126 OR sourceaddress="162.252.175.136" AND sourceport=11077)
index=activity AND rg_functionality="Cloud Services / Applications" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="158.255.212.173" AND sourceport=10862 OR translatedipaddress="151.236.25.126" AND sourceport=11331 OR translatedipaddress="158.255.215.49" AND sourceport=23079 OR translatedipaddress="185.26.239.98" AND sourceport=11076 OR translatedipaddress="151.236.25.10" AND sourceport=7205 OR translatedipaddress="37.235.53.217" AND sourceport=1358 OR translatedipaddress="151.236.23.232" AND sourceport=763 OR translatedipaddress="37.235.56.204" AND sourceport=24239 OR translatedipaddress="162.252.175.122" AND sourceport=4126 OR translatedipaddress="162.252.175.136" AND sourceport=11077)
index=activity AND rg_functionality="Cloud Services / Applications" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND destinationport=10862 OR destinationtranslatedaddress="151.236.25.126" AND destinationport=11331 OR destinationtranslatedaddress="158.255.215.49" AND destinationport=23079 OR destinationtranslatedaddress="185.26.239.98" AND destinationport=11076 OR destinationtranslatedaddress="151.236.25.10" AND destinationport=7205 OR destinationtranslatedaddress="37.235.53.217" AND destinationport=1358 OR destinationtranslatedaddress="151.236.23.232" AND destinationport=763 OR destinationtranslatedaddress="37.235.56.204" AND destinationport=24239 OR destinationtranslatedaddress="162.252.175.122" AND destinationport=4126 OR destinationtranslatedaddress="162.252.175.136" AND destinationport=11077)
index=activity AND rg_functionality="Cloud Services / Applications" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND destinationtranslatedport=10862 OR destinationtranslatedaddress="151.236.25.126" AND destinationtranslatedport=11331 OR destinationtranslatedaddress="158.255.215.49" AND destinationtranslatedport=23079 OR destinationtranslatedaddress="185.26.239.98" AND destinationtranslatedport=11076 OR destinationtranslatedaddress="151.236.25.10" AND destinationtranslatedport=7205 OR destinationtranslatedaddress="37.235.53.217" AND destinationtranslatedport=1358 OR destinationtranslatedaddress="151.236.23.232" AND destinationtranslatedport=763 OR destinationtranslatedaddress="37.235.56.204" AND destinationtranslatedport=24239 OR destinationtranslatedaddress="162.252.175.122" AND destinationtranslatedport=4126 OR destinationtranslatedaddress="162.252.175.136" AND destinationtranslatedport=11077)
index=activity AND rg_functionality="Cloud Services / Applications" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND translatedport=10862 OR destinationtranslatedaddress="151.236.25.126" AND translatedport=11331 OR destinationtranslatedaddress="158.255.215.49" AND translatedport=23079 OR destinationtranslatedaddress="185.26.239.98" AND translatedport=11076 OR destinationtranslatedaddress="151.236.25.10" AND translatedport=7205 OR destinationtranslatedaddress="37.235.53.217" AND translatedport=1358 OR destinationtranslatedaddress="151.236.23.232" AND translatedport=763 OR destinationtranslatedaddress="37.235.56.204" AND translatedport=24239 OR destinationtranslatedaddress="162.252.175.122" AND translatedport=4126 OR destinationtranslatedaddress="162.252.175.136" AND translatedport=11077)
index=activity AND rg_functionality="Cloud Services / Applications" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="162.252.175.163" AND destinationport=28693 OR destinationaddress="162.252.175.90" AND destinationport=845 OR destinationaddress="162.252.175.109" AND destinationport=28330 OR destinationaddress="151.236.20.39" AND destinationport=5524 OR destinationaddress="158.255.208.140" AND destinationport=86 OR destinationaddress="194.68.27.149" AND destinationport=13106 OR destinationaddress="194.68.27.176" AND destinationport=6460 OR destinationaddress="37.143.128.223" AND destinationport=16223 OR destinationaddress="31.40.212.130" AND destinationport=7225 OR destinationaddress="198.244.207.203" AND destinationport=2076)
index=activity AND rg_functionality="Cloud Services / Applications" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="162.252.175.163" AND sourceport=28693 OR sourceaddress="162.252.175.90" AND sourceport=845 OR sourceaddress="162.252.175.109" AND sourceport=28330 OR sourceaddress="151.236.20.39" AND sourceport=5524 OR sourceaddress="158.255.208.140" AND sourceport=86 OR sourceaddress="194.68.27.149" AND sourceport=13106 OR sourceaddress="194.68.27.176" AND sourceport=6460 OR sourceaddress="37.143.128.223" AND sourceport=16223 OR sourceaddress="31.40.212.130" AND sourceport=7225 OR sourceaddress="198.244.207.203" AND sourceport=2076)
index=activity AND rg_functionality="Cloud Services / Applications" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="162.252.175.163" AND sourceport=28693 OR translatedipaddress="162.252.175.90" AND sourceport=845 OR translatedipaddress="162.252.175.109" AND sourceport=28330 OR translatedipaddress="151.236.20.39" AND sourceport=5524 OR translatedipaddress="158.255.208.140" AND sourceport=86 OR translatedipaddress="194.68.27.149" AND sourceport=13106 OR translatedipaddress="194.68.27.176" AND sourceport=6460 OR translatedipaddress="37.143.128.223" AND sourceport=16223 OR translatedipaddress="31.40.212.130" AND sourceport=7225 OR translatedipaddress="198.244.207.203" AND sourceport=2076)
index=activity AND rg_functionality="Cloud Services / Applications" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND destinationport=28693 OR destinationtranslatedaddress="162.252.175.90" AND destinationport=845 OR destinationtranslatedaddress="162.252.175.109" AND destinationport=28330 OR destinationtranslatedaddress="151.236.20.39" AND destinationport=5524 OR destinationtranslatedaddress="158.255.208.140" AND destinationport=86 OR destinationtranslatedaddress="194.68.27.149" AND destinationport=13106 OR destinationtranslatedaddress="194.68.27.176" AND destinationport=6460 OR destinationtranslatedaddress="37.143.128.223" AND destinationport=16223 OR destinationtranslatedaddress="31.40.212.130" AND destinationport=7225 OR destinationtranslatedaddress="198.244.207.203" AND destinationport=2076)
index=activity AND rg_functionality="Cloud Services / Applications" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND destinationtranslatedport=28693 OR destinationtranslatedaddress="162.252.175.90" AND destinationtranslatedport=845 OR destinationtranslatedaddress="162.252.175.109" AND destinationtranslatedport=28330 OR destinationtranslatedaddress="151.236.20.39" AND destinationtranslatedport=5524 OR destinationtranslatedaddress="158.255.208.140" AND destinationtranslatedport=86 OR destinationtranslatedaddress="194.68.27.149" AND destinationtranslatedport=13106 OR destinationtranslatedaddress="194.68.27.176" AND destinationtranslatedport=6460 OR destinationtranslatedaddress="37.143.128.223" AND destinationtranslatedport=16223 OR destinationtranslatedaddress="31.40.212.130" AND destinationtranslatedport=7225 OR destinationtranslatedaddress="198.244.207.203" AND destinationtranslatedport=2076)
index=activity AND rg_functionality="Cloud Services / Applications" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND translatedport=28693 OR destinationtranslatedaddress="162.252.175.90" AND translatedport=845 OR destinationtranslatedaddress="162.252.175.109" AND translatedport=28330 OR destinationtranslatedaddress="151.236.20.39" AND translatedport=5524 OR destinationtranslatedaddress="158.255.208.140" AND translatedport=86 OR destinationtranslatedaddress="194.68.27.149" AND translatedport=13106 OR destinationtranslatedaddress="194.68.27.176" AND translatedport=6460 OR destinationtranslatedaddress="37.143.128.223" AND translatedport=16223 OR destinationtranslatedaddress="31.40.212.130" AND translatedport=7225 OR destinationtranslatedaddress="198.244.207.203" AND translatedport=2076)
index=activity AND rg_functionality="Cloud Services / Applications" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="208.115.230.243" AND destinationport=16697 OR destinationaddress="185.126.239.207" AND destinationport=26630 OR destinationaddress="213.183.57.174" AND destinationport=12517 OR destinationaddress="213.183.57.72" AND destinationport=12517 OR destinationaddress="213.183.56.201" AND destinationport=12517 OR destinationaddress="95.164.45.27" AND destinationport=17426 OR destinationaddress="45.120.178.161" AND destinationport=11013 OR destinationaddress="176.120.74.3" AND destinationport=17268 OR destinationaddress="92.243.64.184" AND destinationport=17146 OR destinationaddress="92.243.64.36" AND destinationport=17146)
index=activity AND rg_functionality="Cloud Services / Applications" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="208.115.230.243" AND sourceport=16697 OR sourceaddress="185.126.239.207" AND sourceport=26630 OR sourceaddress="213.183.57.174" AND sourceport=12517 OR sourceaddress="213.183.57.72" AND sourceport=12517 OR sourceaddress="213.183.56.201" AND sourceport=12517 OR sourceaddress="95.164.45.27" AND sourceport=17426 OR sourceaddress="45.120.178.161" AND sourceport=11013 OR sourceaddress="176.120.74.3" AND sourceport=17268 OR sourceaddress="92.243.64.184" AND sourceport=17146 OR sourceaddress="92.243.64.36" AND sourceport=17146)
index=activity AND rg_functionality="Cloud Services / Applications" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="208.115.230.243" AND sourceport=16697 OR translatedipaddress="185.126.239.207" AND sourceport=26630 OR translatedipaddress="213.183.57.174" AND sourceport=12517 OR translatedipaddress="213.183.57.72" AND sourceport=12517 OR translatedipaddress="213.183.56.201" AND sourceport=12517 OR translatedipaddress="95.164.45.27" AND sourceport=17426 OR translatedipaddress="45.120.178.161" AND sourceport=11013 OR translatedipaddress="176.120.74.3" AND sourceport=17268 OR translatedipaddress="92.243.64.184" AND sourceport=17146 OR translatedipaddress="92.243.64.36" AND sourceport=17146)
index=activity AND rg_functionality="Cloud Services / Applications" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND destinationport=16697 OR destinationtranslatedaddress="185.126.239.207" AND destinationport=26630 OR destinationtranslatedaddress="213.183.57.174" AND destinationport=12517 OR destinationtranslatedaddress="213.183.57.72" AND destinationport=12517 OR destinationtranslatedaddress="213.183.56.201" AND destinationport=12517 OR destinationtranslatedaddress="95.164.45.27" AND destinationport=17426 OR destinationtranslatedaddress="45.120.178.161" AND destinationport=11013 OR destinationtranslatedaddress="176.120.74.3" AND destinationport=17268 OR destinationtranslatedaddress="92.243.64.184" AND destinationport=17146 OR destinationtranslatedaddress="92.243.64.36" AND destinationport=17146)
index=activity AND rg_functionality="Cloud Services / Applications" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND destinationtranslatedport=16697 OR destinationtranslatedaddress="185.126.239.207" AND destinationtranslatedport=26630 OR destinationtranslatedaddress="213.183.57.174" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="213.183.57.72" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="213.183.56.201" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="95.164.45.27" AND destinationtranslatedport=17426 OR destinationtranslatedaddress="45.120.178.161" AND destinationtranslatedport=11013 OR destinationtranslatedaddress="176.120.74.3" AND destinationtranslatedport=17268 OR destinationtranslatedaddress="92.243.64.184" AND destinationtranslatedport=17146 OR destinationtranslatedaddress="92.243.64.36" AND destinationtranslatedport=17146)
index=activity AND rg_functionality="Cloud Services / Applications" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND translatedport=16697 OR destinationtranslatedaddress="185.126.239.207" AND translatedport=26630 OR destinationtranslatedaddress="213.183.57.174" AND translatedport=12517 OR destinationtranslatedaddress="213.183.57.72" AND translatedport=12517 OR destinationtranslatedaddress="213.183.56.201" AND translatedport=12517 OR destinationtranslatedaddress="95.164.45.27" AND translatedport=17426 OR destinationtranslatedaddress="45.120.178.161" AND translatedport=11013 OR destinationtranslatedaddress="176.120.74.3" AND translatedport=17268 OR destinationtranslatedaddress="92.243.64.184" AND translatedport=17146 OR destinationtranslatedaddress="92.243.64.36" AND translatedport=17146)
index=activity AND rg_functionality="Cloud Services / Applications" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="89.31.120.126" AND destinationport=11578 OR destinationaddress="91.132.93.33" AND destinationport=11578 OR destinationaddress="91.132.95.28" AND destinationport=8773 OR destinationaddress="91.132.95.204" AND destinationport=8773 OR destinationaddress="91.132.95.135" AND destinationport=8773 OR destinationaddress="194.233.174.22" AND destinationport=45358)
index=activity AND rg_functionality="Cloud Services / Applications" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="89.31.120.126" AND sourceport=11578 OR sourceaddress="91.132.93.33" AND sourceport=11578 OR sourceaddress="91.132.95.28" AND sourceport=8773 OR sourceaddress="91.132.95.204" AND sourceport=8773 OR sourceaddress="91.132.95.135" AND sourceport=8773 OR sourceaddress="194.233.174.22" AND sourceport=45358)
index=activity AND rg_functionality="Cloud Services / Applications" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="89.31.120.126" AND sourceport=11578 OR translatedipaddress="91.132.93.33" AND sourceport=11578 OR translatedipaddress="91.132.95.28" AND sourceport=8773 OR translatedipaddress="91.132.95.204" AND sourceport=8773 OR translatedipaddress="91.132.95.135" AND sourceport=8773 OR translatedipaddress="194.233.174.22" AND sourceport=45358)
index=activity AND rg_functionality="Cloud Services / Applications" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND destinationport=11578 OR destinationtranslatedaddress="91.132.93.33" AND destinationport=11578 OR destinationtranslatedaddress="91.132.95.28" AND destinationport=8773 OR destinationtranslatedaddress="91.132.95.204" AND destinationport=8773 OR destinationtranslatedaddress="91.132.95.135" AND destinationport=8773 OR destinationtranslatedaddress="194.233.174.22" AND destinationport=45358)
index=activity AND rg_functionality="Cloud Services / Applications" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND destinationtranslatedport=11578 OR destinationtranslatedaddress="91.132.93.33" AND destinationtranslatedport=11578 OR destinationtranslatedaddress="91.132.95.28" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="91.132.95.204" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="91.132.95.135" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="194.233.174.22" AND destinationtranslatedport=45358)
index=activity AND rg_functionality="Cloud Services / Applications" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND translatedport=11578 OR destinationtranslatedaddress="91.132.93.33" AND translatedport=11578 OR destinationtranslatedaddress="91.132.95.28" AND translatedport=8773 OR destinationtranslatedaddress="91.132.95.204" AND translatedport=8773 OR destinationtranslatedaddress="91.132.95.135" AND translatedport=8773 OR destinationtranslatedaddress="194.233.174.22" AND translatedport=45358)
index=activity AND rg_functionality="Cloud Application Audit" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="158.255.212.173" AND destinationport=10862 OR destinationaddress="151.236.25.126" AND destinationport=11331 OR destinationaddress="158.255.215.49" AND destinationport=23079 OR destinationaddress="185.26.239.98" AND destinationport=11076 OR destinationaddress="151.236.25.10" AND destinationport=7205 OR destinationaddress="37.235.53.217" AND destinationport=1358 OR destinationaddress="151.236.23.232" AND destinationport=763 OR destinationaddress="37.235.56.204" AND destinationport=24239 OR destinationaddress="162.252.175.122" AND destinationport=4126 OR destinationaddress="162.252.175.136" AND destinationport=11077)
index=activity AND rg_functionality="Cloud Application Audit" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="158.255.212.173" AND sourceport=10862 OR sourceaddress="151.236.25.126" AND sourceport=11331 OR sourceaddress="158.255.215.49" AND sourceport=23079 OR sourceaddress="185.26.239.98" AND sourceport=11076 OR sourceaddress="151.236.25.10" AND sourceport=7205 OR sourceaddress="37.235.53.217" AND sourceport=1358 OR sourceaddress="151.236.23.232" AND sourceport=763 OR sourceaddress="37.235.56.204" AND sourceport=24239 OR sourceaddress="162.252.175.122" AND sourceport=4126 OR sourceaddress="162.252.175.136" AND sourceport=11077)
index=activity AND rg_functionality="Cloud Application Audit" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="158.255.212.173" AND sourceport=10862 OR translatedipaddress="151.236.25.126" AND sourceport=11331 OR translatedipaddress="158.255.215.49" AND sourceport=23079 OR translatedipaddress="185.26.239.98" AND sourceport=11076 OR translatedipaddress="151.236.25.10" AND sourceport=7205 OR translatedipaddress="37.235.53.217" AND sourceport=1358 OR translatedipaddress="151.236.23.232" AND sourceport=763 OR translatedipaddress="37.235.56.204" AND sourceport=24239 OR translatedipaddress="162.252.175.122" AND sourceport=4126 OR translatedipaddress="162.252.175.136" AND sourceport=11077)
index=activity AND rg_functionality="Cloud Application Audit" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND destinationport=10862 OR destinationtranslatedaddress="151.236.25.126" AND destinationport=11331 OR destinationtranslatedaddress="158.255.215.49" AND destinationport=23079 OR destinationtranslatedaddress="185.26.239.98" AND destinationport=11076 OR destinationtranslatedaddress="151.236.25.10" AND destinationport=7205 OR destinationtranslatedaddress="37.235.53.217" AND destinationport=1358 OR destinationtranslatedaddress="151.236.23.232" AND destinationport=763 OR destinationtranslatedaddress="37.235.56.204" AND destinationport=24239 OR destinationtranslatedaddress="162.252.175.122" AND destinationport=4126 OR destinationtranslatedaddress="162.252.175.136" AND destinationport=11077)
index=activity AND rg_functionality="Cloud Application Audit" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND destinationtranslatedport=10862 OR destinationtranslatedaddress="151.236.25.126" AND destinationtranslatedport=11331 OR destinationtranslatedaddress="158.255.215.49" AND destinationtranslatedport=23079 OR destinationtranslatedaddress="185.26.239.98" AND destinationtranslatedport=11076 OR destinationtranslatedaddress="151.236.25.10" AND destinationtranslatedport=7205 OR destinationtranslatedaddress="37.235.53.217" AND destinationtranslatedport=1358 OR destinationtranslatedaddress="151.236.23.232" AND destinationtranslatedport=763 OR destinationtranslatedaddress="37.235.56.204" AND destinationtranslatedport=24239 OR destinationtranslatedaddress="162.252.175.122" AND destinationtranslatedport=4126 OR destinationtranslatedaddress="162.252.175.136" AND destinationtranslatedport=11077)
index=activity AND rg_functionality="Cloud Application Audit" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND translatedport=10862 OR destinationtranslatedaddress="151.236.25.126" AND translatedport=11331 OR destinationtranslatedaddress="158.255.215.49" AND translatedport=23079 OR destinationtranslatedaddress="185.26.239.98" AND translatedport=11076 OR destinationtranslatedaddress="151.236.25.10" AND translatedport=7205 OR destinationtranslatedaddress="37.235.53.217" AND translatedport=1358 OR destinationtranslatedaddress="151.236.23.232" AND translatedport=763 OR destinationtranslatedaddress="37.235.56.204" AND translatedport=24239 OR destinationtranslatedaddress="162.252.175.122" AND translatedport=4126 OR destinationtranslatedaddress="162.252.175.136" AND translatedport=11077)
index=activity AND rg_functionality="Cloud Application Audit" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="162.252.175.163" AND destinationport=28693 OR destinationaddress="162.252.175.90" AND destinationport=845 OR destinationaddress="162.252.175.109" AND destinationport=28330 OR destinationaddress="151.236.20.39" AND destinationport=5524 OR destinationaddress="158.255.208.140" AND destinationport=86 OR destinationaddress="194.68.27.149" AND destinationport=13106 OR destinationaddress="194.68.27.176" AND destinationport=6460 OR destinationaddress="37.143.128.223" AND destinationport=16223 OR destinationaddress="31.40.212.130" AND destinationport=7225 OR destinationaddress="198.244.207.203" AND destinationport=2076)
index=activity AND rg_functionality="Cloud Application Audit" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="162.252.175.163" AND sourceport=28693 OR sourceaddress="162.252.175.90" AND sourceport=845 OR sourceaddress="162.252.175.109" AND sourceport=28330 OR sourceaddress="151.236.20.39" AND sourceport=5524 OR sourceaddress="158.255.208.140" AND sourceport=86 OR sourceaddress="194.68.27.149" AND sourceport=13106 OR sourceaddress="194.68.27.176" AND sourceport=6460 OR sourceaddress="37.143.128.223" AND sourceport=16223 OR sourceaddress="31.40.212.130" AND sourceport=7225 OR sourceaddress="198.244.207.203" AND sourceport=2076)
index=activity AND rg_functionality="Cloud Application Audit" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="162.252.175.163" AND sourceport=28693 OR translatedipaddress="162.252.175.90" AND sourceport=845 OR translatedipaddress="162.252.175.109" AND sourceport=28330 OR translatedipaddress="151.236.20.39" AND sourceport=5524 OR translatedipaddress="158.255.208.140" AND sourceport=86 OR translatedipaddress="194.68.27.149" AND sourceport=13106 OR translatedipaddress="194.68.27.176" AND sourceport=6460 OR translatedipaddress="37.143.128.223" AND sourceport=16223 OR translatedipaddress="31.40.212.130" AND sourceport=7225 OR translatedipaddress="198.244.207.203" AND sourceport=2076)
index=activity AND rg_functionality="Cloud Application Audit" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND destinationport=28693 OR destinationtranslatedaddress="162.252.175.90" AND destinationport=845 OR destinationtranslatedaddress="162.252.175.109" AND destinationport=28330 OR destinationtranslatedaddress="151.236.20.39" AND destinationport=5524 OR destinationtranslatedaddress="158.255.208.140" AND destinationport=86 OR destinationtranslatedaddress="194.68.27.149" AND destinationport=13106 OR destinationtranslatedaddress="194.68.27.176" AND destinationport=6460 OR destinationtranslatedaddress="37.143.128.223" AND destinationport=16223 OR destinationtranslatedaddress="31.40.212.130" AND destinationport=7225 OR destinationtranslatedaddress="198.244.207.203" AND destinationport=2076)
index=activity AND rg_functionality="Cloud Application Audit" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND destinationtranslatedport=28693 OR destinationtranslatedaddress="162.252.175.90" AND destinationtranslatedport=845 OR destinationtranslatedaddress="162.252.175.109" AND destinationtranslatedport=28330 OR destinationtranslatedaddress="151.236.20.39" AND destinationtranslatedport=5524 OR destinationtranslatedaddress="158.255.208.140" AND destinationtranslatedport=86 OR destinationtranslatedaddress="194.68.27.149" AND destinationtranslatedport=13106 OR destinationtranslatedaddress="194.68.27.176" AND destinationtranslatedport=6460 OR destinationtranslatedaddress="37.143.128.223" AND destinationtranslatedport=16223 OR destinationtranslatedaddress="31.40.212.130" AND destinationtranslatedport=7225 OR destinationtranslatedaddress="198.244.207.203" AND destinationtranslatedport=2076)
index=activity AND rg_functionality="Cloud Application Audit" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND translatedport=28693 OR destinationtranslatedaddress="162.252.175.90" AND translatedport=845 OR destinationtranslatedaddress="162.252.175.109" AND translatedport=28330 OR destinationtranslatedaddress="151.236.20.39" AND translatedport=5524 OR destinationtranslatedaddress="158.255.208.140" AND translatedport=86 OR destinationtranslatedaddress="194.68.27.149" AND translatedport=13106 OR destinationtranslatedaddress="194.68.27.176" AND translatedport=6460 OR destinationtranslatedaddress="37.143.128.223" AND translatedport=16223 OR destinationtranslatedaddress="31.40.212.130" AND translatedport=7225 OR destinationtranslatedaddress="198.244.207.203" AND translatedport=2076)
index=activity AND rg_functionality="Cloud Application Audit" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="208.115.230.243" AND destinationport=16697 OR destinationaddress="185.126.239.207" AND destinationport=26630 OR destinationaddress="213.183.57.174" AND destinationport=12517 OR destinationaddress="213.183.57.72" AND destinationport=12517 OR destinationaddress="213.183.56.201" AND destinationport=12517 OR destinationaddress="95.164.45.27" AND destinationport=17426 OR destinationaddress="45.120.178.161" AND destinationport=11013 OR destinationaddress="176.120.74.3" AND destinationport=17268 OR destinationaddress="92.243.64.184" AND destinationport=17146 OR destinationaddress="92.243.64.36" AND destinationport=17146)
index=activity AND rg_functionality="Cloud Application Audit" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="208.115.230.243" AND sourceport=16697 OR sourceaddress="185.126.239.207" AND sourceport=26630 OR sourceaddress="213.183.57.174" AND sourceport=12517 OR sourceaddress="213.183.57.72" AND sourceport=12517 OR sourceaddress="213.183.56.201" AND sourceport=12517 OR sourceaddress="95.164.45.27" AND sourceport=17426 OR sourceaddress="45.120.178.161" AND sourceport=11013 OR sourceaddress="176.120.74.3" AND sourceport=17268 OR sourceaddress="92.243.64.184" AND sourceport=17146 OR sourceaddress="92.243.64.36" AND sourceport=17146)
index=activity AND rg_functionality="Cloud Application Audit" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="208.115.230.243" AND sourceport=16697 OR translatedipaddress="185.126.239.207" AND sourceport=26630 OR translatedipaddress="213.183.57.174" AND sourceport=12517 OR translatedipaddress="213.183.57.72" AND sourceport=12517 OR translatedipaddress="213.183.56.201" AND sourceport=12517 OR translatedipaddress="95.164.45.27" AND sourceport=17426 OR translatedipaddress="45.120.178.161" AND sourceport=11013 OR translatedipaddress="176.120.74.3" AND sourceport=17268 OR translatedipaddress="92.243.64.184" AND sourceport=17146 OR translatedipaddress="92.243.64.36" AND sourceport=17146)
index=activity AND rg_functionality="Cloud Application Audit" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND destinationport=16697 OR destinationtranslatedaddress="185.126.239.207" AND destinationport=26630 OR destinationtranslatedaddress="213.183.57.174" AND destinationport=12517 OR destinationtranslatedaddress="213.183.57.72" AND destinationport=12517 OR destinationtranslatedaddress="213.183.56.201" AND destinationport=12517 OR destinationtranslatedaddress="95.164.45.27" AND destinationport=17426 OR destinationtranslatedaddress="45.120.178.161" AND destinationport=11013 OR destinationtranslatedaddress="176.120.74.3" AND destinationport=17268 OR destinationtranslatedaddress="92.243.64.184" AND destinationport=17146 OR destinationtranslatedaddress="92.243.64.36" AND destinationport=17146)
index=activity AND rg_functionality="Cloud Application Audit" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND destinationtranslatedport=16697 OR destinationtranslatedaddress="185.126.239.207" AND destinationtranslatedport=26630 OR destinationtranslatedaddress="213.183.57.174" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="213.183.57.72" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="213.183.56.201" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="95.164.45.27" AND destinationtranslatedport=17426 OR destinationtranslatedaddress="45.120.178.161" AND destinationtranslatedport=11013 OR destinationtranslatedaddress="176.120.74.3" AND destinationtranslatedport=17268 OR destinationtranslatedaddress="92.243.64.184" AND destinationtranslatedport=17146 OR destinationtranslatedaddress="92.243.64.36" AND destinationtranslatedport=17146)
index=activity AND rg_functionality="Cloud Application Audit" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND translatedport=16697 OR destinationtranslatedaddress="185.126.239.207" AND translatedport=26630 OR destinationtranslatedaddress="213.183.57.174" AND translatedport=12517 OR destinationtranslatedaddress="213.183.57.72" AND translatedport=12517 OR destinationtranslatedaddress="213.183.56.201" AND translatedport=12517 OR destinationtranslatedaddress="95.164.45.27" AND translatedport=17426 OR destinationtranslatedaddress="45.120.178.161" AND translatedport=11013 OR destinationtranslatedaddress="176.120.74.3" AND translatedport=17268 OR destinationtranslatedaddress="92.243.64.184" AND translatedport=17146 OR destinationtranslatedaddress="92.243.64.36" AND translatedport=17146)
index=activity AND rg_functionality="Cloud Application Audit" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="89.31.120.126" AND destinationport=11578 OR destinationaddress="91.132.93.33" AND destinationport=11578 OR destinationaddress="91.132.95.28" AND destinationport=8773 OR destinationaddress="91.132.95.204" AND destinationport=8773 OR destinationaddress="91.132.95.135" AND destinationport=8773 OR destinationaddress="194.233.174.22" AND destinationport=45358)
index=activity AND rg_functionality="Cloud Application Audit" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="89.31.120.126" AND sourceport=11578 OR sourceaddress="91.132.93.33" AND sourceport=11578 OR sourceaddress="91.132.95.28" AND sourceport=8773 OR sourceaddress="91.132.95.204" AND sourceport=8773 OR sourceaddress="91.132.95.135" AND sourceport=8773 OR sourceaddress="194.233.174.22" AND sourceport=45358)
index=activity AND rg_functionality="Cloud Application Audit" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="89.31.120.126" AND sourceport=11578 OR translatedipaddress="91.132.93.33" AND sourceport=11578 OR translatedipaddress="91.132.95.28" AND sourceport=8773 OR translatedipaddress="91.132.95.204" AND sourceport=8773 OR translatedipaddress="91.132.95.135" AND sourceport=8773 OR translatedipaddress="194.233.174.22" AND sourceport=45358)
index=activity AND rg_functionality="Cloud Application Audit" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND destinationport=11578 OR destinationtranslatedaddress="91.132.93.33" AND destinationport=11578 OR destinationtranslatedaddress="91.132.95.28" AND destinationport=8773 OR destinationtranslatedaddress="91.132.95.204" AND destinationport=8773 OR destinationtranslatedaddress="91.132.95.135" AND destinationport=8773 OR destinationtranslatedaddress="194.233.174.22" AND destinationport=45358)
index=activity AND rg_functionality="Cloud Application Audit" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND destinationtranslatedport=11578 OR destinationtranslatedaddress="91.132.93.33" AND destinationtranslatedport=11578 OR destinationtranslatedaddress="91.132.95.28" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="91.132.95.204" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="91.132.95.135" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="194.233.174.22" AND destinationtranslatedport=45358)
index=activity AND rg_functionality="Cloud Application Audit" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND translatedport=11578 OR destinationtranslatedaddress="91.132.93.33" AND translatedport=11578 OR destinationtranslatedaddress="91.132.95.28" AND translatedport=8773 OR destinationtranslatedaddress="91.132.95.204" AND translatedport=8773 OR destinationtranslatedaddress="91.132.95.135" AND translatedport=8773 OR destinationtranslatedaddress="194.233.174.22" AND translatedport=45358)
index=activity AND rg_functionality="Authentication / VPN" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="158.255.212.173" AND destinationport=10862 OR destinationaddress="151.236.25.126" AND destinationport=11331 OR destinationaddress="158.255.215.49" AND destinationport=23079 OR destinationaddress="185.26.239.98" AND destinationport=11076 OR destinationaddress="151.236.25.10" AND destinationport=7205 OR destinationaddress="37.235.53.217" AND destinationport=1358 OR destinationaddress="151.236.23.232" AND destinationport=763 OR destinationaddress="37.235.56.204" AND destinationport=24239 OR destinationaddress="162.252.175.122" AND destinationport=4126 OR destinationaddress="162.252.175.136" AND destinationport=11077)
index=activity AND rg_functionality="Authentication / VPN" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="158.255.212.173" AND sourceport=10862 OR sourceaddress="151.236.25.126" AND sourceport=11331 OR sourceaddress="158.255.215.49" AND sourceport=23079 OR sourceaddress="185.26.239.98" AND sourceport=11076 OR sourceaddress="151.236.25.10" AND sourceport=7205 OR sourceaddress="37.235.53.217" AND sourceport=1358 OR sourceaddress="151.236.23.232" AND sourceport=763 OR sourceaddress="37.235.56.204" AND sourceport=24239 OR sourceaddress="162.252.175.122" AND sourceport=4126 OR sourceaddress="162.252.175.136" AND sourceport=11077)
index=activity AND rg_functionality="Authentication / VPN" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="158.255.212.173" AND sourceport=10862 OR translatedipaddress="151.236.25.126" AND sourceport=11331 OR translatedipaddress="158.255.215.49" AND sourceport=23079 OR translatedipaddress="185.26.239.98" AND sourceport=11076 OR translatedipaddress="151.236.25.10" AND sourceport=7205 OR translatedipaddress="37.235.53.217" AND sourceport=1358 OR translatedipaddress="151.236.23.232" AND sourceport=763 OR translatedipaddress="37.235.56.204" AND sourceport=24239 OR translatedipaddress="162.252.175.122" AND sourceport=4126 OR translatedipaddress="162.252.175.136" AND sourceport=11077)
index=activity AND rg_functionality="Authentication / VPN" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND destinationport=10862 OR destinationtranslatedaddress="151.236.25.126" AND destinationport=11331 OR destinationtranslatedaddress="158.255.215.49" AND destinationport=23079 OR destinationtranslatedaddress="185.26.239.98" AND destinationport=11076 OR destinationtranslatedaddress="151.236.25.10" AND destinationport=7205 OR destinationtranslatedaddress="37.235.53.217" AND destinationport=1358 OR destinationtranslatedaddress="151.236.23.232" AND destinationport=763 OR destinationtranslatedaddress="37.235.56.204" AND destinationport=24239 OR destinationtranslatedaddress="162.252.175.122" AND destinationport=4126 OR destinationtranslatedaddress="162.252.175.136" AND destinationport=11077)
index=activity AND rg_functionality="Authentication / VPN" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND destinationtranslatedport=10862 OR destinationtranslatedaddress="151.236.25.126" AND destinationtranslatedport=11331 OR destinationtranslatedaddress="158.255.215.49" AND destinationtranslatedport=23079 OR destinationtranslatedaddress="185.26.239.98" AND destinationtranslatedport=11076 OR destinationtranslatedaddress="151.236.25.10" AND destinationtranslatedport=7205 OR destinationtranslatedaddress="37.235.53.217" AND destinationtranslatedport=1358 OR destinationtranslatedaddress="151.236.23.232" AND destinationtranslatedport=763 OR destinationtranslatedaddress="37.235.56.204" AND destinationtranslatedport=24239 OR destinationtranslatedaddress="162.252.175.122" AND destinationtranslatedport=4126 OR destinationtranslatedaddress="162.252.175.136" AND destinationtranslatedport=11077)
index=activity AND rg_functionality="Authentication / VPN" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND translatedport=10862 OR destinationtranslatedaddress="151.236.25.126" AND translatedport=11331 OR destinationtranslatedaddress="158.255.215.49" AND translatedport=23079 OR destinationtranslatedaddress="185.26.239.98" AND translatedport=11076 OR destinationtranslatedaddress="151.236.25.10" AND translatedport=7205 OR destinationtranslatedaddress="37.235.53.217" AND translatedport=1358 OR destinationtranslatedaddress="151.236.23.232" AND translatedport=763 OR destinationtranslatedaddress="37.235.56.204" AND translatedport=24239 OR destinationtranslatedaddress="162.252.175.122" AND translatedport=4126 OR destinationtranslatedaddress="162.252.175.136" AND translatedport=11077)
index=activity AND rg_functionality="Authentication / VPN" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="162.252.175.163" AND destinationport=28693 OR destinationaddress="162.252.175.90" AND destinationport=845 OR destinationaddress="162.252.175.109" AND destinationport=28330 OR destinationaddress="151.236.20.39" AND destinationport=5524 OR destinationaddress="158.255.208.140" AND destinationport=86 OR destinationaddress="194.68.27.149" AND destinationport=13106 OR destinationaddress="194.68.27.176" AND destinationport=6460 OR destinationaddress="37.143.128.223" AND destinationport=16223 OR destinationaddress="31.40.212.130" AND destinationport=7225 OR destinationaddress="198.244.207.203" AND destinationport=2076)
index=activity AND rg_functionality="Authentication / VPN" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="162.252.175.163" AND sourceport=28693 OR sourceaddress="162.252.175.90" AND sourceport=845 OR sourceaddress="162.252.175.109" AND sourceport=28330 OR sourceaddress="151.236.20.39" AND sourceport=5524 OR sourceaddress="158.255.208.140" AND sourceport=86 OR sourceaddress="194.68.27.149" AND sourceport=13106 OR sourceaddress="194.68.27.176" AND sourceport=6460 OR sourceaddress="37.143.128.223" AND sourceport=16223 OR sourceaddress="31.40.212.130" AND sourceport=7225 OR sourceaddress="198.244.207.203" AND sourceport=2076)
index=activity AND rg_functionality="Authentication / VPN" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="162.252.175.163" AND sourceport=28693 OR translatedipaddress="162.252.175.90" AND sourceport=845 OR translatedipaddress="162.252.175.109" AND sourceport=28330 OR translatedipaddress="151.236.20.39" AND sourceport=5524 OR translatedipaddress="158.255.208.140" AND sourceport=86 OR translatedipaddress="194.68.27.149" AND sourceport=13106 OR translatedipaddress="194.68.27.176" AND sourceport=6460 OR translatedipaddress="37.143.128.223" AND sourceport=16223 OR translatedipaddress="31.40.212.130" AND sourceport=7225 OR translatedipaddress="198.244.207.203" AND sourceport=2076)
index=activity AND rg_functionality="Authentication / VPN" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND destinationport=28693 OR destinationtranslatedaddress="162.252.175.90" AND destinationport=845 OR destinationtranslatedaddress="162.252.175.109" AND destinationport=28330 OR destinationtranslatedaddress="151.236.20.39" AND destinationport=5524 OR destinationtranslatedaddress="158.255.208.140" AND destinationport=86 OR destinationtranslatedaddress="194.68.27.149" AND destinationport=13106 OR destinationtranslatedaddress="194.68.27.176" AND destinationport=6460 OR destinationtranslatedaddress="37.143.128.223" AND destinationport=16223 OR destinationtranslatedaddress="31.40.212.130" AND destinationport=7225 OR destinationtranslatedaddress="198.244.207.203" AND destinationport=2076)
index=activity AND rg_functionality="Authentication / VPN" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND destinationtranslatedport=28693 OR destinationtranslatedaddress="162.252.175.90" AND destinationtranslatedport=845 OR destinationtranslatedaddress="162.252.175.109" AND destinationtranslatedport=28330 OR destinationtranslatedaddress="151.236.20.39" AND destinationtranslatedport=5524 OR destinationtranslatedaddress="158.255.208.140" AND destinationtranslatedport=86 OR destinationtranslatedaddress="194.68.27.149" AND destinationtranslatedport=13106 OR destinationtranslatedaddress="194.68.27.176" AND destinationtranslatedport=6460 OR destinationtranslatedaddress="37.143.128.223" AND destinationtranslatedport=16223 OR destinationtranslatedaddress="31.40.212.130" AND destinationtranslatedport=7225 OR destinationtranslatedaddress="198.244.207.203" AND destinationtranslatedport=2076)
index=activity AND rg_functionality="Authentication / VPN" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND translatedport=28693 OR destinationtranslatedaddress="162.252.175.90" AND translatedport=845 OR destinationtranslatedaddress="162.252.175.109" AND translatedport=28330 OR destinationtranslatedaddress="151.236.20.39" AND translatedport=5524 OR destinationtranslatedaddress="158.255.208.140" AND translatedport=86 OR destinationtranslatedaddress="194.68.27.149" AND translatedport=13106 OR destinationtranslatedaddress="194.68.27.176" AND translatedport=6460 OR destinationtranslatedaddress="37.143.128.223" AND translatedport=16223 OR destinationtranslatedaddress="31.40.212.130" AND translatedport=7225 OR destinationtranslatedaddress="198.244.207.203" AND translatedport=2076)
index=activity AND rg_functionality="Authentication / VPN" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="208.115.230.243" AND destinationport=16697 OR destinationaddress="185.126.239.207" AND destinationport=26630 OR destinationaddress="213.183.57.174" AND destinationport=12517 OR destinationaddress="213.183.57.72" AND destinationport=12517 OR destinationaddress="213.183.56.201" AND destinationport=12517 OR destinationaddress="95.164.45.27" AND destinationport=17426 OR destinationaddress="45.120.178.161" AND destinationport=11013 OR destinationaddress="176.120.74.3" AND destinationport=17268 OR destinationaddress="92.243.64.184" AND destinationport=17146 OR destinationaddress="92.243.64.36" AND destinationport=17146)
index=activity AND rg_functionality="Authentication / VPN" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="208.115.230.243" AND sourceport=16697 OR sourceaddress="185.126.239.207" AND sourceport=26630 OR sourceaddress="213.183.57.174" AND sourceport=12517 OR sourceaddress="213.183.57.72" AND sourceport=12517 OR sourceaddress="213.183.56.201" AND sourceport=12517 OR sourceaddress="95.164.45.27" AND sourceport=17426 OR sourceaddress="45.120.178.161" AND sourceport=11013 OR sourceaddress="176.120.74.3" AND sourceport=17268 OR sourceaddress="92.243.64.184" AND sourceport=17146 OR sourceaddress="92.243.64.36" AND sourceport=17146)
index=activity AND rg_functionality="Authentication / VPN" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="208.115.230.243" AND sourceport=16697 OR translatedipaddress="185.126.239.207" AND sourceport=26630 OR translatedipaddress="213.183.57.174" AND sourceport=12517 OR translatedipaddress="213.183.57.72" AND sourceport=12517 OR translatedipaddress="213.183.56.201" AND sourceport=12517 OR translatedipaddress="95.164.45.27" AND sourceport=17426 OR translatedipaddress="45.120.178.161" AND sourceport=11013 OR translatedipaddress="176.120.74.3" AND sourceport=17268 OR translatedipaddress="92.243.64.184" AND sourceport=17146 OR translatedipaddress="92.243.64.36" AND sourceport=17146)
index=activity AND rg_functionality="Authentication / VPN" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND destinationport=16697 OR destinationtranslatedaddress="185.126.239.207" AND destinationport=26630 OR destinationtranslatedaddress="213.183.57.174" AND destinationport=12517 OR destinationtranslatedaddress="213.183.57.72" AND destinationport=12517 OR destinationtranslatedaddress="213.183.56.201" AND destinationport=12517 OR destinationtranslatedaddress="95.164.45.27" AND destinationport=17426 OR destinationtranslatedaddress="45.120.178.161" AND destinationport=11013 OR destinationtranslatedaddress="176.120.74.3" AND destinationport=17268 OR destinationtranslatedaddress="92.243.64.184" AND destinationport=17146 OR destinationtranslatedaddress="92.243.64.36" AND destinationport=17146)
index=activity AND rg_functionality="Authentication / VPN" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND destinationtranslatedport=16697 OR destinationtranslatedaddress="185.126.239.207" AND destinationtranslatedport=26630 OR destinationtranslatedaddress="213.183.57.174" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="213.183.57.72" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="213.183.56.201" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="95.164.45.27" AND destinationtranslatedport=17426 OR destinationtranslatedaddress="45.120.178.161" AND destinationtranslatedport=11013 OR destinationtranslatedaddress="176.120.74.3" AND destinationtranslatedport=17268 OR destinationtranslatedaddress="92.243.64.184" AND destinationtranslatedport=17146 OR destinationtranslatedaddress="92.243.64.36" AND destinationtranslatedport=17146)
index=activity AND rg_functionality="Authentication / VPN" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND translatedport=16697 OR destinationtranslatedaddress="185.126.239.207" AND translatedport=26630 OR destinationtranslatedaddress="213.183.57.174" AND translatedport=12517 OR destinationtranslatedaddress="213.183.57.72" AND translatedport=12517 OR destinationtranslatedaddress="213.183.56.201" AND translatedport=12517 OR destinationtranslatedaddress="95.164.45.27" AND translatedport=17426 OR destinationtranslatedaddress="45.120.178.161" AND translatedport=11013 OR destinationtranslatedaddress="176.120.74.3" AND translatedport=17268 OR destinationtranslatedaddress="92.243.64.184" AND translatedport=17146 OR destinationtranslatedaddress="92.243.64.36" AND translatedport=17146)
index=activity AND rg_functionality="Authentication / VPN" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="89.31.120.126" AND destinationport=11578 OR destinationaddress="91.132.93.33" AND destinationport=11578 OR destinationaddress="91.132.95.28" AND destinationport=8773 OR destinationaddress="91.132.95.204" AND destinationport=8773 OR destinationaddress="91.132.95.135" AND destinationport=8773 OR destinationaddress="194.233.174.22" AND destinationport=45358)
index=activity AND rg_functionality="Authentication / VPN" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="89.31.120.126" AND sourceport=11578 OR sourceaddress="91.132.93.33" AND sourceport=11578 OR sourceaddress="91.132.95.28" AND sourceport=8773 OR sourceaddress="91.132.95.204" AND sourceport=8773 OR sourceaddress="91.132.95.135" AND sourceport=8773 OR sourceaddress="194.233.174.22" AND sourceport=45358)
index=activity AND rg_functionality="Authentication / VPN" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="89.31.120.126" AND sourceport=11578 OR translatedipaddress="91.132.93.33" AND sourceport=11578 OR translatedipaddress="91.132.95.28" AND sourceport=8773 OR translatedipaddress="91.132.95.204" AND sourceport=8773 OR translatedipaddress="91.132.95.135" AND sourceport=8773 OR translatedipaddress="194.233.174.22" AND sourceport=45358)
index=activity AND rg_functionality="Authentication / VPN" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND destinationport=11578 OR destinationtranslatedaddress="91.132.93.33" AND destinationport=11578 OR destinationtranslatedaddress="91.132.95.28" AND destinationport=8773 OR destinationtranslatedaddress="91.132.95.204" AND destinationport=8773 OR destinationtranslatedaddress="91.132.95.135" AND destinationport=8773 OR destinationtranslatedaddress="194.233.174.22" AND destinationport=45358)
index=activity AND rg_functionality="Authentication / VPN" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND destinationtranslatedport=11578 OR destinationtranslatedaddress="91.132.93.33" AND destinationtranslatedport=11578 OR destinationtranslatedaddress="91.132.95.28" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="91.132.95.204" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="91.132.95.135" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="194.233.174.22" AND destinationtranslatedport=45358)
index=activity AND rg_functionality="Authentication / VPN" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND translatedport=11578 OR destinationtranslatedaddress="91.132.93.33" AND translatedport=11578 OR destinationtranslatedaddress="91.132.95.28" AND translatedport=8773 OR destinationtranslatedaddress="91.132.95.204" AND translatedport=8773 OR destinationtranslatedaddress="91.132.95.135" AND translatedport=8773 OR destinationtranslatedaddress="194.233.174.22" AND translatedport=45358)
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="158.255.212.173" AND destinationport=10862 OR destinationaddress="151.236.25.126" AND destinationport=11331 OR destinationaddress="158.255.215.49" AND destinationport=23079 OR destinationaddress="185.26.239.98" AND destinationport=11076 OR destinationaddress="151.236.25.10" AND destinationport=7205 OR destinationaddress="37.235.53.217" AND destinationport=1358 OR destinationaddress="151.236.23.232" AND destinationport=763 OR destinationaddress="37.235.56.204" AND destinationport=24239 OR destinationaddress="162.252.175.122" AND destinationport=4126 OR destinationaddress="162.252.175.136" AND destinationport=11077)
index=activity AND rg_functionality="Unix / Linux / AIX" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="158.255.212.173" AND sourceport=10862 OR sourceaddress="151.236.25.126" AND sourceport=11331 OR sourceaddress="158.255.215.49" AND sourceport=23079 OR sourceaddress="185.26.239.98" AND sourceport=11076 OR sourceaddress="151.236.25.10" AND sourceport=7205 OR sourceaddress="37.235.53.217" AND sourceport=1358 OR sourceaddress="151.236.23.232" AND sourceport=763 OR sourceaddress="37.235.56.204" AND sourceport=24239 OR sourceaddress="162.252.175.122" AND sourceport=4126 OR sourceaddress="162.252.175.136" AND sourceport=11077)
index=activity AND rg_functionality="Unix / Linux / AIX" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="158.255.212.173" AND sourceport=10862 OR translatedipaddress="151.236.25.126" AND sourceport=11331 OR translatedipaddress="158.255.215.49" AND sourceport=23079 OR translatedipaddress="185.26.239.98" AND sourceport=11076 OR translatedipaddress="151.236.25.10" AND sourceport=7205 OR translatedipaddress="37.235.53.217" AND sourceport=1358 OR translatedipaddress="151.236.23.232" AND sourceport=763 OR translatedipaddress="37.235.56.204" AND sourceport=24239 OR translatedipaddress="162.252.175.122" AND sourceport=4126 OR translatedipaddress="162.252.175.136" AND sourceport=11077)
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND destinationport=10862 OR destinationtranslatedaddress="151.236.25.126" AND destinationport=11331 OR destinationtranslatedaddress="158.255.215.49" AND destinationport=23079 OR destinationtranslatedaddress="185.26.239.98" AND destinationport=11076 OR destinationtranslatedaddress="151.236.25.10" AND destinationport=7205 OR destinationtranslatedaddress="37.235.53.217" AND destinationport=1358 OR destinationtranslatedaddress="151.236.23.232" AND destinationport=763 OR destinationtranslatedaddress="37.235.56.204" AND destinationport=24239 OR destinationtranslatedaddress="162.252.175.122" AND destinationport=4126 OR destinationtranslatedaddress="162.252.175.136" AND destinationport=11077)
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND destinationtranslatedport=10862 OR destinationtranslatedaddress="151.236.25.126" AND destinationtranslatedport=11331 OR destinationtranslatedaddress="158.255.215.49" AND destinationtranslatedport=23079 OR destinationtranslatedaddress="185.26.239.98" AND destinationtranslatedport=11076 OR destinationtranslatedaddress="151.236.25.10" AND destinationtranslatedport=7205 OR destinationtranslatedaddress="37.235.53.217" AND destinationtranslatedport=1358 OR destinationtranslatedaddress="151.236.23.232" AND destinationtranslatedport=763 OR destinationtranslatedaddress="37.235.56.204" AND destinationtranslatedport=24239 OR destinationtranslatedaddress="162.252.175.122" AND destinationtranslatedport=4126 OR destinationtranslatedaddress="162.252.175.136" AND destinationtranslatedport=11077)
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND translatedport=10862 OR destinationtranslatedaddress="151.236.25.126" AND translatedport=11331 OR destinationtranslatedaddress="158.255.215.49" AND translatedport=23079 OR destinationtranslatedaddress="185.26.239.98" AND translatedport=11076 OR destinationtranslatedaddress="151.236.25.10" AND translatedport=7205 OR destinationtranslatedaddress="37.235.53.217" AND translatedport=1358 OR destinationtranslatedaddress="151.236.23.232" AND translatedport=763 OR destinationtranslatedaddress="37.235.56.204" AND translatedport=24239 OR destinationtranslatedaddress="162.252.175.122" AND translatedport=4126 OR destinationtranslatedaddress="162.252.175.136" AND translatedport=11077)
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="162.252.175.163" AND destinationport=28693 OR destinationaddress="162.252.175.90" AND destinationport=845 OR destinationaddress="162.252.175.109" AND destinationport=28330 OR destinationaddress="151.236.20.39" AND destinationport=5524 OR destinationaddress="158.255.208.140" AND destinationport=86 OR destinationaddress="194.68.27.149" AND destinationport=13106 OR destinationaddress="194.68.27.176" AND destinationport=6460 OR destinationaddress="37.143.128.223" AND destinationport=16223 OR destinationaddress="31.40.212.130" AND destinationport=7225 OR destinationaddress="198.244.207.203" AND destinationport=2076)
index=activity AND rg_functionality="Unix / Linux / AIX" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="162.252.175.163" AND sourceport=28693 OR sourceaddress="162.252.175.90" AND sourceport=845 OR sourceaddress="162.252.175.109" AND sourceport=28330 OR sourceaddress="151.236.20.39" AND sourceport=5524 OR sourceaddress="158.255.208.140" AND sourceport=86 OR sourceaddress="194.68.27.149" AND sourceport=13106 OR sourceaddress="194.68.27.176" AND sourceport=6460 OR sourceaddress="37.143.128.223" AND sourceport=16223 OR sourceaddress="31.40.212.130" AND sourceport=7225 OR sourceaddress="198.244.207.203" AND sourceport=2076)
index=activity AND rg_functionality="Unix / Linux / AIX" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="162.252.175.163" AND sourceport=28693 OR translatedipaddress="162.252.175.90" AND sourceport=845 OR translatedipaddress="162.252.175.109" AND sourceport=28330 OR translatedipaddress="151.236.20.39" AND sourceport=5524 OR translatedipaddress="158.255.208.140" AND sourceport=86 OR translatedipaddress="194.68.27.149" AND sourceport=13106 OR translatedipaddress="194.68.27.176" AND sourceport=6460 OR translatedipaddress="37.143.128.223" AND sourceport=16223 OR translatedipaddress="31.40.212.130" AND sourceport=7225 OR translatedipaddress="198.244.207.203" AND sourceport=2076)
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND destinationport=28693 OR destinationtranslatedaddress="162.252.175.90" AND destinationport=845 OR destinationtranslatedaddress="162.252.175.109" AND destinationport=28330 OR destinationtranslatedaddress="151.236.20.39" AND destinationport=5524 OR destinationtranslatedaddress="158.255.208.140" AND destinationport=86 OR destinationtranslatedaddress="194.68.27.149" AND destinationport=13106 OR destinationtranslatedaddress="194.68.27.176" AND destinationport=6460 OR destinationtranslatedaddress="37.143.128.223" AND destinationport=16223 OR destinationtranslatedaddress="31.40.212.130" AND destinationport=7225 OR destinationtranslatedaddress="198.244.207.203" AND destinationport=2076)
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND destinationtranslatedport=28693 OR destinationtranslatedaddress="162.252.175.90" AND destinationtranslatedport=845 OR destinationtranslatedaddress="162.252.175.109" AND destinationtranslatedport=28330 OR destinationtranslatedaddress="151.236.20.39" AND destinationtranslatedport=5524 OR destinationtranslatedaddress="158.255.208.140" AND destinationtranslatedport=86 OR destinationtranslatedaddress="194.68.27.149" AND destinationtranslatedport=13106 OR destinationtranslatedaddress="194.68.27.176" AND destinationtranslatedport=6460 OR destinationtranslatedaddress="37.143.128.223" AND destinationtranslatedport=16223 OR destinationtranslatedaddress="31.40.212.130" AND destinationtranslatedport=7225 OR destinationtranslatedaddress="198.244.207.203" AND destinationtranslatedport=2076)
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND translatedport=28693 OR destinationtranslatedaddress="162.252.175.90" AND translatedport=845 OR destinationtranslatedaddress="162.252.175.109" AND translatedport=28330 OR destinationtranslatedaddress="151.236.20.39" AND translatedport=5524 OR destinationtranslatedaddress="158.255.208.140" AND translatedport=86 OR destinationtranslatedaddress="194.68.27.149" AND translatedport=13106 OR destinationtranslatedaddress="194.68.27.176" AND translatedport=6460 OR destinationtranslatedaddress="37.143.128.223" AND translatedport=16223 OR destinationtranslatedaddress="31.40.212.130" AND translatedport=7225 OR destinationtranslatedaddress="198.244.207.203" AND translatedport=2076)
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="208.115.230.243" AND destinationport=16697 OR destinationaddress="185.126.239.207" AND destinationport=26630 OR destinationaddress="213.183.57.174" AND destinationport=12517 OR destinationaddress="213.183.57.72" AND destinationport=12517 OR destinationaddress="213.183.56.201" AND destinationport=12517 OR destinationaddress="95.164.45.27" AND destinationport=17426 OR destinationaddress="45.120.178.161" AND destinationport=11013 OR destinationaddress="176.120.74.3" AND destinationport=17268 OR destinationaddress="92.243.64.184" AND destinationport=17146 OR destinationaddress="92.243.64.36" AND destinationport=17146)
index=activity AND rg_functionality="Unix / Linux / AIX" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="208.115.230.243" AND sourceport=16697 OR sourceaddress="185.126.239.207" AND sourceport=26630 OR sourceaddress="213.183.57.174" AND sourceport=12517 OR sourceaddress="213.183.57.72" AND sourceport=12517 OR sourceaddress="213.183.56.201" AND sourceport=12517 OR sourceaddress="95.164.45.27" AND sourceport=17426 OR sourceaddress="45.120.178.161" AND sourceport=11013 OR sourceaddress="176.120.74.3" AND sourceport=17268 OR sourceaddress="92.243.64.184" AND sourceport=17146 OR sourceaddress="92.243.64.36" AND sourceport=17146)
index=activity AND rg_functionality="Unix / Linux / AIX" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="208.115.230.243" AND sourceport=16697 OR translatedipaddress="185.126.239.207" AND sourceport=26630 OR translatedipaddress="213.183.57.174" AND sourceport=12517 OR translatedipaddress="213.183.57.72" AND sourceport=12517 OR translatedipaddress="213.183.56.201" AND sourceport=12517 OR translatedipaddress="95.164.45.27" AND sourceport=17426 OR translatedipaddress="45.120.178.161" AND sourceport=11013 OR translatedipaddress="176.120.74.3" AND sourceport=17268 OR translatedipaddress="92.243.64.184" AND sourceport=17146 OR translatedipaddress="92.243.64.36" AND sourceport=17146)
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND destinationport=16697 OR destinationtranslatedaddress="185.126.239.207" AND destinationport=26630 OR destinationtranslatedaddress="213.183.57.174" AND destinationport=12517 OR destinationtranslatedaddress="213.183.57.72" AND destinationport=12517 OR destinationtranslatedaddress="213.183.56.201" AND destinationport=12517 OR destinationtranslatedaddress="95.164.45.27" AND destinationport=17426 OR destinationtranslatedaddress="45.120.178.161" AND destinationport=11013 OR destinationtranslatedaddress="176.120.74.3" AND destinationport=17268 OR destinationtranslatedaddress="92.243.64.184" AND destinationport=17146 OR destinationtranslatedaddress="92.243.64.36" AND destinationport=17146)
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND destinationtranslatedport=16697 OR destinationtranslatedaddress="185.126.239.207" AND destinationtranslatedport=26630 OR destinationtranslatedaddress="213.183.57.174" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="213.183.57.72" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="213.183.56.201" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="95.164.45.27" AND destinationtranslatedport=17426 OR destinationtranslatedaddress="45.120.178.161" AND destinationtranslatedport=11013 OR destinationtranslatedaddress="176.120.74.3" AND destinationtranslatedport=17268 OR destinationtranslatedaddress="92.243.64.184" AND destinationtranslatedport=17146 OR destinationtranslatedaddress="92.243.64.36" AND destinationtranslatedport=17146)
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND translatedport=16697 OR destinationtranslatedaddress="185.126.239.207" AND translatedport=26630 OR destinationtranslatedaddress="213.183.57.174" AND translatedport=12517 OR destinationtranslatedaddress="213.183.57.72" AND translatedport=12517 OR destinationtranslatedaddress="213.183.56.201" AND translatedport=12517 OR destinationtranslatedaddress="95.164.45.27" AND translatedport=17426 OR destinationtranslatedaddress="45.120.178.161" AND translatedport=11013 OR destinationtranslatedaddress="176.120.74.3" AND translatedport=17268 OR destinationtranslatedaddress="92.243.64.184" AND translatedport=17146 OR destinationtranslatedaddress="92.243.64.36" AND translatedport=17146)
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="89.31.120.126" AND destinationport=11578 OR destinationaddress="91.132.93.33" AND destinationport=11578 OR destinationaddress="91.132.95.28" AND destinationport=8773 OR destinationaddress="91.132.95.204" AND destinationport=8773 OR destinationaddress="91.132.95.135" AND destinationport=8773 OR destinationaddress="194.233.174.22" AND destinationport=45358)
index=activity AND rg_functionality="Unix / Linux / AIX" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="89.31.120.126" AND sourceport=11578 OR sourceaddress="91.132.93.33" AND sourceport=11578 OR sourceaddress="91.132.95.28" AND sourceport=8773 OR sourceaddress="91.132.95.204" AND sourceport=8773 OR sourceaddress="91.132.95.135" AND sourceport=8773 OR sourceaddress="194.233.174.22" AND sourceport=45358)
index=activity AND rg_functionality="Unix / Linux / AIX" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="89.31.120.126" AND sourceport=11578 OR translatedipaddress="91.132.93.33" AND sourceport=11578 OR translatedipaddress="91.132.95.28" AND sourceport=8773 OR translatedipaddress="91.132.95.204" AND sourceport=8773 OR translatedipaddress="91.132.95.135" AND sourceport=8773 OR translatedipaddress="194.233.174.22" AND sourceport=45358)
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND destinationport=11578 OR destinationtranslatedaddress="91.132.93.33" AND destinationport=11578 OR destinationtranslatedaddress="91.132.95.28" AND destinationport=8773 OR destinationtranslatedaddress="91.132.95.204" AND destinationport=8773 OR destinationtranslatedaddress="91.132.95.135" AND destinationport=8773 OR destinationtranslatedaddress="194.233.174.22" AND destinationport=45358)
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND destinationtranslatedport=11578 OR destinationtranslatedaddress="91.132.93.33" AND destinationtranslatedport=11578 OR destinationtranslatedaddress="91.132.95.28" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="91.132.95.204" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="91.132.95.135" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="194.233.174.22" AND destinationtranslatedport=45358)
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND translatedport=11578 OR destinationtranslatedaddress="91.132.93.33" AND translatedport=11578 OR destinationtranslatedaddress="91.132.95.28" AND translatedport=8773 OR destinationtranslatedaddress="91.132.95.204" AND translatedport=8773 OR destinationtranslatedaddress="91.132.95.135" AND translatedport=8773 OR destinationtranslatedaddress="194.233.174.22" AND translatedport=45358)
index=activity AND rg_functionality="Authentication / WiFi" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="158.255.212.173" AND destinationport=10862 OR destinationaddress="151.236.25.126" AND destinationport=11331 OR destinationaddress="158.255.215.49" AND destinationport=23079 OR destinationaddress="185.26.239.98" AND destinationport=11076 OR destinationaddress="151.236.25.10" AND destinationport=7205 OR destinationaddress="37.235.53.217" AND destinationport=1358 OR destinationaddress="151.236.23.232" AND destinationport=763 OR destinationaddress="37.235.56.204" AND destinationport=24239 OR destinationaddress="162.252.175.122" AND destinationport=4126 OR destinationaddress="162.252.175.136" AND destinationport=11077)
index=activity AND rg_functionality="Authentication / WiFi" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="158.255.212.173" AND sourceport=10862 OR sourceaddress="151.236.25.126" AND sourceport=11331 OR sourceaddress="158.255.215.49" AND sourceport=23079 OR sourceaddress="185.26.239.98" AND sourceport=11076 OR sourceaddress="151.236.25.10" AND sourceport=7205 OR sourceaddress="37.235.53.217" AND sourceport=1358 OR sourceaddress="151.236.23.232" AND sourceport=763 OR sourceaddress="37.235.56.204" AND sourceport=24239 OR sourceaddress="162.252.175.122" AND sourceport=4126 OR sourceaddress="162.252.175.136" AND sourceport=11077)
index=activity AND rg_functionality="Authentication / WiFi" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="158.255.212.173" AND sourceport=10862 OR translatedipaddress="151.236.25.126" AND sourceport=11331 OR translatedipaddress="158.255.215.49" AND sourceport=23079 OR translatedipaddress="185.26.239.98" AND sourceport=11076 OR translatedipaddress="151.236.25.10" AND sourceport=7205 OR translatedipaddress="37.235.53.217" AND sourceport=1358 OR translatedipaddress="151.236.23.232" AND sourceport=763 OR translatedipaddress="37.235.56.204" AND sourceport=24239 OR translatedipaddress="162.252.175.122" AND sourceport=4126 OR translatedipaddress="162.252.175.136" AND sourceport=11077)
index=activity AND rg_functionality="Authentication / WiFi" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND destinationport=10862 OR destinationtranslatedaddress="151.236.25.126" AND destinationport=11331 OR destinationtranslatedaddress="158.255.215.49" AND destinationport=23079 OR destinationtranslatedaddress="185.26.239.98" AND destinationport=11076 OR destinationtranslatedaddress="151.236.25.10" AND destinationport=7205 OR destinationtranslatedaddress="37.235.53.217" AND destinationport=1358 OR destinationtranslatedaddress="151.236.23.232" AND destinationport=763 OR destinationtranslatedaddress="37.235.56.204" AND destinationport=24239 OR destinationtranslatedaddress="162.252.175.122" AND destinationport=4126 OR destinationtranslatedaddress="162.252.175.136" AND destinationport=11077)
index=activity AND rg_functionality="Authentication / WiFi" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND destinationtranslatedport=10862 OR destinationtranslatedaddress="151.236.25.126" AND destinationtranslatedport=11331 OR destinationtranslatedaddress="158.255.215.49" AND destinationtranslatedport=23079 OR destinationtranslatedaddress="185.26.239.98" AND destinationtranslatedport=11076 OR destinationtranslatedaddress="151.236.25.10" AND destinationtranslatedport=7205 OR destinationtranslatedaddress="37.235.53.217" AND destinationtranslatedport=1358 OR destinationtranslatedaddress="151.236.23.232" AND destinationtranslatedport=763 OR destinationtranslatedaddress="37.235.56.204" AND destinationtranslatedport=24239 OR destinationtranslatedaddress="162.252.175.122" AND destinationtranslatedport=4126 OR destinationtranslatedaddress="162.252.175.136" AND destinationtranslatedport=11077)
index=activity AND rg_functionality="Authentication / WiFi" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND translatedport=10862 OR destinationtranslatedaddress="151.236.25.126" AND translatedport=11331 OR destinationtranslatedaddress="158.255.215.49" AND translatedport=23079 OR destinationtranslatedaddress="185.26.239.98" AND translatedport=11076 OR destinationtranslatedaddress="151.236.25.10" AND translatedport=7205 OR destinationtranslatedaddress="37.235.53.217" AND translatedport=1358 OR destinationtranslatedaddress="151.236.23.232" AND translatedport=763 OR destinationtranslatedaddress="37.235.56.204" AND translatedport=24239 OR destinationtranslatedaddress="162.252.175.122" AND translatedport=4126 OR destinationtranslatedaddress="162.252.175.136" AND translatedport=11077)
index=activity AND rg_functionality="Authentication / WiFi" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="162.252.175.163" AND destinationport=28693 OR destinationaddress="162.252.175.90" AND destinationport=845 OR destinationaddress="162.252.175.109" AND destinationport=28330 OR destinationaddress="151.236.20.39" AND destinationport=5524 OR destinationaddress="158.255.208.140" AND destinationport=86 OR destinationaddress="194.68.27.149" AND destinationport=13106 OR destinationaddress="194.68.27.176" AND destinationport=6460 OR destinationaddress="37.143.128.223" AND destinationport=16223 OR destinationaddress="31.40.212.130" AND destinationport=7225 OR destinationaddress="198.244.207.203" AND destinationport=2076)
index=activity AND rg_functionality="Authentication / WiFi" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="162.252.175.163" AND sourceport=28693 OR sourceaddress="162.252.175.90" AND sourceport=845 OR sourceaddress="162.252.175.109" AND sourceport=28330 OR sourceaddress="151.236.20.39" AND sourceport=5524 OR sourceaddress="158.255.208.140" AND sourceport=86 OR sourceaddress="194.68.27.149" AND sourceport=13106 OR sourceaddress="194.68.27.176" AND sourceport=6460 OR sourceaddress="37.143.128.223" AND sourceport=16223 OR sourceaddress="31.40.212.130" AND sourceport=7225 OR sourceaddress="198.244.207.203" AND sourceport=2076)
index=activity AND rg_functionality="Authentication / WiFi" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="162.252.175.163" AND sourceport=28693 OR translatedipaddress="162.252.175.90" AND sourceport=845 OR translatedipaddress="162.252.175.109" AND sourceport=28330 OR translatedipaddress="151.236.20.39" AND sourceport=5524 OR translatedipaddress="158.255.208.140" AND sourceport=86 OR translatedipaddress="194.68.27.149" AND sourceport=13106 OR translatedipaddress="194.68.27.176" AND sourceport=6460 OR translatedipaddress="37.143.128.223" AND sourceport=16223 OR translatedipaddress="31.40.212.130" AND sourceport=7225 OR translatedipaddress="198.244.207.203" AND sourceport=2076)
index=activity AND rg_functionality="Authentication / WiFi" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND destinationport=28693 OR destinationtranslatedaddress="162.252.175.90" AND destinationport=845 OR destinationtranslatedaddress="162.252.175.109" AND destinationport=28330 OR destinationtranslatedaddress="151.236.20.39" AND destinationport=5524 OR destinationtranslatedaddress="158.255.208.140" AND destinationport=86 OR destinationtranslatedaddress="194.68.27.149" AND destinationport=13106 OR destinationtranslatedaddress="194.68.27.176" AND destinationport=6460 OR destinationtranslatedaddress="37.143.128.223" AND destinationport=16223 OR destinationtranslatedaddress="31.40.212.130" AND destinationport=7225 OR destinationtranslatedaddress="198.244.207.203" AND destinationport=2076)
index=activity AND rg_functionality="Authentication / WiFi" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND destinationtranslatedport=28693 OR destinationtranslatedaddress="162.252.175.90" AND destinationtranslatedport=845 OR destinationtranslatedaddress="162.252.175.109" AND destinationtranslatedport=28330 OR destinationtranslatedaddress="151.236.20.39" AND destinationtranslatedport=5524 OR destinationtranslatedaddress="158.255.208.140" AND destinationtranslatedport=86 OR destinationtranslatedaddress="194.68.27.149" AND destinationtranslatedport=13106 OR destinationtranslatedaddress="194.68.27.176" AND destinationtranslatedport=6460 OR destinationtranslatedaddress="37.143.128.223" AND destinationtranslatedport=16223 OR destinationtranslatedaddress="31.40.212.130" AND destinationtranslatedport=7225 OR destinationtranslatedaddress="198.244.207.203" AND destinationtranslatedport=2076)
index=activity AND rg_functionality="Authentication / WiFi" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND translatedport=28693 OR destinationtranslatedaddress="162.252.175.90" AND translatedport=845 OR destinationtranslatedaddress="162.252.175.109" AND translatedport=28330 OR destinationtranslatedaddress="151.236.20.39" AND translatedport=5524 OR destinationtranslatedaddress="158.255.208.140" AND translatedport=86 OR destinationtranslatedaddress="194.68.27.149" AND translatedport=13106 OR destinationtranslatedaddress="194.68.27.176" AND translatedport=6460 OR destinationtranslatedaddress="37.143.128.223" AND translatedport=16223 OR destinationtranslatedaddress="31.40.212.130" AND translatedport=7225 OR destinationtranslatedaddress="198.244.207.203" AND translatedport=2076)
index=activity AND rg_functionality="Authentication / WiFi" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="208.115.230.243" AND destinationport=16697 OR destinationaddress="185.126.239.207" AND destinationport=26630 OR destinationaddress="213.183.57.174" AND destinationport=12517 OR destinationaddress="213.183.57.72" AND destinationport=12517 OR destinationaddress="213.183.56.201" AND destinationport=12517 OR destinationaddress="95.164.45.27" AND destinationport=17426 OR destinationaddress="45.120.178.161" AND destinationport=11013 OR destinationaddress="176.120.74.3" AND destinationport=17268 OR destinationaddress="92.243.64.184" AND destinationport=17146 OR destinationaddress="92.243.64.36" AND destinationport=17146)
index=activity AND rg_functionality="Authentication / WiFi" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="208.115.230.243" AND sourceport=16697 OR sourceaddress="185.126.239.207" AND sourceport=26630 OR sourceaddress="213.183.57.174" AND sourceport=12517 OR sourceaddress="213.183.57.72" AND sourceport=12517 OR sourceaddress="213.183.56.201" AND sourceport=12517 OR sourceaddress="95.164.45.27" AND sourceport=17426 OR sourceaddress="45.120.178.161" AND sourceport=11013 OR sourceaddress="176.120.74.3" AND sourceport=17268 OR sourceaddress="92.243.64.184" AND sourceport=17146 OR sourceaddress="92.243.64.36" AND sourceport=17146)
index=activity AND rg_functionality="Authentication / WiFi" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="208.115.230.243" AND sourceport=16697 OR translatedipaddress="185.126.239.207" AND sourceport=26630 OR translatedipaddress="213.183.57.174" AND sourceport=12517 OR translatedipaddress="213.183.57.72" AND sourceport=12517 OR translatedipaddress="213.183.56.201" AND sourceport=12517 OR translatedipaddress="95.164.45.27" AND sourceport=17426 OR translatedipaddress="45.120.178.161" AND sourceport=11013 OR translatedipaddress="176.120.74.3" AND sourceport=17268 OR translatedipaddress="92.243.64.184" AND sourceport=17146 OR translatedipaddress="92.243.64.36" AND sourceport=17146)
index=activity AND rg_functionality="Authentication / WiFi" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND destinationport=16697 OR destinationtranslatedaddress="185.126.239.207" AND destinationport=26630 OR destinationtranslatedaddress="213.183.57.174" AND destinationport=12517 OR destinationtranslatedaddress="213.183.57.72" AND destinationport=12517 OR destinationtranslatedaddress="213.183.56.201" AND destinationport=12517 OR destinationtranslatedaddress="95.164.45.27" AND destinationport=17426 OR destinationtranslatedaddress="45.120.178.161" AND destinationport=11013 OR destinationtranslatedaddress="176.120.74.3" AND destinationport=17268 OR destinationtranslatedaddress="92.243.64.184" AND destinationport=17146 OR destinationtranslatedaddress="92.243.64.36" AND destinationport=17146)
index=activity AND rg_functionality="Authentication / WiFi" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND destinationtranslatedport=16697 OR destinationtranslatedaddress="185.126.239.207" AND destinationtranslatedport=26630 OR destinationtranslatedaddress="213.183.57.174" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="213.183.57.72" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="213.183.56.201" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="95.164.45.27" AND destinationtranslatedport=17426 OR destinationtranslatedaddress="45.120.178.161" AND destinationtranslatedport=11013 OR destinationtranslatedaddress="176.120.74.3" AND destinationtranslatedport=17268 OR destinationtranslatedaddress="92.243.64.184" AND destinationtranslatedport=17146 OR destinationtranslatedaddress="92.243.64.36" AND destinationtranslatedport=17146)
index=activity AND rg_functionality="Authentication / WiFi" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND translatedport=16697 OR destinationtranslatedaddress="185.126.239.207" AND translatedport=26630 OR destinationtranslatedaddress="213.183.57.174" AND translatedport=12517 OR destinationtranslatedaddress="213.183.57.72" AND translatedport=12517 OR destinationtranslatedaddress="213.183.56.201" AND translatedport=12517 OR destinationtranslatedaddress="95.164.45.27" AND translatedport=17426 OR destinationtranslatedaddress="45.120.178.161" AND translatedport=11013 OR destinationtranslatedaddress="176.120.74.3" AND translatedport=17268 OR destinationtranslatedaddress="92.243.64.184" AND translatedport=17146 OR destinationtranslatedaddress="92.243.64.36" AND translatedport=17146)
index=activity AND rg_functionality="Authentication / WiFi" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="89.31.120.126" AND destinationport=11578 OR destinationaddress="91.132.93.33" AND destinationport=11578 OR destinationaddress="91.132.95.28" AND destinationport=8773 OR destinationaddress="91.132.95.204" AND destinationport=8773 OR destinationaddress="91.132.95.135" AND destinationport=8773 OR destinationaddress="194.233.174.22" AND destinationport=45358)
index=activity AND rg_functionality="Authentication / WiFi" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="89.31.120.126" AND sourceport=11578 OR sourceaddress="91.132.93.33" AND sourceport=11578 OR sourceaddress="91.132.95.28" AND sourceport=8773 OR sourceaddress="91.132.95.204" AND sourceport=8773 OR sourceaddress="91.132.95.135" AND sourceport=8773 OR sourceaddress="194.233.174.22" AND sourceport=45358)
index=activity AND rg_functionality="Authentication / WiFi" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="89.31.120.126" AND sourceport=11578 OR translatedipaddress="91.132.93.33" AND sourceport=11578 OR translatedipaddress="91.132.95.28" AND sourceport=8773 OR translatedipaddress="91.132.95.204" AND sourceport=8773 OR translatedipaddress="91.132.95.135" AND sourceport=8773 OR translatedipaddress="194.233.174.22" AND sourceport=45358)
index=activity AND rg_functionality="Authentication / WiFi" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND destinationport=11578 OR destinationtranslatedaddress="91.132.93.33" AND destinationport=11578 OR destinationtranslatedaddress="91.132.95.28" AND destinationport=8773 OR destinationtranslatedaddress="91.132.95.204" AND destinationport=8773 OR destinationtranslatedaddress="91.132.95.135" AND destinationport=8773 OR destinationtranslatedaddress="194.233.174.22" AND destinationport=45358)
index=activity AND rg_functionality="Authentication / WiFi" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND destinationtranslatedport=11578 OR destinationtranslatedaddress="91.132.93.33" AND destinationtranslatedport=11578 OR destinationtranslatedaddress="91.132.95.28" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="91.132.95.204" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="91.132.95.135" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="194.233.174.22" AND destinationtranslatedport=45358)
index=activity AND rg_functionality="Authentication / WiFi" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND translatedport=11578 OR destinationtranslatedaddress="91.132.93.33" AND translatedport=11578 OR destinationtranslatedaddress="91.132.95.28" AND translatedport=8773 OR destinationtranslatedaddress="91.132.95.204" AND translatedport=8773 OR destinationtranslatedaddress="91.132.95.135" AND translatedport=8773 OR destinationtranslatedaddress="194.233.174.22" AND translatedport=45358)
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="158.255.212.173" AND destinationport=10862 OR destinationaddress="151.236.25.126" AND destinationport=11331 OR destinationaddress="158.255.215.49" AND destinationport=23079 OR destinationaddress="185.26.239.98" AND destinationport=11076 OR destinationaddress="151.236.25.10" AND destinationport=7205 OR destinationaddress="37.235.53.217" AND destinationport=1358 OR destinationaddress="151.236.23.232" AND destinationport=763 OR destinationaddress="37.235.56.204" AND destinationport=24239 OR destinationaddress="162.252.175.122" AND destinationport=4126 OR destinationaddress="162.252.175.136" AND destinationport=11077)
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="158.255.212.173" AND sourceport=10862 OR sourceaddress="151.236.25.126" AND sourceport=11331 OR sourceaddress="158.255.215.49" AND sourceport=23079 OR sourceaddress="185.26.239.98" AND sourceport=11076 OR sourceaddress="151.236.25.10" AND sourceport=7205 OR sourceaddress="37.235.53.217" AND sourceport=1358 OR sourceaddress="151.236.23.232" AND sourceport=763 OR sourceaddress="37.235.56.204" AND sourceport=24239 OR sourceaddress="162.252.175.122" AND sourceport=4126 OR sourceaddress="162.252.175.136" AND sourceport=11077)
index=activity AND rg_functionality="Cloud Application Security Broker" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="158.255.212.173" AND sourceport=10862 OR translatedipaddress="151.236.25.126" AND sourceport=11331 OR translatedipaddress="158.255.215.49" AND sourceport=23079 OR translatedipaddress="185.26.239.98" AND sourceport=11076 OR translatedipaddress="151.236.25.10" AND sourceport=7205 OR translatedipaddress="37.235.53.217" AND sourceport=1358 OR translatedipaddress="151.236.23.232" AND sourceport=763 OR translatedipaddress="37.235.56.204" AND sourceport=24239 OR translatedipaddress="162.252.175.122" AND sourceport=4126 OR translatedipaddress="162.252.175.136" AND sourceport=11077)
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND destinationport=10862 OR destinationtranslatedaddress="151.236.25.126" AND destinationport=11331 OR destinationtranslatedaddress="158.255.215.49" AND destinationport=23079 OR destinationtranslatedaddress="185.26.239.98" AND destinationport=11076 OR destinationtranslatedaddress="151.236.25.10" AND destinationport=7205 OR destinationtranslatedaddress="37.235.53.217" AND destinationport=1358 OR destinationtranslatedaddress="151.236.23.232" AND destinationport=763 OR destinationtranslatedaddress="37.235.56.204" AND destinationport=24239 OR destinationtranslatedaddress="162.252.175.122" AND destinationport=4126 OR destinationtranslatedaddress="162.252.175.136" AND destinationport=11077)
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND destinationtranslatedport=10862 OR destinationtranslatedaddress="151.236.25.126" AND destinationtranslatedport=11331 OR destinationtranslatedaddress="158.255.215.49" AND destinationtranslatedport=23079 OR destinationtranslatedaddress="185.26.239.98" AND destinationtranslatedport=11076 OR destinationtranslatedaddress="151.236.25.10" AND destinationtranslatedport=7205 OR destinationtranslatedaddress="37.235.53.217" AND destinationtranslatedport=1358 OR destinationtranslatedaddress="151.236.23.232" AND destinationtranslatedport=763 OR destinationtranslatedaddress="37.235.56.204" AND destinationtranslatedport=24239 OR destinationtranslatedaddress="162.252.175.122" AND destinationtranslatedport=4126 OR destinationtranslatedaddress="162.252.175.136" AND destinationtranslatedport=11077)
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND translatedport=10862 OR destinationtranslatedaddress="151.236.25.126" AND translatedport=11331 OR destinationtranslatedaddress="158.255.215.49" AND translatedport=23079 OR destinationtranslatedaddress="185.26.239.98" AND translatedport=11076 OR destinationtranslatedaddress="151.236.25.10" AND translatedport=7205 OR destinationtranslatedaddress="37.235.53.217" AND translatedport=1358 OR destinationtranslatedaddress="151.236.23.232" AND translatedport=763 OR destinationtranslatedaddress="37.235.56.204" AND translatedport=24239 OR destinationtranslatedaddress="162.252.175.122" AND translatedport=4126 OR destinationtranslatedaddress="162.252.175.136" AND translatedport=11077)
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="162.252.175.163" AND destinationport=28693 OR destinationaddress="162.252.175.90" AND destinationport=845 OR destinationaddress="162.252.175.109" AND destinationport=28330 OR destinationaddress="151.236.20.39" AND destinationport=5524 OR destinationaddress="158.255.208.140" AND destinationport=86 OR destinationaddress="194.68.27.149" AND destinationport=13106 OR destinationaddress="194.68.27.176" AND destinationport=6460 OR destinationaddress="37.143.128.223" AND destinationport=16223 OR destinationaddress="31.40.212.130" AND destinationport=7225 OR destinationaddress="198.244.207.203" AND destinationport=2076)
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="162.252.175.163" AND sourceport=28693 OR sourceaddress="162.252.175.90" AND sourceport=845 OR sourceaddress="162.252.175.109" AND sourceport=28330 OR sourceaddress="151.236.20.39" AND sourceport=5524 OR sourceaddress="158.255.208.140" AND sourceport=86 OR sourceaddress="194.68.27.149" AND sourceport=13106 OR sourceaddress="194.68.27.176" AND sourceport=6460 OR sourceaddress="37.143.128.223" AND sourceport=16223 OR sourceaddress="31.40.212.130" AND sourceport=7225 OR sourceaddress="198.244.207.203" AND sourceport=2076)
index=activity AND rg_functionality="Cloud Application Security Broker" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="162.252.175.163" AND sourceport=28693 OR translatedipaddress="162.252.175.90" AND sourceport=845 OR translatedipaddress="162.252.175.109" AND sourceport=28330 OR translatedipaddress="151.236.20.39" AND sourceport=5524 OR translatedipaddress="158.255.208.140" AND sourceport=86 OR translatedipaddress="194.68.27.149" AND sourceport=13106 OR translatedipaddress="194.68.27.176" AND sourceport=6460 OR translatedipaddress="37.143.128.223" AND sourceport=16223 OR translatedipaddress="31.40.212.130" AND sourceport=7225 OR translatedipaddress="198.244.207.203" AND sourceport=2076)
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND destinationport=28693 OR destinationtranslatedaddress="162.252.175.90" AND destinationport=845 OR destinationtranslatedaddress="162.252.175.109" AND destinationport=28330 OR destinationtranslatedaddress="151.236.20.39" AND destinationport=5524 OR destinationtranslatedaddress="158.255.208.140" AND destinationport=86 OR destinationtranslatedaddress="194.68.27.149" AND destinationport=13106 OR destinationtranslatedaddress="194.68.27.176" AND destinationport=6460 OR destinationtranslatedaddress="37.143.128.223" AND destinationport=16223 OR destinationtranslatedaddress="31.40.212.130" AND destinationport=7225 OR destinationtranslatedaddress="198.244.207.203" AND destinationport=2076)
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND destinationtranslatedport=28693 OR destinationtranslatedaddress="162.252.175.90" AND destinationtranslatedport=845 OR destinationtranslatedaddress="162.252.175.109" AND destinationtranslatedport=28330 OR destinationtranslatedaddress="151.236.20.39" AND destinationtranslatedport=5524 OR destinationtranslatedaddress="158.255.208.140" AND destinationtranslatedport=86 OR destinationtranslatedaddress="194.68.27.149" AND destinationtranslatedport=13106 OR destinationtranslatedaddress="194.68.27.176" AND destinationtranslatedport=6460 OR destinationtranslatedaddress="37.143.128.223" AND destinationtranslatedport=16223 OR destinationtranslatedaddress="31.40.212.130" AND destinationtranslatedport=7225 OR destinationtranslatedaddress="198.244.207.203" AND destinationtranslatedport=2076)
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND translatedport=28693 OR destinationtranslatedaddress="162.252.175.90" AND translatedport=845 OR destinationtranslatedaddress="162.252.175.109" AND translatedport=28330 OR destinationtranslatedaddress="151.236.20.39" AND translatedport=5524 OR destinationtranslatedaddress="158.255.208.140" AND translatedport=86 OR destinationtranslatedaddress="194.68.27.149" AND translatedport=13106 OR destinationtranslatedaddress="194.68.27.176" AND translatedport=6460 OR destinationtranslatedaddress="37.143.128.223" AND translatedport=16223 OR destinationtranslatedaddress="31.40.212.130" AND translatedport=7225 OR destinationtranslatedaddress="198.244.207.203" AND translatedport=2076)
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="208.115.230.243" AND destinationport=16697 OR destinationaddress="185.126.239.207" AND destinationport=26630 OR destinationaddress="213.183.57.174" AND destinationport=12517 OR destinationaddress="213.183.57.72" AND destinationport=12517 OR destinationaddress="213.183.56.201" AND destinationport=12517 OR destinationaddress="95.164.45.27" AND destinationport=17426 OR destinationaddress="45.120.178.161" AND destinationport=11013 OR destinationaddress="176.120.74.3" AND destinationport=17268 OR destinationaddress="92.243.64.184" AND destinationport=17146 OR destinationaddress="92.243.64.36" AND destinationport=17146)
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="208.115.230.243" AND sourceport=16697 OR sourceaddress="185.126.239.207" AND sourceport=26630 OR sourceaddress="213.183.57.174" AND sourceport=12517 OR sourceaddress="213.183.57.72" AND sourceport=12517 OR sourceaddress="213.183.56.201" AND sourceport=12517 OR sourceaddress="95.164.45.27" AND sourceport=17426 OR sourceaddress="45.120.178.161" AND sourceport=11013 OR sourceaddress="176.120.74.3" AND sourceport=17268 OR sourceaddress="92.243.64.184" AND sourceport=17146 OR sourceaddress="92.243.64.36" AND sourceport=17146)
index=activity AND rg_functionality="Cloud Application Security Broker" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="208.115.230.243" AND sourceport=16697 OR translatedipaddress="185.126.239.207" AND sourceport=26630 OR translatedipaddress="213.183.57.174" AND sourceport=12517 OR translatedipaddress="213.183.57.72" AND sourceport=12517 OR translatedipaddress="213.183.56.201" AND sourceport=12517 OR translatedipaddress="95.164.45.27" AND sourceport=17426 OR translatedipaddress="45.120.178.161" AND sourceport=11013 OR translatedipaddress="176.120.74.3" AND sourceport=17268 OR translatedipaddress="92.243.64.184" AND sourceport=17146 OR translatedipaddress="92.243.64.36" AND sourceport=17146)
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND destinationport=16697 OR destinationtranslatedaddress="185.126.239.207" AND destinationport=26630 OR destinationtranslatedaddress="213.183.57.174" AND destinationport=12517 OR destinationtranslatedaddress="213.183.57.72" AND destinationport=12517 OR destinationtranslatedaddress="213.183.56.201" AND destinationport=12517 OR destinationtranslatedaddress="95.164.45.27" AND destinationport=17426 OR destinationtranslatedaddress="45.120.178.161" AND destinationport=11013 OR destinationtranslatedaddress="176.120.74.3" AND destinationport=17268 OR destinationtranslatedaddress="92.243.64.184" AND destinationport=17146 OR destinationtranslatedaddress="92.243.64.36" AND destinationport=17146)
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND destinationtranslatedport=16697 OR destinationtranslatedaddress="185.126.239.207" AND destinationtranslatedport=26630 OR destinationtranslatedaddress="213.183.57.174" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="213.183.57.72" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="213.183.56.201" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="95.164.45.27" AND destinationtranslatedport=17426 OR destinationtranslatedaddress="45.120.178.161" AND destinationtranslatedport=11013 OR destinationtranslatedaddress="176.120.74.3" AND destinationtranslatedport=17268 OR destinationtranslatedaddress="92.243.64.184" AND destinationtranslatedport=17146 OR destinationtranslatedaddress="92.243.64.36" AND destinationtranslatedport=17146)
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND translatedport=16697 OR destinationtranslatedaddress="185.126.239.207" AND translatedport=26630 OR destinationtranslatedaddress="213.183.57.174" AND translatedport=12517 OR destinationtranslatedaddress="213.183.57.72" AND translatedport=12517 OR destinationtranslatedaddress="213.183.56.201" AND translatedport=12517 OR destinationtranslatedaddress="95.164.45.27" AND translatedport=17426 OR destinationtranslatedaddress="45.120.178.161" AND translatedport=11013 OR destinationtranslatedaddress="176.120.74.3" AND translatedport=17268 OR destinationtranslatedaddress="92.243.64.184" AND translatedport=17146 OR destinationtranslatedaddress="92.243.64.36" AND translatedport=17146)
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="89.31.120.126" AND destinationport=11578 OR destinationaddress="91.132.93.33" AND destinationport=11578 OR destinationaddress="91.132.95.28" AND destinationport=8773 OR destinationaddress="91.132.95.204" AND destinationport=8773 OR destinationaddress="91.132.95.135" AND destinationport=8773 OR destinationaddress="194.233.174.22" AND destinationport=45358)
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="89.31.120.126" AND sourceport=11578 OR sourceaddress="91.132.93.33" AND sourceport=11578 OR sourceaddress="91.132.95.28" AND sourceport=8773 OR sourceaddress="91.132.95.204" AND sourceport=8773 OR sourceaddress="91.132.95.135" AND sourceport=8773 OR sourceaddress="194.233.174.22" AND sourceport=45358)
index=activity AND rg_functionality="Cloud Application Security Broker" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="89.31.120.126" AND sourceport=11578 OR translatedipaddress="91.132.93.33" AND sourceport=11578 OR translatedipaddress="91.132.95.28" AND sourceport=8773 OR translatedipaddress="91.132.95.204" AND sourceport=8773 OR translatedipaddress="91.132.95.135" AND sourceport=8773 OR translatedipaddress="194.233.174.22" AND sourceport=45358)
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND destinationport=11578 OR destinationtranslatedaddress="91.132.93.33" AND destinationport=11578 OR destinationtranslatedaddress="91.132.95.28" AND destinationport=8773 OR destinationtranslatedaddress="91.132.95.204" AND destinationport=8773 OR destinationtranslatedaddress="91.132.95.135" AND destinationport=8773 OR destinationtranslatedaddress="194.233.174.22" AND destinationport=45358)
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND destinationtranslatedport=11578 OR destinationtranslatedaddress="91.132.93.33" AND destinationtranslatedport=11578 OR destinationtranslatedaddress="91.132.95.28" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="91.132.95.204" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="91.132.95.135" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="194.233.174.22" AND destinationtranslatedport=45358)
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND translatedport=11578 OR destinationtranslatedaddress="91.132.93.33" AND translatedport=11578 OR destinationtranslatedaddress="91.132.95.28" AND translatedport=8773 OR destinationtranslatedaddress="91.132.95.204" AND translatedport=8773 OR destinationtranslatedaddress="91.132.95.135" AND translatedport=8773 OR destinationtranslatedaddress="194.233.174.22" AND translatedport=45358)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="158.255.212.173" AND destinationport=10862 OR destinationaddress="151.236.25.126" AND destinationport=11331 OR destinationaddress="158.255.215.49" AND destinationport=23079 OR destinationaddress="185.26.239.98" AND destinationport=11076 OR destinationaddress="151.236.25.10" AND destinationport=7205 OR destinationaddress="37.235.53.217" AND destinationport=1358 OR destinationaddress="151.236.23.232" AND destinationport=763 OR destinationaddress="37.235.56.204" AND destinationport=24239 OR destinationaddress="162.252.175.122" AND destinationport=4126 OR destinationaddress="162.252.175.136" AND destinationport=11077)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="158.255.212.173" AND sourceport=10862 OR sourceaddress="151.236.25.126" AND sourceport=11331 OR sourceaddress="158.255.215.49" AND sourceport=23079 OR sourceaddress="185.26.239.98" AND sourceport=11076 OR sourceaddress="151.236.25.10" AND sourceport=7205 OR sourceaddress="37.235.53.217" AND sourceport=1358 OR sourceaddress="151.236.23.232" AND sourceport=763 OR sourceaddress="37.235.56.204" AND sourceport=24239 OR sourceaddress="162.252.175.122" AND sourceport=4126 OR sourceaddress="162.252.175.136" AND sourceport=11077)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="158.255.212.173" AND sourceport=10862 OR translatedipaddress="151.236.25.126" AND sourceport=11331 OR translatedipaddress="158.255.215.49" AND sourceport=23079 OR translatedipaddress="185.26.239.98" AND sourceport=11076 OR translatedipaddress="151.236.25.10" AND sourceport=7205 OR translatedipaddress="37.235.53.217" AND sourceport=1358 OR translatedipaddress="151.236.23.232" AND sourceport=763 OR translatedipaddress="37.235.56.204" AND sourceport=24239 OR translatedipaddress="162.252.175.122" AND sourceport=4126 OR translatedipaddress="162.252.175.136" AND sourceport=11077)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND destinationport=10862 OR destinationtranslatedaddress="151.236.25.126" AND destinationport=11331 OR destinationtranslatedaddress="158.255.215.49" AND destinationport=23079 OR destinationtranslatedaddress="185.26.239.98" AND destinationport=11076 OR destinationtranslatedaddress="151.236.25.10" AND destinationport=7205 OR destinationtranslatedaddress="37.235.53.217" AND destinationport=1358 OR destinationtranslatedaddress="151.236.23.232" AND destinationport=763 OR destinationtranslatedaddress="37.235.56.204" AND destinationport=24239 OR destinationtranslatedaddress="162.252.175.122" AND destinationport=4126 OR destinationtranslatedaddress="162.252.175.136" AND destinationport=11077)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND destinationtranslatedport=10862 OR destinationtranslatedaddress="151.236.25.126" AND destinationtranslatedport=11331 OR destinationtranslatedaddress="158.255.215.49" AND destinationtranslatedport=23079 OR destinationtranslatedaddress="185.26.239.98" AND destinationtranslatedport=11076 OR destinationtranslatedaddress="151.236.25.10" AND destinationtranslatedport=7205 OR destinationtranslatedaddress="37.235.53.217" AND destinationtranslatedport=1358 OR destinationtranslatedaddress="151.236.23.232" AND destinationtranslatedport=763 OR destinationtranslatedaddress="37.235.56.204" AND destinationtranslatedport=24239 OR destinationtranslatedaddress="162.252.175.122" AND destinationtranslatedport=4126 OR destinationtranslatedaddress="162.252.175.136" AND destinationtranslatedport=11077)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="158.255.212.173" AND translatedport=10862 OR destinationtranslatedaddress="151.236.25.126" AND translatedport=11331 OR destinationtranslatedaddress="158.255.215.49" AND translatedport=23079 OR destinationtranslatedaddress="185.26.239.98" AND translatedport=11076 OR destinationtranslatedaddress="151.236.25.10" AND translatedport=7205 OR destinationtranslatedaddress="37.235.53.217" AND translatedport=1358 OR destinationtranslatedaddress="151.236.23.232" AND translatedport=763 OR destinationtranslatedaddress="37.235.56.204" AND translatedport=24239 OR destinationtranslatedaddress="162.252.175.122" AND translatedport=4126 OR destinationtranslatedaddress="162.252.175.136" AND translatedport=11077)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="162.252.175.163" AND destinationport=28693 OR destinationaddress="162.252.175.90" AND destinationport=845 OR destinationaddress="162.252.175.109" AND destinationport=28330 OR destinationaddress="151.236.20.39" AND destinationport=5524 OR destinationaddress="158.255.208.140" AND destinationport=86 OR destinationaddress="194.68.27.149" AND destinationport=13106 OR destinationaddress="194.68.27.176" AND destinationport=6460 OR destinationaddress="37.143.128.223" AND destinationport=16223 OR destinationaddress="31.40.212.130" AND destinationport=7225 OR destinationaddress="198.244.207.203" AND destinationport=2076)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="162.252.175.163" AND sourceport=28693 OR sourceaddress="162.252.175.90" AND sourceport=845 OR sourceaddress="162.252.175.109" AND sourceport=28330 OR sourceaddress="151.236.20.39" AND sourceport=5524 OR sourceaddress="158.255.208.140" AND sourceport=86 OR sourceaddress="194.68.27.149" AND sourceport=13106 OR sourceaddress="194.68.27.176" AND sourceport=6460 OR sourceaddress="37.143.128.223" AND sourceport=16223 OR sourceaddress="31.40.212.130" AND sourceport=7225 OR sourceaddress="198.244.207.203" AND sourceport=2076)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="162.252.175.163" AND sourceport=28693 OR translatedipaddress="162.252.175.90" AND sourceport=845 OR translatedipaddress="162.252.175.109" AND sourceport=28330 OR translatedipaddress="151.236.20.39" AND sourceport=5524 OR translatedipaddress="158.255.208.140" AND sourceport=86 OR translatedipaddress="194.68.27.149" AND sourceport=13106 OR translatedipaddress="194.68.27.176" AND sourceport=6460 OR translatedipaddress="37.143.128.223" AND sourceport=16223 OR translatedipaddress="31.40.212.130" AND sourceport=7225 OR translatedipaddress="198.244.207.203" AND sourceport=2076)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND destinationport=28693 OR destinationtranslatedaddress="162.252.175.90" AND destinationport=845 OR destinationtranslatedaddress="162.252.175.109" AND destinationport=28330 OR destinationtranslatedaddress="151.236.20.39" AND destinationport=5524 OR destinationtranslatedaddress="158.255.208.140" AND destinationport=86 OR destinationtranslatedaddress="194.68.27.149" AND destinationport=13106 OR destinationtranslatedaddress="194.68.27.176" AND destinationport=6460 OR destinationtranslatedaddress="37.143.128.223" AND destinationport=16223 OR destinationtranslatedaddress="31.40.212.130" AND destinationport=7225 OR destinationtranslatedaddress="198.244.207.203" AND destinationport=2076)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND destinationtranslatedport=28693 OR destinationtranslatedaddress="162.252.175.90" AND destinationtranslatedport=845 OR destinationtranslatedaddress="162.252.175.109" AND destinationtranslatedport=28330 OR destinationtranslatedaddress="151.236.20.39" AND destinationtranslatedport=5524 OR destinationtranslatedaddress="158.255.208.140" AND destinationtranslatedport=86 OR destinationtranslatedaddress="194.68.27.149" AND destinationtranslatedport=13106 OR destinationtranslatedaddress="194.68.27.176" AND destinationtranslatedport=6460 OR destinationtranslatedaddress="37.143.128.223" AND destinationtranslatedport=16223 OR destinationtranslatedaddress="31.40.212.130" AND destinationtranslatedport=7225 OR destinationtranslatedaddress="198.244.207.203" AND destinationtranslatedport=2076)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="162.252.175.163" AND translatedport=28693 OR destinationtranslatedaddress="162.252.175.90" AND translatedport=845 OR destinationtranslatedaddress="162.252.175.109" AND translatedport=28330 OR destinationtranslatedaddress="151.236.20.39" AND translatedport=5524 OR destinationtranslatedaddress="158.255.208.140" AND translatedport=86 OR destinationtranslatedaddress="194.68.27.149" AND translatedport=13106 OR destinationtranslatedaddress="194.68.27.176" AND translatedport=6460 OR destinationtranslatedaddress="37.143.128.223" AND translatedport=16223 OR destinationtranslatedaddress="31.40.212.130" AND translatedport=7225 OR destinationtranslatedaddress="198.244.207.203" AND translatedport=2076)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="208.115.230.243" AND destinationport=16697 OR destinationaddress="185.126.239.207" AND destinationport=26630 OR destinationaddress="213.183.57.174" AND destinationport=12517 OR destinationaddress="213.183.57.72" AND destinationport=12517 OR destinationaddress="213.183.56.201" AND destinationport=12517 OR destinationaddress="95.164.45.27" AND destinationport=17426 OR destinationaddress="45.120.178.161" AND destinationport=11013 OR destinationaddress="176.120.74.3" AND destinationport=17268 OR destinationaddress="92.243.64.184" AND destinationport=17146 OR destinationaddress="92.243.64.36" AND destinationport=17146)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="208.115.230.243" AND sourceport=16697 OR sourceaddress="185.126.239.207" AND sourceport=26630 OR sourceaddress="213.183.57.174" AND sourceport=12517 OR sourceaddress="213.183.57.72" AND sourceport=12517 OR sourceaddress="213.183.56.201" AND sourceport=12517 OR sourceaddress="95.164.45.27" AND sourceport=17426 OR sourceaddress="45.120.178.161" AND sourceport=11013 OR sourceaddress="176.120.74.3" AND sourceport=17268 OR sourceaddress="92.243.64.184" AND sourceport=17146 OR sourceaddress="92.243.64.36" AND sourceport=17146)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="208.115.230.243" AND sourceport=16697 OR translatedipaddress="185.126.239.207" AND sourceport=26630 OR translatedipaddress="213.183.57.174" AND sourceport=12517 OR translatedipaddress="213.183.57.72" AND sourceport=12517 OR translatedipaddress="213.183.56.201" AND sourceport=12517 OR translatedipaddress="95.164.45.27" AND sourceport=17426 OR translatedipaddress="45.120.178.161" AND sourceport=11013 OR translatedipaddress="176.120.74.3" AND sourceport=17268 OR translatedipaddress="92.243.64.184" AND sourceport=17146 OR translatedipaddress="92.243.64.36" AND sourceport=17146)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND destinationport=16697 OR destinationtranslatedaddress="185.126.239.207" AND destinationport=26630 OR destinationtranslatedaddress="213.183.57.174" AND destinationport=12517 OR destinationtranslatedaddress="213.183.57.72" AND destinationport=12517 OR destinationtranslatedaddress="213.183.56.201" AND destinationport=12517 OR destinationtranslatedaddress="95.164.45.27" AND destinationport=17426 OR destinationtranslatedaddress="45.120.178.161" AND destinationport=11013 OR destinationtranslatedaddress="176.120.74.3" AND destinationport=17268 OR destinationtranslatedaddress="92.243.64.184" AND destinationport=17146 OR destinationtranslatedaddress="92.243.64.36" AND destinationport=17146)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND destinationtranslatedport=16697 OR destinationtranslatedaddress="185.126.239.207" AND destinationtranslatedport=26630 OR destinationtranslatedaddress="213.183.57.174" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="213.183.57.72" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="213.183.56.201" AND destinationtranslatedport=12517 OR destinationtranslatedaddress="95.164.45.27" AND destinationtranslatedport=17426 OR destinationtranslatedaddress="45.120.178.161" AND destinationtranslatedport=11013 OR destinationtranslatedaddress="176.120.74.3" AND destinationtranslatedport=17268 OR destinationtranslatedaddress="92.243.64.184" AND destinationtranslatedport=17146 OR destinationtranslatedaddress="92.243.64.36" AND destinationtranslatedport=17146)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="208.115.230.243" AND translatedport=16697 OR destinationtranslatedaddress="185.126.239.207" AND translatedport=26630 OR destinationtranslatedaddress="213.183.57.174" AND translatedport=12517 OR destinationtranslatedaddress="213.183.57.72" AND translatedport=12517 OR destinationtranslatedaddress="213.183.56.201" AND translatedport=12517 OR destinationtranslatedaddress="95.164.45.27" AND translatedport=17426 OR destinationtranslatedaddress="45.120.178.161" AND translatedport=11013 OR destinationtranslatedaddress="176.120.74.3" AND translatedport=17268 OR destinationtranslatedaddress="92.243.64.184" AND translatedport=17146 OR destinationtranslatedaddress="92.243.64.36" AND translatedport=17146)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="89.31.120.126" AND destinationport=11578 OR destinationaddress="91.132.93.33" AND destinationport=11578 OR destinationaddress="91.132.95.28" AND destinationport=8773 OR destinationaddress="91.132.95.204" AND destinationport=8773 OR destinationaddress="91.132.95.135" AND destinationport=8773 OR destinationaddress="194.233.174.22" AND destinationport=45358)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="89.31.120.126" AND sourceport=11578 OR sourceaddress="91.132.93.33" AND sourceport=11578 OR sourceaddress="91.132.95.28" AND sourceport=8773 OR sourceaddress="91.132.95.204" AND sourceport=8773 OR sourceaddress="91.132.95.135" AND sourceport=8773 OR sourceaddress="194.233.174.22" AND sourceport=45358)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="89.31.120.126" AND sourceport=11578 OR translatedipaddress="91.132.93.33" AND sourceport=11578 OR translatedipaddress="91.132.95.28" AND sourceport=8773 OR translatedipaddress="91.132.95.204" AND sourceport=8773 OR translatedipaddress="91.132.95.135" AND sourceport=8773 OR translatedipaddress="194.233.174.22" AND sourceport=45358)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND destinationport=11578 OR destinationtranslatedaddress="91.132.93.33" AND destinationport=11578 OR destinationtranslatedaddress="91.132.95.28" AND destinationport=8773 OR destinationtranslatedaddress="91.132.95.204" AND destinationport=8773 OR destinationtranslatedaddress="91.132.95.135" AND destinationport=8773 OR destinationtranslatedaddress="194.233.174.22" AND destinationport=45358)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND destinationtranslatedport=11578 OR destinationtranslatedaddress="91.132.93.33" AND destinationtranslatedport=11578 OR destinationtranslatedaddress="91.132.95.28" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="91.132.95.204" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="91.132.95.135" AND destinationtranslatedport=8773 OR destinationtranslatedaddress="194.233.174.22" AND destinationtranslatedport=45358)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="89.31.120.126" AND translatedport=11578 OR destinationtranslatedaddress="91.132.93.33" AND translatedport=11578 OR destinationtranslatedaddress="91.132.95.28" AND translatedport=8773 OR destinationtranslatedaddress="91.132.95.204" AND translatedport=8773 OR destinationtranslatedaddress="91.132.95.135" AND translatedport=8773 OR destinationtranslatedaddress="194.233.174.22" AND translatedport=45358)
