index=activity AND rg_functionality="Next Generation Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "remcosco222.duckdns.org" OR destinationhostname CONTAINS "rem.zoom-meeting.kro.kr" OR destinationhostname CONTAINS "singano.shop" OR destinationhostname CONTAINS "arekiteskola.se" OR destinationhostname CONTAINS "ctreec.ee" OR destinationhostname CONTAINS "eurotechconnect.com" OR destinationhostname CONTAINS "kaczmarskitgroup.pl")
index=activity AND rg_functionality="Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "remcosco222.duckdns.org" OR destinationhostname CONTAINS "rem.zoom-meeting.kro.kr" OR destinationhostname CONTAINS "singano.shop" OR destinationhostname CONTAINS "arekiteskola.se" OR destinationhostname CONTAINS "ctreec.ee" OR destinationhostname CONTAINS "eurotechconnect.com" OR destinationhostname CONTAINS "kaczmarskitgroup.pl")
index=activity AND rg_functionality="Next Generation Firewall" AND ipaddress NOT NULL AND ipaddress IN ("84.246.85.36", "51.89.148.22", "82.157.209.141", "83.222.191.201", "101.34.82.220")
index=activity AND rg_functionality="Web Application Firewall" AND ipaddress NOT NULL AND ipaddress IN ("84.246.85.36", "51.89.148.22", "82.157.209.141", "83.222.191.201", "101.34.82.220")
index=activity AND rg_functionality="DNS / DHCP" AND ipaddress NOT NULL AND ipaddress IN ("84.246.85.36", "51.89.148.22", "82.157.209.141", "83.222.191.201", "101.34.82.220")
index=activity AND rg_functionality="Web Proxy" AND ipaddress NOT NULL AND ipaddress IN ("84.246.85.36", "51.89.148.22", "82.157.209.141", "83.222.191.201", "101.34.82.220")
index=activity AND rg_functionality="Firewall" AND ipaddress NOT NULL AND ipaddress IN ("84.246.85.36", "51.89.148.22", "82.157.209.141", "83.222.191.201", "101.34.82.220")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "remcosco222.duckdns.org" OR destinationhostname CONTAINS "rem.zoom-meeting.kro.kr" OR destinationhostname CONTAINS "singano.shop" OR destinationhostname CONTAINS "arekiteskola.se" OR destinationhostname CONTAINS "ctreec.ee" OR destinationhostname CONTAINS "eurotechconnect.com" OR destinationhostname CONTAINS "kaczmarskitgroup.pl")
index=activity AND rg_functionality="Web Application Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "remcosco222.duckdns.org" OR destinationhostname CONTAINS "rem.zoom-meeting.kro.kr" OR destinationhostname CONTAINS "singano.shop" OR destinationhostname CONTAINS "arekiteskola.se" OR destinationhostname CONTAINS "ctreec.ee" OR destinationhostname CONTAINS "eurotechconnect.com" OR destinationhostname CONTAINS "kaczmarskitgroup.pl")
index=activity AND rg_functionality="Web Proxy" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "remcosco222.duckdns.org" OR destinationhostname CONTAINS "rem.zoom-meeting.kro.kr" OR destinationhostname CONTAINS "singano.shop" OR destinationhostname CONTAINS "arekiteskola.se" OR destinationhostname CONTAINS "ctreec.ee" OR destinationhostname CONTAINS "eurotechconnect.com" OR destinationhostname CONTAINS "kaczmarskitgroup.pl")
index=activity AND rg_functionality="DNS / DHCP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "remcosco222.duckdns.org" OR destinationhostname CONTAINS "rem.zoom-meeting.kro.kr" OR destinationhostname CONTAINS "singano.shop" OR destinationhostname CONTAINS "arekiteskola.se" OR destinationhostname CONTAINS "ctreec.ee" OR destinationhostname CONTAINS "eurotechconnect.com" OR destinationhostname CONTAINS "kaczmarskitgroup.pl")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND ipaddress NOT NULL AND ipaddress IN ("84.246.85.36", "51.89.148.22", "82.157.209.141", "83.222.191.201", "101.34.82.220")
