index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("001e42de6e081fb820d7b020be532009","01284d7c462168327746e20d6957167a422a16de81ee8d6a69e30524410f3fec","12e8ea40b05475478e833b4267c80bd4","14982a61b5f8d8d4f8ebc226d2dcb902","1a176f58f6dd72afdcd4b23e4f980b9c61b6a0ef23461eafaf248b91878579c6","1ed7ee105733903a4ff27c3e8b902b5c","228be7f0dbb2ea9f6f0b6816915732ebb9f9cf6e912d227ca67361791affd2d4","258badcae77cf4d5ec7b94b5e0651669","2b5c02b885f27519823eb7d6a5b2e181","2e303adc1e86e6c4066df7d9384fea13","2e30ef73b304832b265e571573907ca4","3d7e7c1ebffd05534a699bd8e333c395900f3ed684af2043f9656ada708ee137","44c3dc041f56f338c714d35aaebb2fb35ebf709e3e5189a825d52fa5aa2dc3c5","47c2db5107394687b506dcf511fba926","4d91684153d3594c5d2c2c5d55705a56","52498a8497e21fb14051172fb7fadad5f09ad60bb343aa6fbc96e4afef25eafe","525aa156c22e1132569bd103f7c029bcccc63cdf3dfe35724820c87e74416dd0","58efe840524e6394240592015c024d95466badd97fe8d50183ac47598c5f100c","616531bce6b16a87d2938768560669c1491ecd5e942b7be42b5289d795d4783f","79957397fd5d0db83c761ae48d136b0c2ae624c4bf886c710af87b989634bea1","7b1cec33e227917b0a77a3a7e33453a46abee5988a221008e96ccf92dc88cbed","7e52582ebd9c306edc2a86701d53ef2bf7ecff91f8df287ffe873d816b94b2f0","9a1f4a890add31768857cb4d6ca6b311f0c3f52914766a81c43f504b7b7e4774","9cb5291c880899c1e7e1ef3936ea169c","a7f65b7f346b23f0b5df969dc5a9450f","a813ba1c701b6df0e677e7abf1c297373b91ef23e6f3834edee818215b7327a0","b680188014bcc498826869be17f0cb64e9ffb753c04208730fb908b2a297cf66","ba45747eb05b56979938ff57f9ee3f77d98e1d89700c24cfee7fed75fc9ad3fa","c097468c21c2c06618935b71c3b87d8c","c479cc2d20fcbfa3c708b52a5fd36eee","cba0b1f7c1b316e2e6c8103dfa9be44daf34722ba078c5154c162d7094d66563","da601e5bdf473306bf5680fb1ace100e","eac60d6754173230ca74b518af1e4712","ef8e6d2a28858fef570fed45bb47fd1848d103b55d31337558e9b89b0a196119","fb045f3a09bd2c1337534ca455ef8106","fbd2c65fd3f41c5076a06de88873da0c")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("001e42de6e081fb820d7b020be532009","01284d7c462168327746e20d6957167a422a16de81ee8d6a69e30524410f3fec","12e8ea40b05475478e833b4267c80bd4","14982a61b5f8d8d4f8ebc226d2dcb902","1a176f58f6dd72afdcd4b23e4f980b9c61b6a0ef23461eafaf248b91878579c6","1ed7ee105733903a4ff27c3e8b902b5c","228be7f0dbb2ea9f6f0b6816915732ebb9f9cf6e912d227ca67361791affd2d4","258badcae77cf4d5ec7b94b5e0651669","2b5c02b885f27519823eb7d6a5b2e181","2e303adc1e86e6c4066df7d9384fea13","2e30ef73b304832b265e571573907ca4","3d7e7c1ebffd05534a699bd8e333c395900f3ed684af2043f9656ada708ee137","44c3dc041f56f338c714d35aaebb2fb35ebf709e3e5189a825d52fa5aa2dc3c5","47c2db5107394687b506dcf511fba926","4d91684153d3594c5d2c2c5d55705a56","52498a8497e21fb14051172fb7fadad5f09ad60bb343aa6fbc96e4afef25eafe","525aa156c22e1132569bd103f7c029bcccc63cdf3dfe35724820c87e74416dd0","58efe840524e6394240592015c024d95466badd97fe8d50183ac47598c5f100c","616531bce6b16a87d2938768560669c1491ecd5e942b7be42b5289d795d4783f","79957397fd5d0db83c761ae48d136b0c2ae624c4bf886c710af87b989634bea1","7b1cec33e227917b0a77a3a7e33453a46abee5988a221008e96ccf92dc88cbed","7e52582ebd9c306edc2a86701d53ef2bf7ecff91f8df287ffe873d816b94b2f0","9a1f4a890add31768857cb4d6ca6b311f0c3f52914766a81c43f504b7b7e4774","9cb5291c880899c1e7e1ef3936ea169c","a7f65b7f346b23f0b5df969dc5a9450f","a813ba1c701b6df0e677e7abf1c297373b91ef23e6f3834edee818215b7327a0","b680188014bcc498826869be17f0cb64e9ffb753c04208730fb908b2a297cf66","ba45747eb05b56979938ff57f9ee3f77d98e1d89700c24cfee7fed75fc9ad3fa","c097468c21c2c06618935b71c3b87d8c","c479cc2d20fcbfa3c708b52a5fd36eee","cba0b1f7c1b316e2e6c8103dfa9be44daf34722ba078c5154c162d7094d66563","da601e5bdf473306bf5680fb1ace100e","eac60d6754173230ca74b518af1e4712","ef8e6d2a28858fef570fed45bb47fd1848d103b55d31337558e9b89b0a196119","fb045f3a09bd2c1337534ca455ef8106","fbd2c65fd3f41c5076a06de88873da0c")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("001e42de6e081fb820d7b020be532009","01284d7c462168327746e20d6957167a422a16de81ee8d6a69e30524410f3fec","12e8ea40b05475478e833b4267c80bd4","14982a61b5f8d8d4f8ebc226d2dcb902","1a176f58f6dd72afdcd4b23e4f980b9c61b6a0ef23461eafaf248b91878579c6","1ed7ee105733903a4ff27c3e8b902b5c","228be7f0dbb2ea9f6f0b6816915732ebb9f9cf6e912d227ca67361791affd2d4","258badcae77cf4d5ec7b94b5e0651669","2b5c02b885f27519823eb7d6a5b2e181","2e303adc1e86e6c4066df7d9384fea13","2e30ef73b304832b265e571573907ca4","3d7e7c1ebffd05534a699bd8e333c395900f3ed684af2043f9656ada708ee137","44c3dc041f56f338c714d35aaebb2fb35ebf709e3e5189a825d52fa5aa2dc3c5","47c2db5107394687b506dcf511fba926","4d91684153d3594c5d2c2c5d55705a56","52498a8497e21fb14051172fb7fadad5f09ad60bb343aa6fbc96e4afef25eafe","525aa156c22e1132569bd103f7c029bcccc63cdf3dfe35724820c87e74416dd0","58efe840524e6394240592015c024d95466badd97fe8d50183ac47598c5f100c","616531bce6b16a87d2938768560669c1491ecd5e942b7be42b5289d795d4783f","79957397fd5d0db83c761ae48d136b0c2ae624c4bf886c710af87b989634bea1","7b1cec33e227917b0a77a3a7e33453a46abee5988a221008e96ccf92dc88cbed","7e52582ebd9c306edc2a86701d53ef2bf7ecff91f8df287ffe873d816b94b2f0","9a1f4a890add31768857cb4d6ca6b311f0c3f52914766a81c43f504b7b7e4774","9cb5291c880899c1e7e1ef3936ea169c","a7f65b7f346b23f0b5df969dc5a9450f","a813ba1c701b6df0e677e7abf1c297373b91ef23e6f3834edee818215b7327a0","b680188014bcc498826869be17f0cb64e9ffb753c04208730fb908b2a297cf66","ba45747eb05b56979938ff57f9ee3f77d98e1d89700c24cfee7fed75fc9ad3fa","c097468c21c2c06618935b71c3b87d8c","c479cc2d20fcbfa3c708b52a5fd36eee","cba0b1f7c1b316e2e6c8103dfa9be44daf34722ba078c5154c162d7094d66563","da601e5bdf473306bf5680fb1ace100e","eac60d6754173230ca74b518af1e4712","ef8e6d2a28858fef570fed45bb47fd1848d103b55d31337558e9b89b0a196119","fb045f3a09bd2c1337534ca455ef8106","fbd2c65fd3f41c5076a06de88873da0c")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("001e42de6e081fb820d7b020be532009","01284d7c462168327746e20d6957167a422a16de81ee8d6a69e30524410f3fec","12e8ea40b05475478e833b4267c80bd4","14982a61b5f8d8d4f8ebc226d2dcb902","1a176f58f6dd72afdcd4b23e4f980b9c61b6a0ef23461eafaf248b91878579c6","1ed7ee105733903a4ff27c3e8b902b5c","228be7f0dbb2ea9f6f0b6816915732ebb9f9cf6e912d227ca67361791affd2d4","258badcae77cf4d5ec7b94b5e0651669","2b5c02b885f27519823eb7d6a5b2e181","2e303adc1e86e6c4066df7d9384fea13","2e30ef73b304832b265e571573907ca4","3d7e7c1ebffd05534a699bd8e333c395900f3ed684af2043f9656ada708ee137","44c3dc041f56f338c714d35aaebb2fb35ebf709e3e5189a825d52fa5aa2dc3c5","47c2db5107394687b506dcf511fba926","4d91684153d3594c5d2c2c5d55705a56","52498a8497e21fb14051172fb7fadad5f09ad60bb343aa6fbc96e4afef25eafe","525aa156c22e1132569bd103f7c029bcccc63cdf3dfe35724820c87e74416dd0","58efe840524e6394240592015c024d95466badd97fe8d50183ac47598c5f100c","616531bce6b16a87d2938768560669c1491ecd5e942b7be42b5289d795d4783f","79957397fd5d0db83c761ae48d136b0c2ae624c4bf886c710af87b989634bea1","7b1cec33e227917b0a77a3a7e33453a46abee5988a221008e96ccf92dc88cbed","7e52582ebd9c306edc2a86701d53ef2bf7ecff91f8df287ffe873d816b94b2f0","9a1f4a890add31768857cb4d6ca6b311f0c3f52914766a81c43f504b7b7e4774","9cb5291c880899c1e7e1ef3936ea169c","a7f65b7f346b23f0b5df969dc5a9450f","a813ba1c701b6df0e677e7abf1c297373b91ef23e6f3834edee818215b7327a0","b680188014bcc498826869be17f0cb64e9ffb753c04208730fb908b2a297cf66","ba45747eb05b56979938ff57f9ee3f77d98e1d89700c24cfee7fed75fc9ad3fa","c097468c21c2c06618935b71c3b87d8c","c479cc2d20fcbfa3c708b52a5fd36eee","cba0b1f7c1b316e2e6c8103dfa9be44daf34722ba078c5154c162d7094d66563","da601e5bdf473306bf5680fb1ace100e","eac60d6754173230ca74b518af1e4712","ef8e6d2a28858fef570fed45bb47fd1848d103b55d31337558e9b89b0a196119","fb045f3a09bd2c1337534ca455ef8106","fbd2c65fd3f41c5076a06de88873da0c")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("001e42de6e081fb820d7b020be532009","01284d7c462168327746e20d6957167a422a16de81ee8d6a69e30524410f3fec","12e8ea40b05475478e833b4267c80bd4","14982a61b5f8d8d4f8ebc226d2dcb902","1a176f58f6dd72afdcd4b23e4f980b9c61b6a0ef23461eafaf248b91878579c6","1ed7ee105733903a4ff27c3e8b902b5c","228be7f0dbb2ea9f6f0b6816915732ebb9f9cf6e912d227ca67361791affd2d4","258badcae77cf4d5ec7b94b5e0651669","2b5c02b885f27519823eb7d6a5b2e181","2e303adc1e86e6c4066df7d9384fea13","2e30ef73b304832b265e571573907ca4","3d7e7c1ebffd05534a699bd8e333c395900f3ed684af2043f9656ada708ee137","44c3dc041f56f338c714d35aaebb2fb35ebf709e3e5189a825d52fa5aa2dc3c5","47c2db5107394687b506dcf511fba926","4d91684153d3594c5d2c2c5d55705a56","52498a8497e21fb14051172fb7fadad5f09ad60bb343aa6fbc96e4afef25eafe","525aa156c22e1132569bd103f7c029bcccc63cdf3dfe35724820c87e74416dd0","58efe840524e6394240592015c024d95466badd97fe8d50183ac47598c5f100c","616531bce6b16a87d2938768560669c1491ecd5e942b7be42b5289d795d4783f","79957397fd5d0db83c761ae48d136b0c2ae624c4bf886c710af87b989634bea1","7b1cec33e227917b0a77a3a7e33453a46abee5988a221008e96ccf92dc88cbed","7e52582ebd9c306edc2a86701d53ef2bf7ecff91f8df287ffe873d816b94b2f0","9a1f4a890add31768857cb4d6ca6b311f0c3f52914766a81c43f504b7b7e4774","9cb5291c880899c1e7e1ef3936ea169c","a7f65b7f346b23f0b5df969dc5a9450f","a813ba1c701b6df0e677e7abf1c297373b91ef23e6f3834edee818215b7327a0","b680188014bcc498826869be17f0cb64e9ffb753c04208730fb908b2a297cf66","ba45747eb05b56979938ff57f9ee3f77d98e1d89700c24cfee7fed75fc9ad3fa","c097468c21c2c06618935b71c3b87d8c","c479cc2d20fcbfa3c708b52a5fd36eee","cba0b1f7c1b316e2e6c8103dfa9be44daf34722ba078c5154c162d7094d66563","da601e5bdf473306bf5680fb1ace100e","eac60d6754173230ca74b518af1e4712","ef8e6d2a28858fef570fed45bb47fd1848d103b55d31337558e9b89b0a196119","fb045f3a09bd2c1337534ca455ef8106","fbd2c65fd3f41c5076a06de88873da0c")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("001e42de6e081fb820d7b020be532009","01284d7c462168327746e20d6957167a422a16de81ee8d6a69e30524410f3fec","12e8ea40b05475478e833b4267c80bd4","14982a61b5f8d8d4f8ebc226d2dcb902","1a176f58f6dd72afdcd4b23e4f980b9c61b6a0ef23461eafaf248b91878579c6","1ed7ee105733903a4ff27c3e8b902b5c","228be7f0dbb2ea9f6f0b6816915732ebb9f9cf6e912d227ca67361791affd2d4","258badcae77cf4d5ec7b94b5e0651669","2b5c02b885f27519823eb7d6a5b2e181","2e303adc1e86e6c4066df7d9384fea13","2e30ef73b304832b265e571573907ca4","3d7e7c1ebffd05534a699bd8e333c395900f3ed684af2043f9656ada708ee137","44c3dc041f56f338c714d35aaebb2fb35ebf709e3e5189a825d52fa5aa2dc3c5","47c2db5107394687b506dcf511fba926","4d91684153d3594c5d2c2c5d55705a56","52498a8497e21fb14051172fb7fadad5f09ad60bb343aa6fbc96e4afef25eafe","525aa156c22e1132569bd103f7c029bcccc63cdf3dfe35724820c87e74416dd0","58efe840524e6394240592015c024d95466badd97fe8d50183ac47598c5f100c","616531bce6b16a87d2938768560669c1491ecd5e942b7be42b5289d795d4783f","79957397fd5d0db83c761ae48d136b0c2ae624c4bf886c710af87b989634bea1","7b1cec33e227917b0a77a3a7e33453a46abee5988a221008e96ccf92dc88cbed","7e52582ebd9c306edc2a86701d53ef2bf7ecff91f8df287ffe873d816b94b2f0","9a1f4a890add31768857cb4d6ca6b311f0c3f52914766a81c43f504b7b7e4774","9cb5291c880899c1e7e1ef3936ea169c","a7f65b7f346b23f0b5df969dc5a9450f","a813ba1c701b6df0e677e7abf1c297373b91ef23e6f3834edee818215b7327a0","b680188014bcc498826869be17f0cb64e9ffb753c04208730fb908b2a297cf66","ba45747eb05b56979938ff57f9ee3f77d98e1d89700c24cfee7fed75fc9ad3fa","c097468c21c2c06618935b71c3b87d8c","c479cc2d20fcbfa3c708b52a5fd36eee","cba0b1f7c1b316e2e6c8103dfa9be44daf34722ba078c5154c162d7094d66563","da601e5bdf473306bf5680fb1ace100e","eac60d6754173230ca74b518af1e4712","ef8e6d2a28858fef570fed45bb47fd1848d103b55d31337558e9b89b0a196119","fb045f3a09bd2c1337534ca455ef8106","fbd2c65fd3f41c5076a06de88873da0c")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("001e42de6e081fb820d7b020be532009","01284d7c462168327746e20d6957167a422a16de81ee8d6a69e30524410f3fec","12e8ea40b05475478e833b4267c80bd4","14982a61b5f8d8d4f8ebc226d2dcb902","1a176f58f6dd72afdcd4b23e4f980b9c61b6a0ef23461eafaf248b91878579c6","1ed7ee105733903a4ff27c3e8b902b5c","228be7f0dbb2ea9f6f0b6816915732ebb9f9cf6e912d227ca67361791affd2d4","258badcae77cf4d5ec7b94b5e0651669","2b5c02b885f27519823eb7d6a5b2e181","2e303adc1e86e6c4066df7d9384fea13","2e30ef73b304832b265e571573907ca4","3d7e7c1ebffd05534a699bd8e333c395900f3ed684af2043f9656ada708ee137","44c3dc041f56f338c714d35aaebb2fb35ebf709e3e5189a825d52fa5aa2dc3c5","47c2db5107394687b506dcf511fba926","4d91684153d3594c5d2c2c5d55705a56","52498a8497e21fb14051172fb7fadad5f09ad60bb343aa6fbc96e4afef25eafe","525aa156c22e1132569bd103f7c029bcccc63cdf3dfe35724820c87e74416dd0","58efe840524e6394240592015c024d95466badd97fe8d50183ac47598c5f100c","616531bce6b16a87d2938768560669c1491ecd5e942b7be42b5289d795d4783f","79957397fd5d0db83c761ae48d136b0c2ae624c4bf886c710af87b989634bea1","7b1cec33e227917b0a77a3a7e33453a46abee5988a221008e96ccf92dc88cbed","7e52582ebd9c306edc2a86701d53ef2bf7ecff91f8df287ffe873d816b94b2f0","9a1f4a890add31768857cb4d6ca6b311f0c3f52914766a81c43f504b7b7e4774","9cb5291c880899c1e7e1ef3936ea169c","a7f65b7f346b23f0b5df969dc5a9450f","a813ba1c701b6df0e677e7abf1c297373b91ef23e6f3834edee818215b7327a0","b680188014bcc498826869be17f0cb64e9ffb753c04208730fb908b2a297cf66","ba45747eb05b56979938ff57f9ee3f77d98e1d89700c24cfee7fed75fc9ad3fa","c097468c21c2c06618935b71c3b87d8c","c479cc2d20fcbfa3c708b52a5fd36eee","cba0b1f7c1b316e2e6c8103dfa9be44daf34722ba078c5154c162d7094d66563","da601e5bdf473306bf5680fb1ace100e","eac60d6754173230ca74b518af1e4712","ef8e6d2a28858fef570fed45bb47fd1848d103b55d31337558e9b89b0a196119","fb045f3a09bd2c1337534ca455ef8106","fbd2c65fd3f41c5076a06de88873da0c")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("001e42de6e081fb820d7b020be532009","01284d7c462168327746e20d6957167a422a16de81ee8d6a69e30524410f3fec","12e8ea40b05475478e833b4267c80bd4","14982a61b5f8d8d4f8ebc226d2dcb902","1a176f58f6dd72afdcd4b23e4f980b9c61b6a0ef23461eafaf248b91878579c6","1ed7ee105733903a4ff27c3e8b902b5c","228be7f0dbb2ea9f6f0b6816915732ebb9f9cf6e912d227ca67361791affd2d4","258badcae77cf4d5ec7b94b5e0651669","2b5c02b885f27519823eb7d6a5b2e181","2e303adc1e86e6c4066df7d9384fea13","2e30ef73b304832b265e571573907ca4","3d7e7c1ebffd05534a699bd8e333c395900f3ed684af2043f9656ada708ee137","44c3dc041f56f338c714d35aaebb2fb35ebf709e3e5189a825d52fa5aa2dc3c5","47c2db5107394687b506dcf511fba926","4d91684153d3594c5d2c2c5d55705a56","52498a8497e21fb14051172fb7fadad5f09ad60bb343aa6fbc96e4afef25eafe","525aa156c22e1132569bd103f7c029bcccc63cdf3dfe35724820c87e74416dd0","58efe840524e6394240592015c024d95466badd97fe8d50183ac47598c5f100c","616531bce6b16a87d2938768560669c1491ecd5e942b7be42b5289d795d4783f","79957397fd5d0db83c761ae48d136b0c2ae624c4bf886c710af87b989634bea1","7b1cec33e227917b0a77a3a7e33453a46abee5988a221008e96ccf92dc88cbed","7e52582ebd9c306edc2a86701d53ef2bf7ecff91f8df287ffe873d816b94b2f0","9a1f4a890add31768857cb4d6ca6b311f0c3f52914766a81c43f504b7b7e4774","9cb5291c880899c1e7e1ef3936ea169c","a7f65b7f346b23f0b5df969dc5a9450f","a813ba1c701b6df0e677e7abf1c297373b91ef23e6f3834edee818215b7327a0","b680188014bcc498826869be17f0cb64e9ffb753c04208730fb908b2a297cf66","ba45747eb05b56979938ff57f9ee3f77d98e1d89700c24cfee7fed75fc9ad3fa","c097468c21c2c06618935b71c3b87d8c","c479cc2d20fcbfa3c708b52a5fd36eee","cba0b1f7c1b316e2e6c8103dfa9be44daf34722ba078c5154c162d7094d66563","da601e5bdf473306bf5680fb1ace100e","eac60d6754173230ca74b518af1e4712","ef8e6d2a28858fef570fed45bb47fd1848d103b55d31337558e9b89b0a196119","fb045f3a09bd2c1337534ca455ef8106","fbd2c65fd3f41c5076a06de88873da0c")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("001e42de6e081fb820d7b020be532009","01284d7c462168327746e20d6957167a422a16de81ee8d6a69e30524410f3fec","12e8ea40b05475478e833b4267c80bd4","14982a61b5f8d8d4f8ebc226d2dcb902","1a176f58f6dd72afdcd4b23e4f980b9c61b6a0ef23461eafaf248b91878579c6","1ed7ee105733903a4ff27c3e8b902b5c","228be7f0dbb2ea9f6f0b6816915732ebb9f9cf6e912d227ca67361791affd2d4","258badcae77cf4d5ec7b94b5e0651669","2b5c02b885f27519823eb7d6a5b2e181","2e303adc1e86e6c4066df7d9384fea13","2e30ef73b304832b265e571573907ca4","3d7e7c1ebffd05534a699bd8e333c395900f3ed684af2043f9656ada708ee137","44c3dc041f56f338c714d35aaebb2fb35ebf709e3e5189a825d52fa5aa2dc3c5","47c2db5107394687b506dcf511fba926","4d91684153d3594c5d2c2c5d55705a56","52498a8497e21fb14051172fb7fadad5f09ad60bb343aa6fbc96e4afef25eafe","525aa156c22e1132569bd103f7c029bcccc63cdf3dfe35724820c87e74416dd0","58efe840524e6394240592015c024d95466badd97fe8d50183ac47598c5f100c","616531bce6b16a87d2938768560669c1491ecd5e942b7be42b5289d795d4783f","79957397fd5d0db83c761ae48d136b0c2ae624c4bf886c710af87b989634bea1","7b1cec33e227917b0a77a3a7e33453a46abee5988a221008e96ccf92dc88cbed","7e52582ebd9c306edc2a86701d53ef2bf7ecff91f8df287ffe873d816b94b2f0","9a1f4a890add31768857cb4d6ca6b311f0c3f52914766a81c43f504b7b7e4774","9cb5291c880899c1e7e1ef3936ea169c","a7f65b7f346b23f0b5df969dc5a9450f","a813ba1c701b6df0e677e7abf1c297373b91ef23e6f3834edee818215b7327a0","b680188014bcc498826869be17f0cb64e9ffb753c04208730fb908b2a297cf66","ba45747eb05b56979938ff57f9ee3f77d98e1d89700c24cfee7fed75fc9ad3fa","c097468c21c2c06618935b71c3b87d8c","c479cc2d20fcbfa3c708b52a5fd36eee","cba0b1f7c1b316e2e6c8103dfa9be44daf34722ba078c5154c162d7094d66563","da601e5bdf473306bf5680fb1ace100e","eac60d6754173230ca74b518af1e4712","ef8e6d2a28858fef570fed45bb47fd1848d103b55d31337558e9b89b0a196119","fb045f3a09bd2c1337534ca455ef8106","fbd2c65fd3f41c5076a06de88873da0c")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("001e42de6e081fb820d7b020be532009","01284d7c462168327746e20d6957167a422a16de81ee8d6a69e30524410f3fec","12e8ea40b05475478e833b4267c80bd4","14982a61b5f8d8d4f8ebc226d2dcb902","1a176f58f6dd72afdcd4b23e4f980b9c61b6a0ef23461eafaf248b91878579c6","1ed7ee105733903a4ff27c3e8b902b5c","228be7f0dbb2ea9f6f0b6816915732ebb9f9cf6e912d227ca67361791affd2d4","258badcae77cf4d5ec7b94b5e0651669","2b5c02b885f27519823eb7d6a5b2e181","2e303adc1e86e6c4066df7d9384fea13","2e30ef73b304832b265e571573907ca4","3d7e7c1ebffd05534a699bd8e333c395900f3ed684af2043f9656ada708ee137","44c3dc041f56f338c714d35aaebb2fb35ebf709e3e5189a825d52fa5aa2dc3c5","47c2db5107394687b506dcf511fba926","4d91684153d3594c5d2c2c5d55705a56","52498a8497e21fb14051172fb7fadad5f09ad60bb343aa6fbc96e4afef25eafe","525aa156c22e1132569bd103f7c029bcccc63cdf3dfe35724820c87e74416dd0","58efe840524e6394240592015c024d95466badd97fe8d50183ac47598c5f100c","616531bce6b16a87d2938768560669c1491ecd5e942b7be42b5289d795d4783f","79957397fd5d0db83c761ae48d136b0c2ae624c4bf886c710af87b989634bea1","7b1cec33e227917b0a77a3a7e33453a46abee5988a221008e96ccf92dc88cbed","7e52582ebd9c306edc2a86701d53ef2bf7ecff91f8df287ffe873d816b94b2f0","9a1f4a890add31768857cb4d6ca6b311f0c3f52914766a81c43f504b7b7e4774","9cb5291c880899c1e7e1ef3936ea169c","a7f65b7f346b23f0b5df969dc5a9450f","a813ba1c701b6df0e677e7abf1c297373b91ef23e6f3834edee818215b7327a0","b680188014bcc498826869be17f0cb64e9ffb753c04208730fb908b2a297cf66","ba45747eb05b56979938ff57f9ee3f77d98e1d89700c24cfee7fed75fc9ad3fa","c097468c21c2c06618935b71c3b87d8c","c479cc2d20fcbfa3c708b52a5fd36eee","cba0b1f7c1b316e2e6c8103dfa9be44daf34722ba078c5154c162d7094d66563","da601e5bdf473306bf5680fb1ace100e","eac60d6754173230ca74b518af1e4712","ef8e6d2a28858fef570fed45bb47fd1848d103b55d31337558e9b89b0a196119","fb045f3a09bd2c1337534ca455ef8106","fbd2c65fd3f41c5076a06de88873da0c")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("001e42de6e081fb820d7b020be532009","01284d7c462168327746e20d6957167a422a16de81ee8d6a69e30524410f3fec","12e8ea40b05475478e833b4267c80bd4","14982a61b5f8d8d4f8ebc226d2dcb902","1a176f58f6dd72afdcd4b23e4f980b9c61b6a0ef23461eafaf248b91878579c6","1ed7ee105733903a4ff27c3e8b902b5c","228be7f0dbb2ea9f6f0b6816915732ebb9f9cf6e912d227ca67361791affd2d4","258badcae77cf4d5ec7b94b5e0651669","2b5c02b885f27519823eb7d6a5b2e181","2e303adc1e86e6c4066df7d9384fea13","2e30ef73b304832b265e571573907ca4","3d7e7c1ebffd05534a699bd8e333c395900f3ed684af2043f9656ada708ee137","44c3dc041f56f338c714d35aaebb2fb35ebf709e3e5189a825d52fa5aa2dc3c5","47c2db5107394687b506dcf511fba926","4d91684153d3594c5d2c2c5d55705a56","52498a8497e21fb14051172fb7fadad5f09ad60bb343aa6fbc96e4afef25eafe","525aa156c22e1132569bd103f7c029bcccc63cdf3dfe35724820c87e74416dd0","58efe840524e6394240592015c024d95466badd97fe8d50183ac47598c5f100c","616531bce6b16a87d2938768560669c1491ecd5e942b7be42b5289d795d4783f","79957397fd5d0db83c761ae48d136b0c2ae624c4bf886c710af87b989634bea1","7b1cec33e227917b0a77a3a7e33453a46abee5988a221008e96ccf92dc88cbed","7e52582ebd9c306edc2a86701d53ef2bf7ecff91f8df287ffe873d816b94b2f0","9a1f4a890add31768857cb4d6ca6b311f0c3f52914766a81c43f504b7b7e4774","9cb5291c880899c1e7e1ef3936ea169c","a7f65b7f346b23f0b5df969dc5a9450f","a813ba1c701b6df0e677e7abf1c297373b91ef23e6f3834edee818215b7327a0","b680188014bcc498826869be17f0cb64e9ffb753c04208730fb908b2a297cf66","ba45747eb05b56979938ff57f9ee3f77d98e1d89700c24cfee7fed75fc9ad3fa","c097468c21c2c06618935b71c3b87d8c","c479cc2d20fcbfa3c708b52a5fd36eee","cba0b1f7c1b316e2e6c8103dfa9be44daf34722ba078c5154c162d7094d66563","da601e5bdf473306bf5680fb1ace100e","eac60d6754173230ca74b518af1e4712","ef8e6d2a28858fef570fed45bb47fd1848d103b55d31337558e9b89b0a196119","fb045f3a09bd2c1337534ca455ef8106","fbd2c65fd3f41c5076a06de88873da0c")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("001e42de6e081fb820d7b020be532009","01284d7c462168327746e20d6957167a422a16de81ee8d6a69e30524410f3fec","12e8ea40b05475478e833b4267c80bd4","14982a61b5f8d8d4f8ebc226d2dcb902","1a176f58f6dd72afdcd4b23e4f980b9c61b6a0ef23461eafaf248b91878579c6","1ed7ee105733903a4ff27c3e8b902b5c","228be7f0dbb2ea9f6f0b6816915732ebb9f9cf6e912d227ca67361791affd2d4","258badcae77cf4d5ec7b94b5e0651669","2b5c02b885f27519823eb7d6a5b2e181","2e303adc1e86e6c4066df7d9384fea13","2e30ef73b304832b265e571573907ca4","3d7e7c1ebffd05534a699bd8e333c395900f3ed684af2043f9656ada708ee137","44c3dc041f56f338c714d35aaebb2fb35ebf709e3e5189a825d52fa5aa2dc3c5","47c2db5107394687b506dcf511fba926","4d91684153d3594c5d2c2c5d55705a56","52498a8497e21fb14051172fb7fadad5f09ad60bb343aa6fbc96e4afef25eafe","525aa156c22e1132569bd103f7c029bcccc63cdf3dfe35724820c87e74416dd0","58efe840524e6394240592015c024d95466badd97fe8d50183ac47598c5f100c","616531bce6b16a87d2938768560669c1491ecd5e942b7be42b5289d795d4783f","79957397fd5d0db83c761ae48d136b0c2ae624c4bf886c710af87b989634bea1","7b1cec33e227917b0a77a3a7e33453a46abee5988a221008e96ccf92dc88cbed","7e52582ebd9c306edc2a86701d53ef2bf7ecff91f8df287ffe873d816b94b2f0","9a1f4a890add31768857cb4d6ca6b311f0c3f52914766a81c43f504b7b7e4774","9cb5291c880899c1e7e1ef3936ea169c","a7f65b7f346b23f0b5df969dc5a9450f","a813ba1c701b6df0e677e7abf1c297373b91ef23e6f3834edee818215b7327a0","b680188014bcc498826869be17f0cb64e9ffb753c04208730fb908b2a297cf66","ba45747eb05b56979938ff57f9ee3f77d98e1d89700c24cfee7fed75fc9ad3fa","c097468c21c2c06618935b71c3b87d8c","c479cc2d20fcbfa3c708b52a5fd36eee","cba0b1f7c1b316e2e6c8103dfa9be44daf34722ba078c5154c162d7094d66563","da601e5bdf473306bf5680fb1ace100e","eac60d6754173230ca74b518af1e4712","ef8e6d2a28858fef570fed45bb47fd1848d103b55d31337558e9b89b0a196119","fb045f3a09bd2c1337534ca455ef8106","fbd2c65fd3f41c5076a06de88873da0c")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("001e42de6e081fb820d7b020be532009","01284d7c462168327746e20d6957167a422a16de81ee8d6a69e30524410f3fec","12e8ea40b05475478e833b4267c80bd4","14982a61b5f8d8d4f8ebc226d2dcb902","1a176f58f6dd72afdcd4b23e4f980b9c61b6a0ef23461eafaf248b91878579c6","1ed7ee105733903a4ff27c3e8b902b5c","228be7f0dbb2ea9f6f0b6816915732ebb9f9cf6e912d227ca67361791affd2d4","258badcae77cf4d5ec7b94b5e0651669","2b5c02b885f27519823eb7d6a5b2e181","2e303adc1e86e6c4066df7d9384fea13","2e30ef73b304832b265e571573907ca4","3d7e7c1ebffd05534a699bd8e333c395900f3ed684af2043f9656ada708ee137","44c3dc041f56f338c714d35aaebb2fb35ebf709e3e5189a825d52fa5aa2dc3c5","47c2db5107394687b506dcf511fba926","4d91684153d3594c5d2c2c5d55705a56","52498a8497e21fb14051172fb7fadad5f09ad60bb343aa6fbc96e4afef25eafe","525aa156c22e1132569bd103f7c029bcccc63cdf3dfe35724820c87e74416dd0","58efe840524e6394240592015c024d95466badd97fe8d50183ac47598c5f100c","616531bce6b16a87d2938768560669c1491ecd5e942b7be42b5289d795d4783f","79957397fd5d0db83c761ae48d136b0c2ae624c4bf886c710af87b989634bea1","7b1cec33e227917b0a77a3a7e33453a46abee5988a221008e96ccf92dc88cbed","7e52582ebd9c306edc2a86701d53ef2bf7ecff91f8df287ffe873d816b94b2f0","9a1f4a890add31768857cb4d6ca6b311f0c3f52914766a81c43f504b7b7e4774","9cb5291c880899c1e7e1ef3936ea169c","a7f65b7f346b23f0b5df969dc5a9450f","a813ba1c701b6df0e677e7abf1c297373b91ef23e6f3834edee818215b7327a0","b680188014bcc498826869be17f0cb64e9ffb753c04208730fb908b2a297cf66","ba45747eb05b56979938ff57f9ee3f77d98e1d89700c24cfee7fed75fc9ad3fa","c097468c21c2c06618935b71c3b87d8c","c479cc2d20fcbfa3c708b52a5fd36eee","cba0b1f7c1b316e2e6c8103dfa9be44daf34722ba078c5154c162d7094d66563","da601e5bdf473306bf5680fb1ace100e","eac60d6754173230ca74b518af1e4712","ef8e6d2a28858fef570fed45bb47fd1848d103b55d31337558e9b89b0a196119","fb045f3a09bd2c1337534ca455ef8106","fbd2c65fd3f41c5076a06de88873da0c")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("001e42de6e081fb820d7b020be532009","01284d7c462168327746e20d6957167a422a16de81ee8d6a69e30524410f3fec","12e8ea40b05475478e833b4267c80bd4","14982a61b5f8d8d4f8ebc226d2dcb902","1a176f58f6dd72afdcd4b23e4f980b9c61b6a0ef23461eafaf248b91878579c6","1ed7ee105733903a4ff27c3e8b902b5c","228be7f0dbb2ea9f6f0b6816915732ebb9f9cf6e912d227ca67361791affd2d4","258badcae77cf4d5ec7b94b5e0651669","2b5c02b885f27519823eb7d6a5b2e181","2e303adc1e86e6c4066df7d9384fea13","2e30ef73b304832b265e571573907ca4","3d7e7c1ebffd05534a699bd8e333c395900f3ed684af2043f9656ada708ee137","44c3dc041f56f338c714d35aaebb2fb35ebf709e3e5189a825d52fa5aa2dc3c5","47c2db5107394687b506dcf511fba926","4d91684153d3594c5d2c2c5d55705a56","52498a8497e21fb14051172fb7fadad5f09ad60bb343aa6fbc96e4afef25eafe","525aa156c22e1132569bd103f7c029bcccc63cdf3dfe35724820c87e74416dd0","58efe840524e6394240592015c024d95466badd97fe8d50183ac47598c5f100c","616531bce6b16a87d2938768560669c1491ecd5e942b7be42b5289d795d4783f","79957397fd5d0db83c761ae48d136b0c2ae624c4bf886c710af87b989634bea1","7b1cec33e227917b0a77a3a7e33453a46abee5988a221008e96ccf92dc88cbed","7e52582ebd9c306edc2a86701d53ef2bf7ecff91f8df287ffe873d816b94b2f0","9a1f4a890add31768857cb4d6ca6b311f0c3f52914766a81c43f504b7b7e4774","9cb5291c880899c1e7e1ef3936ea169c","a7f65b7f346b23f0b5df969dc5a9450f","a813ba1c701b6df0e677e7abf1c297373b91ef23e6f3834edee818215b7327a0","b680188014bcc498826869be17f0cb64e9ffb753c04208730fb908b2a297cf66","ba45747eb05b56979938ff57f9ee3f77d98e1d89700c24cfee7fed75fc9ad3fa","c097468c21c2c06618935b71c3b87d8c","c479cc2d20fcbfa3c708b52a5fd36eee","cba0b1f7c1b316e2e6c8103dfa9be44daf34722ba078c5154c162d7094d66563","da601e5bdf473306bf5680fb1ace100e","eac60d6754173230ca74b518af1e4712","ef8e6d2a28858fef570fed45bb47fd1848d103b55d31337558e9b89b0a196119","fb045f3a09bd2c1337534ca455ef8106","fbd2c65fd3f41c5076a06de88873da0c")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("001e42de6e081fb820d7b020be532009","01284d7c462168327746e20d6957167a422a16de81ee8d6a69e30524410f3fec","12e8ea40b05475478e833b4267c80bd4","14982a61b5f8d8d4f8ebc226d2dcb902","1a176f58f6dd72afdcd4b23e4f980b9c61b6a0ef23461eafaf248b91878579c6","1ed7ee105733903a4ff27c3e8b902b5c","228be7f0dbb2ea9f6f0b6816915732ebb9f9cf6e912d227ca67361791affd2d4","258badcae77cf4d5ec7b94b5e0651669","2b5c02b885f27519823eb7d6a5b2e181","2e303adc1e86e6c4066df7d9384fea13","2e30ef73b304832b265e571573907ca4","3d7e7c1ebffd05534a699bd8e333c395900f3ed684af2043f9656ada708ee137","44c3dc041f56f338c714d35aaebb2fb35ebf709e3e5189a825d52fa5aa2dc3c5","47c2db5107394687b506dcf511fba926","4d91684153d3594c5d2c2c5d55705a56","52498a8497e21fb14051172fb7fadad5f09ad60bb343aa6fbc96e4afef25eafe","525aa156c22e1132569bd103f7c029bcccc63cdf3dfe35724820c87e74416dd0","58efe840524e6394240592015c024d95466badd97fe8d50183ac47598c5f100c","616531bce6b16a87d2938768560669c1491ecd5e942b7be42b5289d795d4783f","79957397fd5d0db83c761ae48d136b0c2ae624c4bf886c710af87b989634bea1","7b1cec33e227917b0a77a3a7e33453a46abee5988a221008e96ccf92dc88cbed","7e52582ebd9c306edc2a86701d53ef2bf7ecff91f8df287ffe873d816b94b2f0","9a1f4a890add31768857cb4d6ca6b311f0c3f52914766a81c43f504b7b7e4774","9cb5291c880899c1e7e1ef3936ea169c","a7f65b7f346b23f0b5df969dc5a9450f","a813ba1c701b6df0e677e7abf1c297373b91ef23e6f3834edee818215b7327a0","b680188014bcc498826869be17f0cb64e9ffb753c04208730fb908b2a297cf66","ba45747eb05b56979938ff57f9ee3f77d98e1d89700c24cfee7fed75fc9ad3fa","c097468c21c2c06618935b71c3b87d8c","c479cc2d20fcbfa3c708b52a5fd36eee","cba0b1f7c1b316e2e6c8103dfa9be44daf34722ba078c5154c162d7094d66563","da601e5bdf473306bf5680fb1ace100e","eac60d6754173230ca74b518af1e4712","ef8e6d2a28858fef570fed45bb47fd1848d103b55d31337558e9b89b0a196119","fb045f3a09bd2c1337534ca455ef8106","fbd2c65fd3f41c5076a06de88873da0c")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("001e42de6e081fb820d7b020be532009","01284d7c462168327746e20d6957167a422a16de81ee8d6a69e30524410f3fec","12e8ea40b05475478e833b4267c80bd4","14982a61b5f8d8d4f8ebc226d2dcb902","1a176f58f6dd72afdcd4b23e4f980b9c61b6a0ef23461eafaf248b91878579c6","1ed7ee105733903a4ff27c3e8b902b5c","228be7f0dbb2ea9f6f0b6816915732ebb9f9cf6e912d227ca67361791affd2d4","258badcae77cf4d5ec7b94b5e0651669","2b5c02b885f27519823eb7d6a5b2e181","2e303adc1e86e6c4066df7d9384fea13","2e30ef73b304832b265e571573907ca4","3d7e7c1ebffd05534a699bd8e333c395900f3ed684af2043f9656ada708ee137","44c3dc041f56f338c714d35aaebb2fb35ebf709e3e5189a825d52fa5aa2dc3c5","47c2db5107394687b506dcf511fba926","4d91684153d3594c5d2c2c5d55705a56","52498a8497e21fb14051172fb7fadad5f09ad60bb343aa6fbc96e4afef25eafe","525aa156c22e1132569bd103f7c029bcccc63cdf3dfe35724820c87e74416dd0","58efe840524e6394240592015c024d95466badd97fe8d50183ac47598c5f100c","616531bce6b16a87d2938768560669c1491ecd5e942b7be42b5289d795d4783f","79957397fd5d0db83c761ae48d136b0c2ae624c4bf886c710af87b989634bea1","7b1cec33e227917b0a77a3a7e33453a46abee5988a221008e96ccf92dc88cbed","7e52582ebd9c306edc2a86701d53ef2bf7ecff91f8df287ffe873d816b94b2f0","9a1f4a890add31768857cb4d6ca6b311f0c3f52914766a81c43f504b7b7e4774","9cb5291c880899c1e7e1ef3936ea169c","a7f65b7f346b23f0b5df969dc5a9450f","a813ba1c701b6df0e677e7abf1c297373b91ef23e6f3834edee818215b7327a0","b680188014bcc498826869be17f0cb64e9ffb753c04208730fb908b2a297cf66","ba45747eb05b56979938ff57f9ee3f77d98e1d89700c24cfee7fed75fc9ad3fa","c097468c21c2c06618935b71c3b87d8c","c479cc2d20fcbfa3c708b52a5fd36eee","cba0b1f7c1b316e2e6c8103dfa9be44daf34722ba078c5154c162d7094d66563","da601e5bdf473306bf5680fb1ace100e","eac60d6754173230ca74b518af1e4712","ef8e6d2a28858fef570fed45bb47fd1848d103b55d31337558e9b89b0a196119","fb045f3a09bd2c1337534ca455ef8106","fbd2c65fd3f41c5076a06de88873da0c")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("001e42de6e081fb820d7b020be532009","01284d7c462168327746e20d6957167a422a16de81ee8d6a69e30524410f3fec","12e8ea40b05475478e833b4267c80bd4","14982a61b5f8d8d4f8ebc226d2dcb902","1a176f58f6dd72afdcd4b23e4f980b9c61b6a0ef23461eafaf248b91878579c6","1ed7ee105733903a4ff27c3e8b902b5c","228be7f0dbb2ea9f6f0b6816915732ebb9f9cf6e912d227ca67361791affd2d4","258badcae77cf4d5ec7b94b5e0651669","2b5c02b885f27519823eb7d6a5b2e181","2e303adc1e86e6c4066df7d9384fea13","2e30ef73b304832b265e571573907ca4","3d7e7c1ebffd05534a699bd8e333c395900f3ed684af2043f9656ada708ee137","44c3dc041f56f338c714d35aaebb2fb35ebf709e3e5189a825d52fa5aa2dc3c5","47c2db5107394687b506dcf511fba926","4d91684153d3594c5d2c2c5d55705a56","52498a8497e21fb14051172fb7fadad5f09ad60bb343aa6fbc96e4afef25eafe","525aa156c22e1132569bd103f7c029bcccc63cdf3dfe35724820c87e74416dd0","58efe840524e6394240592015c024d95466badd97fe8d50183ac47598c5f100c","616531bce6b16a87d2938768560669c1491ecd5e942b7be42b5289d795d4783f","79957397fd5d0db83c761ae48d136b0c2ae624c4bf886c710af87b989634bea1","7b1cec33e227917b0a77a3a7e33453a46abee5988a221008e96ccf92dc88cbed","7e52582ebd9c306edc2a86701d53ef2bf7ecff91f8df287ffe873d816b94b2f0","9a1f4a890add31768857cb4d6ca6b311f0c3f52914766a81c43f504b7b7e4774","9cb5291c880899c1e7e1ef3936ea169c","a7f65b7f346b23f0b5df969dc5a9450f","a813ba1c701b6df0e677e7abf1c297373b91ef23e6f3834edee818215b7327a0","b680188014bcc498826869be17f0cb64e9ffb753c04208730fb908b2a297cf66","ba45747eb05b56979938ff57f9ee3f77d98e1d89700c24cfee7fed75fc9ad3fa","c097468c21c2c06618935b71c3b87d8c","c479cc2d20fcbfa3c708b52a5fd36eee","cba0b1f7c1b316e2e6c8103dfa9be44daf34722ba078c5154c162d7094d66563","da601e5bdf473306bf5680fb1ace100e","eac60d6754173230ca74b518af1e4712","ef8e6d2a28858fef570fed45bb47fd1848d103b55d31337558e9b89b0a196119","fb045f3a09bd2c1337534ca455ef8106","fbd2c65fd3f41c5076a06de88873da0c")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("001e42de6e081fb820d7b020be532009","01284d7c462168327746e20d6957167a422a16de81ee8d6a69e30524410f3fec","12e8ea40b05475478e833b4267c80bd4","14982a61b5f8d8d4f8ebc226d2dcb902","1a176f58f6dd72afdcd4b23e4f980b9c61b6a0ef23461eafaf248b91878579c6","1ed7ee105733903a4ff27c3e8b902b5c","228be7f0dbb2ea9f6f0b6816915732ebb9f9cf6e912d227ca67361791affd2d4","258badcae77cf4d5ec7b94b5e0651669","2b5c02b885f27519823eb7d6a5b2e181","2e303adc1e86e6c4066df7d9384fea13","2e30ef73b304832b265e571573907ca4","3d7e7c1ebffd05534a699bd8e333c395900f3ed684af2043f9656ada708ee137","44c3dc041f56f338c714d35aaebb2fb35ebf709e3e5189a825d52fa5aa2dc3c5","47c2db5107394687b506dcf511fba926","4d91684153d3594c5d2c2c5d55705a56","52498a8497e21fb14051172fb7fadad5f09ad60bb343aa6fbc96e4afef25eafe","525aa156c22e1132569bd103f7c029bcccc63cdf3dfe35724820c87e74416dd0","58efe840524e6394240592015c024d95466badd97fe8d50183ac47598c5f100c","616531bce6b16a87d2938768560669c1491ecd5e942b7be42b5289d795d4783f","79957397fd5d0db83c761ae48d136b0c2ae624c4bf886c710af87b989634bea1","7b1cec33e227917b0a77a3a7e33453a46abee5988a221008e96ccf92dc88cbed","7e52582ebd9c306edc2a86701d53ef2bf7ecff91f8df287ffe873d816b94b2f0","9a1f4a890add31768857cb4d6ca6b311f0c3f52914766a81c43f504b7b7e4774","9cb5291c880899c1e7e1ef3936ea169c","a7f65b7f346b23f0b5df969dc5a9450f","a813ba1c701b6df0e677e7abf1c297373b91ef23e6f3834edee818215b7327a0","b680188014bcc498826869be17f0cb64e9ffb753c04208730fb908b2a297cf66","ba45747eb05b56979938ff57f9ee3f77d98e1d89700c24cfee7fed75fc9ad3fa","c097468c21c2c06618935b71c3b87d8c","c479cc2d20fcbfa3c708b52a5fd36eee","cba0b1f7c1b316e2e6c8103dfa9be44daf34722ba078c5154c162d7094d66563","da601e5bdf473306bf5680fb1ace100e","eac60d6754173230ca74b518af1e4712","ef8e6d2a28858fef570fed45bb47fd1848d103b55d31337558e9b89b0a196119","fb045f3a09bd2c1337534ca455ef8106","fbd2c65fd3f41c5076a06de88873da0c")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("001e42de6e081fb820d7b020be532009","01284d7c462168327746e20d6957167a422a16de81ee8d6a69e30524410f3fec","12e8ea40b05475478e833b4267c80bd4","14982a61b5f8d8d4f8ebc226d2dcb902","1a176f58f6dd72afdcd4b23e4f980b9c61b6a0ef23461eafaf248b91878579c6","1ed7ee105733903a4ff27c3e8b902b5c","228be7f0dbb2ea9f6f0b6816915732ebb9f9cf6e912d227ca67361791affd2d4","258badcae77cf4d5ec7b94b5e0651669","2b5c02b885f27519823eb7d6a5b2e181","2e303adc1e86e6c4066df7d9384fea13","2e30ef73b304832b265e571573907ca4","3d7e7c1ebffd05534a699bd8e333c395900f3ed684af2043f9656ada708ee137","44c3dc041f56f338c714d35aaebb2fb35ebf709e3e5189a825d52fa5aa2dc3c5","47c2db5107394687b506dcf511fba926","4d91684153d3594c5d2c2c5d55705a56","52498a8497e21fb14051172fb7fadad5f09ad60bb343aa6fbc96e4afef25eafe","525aa156c22e1132569bd103f7c029bcccc63cdf3dfe35724820c87e74416dd0","58efe840524e6394240592015c024d95466badd97fe8d50183ac47598c5f100c","616531bce6b16a87d2938768560669c1491ecd5e942b7be42b5289d795d4783f","79957397fd5d0db83c761ae48d136b0c2ae624c4bf886c710af87b989634bea1","7b1cec33e227917b0a77a3a7e33453a46abee5988a221008e96ccf92dc88cbed","7e52582ebd9c306edc2a86701d53ef2bf7ecff91f8df287ffe873d816b94b2f0","9a1f4a890add31768857cb4d6ca6b311f0c3f52914766a81c43f504b7b7e4774","9cb5291c880899c1e7e1ef3936ea169c","a7f65b7f346b23f0b5df969dc5a9450f","a813ba1c701b6df0e677e7abf1c297373b91ef23e6f3834edee818215b7327a0","b680188014bcc498826869be17f0cb64e9ffb753c04208730fb908b2a297cf66","ba45747eb05b56979938ff57f9ee3f77d98e1d89700c24cfee7fed75fc9ad3fa","c097468c21c2c06618935b71c3b87d8c","c479cc2d20fcbfa3c708b52a5fd36eee","cba0b1f7c1b316e2e6c8103dfa9be44daf34722ba078c5154c162d7094d66563","da601e5bdf473306bf5680fb1ace100e","eac60d6754173230ca74b518af1e4712","ef8e6d2a28858fef570fed45bb47fd1848d103b55d31337558e9b89b0a196119","fb045f3a09bd2c1337534ca455ef8106","fbd2c65fd3f41c5076a06de88873da0c")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("001e42de6e081fb820d7b020be532009","01284d7c462168327746e20d6957167a422a16de81ee8d6a69e30524410f3fec","12e8ea40b05475478e833b4267c80bd4","14982a61b5f8d8d4f8ebc226d2dcb902","1a176f58f6dd72afdcd4b23e4f980b9c61b6a0ef23461eafaf248b91878579c6","1ed7ee105733903a4ff27c3e8b902b5c","228be7f0dbb2ea9f6f0b6816915732ebb9f9cf6e912d227ca67361791affd2d4","258badcae77cf4d5ec7b94b5e0651669","2b5c02b885f27519823eb7d6a5b2e181","2e303adc1e86e6c4066df7d9384fea13","2e30ef73b304832b265e571573907ca4","3d7e7c1ebffd05534a699bd8e333c395900f3ed684af2043f9656ada708ee137","44c3dc041f56f338c714d35aaebb2fb35ebf709e3e5189a825d52fa5aa2dc3c5","47c2db5107394687b506dcf511fba926","4d91684153d3594c5d2c2c5d55705a56","52498a8497e21fb14051172fb7fadad5f09ad60bb343aa6fbc96e4afef25eafe","525aa156c22e1132569bd103f7c029bcccc63cdf3dfe35724820c87e74416dd0","58efe840524e6394240592015c024d95466badd97fe8d50183ac47598c5f100c","616531bce6b16a87d2938768560669c1491ecd5e942b7be42b5289d795d4783f","79957397fd5d0db83c761ae48d136b0c2ae624c4bf886c710af87b989634bea1","7b1cec33e227917b0a77a3a7e33453a46abee5988a221008e96ccf92dc88cbed","7e52582ebd9c306edc2a86701d53ef2bf7ecff91f8df287ffe873d816b94b2f0","9a1f4a890add31768857cb4d6ca6b311f0c3f52914766a81c43f504b7b7e4774","9cb5291c880899c1e7e1ef3936ea169c","a7f65b7f346b23f0b5df969dc5a9450f","a813ba1c701b6df0e677e7abf1c297373b91ef23e6f3834edee818215b7327a0","b680188014bcc498826869be17f0cb64e9ffb753c04208730fb908b2a297cf66","ba45747eb05b56979938ff57f9ee3f77d98e1d89700c24cfee7fed75fc9ad3fa","c097468c21c2c06618935b71c3b87d8c","c479cc2d20fcbfa3c708b52a5fd36eee","cba0b1f7c1b316e2e6c8103dfa9be44daf34722ba078c5154c162d7094d66563","da601e5bdf473306bf5680fb1ace100e","eac60d6754173230ca74b518af1e4712","ef8e6d2a28858fef570fed45bb47fd1848d103b55d31337558e9b89b0a196119","fb045f3a09bd2c1337534ca455ef8106","fbd2c65fd3f41c5076a06de88873da0c")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("001e42de6e081fb820d7b020be532009","01284d7c462168327746e20d6957167a422a16de81ee8d6a69e30524410f3fec","12e8ea40b05475478e833b4267c80bd4","14982a61b5f8d8d4f8ebc226d2dcb902","1a176f58f6dd72afdcd4b23e4f980b9c61b6a0ef23461eafaf248b91878579c6","1ed7ee105733903a4ff27c3e8b902b5c","228be7f0dbb2ea9f6f0b6816915732ebb9f9cf6e912d227ca67361791affd2d4","258badcae77cf4d5ec7b94b5e0651669","2b5c02b885f27519823eb7d6a5b2e181","2e303adc1e86e6c4066df7d9384fea13","2e30ef73b304832b265e571573907ca4","3d7e7c1ebffd05534a699bd8e333c395900f3ed684af2043f9656ada708ee137","44c3dc041f56f338c714d35aaebb2fb35ebf709e3e5189a825d52fa5aa2dc3c5","47c2db5107394687b506dcf511fba926","4d91684153d3594c5d2c2c5d55705a56","52498a8497e21fb14051172fb7fadad5f09ad60bb343aa6fbc96e4afef25eafe","525aa156c22e1132569bd103f7c029bcccc63cdf3dfe35724820c87e74416dd0","58efe840524e6394240592015c024d95466badd97fe8d50183ac47598c5f100c","616531bce6b16a87d2938768560669c1491ecd5e942b7be42b5289d795d4783f","79957397fd5d0db83c761ae48d136b0c2ae624c4bf886c710af87b989634bea1","7b1cec33e227917b0a77a3a7e33453a46abee5988a221008e96ccf92dc88cbed","7e52582ebd9c306edc2a86701d53ef2bf7ecff91f8df287ffe873d816b94b2f0","9a1f4a890add31768857cb4d6ca6b311f0c3f52914766a81c43f504b7b7e4774","9cb5291c880899c1e7e1ef3936ea169c","a7f65b7f346b23f0b5df969dc5a9450f","a813ba1c701b6df0e677e7abf1c297373b91ef23e6f3834edee818215b7327a0","b680188014bcc498826869be17f0cb64e9ffb753c04208730fb908b2a297cf66","ba45747eb05b56979938ff57f9ee3f77d98e1d89700c24cfee7fed75fc9ad3fa","c097468c21c2c06618935b71c3b87d8c","c479cc2d20fcbfa3c708b52a5fd36eee","cba0b1f7c1b316e2e6c8103dfa9be44daf34722ba078c5154c162d7094d66563","da601e5bdf473306bf5680fb1ace100e","eac60d6754173230ca74b518af1e4712","ef8e6d2a28858fef570fed45bb47fd1848d103b55d31337558e9b89b0a196119","fb045f3a09bd2c1337534ca455ef8106","fbd2c65fd3f41c5076a06de88873da0c")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("001e42de6e081fb820d7b020be532009","01284d7c462168327746e20d6957167a422a16de81ee8d6a69e30524410f3fec","12e8ea40b05475478e833b4267c80bd4","14982a61b5f8d8d4f8ebc226d2dcb902","1a176f58f6dd72afdcd4b23e4f980b9c61b6a0ef23461eafaf248b91878579c6","1ed7ee105733903a4ff27c3e8b902b5c","228be7f0dbb2ea9f6f0b6816915732ebb9f9cf6e912d227ca67361791affd2d4","258badcae77cf4d5ec7b94b5e0651669","2b5c02b885f27519823eb7d6a5b2e181","2e303adc1e86e6c4066df7d9384fea13","2e30ef73b304832b265e571573907ca4","3d7e7c1ebffd05534a699bd8e333c395900f3ed684af2043f9656ada708ee137","44c3dc041f56f338c714d35aaebb2fb35ebf709e3e5189a825d52fa5aa2dc3c5","47c2db5107394687b506dcf511fba926","4d91684153d3594c5d2c2c5d55705a56","52498a8497e21fb14051172fb7fadad5f09ad60bb343aa6fbc96e4afef25eafe","525aa156c22e1132569bd103f7c029bcccc63cdf3dfe35724820c87e74416dd0","58efe840524e6394240592015c024d95466badd97fe8d50183ac47598c5f100c","616531bce6b16a87d2938768560669c1491ecd5e942b7be42b5289d795d4783f","79957397fd5d0db83c761ae48d136b0c2ae624c4bf886c710af87b989634bea1","7b1cec33e227917b0a77a3a7e33453a46abee5988a221008e96ccf92dc88cbed","7e52582ebd9c306edc2a86701d53ef2bf7ecff91f8df287ffe873d816b94b2f0","9a1f4a890add31768857cb4d6ca6b311f0c3f52914766a81c43f504b7b7e4774","9cb5291c880899c1e7e1ef3936ea169c","a7f65b7f346b23f0b5df969dc5a9450f","a813ba1c701b6df0e677e7abf1c297373b91ef23e6f3834edee818215b7327a0","b680188014bcc498826869be17f0cb64e9ffb753c04208730fb908b2a297cf66","ba45747eb05b56979938ff57f9ee3f77d98e1d89700c24cfee7fed75fc9ad3fa","c097468c21c2c06618935b71c3b87d8c","c479cc2d20fcbfa3c708b52a5fd36eee","cba0b1f7c1b316e2e6c8103dfa9be44daf34722ba078c5154c162d7094d66563","da601e5bdf473306bf5680fb1ace100e","eac60d6754173230ca74b518af1e4712","ef8e6d2a28858fef570fed45bb47fd1848d103b55d31337558e9b89b0a196119","fb045f3a09bd2c1337534ca455ef8106","fbd2c65fd3f41c5076a06de88873da0c")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("001e42de6e081fb820d7b020be532009","01284d7c462168327746e20d6957167a422a16de81ee8d6a69e30524410f3fec","12e8ea40b05475478e833b4267c80bd4","14982a61b5f8d8d4f8ebc226d2dcb902","1a176f58f6dd72afdcd4b23e4f980b9c61b6a0ef23461eafaf248b91878579c6","1ed7ee105733903a4ff27c3e8b902b5c","228be7f0dbb2ea9f6f0b6816915732ebb9f9cf6e912d227ca67361791affd2d4","258badcae77cf4d5ec7b94b5e0651669","2b5c02b885f27519823eb7d6a5b2e181","2e303adc1e86e6c4066df7d9384fea13","2e30ef73b304832b265e571573907ca4","3d7e7c1ebffd05534a699bd8e333c395900f3ed684af2043f9656ada708ee137","44c3dc041f56f338c714d35aaebb2fb35ebf709e3e5189a825d52fa5aa2dc3c5","47c2db5107394687b506dcf511fba926","4d91684153d3594c5d2c2c5d55705a56","52498a8497e21fb14051172fb7fadad5f09ad60bb343aa6fbc96e4afef25eafe","525aa156c22e1132569bd103f7c029bcccc63cdf3dfe35724820c87e74416dd0","58efe840524e6394240592015c024d95466badd97fe8d50183ac47598c5f100c","616531bce6b16a87d2938768560669c1491ecd5e942b7be42b5289d795d4783f","79957397fd5d0db83c761ae48d136b0c2ae624c4bf886c710af87b989634bea1","7b1cec33e227917b0a77a3a7e33453a46abee5988a221008e96ccf92dc88cbed","7e52582ebd9c306edc2a86701d53ef2bf7ecff91f8df287ffe873d816b94b2f0","9a1f4a890add31768857cb4d6ca6b311f0c3f52914766a81c43f504b7b7e4774","9cb5291c880899c1e7e1ef3936ea169c","a7f65b7f346b23f0b5df969dc5a9450f","a813ba1c701b6df0e677e7abf1c297373b91ef23e6f3834edee818215b7327a0","b680188014bcc498826869be17f0cb64e9ffb753c04208730fb908b2a297cf66","ba45747eb05b56979938ff57f9ee3f77d98e1d89700c24cfee7fed75fc9ad3fa","c097468c21c2c06618935b71c3b87d8c","c479cc2d20fcbfa3c708b52a5fd36eee","cba0b1f7c1b316e2e6c8103dfa9be44daf34722ba078c5154c162d7094d66563","da601e5bdf473306bf5680fb1ace100e","eac60d6754173230ca74b518af1e4712","ef8e6d2a28858fef570fed45bb47fd1848d103b55d31337558e9b89b0a196119","fb045f3a09bd2c1337534ca455ef8106","fbd2c65fd3f41c5076a06de88873da0c")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("001e42de6e081fb820d7b020be532009","01284d7c462168327746e20d6957167a422a16de81ee8d6a69e30524410f3fec","12e8ea40b05475478e833b4267c80bd4","14982a61b5f8d8d4f8ebc226d2dcb902","1a176f58f6dd72afdcd4b23e4f980b9c61b6a0ef23461eafaf248b91878579c6","1ed7ee105733903a4ff27c3e8b902b5c","228be7f0dbb2ea9f6f0b6816915732ebb9f9cf6e912d227ca67361791affd2d4","258badcae77cf4d5ec7b94b5e0651669","2b5c02b885f27519823eb7d6a5b2e181","2e303adc1e86e6c4066df7d9384fea13","2e30ef73b304832b265e571573907ca4","3d7e7c1ebffd05534a699bd8e333c395900f3ed684af2043f9656ada708ee137","44c3dc041f56f338c714d35aaebb2fb35ebf709e3e5189a825d52fa5aa2dc3c5","47c2db5107394687b506dcf511fba926","4d91684153d3594c5d2c2c5d55705a56","52498a8497e21fb14051172fb7fadad5f09ad60bb343aa6fbc96e4afef25eafe","525aa156c22e1132569bd103f7c029bcccc63cdf3dfe35724820c87e74416dd0","58efe840524e6394240592015c024d95466badd97fe8d50183ac47598c5f100c","616531bce6b16a87d2938768560669c1491ecd5e942b7be42b5289d795d4783f","79957397fd5d0db83c761ae48d136b0c2ae624c4bf886c710af87b989634bea1","7b1cec33e227917b0a77a3a7e33453a46abee5988a221008e96ccf92dc88cbed","7e52582ebd9c306edc2a86701d53ef2bf7ecff91f8df287ffe873d816b94b2f0","9a1f4a890add31768857cb4d6ca6b311f0c3f52914766a81c43f504b7b7e4774","9cb5291c880899c1e7e1ef3936ea169c","a7f65b7f346b23f0b5df969dc5a9450f","a813ba1c701b6df0e677e7abf1c297373b91ef23e6f3834edee818215b7327a0","b680188014bcc498826869be17f0cb64e9ffb753c04208730fb908b2a297cf66","ba45747eb05b56979938ff57f9ee3f77d98e1d89700c24cfee7fed75fc9ad3fa","c097468c21c2c06618935b71c3b87d8c","c479cc2d20fcbfa3c708b52a5fd36eee","cba0b1f7c1b316e2e6c8103dfa9be44daf34722ba078c5154c162d7094d66563","da601e5bdf473306bf5680fb1ace100e","eac60d6754173230ca74b518af1e4712","ef8e6d2a28858fef570fed45bb47fd1848d103b55d31337558e9b89b0a196119","fb045f3a09bd2c1337534ca455ef8106","fbd2c65fd3f41c5076a06de88873da0c")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("001e42de6e081fb820d7b020be532009","01284d7c462168327746e20d6957167a422a16de81ee8d6a69e30524410f3fec","12e8ea40b05475478e833b4267c80bd4","14982a61b5f8d8d4f8ebc226d2dcb902","1a176f58f6dd72afdcd4b23e4f980b9c61b6a0ef23461eafaf248b91878579c6","1ed7ee105733903a4ff27c3e8b902b5c","228be7f0dbb2ea9f6f0b6816915732ebb9f9cf6e912d227ca67361791affd2d4","258badcae77cf4d5ec7b94b5e0651669","2b5c02b885f27519823eb7d6a5b2e181","2e303adc1e86e6c4066df7d9384fea13","2e30ef73b304832b265e571573907ca4","3d7e7c1ebffd05534a699bd8e333c395900f3ed684af2043f9656ada708ee137","44c3dc041f56f338c714d35aaebb2fb35ebf709e3e5189a825d52fa5aa2dc3c5","47c2db5107394687b506dcf511fba926","4d91684153d3594c5d2c2c5d55705a56","52498a8497e21fb14051172fb7fadad5f09ad60bb343aa6fbc96e4afef25eafe","525aa156c22e1132569bd103f7c029bcccc63cdf3dfe35724820c87e74416dd0","58efe840524e6394240592015c024d95466badd97fe8d50183ac47598c5f100c","616531bce6b16a87d2938768560669c1491ecd5e942b7be42b5289d795d4783f","79957397fd5d0db83c761ae48d136b0c2ae624c4bf886c710af87b989634bea1","7b1cec33e227917b0a77a3a7e33453a46abee5988a221008e96ccf92dc88cbed","7e52582ebd9c306edc2a86701d53ef2bf7ecff91f8df287ffe873d816b94b2f0","9a1f4a890add31768857cb4d6ca6b311f0c3f52914766a81c43f504b7b7e4774","9cb5291c880899c1e7e1ef3936ea169c","a7f65b7f346b23f0b5df969dc5a9450f","a813ba1c701b6df0e677e7abf1c297373b91ef23e6f3834edee818215b7327a0","b680188014bcc498826869be17f0cb64e9ffb753c04208730fb908b2a297cf66","ba45747eb05b56979938ff57f9ee3f77d98e1d89700c24cfee7fed75fc9ad3fa","c097468c21c2c06618935b71c3b87d8c","c479cc2d20fcbfa3c708b52a5fd36eee","cba0b1f7c1b316e2e6c8103dfa9be44daf34722ba078c5154c162d7094d66563","da601e5bdf473306bf5680fb1ace100e","eac60d6754173230ca74b518af1e4712","ef8e6d2a28858fef570fed45bb47fd1848d103b55d31337558e9b89b0a196119","fb045f3a09bd2c1337534ca455ef8106","fbd2c65fd3f41c5076a06de88873da0c")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("001e42de6e081fb820d7b020be532009","01284d7c462168327746e20d6957167a422a16de81ee8d6a69e30524410f3fec","12e8ea40b05475478e833b4267c80bd4","14982a61b5f8d8d4f8ebc226d2dcb902","1a176f58f6dd72afdcd4b23e4f980b9c61b6a0ef23461eafaf248b91878579c6","1ed7ee105733903a4ff27c3e8b902b5c","228be7f0dbb2ea9f6f0b6816915732ebb9f9cf6e912d227ca67361791affd2d4","258badcae77cf4d5ec7b94b5e0651669","2b5c02b885f27519823eb7d6a5b2e181","2e303adc1e86e6c4066df7d9384fea13","2e30ef73b304832b265e571573907ca4","3d7e7c1ebffd05534a699bd8e333c395900f3ed684af2043f9656ada708ee137","44c3dc041f56f338c714d35aaebb2fb35ebf709e3e5189a825d52fa5aa2dc3c5","47c2db5107394687b506dcf511fba926","4d91684153d3594c5d2c2c5d55705a56","52498a8497e21fb14051172fb7fadad5f09ad60bb343aa6fbc96e4afef25eafe","525aa156c22e1132569bd103f7c029bcccc63cdf3dfe35724820c87e74416dd0","58efe840524e6394240592015c024d95466badd97fe8d50183ac47598c5f100c","616531bce6b16a87d2938768560669c1491ecd5e942b7be42b5289d795d4783f","79957397fd5d0db83c761ae48d136b0c2ae624c4bf886c710af87b989634bea1","7b1cec33e227917b0a77a3a7e33453a46abee5988a221008e96ccf92dc88cbed","7e52582ebd9c306edc2a86701d53ef2bf7ecff91f8df287ffe873d816b94b2f0","9a1f4a890add31768857cb4d6ca6b311f0c3f52914766a81c43f504b7b7e4774","9cb5291c880899c1e7e1ef3936ea169c","a7f65b7f346b23f0b5df969dc5a9450f","a813ba1c701b6df0e677e7abf1c297373b91ef23e6f3834edee818215b7327a0","b680188014bcc498826869be17f0cb64e9ffb753c04208730fb908b2a297cf66","ba45747eb05b56979938ff57f9ee3f77d98e1d89700c24cfee7fed75fc9ad3fa","c097468c21c2c06618935b71c3b87d8c","c479cc2d20fcbfa3c708b52a5fd36eee","cba0b1f7c1b316e2e6c8103dfa9be44daf34722ba078c5154c162d7094d66563","da601e5bdf473306bf5680fb1ace100e","eac60d6754173230ca74b518af1e4712","ef8e6d2a28858fef570fed45bb47fd1848d103b55d31337558e9b89b0a196119","fb045f3a09bd2c1337534ca455ef8106","fbd2c65fd3f41c5076a06de88873da0c")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("001e42de6e081fb820d7b020be532009","01284d7c462168327746e20d6957167a422a16de81ee8d6a69e30524410f3fec","12e8ea40b05475478e833b4267c80bd4","14982a61b5f8d8d4f8ebc226d2dcb902","1a176f58f6dd72afdcd4b23e4f980b9c61b6a0ef23461eafaf248b91878579c6","1ed7ee105733903a4ff27c3e8b902b5c","228be7f0dbb2ea9f6f0b6816915732ebb9f9cf6e912d227ca67361791affd2d4","258badcae77cf4d5ec7b94b5e0651669","2b5c02b885f27519823eb7d6a5b2e181","2e303adc1e86e6c4066df7d9384fea13","2e30ef73b304832b265e571573907ca4","3d7e7c1ebffd05534a699bd8e333c395900f3ed684af2043f9656ada708ee137","44c3dc041f56f338c714d35aaebb2fb35ebf709e3e5189a825d52fa5aa2dc3c5","47c2db5107394687b506dcf511fba926","4d91684153d3594c5d2c2c5d55705a56","52498a8497e21fb14051172fb7fadad5f09ad60bb343aa6fbc96e4afef25eafe","525aa156c22e1132569bd103f7c029bcccc63cdf3dfe35724820c87e74416dd0","58efe840524e6394240592015c024d95466badd97fe8d50183ac47598c5f100c","616531bce6b16a87d2938768560669c1491ecd5e942b7be42b5289d795d4783f","79957397fd5d0db83c761ae48d136b0c2ae624c4bf886c710af87b989634bea1","7b1cec33e227917b0a77a3a7e33453a46abee5988a221008e96ccf92dc88cbed","7e52582ebd9c306edc2a86701d53ef2bf7ecff91f8df287ffe873d816b94b2f0","9a1f4a890add31768857cb4d6ca6b311f0c3f52914766a81c43f504b7b7e4774","9cb5291c880899c1e7e1ef3936ea169c","a7f65b7f346b23f0b5df969dc5a9450f","a813ba1c701b6df0e677e7abf1c297373b91ef23e6f3834edee818215b7327a0","b680188014bcc498826869be17f0cb64e9ffb753c04208730fb908b2a297cf66","ba45747eb05b56979938ff57f9ee3f77d98e1d89700c24cfee7fed75fc9ad3fa","c097468c21c2c06618935b71c3b87d8c","c479cc2d20fcbfa3c708b52a5fd36eee","cba0b1f7c1b316e2e6c8103dfa9be44daf34722ba078c5154c162d7094d66563","da601e5bdf473306bf5680fb1ace100e","eac60d6754173230ca74b518af1e4712","ef8e6d2a28858fef570fed45bb47fd1848d103b55d31337558e9b89b0a196119","fb045f3a09bd2c1337534ca455ef8106","fbd2c65fd3f41c5076a06de88873da0c")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("001e42de6e081fb820d7b020be532009","01284d7c462168327746e20d6957167a422a16de81ee8d6a69e30524410f3fec","12e8ea40b05475478e833b4267c80bd4","14982a61b5f8d8d4f8ebc226d2dcb902","1a176f58f6dd72afdcd4b23e4f980b9c61b6a0ef23461eafaf248b91878579c6","1ed7ee105733903a4ff27c3e8b902b5c","228be7f0dbb2ea9f6f0b6816915732ebb9f9cf6e912d227ca67361791affd2d4","258badcae77cf4d5ec7b94b5e0651669","2b5c02b885f27519823eb7d6a5b2e181","2e303adc1e86e6c4066df7d9384fea13","2e30ef73b304832b265e571573907ca4","3d7e7c1ebffd05534a699bd8e333c395900f3ed684af2043f9656ada708ee137","44c3dc041f56f338c714d35aaebb2fb35ebf709e3e5189a825d52fa5aa2dc3c5","47c2db5107394687b506dcf511fba926","4d91684153d3594c5d2c2c5d55705a56","52498a8497e21fb14051172fb7fadad5f09ad60bb343aa6fbc96e4afef25eafe","525aa156c22e1132569bd103f7c029bcccc63cdf3dfe35724820c87e74416dd0","58efe840524e6394240592015c024d95466badd97fe8d50183ac47598c5f100c","616531bce6b16a87d2938768560669c1491ecd5e942b7be42b5289d795d4783f","79957397fd5d0db83c761ae48d136b0c2ae624c4bf886c710af87b989634bea1","7b1cec33e227917b0a77a3a7e33453a46abee5988a221008e96ccf92dc88cbed","7e52582ebd9c306edc2a86701d53ef2bf7ecff91f8df287ffe873d816b94b2f0","9a1f4a890add31768857cb4d6ca6b311f0c3f52914766a81c43f504b7b7e4774","9cb5291c880899c1e7e1ef3936ea169c","a7f65b7f346b23f0b5df969dc5a9450f","a813ba1c701b6df0e677e7abf1c297373b91ef23e6f3834edee818215b7327a0","b680188014bcc498826869be17f0cb64e9ffb753c04208730fb908b2a297cf66","ba45747eb05b56979938ff57f9ee3f77d98e1d89700c24cfee7fed75fc9ad3fa","c097468c21c2c06618935b71c3b87d8c","c479cc2d20fcbfa3c708b52a5fd36eee","cba0b1f7c1b316e2e6c8103dfa9be44daf34722ba078c5154c162d7094d66563","da601e5bdf473306bf5680fb1ace100e","eac60d6754173230ca74b518af1e4712","ef8e6d2a28858fef570fed45bb47fd1848d103b55d31337558e9b89b0a196119","fb045f3a09bd2c1337534ca455ef8106","fbd2c65fd3f41c5076a06de88873da0c")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("001e42de6e081fb820d7b020be532009","01284d7c462168327746e20d6957167a422a16de81ee8d6a69e30524410f3fec","12e8ea40b05475478e833b4267c80bd4","14982a61b5f8d8d4f8ebc226d2dcb902","1a176f58f6dd72afdcd4b23e4f980b9c61b6a0ef23461eafaf248b91878579c6","1ed7ee105733903a4ff27c3e8b902b5c","228be7f0dbb2ea9f6f0b6816915732ebb9f9cf6e912d227ca67361791affd2d4","258badcae77cf4d5ec7b94b5e0651669","2b5c02b885f27519823eb7d6a5b2e181","2e303adc1e86e6c4066df7d9384fea13","2e30ef73b304832b265e571573907ca4","3d7e7c1ebffd05534a699bd8e333c395900f3ed684af2043f9656ada708ee137","44c3dc041f56f338c714d35aaebb2fb35ebf709e3e5189a825d52fa5aa2dc3c5","47c2db5107394687b506dcf511fba926","4d91684153d3594c5d2c2c5d55705a56","52498a8497e21fb14051172fb7fadad5f09ad60bb343aa6fbc96e4afef25eafe","525aa156c22e1132569bd103f7c029bcccc63cdf3dfe35724820c87e74416dd0","58efe840524e6394240592015c024d95466badd97fe8d50183ac47598c5f100c","616531bce6b16a87d2938768560669c1491ecd5e942b7be42b5289d795d4783f","79957397fd5d0db83c761ae48d136b0c2ae624c4bf886c710af87b989634bea1","7b1cec33e227917b0a77a3a7e33453a46abee5988a221008e96ccf92dc88cbed","7e52582ebd9c306edc2a86701d53ef2bf7ecff91f8df287ffe873d816b94b2f0","9a1f4a890add31768857cb4d6ca6b311f0c3f52914766a81c43f504b7b7e4774","9cb5291c880899c1e7e1ef3936ea169c","a7f65b7f346b23f0b5df969dc5a9450f","a813ba1c701b6df0e677e7abf1c297373b91ef23e6f3834edee818215b7327a0","b680188014bcc498826869be17f0cb64e9ffb753c04208730fb908b2a297cf66","ba45747eb05b56979938ff57f9ee3f77d98e1d89700c24cfee7fed75fc9ad3fa","c097468c21c2c06618935b71c3b87d8c","c479cc2d20fcbfa3c708b52a5fd36eee","cba0b1f7c1b316e2e6c8103dfa9be44daf34722ba078c5154c162d7094d66563","da601e5bdf473306bf5680fb1ace100e","eac60d6754173230ca74b518af1e4712","ef8e6d2a28858fef570fed45bb47fd1848d103b55d31337558e9b89b0a196119","fb045f3a09bd2c1337534ca455ef8106","fbd2c65fd3f41c5076a06de88873da0c")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("001e42de6e081fb820d7b020be532009","01284d7c462168327746e20d6957167a422a16de81ee8d6a69e30524410f3fec","12e8ea40b05475478e833b4267c80bd4","14982a61b5f8d8d4f8ebc226d2dcb902","1a176f58f6dd72afdcd4b23e4f980b9c61b6a0ef23461eafaf248b91878579c6","1ed7ee105733903a4ff27c3e8b902b5c","228be7f0dbb2ea9f6f0b6816915732ebb9f9cf6e912d227ca67361791affd2d4","258badcae77cf4d5ec7b94b5e0651669","2b5c02b885f27519823eb7d6a5b2e181","2e303adc1e86e6c4066df7d9384fea13","2e30ef73b304832b265e571573907ca4","3d7e7c1ebffd05534a699bd8e333c395900f3ed684af2043f9656ada708ee137","44c3dc041f56f338c714d35aaebb2fb35ebf709e3e5189a825d52fa5aa2dc3c5","47c2db5107394687b506dcf511fba926","4d91684153d3594c5d2c2c5d55705a56","52498a8497e21fb14051172fb7fadad5f09ad60bb343aa6fbc96e4afef25eafe","525aa156c22e1132569bd103f7c029bcccc63cdf3dfe35724820c87e74416dd0","58efe840524e6394240592015c024d95466badd97fe8d50183ac47598c5f100c","616531bce6b16a87d2938768560669c1491ecd5e942b7be42b5289d795d4783f","79957397fd5d0db83c761ae48d136b0c2ae624c4bf886c710af87b989634bea1","7b1cec33e227917b0a77a3a7e33453a46abee5988a221008e96ccf92dc88cbed","7e52582ebd9c306edc2a86701d53ef2bf7ecff91f8df287ffe873d816b94b2f0","9a1f4a890add31768857cb4d6ca6b311f0c3f52914766a81c43f504b7b7e4774","9cb5291c880899c1e7e1ef3936ea169c","a7f65b7f346b23f0b5df969dc5a9450f","a813ba1c701b6df0e677e7abf1c297373b91ef23e6f3834edee818215b7327a0","b680188014bcc498826869be17f0cb64e9ffb753c04208730fb908b2a297cf66","ba45747eb05b56979938ff57f9ee3f77d98e1d89700c24cfee7fed75fc9ad3fa","c097468c21c2c06618935b71c3b87d8c","c479cc2d20fcbfa3c708b52a5fd36eee","cba0b1f7c1b316e2e6c8103dfa9be44daf34722ba078c5154c162d7094d66563","da601e5bdf473306bf5680fb1ace100e","eac60d6754173230ca74b518af1e4712","ef8e6d2a28858fef570fed45bb47fd1848d103b55d31337558e9b89b0a196119","fb045f3a09bd2c1337534ca455ef8106","fbd2c65fd3f41c5076a06de88873da0c")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("001e42de6e081fb820d7b020be532009","01284d7c462168327746e20d6957167a422a16de81ee8d6a69e30524410f3fec","12e8ea40b05475478e833b4267c80bd4","14982a61b5f8d8d4f8ebc226d2dcb902","1a176f58f6dd72afdcd4b23e4f980b9c61b6a0ef23461eafaf248b91878579c6","1ed7ee105733903a4ff27c3e8b902b5c","228be7f0dbb2ea9f6f0b6816915732ebb9f9cf6e912d227ca67361791affd2d4","258badcae77cf4d5ec7b94b5e0651669","2b5c02b885f27519823eb7d6a5b2e181","2e303adc1e86e6c4066df7d9384fea13","2e30ef73b304832b265e571573907ca4","3d7e7c1ebffd05534a699bd8e333c395900f3ed684af2043f9656ada708ee137","44c3dc041f56f338c714d35aaebb2fb35ebf709e3e5189a825d52fa5aa2dc3c5","47c2db5107394687b506dcf511fba926","4d91684153d3594c5d2c2c5d55705a56","52498a8497e21fb14051172fb7fadad5f09ad60bb343aa6fbc96e4afef25eafe","525aa156c22e1132569bd103f7c029bcccc63cdf3dfe35724820c87e74416dd0","58efe840524e6394240592015c024d95466badd97fe8d50183ac47598c5f100c","616531bce6b16a87d2938768560669c1491ecd5e942b7be42b5289d795d4783f","79957397fd5d0db83c761ae48d136b0c2ae624c4bf886c710af87b989634bea1","7b1cec33e227917b0a77a3a7e33453a46abee5988a221008e96ccf92dc88cbed","7e52582ebd9c306edc2a86701d53ef2bf7ecff91f8df287ffe873d816b94b2f0","9a1f4a890add31768857cb4d6ca6b311f0c3f52914766a81c43f504b7b7e4774","9cb5291c880899c1e7e1ef3936ea169c","a7f65b7f346b23f0b5df969dc5a9450f","a813ba1c701b6df0e677e7abf1c297373b91ef23e6f3834edee818215b7327a0","b680188014bcc498826869be17f0cb64e9ffb753c04208730fb908b2a297cf66","ba45747eb05b56979938ff57f9ee3f77d98e1d89700c24cfee7fed75fc9ad3fa","c097468c21c2c06618935b71c3b87d8c","c479cc2d20fcbfa3c708b52a5fd36eee","cba0b1f7c1b316e2e6c8103dfa9be44daf34722ba078c5154c162d7094d66563","da601e5bdf473306bf5680fb1ace100e","eac60d6754173230ca74b518af1e4712","ef8e6d2a28858fef570fed45bb47fd1848d103b55d31337558e9b89b0a196119","fb045f3a09bd2c1337534ca455ef8106","fbd2c65fd3f41c5076a06de88873da0c")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("001e42de6e081fb820d7b020be532009","01284d7c462168327746e20d6957167a422a16de81ee8d6a69e30524410f3fec","12e8ea40b05475478e833b4267c80bd4","14982a61b5f8d8d4f8ebc226d2dcb902","1a176f58f6dd72afdcd4b23e4f980b9c61b6a0ef23461eafaf248b91878579c6","1ed7ee105733903a4ff27c3e8b902b5c","228be7f0dbb2ea9f6f0b6816915732ebb9f9cf6e912d227ca67361791affd2d4","258badcae77cf4d5ec7b94b5e0651669","2b5c02b885f27519823eb7d6a5b2e181","2e303adc1e86e6c4066df7d9384fea13","2e30ef73b304832b265e571573907ca4","3d7e7c1ebffd05534a699bd8e333c395900f3ed684af2043f9656ada708ee137","44c3dc041f56f338c714d35aaebb2fb35ebf709e3e5189a825d52fa5aa2dc3c5","47c2db5107394687b506dcf511fba926","4d91684153d3594c5d2c2c5d55705a56","52498a8497e21fb14051172fb7fadad5f09ad60bb343aa6fbc96e4afef25eafe","525aa156c22e1132569bd103f7c029bcccc63cdf3dfe35724820c87e74416dd0","58efe840524e6394240592015c024d95466badd97fe8d50183ac47598c5f100c","616531bce6b16a87d2938768560669c1491ecd5e942b7be42b5289d795d4783f","79957397fd5d0db83c761ae48d136b0c2ae624c4bf886c710af87b989634bea1","7b1cec33e227917b0a77a3a7e33453a46abee5988a221008e96ccf92dc88cbed","7e52582ebd9c306edc2a86701d53ef2bf7ecff91f8df287ffe873d816b94b2f0","9a1f4a890add31768857cb4d6ca6b311f0c3f52914766a81c43f504b7b7e4774","9cb5291c880899c1e7e1ef3936ea169c","a7f65b7f346b23f0b5df969dc5a9450f","a813ba1c701b6df0e677e7abf1c297373b91ef23e6f3834edee818215b7327a0","b680188014bcc498826869be17f0cb64e9ffb753c04208730fb908b2a297cf66","ba45747eb05b56979938ff57f9ee3f77d98e1d89700c24cfee7fed75fc9ad3fa","c097468c21c2c06618935b71c3b87d8c","c479cc2d20fcbfa3c708b52a5fd36eee","cba0b1f7c1b316e2e6c8103dfa9be44daf34722ba078c5154c162d7094d66563","da601e5bdf473306bf5680fb1ace100e","eac60d6754173230ca74b518af1e4712","ef8e6d2a28858fef570fed45bb47fd1848d103b55d31337558e9b89b0a196119","fb045f3a09bd2c1337534ca455ef8106","fbd2c65fd3f41c5076a06de88873da0c")
index=activity AND rg_functionality="Endpoint Management Systems" AND requesturl NOT NULL AND requesturl IN ("http://f2bkt3abwsjrtp8yuy.com:8388","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_color_ring","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_extra_message","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_limit_phone_number","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_log","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_recording_file","http://f6ewdnfmffcxwbvses.com:8388","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/bkh/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cci/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cxr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/dtp/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/egk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gbpe/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gwl/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hana/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hbm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk3/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kakao/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kamco/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kbank/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kdb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kih/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kisb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kiwi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/koreg/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/lgt/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mnu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mvq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mx/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ncov/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nice/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nwv/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pepper/interface.html")
index=activity AND rg_functionality="Endpoint Management Systems" AND Message NOT NULL AND Message IN ("http://f2bkt3abwsjrtp8yuy.com:8388","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_color_ring","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_extra_message","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_limit_phone_number","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_log","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_recording_file","http://f6ewdnfmffcxwbvses.com:8388","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/bkh/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cci/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cxr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/dtp/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/egk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gbpe/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gwl/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hana/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hbm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk3/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kakao/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kamco/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kbank/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kdb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kih/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kisb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kiwi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/koreg/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/lgt/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mnu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mvq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mx/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ncov/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nice/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nwv/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pepper/interface.html")
index=activity AND rg_functionality="Endpoint Management Systems" AND Requestcontext NOT NULL AND Requestcontext IN ("http://f2bkt3abwsjrtp8yuy.com:8388","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_color_ring","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_extra_message","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_limit_phone_number","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_log","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_recording_file","http://f6ewdnfmffcxwbvses.com:8388","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/bkh/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cci/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cxr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/dtp/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/egk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gbpe/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gwl/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hana/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hbm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk3/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kakao/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kamco/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kbank/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kdb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kih/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kisb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kiwi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/koreg/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/lgt/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mnu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mvq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mx/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ncov/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nice/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nwv/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pepper/interface.html")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("http://f2bkt3abwsjrtp8yuy.com:8388","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_color_ring","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_extra_message","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_limit_phone_number","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_log","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_recording_file","http://f6ewdnfmffcxwbvses.com:8388","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/bkh/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cci/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cxr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/dtp/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/egk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gbpe/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gwl/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hana/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hbm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk3/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kakao/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kamco/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kbank/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kdb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kih/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kisb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kiwi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/koreg/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/lgt/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mnu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mvq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mx/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ncov/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nice/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nwv/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pepper/interface.html")
index=activity AND rg_functionality="Endpoint Management Systems" AND requesturl NOT NULL AND requesturl IN ("http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pso/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/qiy/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rfi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rug/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sbi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sevo/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/snz/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/stock/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tcf/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tsbr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/uar/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/unw/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/wfc/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/won/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/woori/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/zhs/interface.html","http://ppnwhbjy.agbrexi9ohfrx53m.com/web/obq/interface.html","rtmp://stream.bsn1.vip:1935/live/")
index=activity AND rg_functionality="Endpoint Management Systems" AND Message NOT NULL AND Message IN ("http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pso/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/qiy/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rfi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rug/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sbi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sevo/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/snz/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/stock/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tcf/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tsbr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/uar/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/unw/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/wfc/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/won/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/woori/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/zhs/interface.html","http://ppnwhbjy.agbrexi9ohfrx53m.com/web/obq/interface.html","rtmp://stream.bsn1.vip:1935/live/")
index=activity AND rg_functionality="Endpoint Management Systems" AND Requestcontext NOT NULL AND Requestcontext IN ("http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pso/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/qiy/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rfi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rug/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sbi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sevo/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/snz/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/stock/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tcf/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tsbr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/uar/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/unw/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/wfc/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/won/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/woori/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/zhs/interface.html","http://ppnwhbjy.agbrexi9ohfrx53m.com/web/obq/interface.html","rtmp://stream.bsn1.vip:1935/live/")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pso/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/qiy/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rfi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rug/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sbi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sevo/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/snz/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/stock/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tcf/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tsbr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/uar/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/unw/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/wfc/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/won/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/woori/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/zhs/interface.html","http://ppnwhbjy.agbrexi9ohfrx53m.com/web/obq/interface.html","rtmp://stream.bsn1.vip:1935/live/")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND requesturl NOT NULL AND requesturl IN ("http://f2bkt3abwsjrtp8yuy.com:8388","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_color_ring","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_extra_message","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_limit_phone_number","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_log","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_recording_file","http://f6ewdnfmffcxwbvses.com:8388","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/bkh/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cci/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cxr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/dtp/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/egk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gbpe/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gwl/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hana/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hbm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk3/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kakao/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kamco/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kbank/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kdb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kih/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kisb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kiwi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/koreg/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/lgt/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mnu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mvq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mx/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ncov/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nice/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nwv/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pepper/interface.html")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND Message NOT NULL AND Message IN ("http://f2bkt3abwsjrtp8yuy.com:8388","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_color_ring","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_extra_message","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_limit_phone_number","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_log","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_recording_file","http://f6ewdnfmffcxwbvses.com:8388","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/bkh/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cci/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cxr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/dtp/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/egk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gbpe/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gwl/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hana/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hbm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk3/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kakao/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kamco/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kbank/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kdb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kih/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kisb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kiwi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/koreg/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/lgt/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mnu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mvq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mx/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ncov/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nice/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nwv/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pepper/interface.html")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND Requestcontext NOT NULL AND Requestcontext IN ("http://f2bkt3abwsjrtp8yuy.com:8388","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_color_ring","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_extra_message","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_limit_phone_number","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_log","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_recording_file","http://f6ewdnfmffcxwbvses.com:8388","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/bkh/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cci/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cxr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/dtp/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/egk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gbpe/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gwl/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hana/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hbm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk3/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kakao/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kamco/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kbank/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kdb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kih/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kisb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kiwi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/koreg/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/lgt/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mnu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mvq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mx/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ncov/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nice/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nwv/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pepper/interface.html")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("http://f2bkt3abwsjrtp8yuy.com:8388","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_color_ring","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_extra_message","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_limit_phone_number","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_log","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_recording_file","http://f6ewdnfmffcxwbvses.com:8388","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/bkh/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cci/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cxr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/dtp/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/egk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gbpe/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gwl/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hana/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hbm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk3/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kakao/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kamco/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kbank/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kdb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kih/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kisb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kiwi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/koreg/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/lgt/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mnu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mvq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mx/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ncov/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nice/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nwv/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pepper/interface.html")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND requesturl NOT NULL AND requesturl IN ("http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pso/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/qiy/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rfi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rug/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sbi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sevo/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/snz/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/stock/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tcf/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tsbr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/uar/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/unw/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/wfc/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/won/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/woori/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/zhs/interface.html","http://ppnwhbjy.agbrexi9ohfrx53m.com/web/obq/interface.html","rtmp://stream.bsn1.vip:1935/live/")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND Message NOT NULL AND Message IN ("http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pso/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/qiy/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rfi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rug/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sbi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sevo/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/snz/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/stock/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tcf/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tsbr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/uar/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/unw/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/wfc/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/won/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/woori/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/zhs/interface.html","http://ppnwhbjy.agbrexi9ohfrx53m.com/web/obq/interface.html","rtmp://stream.bsn1.vip:1935/live/")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND Requestcontext NOT NULL AND Requestcontext IN ("http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pso/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/qiy/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rfi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rug/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sbi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sevo/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/snz/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/stock/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tcf/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tsbr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/uar/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/unw/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/wfc/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/won/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/woori/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/zhs/interface.html","http://ppnwhbjy.agbrexi9ohfrx53m.com/web/obq/interface.html","rtmp://stream.bsn1.vip:1935/live/")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pso/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/qiy/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rfi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rug/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sbi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sevo/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/snz/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/stock/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tcf/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tsbr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/uar/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/unw/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/wfc/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/won/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/woori/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/zhs/interface.html","http://ppnwhbjy.agbrexi9ohfrx53m.com/web/obq/interface.html","rtmp://stream.bsn1.vip:1935/live/")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND requesturl NOT NULL AND requesturl IN ("http://f2bkt3abwsjrtp8yuy.com:8388","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_color_ring","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_extra_message","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_limit_phone_number","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_log","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_recording_file","http://f6ewdnfmffcxwbvses.com:8388","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/bkh/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cci/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cxr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/dtp/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/egk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gbpe/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gwl/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hana/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hbm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk3/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kakao/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kamco/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kbank/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kdb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kih/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kisb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kiwi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/koreg/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/lgt/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mnu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mvq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mx/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ncov/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nice/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nwv/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pepper/interface.html")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND Message NOT NULL AND Message IN ("http://f2bkt3abwsjrtp8yuy.com:8388","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_color_ring","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_extra_message","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_limit_phone_number","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_log","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_recording_file","http://f6ewdnfmffcxwbvses.com:8388","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/bkh/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cci/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cxr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/dtp/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/egk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gbpe/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gwl/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hana/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hbm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk3/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kakao/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kamco/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kbank/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kdb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kih/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kisb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kiwi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/koreg/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/lgt/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mnu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mvq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mx/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ncov/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nice/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nwv/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pepper/interface.html")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND Requestcontext NOT NULL AND Requestcontext IN ("http://f2bkt3abwsjrtp8yuy.com:8388","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_color_ring","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_extra_message","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_limit_phone_number","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_log","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_recording_file","http://f6ewdnfmffcxwbvses.com:8388","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/bkh/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cci/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cxr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/dtp/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/egk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gbpe/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gwl/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hana/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hbm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk3/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kakao/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kamco/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kbank/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kdb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kih/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kisb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kiwi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/koreg/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/lgt/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mnu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mvq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mx/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ncov/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nice/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nwv/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pepper/interface.html")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("http://f2bkt3abwsjrtp8yuy.com:8388","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_color_ring","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_extra_message","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_limit_phone_number","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_log","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_recording_file","http://f6ewdnfmffcxwbvses.com:8388","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/bkh/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cci/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cxr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/dtp/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/egk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gbpe/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gwl/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hana/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hbm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk3/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kakao/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kamco/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kbank/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kdb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kih/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kisb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kiwi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/koreg/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/lgt/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mnu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mvq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mx/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ncov/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nice/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nwv/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pepper/interface.html")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND requesturl NOT NULL AND requesturl IN ("http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pso/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/qiy/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rfi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rug/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sbi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sevo/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/snz/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/stock/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tcf/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tsbr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/uar/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/unw/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/wfc/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/won/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/woori/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/zhs/interface.html","http://ppnwhbjy.agbrexi9ohfrx53m.com/web/obq/interface.html","rtmp://stream.bsn1.vip:1935/live/")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND Message NOT NULL AND Message IN ("http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pso/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/qiy/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rfi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rug/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sbi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sevo/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/snz/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/stock/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tcf/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tsbr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/uar/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/unw/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/wfc/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/won/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/woori/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/zhs/interface.html","http://ppnwhbjy.agbrexi9ohfrx53m.com/web/obq/interface.html","rtmp://stream.bsn1.vip:1935/live/")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND Requestcontext NOT NULL AND Requestcontext IN ("http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pso/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/qiy/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rfi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rug/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sbi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sevo/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/snz/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/stock/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tcf/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tsbr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/uar/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/unw/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/wfc/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/won/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/woori/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/zhs/interface.html","http://ppnwhbjy.agbrexi9ohfrx53m.com/web/obq/interface.html","rtmp://stream.bsn1.vip:1935/live/")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pso/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/qiy/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rfi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rug/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sbi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sevo/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/snz/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/stock/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tcf/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tsbr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/uar/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/unw/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/wfc/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/won/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/woori/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/zhs/interface.html","http://ppnwhbjy.agbrexi9ohfrx53m.com/web/obq/interface.html","rtmp://stream.bsn1.vip:1935/live/")
index=activity AND rg_functionality="Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("http://f2bkt3abwsjrtp8yuy.com:8388","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_color_ring","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_extra_message","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_limit_phone_number","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_log","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_recording_file","http://f6ewdnfmffcxwbvses.com:8388","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/bkh/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cci/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cxr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/dtp/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/egk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gbpe/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gwl/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hana/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hbm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk3/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kakao/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kamco/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kbank/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kdb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kih/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kisb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kiwi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/koreg/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/lgt/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mnu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mvq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mx/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ncov/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nice/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nwv/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pepper/interface.html")
index=activity AND rg_functionality="Email / Email Security" AND Message NOT NULL AND Message IN ("http://f2bkt3abwsjrtp8yuy.com:8388","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_color_ring","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_extra_message","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_limit_phone_number","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_log","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_recording_file","http://f6ewdnfmffcxwbvses.com:8388","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/bkh/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cci/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cxr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/dtp/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/egk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gbpe/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gwl/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hana/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hbm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk3/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kakao/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kamco/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kbank/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kdb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kih/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kisb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kiwi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/koreg/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/lgt/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mnu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mvq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mx/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ncov/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nice/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nwv/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pepper/interface.html")
index=activity AND rg_functionality="Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("http://f2bkt3abwsjrtp8yuy.com:8388","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_color_ring","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_extra_message","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_limit_phone_number","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_log","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_recording_file","http://f6ewdnfmffcxwbvses.com:8388","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/bkh/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cci/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cxr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/dtp/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/egk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gbpe/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gwl/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hana/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hbm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk3/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kakao/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kamco/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kbank/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kdb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kih/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kisb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kiwi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/koreg/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/lgt/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mnu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mvq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mx/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ncov/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nice/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nwv/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pepper/interface.html")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("http://f2bkt3abwsjrtp8yuy.com:8388","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_color_ring","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_extra_message","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_limit_phone_number","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_log","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_recording_file","http://f6ewdnfmffcxwbvses.com:8388","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/bkh/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cci/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cxr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/dtp/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/egk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gbpe/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gwl/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hana/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hbm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk3/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kakao/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kamco/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kbank/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kdb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kih/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kisb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kiwi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/koreg/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/lgt/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mnu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mvq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mx/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ncov/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nice/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nwv/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pepper/interface.html")
index=activity AND rg_functionality="Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pso/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/qiy/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rfi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rug/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sbi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sevo/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/snz/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/stock/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tcf/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tsbr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/uar/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/unw/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/wfc/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/won/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/woori/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/zhs/interface.html","http://ppnwhbjy.agbrexi9ohfrx53m.com/web/obq/interface.html","rtmp://stream.bsn1.vip:1935/live/")
index=activity AND rg_functionality="Email / Email Security" AND Message NOT NULL AND Message IN ("http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pso/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/qiy/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rfi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rug/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sbi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sevo/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/snz/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/stock/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tcf/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tsbr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/uar/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/unw/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/wfc/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/won/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/woori/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/zhs/interface.html","http://ppnwhbjy.agbrexi9ohfrx53m.com/web/obq/interface.html","rtmp://stream.bsn1.vip:1935/live/")
index=activity AND rg_functionality="Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pso/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/qiy/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rfi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rug/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sbi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sevo/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/snz/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/stock/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tcf/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tsbr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/uar/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/unw/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/wfc/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/won/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/woori/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/zhs/interface.html","http://ppnwhbjy.agbrexi9ohfrx53m.com/web/obq/interface.html","rtmp://stream.bsn1.vip:1935/live/")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pso/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/qiy/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rfi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rug/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sbi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sevo/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/snz/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/stock/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tcf/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tsbr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/uar/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/unw/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/wfc/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/won/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/woori/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/zhs/interface.html","http://ppnwhbjy.agbrexi9ohfrx53m.com/web/obq/interface.html","rtmp://stream.bsn1.vip:1935/live/")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("http://f2bkt3abwsjrtp8yuy.com:8388","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_color_ring","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_extra_message","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_limit_phone_number","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_log","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_recording_file","http://f6ewdnfmffcxwbvses.com:8388","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/bkh/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cci/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cxr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/dtp/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/egk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gbpe/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gwl/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hana/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hbm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk3/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kakao/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kamco/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kbank/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kdb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kih/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kisb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kiwi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/koreg/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/lgt/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mnu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mvq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mx/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ncov/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nice/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nwv/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pepper/interface.html")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Message NOT NULL AND Message IN ("http://f2bkt3abwsjrtp8yuy.com:8388","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_color_ring","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_extra_message","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_limit_phone_number","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_log","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_recording_file","http://f6ewdnfmffcxwbvses.com:8388","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/bkh/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cci/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cxr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/dtp/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/egk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gbpe/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gwl/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hana/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hbm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk3/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kakao/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kamco/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kbank/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kdb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kih/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kisb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kiwi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/koreg/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/lgt/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mnu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mvq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mx/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ncov/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nice/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nwv/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pepper/interface.html")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("http://f2bkt3abwsjrtp8yuy.com:8388","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_color_ring","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_extra_message","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_limit_phone_number","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_log","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_recording_file","http://f6ewdnfmffcxwbvses.com:8388","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/bkh/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cci/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cxr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/dtp/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/egk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gbpe/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gwl/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hana/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hbm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk3/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kakao/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kamco/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kbank/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kdb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kih/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kisb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kiwi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/koreg/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/lgt/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mnu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mvq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mx/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ncov/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nice/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nwv/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pepper/interface.html")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("http://f2bkt3abwsjrtp8yuy.com:8388","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_color_ring","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_extra_message","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_limit_phone_number","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_log","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_recording_file","http://f6ewdnfmffcxwbvses.com:8388","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/bkh/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cci/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cxr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/dtp/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/egk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gbpe/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gwl/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hana/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hbm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk3/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kakao/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kamco/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kbank/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kdb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kih/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kisb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kiwi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/koreg/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/lgt/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mnu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mvq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mx/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ncov/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nice/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nwv/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pepper/interface.html")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pso/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/qiy/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rfi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rug/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sbi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sevo/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/snz/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/stock/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tcf/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tsbr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/uar/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/unw/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/wfc/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/won/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/woori/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/zhs/interface.html","http://ppnwhbjy.agbrexi9ohfrx53m.com/web/obq/interface.html","rtmp://stream.bsn1.vip:1935/live/")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Message NOT NULL AND Message IN ("http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pso/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/qiy/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rfi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rug/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sbi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sevo/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/snz/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/stock/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tcf/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tsbr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/uar/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/unw/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/wfc/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/won/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/woori/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/zhs/interface.html","http://ppnwhbjy.agbrexi9ohfrx53m.com/web/obq/interface.html","rtmp://stream.bsn1.vip:1935/live/")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pso/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/qiy/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rfi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rug/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sbi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sevo/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/snz/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/stock/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tcf/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tsbr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/uar/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/unw/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/wfc/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/won/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/woori/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/zhs/interface.html","http://ppnwhbjy.agbrexi9ohfrx53m.com/web/obq/interface.html","rtmp://stream.bsn1.vip:1935/live/")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pso/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/qiy/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rfi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rug/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sbi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sevo/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/snz/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/stock/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tcf/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tsbr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/uar/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/unw/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/wfc/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/won/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/woori/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/zhs/interface.html","http://ppnwhbjy.agbrexi9ohfrx53m.com/web/obq/interface.html","rtmp://stream.bsn1.vip:1935/live/")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND requesturl IN ("http://f2bkt3abwsjrtp8yuy.com:8388","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_color_ring","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_extra_message","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_limit_phone_number","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_log","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_recording_file","http://f6ewdnfmffcxwbvses.com:8388","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/bkh/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cci/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cxr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/dtp/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/egk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gbpe/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gwl/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hana/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hbm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk3/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kakao/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kamco/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kbank/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kdb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kih/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kisb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kiwi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/koreg/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/lgt/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mnu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mvq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mx/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ncov/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nice/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nwv/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pepper/interface.html")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Message NOT NULL AND Message IN ("http://f2bkt3abwsjrtp8yuy.com:8388","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_color_ring","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_extra_message","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_limit_phone_number","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_log","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_recording_file","http://f6ewdnfmffcxwbvses.com:8388","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/bkh/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cci/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cxr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/dtp/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/egk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gbpe/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gwl/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hana/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hbm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk3/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kakao/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kamco/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kbank/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kdb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kih/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kisb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kiwi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/koreg/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/lgt/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mnu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mvq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mx/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ncov/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nice/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nwv/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pepper/interface.html")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Requestcontext NOT NULL AND Requestcontext IN ("http://f2bkt3abwsjrtp8yuy.com:8388","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_color_ring","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_extra_message","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_limit_phone_number","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_log","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_recording_file","http://f6ewdnfmffcxwbvses.com:8388","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/bkh/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cci/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cxr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/dtp/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/egk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gbpe/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gwl/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hana/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hbm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk3/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kakao/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kamco/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kbank/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kdb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kih/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kisb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kiwi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/koreg/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/lgt/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mnu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mvq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mx/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ncov/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nice/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nwv/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pepper/interface.html")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("http://f2bkt3abwsjrtp8yuy.com:8388","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_color_ring","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_extra_message","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_limit_phone_number","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_log","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_recording_file","http://f6ewdnfmffcxwbvses.com:8388","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/bkh/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cci/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cxr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/dtp/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/egk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gbpe/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gwl/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hana/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hbm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk3/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kakao/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kamco/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kbank/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kdb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kih/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kisb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kiwi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/koreg/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/lgt/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mnu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mvq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mx/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ncov/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nice/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nwv/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pepper/interface.html")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND requesturl IN ("http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pso/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/qiy/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rfi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rug/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sbi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sevo/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/snz/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/stock/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tcf/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tsbr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/uar/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/unw/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/wfc/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/won/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/woori/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/zhs/interface.html","http://ppnwhbjy.agbrexi9ohfrx53m.com/web/obq/interface.html","rtmp://stream.bsn1.vip:1935/live/")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Message NOT NULL AND Message IN ("http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pso/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/qiy/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rfi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rug/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sbi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sevo/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/snz/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/stock/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tcf/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tsbr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/uar/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/unw/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/wfc/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/won/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/woori/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/zhs/interface.html","http://ppnwhbjy.agbrexi9ohfrx53m.com/web/obq/interface.html","rtmp://stream.bsn1.vip:1935/live/")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Requestcontext NOT NULL AND Requestcontext IN ("http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pso/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/qiy/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rfi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rug/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sbi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sevo/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/snz/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/stock/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tcf/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tsbr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/uar/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/unw/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/wfc/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/won/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/woori/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/zhs/interface.html","http://ppnwhbjy.agbrexi9ohfrx53m.com/web/obq/interface.html","rtmp://stream.bsn1.vip:1935/live/")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pso/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/qiy/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rfi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rug/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sbi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sevo/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/snz/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/stock/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tcf/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tsbr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/uar/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/unw/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/wfc/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/won/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/woori/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/zhs/interface.html","http://ppnwhbjy.agbrexi9ohfrx53m.com/web/obq/interface.html","rtmp://stream.bsn1.vip:1935/live/")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND requesturl NOT NULL AND requesturl IN ("http://f2bkt3abwsjrtp8yuy.com:8388","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_color_ring","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_extra_message","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_limit_phone_number","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_log","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_recording_file","http://f6ewdnfmffcxwbvses.com:8388","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/bkh/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cci/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cxr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/dtp/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/egk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gbpe/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gwl/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hana/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hbm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk3/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kakao/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kamco/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kbank/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kdb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kih/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kisb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kiwi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/koreg/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/lgt/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mnu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mvq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mx/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ncov/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nice/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nwv/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pepper/interface.html")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND Message NOT NULL AND Message IN ("http://f2bkt3abwsjrtp8yuy.com:8388","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_color_ring","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_extra_message","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_limit_phone_number","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_log","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_recording_file","http://f6ewdnfmffcxwbvses.com:8388","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/bkh/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cci/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cxr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/dtp/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/egk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gbpe/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gwl/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hana/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hbm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk3/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kakao/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kamco/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kbank/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kdb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kih/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kisb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kiwi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/koreg/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/lgt/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mnu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mvq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mx/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ncov/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nice/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nwv/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pepper/interface.html")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND Requestcontext NOT NULL AND Requestcontext IN ("http://f2bkt3abwsjrtp8yuy.com:8388","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_color_ring","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_extra_message","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_limit_phone_number","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_log","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_recording_file","http://f6ewdnfmffcxwbvses.com:8388","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/bkh/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cci/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cxr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/dtp/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/egk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gbpe/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gwl/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hana/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hbm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk3/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kakao/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kamco/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kbank/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kdb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kih/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kisb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kiwi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/koreg/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/lgt/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mnu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mvq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mx/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ncov/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nice/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nwv/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pepper/interface.html")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("http://f2bkt3abwsjrtp8yuy.com:8388","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_color_ring","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_extra_message","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_limit_phone_number","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_log","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_recording_file","http://f6ewdnfmffcxwbvses.com:8388","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/bkh/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cci/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cxr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/dtp/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/egk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gbpe/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gwl/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hana/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hbm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk3/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kakao/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kamco/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kbank/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kdb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kih/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kisb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kiwi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/koreg/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/lgt/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mnu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mvq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mx/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ncov/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nice/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nwv/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pepper/interface.html")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND requesturl NOT NULL AND requesturl IN ("http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pso/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/qiy/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rfi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rug/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sbi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sevo/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/snz/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/stock/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tcf/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tsbr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/uar/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/unw/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/wfc/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/won/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/woori/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/zhs/interface.html","http://ppnwhbjy.agbrexi9ohfrx53m.com/web/obq/interface.html","rtmp://stream.bsn1.vip:1935/live/")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND Message NOT NULL AND Message IN ("http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pso/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/qiy/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rfi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rug/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sbi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sevo/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/snz/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/stock/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tcf/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tsbr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/uar/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/unw/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/wfc/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/won/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/woori/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/zhs/interface.html","http://ppnwhbjy.agbrexi9ohfrx53m.com/web/obq/interface.html","rtmp://stream.bsn1.vip:1935/live/")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND Requestcontext NOT NULL AND Requestcontext IN ("http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pso/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/qiy/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rfi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rug/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sbi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sevo/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/snz/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/stock/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tcf/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tsbr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/uar/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/unw/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/wfc/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/won/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/woori/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/zhs/interface.html","http://ppnwhbjy.agbrexi9ohfrx53m.com/web/obq/interface.html","rtmp://stream.bsn1.vip:1935/live/")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pso/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/qiy/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rfi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rug/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sbi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sevo/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/snz/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/stock/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tcf/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tsbr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/uar/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/unw/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/wfc/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/won/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/woori/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/zhs/interface.html","http://ppnwhbjy.agbrexi9ohfrx53m.com/web/obq/interface.html","rtmp://stream.bsn1.vip:1935/live/")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND requesturl IN ("http://f2bkt3abwsjrtp8yuy.com:8388","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_color_ring","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_extra_message","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_limit_phone_number","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_log","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_recording_file","http://f6ewdnfmffcxwbvses.com:8388","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/bkh/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cci/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cxr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/dtp/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/egk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gbpe/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gwl/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hana/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hbm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk3/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kakao/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kamco/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kbank/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kdb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kih/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kisb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kiwi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/koreg/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/lgt/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mnu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mvq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mx/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ncov/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nice/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nwv/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pepper/interface.html")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Message NOT NULL AND Message IN ("http://f2bkt3abwsjrtp8yuy.com:8388","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_color_ring","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_extra_message","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_limit_phone_number","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_log","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_recording_file","http://f6ewdnfmffcxwbvses.com:8388","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/bkh/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cci/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cxr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/dtp/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/egk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gbpe/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gwl/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hana/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hbm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk3/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kakao/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kamco/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kbank/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kdb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kih/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kisb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kiwi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/koreg/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/lgt/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mnu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mvq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mx/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ncov/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nice/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nwv/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pepper/interface.html")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Requestcontext NOT NULL AND Requestcontext IN ("http://f2bkt3abwsjrtp8yuy.com:8388","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_color_ring","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_extra_message","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_limit_phone_number","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_log","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_recording_file","http://f6ewdnfmffcxwbvses.com:8388","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/bkh/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cci/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cxr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/dtp/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/egk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gbpe/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gwl/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hana/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hbm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk3/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kakao/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kamco/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kbank/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kdb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kih/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kisb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kiwi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/koreg/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/lgt/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mnu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mvq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mx/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ncov/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nice/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nwv/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pepper/interface.html")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("http://f2bkt3abwsjrtp8yuy.com:8388","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_color_ring","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_extra_message","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_limit_phone_number","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_log","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_recording_file","http://f6ewdnfmffcxwbvses.com:8388","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/bkh/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cci/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cxr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/dtp/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/egk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gbpe/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gwl/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hana/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hbm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk3/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kakao/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kamco/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kbank/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kdb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kih/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kisb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kiwi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/koreg/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/lgt/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mnu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mvq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mx/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ncov/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nice/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nwv/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pepper/interface.html")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND requesturl IN ("http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pso/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/qiy/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rfi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rug/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sbi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sevo/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/snz/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/stock/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tcf/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tsbr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/uar/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/unw/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/wfc/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/won/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/woori/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/zhs/interface.html","http://ppnwhbjy.agbrexi9ohfrx53m.com/web/obq/interface.html","rtmp://stream.bsn1.vip:1935/live/")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Message NOT NULL AND Message IN ("http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pso/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/qiy/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rfi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rug/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sbi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sevo/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/snz/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/stock/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tcf/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tsbr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/uar/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/unw/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/wfc/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/won/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/woori/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/zhs/interface.html","http://ppnwhbjy.agbrexi9ohfrx53m.com/web/obq/interface.html","rtmp://stream.bsn1.vip:1935/live/")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Requestcontext NOT NULL AND Requestcontext IN ("http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pso/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/qiy/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rfi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rug/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sbi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sevo/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/snz/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/stock/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tcf/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tsbr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/uar/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/unw/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/wfc/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/won/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/woori/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/zhs/interface.html","http://ppnwhbjy.agbrexi9ohfrx53m.com/web/obq/interface.html","rtmp://stream.bsn1.vip:1935/live/")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pso/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/qiy/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rfi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rug/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sbi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sevo/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/snz/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/stock/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tcf/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tsbr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/uar/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/unw/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/wfc/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/won/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/woori/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/zhs/interface.html","http://ppnwhbjy.agbrexi9ohfrx53m.com/web/obq/interface.html","rtmp://stream.bsn1.vip:1935/live/")
index=activity AND rg_functionality="Web Proxy" AND requesturl NOT NULL AND requesturl IN ("http://f2bkt3abwsjrtp8yuy.com:8388","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_color_ring","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_extra_message","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_limit_phone_number","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_log","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_recording_file","http://f6ewdnfmffcxwbvses.com:8388","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/bkh/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cci/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cxr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/dtp/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/egk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gbpe/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gwl/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hana/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hbm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk3/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kakao/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kamco/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kbank/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kdb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kih/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kisb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kiwi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/koreg/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/lgt/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mnu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mvq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mx/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ncov/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nice/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nwv/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pepper/interface.html")
index=activity AND rg_functionality="Web Proxy" AND Message NOT NULL AND Message IN ("http://f2bkt3abwsjrtp8yuy.com:8388","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_color_ring","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_extra_message","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_limit_phone_number","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_log","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_recording_file","http://f6ewdnfmffcxwbvses.com:8388","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/bkh/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cci/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cxr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/dtp/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/egk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gbpe/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gwl/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hana/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hbm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk3/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kakao/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kamco/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kbank/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kdb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kih/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kisb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kiwi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/koreg/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/lgt/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mnu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mvq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mx/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ncov/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nice/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nwv/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pepper/interface.html")
index=activity AND rg_functionality="Web Proxy" AND Requestcontext NOT NULL AND Requestcontext IN ("http://f2bkt3abwsjrtp8yuy.com:8388","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_color_ring","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_extra_message","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_limit_phone_number","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_log","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_recording_file","http://f6ewdnfmffcxwbvses.com:8388","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/bkh/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cci/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cxr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/dtp/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/egk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gbpe/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gwl/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hana/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hbm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk3/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kakao/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kamco/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kbank/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kdb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kih/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kisb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kiwi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/koreg/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/lgt/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mnu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mvq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mx/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ncov/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nice/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nwv/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pepper/interface.html")
index=activity AND rg_functionality="Web Proxy" AND customstring3 NOT NULL AND customstring3 IN ("http://f2bkt3abwsjrtp8yuy.com:8388","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_color_ring","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_extra_message","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_limit_phone_number","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_log","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_recording_file","http://f6ewdnfmffcxwbvses.com:8388","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/bkh/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cci/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cxr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/dtp/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/egk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gbpe/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gwl/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hana/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hbm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk3/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kakao/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kamco/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kbank/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kdb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kih/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kisb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kiwi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/koreg/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/lgt/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mnu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mvq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mx/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ncov/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nice/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nwv/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pepper/interface.html")
index=activity AND rg_functionality="Web Proxy" AND requesturl NOT NULL AND requesturl IN ("http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pso/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/qiy/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rfi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rug/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sbi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sevo/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/snz/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/stock/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tcf/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tsbr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/uar/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/unw/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/wfc/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/won/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/woori/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/zhs/interface.html","http://ppnwhbjy.agbrexi9ohfrx53m.com/web/obq/interface.html","rtmp://stream.bsn1.vip:1935/live/")
index=activity AND rg_functionality="Web Proxy" AND Message NOT NULL AND Message IN ("http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pso/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/qiy/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rfi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rug/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sbi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sevo/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/snz/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/stock/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tcf/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tsbr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/uar/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/unw/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/wfc/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/won/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/woori/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/zhs/interface.html","http://ppnwhbjy.agbrexi9ohfrx53m.com/web/obq/interface.html","rtmp://stream.bsn1.vip:1935/live/")
index=activity AND rg_functionality="Web Proxy" AND Requestcontext NOT NULL AND Requestcontext IN ("http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pso/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/qiy/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rfi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rug/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sbi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sevo/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/snz/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/stock/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tcf/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tsbr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/uar/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/unw/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/wfc/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/won/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/woori/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/zhs/interface.html","http://ppnwhbjy.agbrexi9ohfrx53m.com/web/obq/interface.html","rtmp://stream.bsn1.vip:1935/live/")
index=activity AND rg_functionality="Web Proxy" AND customstring3 NOT NULL AND customstring3 IN ("http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pso/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/qiy/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rfi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rug/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sbi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sevo/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/snz/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/stock/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tcf/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tsbr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/uar/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/unw/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/wfc/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/won/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/woori/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/zhs/interface.html","http://ppnwhbjy.agbrexi9ohfrx53m.com/web/obq/interface.html","rtmp://stream.bsn1.vip:1935/live/")
index=activity AND rg_functionality="Next Generation Firewall" AND requesturl NOT NULL AND requesturl IN ("http://f2bkt3abwsjrtp8yuy.com:8388","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_color_ring","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_extra_message","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_limit_phone_number","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_log","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_recording_file","http://f6ewdnfmffcxwbvses.com:8388","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/bkh/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cci/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cxr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/dtp/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/egk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gbpe/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gwl/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hana/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hbm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk3/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kakao/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kamco/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kbank/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kdb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kih/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kisb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kiwi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/koreg/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/lgt/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mnu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mvq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mx/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ncov/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nice/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nwv/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pepper/interface.html")
index=activity AND rg_functionality="Next Generation Firewall" AND Message NOT NULL AND Message IN ("http://f2bkt3abwsjrtp8yuy.com:8388","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_color_ring","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_extra_message","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_limit_phone_number","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_log","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_recording_file","http://f6ewdnfmffcxwbvses.com:8388","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/bkh/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cci/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cxr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/dtp/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/egk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gbpe/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gwl/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hana/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hbm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk3/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kakao/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kamco/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kbank/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kdb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kih/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kisb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kiwi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/koreg/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/lgt/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mnu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mvq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mx/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ncov/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nice/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nwv/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pepper/interface.html")
index=activity AND rg_functionality="Next Generation Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("http://f2bkt3abwsjrtp8yuy.com:8388","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_color_ring","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_extra_message","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_limit_phone_number","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_log","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_recording_file","http://f6ewdnfmffcxwbvses.com:8388","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/bkh/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cci/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cxr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/dtp/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/egk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gbpe/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gwl/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hana/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hbm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk3/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kakao/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kamco/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kbank/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kdb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kih/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kisb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kiwi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/koreg/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/lgt/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mnu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mvq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mx/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ncov/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nice/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nwv/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pepper/interface.html")
index=activity AND rg_functionality="Next Generation Firewall" AND customstring3 NOT NULL AND customstring3 IN ("http://f2bkt3abwsjrtp8yuy.com:8388","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_color_ring","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_extra_message","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_limit_phone_number","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_log","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_recording_file","http://f6ewdnfmffcxwbvses.com:8388","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/bkh/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cci/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cxr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/dtp/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/egk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gbpe/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gwl/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hana/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hbm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk3/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kakao/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kamco/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kbank/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kdb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kih/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kisb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kiwi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/koreg/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/lgt/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mnu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mvq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mx/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ncov/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nice/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nwv/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pepper/interface.html")
index=activity AND rg_functionality="Next Generation Firewall" AND requesturl NOT NULL AND requesturl IN ("http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pso/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/qiy/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rfi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rug/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sbi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sevo/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/snz/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/stock/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tcf/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tsbr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/uar/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/unw/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/wfc/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/won/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/woori/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/zhs/interface.html","http://ppnwhbjy.agbrexi9ohfrx53m.com/web/obq/interface.html","rtmp://stream.bsn1.vip:1935/live/")
index=activity AND rg_functionality="Next Generation Firewall" AND Message NOT NULL AND Message IN ("http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pso/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/qiy/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rfi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rug/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sbi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sevo/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/snz/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/stock/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tcf/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tsbr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/uar/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/unw/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/wfc/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/won/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/woori/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/zhs/interface.html","http://ppnwhbjy.agbrexi9ohfrx53m.com/web/obq/interface.html","rtmp://stream.bsn1.vip:1935/live/")
index=activity AND rg_functionality="Next Generation Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pso/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/qiy/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rfi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rug/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sbi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sevo/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/snz/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/stock/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tcf/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tsbr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/uar/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/unw/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/wfc/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/won/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/woori/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/zhs/interface.html","http://ppnwhbjy.agbrexi9ohfrx53m.com/web/obq/interface.html","rtmp://stream.bsn1.vip:1935/live/")
index=activity AND rg_functionality="Next Generation Firewall" AND customstring3 NOT NULL AND customstring3 IN ("http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pso/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/qiy/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rfi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rug/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sbi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sevo/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/snz/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/stock/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tcf/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tsbr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/uar/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/unw/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/wfc/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/won/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/woori/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/zhs/interface.html","http://ppnwhbjy.agbrexi9ohfrx53m.com/web/obq/interface.html","rtmp://stream.bsn1.vip:1935/live/")
index=activity AND rg_functionality="Flow" AND requesturl NOT NULL AND requesturl IN ("http://f2bkt3abwsjrtp8yuy.com:8388","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_color_ring","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_extra_message","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_limit_phone_number","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_log","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_recording_file","http://f6ewdnfmffcxwbvses.com:8388","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/bkh/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cci/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cxr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/dtp/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/egk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gbpe/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gwl/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hana/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hbm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk3/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kakao/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kamco/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kbank/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kdb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kih/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kisb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kiwi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/koreg/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/lgt/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mnu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mvq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mx/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ncov/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nice/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nwv/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pepper/interface.html")
index=activity AND rg_functionality="Flow" AND Message NOT NULL AND Message IN ("http://f2bkt3abwsjrtp8yuy.com:8388","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_color_ring","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_extra_message","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_limit_phone_number","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_log","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_recording_file","http://f6ewdnfmffcxwbvses.com:8388","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/bkh/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cci/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cxr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/dtp/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/egk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gbpe/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gwl/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hana/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hbm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk3/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kakao/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kamco/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kbank/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kdb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kih/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kisb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kiwi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/koreg/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/lgt/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mnu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mvq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mx/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ncov/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nice/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nwv/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pepper/interface.html")
index=activity AND rg_functionality="Flow" AND Requestcontext NOT NULL AND Requestcontext IN ("http://f2bkt3abwsjrtp8yuy.com:8388","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_color_ring","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_extra_message","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_limit_phone_number","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_log","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_recording_file","http://f6ewdnfmffcxwbvses.com:8388","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/bkh/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cci/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cxr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/dtp/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/egk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gbpe/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gwl/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hana/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hbm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk3/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kakao/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kamco/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kbank/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kdb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kih/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kisb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kiwi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/koreg/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/lgt/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mnu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mvq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mx/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ncov/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nice/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nwv/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pepper/interface.html")
index=activity AND rg_functionality="Flow" AND customstring3 NOT NULL AND customstring3 IN ("http://f2bkt3abwsjrtp8yuy.com:8388","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_color_ring","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_extra_message","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_limit_phone_number","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_log","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_recording_file","http://f6ewdnfmffcxwbvses.com:8388","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/bkh/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cci/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cxr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/dtp/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/egk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gbpe/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gwl/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hana/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hbm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk3/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kakao/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kamco/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kbank/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kdb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kih/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kisb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kiwi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/koreg/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/lgt/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mnu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mvq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mx/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ncov/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nice/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nwv/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pepper/interface.html")
index=activity AND rg_functionality="Flow" AND requesturl NOT NULL AND requesturl IN ("http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pso/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/qiy/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rfi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rug/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sbi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sevo/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/snz/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/stock/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tcf/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tsbr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/uar/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/unw/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/wfc/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/won/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/woori/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/zhs/interface.html","http://ppnwhbjy.agbrexi9ohfrx53m.com/web/obq/interface.html","rtmp://stream.bsn1.vip:1935/live/")
index=activity AND rg_functionality="Flow" AND Message NOT NULL AND Message IN ("http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pso/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/qiy/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rfi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rug/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sbi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sevo/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/snz/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/stock/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tcf/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tsbr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/uar/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/unw/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/wfc/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/won/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/woori/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/zhs/interface.html","http://ppnwhbjy.agbrexi9ohfrx53m.com/web/obq/interface.html","rtmp://stream.bsn1.vip:1935/live/")
index=activity AND rg_functionality="Flow" AND Requestcontext NOT NULL AND Requestcontext IN ("http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pso/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/qiy/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rfi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rug/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sbi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sevo/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/snz/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/stock/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tcf/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tsbr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/uar/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/unw/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/wfc/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/won/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/woori/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/zhs/interface.html","http://ppnwhbjy.agbrexi9ohfrx53m.com/web/obq/interface.html","rtmp://stream.bsn1.vip:1935/live/")
index=activity AND rg_functionality="Flow" AND customstring3 NOT NULL AND customstring3 IN ("http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pso/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/qiy/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rfi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rug/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sbi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sevo/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/snz/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/stock/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tcf/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tsbr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/uar/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/unw/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/wfc/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/won/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/woori/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/zhs/interface.html","http://ppnwhbjy.agbrexi9ohfrx53m.com/web/obq/interface.html","rtmp://stream.bsn1.vip:1935/live/")
index=activity AND rg_functionality="Web Server" AND requesturl NOT NULL AND requesturl IN ("http://f2bkt3abwsjrtp8yuy.com:8388","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_color_ring","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_extra_message","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_limit_phone_number","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_log","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_recording_file","http://f6ewdnfmffcxwbvses.com:8388","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/bkh/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cci/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cxr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/dtp/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/egk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gbpe/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gwl/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hana/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hbm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk3/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kakao/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kamco/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kbank/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kdb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kih/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kisb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kiwi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/koreg/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/lgt/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mnu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mvq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mx/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ncov/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nice/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nwv/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pepper/interface.html")
index=activity AND rg_functionality="Web Server" AND Message NOT NULL AND Message IN ("http://f2bkt3abwsjrtp8yuy.com:8388","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_color_ring","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_extra_message","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_limit_phone_number","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_log","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_recording_file","http://f6ewdnfmffcxwbvses.com:8388","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/bkh/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cci/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cxr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/dtp/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/egk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gbpe/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gwl/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hana/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hbm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk3/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kakao/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kamco/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kbank/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kdb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kih/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kisb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kiwi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/koreg/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/lgt/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mnu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mvq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mx/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ncov/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nice/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nwv/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pepper/interface.html")
index=activity AND rg_functionality="Web Server" AND Requestcontext NOT NULL AND Requestcontext IN ("http://f2bkt3abwsjrtp8yuy.com:8388","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_color_ring","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_extra_message","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_limit_phone_number","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_log","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_recording_file","http://f6ewdnfmffcxwbvses.com:8388","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/bkh/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cci/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cxr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/dtp/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/egk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gbpe/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gwl/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hana/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hbm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk3/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kakao/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kamco/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kbank/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kdb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kih/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kisb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kiwi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/koreg/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/lgt/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mnu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mvq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mx/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ncov/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nice/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nwv/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pepper/interface.html")
index=activity AND rg_functionality="Web Server" AND customstring3 NOT NULL AND customstring3 IN ("http://f2bkt3abwsjrtp8yuy.com:8388","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_color_ring","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_extra_message","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_limit_phone_number","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_log","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_recording_file","http://f6ewdnfmffcxwbvses.com:8388","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/bkh/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cci/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cxr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/dtp/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/egk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gbpe/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gwl/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hana/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hbm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk3/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kakao/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kamco/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kbank/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kdb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kih/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kisb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kiwi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/koreg/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/lgt/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mnu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mvq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mx/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ncov/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nice/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nwv/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pepper/interface.html")
index=activity AND rg_functionality="Web Server" AND requesturl NOT NULL AND requesturl IN ("http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pso/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/qiy/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rfi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rug/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sbi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sevo/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/snz/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/stock/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tcf/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tsbr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/uar/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/unw/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/wfc/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/won/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/woori/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/zhs/interface.html","http://ppnwhbjy.agbrexi9ohfrx53m.com/web/obq/interface.html","rtmp://stream.bsn1.vip:1935/live/")
index=activity AND rg_functionality="Web Server" AND Message NOT NULL AND Message IN ("http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pso/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/qiy/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rfi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rug/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sbi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sevo/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/snz/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/stock/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tcf/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tsbr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/uar/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/unw/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/wfc/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/won/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/woori/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/zhs/interface.html","http://ppnwhbjy.agbrexi9ohfrx53m.com/web/obq/interface.html","rtmp://stream.bsn1.vip:1935/live/")
index=activity AND rg_functionality="Web Server" AND Requestcontext NOT NULL AND Requestcontext IN ("http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pso/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/qiy/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rfi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rug/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sbi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sevo/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/snz/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/stock/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tcf/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tsbr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/uar/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/unw/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/wfc/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/won/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/woori/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/zhs/interface.html","http://ppnwhbjy.agbrexi9ohfrx53m.com/web/obq/interface.html","rtmp://stream.bsn1.vip:1935/live/")
index=activity AND rg_functionality="Web Server" AND customstring3 NOT NULL AND customstring3 IN ("http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pso/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/qiy/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rfi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rug/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sbi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sevo/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/snz/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/stock/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tcf/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tsbr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/uar/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/unw/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/wfc/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/won/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/woori/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/zhs/interface.html","http://ppnwhbjy.agbrexi9ohfrx53m.com/web/obq/interface.html","rtmp://stream.bsn1.vip:1935/live/")
index=activity AND rg_functionality="Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("http://f2bkt3abwsjrtp8yuy.com:8388","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_color_ring","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_extra_message","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_limit_phone_number","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_log","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_recording_file","http://f6ewdnfmffcxwbvses.com:8388","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/bkh/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cci/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cxr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/dtp/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/egk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gbpe/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gwl/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hana/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hbm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk3/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kakao/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kamco/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kbank/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kdb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kih/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kisb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kiwi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/koreg/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/lgt/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mnu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mvq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mx/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ncov/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nice/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nwv/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pepper/interface.html")
index=activity AND rg_functionality="Email / Email Security" AND Message NOT NULL AND Message IN ("http://f2bkt3abwsjrtp8yuy.com:8388","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_color_ring","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_extra_message","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_limit_phone_number","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_log","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_recording_file","http://f6ewdnfmffcxwbvses.com:8388","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/bkh/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cci/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cxr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/dtp/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/egk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gbpe/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gwl/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hana/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hbm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk3/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kakao/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kamco/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kbank/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kdb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kih/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kisb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kiwi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/koreg/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/lgt/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mnu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mvq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mx/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ncov/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nice/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nwv/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pepper/interface.html")
index=activity AND rg_functionality="Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("http://f2bkt3abwsjrtp8yuy.com:8388","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_color_ring","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_extra_message","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_limit_phone_number","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_log","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_recording_file","http://f6ewdnfmffcxwbvses.com:8388","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/bkh/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cci/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cxr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/dtp/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/egk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gbpe/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gwl/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hana/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hbm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk3/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kakao/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kamco/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kbank/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kdb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kih/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kisb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kiwi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/koreg/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/lgt/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mnu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mvq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mx/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ncov/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nice/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nwv/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pepper/interface.html")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("http://f2bkt3abwsjrtp8yuy.com:8388","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_color_ring","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_extra_message","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_limit_phone_number","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_log","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_recording_file","http://f6ewdnfmffcxwbvses.com:8388","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/bkh/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cci/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cxr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/dtp/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/egk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gbpe/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gwl/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hana/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hbm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk3/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kakao/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kamco/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kbank/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kdb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kih/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kisb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kiwi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/koreg/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/lgt/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mnu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mvq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mx/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ncov/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nice/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nwv/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pepper/interface.html")
index=activity AND rg_functionality="Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pso/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/qiy/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rfi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rug/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sbi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sevo/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/snz/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/stock/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tcf/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tsbr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/uar/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/unw/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/wfc/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/won/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/woori/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/zhs/interface.html","http://ppnwhbjy.agbrexi9ohfrx53m.com/web/obq/interface.html","rtmp://stream.bsn1.vip:1935/live/")
index=activity AND rg_functionality="Email / Email Security" AND Message NOT NULL AND Message IN ("http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pso/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/qiy/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rfi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rug/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sbi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sevo/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/snz/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/stock/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tcf/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tsbr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/uar/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/unw/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/wfc/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/won/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/woori/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/zhs/interface.html","http://ppnwhbjy.agbrexi9ohfrx53m.com/web/obq/interface.html","rtmp://stream.bsn1.vip:1935/live/")
index=activity AND rg_functionality="Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pso/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/qiy/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rfi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rug/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sbi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sevo/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/snz/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/stock/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tcf/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tsbr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/uar/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/unw/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/wfc/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/won/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/woori/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/zhs/interface.html","http://ppnwhbjy.agbrexi9ohfrx53m.com/web/obq/interface.html","rtmp://stream.bsn1.vip:1935/live/")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pso/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/qiy/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rfi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rug/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sbi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sevo/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/snz/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/stock/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tcf/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tsbr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/uar/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/unw/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/wfc/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/won/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/woori/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/zhs/interface.html","http://ppnwhbjy.agbrexi9ohfrx53m.com/web/obq/interface.html","rtmp://stream.bsn1.vip:1935/live/")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("http://f2bkt3abwsjrtp8yuy.com:8388","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_color_ring","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_extra_message","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_limit_phone_number","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_log","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_recording_file","http://f6ewdnfmffcxwbvses.com:8388","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/bkh/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cci/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cxr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/dtp/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/egk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gbpe/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gwl/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hana/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hbm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk3/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kakao/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kamco/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kbank/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kdb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kih/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kisb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kiwi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/koreg/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/lgt/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mnu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mvq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mx/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ncov/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nice/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nwv/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pepper/interface.html")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Message NOT NULL AND Message IN ("http://f2bkt3abwsjrtp8yuy.com:8388","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_color_ring","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_extra_message","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_limit_phone_number","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_log","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_recording_file","http://f6ewdnfmffcxwbvses.com:8388","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/bkh/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cci/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cxr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/dtp/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/egk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gbpe/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gwl/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hana/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hbm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk3/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kakao/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kamco/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kbank/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kdb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kih/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kisb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kiwi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/koreg/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/lgt/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mnu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mvq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mx/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ncov/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nice/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nwv/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pepper/interface.html")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("http://f2bkt3abwsjrtp8yuy.com:8388","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_color_ring","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_extra_message","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_limit_phone_number","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_log","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_recording_file","http://f6ewdnfmffcxwbvses.com:8388","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/bkh/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cci/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cxr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/dtp/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/egk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gbpe/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gwl/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hana/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hbm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk3/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kakao/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kamco/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kbank/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kdb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kih/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kisb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kiwi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/koreg/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/lgt/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mnu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mvq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mx/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ncov/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nice/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nwv/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pepper/interface.html")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("http://f2bkt3abwsjrtp8yuy.com:8388","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_color_ring","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_extra_message","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_limit_phone_number","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_log","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_recording_file","http://f6ewdnfmffcxwbvses.com:8388","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/bkh/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cci/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cxr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/dtp/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/egk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gbpe/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gwl/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hana/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hbm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk3/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kakao/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kamco/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kbank/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kdb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kih/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kisb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kiwi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/koreg/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/lgt/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mnu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mvq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mx/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ncov/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nice/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nwv/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pepper/interface.html")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pso/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/qiy/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rfi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rug/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sbi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sevo/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/snz/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/stock/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tcf/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tsbr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/uar/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/unw/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/wfc/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/won/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/woori/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/zhs/interface.html","http://ppnwhbjy.agbrexi9ohfrx53m.com/web/obq/interface.html","rtmp://stream.bsn1.vip:1935/live/")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Message NOT NULL AND Message IN ("http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pso/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/qiy/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rfi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rug/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sbi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sevo/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/snz/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/stock/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tcf/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tsbr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/uar/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/unw/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/wfc/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/won/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/woori/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/zhs/interface.html","http://ppnwhbjy.agbrexi9ohfrx53m.com/web/obq/interface.html","rtmp://stream.bsn1.vip:1935/live/")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pso/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/qiy/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rfi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rug/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sbi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sevo/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/snz/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/stock/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tcf/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tsbr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/uar/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/unw/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/wfc/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/won/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/woori/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/zhs/interface.html","http://ppnwhbjy.agbrexi9ohfrx53m.com/web/obq/interface.html","rtmp://stream.bsn1.vip:1935/live/")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pso/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/qiy/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rfi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rug/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sbi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sevo/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/snz/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/stock/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tcf/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tsbr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/uar/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/unw/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/wfc/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/won/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/woori/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/zhs/interface.html","http://ppnwhbjy.agbrexi9ohfrx53m.com/web/obq/interface.html","rtmp://stream.bsn1.vip:1935/live/")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND requesturl IN ("http://f2bkt3abwsjrtp8yuy.com:8388","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_color_ring","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_extra_message","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_limit_phone_number","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_log","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_recording_file","http://f6ewdnfmffcxwbvses.com:8388","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/bkh/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cci/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cxr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/dtp/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/egk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gbpe/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gwl/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hana/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hbm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk3/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kakao/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kamco/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kbank/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kdb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kih/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kisb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kiwi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/koreg/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/lgt/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mnu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mvq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mx/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ncov/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nice/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nwv/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pepper/interface.html")
index=activity AND rg_functionality="Web Application Firewall" AND Message NOT NULL AND Message IN ("http://f2bkt3abwsjrtp8yuy.com:8388","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_color_ring","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_extra_message","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_limit_phone_number","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_log","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_recording_file","http://f6ewdnfmffcxwbvses.com:8388","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/bkh/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cci/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cxr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/dtp/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/egk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gbpe/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gwl/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hana/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hbm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk3/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kakao/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kamco/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kbank/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kdb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kih/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kisb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kiwi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/koreg/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/lgt/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mnu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mvq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mx/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ncov/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nice/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nwv/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pepper/interface.html")
index=activity AND rg_functionality="Web Application Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("http://f2bkt3abwsjrtp8yuy.com:8388","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_color_ring","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_extra_message","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_limit_phone_number","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_log","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_recording_file","http://f6ewdnfmffcxwbvses.com:8388","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/bkh/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cci/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cxr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/dtp/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/egk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gbpe/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gwl/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hana/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hbm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk3/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kakao/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kamco/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kbank/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kdb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kih/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kisb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kiwi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/koreg/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/lgt/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mnu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mvq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mx/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ncov/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nice/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nwv/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pepper/interface.html")
index=activity AND rg_functionality="Web Application Firewall" AND customstring3 NOT NULL AND customstring3 IN ("http://f2bkt3abwsjrtp8yuy.com:8388","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_color_ring","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_extra_message","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_limit_phone_number","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_log","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_recording_file","http://f6ewdnfmffcxwbvses.com:8388","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/bkh/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cci/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cxr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/dtp/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/egk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gbpe/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gwl/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hana/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hbm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk3/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kakao/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kamco/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kbank/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kdb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kih/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kisb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kiwi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/koreg/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/lgt/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mnu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mvq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mx/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ncov/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nice/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nwv/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pepper/interface.html")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND requesturl IN ("http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pso/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/qiy/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rfi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rug/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sbi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sevo/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/snz/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/stock/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tcf/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tsbr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/uar/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/unw/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/wfc/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/won/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/woori/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/zhs/interface.html","http://ppnwhbjy.agbrexi9ohfrx53m.com/web/obq/interface.html","rtmp://stream.bsn1.vip:1935/live/")
index=activity AND rg_functionality="Web Application Firewall" AND Message NOT NULL AND Message IN ("http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pso/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/qiy/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rfi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rug/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sbi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sevo/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/snz/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/stock/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tcf/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tsbr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/uar/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/unw/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/wfc/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/won/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/woori/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/zhs/interface.html","http://ppnwhbjy.agbrexi9ohfrx53m.com/web/obq/interface.html","rtmp://stream.bsn1.vip:1935/live/")
index=activity AND rg_functionality="Web Application Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pso/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/qiy/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rfi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rug/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sbi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sevo/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/snz/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/stock/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tcf/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tsbr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/uar/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/unw/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/wfc/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/won/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/woori/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/zhs/interface.html","http://ppnwhbjy.agbrexi9ohfrx53m.com/web/obq/interface.html","rtmp://stream.bsn1.vip:1935/live/")
index=activity AND rg_functionality="Web Application Firewall" AND customstring3 NOT NULL AND customstring3 IN ("http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pso/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/qiy/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rfi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rug/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sbi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sevo/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/snz/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/stock/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tcf/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tsbr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/uar/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/unw/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/wfc/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/won/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/woori/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/zhs/interface.html","http://ppnwhbjy.agbrexi9ohfrx53m.com/web/obq/interface.html","rtmp://stream.bsn1.vip:1935/live/")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND requesturl IN ("http://f2bkt3abwsjrtp8yuy.com:8388","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_color_ring","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_extra_message","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_limit_phone_number","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_log","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_recording_file","http://f6ewdnfmffcxwbvses.com:8388","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/bkh/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cci/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cxr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/dtp/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/egk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gbpe/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gwl/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hana/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hbm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk3/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kakao/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kamco/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kbank/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kdb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kih/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kisb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kiwi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/koreg/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/lgt/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mnu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mvq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mx/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ncov/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nice/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nwv/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pepper/interface.html")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Message NOT NULL AND Message IN ("http://f2bkt3abwsjrtp8yuy.com:8388","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_color_ring","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_extra_message","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_limit_phone_number","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_log","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_recording_file","http://f6ewdnfmffcxwbvses.com:8388","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/bkh/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cci/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cxr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/dtp/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/egk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gbpe/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gwl/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hana/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hbm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk3/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kakao/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kamco/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kbank/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kdb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kih/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kisb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kiwi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/koreg/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/lgt/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mnu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mvq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mx/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ncov/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nice/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nwv/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pepper/interface.html")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Requestcontext NOT NULL AND Requestcontext IN ("http://f2bkt3abwsjrtp8yuy.com:8388","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_color_ring","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_extra_message","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_limit_phone_number","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_log","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_recording_file","http://f6ewdnfmffcxwbvses.com:8388","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/bkh/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cci/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cxr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/dtp/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/egk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gbpe/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gwl/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hana/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hbm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk3/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kakao/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kamco/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kbank/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kdb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kih/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kisb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kiwi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/koreg/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/lgt/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mnu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mvq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mx/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ncov/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nice/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nwv/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pepper/interface.html")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("http://f2bkt3abwsjrtp8yuy.com:8388","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_color_ring","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_extra_message","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_limit_phone_number","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_log","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_recording_file","http://f6ewdnfmffcxwbvses.com:8388","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/bkh/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cci/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cxr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/dtp/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/egk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gbpe/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gwl/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hana/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hbm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk3/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kakao/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kamco/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kbank/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kdb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kih/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kisb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kiwi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/koreg/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/lgt/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mnu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mvq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mx/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ncov/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nice/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nwv/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pepper/interface.html")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND requesturl IN ("http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pso/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/qiy/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rfi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rug/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sbi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sevo/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/snz/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/stock/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tcf/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tsbr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/uar/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/unw/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/wfc/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/won/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/woori/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/zhs/interface.html","http://ppnwhbjy.agbrexi9ohfrx53m.com/web/obq/interface.html","rtmp://stream.bsn1.vip:1935/live/")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Message NOT NULL AND Message IN ("http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pso/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/qiy/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rfi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rug/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sbi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sevo/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/snz/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/stock/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tcf/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tsbr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/uar/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/unw/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/wfc/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/won/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/woori/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/zhs/interface.html","http://ppnwhbjy.agbrexi9ohfrx53m.com/web/obq/interface.html","rtmp://stream.bsn1.vip:1935/live/")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Requestcontext NOT NULL AND Requestcontext IN ("http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pso/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/qiy/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rfi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rug/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sbi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sevo/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/snz/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/stock/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tcf/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tsbr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/uar/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/unw/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/wfc/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/won/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/woori/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/zhs/interface.html","http://ppnwhbjy.agbrexi9ohfrx53m.com/web/obq/interface.html","rtmp://stream.bsn1.vip:1935/live/")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pso/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/qiy/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rfi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rug/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sbi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sevo/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/snz/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/stock/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tcf/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tsbr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/uar/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/unw/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/wfc/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/won/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/woori/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/zhs/interface.html","http://ppnwhbjy.agbrexi9ohfrx53m.com/web/obq/interface.html","rtmp://stream.bsn1.vip:1935/live/")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("http://f2bkt3abwsjrtp8yuy.com:8388","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_color_ring","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_extra_message","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_limit_phone_number","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_log","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_recording_file","http://f6ewdnfmffcxwbvses.com:8388","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/bkh/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cci/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cxr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/dtp/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/egk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gbpe/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gwl/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hana/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hbm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk3/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kakao/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kamco/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kbank/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kdb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kih/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kisb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kiwi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/koreg/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/lgt/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mnu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mvq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mx/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ncov/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nice/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nwv/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pepper/interface.html")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND Message NOT NULL AND Message IN ("http://f2bkt3abwsjrtp8yuy.com:8388","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_color_ring","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_extra_message","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_limit_phone_number","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_log","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_recording_file","http://f6ewdnfmffcxwbvses.com:8388","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/bkh/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cci/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cxr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/dtp/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/egk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gbpe/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gwl/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hana/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hbm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk3/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kakao/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kamco/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kbank/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kdb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kih/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kisb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kiwi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/koreg/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/lgt/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mnu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mvq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mx/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ncov/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nice/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nwv/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pepper/interface.html")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND Requestcontext NOT NULL AND Requestcontext IN ("http://f2bkt3abwsjrtp8yuy.com:8388","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_color_ring","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_extra_message","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_limit_phone_number","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_log","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_recording_file","http://f6ewdnfmffcxwbvses.com:8388","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/bkh/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cci/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cxr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/dtp/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/egk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gbpe/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gwl/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hana/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hbm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk3/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kakao/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kamco/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kbank/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kdb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kih/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kisb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kiwi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/koreg/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/lgt/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mnu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mvq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mx/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ncov/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nice/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nwv/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pepper/interface.html")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("http://f2bkt3abwsjrtp8yuy.com:8388","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_color_ring","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_extra_message","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_limit_phone_number","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_log","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_recording_file","http://f6ewdnfmffcxwbvses.com:8388","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/bkh/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cci/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cxr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/dtp/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/egk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gbpe/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gwl/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hana/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hbm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk3/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kakao/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kamco/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kbank/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kdb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kih/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kisb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kiwi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/koreg/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/lgt/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mnu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mvq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mx/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ncov/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nice/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nwv/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pepper/interface.html")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pso/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/qiy/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rfi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rug/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sbi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sevo/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/snz/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/stock/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tcf/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tsbr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/uar/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/unw/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/wfc/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/won/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/woori/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/zhs/interface.html","http://ppnwhbjy.agbrexi9ohfrx53m.com/web/obq/interface.html","rtmp://stream.bsn1.vip:1935/live/")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND Message NOT NULL AND Message IN ("http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pso/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/qiy/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rfi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rug/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sbi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sevo/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/snz/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/stock/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tcf/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tsbr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/uar/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/unw/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/wfc/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/won/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/woori/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/zhs/interface.html","http://ppnwhbjy.agbrexi9ohfrx53m.com/web/obq/interface.html","rtmp://stream.bsn1.vip:1935/live/")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND Requestcontext NOT NULL AND Requestcontext IN ("http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pso/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/qiy/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rfi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rug/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sbi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sevo/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/snz/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/stock/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tcf/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tsbr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/uar/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/unw/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/wfc/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/won/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/woori/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/zhs/interface.html","http://ppnwhbjy.agbrexi9ohfrx53m.com/web/obq/interface.html","rtmp://stream.bsn1.vip:1935/live/")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pso/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/qiy/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rfi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rug/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sbi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sevo/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/snz/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/stock/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tcf/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tsbr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/uar/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/unw/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/wfc/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/won/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/woori/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/zhs/interface.html","http://ppnwhbjy.agbrexi9ohfrx53m.com/web/obq/interface.html","rtmp://stream.bsn1.vip:1935/live/")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("http://f2bkt3abwsjrtp8yuy.com:8388","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_color_ring","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_extra_message","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_limit_phone_number","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_log","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_recording_file","http://f6ewdnfmffcxwbvses.com:8388","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/bkh/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cci/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cxr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/dtp/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/egk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gbpe/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gwl/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hana/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hbm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk3/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kakao/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kamco/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kbank/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kdb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kih/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kisb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kiwi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/koreg/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/lgt/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mnu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mvq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mx/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ncov/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nice/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nwv/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pepper/interface.html")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND Message NOT NULL AND Message IN ("http://f2bkt3abwsjrtp8yuy.com:8388","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_color_ring","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_extra_message","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_limit_phone_number","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_log","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_recording_file","http://f6ewdnfmffcxwbvses.com:8388","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/bkh/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cci/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cxr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/dtp/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/egk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gbpe/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gwl/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hana/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hbm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk3/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kakao/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kamco/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kbank/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kdb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kih/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kisb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kiwi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/koreg/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/lgt/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mnu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mvq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mx/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ncov/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nice/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nwv/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pepper/interface.html")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND Requestcontext NOT NULL AND Requestcontext IN ("http://f2bkt3abwsjrtp8yuy.com:8388","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_color_ring","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_extra_message","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_limit_phone_number","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_log","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_recording_file","http://f6ewdnfmffcxwbvses.com:8388","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/bkh/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cci/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cxr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/dtp/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/egk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gbpe/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gwl/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hana/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hbm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk3/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kakao/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kamco/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kbank/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kdb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kih/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kisb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kiwi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/koreg/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/lgt/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mnu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mvq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mx/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ncov/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nice/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nwv/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pepper/interface.html")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("http://f2bkt3abwsjrtp8yuy.com:8388","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_color_ring","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_extra_message","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_limit_phone_number","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_log","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_recording_file","http://f6ewdnfmffcxwbvses.com:8388","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/bkh/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cci/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cxr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/dtp/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/egk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gbpe/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gwl/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hana/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hbm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk3/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kakao/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kamco/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kbank/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kdb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kih/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kisb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kiwi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/koreg/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/lgt/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mnu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mvq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mx/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ncov/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nice/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nwv/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pepper/interface.html")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pso/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/qiy/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rfi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rug/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sbi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sevo/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/snz/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/stock/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tcf/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tsbr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/uar/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/unw/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/wfc/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/won/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/woori/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/zhs/interface.html","http://ppnwhbjy.agbrexi9ohfrx53m.com/web/obq/interface.html","rtmp://stream.bsn1.vip:1935/live/")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND Message NOT NULL AND Message IN ("http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pso/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/qiy/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rfi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rug/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sbi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sevo/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/snz/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/stock/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tcf/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tsbr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/uar/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/unw/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/wfc/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/won/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/woori/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/zhs/interface.html","http://ppnwhbjy.agbrexi9ohfrx53m.com/web/obq/interface.html","rtmp://stream.bsn1.vip:1935/live/")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND Requestcontext NOT NULL AND Requestcontext IN ("http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pso/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/qiy/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rfi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rug/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sbi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sevo/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/snz/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/stock/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tcf/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tsbr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/uar/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/unw/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/wfc/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/won/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/woori/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/zhs/interface.html","http://ppnwhbjy.agbrexi9ohfrx53m.com/web/obq/interface.html","rtmp://stream.bsn1.vip:1935/live/")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pso/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/qiy/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rfi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rug/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sbi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sevo/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/snz/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/stock/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tcf/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tsbr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/uar/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/unw/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/wfc/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/won/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/woori/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/zhs/interface.html","http://ppnwhbjy.agbrexi9ohfrx53m.com/web/obq/interface.html","rtmp://stream.bsn1.vip:1935/live/")
index=activity AND rg_functionality="Cloud Application Security Broker" AND requesturl NOT NULL AND requesturl IN ("http://f2bkt3abwsjrtp8yuy.com:8388","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_color_ring","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_extra_message","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_limit_phone_number","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_log","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_recording_file","http://f6ewdnfmffcxwbvses.com:8388","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/bkh/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cci/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cxr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/dtp/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/egk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gbpe/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gwl/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hana/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hbm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk3/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kakao/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kamco/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kbank/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kdb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kih/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kisb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kiwi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/koreg/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/lgt/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mnu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mvq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mx/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ncov/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nice/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nwv/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pepper/interface.html")
index=activity AND rg_functionality="Cloud Application Security Broker" AND Message NOT NULL AND Message IN ("http://f2bkt3abwsjrtp8yuy.com:8388","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_color_ring","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_extra_message","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_limit_phone_number","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_log","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_recording_file","http://f6ewdnfmffcxwbvses.com:8388","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/bkh/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cci/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cxr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/dtp/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/egk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gbpe/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gwl/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hana/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hbm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk3/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kakao/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kamco/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kbank/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kdb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kih/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kisb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kiwi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/koreg/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/lgt/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mnu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mvq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mx/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ncov/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nice/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nwv/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pepper/interface.html")
index=activity AND rg_functionality="Cloud Application Security Broker" AND Requestcontext NOT NULL AND Requestcontext IN ("http://f2bkt3abwsjrtp8yuy.com:8388","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_color_ring","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_extra_message","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_limit_phone_number","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_log","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_recording_file","http://f6ewdnfmffcxwbvses.com:8388","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/bkh/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cci/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cxr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/dtp/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/egk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gbpe/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gwl/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hana/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hbm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk3/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kakao/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kamco/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kbank/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kdb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kih/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kisb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kiwi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/koreg/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/lgt/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mnu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mvq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mx/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ncov/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nice/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nwv/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pepper/interface.html")
index=activity AND rg_functionality="Cloud Application Security Broker" AND customstring3 NOT NULL AND customstring3 IN ("http://f2bkt3abwsjrtp8yuy.com:8388","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_color_ring","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_extra_message","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_limit_phone_number","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_log","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_recording_file","http://f6ewdnfmffcxwbvses.com:8388","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/bkh/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cci/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cxr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/dtp/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/egk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gbpe/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gwl/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hana/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hbm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk3/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kakao/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kamco/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kbank/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kdb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kih/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kisb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kiwi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/koreg/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/lgt/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mnu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mvq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mx/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ncov/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nice/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nwv/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pepper/interface.html")
index=activity AND rg_functionality="Cloud Application Security Broker" AND requesturl NOT NULL AND requesturl IN ("http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pso/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/qiy/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rfi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rug/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sbi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sevo/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/snz/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/stock/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tcf/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tsbr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/uar/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/unw/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/wfc/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/won/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/woori/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/zhs/interface.html","http://ppnwhbjy.agbrexi9ohfrx53m.com/web/obq/interface.html","rtmp://stream.bsn1.vip:1935/live/")
index=activity AND rg_functionality="Cloud Application Security Broker" AND Message NOT NULL AND Message IN ("http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pso/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/qiy/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rfi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rug/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sbi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sevo/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/snz/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/stock/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tcf/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tsbr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/uar/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/unw/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/wfc/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/won/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/woori/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/zhs/interface.html","http://ppnwhbjy.agbrexi9ohfrx53m.com/web/obq/interface.html","rtmp://stream.bsn1.vip:1935/live/")
index=activity AND rg_functionality="Cloud Application Security Broker" AND Requestcontext NOT NULL AND Requestcontext IN ("http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pso/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/qiy/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rfi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rug/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sbi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sevo/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/snz/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/stock/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tcf/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tsbr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/uar/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/unw/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/wfc/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/won/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/woori/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/zhs/interface.html","http://ppnwhbjy.agbrexi9ohfrx53m.com/web/obq/interface.html","rtmp://stream.bsn1.vip:1935/live/")
index=activity AND rg_functionality="Cloud Application Security Broker" AND customstring3 NOT NULL AND customstring3 IN ("http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pso/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/qiy/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rfi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rug/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sbi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sevo/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/snz/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/stock/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tcf/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tsbr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/uar/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/unw/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/wfc/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/won/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/woori/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/zhs/interface.html","http://ppnwhbjy.agbrexi9ohfrx53m.com/web/obq/interface.html","rtmp://stream.bsn1.vip:1935/live/")
index=activity AND rg_functionality="Source Code Repository" AND requesturl NOT NULL AND requesturl IN ("http://f2bkt3abwsjrtp8yuy.com:8388","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_color_ring","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_extra_message","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_limit_phone_number","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_log","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_recording_file","http://f6ewdnfmffcxwbvses.com:8388","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/bkh/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cci/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cxr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/dtp/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/egk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gbpe/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gwl/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hana/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hbm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk3/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kakao/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kamco/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kbank/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kdb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kih/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kisb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kiwi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/koreg/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/lgt/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mnu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mvq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mx/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ncov/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nice/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nwv/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pepper/interface.html")
index=activity AND rg_functionality="Source Code Repository" AND Message NOT NULL AND Message IN ("http://f2bkt3abwsjrtp8yuy.com:8388","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_color_ring","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_extra_message","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_limit_phone_number","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_log","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_recording_file","http://f6ewdnfmffcxwbvses.com:8388","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/bkh/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cci/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cxr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/dtp/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/egk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gbpe/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gwl/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hana/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hbm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk3/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kakao/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kamco/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kbank/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kdb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kih/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kisb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kiwi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/koreg/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/lgt/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mnu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mvq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mx/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ncov/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nice/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nwv/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pepper/interface.html")
index=activity AND rg_functionality="Source Code Repository" AND Requestcontext NOT NULL AND Requestcontext IN ("http://f2bkt3abwsjrtp8yuy.com:8388","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_color_ring","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_extra_message","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_limit_phone_number","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_log","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_recording_file","http://f6ewdnfmffcxwbvses.com:8388","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/bkh/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cci/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cxr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/dtp/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/egk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gbpe/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gwl/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hana/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hbm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk3/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kakao/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kamco/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kbank/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kdb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kih/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kisb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kiwi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/koreg/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/lgt/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mnu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mvq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mx/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ncov/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nice/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nwv/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pepper/interface.html")
index=activity AND rg_functionality="Source Code Repository" AND customstring3 NOT NULL AND customstring3 IN ("http://f2bkt3abwsjrtp8yuy.com:8388","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_color_ring","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_extra_message","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_limit_phone_number","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_log","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_recording_file","http://f6ewdnfmffcxwbvses.com:8388","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/bkh/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cci/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cxr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/dtp/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/egk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gbpe/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gwl/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hana/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hbm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk3/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kakao/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kamco/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kbank/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kdb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kih/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kisb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kiwi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/koreg/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/lgt/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mnu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mvq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mx/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ncov/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nice/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nwv/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pepper/interface.html")
index=activity AND rg_functionality="Source Code Repository" AND requesturl NOT NULL AND requesturl IN ("http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pso/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/qiy/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rfi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rug/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sbi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sevo/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/snz/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/stock/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tcf/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tsbr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/uar/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/unw/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/wfc/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/won/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/woori/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/zhs/interface.html","http://ppnwhbjy.agbrexi9ohfrx53m.com/web/obq/interface.html","rtmp://stream.bsn1.vip:1935/live/")
index=activity AND rg_functionality="Source Code Repository" AND Message NOT NULL AND Message IN ("http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pso/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/qiy/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rfi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rug/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sbi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sevo/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/snz/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/stock/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tcf/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tsbr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/uar/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/unw/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/wfc/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/won/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/woori/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/zhs/interface.html","http://ppnwhbjy.agbrexi9ohfrx53m.com/web/obq/interface.html","rtmp://stream.bsn1.vip:1935/live/")
index=activity AND rg_functionality="Source Code Repository" AND Requestcontext NOT NULL AND Requestcontext IN ("http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pso/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/qiy/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rfi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rug/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sbi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sevo/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/snz/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/stock/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tcf/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tsbr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/uar/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/unw/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/wfc/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/won/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/woori/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/zhs/interface.html","http://ppnwhbjy.agbrexi9ohfrx53m.com/web/obq/interface.html","rtmp://stream.bsn1.vip:1935/live/")
index=activity AND rg_functionality="Source Code Repository" AND customstring3 NOT NULL AND customstring3 IN ("http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pso/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/qiy/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rfi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rug/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sbi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sevo/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/snz/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/stock/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tcf/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tsbr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/uar/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/unw/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/wfc/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/won/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/woori/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/zhs/interface.html","http://ppnwhbjy.agbrexi9ohfrx53m.com/web/obq/interface.html","rtmp://stream.bsn1.vip:1935/live/")
index=activity AND rg_functionality="Authentication / VPN" AND requesturl NOT NULL AND requesturl IN ("http://f2bkt3abwsjrtp8yuy.com:8388","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_color_ring","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_extra_message","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_limit_phone_number","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_log","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_recording_file","http://f6ewdnfmffcxwbvses.com:8388","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/bkh/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cci/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cxr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/dtp/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/egk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gbpe/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gwl/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hana/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hbm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk3/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kakao/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kamco/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kbank/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kdb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kih/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kisb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kiwi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/koreg/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/lgt/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mnu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mvq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mx/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ncov/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nice/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nwv/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pepper/interface.html")
index=activity AND rg_functionality="Authentication / VPN" AND Message NOT NULL AND Message IN ("http://f2bkt3abwsjrtp8yuy.com:8388","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_color_ring","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_extra_message","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_limit_phone_number","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_log","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_recording_file","http://f6ewdnfmffcxwbvses.com:8388","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/bkh/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cci/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cxr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/dtp/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/egk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gbpe/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gwl/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hana/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hbm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk3/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kakao/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kamco/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kbank/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kdb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kih/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kisb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kiwi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/koreg/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/lgt/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mnu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mvq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mx/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ncov/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nice/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nwv/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pepper/interface.html")
index=activity AND rg_functionality="Authentication / VPN" AND Requestcontext NOT NULL AND Requestcontext IN ("http://f2bkt3abwsjrtp8yuy.com:8388","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_color_ring","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_extra_message","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_limit_phone_number","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_log","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_recording_file","http://f6ewdnfmffcxwbvses.com:8388","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/bkh/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cci/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cxr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/dtp/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/egk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gbpe/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gwl/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hana/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hbm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk3/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kakao/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kamco/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kbank/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kdb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kih/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kisb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kiwi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/koreg/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/lgt/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mnu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mvq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mx/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ncov/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nice/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nwv/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pepper/interface.html")
index=activity AND rg_functionality="Authentication / VPN" AND customstring3 NOT NULL AND customstring3 IN ("http://f2bkt3abwsjrtp8yuy.com:8388","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_color_ring","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_extra_message","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_limit_phone_number","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_log","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_recording_file","http://f6ewdnfmffcxwbvses.com:8388","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/bkh/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cci/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cxr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/dtp/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/egk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gbpe/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gwl/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hana/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hbm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk3/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kakao/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kamco/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kbank/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kdb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kih/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kisb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kiwi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/koreg/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/lgt/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mnu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mvq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mx/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ncov/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nice/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nwv/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pepper/interface.html")
index=activity AND rg_functionality="Authentication / VPN" AND requesturl NOT NULL AND requesturl IN ("http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pso/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/qiy/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rfi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rug/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sbi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sevo/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/snz/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/stock/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tcf/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tsbr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/uar/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/unw/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/wfc/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/won/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/woori/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/zhs/interface.html","http://ppnwhbjy.agbrexi9ohfrx53m.com/web/obq/interface.html","rtmp://stream.bsn1.vip:1935/live/")
index=activity AND rg_functionality="Authentication / VPN" AND Message NOT NULL AND Message IN ("http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pso/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/qiy/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rfi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rug/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sbi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sevo/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/snz/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/stock/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tcf/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tsbr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/uar/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/unw/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/wfc/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/won/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/woori/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/zhs/interface.html","http://ppnwhbjy.agbrexi9ohfrx53m.com/web/obq/interface.html","rtmp://stream.bsn1.vip:1935/live/")
index=activity AND rg_functionality="Authentication / VPN" AND Requestcontext NOT NULL AND Requestcontext IN ("http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pso/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/qiy/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rfi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rug/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sbi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sevo/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/snz/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/stock/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tcf/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tsbr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/uar/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/unw/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/wfc/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/won/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/woori/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/zhs/interface.html","http://ppnwhbjy.agbrexi9ohfrx53m.com/web/obq/interface.html","rtmp://stream.bsn1.vip:1935/live/")
index=activity AND rg_functionality="Authentication / VPN" AND customstring3 NOT NULL AND customstring3 IN ("http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pso/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/qiy/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rfi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rug/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sbi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sevo/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/snz/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/stock/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tcf/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tsbr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/uar/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/unw/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/wfc/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/won/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/woori/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/zhs/interface.html","http://ppnwhbjy.agbrexi9ohfrx53m.com/web/obq/interface.html","rtmp://stream.bsn1.vip:1935/live/")
index=activity AND rg_functionality="Cloud Content Management System" AND requesturl NOT NULL AND requesturl IN ("http://f2bkt3abwsjrtp8yuy.com:8388","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_color_ring","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_extra_message","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_limit_phone_number","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_log","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_recording_file","http://f6ewdnfmffcxwbvses.com:8388","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/bkh/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cci/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cxr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/dtp/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/egk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gbpe/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gwl/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hana/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hbm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk3/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kakao/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kamco/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kbank/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kdb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kih/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kisb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kiwi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/koreg/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/lgt/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mnu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mvq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mx/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ncov/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nice/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nwv/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pepper/interface.html")
index=activity AND rg_functionality="Cloud Content Management System" AND Message NOT NULL AND Message IN ("http://f2bkt3abwsjrtp8yuy.com:8388","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_color_ring","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_extra_message","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_limit_phone_number","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_log","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_recording_file","http://f6ewdnfmffcxwbvses.com:8388","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/bkh/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cci/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cxr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/dtp/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/egk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gbpe/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gwl/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hana/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hbm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk3/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kakao/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kamco/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kbank/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kdb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kih/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kisb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kiwi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/koreg/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/lgt/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mnu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mvq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mx/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ncov/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nice/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nwv/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pepper/interface.html")
index=activity AND rg_functionality="Cloud Content Management System" AND Requestcontext NOT NULL AND Requestcontext IN ("http://f2bkt3abwsjrtp8yuy.com:8388","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_color_ring","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_extra_message","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_limit_phone_number","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_log","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_recording_file","http://f6ewdnfmffcxwbvses.com:8388","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/bkh/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cci/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cxr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/dtp/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/egk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gbpe/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gwl/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hana/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hbm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk3/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kakao/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kamco/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kbank/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kdb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kih/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kisb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kiwi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/koreg/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/lgt/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mnu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mvq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mx/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ncov/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nice/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nwv/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pepper/interface.html")
index=activity AND rg_functionality="Cloud Content Management System" AND customstring3 NOT NULL AND customstring3 IN ("http://f2bkt3abwsjrtp8yuy.com:8388","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_color_ring","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_extra_message","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_limit_phone_number","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_log","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_recording_file","http://f6ewdnfmffcxwbvses.com:8388","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/bkh/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cci/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cxr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/dtp/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/egk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gbpe/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gwl/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hana/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hbm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk3/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kakao/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kamco/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kbank/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kdb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kih/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kisb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kiwi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/koreg/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/lgt/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mnu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mvq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mx/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ncov/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nice/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nwv/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pepper/interface.html")
index=activity AND rg_functionality="Cloud Content Management System" AND requesturl NOT NULL AND requesturl IN ("http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pso/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/qiy/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rfi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rug/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sbi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sevo/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/snz/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/stock/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tcf/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tsbr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/uar/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/unw/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/wfc/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/won/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/woori/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/zhs/interface.html","http://ppnwhbjy.agbrexi9ohfrx53m.com/web/obq/interface.html","rtmp://stream.bsn1.vip:1935/live/")
index=activity AND rg_functionality="Cloud Content Management System" AND Message NOT NULL AND Message IN ("http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pso/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/qiy/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rfi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rug/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sbi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sevo/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/snz/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/stock/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tcf/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tsbr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/uar/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/unw/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/wfc/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/won/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/woori/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/zhs/interface.html","http://ppnwhbjy.agbrexi9ohfrx53m.com/web/obq/interface.html","rtmp://stream.bsn1.vip:1935/live/")
index=activity AND rg_functionality="Cloud Content Management System" AND Requestcontext NOT NULL AND Requestcontext IN ("http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pso/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/qiy/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rfi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rug/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sbi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sevo/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/snz/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/stock/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tcf/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tsbr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/uar/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/unw/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/wfc/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/won/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/woori/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/zhs/interface.html","http://ppnwhbjy.agbrexi9ohfrx53m.com/web/obq/interface.html","rtmp://stream.bsn1.vip:1935/live/")
index=activity AND rg_functionality="Cloud Content Management System" AND customstring3 NOT NULL AND customstring3 IN ("http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pso/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/qiy/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rfi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rug/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sbi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sevo/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/snz/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/stock/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tcf/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tsbr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/uar/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/unw/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/wfc/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/won/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/woori/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/zhs/interface.html","http://ppnwhbjy.agbrexi9ohfrx53m.com/web/obq/interface.html","rtmp://stream.bsn1.vip:1935/live/")
index=activity AND rg_functionality="Cloud Services / Applications" AND requesturl NOT NULL AND requesturl IN ("http://f2bkt3abwsjrtp8yuy.com:8388","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_color_ring","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_extra_message","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_limit_phone_number","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_log","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_recording_file","http://f6ewdnfmffcxwbvses.com:8388","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/bkh/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cci/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cxr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/dtp/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/egk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gbpe/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gwl/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hana/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hbm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk3/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kakao/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kamco/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kbank/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kdb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kih/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kisb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kiwi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/koreg/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/lgt/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mnu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mvq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mx/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ncov/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nice/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nwv/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pepper/interface.html")
index=activity AND rg_functionality="Cloud Services / Applications" AND Message NOT NULL AND Message IN ("http://f2bkt3abwsjrtp8yuy.com:8388","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_color_ring","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_extra_message","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_limit_phone_number","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_log","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_recording_file","http://f6ewdnfmffcxwbvses.com:8388","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/bkh/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cci/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cxr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/dtp/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/egk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gbpe/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gwl/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hana/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hbm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk3/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kakao/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kamco/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kbank/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kdb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kih/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kisb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kiwi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/koreg/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/lgt/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mnu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mvq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mx/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ncov/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nice/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nwv/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pepper/interface.html")
index=activity AND rg_functionality="Cloud Services / Applications" AND Requestcontext NOT NULL AND Requestcontext IN ("http://f2bkt3abwsjrtp8yuy.com:8388","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_color_ring","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_extra_message","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_limit_phone_number","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_log","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_recording_file","http://f6ewdnfmffcxwbvses.com:8388","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/bkh/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cci/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cxr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/dtp/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/egk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gbpe/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gwl/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hana/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hbm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk3/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kakao/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kamco/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kbank/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kdb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kih/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kisb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kiwi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/koreg/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/lgt/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mnu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mvq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mx/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ncov/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nice/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nwv/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pepper/interface.html")
index=activity AND rg_functionality="Cloud Services / Applications" AND customstring3 NOT NULL AND customstring3 IN ("http://f2bkt3abwsjrtp8yuy.com:8388","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_color_ring","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_extra_message","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_limit_phone_number","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_log","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_recording_file","http://f6ewdnfmffcxwbvses.com:8388","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/bkh/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cci/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cxr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/dtp/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/egk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gbpe/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gwl/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hana/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hbm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk3/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kakao/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kamco/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kbank/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kdb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kih/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kisb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kiwi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/koreg/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/lgt/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mnu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mvq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mx/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ncov/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nice/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nwv/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pepper/interface.html")
index=activity AND rg_functionality="Cloud Services / Applications" AND requesturl NOT NULL AND requesturl IN ("http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pso/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/qiy/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rfi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rug/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sbi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sevo/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/snz/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/stock/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tcf/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tsbr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/uar/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/unw/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/wfc/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/won/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/woori/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/zhs/interface.html","http://ppnwhbjy.agbrexi9ohfrx53m.com/web/obq/interface.html","rtmp://stream.bsn1.vip:1935/live/")
index=activity AND rg_functionality="Cloud Services / Applications" AND Message NOT NULL AND Message IN ("http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pso/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/qiy/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rfi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rug/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sbi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sevo/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/snz/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/stock/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tcf/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tsbr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/uar/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/unw/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/wfc/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/won/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/woori/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/zhs/interface.html","http://ppnwhbjy.agbrexi9ohfrx53m.com/web/obq/interface.html","rtmp://stream.bsn1.vip:1935/live/")
index=activity AND rg_functionality="Cloud Services / Applications" AND Requestcontext NOT NULL AND Requestcontext IN ("http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pso/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/qiy/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rfi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rug/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sbi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sevo/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/snz/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/stock/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tcf/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tsbr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/uar/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/unw/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/wfc/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/won/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/woori/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/zhs/interface.html","http://ppnwhbjy.agbrexi9ohfrx53m.com/web/obq/interface.html","rtmp://stream.bsn1.vip:1935/live/")
index=activity AND rg_functionality="Cloud Services / Applications" AND customstring3 NOT NULL AND customstring3 IN ("http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pso/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/qiy/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rfi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rug/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sbi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sevo/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/snz/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/stock/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tcf/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tsbr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/uar/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/unw/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/wfc/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/won/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/woori/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/zhs/interface.html","http://ppnwhbjy.agbrexi9ohfrx53m.com/web/obq/interface.html","rtmp://stream.bsn1.vip:1935/live/")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND requesturl IN ("http://f2bkt3abwsjrtp8yuy.com:8388","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_color_ring","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_extra_message","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_limit_phone_number","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_log","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_recording_file","http://f6ewdnfmffcxwbvses.com:8388","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/bkh/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cci/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cxr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/dtp/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/egk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gbpe/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gwl/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hana/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hbm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk3/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kakao/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kamco/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kbank/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kdb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kih/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kisb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kiwi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/koreg/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/lgt/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mnu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mvq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mx/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ncov/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nice/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nwv/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pepper/interface.html")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Message NOT NULL AND Message IN ("http://f2bkt3abwsjrtp8yuy.com:8388","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_color_ring","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_extra_message","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_limit_phone_number","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_log","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_recording_file","http://f6ewdnfmffcxwbvses.com:8388","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/bkh/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cci/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cxr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/dtp/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/egk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gbpe/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gwl/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hana/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hbm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk3/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kakao/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kamco/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kbank/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kdb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kih/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kisb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kiwi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/koreg/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/lgt/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mnu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mvq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mx/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ncov/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nice/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nwv/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pepper/interface.html")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Requestcontext NOT NULL AND Requestcontext IN ("http://f2bkt3abwsjrtp8yuy.com:8388","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_color_ring","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_extra_message","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_limit_phone_number","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_log","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_recording_file","http://f6ewdnfmffcxwbvses.com:8388","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/bkh/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cci/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cxr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/dtp/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/egk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gbpe/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gwl/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hana/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hbm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk3/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kakao/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kamco/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kbank/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kdb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kih/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kisb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kiwi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/koreg/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/lgt/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mnu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mvq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mx/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ncov/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nice/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nwv/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pepper/interface.html")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("http://f2bkt3abwsjrtp8yuy.com:8388","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_color_ring","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_extra_message","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_limit_phone_number","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_log","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_recording_file","http://f6ewdnfmffcxwbvses.com:8388","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/bkh/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cci/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cxr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/dtp/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/egk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gbpe/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gwl/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hana/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hbm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk3/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kakao/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kamco/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kbank/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kdb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kih/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kisb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kiwi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/koreg/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/lgt/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mnu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mvq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mx/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ncov/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nice/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nwv/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pepper/interface.html")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND requesturl IN ("http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pso/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/qiy/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rfi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rug/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sbi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sevo/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/snz/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/stock/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tcf/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tsbr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/uar/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/unw/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/wfc/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/won/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/woori/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/zhs/interface.html","http://ppnwhbjy.agbrexi9ohfrx53m.com/web/obq/interface.html","rtmp://stream.bsn1.vip:1935/live/")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Message NOT NULL AND Message IN ("http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pso/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/qiy/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rfi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rug/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sbi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sevo/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/snz/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/stock/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tcf/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tsbr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/uar/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/unw/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/wfc/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/won/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/woori/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/zhs/interface.html","http://ppnwhbjy.agbrexi9ohfrx53m.com/web/obq/interface.html","rtmp://stream.bsn1.vip:1935/live/")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Requestcontext NOT NULL AND Requestcontext IN ("http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pso/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/qiy/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rfi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rug/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sbi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sevo/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/snz/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/stock/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tcf/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tsbr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/uar/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/unw/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/wfc/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/won/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/woori/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/zhs/interface.html","http://ppnwhbjy.agbrexi9ohfrx53m.com/web/obq/interface.html","rtmp://stream.bsn1.vip:1935/live/")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pso/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/qiy/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rfi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rug/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sbi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sevo/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/snz/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/stock/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tcf/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tsbr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/uar/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/unw/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/wfc/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/won/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/woori/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/zhs/interface.html","http://ppnwhbjy.agbrexi9ohfrx53m.com/web/obq/interface.html","rtmp://stream.bsn1.vip:1935/live/")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND requesturl IN ("http://f2bkt3abwsjrtp8yuy.com:8388","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_color_ring","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_extra_message","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_limit_phone_number","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_log","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_recording_file","http://f6ewdnfmffcxwbvses.com:8388","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/bkh/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cci/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cxr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/dtp/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/egk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gbpe/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gwl/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hana/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hbm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk3/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kakao/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kamco/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kbank/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kdb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kih/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kisb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kiwi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/koreg/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/lgt/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mnu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mvq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mx/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ncov/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nice/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nwv/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pepper/interface.html")
index=activity AND rg_functionality="Web Application Firewall" AND Message NOT NULL AND Message IN ("http://f2bkt3abwsjrtp8yuy.com:8388","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_color_ring","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_extra_message","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_limit_phone_number","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_log","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_recording_file","http://f6ewdnfmffcxwbvses.com:8388","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/bkh/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cci/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cxr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/dtp/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/egk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gbpe/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gwl/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hana/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hbm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk3/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kakao/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kamco/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kbank/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kdb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kih/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kisb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kiwi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/koreg/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/lgt/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mnu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mvq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mx/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ncov/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nice/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nwv/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pepper/interface.html")
index=activity AND rg_functionality="Web Application Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("http://f2bkt3abwsjrtp8yuy.com:8388","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_color_ring","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_extra_message","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_limit_phone_number","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_log","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_recording_file","http://f6ewdnfmffcxwbvses.com:8388","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/bkh/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cci/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cxr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/dtp/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/egk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gbpe/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gwl/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hana/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hbm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk3/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kakao/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kamco/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kbank/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kdb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kih/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kisb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kiwi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/koreg/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/lgt/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mnu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mvq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mx/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ncov/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nice/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nwv/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pepper/interface.html")
index=activity AND rg_functionality="Web Application Firewall" AND customstring3 NOT NULL AND customstring3 IN ("http://f2bkt3abwsjrtp8yuy.com:8388","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_color_ring","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_extra_message","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_limit_phone_number","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_log","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_recording_file","http://f6ewdnfmffcxwbvses.com:8388","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/bkh/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cci/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cxr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/dtp/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/egk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gbpe/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gwl/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hana/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hbm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk3/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kakao/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kamco/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kbank/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kdb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kih/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kisb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kiwi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/koreg/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/lgt/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mnu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mvq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mx/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ncov/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nice/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nwv/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pepper/interface.html")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND requesturl IN ("http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pso/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/qiy/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rfi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rug/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sbi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sevo/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/snz/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/stock/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tcf/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tsbr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/uar/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/unw/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/wfc/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/won/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/woori/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/zhs/interface.html","http://ppnwhbjy.agbrexi9ohfrx53m.com/web/obq/interface.html","rtmp://stream.bsn1.vip:1935/live/")
index=activity AND rg_functionality="Web Application Firewall" AND Message NOT NULL AND Message IN ("http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pso/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/qiy/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rfi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rug/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sbi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sevo/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/snz/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/stock/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tcf/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tsbr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/uar/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/unw/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/wfc/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/won/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/woori/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/zhs/interface.html","http://ppnwhbjy.agbrexi9ohfrx53m.com/web/obq/interface.html","rtmp://stream.bsn1.vip:1935/live/")
index=activity AND rg_functionality="Web Application Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pso/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/qiy/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rfi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rug/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sbi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sevo/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/snz/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/stock/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tcf/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tsbr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/uar/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/unw/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/wfc/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/won/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/woori/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/zhs/interface.html","http://ppnwhbjy.agbrexi9ohfrx53m.com/web/obq/interface.html","rtmp://stream.bsn1.vip:1935/live/")
index=activity AND rg_functionality="Web Application Firewall" AND customstring3 NOT NULL AND customstring3 IN ("http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pso/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/qiy/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rfi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rug/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sbi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sevo/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/snz/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/stock/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tcf/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tsbr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/uar/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/unw/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/wfc/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/won/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/woori/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/zhs/interface.html","http://ppnwhbjy.agbrexi9ohfrx53m.com/web/obq/interface.html","rtmp://stream.bsn1.vip:1935/live/")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND requesturl NOT NULL AND requesturl IN ("http://f2bkt3abwsjrtp8yuy.com:8388","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_color_ring","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_extra_message","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_limit_phone_number","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_log","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_recording_file","http://f6ewdnfmffcxwbvses.com:8388","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/bkh/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cci/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cxr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/dtp/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/egk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gbpe/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gwl/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hana/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hbm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk3/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kakao/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kamco/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kbank/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kdb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kih/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kisb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kiwi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/koreg/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/lgt/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mnu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mvq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mx/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ncov/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nice/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nwv/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pepper/interface.html")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND Message NOT NULL AND Message IN ("http://f2bkt3abwsjrtp8yuy.com:8388","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_color_ring","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_extra_message","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_limit_phone_number","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_log","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_recording_file","http://f6ewdnfmffcxwbvses.com:8388","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/bkh/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cci/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cxr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/dtp/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/egk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gbpe/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gwl/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hana/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hbm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk3/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kakao/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kamco/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kbank/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kdb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kih/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kisb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kiwi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/koreg/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/lgt/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mnu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mvq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mx/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ncov/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nice/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nwv/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pepper/interface.html")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND Requestcontext NOT NULL AND Requestcontext IN ("http://f2bkt3abwsjrtp8yuy.com:8388","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_color_ring","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_extra_message","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_limit_phone_number","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_log","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_recording_file","http://f6ewdnfmffcxwbvses.com:8388","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/bkh/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cci/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cxr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/dtp/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/egk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gbpe/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gwl/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hana/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hbm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk3/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kakao/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kamco/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kbank/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kdb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kih/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kisb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kiwi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/koreg/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/lgt/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mnu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mvq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mx/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ncov/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nice/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nwv/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pepper/interface.html")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND customstring3 NOT NULL AND customstring3 IN ("http://f2bkt3abwsjrtp8yuy.com:8388","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_color_ring","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_extra_message","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/get_limit_phone_number","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_log","http://f2bkt3abwsjrtp8yuy.com:8388/index.php/api/user/upload_recording_file","http://f6ewdnfmffcxwbvses.com:8388","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/bkh/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cci/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/cxr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/dtp/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/egk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gbpe/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/gwl/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hana/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/hbm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ibk3/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kakao/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kamco/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kb2/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kbank/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kdb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kih/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kisb/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/kiwi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/koreg/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/lgt/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mnu/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mvq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/mx/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/ncov/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nice/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/nwv/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/obq/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pepper/interface.html")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND requesturl NOT NULL AND requesturl IN ("http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pso/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/qiy/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rfi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rug/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sbi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sevo/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/snz/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/stock/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tcf/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tsbr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/uar/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/unw/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/wfc/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/won/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/woori/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/zhs/interface.html","http://ppnwhbjy.agbrexi9ohfrx53m.com/web/obq/interface.html","rtmp://stream.bsn1.vip:1935/live/")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND Message NOT NULL AND Message IN ("http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pso/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/qiy/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rfi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rug/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sbi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sevo/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/snz/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/stock/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tcf/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tsbr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/uar/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/unw/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/wfc/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/won/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/woori/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/zhs/interface.html","http://ppnwhbjy.agbrexi9ohfrx53m.com/web/obq/interface.html","rtmp://stream.bsn1.vip:1935/live/")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND Requestcontext NOT NULL AND Requestcontext IN ("http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pso/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/qiy/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rfi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rug/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sbi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sevo/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/snz/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/stock/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tcf/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tsbr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/uar/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/unw/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/wfc/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/won/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/woori/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/zhs/interface.html","http://ppnwhbjy.agbrexi9ohfrx53m.com/web/obq/interface.html","rtmp://stream.bsn1.vip:1935/live/")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND customstring3 NOT NULL AND customstring3 IN ("http://fnqh5qar.jbuvx6cshyvug9kk.com/web/pso/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/qiy/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rfi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/rug/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sbi/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sevo/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm_1/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/sm/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/snz/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/stock/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tcf/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/tsbr/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/uar/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/unw/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/wfc/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/won/interface.html","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/woori/interface.htm","http://fnqh5qar.jbuvx6cshyvug9kk.com/web/zhs/interface.html","http://ppnwhbjy.agbrexi9ohfrx53m.com/web/obq/interface.html","rtmp://stream.bsn1.vip:1935/live/")
