A day of DNS queries from one office network. Nothing here is flagged, nothing is known-bad, and searching for something suspicious will not find it.
538 lines is more than anyone reads, and reading them is not the technique anyway. Count a field. Sort so the rare values come first. Then ask why the thing at the bottom is there.
The tool below will count whichever column you point it at. Choosing the column is the exercise; there are four, and only one of them has its rarity in the right place.
Submit what you find as the flag: skrd{...}.
Every name ends in .example, which is reserved and cannot be registered. Nothing here refers to a real domain or a real organisation.
03:17:42 ws-031 A k7d2m-sync.example
09:00:08 ws-045 A portal.corp.example
09:00:12 ws-011 A portal.corp.example
09:00:23 ws-020 A time.pool.example
09:01:37 ws-021 A telemetry.vendor.example
09:02:28 ws-046 A cdn.assets.example
09:03:32 ws-033 A time.pool.example
09:05:11 ws-040 A portal.corp.example
09:05:26 ws-042 A telemetry.vendor.example
09:07:26 ws-045 A telemetry.vendor.example
09:10:13 ws-010 A updates.vendor.example
09:10:21 ws-020 A telemetry.vendor.example
09:12:31 ws-013 A mail.corp.example
09:13:46 ws-048 A mail.corp.example
09:17:35 ws-038 A cdn.assets.example
09:18:03 ws-029 A telemetry.vendor.example
09:20:49 ws-045 A portal.corp.example
09:21:18 ws-037 A mail.corp.example
09:21:22 ws-044 A mail.corp.example
09:22:00 ws-039 A time.pool.example
09:23:33 ws-029 A telemetry.vendor.example
09:24:11 ws-032 A time.pool.example
09:24:17 ws-038 A time.pool.example
09:28:08 ws-012 A mail.corp.example
09:28:27 ws-019 A time.pool.example
09:28:36 ws-029 A telemetry.vendor.example
09:30:29 ws-021 A telemetry.vendor.example
09:30:57 ws-047 A mail.corp.example
09:33:12 ws-012 A cdn.assets.example
09:34:01 ws-013 A telemetry.vendor.example
09:34:52 ws-034 A updates.vendor.example
09:34:56 ws-030 A time.pool.example
09:35:29 ws-012 A cdn.assets.example
09:37:59 ws-022 A cdn.assets.example
09:38:33 ws-019 A updates.vendor.example
09:39:09 ws-030 A time.pool.example
09:40:40 ws-022 A time.pool.example
09:41:26 ws-026 A cdn.assets.example
09:41:54 ws-013 A telemetry.vendor.example
09:43:07 ws-048 A cdn.assets.example
09:44:06 ws-040 A cdn.assets.example
09:46:46 ws-039 A updates.vendor.example
09:47:29 ws-038 A portal.corp.example
09:48:50 ws-033 A time.pool.example
09:49:30 ws-038 A updates.vendor.example
09:49:34 ws-020 A updates.vendor.example
09:51:13 ws-039 A time.pool.example
09:51:42 ws-019 A mail.corp.example
09:52:40 ws-020 A cdn.assets.example
09:52:41 ws-048 A telemetry.vendor.example
09:52:47 ws-041 A telemetry.vendor.example
09:53:24 ws-029 A mail.corp.example
09:53:45 ws-017 A portal.corp.example
09:55:21 ws-044 A mail.corp.example
09:55:59 ws-031 A time.pool.example
09:56:29 ws-037 A mail.corp.example
09:56:31 ws-030 A cdn.assets.example
09:58:03 ws-020 A telemetry.vendor.example
10:00:38 ws-023 A cdn.assets.example
10:01:30 ws-046 A updates.vendor.example
10:02:00 ws-045 A mail.corp.example
10:03:21 ws-032 A telemetry.vendor.example
10:03:32 ws-026 A portal.corp.example
10:04:03 ws-011 A updates.vendor.example
10:06:08 ws-035 A telemetry.vendor.example
10:07:13 ws-028 A cdn.assets.example
10:07:22 ws-038 A portal.corp.example
10:10:45 ws-012 A cdn.assets.example
10:11:11 ws-022 A mail.corp.example
10:12:02 ws-042 A cdn.assets.example
10:15:47 ws-021 A portal.corp.example
10:18:34 ws-022 A portal.corp.example
10:19:34 ws-046 A updates.vendor.example
10:19:51 ws-014 A portal.corp.example
10:27:10 ws-045 A portal.corp.example
10:28:05 ws-043 A mail.corp.example
10:29:03 ws-025 A time.pool.example
10:29:44 ws-023 A updates.vendor.example
10:30:03 ws-041 A telemetry.vendor.example
10:30:14 ws-035 A portal.corp.example
10:30:43 ws-031 A time.pool.example
10:32:25 ws-018 A updates.vendor.example
10:32:48 ws-032 A telemetry.vendor.example
10:34:13 ws-013 A mail.corp.example
10:34:50 ws-035 A cdn.assets.example
10:34:51 ws-048 A mail.corp.example
10:36:56 ws-020 A portal.corp.example
10:38:15 ws-036 A portal.corp.example
10:38:45 ws-019 A time.pool.example
10:38:51 ws-017 A portal.corp.example
10:41:06 ws-036 A telemetry.vendor.example
10:43:44 ws-033 A updates.vendor.example
10:43:57 ws-027 A telemetry.vendor.example
10:45:35 ws-015 A cdn.assets.example
10:45:58 ws-013 A mail.corp.example
10:50:13 ws-010 A time.pool.example
10:50:31 ws-042 A time.pool.example
10:50:34 ws-027 A updates.vendor.example
10:50:56 ws-033 A updates.vendor.example
10:51:04 ws-021 A portal.corp.example
10:53:23 ws-020 A telemetry.vendor.example
10:53:49 ws-037 A cdn.assets.example
10:53:54 ws-030 A mail.corp.example
10:56:00 ws-016 A telemetry.vendor.example
10:57:03 ws-041 A time.pool.example
10:57:38 ws-039 A telemetry.vendor.example
10:58:40 ws-043 A portal.corp.example
10:59:48 ws-019 A telemetry.vendor.example
11:00:26 ws-042 A telemetry.vendor.example
11:01:54 ws-025 A portal.corp.example
11:02:01 ws-038 A time.pool.example
11:03:22 ws-014 A updates.vendor.example
11:04:20 ws-013 A telemetry.vendor.example
11:07:26 ws-043 A time.pool.example
11:07:52 ws-036 A portal.corp.example
11:11:10 ws-032 A time.pool.example
11:12:29 ws-020 A cdn.assets.example
11:12:33 ws-015 A cdn.assets.example
11:13:06 ws-030 A telemetry.vendor.example
11:13:22 ws-019 A cdn.assets.example
11:13:49 ws-033 A mail.corp.example
11:13:55 ws-019 A mail.corp.example
11:15:55 ws-012 A updates.vendor.example
11:15:56 ws-046 A telemetry.vendor.example
11:16:34 ws-042 A time.pool.example
11:16:45 ws-040 A mail.corp.example
11:17:44 ws-039 A updates.vendor.example
11:19:47 ws-038 A updates.vendor.example
11:20:28 ws-044 A updates.vendor.example
11:20:39 ws-012 A telemetry.vendor.example
11:20:57 ws-029 A cdn.assets.example
11:23:03 ws-038 A cdn.assets.example
11:23:20 ws-015 A time.pool.example
11:24:09 ws-042 A time.pool.example
11:25:30 ws-015 A portal.corp.example
11:25:38 ws-018 A updates.vendor.example
11:26:45 ws-041 A telemetry.vendor.example
11:26:53 ws-011 A mail.corp.example
11:29:00 ws-029 A portal.corp.example
11:29:36 ws-040 A updates.vendor.example
11:30:19 ws-024 A mail.corp.example
11:30:23 ws-010 A portal.corp.example
11:30:30 ws-013 A cdn.assets.example
11:30:37 ws-038 A updates.vendor.example
11:32:49 ws-035 A portal.corp.example
11:33:05 ws-035 A telemetry.vendor.example
11:34:43 ws-031 A updates.vendor.example
11:36:08 ws-011 A time.pool.example
11:36:17 ws-012 A updates.vendor.example
11:37:16 ws-011 A updates.vendor.example
11:38:08 ws-013 A mail.corp.example
11:38:29 ws-042 A updates.vendor.example
11:39:15 ws-045 A time.pool.example
11:39:23 ws-010 A updates.vendor.example
11:39:58 ws-047 A portal.corp.example
11:40:05 ws-032 A telemetry.vendor.example
11:41:26 ws-031 A time.pool.example
11:43:24 ws-029 A telemetry.vendor.example
11:44:43 ws-015 A portal.corp.example
11:47:29 ws-047 A cdn.assets.example
11:48:01 ws-028 A portal.corp.example
11:48:41 ws-012 A portal.corp.example
11:49:21 ws-030 A portal.corp.example
11:50:00 ws-025 A telemetry.vendor.example
11:50:54 ws-022 A cdn.assets.example
11:51:06 ws-022 A telemetry.vendor.example
11:51:16 ws-039 A telemetry.vendor.example
11:54:47 ws-018 A mail.corp.example
11:57:28 ws-023 A portal.corp.example
11:57:29 ws-031 A time.pool.example
11:58:37 ws-030 A portal.corp.example
12:02:29 ws-014 A portal.corp.example
12:06:05 ws-022 A portal.corp.example
12:06:15 ws-042 A updates.vendor.example
12:06:48 ws-027 A cdn.assets.example
12:07:46 ws-039 A portal.corp.example
12:08:36 ws-027 A cdn.assets.example
12:08:48 ws-011 A cdn.assets.example
12:08:51 ws-031 A portal.corp.example
12:09:41 ws-039 A mail.corp.example
12:10:19 ws-045 A time.pool.example
12:10:28 ws-013 A telemetry.vendor.example
12:12:05 ws-030 A telemetry.vendor.example
12:12:18 ws-047 A time.pool.example
12:12:21 ws-022 A mail.corp.example
12:15:17 ws-011 A portal.corp.example
12:15:44 ws-044 A mail.corp.example
12:18:27 ws-047 A cdn.assets.example
12:19:05 ws-013 A cdn.assets.example
12:23:16 ws-035 A cdn.assets.example
12:24:36 ws-010 A time.pool.example
12:25:33 ws-014 A telemetry.vendor.example
12:27:41 ws-023 A telemetry.vendor.example
12:29:11 ws-010 A updates.vendor.example
12:30:29 ws-045 A time.pool.example
12:30:41 ws-032 A time.pool.example
12:31:04 ws-014 A updates.vendor.example
12:33:32 ws-014 A mail.corp.example
12:34:06 ws-023 A portal.corp.example
12:34:52 ws-032 A portal.corp.example
12:35:47 ws-012 A mail.corp.example
12:36:59 ws-016 A updates.vendor.example
12:37:09 ws-010 A portal.corp.example
12:38:25 ws-022 A cdn.assets.example
12:38:41 ws-048 A cdn.assets.example
12:39:44 ws-039 A mail.corp.example
12:40:02 ws-028 A portal.corp.example
12:40:54 ws-013 A updates.vendor.example
12:43:53 ws-020 A updates.vendor.example
12:44:14 ws-030 A telemetry.vendor.example
12:45:09 ws-032 A telemetry.vendor.example
12:45:21 ws-045 A telemetry.vendor.example
12:46:14 ws-018 A time.pool.example
12:46:59 ws-041 A telemetry.vendor.example
12:49:02 ws-013 A telemetry.vendor.example
12:49:18 ws-030 A mail.corp.example
12:51:02 ws-043 A telemetry.vendor.example
12:51:05 ws-033 A cdn.assets.example
12:53:29 ws-032 A telemetry.vendor.example
12:53:43 ws-029 A time.pool.example
12:54:01 ws-045 A time.pool.example
12:54:10 ws-030 A updates.vendor.example
12:54:17 ws-013 A portal.corp.example
12:54:53 ws-020 A time.pool.example
12:55:07 ws-038 A time.pool.example
12:55:54 ws-018 A time.pool.example
12:58:08 ws-033 A cdn.assets.example
12:59:35 ws-022 A cdn.assets.example
13:00:27 ws-032 A updates.vendor.example
13:01:20 ws-012 A cdn.assets.example
13:01:34 ws-041 A updates.vendor.example
13:02:16 ws-026 A telemetry.vendor.example
13:03:41 ws-040 A cdn.assets.example
13:06:51 ws-014 A telemetry.vendor.example
13:08:24 ws-020 A updates.vendor.example
13:08:31 ws-031 A cdn.assets.example
13:08:41 ws-028 A updates.vendor.example
13:09:52 ws-047 A mail.corp.example
13:11:03 ws-037 A updates.vendor.example
13:13:56 ws-032 A mail.corp.example
13:14:22 ws-035 A portal.corp.example
13:16:59 ws-015 A updates.vendor.example
13:17:16 ws-045 A portal.corp.example
13:17:27 ws-038 A updates.vendor.example
13:18:20 ws-034 A updates.vendor.example
13:18:28 ws-021 A portal.corp.example
13:18:54 ws-012 A mail.corp.example
13:19:36 ws-034 A time.pool.example
13:19:45 ws-042 A cdn.assets.example
13:22:03 ws-020 A cdn.assets.example
13:22:57 ws-016 A portal.corp.example
13:24:22 ws-034 A time.pool.example
13:24:45 ws-031 A telemetry.vendor.example
13:26:41 ws-022 A telemetry.vendor.example
13:29:01 ws-039 A time.pool.example
13:29:38 ws-011 A portal.corp.example
13:31:50 ws-016 A time.pool.example
13:32:40 ws-028 A portal.corp.example
13:37:06 ws-010 A mail.corp.example
13:38:31 ws-039 A cdn.assets.example
13:38:46 ws-022 A mail.corp.example
13:40:13 ws-021 A mail.corp.example
13:41:16 ws-028 A time.pool.example
13:41:35 ws-036 A telemetry.vendor.example
13:43:01 ws-024 A mail.corp.example
13:43:46 ws-036 A mail.corp.example
13:43:59 ws-022 A telemetry.vendor.example
13:44:09 ws-023 A updates.vendor.example
13:44:23 ws-040 A telemetry.vendor.example
13:45:45 ws-024 A time.pool.example
13:46:26 ws-047 A mail.corp.example
13:47:37 ws-048 A portal.corp.example
13:47:57 ws-028 A portal.corp.example
13:48:02 ws-017 A portal.corp.example
13:51:17 ws-028 A portal.corp.example
13:52:28 ws-026 A time.pool.example
13:52:48 ws-043 A mail.corp.example
13:52:59 ws-010 A time.pool.example
13:53:08 ws-048 A cdn.assets.example
13:53:34 ws-045 A mail.corp.example
13:54:06 ws-032 A portal.corp.example
13:56:07 ws-031 A portal.corp.example
13:58:19 ws-036 A updates.vendor.example
13:58:57 ws-040 A portal.corp.example
14:01:43 ws-016 A cdn.assets.example
14:01:50 ws-046 A updates.vendor.example
14:02:48 ws-028 A time.pool.example
14:02:56 ws-044 A updates.vendor.example
14:03:12 ws-035 A mail.corp.example
14:03:23 ws-015 A time.pool.example
14:04:40 ws-026 A updates.vendor.example
14:04:54 ws-042 A mail.corp.example
14:05:21 ws-036 A time.pool.example
14:05:21 ws-043 A updates.vendor.example
14:05:29 ws-030 A telemetry.vendor.example
14:08:26 ws-020 A portal.corp.example
14:10:09 ws-033 A updates.vendor.example
14:12:19 ws-034 A telemetry.vendor.example
14:12:56 ws-040 A portal.corp.example
14:13:39 ws-018 A portal.corp.example
14:13:54 ws-025 A updates.vendor.example
14:15:01 ws-043 A mail.corp.example
14:15:05 ws-039 A updates.vendor.example
14:15:12 ws-010 A mail.corp.example
14:16:13 ws-012 A cdn.assets.example
14:16:13 ws-016 A mail.corp.example
14:16:40 ws-013 A portal.corp.example
14:17:37 ws-030 A updates.vendor.example
14:17:52 ws-020 A portal.corp.example
14:18:59 ws-030 A mail.corp.example
14:20:15 ws-023 A cdn.assets.example
14:20:20 ws-022 A mail.corp.example
14:22:17 ws-031 A updates.vendor.example
14:22:32 ws-032 A mail.corp.example
14:23:56 ws-011 A cdn.assets.example
14:24:11 ws-031 A cdn.assets.example
14:24:56 ws-011 A telemetry.vendor.example
14:26:26 ws-011 A portal.corp.example
14:27:03 ws-017 A time.pool.example
14:27:39 ws-026 A portal.corp.example
14:30:54 ws-030 A cdn.assets.example
14:32:53 ws-020 A time.pool.example
14:34:17 ws-035 A cdn.assets.example
14:34:39 ws-013 A time.pool.example
14:34:46 ws-023 A telemetry.vendor.example
14:35:15 ws-030 A cdn.assets.example
14:35:58 ws-019 A telemetry.vendor.example
14:40:05 ws-022 A mail.corp.example
14:40:17 ws-045 A portal.corp.example
14:40:30 ws-047 A updates.vendor.example
14:41:25 ws-019 A telemetry.vendor.example
14:44:07 ws-024 A portal.corp.example
14:44:37 ws-034 A telemetry.vendor.example
14:45:17 ws-023 A cdn.assets.example
14:45:57 ws-042 A updates.vendor.example
14:46:36 ws-041 A mail.corp.example
14:47:42 ws-041 A cdn.assets.example
14:50:23 ws-010 A telemetry.vendor.example
14:55:23 ws-017 A cdn.assets.example
14:57:16 ws-042 A portal.corp.example
14:57:43 ws-046 A updates.vendor.example
14:58:34 ws-016 A updates.vendor.example
14:58:45 ws-010 A telemetry.vendor.example
14:58:55 ws-034 A telemetry.vendor.example
14:59:06 ws-020 A mail.corp.example
14:59:40 ws-048 A updates.vendor.example
15:01:21 ws-043 A mail.corp.example
15:01:29 ws-021 A updates.vendor.example
15:02:49 ws-018 A time.pool.example
15:03:21 ws-012 A portal.corp.example
15:04:19 ws-036 A cdn.assets.example
15:04:46 ws-011 A cdn.assets.example
15:06:43 ws-029 A mail.corp.example
15:07:10 ws-041 A portal.corp.example
15:08:47 ws-041 A mail.corp.example
15:09:48 ws-043 A mail.corp.example
15:13:12 ws-048 A time.pool.example
15:14:15 ws-021 A telemetry.vendor.example
15:15:31 ws-029 A telemetry.vendor.example
15:16:32 ws-021 A telemetry.vendor.example
15:16:52 ws-039 A updates.vendor.example
15:17:26 ws-030 A telemetry.vendor.example
15:17:43 ws-039 A cdn.assets.example
15:18:05 ws-042 A portal.corp.example
15:19:21 ws-013 A telemetry.vendor.example
15:20:11 ws-036 A updates.vendor.example
15:24:59 ws-043 A updates.vendor.example
15:25:01 ws-010 A time.pool.example
15:25:26 ws-016 A portal.corp.example
15:25:50 ws-014 A updates.vendor.example
15:26:16 ws-015 A time.pool.example
15:26:16 ws-048 A updates.vendor.example
15:27:09 ws-029 A telemetry.vendor.example
15:27:24 ws-014 A telemetry.vendor.example
15:27:38 ws-038 A updates.vendor.example
15:28:28 ws-035 A portal.corp.example
15:29:07 ws-034 A mail.corp.example
15:30:28 ws-010 A portal.corp.example
15:30:29 ws-038 A mail.corp.example
15:30:48 ws-019 A portal.corp.example
15:32:05 ws-024 A updates.vendor.example
15:32:38 ws-042 A telemetry.vendor.example
15:33:04 ws-010 A mail.corp.example
15:34:14 ws-013 A telemetry.vendor.example
15:35:15 ws-033 A portal.corp.example
15:35:53 ws-022 A updates.vendor.example
15:36:00 ws-027 A cdn.assets.example
15:36:01 ws-041 A portal.corp.example
15:40:04 ws-040 A time.pool.example
15:41:11 ws-046 A updates.vendor.example
15:41:47 ws-027 A mail.corp.example
15:41:47 ws-039 A portal.corp.example
15:41:53 ws-033 A mail.corp.example
15:42:24 ws-043 A telemetry.vendor.example
15:44:00 ws-013 A updates.vendor.example
15:46:29 ws-024 A mail.corp.example
15:46:34 ws-020 A updates.vendor.example
15:46:44 ws-034 A updates.vendor.example
15:47:07 ws-012 A portal.corp.example
15:48:53 ws-048 A time.pool.example
15:49:21 ws-038 A cdn.assets.example
15:49:31 ws-030 A time.pool.example
15:51:08 ws-010 A time.pool.example
15:51:25 ws-021 A telemetry.vendor.example
15:51:51 ws-030 A mail.corp.example
15:52:40 ws-033 A mail.corp.example
15:52:42 ws-029 A cdn.assets.example
15:52:42 ws-035 A cdn.assets.example
15:52:53 ws-047 A cdn.assets.example
15:55:29 ws-040 A cdn.assets.example
15:55:30 ws-026 A mail.corp.example
15:55:35 ws-038 A cdn.assets.example
15:56:10 ws-036 A updates.vendor.example
15:59:28 ws-036 A cdn.assets.example
15:59:49 ws-017 A mail.corp.example
16:00:10 ws-036 A time.pool.example
16:00:23 ws-029 A mail.corp.example
16:01:47 ws-011 A cdn.assets.example
16:03:27 ws-048 A cdn.assets.example
16:05:36 ws-022 A time.pool.example
16:05:38 ws-032 A updates.vendor.example
16:08:35 ws-036 A portal.corp.example
16:10:24 ws-034 A cdn.assets.example
16:11:20 ws-036 A portal.corp.example
16:11:49 ws-017 A updates.vendor.example
16:11:50 ws-048 A mail.corp.example
16:11:59 ws-041 A portal.corp.example
16:13:22 ws-040 A time.pool.example
16:13:23 ws-023 A updates.vendor.example
16:13:37 ws-040 A cdn.assets.example
16:16:17 ws-038 A telemetry.vendor.example
16:17:07 ws-043 A telemetry.vendor.example
16:17:21 ws-035 A mail.corp.example
16:19:35 ws-034 A mail.corp.example
16:20:41 ws-033 A telemetry.vendor.example
16:22:09 ws-012 A time.pool.example
16:22:20 ws-031 A mail.corp.example
16:22:40 ws-020 A updates.vendor.example
16:22:40 ws-033 A cdn.assets.example
16:24:38 ws-026 A mail.corp.example
16:25:57 ws-020 A telemetry.vendor.example
16:27:20 ws-042 A updates.vendor.example
16:27:25 ws-023 A time.pool.example
16:28:06 ws-011 A updates.vendor.example
16:28:43 ws-046 A telemetry.vendor.example
16:29:26 ws-022 A time.pool.example
16:29:36 ws-028 A portal.corp.example
16:29:56 ws-021 A time.pool.example
16:32:28 ws-045 A telemetry.vendor.example
16:33:09 ws-021 A mail.corp.example
16:37:20 ws-011 A portal.corp.example
16:38:21 ws-015 A portal.corp.example
16:39:28 ws-016 A cdn.assets.example
16:39:28 ws-046 A mail.corp.example
16:39:56 ws-036 A mail.corp.example
16:40:16 ws-019 A telemetry.vendor.example
16:41:09 ws-023 A portal.corp.example
16:42:44 ws-013 A mail.corp.example
16:43:16 ws-032 A portal.corp.example
16:44:09 ws-041 A telemetry.vendor.example
16:44:10 ws-040 A portal.corp.example
16:46:17 ws-020 A time.pool.example
16:46:40 ws-045 A mail.corp.example
16:47:18 ws-011 A telemetry.vendor.example
16:47:18 ws-035 A mail.corp.example
16:48:12 ws-022 A updates.vendor.example
16:50:02 ws-030 A cdn.assets.example
16:50:48 ws-023 A portal.corp.example
16:51:14 ws-036 A cdn.assets.example
16:51:49 ws-042 A portal.corp.example
16:51:58 ws-010 A portal.corp.example
16:52:03 ws-013 A cdn.assets.example
16:53:17 ws-013 A time.pool.example
16:53:53 ws-043 A updates.vendor.example
16:55:13 ws-032 A updates.vendor.example
16:55:16 ws-029 A telemetry.vendor.example
16:55:28 ws-019 A portal.corp.example
16:55:41 ws-041 A updates.vendor.example
16:56:38 ws-041 A cdn.assets.example
16:57:47 ws-021 A updates.vendor.example
16:57:50 ws-011 A portal.corp.example
17:00:40 ws-045 A cdn.assets.example
17:03:03 ws-037 A portal.corp.example
17:03:22 ws-035 A portal.corp.example
17:04:08 ws-010 A mail.corp.example
17:04:25 ws-028 A updates.vendor.example
17:06:25 ws-047 A updates.vendor.example
17:06:35 ws-032 A time.pool.example
17:08:51 ws-042 A cdn.assets.example
17:09:59 ws-048 A mail.corp.example
17:10:50 ws-039 A mail.corp.example
17:11:33 ws-013 A telemetry.vendor.example
17:12:10 ws-034 A telemetry.vendor.example
17:12:15 ws-045 A telemetry.vendor.example
17:16:09 ws-032 A time.pool.example
17:20:25 ws-041 A cdn.assets.example
17:20:47 ws-029 A mail.corp.example
17:22:11 ws-048 A portal.corp.example
17:22:36 ws-031 A updates.vendor.example
17:22:59 ws-031 A cdn.assets.example
17:24:41 ws-019 A updates.vendor.example
17:25:09 ws-020 A telemetry.vendor.example
17:25:28 ws-011 A updates.vendor.example
17:26:37 ws-047 A cdn.assets.example
17:27:22 ws-031 A time.pool.example
17:28:08 ws-042 A time.pool.example
17:28:21 ws-030 A time.pool.example
17:28:42 ws-020 A portal.corp.example
17:29:55 ws-027 A mail.corp.example
17:30:03 ws-038 A portal.corp.example
17:31:10 ws-047 A telemetry.vendor.example
17:32:20 ws-040 A telemetry.vendor.example
17:33:55 ws-020 A mail.corp.example
17:33:57 ws-028 A updates.vendor.example
17:35:09 ws-014 A telemetry.vendor.example
17:35:12 ws-024 A time.pool.example
17:35:14 ws-034 A portal.corp.example
17:35:25 ws-015 A time.pool.example
17:38:09 ws-029 A time.pool.example
17:38:31 ws-030 A updates.vendor.example
17:42:44 ws-033 A portal.corp.example
17:42:52 ws-034 A cdn.assets.example
17:43:22 ws-021 A updates.vendor.example
17:43:49 ws-045 A cdn.assets.example
17:45:59 ws-025 A mail.corp.example
17:47:03 ws-015 A portal.corp.example
17:48:59 ws-015 A mail.corp.example
17:49:33 ws-038 A updates.vendor.example
17:49:35 ws-030 A time.pool.example
17:49:42 ws-040 A portal.corp.example
17:50:36 ws-031 A cdn.assets.example
17:51:08 ws-035 A mail.corp.example
17:51:43 ws-034 A time.pool.example
17:52:29 ws-013 A updates.vendor.example
17:53:07 ws-021 A updates.vendor.example
17:56:07 ws-039 A updates.vendor.example
17:57:36 ws-011 A updates.vendor.example
17:58:13 ws-040 A updates.vendor.example