The one that asked once

Easy · 15 points
A day of DNS queries from one office network. Nothing here is flagged, nothing is known-bad, and searching for something suspicious will not find it.
Do not search. Count. Every hostname below appears many times except one, which appears once, from a single workstation, at an hour when nobody was working.
Submit that hostname as the flag: skrd{hostname}.
Every name ends in .example, which is reserved and cannot be registered. Nothing here refers to a real domain or a real organisation.
Artefact

03:17:42 ws-031  A   k7d2m-sync.example
09:00:08 ws-045  A   portal.corp.example
09:00:12 ws-011  A   portal.corp.example
09:00:23 ws-020  A   time.pool.example
09:01:37 ws-021  A   telemetry.vendor.example
09:02:28 ws-046  A   cdn.assets.example
09:03:32 ws-033  A   time.pool.example
09:05:11 ws-040  A   portal.corp.example
09:05:26 ws-042  A   telemetry.vendor.example
09:07:26 ws-045  A   telemetry.vendor.example
09:10:13 ws-010  A   updates.vendor.example
09:10:21 ws-020  A   telemetry.vendor.example
09:12:31 ws-013  A   mail.corp.example
09:13:46 ws-048  A   mail.corp.example
09:17:35 ws-038  A   cdn.assets.example
09:18:03 ws-029  A   telemetry.vendor.example
09:20:49 ws-045  A   portal.corp.example
09:21:18 ws-037  A   mail.corp.example
09:21:22 ws-044  A   mail.corp.example
09:22:00 ws-039  A   time.pool.example
09:23:33 ws-029  A   telemetry.vendor.example
09:24:11 ws-032  A   time.pool.example
09:24:17 ws-038  A   time.pool.example
09:28:08 ws-012  A   mail.corp.example
09:28:27 ws-019  A   time.pool.example
09:28:36 ws-029  A   telemetry.vendor.example
09:30:29 ws-021  A   telemetry.vendor.example
09:30:57 ws-047  A   mail.corp.example
09:33:12 ws-012  A   cdn.assets.example
09:34:01 ws-013  A   telemetry.vendor.example
09:34:52 ws-034  A   updates.vendor.example
09:34:56 ws-030  A   time.pool.example
09:35:29 ws-012  A   cdn.assets.example
09:37:59 ws-022  A   cdn.assets.example
09:38:33 ws-019  A   updates.vendor.example
09:39:09 ws-030  A   time.pool.example
09:40:40 ws-022  A   time.pool.example
09:41:26 ws-026  A   cdn.assets.example
09:41:54 ws-013  A   telemetry.vendor.example
09:43:07 ws-048  A   cdn.assets.example
09:44:06 ws-040  A   cdn.assets.example
09:46:46 ws-039  A   updates.vendor.example
09:47:29 ws-038  A   portal.corp.example
09:48:50 ws-033  A   time.pool.example
09:49:30 ws-038  A   updates.vendor.example
09:49:34 ws-020  A   updates.vendor.example
09:51:13 ws-039  A   time.pool.example
09:51:42 ws-019  A   mail.corp.example
09:52:40 ws-020  A   cdn.assets.example
09:52:41 ws-048  A   telemetry.vendor.example
09:52:47 ws-041  A   telemetry.vendor.example
09:53:24 ws-029  A   mail.corp.example
09:53:45 ws-017  A   portal.corp.example
09:55:21 ws-044  A   mail.corp.example
09:55:59 ws-031  A   time.pool.example
09:56:29 ws-037  A   mail.corp.example
09:56:31 ws-030  A   cdn.assets.example
09:58:03 ws-020  A   telemetry.vendor.example
10:00:38 ws-023  A   cdn.assets.example
10:01:30 ws-046  A   updates.vendor.example
10:02:00 ws-045  A   mail.corp.example
10:03:21 ws-032  A   telemetry.vendor.example
10:03:32 ws-026  A   portal.corp.example
10:04:03 ws-011  A   updates.vendor.example
10:06:08 ws-035  A   telemetry.vendor.example
10:07:13 ws-028  A   cdn.assets.example
10:07:22 ws-038  A   portal.corp.example
10:10:45 ws-012  A   cdn.assets.example
10:11:11 ws-022  A   mail.corp.example
10:12:02 ws-042  A   cdn.assets.example
10:15:47 ws-021  A   portal.corp.example
10:18:34 ws-022  A   portal.corp.example
10:19:34 ws-046  A   updates.vendor.example
10:19:51 ws-014  A   portal.corp.example
10:27:10 ws-045  A   portal.corp.example
10:28:05 ws-043  A   mail.corp.example
10:29:03 ws-025  A   time.pool.example
10:29:44 ws-023  A   updates.vendor.example
10:30:03 ws-041  A   telemetry.vendor.example
10:30:14 ws-035  A   portal.corp.example
10:30:43 ws-031  A   time.pool.example
10:32:25 ws-018  A   updates.vendor.example
10:32:48 ws-032  A   telemetry.vendor.example
10:34:13 ws-013  A   mail.corp.example
10:34:50 ws-035  A   cdn.assets.example
10:34:51 ws-048  A   mail.corp.example
10:36:56 ws-020  A   portal.corp.example
10:38:15 ws-036  A   portal.corp.example
10:38:45 ws-019  A   time.pool.example
10:38:51 ws-017  A   portal.corp.example
10:41:06 ws-036  A   telemetry.vendor.example
10:43:44 ws-033  A   updates.vendor.example
10:43:57 ws-027  A   telemetry.vendor.example
10:45:35 ws-015  A   cdn.assets.example
10:45:58 ws-013  A   mail.corp.example
10:50:13 ws-010  A   time.pool.example
10:50:31 ws-042  A   time.pool.example
10:50:34 ws-027  A   updates.vendor.example
10:50:56 ws-033  A   updates.vendor.example
10:51:04 ws-021  A   portal.corp.example
10:53:23 ws-020  A   telemetry.vendor.example
10:53:49 ws-037  A   cdn.assets.example
10:53:54 ws-030  A   mail.corp.example
10:56:00 ws-016  A   telemetry.vendor.example
10:57:03 ws-041  A   time.pool.example
10:57:38 ws-039  A   telemetry.vendor.example
10:58:40 ws-043  A   portal.corp.example
10:59:48 ws-019  A   telemetry.vendor.example
11:00:26 ws-042  A   telemetry.vendor.example
11:01:54 ws-025  A   portal.corp.example
11:02:01 ws-038  A   time.pool.example
11:03:22 ws-014  A   updates.vendor.example
11:04:20 ws-013  A   telemetry.vendor.example
11:07:26 ws-043  A   time.pool.example
11:07:52 ws-036  A   portal.corp.example
11:11:10 ws-032  A   time.pool.example
11:12:29 ws-020  A   cdn.assets.example
11:12:33 ws-015  A   cdn.assets.example
11:13:06 ws-030  A   telemetry.vendor.example
11:13:22 ws-019  A   cdn.assets.example
11:13:49 ws-033  A   mail.corp.example
11:13:55 ws-019  A   mail.corp.example
11:15:55 ws-012  A   updates.vendor.example
11:15:56 ws-046  A   telemetry.vendor.example
11:16:34 ws-042  A   time.pool.example
11:16:45 ws-040  A   mail.corp.example
11:17:44 ws-039  A   updates.vendor.example
11:19:47 ws-038  A   updates.vendor.example
11:20:28 ws-044  A   updates.vendor.example
11:20:39 ws-012  A   telemetry.vendor.example
11:20:57 ws-029  A   cdn.assets.example
11:23:03 ws-038  A   cdn.assets.example
11:23:20 ws-015  A   time.pool.example
11:24:09 ws-042  A   time.pool.example
11:25:30 ws-015  A   portal.corp.example
11:25:38 ws-018  A   updates.vendor.example
11:26:45 ws-041  A   telemetry.vendor.example
11:26:53 ws-011  A   mail.corp.example
11:29:00 ws-029  A   portal.corp.example
11:29:36 ws-040  A   updates.vendor.example
11:30:19 ws-024  A   mail.corp.example
11:30:23 ws-010  A   portal.corp.example
11:30:30 ws-013  A   cdn.assets.example
11:30:37 ws-038  A   updates.vendor.example
11:32:49 ws-035  A   portal.corp.example
11:33:05 ws-035  A   telemetry.vendor.example
11:34:43 ws-031  A   updates.vendor.example
11:36:08 ws-011  A   time.pool.example
11:36:17 ws-012  A   updates.vendor.example
11:37:16 ws-011  A   updates.vendor.example
11:38:08 ws-013  A   mail.corp.example
11:38:29 ws-042  A   updates.vendor.example
11:39:15 ws-045  A   time.pool.example
11:39:23 ws-010  A   updates.vendor.example
11:39:58 ws-047  A   portal.corp.example
11:40:05 ws-032  A   telemetry.vendor.example
11:41:26 ws-031  A   time.pool.example
11:43:24 ws-029  A   telemetry.vendor.example
11:44:43 ws-015  A   portal.corp.example
11:47:29 ws-047  A   cdn.assets.example
11:48:01 ws-028  A   portal.corp.example
11:48:41 ws-012  A   portal.corp.example
11:49:21 ws-030  A   portal.corp.example
11:50:00 ws-025  A   telemetry.vendor.example
11:50:54 ws-022  A   cdn.assets.example
11:51:06 ws-022  A   telemetry.vendor.example
11:51:16 ws-039  A   telemetry.vendor.example
11:54:47 ws-018  A   mail.corp.example
11:57:28 ws-023  A   portal.corp.example
11:57:29 ws-031  A   time.pool.example
11:58:37 ws-030  A   portal.corp.example
12:02:29 ws-014  A   portal.corp.example
12:06:05 ws-022  A   portal.corp.example
12:06:15 ws-042  A   updates.vendor.example
12:06:48 ws-027  A   cdn.assets.example
12:07:46 ws-039  A   portal.corp.example
12:08:36 ws-027  A   cdn.assets.example
12:08:48 ws-011  A   cdn.assets.example
12:08:51 ws-031  A   portal.corp.example
12:09:41 ws-039  A   mail.corp.example
12:10:19 ws-045  A   time.pool.example
12:10:28 ws-013  A   telemetry.vendor.example
12:12:05 ws-030  A   telemetry.vendor.example
12:12:18 ws-047  A   time.pool.example
12:12:21 ws-022  A   mail.corp.example
12:15:17 ws-011  A   portal.corp.example
12:15:44 ws-044  A   mail.corp.example
12:18:27 ws-047  A   cdn.assets.example
12:19:05 ws-013  A   cdn.assets.example
12:23:16 ws-035  A   cdn.assets.example
12:24:36 ws-010  A   time.pool.example
12:25:33 ws-014  A   telemetry.vendor.example
12:27:41 ws-023  A   telemetry.vendor.example
12:29:11 ws-010  A   updates.vendor.example
12:30:29 ws-045  A   time.pool.example
12:30:41 ws-032  A   time.pool.example
12:31:04 ws-014  A   updates.vendor.example
12:33:32 ws-014  A   mail.corp.example
12:34:06 ws-023  A   portal.corp.example
12:34:52 ws-032  A   portal.corp.example
12:35:47 ws-012  A   mail.corp.example
12:36:59 ws-016  A   updates.vendor.example
12:37:09 ws-010  A   portal.corp.example
12:38:25 ws-022  A   cdn.assets.example
12:38:41 ws-048  A   cdn.assets.example
12:39:44 ws-039  A   mail.corp.example
12:40:02 ws-028  A   portal.corp.example
12:40:54 ws-013  A   updates.vendor.example
12:43:53 ws-020  A   updates.vendor.example
12:44:14 ws-030  A   telemetry.vendor.example
12:45:09 ws-032  A   telemetry.vendor.example
12:45:21 ws-045  A   telemetry.vendor.example
12:46:14 ws-018  A   time.pool.example
12:46:59 ws-041  A   telemetry.vendor.example
12:49:02 ws-013  A   telemetry.vendor.example
12:49:18 ws-030  A   mail.corp.example
12:51:02 ws-043  A   telemetry.vendor.example
12:51:05 ws-033  A   cdn.assets.example
12:53:29 ws-032  A   telemetry.vendor.example
12:53:43 ws-029  A   time.pool.example
12:54:01 ws-045  A   time.pool.example
12:54:10 ws-030  A   updates.vendor.example
12:54:17 ws-013  A   portal.corp.example
12:54:53 ws-020  A   time.pool.example
12:55:07 ws-038  A   time.pool.example
12:55:54 ws-018  A   time.pool.example
12:58:08 ws-033  A   cdn.assets.example
12:59:35 ws-022  A   cdn.assets.example
13:00:27 ws-032  A   updates.vendor.example
13:01:20 ws-012  A   cdn.assets.example
13:01:34 ws-041  A   updates.vendor.example
13:02:16 ws-026  A   telemetry.vendor.example
13:03:41 ws-040  A   cdn.assets.example
13:06:51 ws-014  A   telemetry.vendor.example
13:08:24 ws-020  A   updates.vendor.example
13:08:31 ws-031  A   cdn.assets.example
13:08:41 ws-028  A   updates.vendor.example
13:09:52 ws-047  A   mail.corp.example
13:11:03 ws-037  A   updates.vendor.example
13:13:56 ws-032  A   mail.corp.example
13:14:22 ws-035  A   portal.corp.example
13:16:59 ws-015  A   updates.vendor.example
13:17:16 ws-045  A   portal.corp.example
13:17:27 ws-038  A   updates.vendor.example
13:18:20 ws-034  A   updates.vendor.example
13:18:28 ws-021  A   portal.corp.example
13:18:54 ws-012  A   mail.corp.example
13:19:36 ws-034  A   time.pool.example
13:19:45 ws-042  A   cdn.assets.example
13:22:03 ws-020  A   cdn.assets.example
13:22:57 ws-016  A   portal.corp.example
13:24:22 ws-034  A   time.pool.example
13:24:45 ws-031  A   telemetry.vendor.example
13:26:41 ws-022  A   telemetry.vendor.example
13:29:01 ws-039  A   time.pool.example
13:29:38 ws-011  A   portal.corp.example
13:31:50 ws-016  A   time.pool.example
13:32:40 ws-028  A   portal.corp.example
13:37:06 ws-010  A   mail.corp.example
13:38:31 ws-039  A   cdn.assets.example
13:38:46 ws-022  A   mail.corp.example
13:40:13 ws-021  A   mail.corp.example
13:41:16 ws-028  A   time.pool.example
13:41:35 ws-036  A   telemetry.vendor.example
13:43:01 ws-024  A   mail.corp.example
13:43:46 ws-036  A   mail.corp.example
13:43:59 ws-022  A   telemetry.vendor.example
13:44:09 ws-023  A   updates.vendor.example
13:44:23 ws-040  A   telemetry.vendor.example
13:45:45 ws-024  A   time.pool.example
13:46:26 ws-047  A   mail.corp.example
13:47:37 ws-048  A   portal.corp.example
13:47:57 ws-028  A   portal.corp.example
13:48:02 ws-017  A   portal.corp.example
13:51:17 ws-028  A   portal.corp.example
13:52:28 ws-026  A   time.pool.example
13:52:48 ws-043  A   mail.corp.example
13:52:59 ws-010  A   time.pool.example
13:53:08 ws-048  A   cdn.assets.example
13:53:34 ws-045  A   mail.corp.example
13:54:06 ws-032  A   portal.corp.example
13:56:07 ws-031  A   portal.corp.example
13:58:19 ws-036  A   updates.vendor.example
13:58:57 ws-040  A   portal.corp.example
14:01:43 ws-016  A   cdn.assets.example
14:01:50 ws-046  A   updates.vendor.example
14:02:48 ws-028  A   time.pool.example
14:02:56 ws-044  A   updates.vendor.example
14:03:12 ws-035  A   mail.corp.example
14:03:23 ws-015  A   time.pool.example
14:04:40 ws-026  A   updates.vendor.example
14:04:54 ws-042  A   mail.corp.example
14:05:21 ws-036  A   time.pool.example
14:05:21 ws-043  A   updates.vendor.example
14:05:29 ws-030  A   telemetry.vendor.example
14:08:26 ws-020  A   portal.corp.example
14:10:09 ws-033  A   updates.vendor.example
14:12:19 ws-034  A   telemetry.vendor.example
14:12:56 ws-040  A   portal.corp.example
14:13:39 ws-018  A   portal.corp.example
14:13:54 ws-025  A   updates.vendor.example
14:15:01 ws-043  A   mail.corp.example
14:15:05 ws-039  A   updates.vendor.example
14:15:12 ws-010  A   mail.corp.example
14:16:13 ws-012  A   cdn.assets.example
14:16:13 ws-016  A   mail.corp.example
14:16:40 ws-013  A   portal.corp.example
14:17:37 ws-030  A   updates.vendor.example
14:17:52 ws-020  A   portal.corp.example
14:18:59 ws-030  A   mail.corp.example
14:20:15 ws-023  A   cdn.assets.example
14:20:20 ws-022  A   mail.corp.example
14:22:17 ws-031  A   updates.vendor.example
14:22:32 ws-032  A   mail.corp.example
14:23:56 ws-011  A   cdn.assets.example
14:24:11 ws-031  A   cdn.assets.example
14:24:56 ws-011  A   telemetry.vendor.example
14:26:26 ws-011  A   portal.corp.example
14:27:03 ws-017  A   time.pool.example
14:27:39 ws-026  A   portal.corp.example
14:30:54 ws-030  A   cdn.assets.example
14:32:53 ws-020  A   time.pool.example
14:34:17 ws-035  A   cdn.assets.example
14:34:39 ws-013  A   time.pool.example
14:34:46 ws-023  A   telemetry.vendor.example
14:35:15 ws-030  A   cdn.assets.example
14:35:58 ws-019  A   telemetry.vendor.example
14:40:05 ws-022  A   mail.corp.example
14:40:17 ws-045  A   portal.corp.example
14:40:30 ws-047  A   updates.vendor.example
14:41:25 ws-019  A   telemetry.vendor.example
14:44:07 ws-024  A   portal.corp.example
14:44:37 ws-034  A   telemetry.vendor.example
14:45:17 ws-023  A   cdn.assets.example
14:45:57 ws-042  A   updates.vendor.example
14:46:36 ws-041  A   mail.corp.example
14:47:42 ws-041  A   cdn.assets.example
14:50:23 ws-010  A   telemetry.vendor.example
14:55:23 ws-017  A   cdn.assets.example
14:57:16 ws-042  A   portal.corp.example
14:57:43 ws-046  A   updates.vendor.example
14:58:34 ws-016  A   updates.vendor.example
14:58:45 ws-010  A   telemetry.vendor.example
14:58:55 ws-034  A   telemetry.vendor.example
14:59:06 ws-020  A   mail.corp.example
14:59:40 ws-048  A   updates.vendor.example
15:01:21 ws-043  A   mail.corp.example
15:01:29 ws-021  A   updates.vendor.example
15:02:49 ws-018  A   time.pool.example
15:03:21 ws-012  A   portal.corp.example
15:04:19 ws-036  A   cdn.assets.example
15:04:46 ws-011  A   cdn.assets.example
15:06:43 ws-029  A   mail.corp.example
15:07:10 ws-041  A   portal.corp.example
15:08:47 ws-041  A   mail.corp.example
15:09:48 ws-043  A   mail.corp.example
15:13:12 ws-048  A   time.pool.example
15:14:15 ws-021  A   telemetry.vendor.example
15:15:31 ws-029  A   telemetry.vendor.example
15:16:32 ws-021  A   telemetry.vendor.example
15:16:52 ws-039  A   updates.vendor.example
15:17:26 ws-030  A   telemetry.vendor.example
15:17:43 ws-039  A   cdn.assets.example
15:18:05 ws-042  A   portal.corp.example
15:19:21 ws-013  A   telemetry.vendor.example
15:20:11 ws-036  A   updates.vendor.example
15:24:59 ws-043  A   updates.vendor.example
15:25:01 ws-010  A   time.pool.example
15:25:26 ws-016  A   portal.corp.example
15:25:50 ws-014  A   updates.vendor.example
15:26:16 ws-015  A   time.pool.example
15:26:16 ws-048  A   updates.vendor.example
15:27:09 ws-029  A   telemetry.vendor.example
15:27:24 ws-014  A   telemetry.vendor.example
15:27:38 ws-038  A   updates.vendor.example
15:28:28 ws-035  A   portal.corp.example
15:29:07 ws-034  A   mail.corp.example
15:30:28 ws-010  A   portal.corp.example
15:30:29 ws-038  A   mail.corp.example
15:30:48 ws-019  A   portal.corp.example
15:32:05 ws-024  A   updates.vendor.example
15:32:38 ws-042  A   telemetry.vendor.example
15:33:04 ws-010  A   mail.corp.example
15:34:14 ws-013  A   telemetry.vendor.example
15:35:15 ws-033  A   portal.corp.example
15:35:53 ws-022  A   updates.vendor.example
15:36:00 ws-027  A   cdn.assets.example
15:36:01 ws-041  A   portal.corp.example
15:40:04 ws-040  A   time.pool.example
15:41:11 ws-046  A   updates.vendor.example
15:41:47 ws-027  A   mail.corp.example
15:41:47 ws-039  A   portal.corp.example
15:41:53 ws-033  A   mail.corp.example
15:42:24 ws-043  A   telemetry.vendor.example
15:44:00 ws-013  A   updates.vendor.example
15:46:29 ws-024  A   mail.corp.example
15:46:34 ws-020  A   updates.vendor.example
15:46:44 ws-034  A   updates.vendor.example
15:47:07 ws-012  A   portal.corp.example
15:48:53 ws-048  A   time.pool.example
15:49:21 ws-038  A   cdn.assets.example
15:49:31 ws-030  A   time.pool.example
15:51:08 ws-010  A   time.pool.example
15:51:25 ws-021  A   telemetry.vendor.example
15:51:51 ws-030  A   mail.corp.example
15:52:40 ws-033  A   mail.corp.example
15:52:42 ws-029  A   cdn.assets.example
15:52:42 ws-035  A   cdn.assets.example
15:52:53 ws-047  A   cdn.assets.example
15:55:29 ws-040  A   cdn.assets.example
15:55:30 ws-026  A   mail.corp.example
15:55:35 ws-038  A   cdn.assets.example
15:56:10 ws-036  A   updates.vendor.example
15:59:28 ws-036  A   cdn.assets.example
15:59:49 ws-017  A   mail.corp.example
16:00:10 ws-036  A   time.pool.example
16:00:23 ws-029  A   mail.corp.example
16:01:47 ws-011  A   cdn.assets.example
16:03:27 ws-048  A   cdn.assets.example
16:05:36 ws-022  A   time.pool.example
16:05:38 ws-032  A   updates.vendor.example
16:08:35 ws-036  A   portal.corp.example
16:10:24 ws-034  A   cdn.assets.example
16:11:20 ws-036  A   portal.corp.example
16:11:49 ws-017  A   updates.vendor.example
16:11:50 ws-048  A   mail.corp.example
16:11:59 ws-041  A   portal.corp.example
16:13:22 ws-040  A   time.pool.example
16:13:23 ws-023  A   updates.vendor.example
16:13:37 ws-040  A   cdn.assets.example
16:16:17 ws-038  A   telemetry.vendor.example
16:17:07 ws-043  A   telemetry.vendor.example
16:17:21 ws-035  A   mail.corp.example
16:19:35 ws-034  A   mail.corp.example
16:20:41 ws-033  A   telemetry.vendor.example
16:22:09 ws-012  A   time.pool.example
16:22:20 ws-031  A   mail.corp.example
16:22:40 ws-020  A   updates.vendor.example
16:22:40 ws-033  A   cdn.assets.example
16:24:38 ws-026  A   mail.corp.example
16:25:57 ws-020  A   telemetry.vendor.example
16:27:20 ws-042  A   updates.vendor.example
16:27:25 ws-023  A   time.pool.example
16:28:06 ws-011  A   updates.vendor.example
16:28:43 ws-046  A   telemetry.vendor.example
16:29:26 ws-022  A   time.pool.example
16:29:36 ws-028  A   portal.corp.example
16:29:56 ws-021  A   time.pool.example
16:32:28 ws-045  A   telemetry.vendor.example
16:33:09 ws-021  A   mail.corp.example
16:37:20 ws-011  A   portal.corp.example
16:38:21 ws-015  A   portal.corp.example
16:39:28 ws-016  A   cdn.assets.example
16:39:28 ws-046  A   mail.corp.example
16:39:56 ws-036  A   mail.corp.example
16:40:16 ws-019  A   telemetry.vendor.example
16:41:09 ws-023  A   portal.corp.example
16:42:44 ws-013  A   mail.corp.example
16:43:16 ws-032  A   portal.corp.example
16:44:09 ws-041  A   telemetry.vendor.example
16:44:10 ws-040  A   portal.corp.example
16:46:17 ws-020  A   time.pool.example
16:46:40 ws-045  A   mail.corp.example
16:47:18 ws-011  A   telemetry.vendor.example
16:47:18 ws-035  A   mail.corp.example
16:48:12 ws-022  A   updates.vendor.example
16:50:02 ws-030  A   cdn.assets.example
16:50:48 ws-023  A   portal.corp.example
16:51:14 ws-036  A   cdn.assets.example
16:51:49 ws-042  A   portal.corp.example
16:51:58 ws-010  A   portal.corp.example
16:52:03 ws-013  A   cdn.assets.example
16:53:17 ws-013  A   time.pool.example
16:53:53 ws-043  A   updates.vendor.example
16:55:13 ws-032  A   updates.vendor.example
16:55:16 ws-029  A   telemetry.vendor.example
16:55:28 ws-019  A   portal.corp.example
16:55:41 ws-041  A   updates.vendor.example
16:56:38 ws-041  A   cdn.assets.example
16:57:47 ws-021  A   updates.vendor.example
16:57:50 ws-011  A   portal.corp.example
17:00:40 ws-045  A   cdn.assets.example
17:03:03 ws-037  A   portal.corp.example
17:03:22 ws-035  A   portal.corp.example
17:04:08 ws-010  A   mail.corp.example
17:04:25 ws-028  A   updates.vendor.example
17:06:25 ws-047  A   updates.vendor.example
17:06:35 ws-032  A   time.pool.example
17:08:51 ws-042  A   cdn.assets.example
17:09:59 ws-048  A   mail.corp.example
17:10:50 ws-039  A   mail.corp.example
17:11:33 ws-013  A   telemetry.vendor.example
17:12:10 ws-034  A   telemetry.vendor.example
17:12:15 ws-045  A   telemetry.vendor.example
17:16:09 ws-032  A   time.pool.example
17:20:25 ws-041  A   cdn.assets.example
17:20:47 ws-029  A   mail.corp.example
17:22:11 ws-048  A   portal.corp.example
17:22:36 ws-031  A   updates.vendor.example
17:22:59 ws-031  A   cdn.assets.example
17:24:41 ws-019  A   updates.vendor.example
17:25:09 ws-020  A   telemetry.vendor.example
17:25:28 ws-011  A   updates.vendor.example
17:26:37 ws-047  A   cdn.assets.example
17:27:22 ws-031  A   time.pool.example
17:28:08 ws-042  A   time.pool.example
17:28:21 ws-030  A   time.pool.example
17:28:42 ws-020  A   portal.corp.example
17:29:55 ws-027  A   mail.corp.example
17:30:03 ws-038  A   portal.corp.example
17:31:10 ws-047  A   telemetry.vendor.example
17:32:20 ws-040  A   telemetry.vendor.example
17:33:55 ws-020  A   mail.corp.example
17:33:57 ws-028  A   updates.vendor.example
17:35:09 ws-014  A   telemetry.vendor.example
17:35:12 ws-024  A   time.pool.example
17:35:14 ws-034  A   portal.corp.example
17:35:25 ws-015  A   time.pool.example
17:38:09 ws-029  A   time.pool.example
17:38:31 ws-030  A   updates.vendor.example
17:42:44 ws-033  A   portal.corp.example
17:42:52 ws-034  A   cdn.assets.example
17:43:22 ws-021  A   updates.vendor.example
17:43:49 ws-045  A   cdn.assets.example
17:45:59 ws-025  A   mail.corp.example
17:47:03 ws-015  A   portal.corp.example
17:48:59 ws-015  A   mail.corp.example
17:49:33 ws-038  A   updates.vendor.example
17:49:35 ws-030  A   time.pool.example
17:49:42 ws-040  A   portal.corp.example
17:50:36 ws-031  A   cdn.assets.example
17:51:08 ws-035  A   mail.corp.example
17:51:43 ws-034  A   time.pool.example
17:52:29 ws-013  A   updates.vendor.example
17:53:07 ws-021  A   updates.vendor.example
17:56:07 ws-039  A   updates.vendor.example
17:57:36 ws-011  A   updates.vendor.example
17:58:13 ws-040  A   updates.vendor.example
Hint
Sort by hostname and count. Read the bottom of the list, not the top.