Azure
/
Azure-Sentinel
зеркало из
1
0
Форкнуть 0
Код Задачи Пакеты Проекты Релизы Вики Активность

Merge pull request #3327 from sschuur/InfobloxCDC-Oct 

Update Infoblox CDC
This commit is contained in:
v-jayakal 2021-12-13 00:34:34 -08:00 коммит произвёл GitHub
Родитель d6fa8fd66d 8ba290c263
Коммит 08d29f7fcf
Не найден ключ, соответствующий данной подписи
Идентификатор ключа GPG: 4AEE18F83AFDEB23
13 изменённых файлов: 7409 добавлений и 4390 удалений
Показать статистику Скачать Patch файл Скачать Diff файл Показать все файлы Свернуть все файлы

37
.script/tests/KqlvalidationsTests/CustomTables/InfobloxCDC.json Normal file
Просмотреть файл

@ -0,0 +1,37 @@
{
"Name": "InfobloxCDC",
"Properties": [
{
"Name": "TimeGenerated",
"Type": "DateTime"
},
{
"Name": "DeviceEventClassID",
"Type": "String"
},
{
"Name": "ThreatLevel_Score",
"Type": "Int"
},
{
"Name": "InfobloxB1PolicyAction",
"Type": "String"
},
{
"Name": "SimplifiedDeviceAction",
"Type": "String"
},
{
"Name": "SourceIP",
"Type": "String"
},
{
"Name": "DeviceName",
"Type": "String"
},
{
"Name": "InfobloxDNSRCode",
"Type": "String"
}
]
}

430
Sample Data/CEF/InfobloxCloudDataConnector-sampledata.csv
Просмотреть файл

@ -1,322 +1,108 @@
TenantId,SourceSystem,TimeGenerated [UTC],ReceiptTime,DeviceVendor,DeviceProduct,DeviceEventClassID,LogSeverity,OriginalLogSeverity,DeviceAction,SimplifiedDeviceAction,DestinationIP,Message,Protocol,SourcePort,SourceIP,DeviceVersion,Activity,ApplicationProtocol,DestinationDnsDomain,AdditionalExtensions,Type
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 10:41:29.593 PM",,Infoblox,Data Connector,RPZ-QNAME-REDIRECT,0,,REDIRECT,REDIRECT,,"""RPZ QNAME REDIRECT rewrite amazon.com. [A] via CAT_Online Shopping.amazon.com.""",,49835,208.50.179.13,2.1.3,RPZ EVENT QNAME REDIRECT,DNS,amazon.com.,InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=CAT_Online Shopping.amazon.com.;InfobloxRPZ=CAT_Online Shopping;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=Online Shopping;InfobloxThreatProperty=;InfobloxThreatConfidence=;InfobloxThreatLevel=,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 10:41:44.408 PM",,Infoblox,Data Connector,RPZ-QNAME-REDIRECT,0,,REDIRECT,REDIRECT,,"""RPZ QNAME REDIRECT rewrite connectivity.office.com. [A] via CAT_Personal Pages.connectivity.office.com.""",,47868,208.50.179.13,2.1.3,RPZ EVENT QNAME REDIRECT,DNS,connectivity.office.com.,InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=CAT_Personal Pages.connectivity.office.com.;InfobloxRPZ=CAT_Personal Pages;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=Personal Pages;InfobloxThreatProperty=;InfobloxThreatConfidence=;InfobloxThreatLevel=,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 10:41:46.222 PM",,Infoblox,Data Connector,RPZ-QNAME-REDIRECT,0,,REDIRECT,REDIRECT,,"""RPZ QNAME REDIRECT rewrite connectivity.office.com. [A] via CAT_Personal Pages.connectivity.office.com.""",,49835,208.50.179.13,2.1.3,RPZ EVENT QNAME REDIRECT,DNS,connectivity.office.com.,InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=CAT_Personal Pages.connectivity.office.com.;InfobloxRPZ=CAT_Personal Pages;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=Personal Pages;InfobloxThreatProperty=;InfobloxThreatConfidence=;InfobloxThreatLevel=,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 10:41:37.435 PM",,Infoblox,Data Connector,RPZ-QNAME-REDIRECT,0,,REDIRECT,REDIRECT,,"""RPZ QNAME REDIRECT rewrite facebook.com. [A] via CAT_Social Networking.facebook.com.""",,47868,208.50.179.13,2.1.3,RPZ EVENT QNAME REDIRECT,DNS,facebook.com.,InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=CAT_Social Networking.facebook.com.;InfobloxRPZ=CAT_Social Networking;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=Social Networking;InfobloxThreatProperty=;InfobloxThreatConfidence=;InfobloxThreatLevel=,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 10:41:38.519 PM",,Infoblox,Data Connector,RPZ-QNAME-REDIRECT,0,,REDIRECT,REDIRECT,,"""RPZ QNAME REDIRECT rewrite facebook.com. [A] via CAT_Social Networking.facebook.com.""",,49835,208.50.179.13,2.1.3,RPZ EVENT QNAME REDIRECT,DNS,facebook.com.,InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=CAT_Social Networking.facebook.com.;InfobloxRPZ=CAT_Social Networking;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=Social Networking;InfobloxThreatProperty=;InfobloxThreatConfidence=;InfobloxThreatLevel=,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:45:03.791 PM",,Infoblox,Data Connector,RPZ-QNAME-REDIRECT,0,,REDIRECT,REDIRECT,,"""RPZ QNAME REDIRECT rewrite netflix.com. [A] via CAT_Entertainment.netflix.com.""",,10893,208.50.179.13,2.1.3,RPZ EVENT QNAME REDIRECT,DNS,netflix.com.,InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=CAT_Entertainment.netflix.com.;InfobloxRPZ=CAT_Entertainment;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=Entertainment;InfobloxThreatProperty=;InfobloxThreatConfidence=;InfobloxThreatLevel=,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:45:03.791 PM",,Infoblox,Data Connector,RPZ-QNAME-REDIRECT,0,,REDIRECT,REDIRECT,,"""RPZ QNAME REDIRECT rewrite netflix.com. [A] via CAT_Entertainment.netflix.com.""",,36196,208.50.179.13,2.1.3,RPZ EVENT QNAME REDIRECT,DNS,netflix.com.,InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=CAT_Entertainment.netflix.com.;InfobloxRPZ=CAT_Entertainment;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=Entertainment;InfobloxThreatProperty=;InfobloxThreatConfidence=;InfobloxThreatLevel=,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:48:44.899 PM",,Infoblox,Data Connector,RPZ-QNAME-REDIRECT,0,,REDIRECT,REDIRECT,,"""RPZ QNAME REDIRECT rewrite vodka.com. [A] via CAT_Alcohol.vodka.com.""",,23916,208.50.179.13,2.1.3,RPZ EVENT QNAME REDIRECT,DNS,vodka.com.,InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=CAT_Alcohol.vodka.com.;InfobloxRPZ=CAT_Alcohol;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=Alcohol;InfobloxThreatProperty=;InfobloxThreatConfidence=;InfobloxThreatLevel=,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:48:49.601 PM",,Infoblox,Data Connector,RPZ-QNAME-REDIRECT,0,,REDIRECT,REDIRECT,,"""RPZ QNAME REDIRECT rewrite vodka.com. [A] via CAT_Alcohol.vodka.com.""",,40544,208.50.179.13,2.1.3,RPZ EVENT QNAME REDIRECT,DNS,vodka.com.,InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=CAT_Alcohol.vodka.com.;InfobloxRPZ=CAT_Alcohol;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=Alcohol;InfobloxThreatProperty=;InfobloxThreatConfidence=;InfobloxThreatLevel=,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:48:55.783 PM",,Infoblox,Data Connector,RPZ-QNAME-REDIRECT,0,,REDIRECT,REDIRECT,,"""RPZ QNAME REDIRECT rewrite vodka.com. [A] via CAT_Alcohol.vodka.com.""",,40544,208.50.179.13,2.1.3,RPZ EVENT QNAME REDIRECT,DNS,vodka.com.,InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=CAT_Alcohol.vodka.com.;InfobloxRPZ=CAT_Alcohol;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=Alcohol;InfobloxThreatProperty=;InfobloxThreatConfidence=;InfobloxThreatLevel=,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:48:44.899 PM",,Infoblox,Data Connector,RPZ-QNAME-REDIRECT,0,,REDIRECT,REDIRECT,,"""RPZ QNAME REDIRECT rewrite wine.com. [A] via CAT_Alcohol.wine.com.""",,23916,208.50.179.13,2.1.3,RPZ EVENT QNAME REDIRECT,DNS,wine.com.,InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=CAT_Alcohol.wine.com.;InfobloxRPZ=CAT_Alcohol;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=Alcohol;InfobloxThreatProperty=;InfobloxThreatConfidence=;InfobloxThreatLevel=,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:51:40.459 PM",,Infoblox,Data Connector,RPZ-QNAME-REDIRECT,0,,REDIRECT,REDIRECT,,"""RPZ QNAME REDIRECT rewrite youtube.com. [A] via CAT_Media Sharing.youtube.com.""",,11091,208.50.179.13,2.1.3,RPZ EVENT QNAME REDIRECT,DNS,youtube.com.,InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=CAT_Media Sharing.youtube.com.;InfobloxRPZ=CAT_Media Sharing;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=Media Sharing;InfobloxThreatProperty=;InfobloxThreatConfidence=;InfobloxThreatLevel=,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:51:46.963 PM",,Infoblox,Data Connector,RPZ-QNAME-REDIRECT,0,,REDIRECT,REDIRECT,,"""RPZ QNAME REDIRECT rewrite youtube.com. [A] via CAT_Media Sharing.youtube.com.""",,26823,208.50.179.13,2.1.3,RPZ EVENT QNAME REDIRECT,DNS,youtube.com.,InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=CAT_Media Sharing.youtube.com.;InfobloxRPZ=CAT_Media Sharing;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=Media Sharing;InfobloxThreatProperty=;InfobloxThreatConfidence=;InfobloxThreatLevel=,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:34:33.764 PM",,Infoblox,Data Connector,RPZ-QNAME-NXDOMAIN,8,,NXDOMAIN,NXDOMAIN,,"""RPZ QNAME NXDOMAIN rewrite www.domowaplaza.pl. [A] via ext-base-antimalware.www.domowaplaza.pl.""",,60161,208.50.179.13,2.1.3,RPZ EVENT QNAME NXDOMAIN,DNS,www.domowaplaza.pl.,InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=ext-base-antimalware.www.domowaplaza.pl.;InfobloxRPZ=ext-base-antimalware;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=Phishing_Generic;InfobloxThreatConfidence=80;InfobloxThreatLevel=80,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:28:32.165 PM",,Infoblox,Data Connector,RPZ-QNAME-NXDOMAIN,8,,NXDOMAIN,NXDOMAIN,,"""RPZ QNAME NXDOMAIN rewrite www.domowaplaza.pl. [A] via ext-base-antimalware.www.domowaplaza.pl.""",,33227,208.50.179.13,2.1.3,RPZ EVENT QNAME NXDOMAIN,DNS,www.domowaplaza.pl.,InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=ext-base-antimalware.www.domowaplaza.pl.;InfobloxRPZ=ext-base-antimalware;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=Phishing_Generic;InfobloxThreatConfidence=80;InfobloxThreatLevel=80,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:28:05.764 PM",,Infoblox,Data Connector,RPZ-QNAME-NXDOMAIN,8,,NXDOMAIN,NXDOMAIN,,"""RPZ QNAME NXDOMAIN rewrite www.domowaplaza.pl. [A] via ext-base-antimalware.www.domowaplaza.pl.""",,5915,208.50.179.13,2.1.3,RPZ EVENT QNAME NXDOMAIN,DNS,www.domowaplaza.pl.,InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=ext-base-antimalware.www.domowaplaza.pl.;InfobloxRPZ=ext-base-antimalware;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=Phishing_Generic;InfobloxThreatConfidence=80;InfobloxThreatLevel=80,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:29:34.748 PM",,Infoblox,Data Connector,RPZ-QNAME-NXDOMAIN,8,,NXDOMAIN,NXDOMAIN,,"""RPZ QNAME NXDOMAIN rewrite www.domowaplaza.pl. [A] via ext-base-antimalware.www.domowaplaza.pl.""",,22575,208.50.179.13,2.1.3,RPZ EVENT QNAME NXDOMAIN,DNS,www.domowaplaza.pl.,InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=ext-base-antimalware.www.domowaplaza.pl.;InfobloxRPZ=ext-base-antimalware;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=Phishing_Generic;InfobloxThreatConfidence=80;InfobloxThreatLevel=80,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:27:58.324 PM",,Infoblox,Data Connector,RPZ-QNAME-NXDOMAIN,8,,NXDOMAIN,NXDOMAIN,,"""RPZ QNAME NXDOMAIN rewrite www.domowaplaza.pl. [A] via ext-base-antimalware.www.domowaplaza.pl.""",,29413,208.50.179.13,2.1.3,RPZ EVENT QNAME NXDOMAIN,DNS,www.domowaplaza.pl.,InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=ext-base-antimalware.www.domowaplaza.pl.;InfobloxRPZ=ext-base-antimalware;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=Phishing_Generic;InfobloxThreatConfidence=80;InfobloxThreatLevel=80,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:28:01.795 PM",,Infoblox,Data Connector,RPZ-QNAME-NXDOMAIN,8,,NXDOMAIN,NXDOMAIN,,"""RPZ QNAME NXDOMAIN rewrite www.domowaplaza.pl. [A] via ext-base-antimalware.www.domowaplaza.pl.""",,1974,208.50.179.13,2.1.3,RPZ EVENT QNAME NXDOMAIN,DNS,www.domowaplaza.pl.,InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=ext-base-antimalware.www.domowaplaza.pl.;InfobloxRPZ=ext-base-antimalware;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=Phishing_Generic;InfobloxThreatConfidence=80;InfobloxThreatLevel=80,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:34:33.735 PM",,Infoblox,Data Connector,RPZ-QNAME-NXDOMAIN,8,,NXDOMAIN,NXDOMAIN,,"""RPZ QNAME NXDOMAIN rewrite www.domowaplaza.pl. [A] via ext-base-antimalware.www.domowaplaza.pl.""",,60161,208.50.179.13,2.1.3,RPZ EVENT QNAME NXDOMAIN,DNS,www.domowaplaza.pl.,InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=ext-base-antimalware.www.domowaplaza.pl.;InfobloxRPZ=ext-base-antimalware;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=Phishing_Generic;InfobloxThreatConfidence=80;InfobloxThreatLevel=80,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:28:33.700 PM",,Infoblox,Data Connector,RPZ-QNAME-NXDOMAIN,8,,NXDOMAIN,NXDOMAIN,,"""RPZ QNAME NXDOMAIN rewrite www.domowaplaza.pl. [A] via ext-base-antimalware.www.domowaplaza.pl.""",,12830,208.50.179.13,2.1.3,RPZ EVENT QNAME NXDOMAIN,DNS,www.domowaplaza.pl.,InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=ext-base-antimalware.www.domowaplaza.pl.;InfobloxRPZ=ext-base-antimalware;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=Phishing_Generic;InfobloxThreatConfidence=80;InfobloxThreatLevel=80,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:28:05.764 PM",,Infoblox,Data Connector,RPZ-QNAME-NXDOMAIN,8,,NXDOMAIN,NXDOMAIN,,"""RPZ QNAME NXDOMAIN rewrite www.domowaplaza.pl. [A] via ext-base-antimalware.www.domowaplaza.pl.""",,1974,208.50.179.13,2.1.3,RPZ EVENT QNAME NXDOMAIN,DNS,www.domowaplaza.pl.,InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=ext-base-antimalware.www.domowaplaza.pl.;InfobloxRPZ=ext-base-antimalware;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=Phishing_Generic;InfobloxThreatConfidence=80;InfobloxThreatLevel=80,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:29:31.879 PM",,Infoblox,Data Connector,RPZ-QNAME-NXDOMAIN,8,,NXDOMAIN,NXDOMAIN,,"""RPZ QNAME NXDOMAIN rewrite www.domowaplaza.pl. [A] via ext-base-antimalware.www.domowaplaza.pl.""",,46048,208.50.179.13,2.1.3,RPZ EVENT QNAME NXDOMAIN,DNS,www.domowaplaza.pl.,InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=ext-base-antimalware.www.domowaplaza.pl.;InfobloxRPZ=ext-base-antimalware;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=Phishing_Generic;InfobloxThreatConfidence=80;InfobloxThreatLevel=80,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:34:37.401 PM",,Infoblox,Data Connector,RPZ-QNAME-NXDOMAIN,8,,NXDOMAIN,NXDOMAIN,,"""RPZ QNAME NXDOMAIN rewrite www.domowaplaza.pl. [A] via ext-base-antimalware.www.domowaplaza.pl.""",,50087,208.50.179.13,2.1.3,RPZ EVENT QNAME NXDOMAIN,DNS,www.domowaplaza.pl.,InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=ext-base-antimalware.www.domowaplaza.pl.;InfobloxRPZ=ext-base-antimalware;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=Phishing_Generic;InfobloxThreatConfidence=80;InfobloxThreatLevel=80,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:27:56.843 PM",,Infoblox,Data Connector,RPZ-QNAME-NXDOMAIN,8,,NXDOMAIN,NXDOMAIN,,"""RPZ QNAME NXDOMAIN rewrite www.domowaplaza.pl. [A] via ext-base-antimalware.www.domowaplaza.pl.""",,5915,208.50.179.13,2.1.3,RPZ EVENT QNAME NXDOMAIN,DNS,www.domowaplaza.pl.,InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=ext-base-antimalware.www.domowaplaza.pl.;InfobloxRPZ=ext-base-antimalware;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=Phishing_Generic;InfobloxThreatConfidence=80;InfobloxThreatLevel=80,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:27:57.703 PM",,Infoblox,Data Connector,RPZ-QNAME-NXDOMAIN,8,,NXDOMAIN,NXDOMAIN,,"""RPZ QNAME NXDOMAIN rewrite www.domowaplaza.pl. [A] via ext-base-antimalware.www.domowaplaza.pl.""",,4847,208.50.179.13,2.1.3,RPZ EVENT QNAME NXDOMAIN,DNS,www.domowaplaza.pl.,InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=ext-base-antimalware.www.domowaplaza.pl.;InfobloxRPZ=ext-base-antimalware;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=Phishing_Generic;InfobloxThreatConfidence=80;InfobloxThreatLevel=80,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:00:00.703 PM",,Infoblox,Data Connector,RPZ-QNAME-NXDOMAIN,8,,NXDOMAIN,NXDOMAIN,,"""RPZ QNAME NXDOMAIN rewrite walla.link. [A] via base.walla.link.""",,10437,208.50.179.13,2.1.3,RPZ EVENT QNAME NXDOMAIN,DNS,walla.link.,InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=base.walla.link.;InfobloxRPZ=base;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=APT_MalwareC2;InfobloxThreatConfidence=;InfobloxThreatLevel=100,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:00:04.531 PM",,Infoblox,Data Connector,RPZ-QNAME-NXDOMAIN,8,,NXDOMAIN,NXDOMAIN,,"""RPZ QNAME NXDOMAIN rewrite walla.link. [A] via base.walla.link.""",,33946,208.50.179.13,2.1.3,RPZ EVENT QNAME NXDOMAIN,DNS,walla.link.,InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=base.walla.link.;InfobloxRPZ=base;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=APT_MalwareC2;InfobloxThreatConfidence=;InfobloxThreatLevel=100,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:00:31.433 PM",,Infoblox,Data Connector,RPZ-QNAME-NXDOMAIN,8,,NXDOMAIN,NXDOMAIN,,"""RPZ QNAME NXDOMAIN rewrite walla.link. [A] via base.walla.link.""",,16228,208.50.179.13,2.1.3,RPZ EVENT QNAME NXDOMAIN,DNS,walla.link.,InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=base.walla.link.;InfobloxRPZ=base;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=APT_MalwareC2;InfobloxThreatConfidence=;InfobloxThreatLevel=100,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:06:32.999 PM",,Infoblox,Data Connector,RPZ-QNAME-NXDOMAIN,8,,NXDOMAIN,NXDOMAIN,,"""RPZ QNAME NXDOMAIN rewrite walla.link. [A] via base.walla.link.""",,19932,208.50.179.13,2.1.3,RPZ EVENT QNAME NXDOMAIN,DNS,walla.link.,InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=base.walla.link.;InfobloxRPZ=base;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=APT_MalwareC2;InfobloxThreatConfidence=;InfobloxThreatLevel=100,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:00:36.871 PM",,Infoblox,Data Connector,RPZ-QNAME-NXDOMAIN,8,,NXDOMAIN,NXDOMAIN,,"""RPZ QNAME NXDOMAIN rewrite walla.link. [A] via base.walla.link.""",,40398,208.50.179.13,2.1.3,RPZ EVENT QNAME NXDOMAIN,DNS,walla.link.,InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=base.walla.link.;InfobloxRPZ=base;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=APT_MalwareC2;InfobloxThreatConfidence=;InfobloxThreatLevel=100,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:01:33.754 PM",,Infoblox,Data Connector,RPZ-QNAME-NXDOMAIN,8,,NXDOMAIN,NXDOMAIN,,"""RPZ QNAME NXDOMAIN rewrite walla.link. [A] via base.walla.link.""",,12250,208.50.179.13,2.1.3,RPZ EVENT QNAME NXDOMAIN,DNS,walla.link.,InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=base.walla.link.;InfobloxRPZ=base;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=APT_MalwareC2;InfobloxThreatConfidence=;InfobloxThreatLevel=100,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:00:00.749 PM",,Infoblox,Data Connector,RPZ-QNAME-NXDOMAIN,8,,NXDOMAIN,NXDOMAIN,,"""RPZ QNAME NXDOMAIN rewrite walla.link. [A] via base.walla.link.""",,10437,208.50.179.13,2.1.3,RPZ EVENT QNAME NXDOMAIN,DNS,walla.link.,InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=base.walla.link.;InfobloxRPZ=base;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=APT_MalwareC2;InfobloxThreatConfidence=;InfobloxThreatLevel=100,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:06:32.712 PM",,Infoblox,Data Connector,RPZ-QNAME-NXDOMAIN,8,,NXDOMAIN,NXDOMAIN,,"""RPZ QNAME NXDOMAIN rewrite walla.link. [A] via base.walla.link.""",,52859,208.50.179.13,2.1.3,RPZ EVENT QNAME NXDOMAIN,DNS,walla.link.,InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=base.walla.link.;InfobloxRPZ=base;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=APT_MalwareC2;InfobloxThreatConfidence=;InfobloxThreatLevel=100,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:01:36.336 PM",,Infoblox,Data Connector,RPZ-QNAME-NXDOMAIN,8,,NXDOMAIN,NXDOMAIN,,"""RPZ QNAME NXDOMAIN rewrite walla.link. [A] via base.walla.link.""",,39215,208.50.179.13,2.1.3,RPZ EVENT QNAME NXDOMAIN,DNS,walla.link.,InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=base.walla.link.;InfobloxRPZ=base;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=APT_MalwareC2;InfobloxThreatConfidence=;InfobloxThreatLevel=100,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:00:36.898 PM",,Infoblox,Data Connector,RPZ-QNAME-NXDOMAIN,8,,NXDOMAIN,NXDOMAIN,,"""RPZ QNAME NXDOMAIN rewrite walla.link. [A] via base.walla.link.""",,40398,208.50.179.13,2.1.3,RPZ EVENT QNAME NXDOMAIN,DNS,walla.link.,InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=base.walla.link.;InfobloxRPZ=base;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=APT_MalwareC2;InfobloxThreatConfidence=;InfobloxThreatLevel=100,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 10:59:57.510 PM",,Infoblox,Data Connector,RPZ-QNAME-NXDOMAIN,8,,NXDOMAIN,NXDOMAIN,,"""RPZ QNAME NXDOMAIN rewrite walla.link. [A] via base.walla.link.""",,33946,208.50.179.13,2.1.3,RPZ EVENT QNAME NXDOMAIN,DNS,walla.link.,InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=base.walla.link.;InfobloxRPZ=base;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=APT_MalwareC2;InfobloxThreatConfidence=;InfobloxThreatLevel=100,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:27:17.545 PM",,Infoblox,Data Connector,RPZ-QNAME-NXDOMAIN,8,,NXDOMAIN,NXDOMAIN,,"""RPZ QNAME NXDOMAIN rewrite ftp.windowsstores.organiccrap.com. [A] via base.ftp.windowsstores.organiccrap.com.""",,62347,208.50.179.13,2.1.3,RPZ EVENT QNAME NXDOMAIN,DNS,ftp.windowsstores.organiccrap.com.,InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=base.ftp.windowsstores.organiccrap.com.;InfobloxRPZ=base;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=APT_MalwareC2;InfobloxThreatConfidence=;InfobloxThreatLevel=100,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:27:17.545 PM",,Infoblox,Data Connector,RPZ-QNAME-NXDOMAIN,8,,NXDOMAIN,NXDOMAIN,,"""RPZ QNAME NXDOMAIN rewrite ftp.windowsstores.organiccrap.com. [A] via base.ftp.windowsstores.organiccrap.com.""",,20911,208.50.179.13,2.1.3,RPZ EVENT QNAME NXDOMAIN,DNS,ftp.windowsstores.organiccrap.com.,InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=base.ftp.windowsstores.organiccrap.com.;InfobloxRPZ=base;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=APT_MalwareC2;InfobloxThreatConfidence=;InfobloxThreatLevel=100,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:27:21.192 PM",,Infoblox,Data Connector,RPZ-QNAME-NXDOMAIN,8,,NXDOMAIN,NXDOMAIN,,"""RPZ QNAME NXDOMAIN rewrite ftp.windowsstores.organiccrap.com. [A] via base.ftp.windowsstores.organiccrap.com.""",,11356,208.50.179.13,2.1.3,RPZ EVENT QNAME NXDOMAIN,DNS,ftp.windowsstores.organiccrap.com.,InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=base.ftp.windowsstores.organiccrap.com.;InfobloxRPZ=base;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=APT_MalwareC2;InfobloxThreatConfidence=;InfobloxThreatLevel=100,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 10:57:25.060 PM",,Infoblox,Data Connector,RPZ-QNAME-REDIRECT,8,,REDIRECT,REDIRECT,,"""RPZ QNAME REDIRECT rewrite example.com. [A] via LIST_658153.example.com.""",,39956,208.50.179.13,2.1.3,RPZ EVENT QNAME REDIRECT,DNS,example.com.,InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_658153.example.com.;InfobloxRPZ=LIST_658153;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=90;InfobloxThreatLevel=90,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 10:57:21.002 PM",,Infoblox,Data Connector,RPZ-QNAME-REDIRECT,8,,REDIRECT,REDIRECT,,"""RPZ QNAME REDIRECT rewrite example.com. [A] via LIST_658153.example.com.""",,15089,208.50.179.13,2.1.3,RPZ EVENT QNAME REDIRECT,DNS,example.com.,InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_658153.example.com.;InfobloxRPZ=LIST_658153;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=90;InfobloxThreatLevel=90,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 10:55:39.475 PM",,Infoblox,Data Connector,RPZ-QNAME-REDIRECT,1,,REDIRECT,REDIRECT,,"""RPZ QNAME REDIRECT rewrite example.com. [A] via LIST_658153.example.com.""",,22336,208.50.179.13,2.1.3,RPZ EVENT QNAME REDIRECT,DNS,example.com.,InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_658153.example.com.;InfobloxRPZ=LIST_658153;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=10,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 10:37:24.052 PM",,Infoblox,Data Connector,RPZ-QNAME-REDIRECT,5,,REDIRECT,REDIRECT,,"""RPZ QNAME REDIRECT rewrite example.com. [A] via LIST_658153.example.com.""",,58096,208.50.179.13,2.1.3,RPZ EVENT QNAME REDIRECT,DNS,example.com.,InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_658153.example.com.;InfobloxRPZ=LIST_658153;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=90;InfobloxThreatLevel=50,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 10:51:26.375 PM",,Infoblox,Data Connector,RPZ-QNAME-REDIRECT,1,,REDIRECT,REDIRECT,,"""RPZ QNAME REDIRECT rewrite example.com. [A] via LIST_658153.example.com.""",,28269,208.50.179.13,2.1.3,RPZ EVENT QNAME REDIRECT,DNS,example.com.,InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_658153.example.com.;InfobloxRPZ=LIST_658153;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=10;InfobloxThreatLevel=0,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 10:55:40.937 PM",,Infoblox,Data Connector,RPZ-QNAME-REDIRECT,1,,REDIRECT,REDIRECT,,"""RPZ QNAME REDIRECT rewrite example.com. [A] via LIST_658153.example.com.""",,62129,208.50.179.13,2.1.3,RPZ EVENT QNAME REDIRECT,DNS,example.com.,InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_658153.example.com.;InfobloxRPZ=LIST_658153;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=10,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:27:32.719 PM",,Infoblox,Data Connector,RPZ-QNAME-NXDOMAIN,8,,NXDOMAIN,NXDOMAIN,,"""RPZ QNAME NXDOMAIN rewrite daddy.gostudyantivirus.com. [A] via base.daddy.gostudyantivirus.com.""",,10205,208.50.179.13,2.1.3,RPZ EVENT QNAME NXDOMAIN,DNS,daddy.gostudyantivirus.com.,InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=base.daddy.gostudyantivirus.com.;InfobloxRPZ=base;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=APT_MalwareC2;InfobloxThreatConfidence=;InfobloxThreatLevel=100,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:27:45.134 PM",,Infoblox,Data Connector,RPZ-QNAME-NXDOMAIN,8,,NXDOMAIN,NXDOMAIN,,"""RPZ QNAME NXDOMAIN rewrite daddy.gostudyantivirus.com. [A] via base.daddy.gostudyantivirus.com.""",,7992,208.50.179.13,2.1.3,RPZ EVENT QNAME NXDOMAIN,DNS,daddy.gostudyantivirus.com.,InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=base.daddy.gostudyantivirus.com.;InfobloxRPZ=base;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=APT_MalwareC2;InfobloxThreatConfidence=;InfobloxThreatLevel=100,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:27:35.579 PM",,Infoblox,Data Connector,RPZ-QNAME-NXDOMAIN,8,,NXDOMAIN,NXDOMAIN,,"""RPZ QNAME NXDOMAIN rewrite daddy.gostudyantivirus.com. [A] via base.daddy.gostudyantivirus.com.""",,7992,208.50.179.13,2.1.3,RPZ EVENT QNAME NXDOMAIN,DNS,daddy.gostudyantivirus.com.,InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=base.daddy.gostudyantivirus.com.;InfobloxRPZ=base;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=APT_MalwareC2;InfobloxThreatConfidence=;InfobloxThreatLevel=100,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:27:41.751 PM",,Infoblox,Data Connector,RPZ-QNAME-NXDOMAIN,8,,NXDOMAIN,NXDOMAIN,,"""RPZ QNAME NXDOMAIN rewrite daddy.gostudyantivirus.com. [A] via base.daddy.gostudyantivirus.com.""",,10205,208.50.179.13,2.1.3,RPZ EVENT QNAME NXDOMAIN,DNS,daddy.gostudyantivirus.com.,InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=base.daddy.gostudyantivirus.com.;InfobloxRPZ=base;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=APT_MalwareC2;InfobloxThreatConfidence=;InfobloxThreatLevel=100,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:42:01.840 PM",,Infoblox,Data Connector,RPZ-QNAME-NXDOMAIN,8,,NXDOMAIN,NXDOMAIN,,"""RPZ QNAME NXDOMAIN rewrite 796f7572205765622050726f787920697320657866696c74726174.937.zcmt50.hex.acaddff5e4.leeandco.net. [A] via LIST_541993.796f7572205765622050726f787920697320657866696c74726174.937.zcmt50.hex.acaddff5e4.leeandco.net.""",,7987,208.50.179.13,2.1.3,RPZ EVENT QNAME NXDOMAIN,DNS,796f7572205765622050726f787920697320657866696c74726174.937.zcmt50.hex.acaddff5e4.leeandco.net.,InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_541993.796f7572205765622050726f787920697320657866696c74726174.937.zcmt50.hex.acaddff5e4.leeandco.net.;InfobloxRPZ=LIST_541993;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=90,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:21:37.793 PM",,Infoblox,Data Connector,RPZ-QNAME-NXDOMAIN,8,,NXDOMAIN,NXDOMAIN,,"""RPZ QNAME NXDOMAIN rewrite 796f7572205765622050726f787920697320657866696c74726174.937.ymil00.hex.acaddff5e4.leeandco.net. [A] via LIST_541993.796f7572205765622050726f787920697320657866696c74726174.937.ymil00.hex.acaddff5e4.leeandco.net.""",,50593,208.50.179.13,2.1.3,RPZ EVENT QNAME NXDOMAIN,DNS,796f7572205765622050726f787920697320657866696c74726174.937.ymil00.hex.acaddff5e4.leeandco.net.,InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_541993.796f7572205765622050726f787920697320657866696c74726174.937.ymil00.hex.acaddff5e4.leeandco.net.;InfobloxRPZ=LIST_541993;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=90,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:41:51.880 PM",,Infoblox,Data Connector,RPZ-QNAME-NXDOMAIN,8,,NXDOMAIN,NXDOMAIN,,"""RPZ QNAME NXDOMAIN rewrite 796f7572205765622050726f787920697320657866696c74726174.840.zcmt50.hex.acaddff5e4.leeandco.net. [A] via LIST_541993.796f7572205765622050726f787920697320657866696c74726174.840.zcmt50.hex.acaddff5e4.leeandco.net.""",,56540,208.50.179.13,2.1.3,RPZ EVENT QNAME NXDOMAIN,DNS,796f7572205765622050726f787920697320657866696c74726174.840.zcmt50.hex.acaddff5e4.leeandco.net.,InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_541993.796f7572205765622050726f787920697320657866696c74726174.840.zcmt50.hex.acaddff5e4.leeandco.net.;InfobloxRPZ=LIST_541993;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=90,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:21:30.175 PM",,Infoblox,Data Connector,RPZ-QNAME-NXDOMAIN,8,,NXDOMAIN,NXDOMAIN,,"""RPZ QNAME NXDOMAIN rewrite 796f7572205765622050726f787920697320657866696c74726174.840.ymil00.hex.acaddff5e4.leeandco.net. [A] via LIST_541993.796f7572205765622050726f787920697320657866696c74726174.840.ymil00.hex.acaddff5e4.leeandco.net.""",,50593,208.50.179.13,2.1.3,RPZ EVENT QNAME NXDOMAIN,DNS,796f7572205765622050726f787920697320657866696c74726174.840.ymil00.hex.acaddff5e4.leeandco.net.,InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_541993.796f7572205765622050726f787920697320657866696c74726174.840.ymil00.hex.acaddff5e4.leeandco.net.;InfobloxRPZ=LIST_541993;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=90,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:41:24.046 PM",,Infoblox,Data Connector,RPZ-QNAME-NXDOMAIN,8,,NXDOMAIN,NXDOMAIN,,"""RPZ QNAME NXDOMAIN rewrite 796f7572205765622050726f787920697320657866696c74726174.743.zcmt50.hex.acaddff5e4.leeandco.net. [A] via LIST_541993.796f7572205765622050726f787920697320657866696c74726174.743.zcmt50.hex.acaddff5e4.leeandco.net.""",,56540,208.50.179.13,2.1.3,RPZ EVENT QNAME NXDOMAIN,DNS,796f7572205765622050726f787920697320657866696c74726174.743.zcmt50.hex.acaddff5e4.leeandco.net.,InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_541993.796f7572205765622050726f787920697320657866696c74726174.743.zcmt50.hex.acaddff5e4.leeandco.net.;InfobloxRPZ=LIST_541993;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=90,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:21:22.607 PM",,Infoblox,Data Connector,RPZ-QNAME-NXDOMAIN,8,,NXDOMAIN,NXDOMAIN,,"""RPZ QNAME NXDOMAIN rewrite 796f7572205765622050726f787920697320657866696c74726174.743.ymil00.hex.acaddff5e4.leeandco.net. [A] via LIST_541993.796f7572205765622050726f787920697320657866696c74726174.743.ymil00.hex.acaddff5e4.leeandco.net.""",,50593,208.50.179.13,2.1.3,RPZ EVENT QNAME NXDOMAIN,DNS,796f7572205765622050726f787920697320657866696c74726174.743.ymil00.hex.acaddff5e4.leeandco.net.,InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_541993.796f7572205765622050726f787920697320657866696c74726174.743.ymil00.hex.acaddff5e4.leeandco.net.;InfobloxRPZ=LIST_541993;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=90,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:41:27.050 PM",,Infoblox,Data Connector,RPZ-QNAME-NXDOMAIN,8,,NXDOMAIN,NXDOMAIN,,"""RPZ QNAME NXDOMAIN rewrite 796f7572205765622050726f787920697320657866696c74726174.646.zcmt50.hex.acaddff5e4.leeandco.net. [A] via LIST_541993.796f7572205765622050726f787920697320657866696c74726174.646.zcmt50.hex.acaddff5e4.leeandco.net.""",,46369,208.50.179.13,2.1.3,RPZ EVENT QNAME NXDOMAIN,DNS,796f7572205765622050726f787920697320657866696c74726174.646.zcmt50.hex.acaddff5e4.leeandco.net.,InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_541993.796f7572205765622050726f787920697320657866696c74726174.646.zcmt50.hex.acaddff5e4.leeandco.net.;InfobloxRPZ=LIST_541993;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=90,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:21:07.637 PM",,Infoblox,Data Connector,RPZ-QNAME-NXDOMAIN,8,,NXDOMAIN,NXDOMAIN,,"""RPZ QNAME NXDOMAIN rewrite 796f7572205765622050726f787920697320657866696c74726174.646.ymil00.hex.acaddff5e4.leeandco.net. [A] via LIST_541993.796f7572205765622050726f787920697320657866696c74726174.646.ymil00.hex.acaddff5e4.leeandco.net.""",,50593,208.50.179.13,2.1.3,RPZ EVENT QNAME NXDOMAIN,DNS,796f7572205765622050726f787920697320657866696c74726174.646.ymil00.hex.acaddff5e4.leeandco.net.,InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_541993.796f7572205765622050726f787920697320657866696c74726174.646.ymil00.hex.acaddff5e4.leeandco.net.;InfobloxRPZ=LIST_541993;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=90,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:41:09.308 PM",,Infoblox,Data Connector,RPZ-QNAME-NXDOMAIN,8,,NXDOMAIN,NXDOMAIN,,"""RPZ QNAME NXDOMAIN rewrite 796f7572205765622050726f787920697320657866696c74726174.549.zcmt50.hex.acaddff5e4.leeandco.net. [A] via LIST_541993.796f7572205765622050726f787920697320657866696c74726174.549.zcmt50.hex.acaddff5e4.leeandco.net.""",,58534,208.50.179.13,2.1.3,RPZ EVENT QNAME NXDOMAIN,DNS,796f7572205765622050726f787920697320657866696c74726174.549.zcmt50.hex.acaddff5e4.leeandco.net.,InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_541993.796f7572205765622050726f787920697320657866696c74726174.549.zcmt50.hex.acaddff5e4.leeandco.net.;InfobloxRPZ=LIST_541993;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=90,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:21:00.469 PM",,Infoblox,Data Connector,RPZ-QNAME-NXDOMAIN,8,,NXDOMAIN,NXDOMAIN,,"""RPZ QNAME NXDOMAIN rewrite 796f7572205765622050726f787920697320657866696c74726174.549.ymil00.hex.acaddff5e4.leeandco.net. [A] via LIST_541993.796f7572205765622050726f787920697320657866696c74726174.549.ymil00.hex.acaddff5e4.leeandco.net.""",,50593,208.50.179.13,2.1.3,RPZ EVENT QNAME NXDOMAIN,DNS,796f7572205765622050726f787920697320657866696c74726174.549.ymil00.hex.acaddff5e4.leeandco.net.,InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_541993.796f7572205765622050726f787920697320657866696c74726174.549.ymil00.hex.acaddff5e4.leeandco.net.;InfobloxRPZ=LIST_541993;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=90,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:20:44.649 PM",,Infoblox,Data Connector,RPZ-QNAME-NXDOMAIN,8,,NXDOMAIN,NXDOMAIN,,"""RPZ QNAME NXDOMAIN rewrite 796f7572205765622050726f787920697320657866696c74726174.452.ymil00.hex.acaddff5e4.leeandco.net. [A] via LIST_541993.796f7572205765622050726f787920697320657866696c74726174.452.ymil00.hex.acaddff5e4.leeandco.net.""",,50593,208.50.179.13,2.1.3,RPZ EVENT QNAME NXDOMAIN,DNS,796f7572205765622050726f787920697320657866696c74726174.452.ymil00.hex.acaddff5e4.leeandco.net.,InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_541993.796f7572205765622050726f787920697320657866696c74726174.452.ymil00.hex.acaddff5e4.leeandco.net.;InfobloxRPZ=LIST_541993;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=90,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:20:36.902 PM",,Infoblox,Data Connector,RPZ-QNAME-NXDOMAIN,8,,NXDOMAIN,NXDOMAIN,,"""RPZ QNAME NXDOMAIN rewrite 796f7572205765622050726f787920697320657866696c74726174.355.ymil00.hex.acaddff5e4.leeandco.net. [A] via LIST_541993.796f7572205765622050726f787920697320657866696c74726174.355.ymil00.hex.acaddff5e4.leeandco.net.""",,50593,208.50.179.13,2.1.3,RPZ EVENT QNAME NXDOMAIN,DNS,796f7572205765622050726f787920697320657866696c74726174.355.ymil00.hex.acaddff5e4.leeandco.net.,InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_541993.796f7572205765622050726f787920697320657866696c74726174.355.ymil00.hex.acaddff5e4.leeandco.net.;InfobloxRPZ=LIST_541993;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=90,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:24:49.110 PM",,Infoblox,Data Connector,RPZ-QNAME-NXDOMAIN,8,,NXDOMAIN,NXDOMAIN,,"""RPZ QNAME NXDOMAIN rewrite 796f7572205765622050726f787920697320657866696c74726174.2683.ymil00.hex.acaddff5e4.leeandco.net. [A] via LIST_541993.796f7572205765622050726f787920697320657866696c74726174.2683.ymil00.hex.acaddff5e4.leeandco.net.""",,53819,208.50.179.13,2.1.3,RPZ EVENT QNAME NXDOMAIN,DNS,796f7572205765622050726f787920697320657866696c74726174.2683.ymil00.hex.acaddff5e4.leeandco.net.,InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_541993.796f7572205765622050726f787920697320657866696c74726174.2683.ymil00.hex.acaddff5e4.leeandco.net.;InfobloxRPZ=LIST_541993;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=90,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:24:40.102 PM",,Infoblox,Data Connector,RPZ-QNAME-NXDOMAIN,8,,NXDOMAIN,NXDOMAIN,,"""RPZ QNAME NXDOMAIN rewrite 796f7572205765622050726f787920697320657866696c74726174.2586.ymil00.hex.acaddff5e4.leeandco.net. [A] via LIST_541993.796f7572205765622050726f787920697320657866696c74726174.2586.ymil00.hex.acaddff5e4.leeandco.net.""",,53819,208.50.179.13,2.1.3,RPZ EVENT QNAME NXDOMAIN,DNS,796f7572205765622050726f787920697320657866696c74726174.2586.ymil00.hex.acaddff5e4.leeandco.net.,InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_541993.796f7572205765622050726f787920697320657866696c74726174.2586.ymil00.hex.acaddff5e4.leeandco.net.;InfobloxRPZ=LIST_541993;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=90,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:24:30.802 PM",,Infoblox,Data Connector,RPZ-QNAME-NXDOMAIN,8,,NXDOMAIN,NXDOMAIN,,"""RPZ QNAME NXDOMAIN rewrite 796f7572205765622050726f787920697320657866696c74726174.2489.ymil00.hex.acaddff5e4.leeandco.net. [A] via LIST_541993.796f7572205765622050726f787920697320657866696c74726174.2489.ymil00.hex.acaddff5e4.leeandco.net.""",,48394,208.50.179.13,2.1.3,RPZ EVENT QNAME NXDOMAIN,DNS,796f7572205765622050726f787920697320657866696c74726174.2489.ymil00.hex.acaddff5e4.leeandco.net.,InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_541993.796f7572205765622050726f787920697320657866696c74726174.2489.ymil00.hex.acaddff5e4.leeandco.net.;InfobloxRPZ=LIST_541993;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=90,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:24:16.825 PM",,Infoblox,Data Connector,RPZ-QNAME-NXDOMAIN,8,,NXDOMAIN,NXDOMAIN,,"""RPZ QNAME NXDOMAIN rewrite 796f7572205765622050726f787920697320657866696c74726174.2392.ymil00.hex.acaddff5e4.leeandco.net. [A] via LIST_541993.796f7572205765622050726f787920697320657866696c74726174.2392.ymil00.hex.acaddff5e4.leeandco.net.""",,31171,208.50.179.13,2.1.3,RPZ EVENT QNAME NXDOMAIN,DNS,796f7572205765622050726f787920697320657866696c74726174.2392.ymil00.hex.acaddff5e4.leeandco.net.,InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_541993.796f7572205765622050726f787920697320657866696c74726174.2392.ymil00.hex.acaddff5e4.leeandco.net.;InfobloxRPZ=LIST_541993;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=90,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:24:08.757 PM",,Infoblox,Data Connector,RPZ-QNAME-NXDOMAIN,8,,NXDOMAIN,NXDOMAIN,,"""RPZ QNAME NXDOMAIN rewrite 796f7572205765622050726f787920697320657866696c74726174.2295.ymil00.hex.acaddff5e4.leeandco.net. [A] via LIST_541993.796f7572205765622050726f787920697320657866696c74726174.2295.ymil00.hex.acaddff5e4.leeandco.net.""",,56787,208.50.179.13,2.1.3,RPZ EVENT QNAME NXDOMAIN,DNS,796f7572205765622050726f787920697320657866696c74726174.2295.ymil00.hex.acaddff5e4.leeandco.net.,InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_541993.796f7572205765622050726f787920697320657866696c74726174.2295.ymil00.hex.acaddff5e4.leeandco.net.;InfobloxRPZ=LIST_541993;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=90,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:24:00.782 PM",,Infoblox,Data Connector,RPZ-QNAME-NXDOMAIN,8,,NXDOMAIN,NXDOMAIN,,"""RPZ QNAME NXDOMAIN rewrite 796f7572205765622050726f787920697320657866696c74726174.2198.ymil00.hex.acaddff5e4.leeandco.net. [A] via LIST_541993.796f7572205765622050726f787920697320657866696c74726174.2198.ymil00.hex.acaddff5e4.leeandco.net.""",,56787,208.50.179.13,2.1.3,RPZ EVENT QNAME NXDOMAIN,DNS,796f7572205765622050726f787920697320657866696c74726174.2198.ymil00.hex.acaddff5e4.leeandco.net.,InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_541993.796f7572205765622050726f787920697320657866696c74726174.2198.ymil00.hex.acaddff5e4.leeandco.net.;InfobloxRPZ=LIST_541993;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=90,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:23:45.269 PM",,Infoblox,Data Connector,RPZ-QNAME-NXDOMAIN,8,,NXDOMAIN,NXDOMAIN,,"""RPZ QNAME NXDOMAIN rewrite 796f7572205765622050726f787920697320657866696c74726174.2101.ymil00.hex.acaddff5e4.leeandco.net. [A] via LIST_541993.796f7572205765622050726f787920697320657866696c74726174.2101.ymil00.hex.acaddff5e4.leeandco.net.""",,21179,208.50.179.13,2.1.3,RPZ EVENT QNAME NXDOMAIN,DNS,796f7572205765622050726f787920697320657866696c74726174.2101.ymil00.hex.acaddff5e4.leeandco.net.,InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_541993.796f7572205765622050726f787920697320657866696c74726174.2101.ymil00.hex.acaddff5e4.leeandco.net.;InfobloxRPZ=LIST_541993;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=90,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:23:38.015 PM",,Infoblox,Data Connector,RPZ-QNAME-NXDOMAIN,8,,NXDOMAIN,NXDOMAIN,,"""RPZ QNAME NXDOMAIN rewrite 796f7572205765622050726f787920697320657866696c74726174.2004.ymil00.hex.acaddff5e4.leeandco.net. [A] via LIST_541993.796f7572205765622050726f787920697320657866696c74726174.2004.ymil00.hex.acaddff5e4.leeandco.net.""",,21179,208.50.179.13,2.1.3,RPZ EVENT QNAME NXDOMAIN,DNS,796f7572205765622050726f787920697320657866696c74726174.2004.ymil00.hex.acaddff5e4.leeandco.net.,InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_541993.796f7572205765622050726f787920697320657866696c74726174.2004.ymil00.hex.acaddff5e4.leeandco.net.;InfobloxRPZ=LIST_541993;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=90,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:23:27.067 PM",,Infoblox,Data Connector,RPZ-QNAME-NXDOMAIN,8,,NXDOMAIN,NXDOMAIN,,"""RPZ QNAME NXDOMAIN rewrite 796f7572205765622050726f787920697320657866696c74726174.1907.ymil00.hex.acaddff5e4.leeandco.net. [A] via LIST_541993.796f7572205765622050726f787920697320657866696c74726174.1907.ymil00.hex.acaddff5e4.leeandco.net.""",,62785,208.50.179.13,2.1.3,RPZ EVENT QNAME NXDOMAIN,DNS,796f7572205765622050726f787920697320657866696c74726174.1907.ymil00.hex.acaddff5e4.leeandco.net.,InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_541993.796f7572205765622050726f787920697320657866696c74726174.1907.ymil00.hex.acaddff5e4.leeandco.net.;InfobloxRPZ=LIST_541993;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=90,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:43:36.572 PM",,Infoblox,Data Connector,RPZ-QNAME-NXDOMAIN,8,,NXDOMAIN,NXDOMAIN,,"""RPZ QNAME NXDOMAIN rewrite 796f7572205765622050726f787920697320657866696c74726174.1810.zcmt50.hex.acaddff5e4.leeandco.net. [A] via LIST_541993.796f7572205765622050726f787920697320657866696c74726174.1810.zcmt50.hex.acaddff5e4.leeandco.net.""",,20242,208.50.179.13,2.1.3,RPZ EVENT QNAME NXDOMAIN,DNS,796f7572205765622050726f787920697320657866696c74726174.1810.zcmt50.hex.acaddff5e4.leeandco.net.,InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_541993.796f7572205765622050726f787920697320657866696c74726174.1810.zcmt50.hex.acaddff5e4.leeandco.net.;InfobloxRPZ=LIST_541993;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=90,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:23:15.116 PM",,Infoblox,Data Connector,RPZ-QNAME-NXDOMAIN,8,,NXDOMAIN,NXDOMAIN,,"""RPZ QNAME NXDOMAIN rewrite 796f7572205765622050726f787920697320657866696c74726174.1810.ymil00.hex.acaddff5e4.leeandco.net. [A] via LIST_541993.796f7572205765622050726f787920697320657866696c74726174.1810.ymil00.hex.acaddff5e4.leeandco.net.""",,62785,208.50.179.13,2.1.3,RPZ EVENT QNAME NXDOMAIN,DNS,796f7572205765622050726f787920697320657866696c74726174.1810.ymil00.hex.acaddff5e4.leeandco.net.,InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_541993.796f7572205765622050726f787920697320657866696c74726174.1810.ymil00.hex.acaddff5e4.leeandco.net.;InfobloxRPZ=LIST_541993;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=90,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:43:22.339 PM",,Infoblox,Data Connector,RPZ-QNAME-NXDOMAIN,8,,NXDOMAIN,NXDOMAIN,,"""RPZ QNAME NXDOMAIN rewrite 796f7572205765622050726f787920697320657866696c74726174.1713.zcmt50.hex.acaddff5e4.leeandco.net. [A] via LIST_541993.796f7572205765622050726f787920697320657866696c74726174.1713.zcmt50.hex.acaddff5e4.leeandco.net.""",,20242,208.50.179.13,2.1.3,RPZ EVENT QNAME NXDOMAIN,DNS,796f7572205765622050726f787920697320657866696c74726174.1713.zcmt50.hex.acaddff5e4.leeandco.net.,InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_541993.796f7572205765622050726f787920697320657866696c74726174.1713.zcmt50.hex.acaddff5e4.leeandco.net.;InfobloxRPZ=LIST_541993;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=90,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:23:02.181 PM",,Infoblox,Data Connector,RPZ-QNAME-NXDOMAIN,8,,NXDOMAIN,NXDOMAIN,,"""RPZ QNAME NXDOMAIN rewrite 796f7572205765622050726f787920697320657866696c74726174.1713.ymil00.hex.acaddff5e4.leeandco.net. [A] via LIST_541993.796f7572205765622050726f787920697320657866696c74726174.1713.ymil00.hex.acaddff5e4.leeandco.net.""",,62785,208.50.179.13,2.1.3,RPZ EVENT QNAME NXDOMAIN,DNS,796f7572205765622050726f787920697320657866696c74726174.1713.ymil00.hex.acaddff5e4.leeandco.net.,InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_541993.796f7572205765622050726f787920697320657866696c74726174.1713.ymil00.hex.acaddff5e4.leeandco.net.;InfobloxRPZ=LIST_541993;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=90,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:43:12.054 PM",,Infoblox,Data Connector,RPZ-QNAME-NXDOMAIN,8,,NXDOMAIN,NXDOMAIN,,"""RPZ QNAME NXDOMAIN rewrite 796f7572205765622050726f787920697320657866696c74726174.1616.zcmt50.hex.acaddff5e4.leeandco.net. [A] via LIST_541993.796f7572205765622050726f787920697320657866696c74726174.1616.zcmt50.hex.acaddff5e4.leeandco.net.""",,36519,208.50.179.13,2.1.3,RPZ EVENT QNAME NXDOMAIN,DNS,796f7572205765622050726f787920697320657866696c74726174.1616.zcmt50.hex.acaddff5e4.leeandco.net.,InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_541993.796f7572205765622050726f787920697320657866696c74726174.1616.zcmt50.hex.acaddff5e4.leeandco.net.;InfobloxRPZ=LIST_541993;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=90,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:22:52.030 PM",,Infoblox,Data Connector,RPZ-QNAME-NXDOMAIN,8,,NXDOMAIN,NXDOMAIN,,"""RPZ QNAME NXDOMAIN rewrite 796f7572205765622050726f787920697320657866696c74726174.1616.ymil00.hex.acaddff5e4.leeandco.net. [A] via LIST_541993.796f7572205765622050726f787920697320657866696c74726174.1616.ymil00.hex.acaddff5e4.leeandco.net.""",,62785,208.50.179.13,2.1.3,RPZ EVENT QNAME NXDOMAIN,DNS,796f7572205765622050726f787920697320657866696c74726174.1616.ymil00.hex.acaddff5e4.leeandco.net.,InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_541993.796f7572205765622050726f787920697320657866696c74726174.1616.ymil00.hex.acaddff5e4.leeandco.net.;InfobloxRPZ=LIST_541993;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=90,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:43:01.281 PM",,Infoblox,Data Connector,RPZ-QNAME-NXDOMAIN,8,,NXDOMAIN,NXDOMAIN,,"""RPZ QNAME NXDOMAIN rewrite 796f7572205765622050726f787920697320657866696c74726174.1519.zcmt50.hex.acaddff5e4.leeandco.net. [A] via LIST_541993.796f7572205765622050726f787920697320657866696c74726174.1519.zcmt50.hex.acaddff5e4.leeandco.net.""",,14474,208.50.179.13,2.1.3,RPZ EVENT QNAME NXDOMAIN,DNS,796f7572205765622050726f787920697320657866696c74726174.1519.zcmt50.hex.acaddff5e4.leeandco.net.,InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_541993.796f7572205765622050726f787920697320657866696c74726174.1519.zcmt50.hex.acaddff5e4.leeandco.net.;InfobloxRPZ=LIST_541993;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=90,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:22:43.545 PM",,Infoblox,Data Connector,RPZ-QNAME-NXDOMAIN,8,,NXDOMAIN,NXDOMAIN,,"""RPZ QNAME NXDOMAIN rewrite 796f7572205765622050726f787920697320657866696c74726174.1519.ymil00.hex.acaddff5e4.leeandco.net. [A] via LIST_541993.796f7572205765622050726f787920697320657866696c74726174.1519.ymil00.hex.acaddff5e4.leeandco.net.""",,61377,208.50.179.13,2.1.3,RPZ EVENT QNAME NXDOMAIN,DNS,796f7572205765622050726f787920697320657866696c74726174.1519.ymil00.hex.acaddff5e4.leeandco.net.,InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_541993.796f7572205765622050726f787920697320657866696c74726174.1519.ymil00.hex.acaddff5e4.leeandco.net.;InfobloxRPZ=LIST_541993;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=90,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:42:49.736 PM",,Infoblox,Data Connector,RPZ-QNAME-NXDOMAIN,8,,NXDOMAIN,NXDOMAIN,,"""RPZ QNAME NXDOMAIN rewrite 796f7572205765622050726f787920697320657866696c74726174.1422.zcmt50.hex.acaddff5e4.leeandco.net. [A] via LIST_541993.796f7572205765622050726f787920697320657866696c74726174.1422.zcmt50.hex.acaddff5e4.leeandco.net.""",,7987,208.50.179.13,2.1.3,RPZ EVENT QNAME NXDOMAIN,DNS,796f7572205765622050726f787920697320657866696c74726174.1422.zcmt50.hex.acaddff5e4.leeandco.net.,InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_541993.796f7572205765622050726f787920697320657866696c74726174.1422.zcmt50.hex.acaddff5e4.leeandco.net.;InfobloxRPZ=LIST_541993;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=90,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:22:36.508 PM",,Infoblox,Data Connector,RPZ-QNAME-NXDOMAIN,8,,NXDOMAIN,NXDOMAIN,,"""RPZ QNAME NXDOMAIN rewrite 796f7572205765622050726f787920697320657866696c74726174.1422.ymil00.hex.acaddff5e4.leeandco.net. [A] via LIST_541993.796f7572205765622050726f787920697320657866696c74726174.1422.ymil00.hex.acaddff5e4.leeandco.net.""",,61377,208.50.179.13,2.1.3,RPZ EVENT QNAME NXDOMAIN,DNS,796f7572205765622050726f787920697320657866696c74726174.1422.ymil00.hex.acaddff5e4.leeandco.net.,InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_541993.796f7572205765622050726f787920697320657866696c74726174.1422.ymil00.hex.acaddff5e4.leeandco.net.;InfobloxRPZ=LIST_541993;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=90,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:42:45.872 PM",,Infoblox,Data Connector,RPZ-QNAME-NXDOMAIN,8,,NXDOMAIN,NXDOMAIN,,"""RPZ QNAME NXDOMAIN rewrite 796f7572205765622050726f787920697320657866696c74726174.1325.zcmt50.hex.acaddff5e4.leeandco.net. [A] via LIST_541993.796f7572205765622050726f787920697320657866696c74726174.1325.zcmt50.hex.acaddff5e4.leeandco.net.""",,15223,208.50.179.13,2.1.3,RPZ EVENT QNAME NXDOMAIN,DNS,796f7572205765622050726f787920697320657866696c74726174.1325.zcmt50.hex.acaddff5e4.leeandco.net.,InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_541993.796f7572205765622050726f787920697320657866696c74726174.1325.zcmt50.hex.acaddff5e4.leeandco.net.;InfobloxRPZ=LIST_541993;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=90,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:22:22.500 PM",,Infoblox,Data Connector,RPZ-QNAME-NXDOMAIN,8,,NXDOMAIN,NXDOMAIN,,"""RPZ QNAME NXDOMAIN rewrite 796f7572205765622050726f787920697320657866696c74726174.1325.ymil00.hex.acaddff5e4.leeandco.net. [A] via LIST_541993.796f7572205765622050726f787920697320657866696c74726174.1325.ymil00.hex.acaddff5e4.leeandco.net.""",,61377,208.50.179.13,2.1.3,RPZ EVENT QNAME NXDOMAIN,DNS,796f7572205765622050726f787920697320657866696c74726174.1325.ymil00.hex.acaddff5e4.leeandco.net.,InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_541993.796f7572205765622050726f787920697320657866696c74726174.1325.ymil00.hex.acaddff5e4.leeandco.net.;InfobloxRPZ=LIST_541993;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=90,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:42:26.848 PM",,Infoblox,Data Connector,RPZ-QNAME-NXDOMAIN,8,,NXDOMAIN,NXDOMAIN,,"""RPZ QNAME NXDOMAIN rewrite 796f7572205765622050726f787920697320657866696c74726174.1228.zcmt50.hex.acaddff5e4.leeandco.net. [A] via LIST_541993.796f7572205765622050726f787920697320657866696c74726174.1228.zcmt50.hex.acaddff5e4.leeandco.net.""",,7987,208.50.179.13,2.1.3,RPZ EVENT QNAME NXDOMAIN,DNS,796f7572205765622050726f787920697320657866696c74726174.1228.zcmt50.hex.acaddff5e4.leeandco.net.,InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_541993.796f7572205765622050726f787920697320657866696c74726174.1228.zcmt50.hex.acaddff5e4.leeandco.net.;InfobloxRPZ=LIST_541993;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=90,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:22:15.514 PM",,Infoblox,Data Connector,RPZ-QNAME-NXDOMAIN,8,,NXDOMAIN,NXDOMAIN,,"""RPZ QNAME NXDOMAIN rewrite 796f7572205765622050726f787920697320657866696c74726174.1228.ymil00.hex.acaddff5e4.leeandco.net. [A] via LIST_541993.796f7572205765622050726f787920697320657866696c74726174.1228.ymil00.hex.acaddff5e4.leeandco.net.""",,61377,208.50.179.13,2.1.3,RPZ EVENT QNAME NXDOMAIN,DNS,796f7572205765622050726f787920697320657866696c74726174.1228.ymil00.hex.acaddff5e4.leeandco.net.,InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_541993.796f7572205765622050726f787920697320657866696c74726174.1228.ymil00.hex.acaddff5e4.leeandco.net.;InfobloxRPZ=LIST_541993;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=90,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:42:19.191 PM",,Infoblox,Data Connector,RPZ-QNAME-NXDOMAIN,8,,NXDOMAIN,NXDOMAIN,,"""RPZ QNAME NXDOMAIN rewrite 796f7572205765622050726f787920697320657866696c74726174.1131.zcmt50.hex.acaddff5e4.leeandco.net. [A] via LIST_541993.796f7572205765622050726f787920697320657866696c74726174.1131.zcmt50.hex.acaddff5e4.leeandco.net.""",,7987,208.50.179.13,2.1.3,RPZ EVENT QNAME NXDOMAIN,DNS,796f7572205765622050726f787920697320657866696c74726174.1131.zcmt50.hex.acaddff5e4.leeandco.net.,InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_541993.796f7572205765622050726f787920697320657866696c74726174.1131.zcmt50.hex.acaddff5e4.leeandco.net.;InfobloxRPZ=LIST_541993;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=90,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:22:01.774 PM",,Infoblox,Data Connector,RPZ-QNAME-NXDOMAIN,8,,NXDOMAIN,NXDOMAIN,,"""RPZ QNAME NXDOMAIN rewrite 796f7572205765622050726f787920697320657866696c74726174.1131.ymil00.hex.acaddff5e4.leeandco.net. [A] via LIST_541993.796f7572205765622050726f787920697320657866696c74726174.1131.ymil00.hex.acaddff5e4.leeandco.net.""",,61377,208.50.179.13,2.1.3,RPZ EVENT QNAME NXDOMAIN,DNS,796f7572205765622050726f787920697320657866696c74726174.1131.ymil00.hex.acaddff5e4.leeandco.net.,InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_541993.796f7572205765622050726f787920697320657866696c74726174.1131.ymil00.hex.acaddff5e4.leeandco.net.;InfobloxRPZ=LIST_541993;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=90,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:42:09.794 PM",,Infoblox,Data Connector,RPZ-QNAME-NXDOMAIN,8,,NXDOMAIN,NXDOMAIN,,"""RPZ QNAME NXDOMAIN rewrite 796f7572205765622050726f787920697320657866696c74726174.1034.zcmt50.hex.acaddff5e4.leeandco.net. [A] via LIST_541993.796f7572205765622050726f787920697320657866696c74726174.1034.zcmt50.hex.acaddff5e4.leeandco.net.""",,7987,208.50.179.13,2.1.3,RPZ EVENT QNAME NXDOMAIN,DNS,796f7572205765622050726f787920697320657866696c74726174.1034.zcmt50.hex.acaddff5e4.leeandco.net.,InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_541993.796f7572205765622050726f787920697320657866696c74726174.1034.zcmt50.hex.acaddff5e4.leeandco.net.;InfobloxRPZ=LIST_541993;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=90,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:21:44.603 PM",,Infoblox,Data Connector,RPZ-QNAME-NXDOMAIN,8,,NXDOMAIN,NXDOMAIN,,"""RPZ QNAME NXDOMAIN rewrite 796f7572205765622050726f787920697320657866696c74726174.1034.ymil00.hex.acaddff5e4.leeandco.net. [A] via LIST_541993.796f7572205765622050726f787920697320657866696c74726174.1034.ymil00.hex.acaddff5e4.leeandco.net.""",,55534,208.50.179.13,2.1.3,RPZ EVENT QNAME NXDOMAIN,DNS,796f7572205765622050726f787920697320657866696c74726174.1034.ymil00.hex.acaddff5e4.leeandco.net.,InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_541993.796f7572205765622050726f787920697320657866696c74726174.1034.ymil00.hex.acaddff5e4.leeandco.net.;InfobloxRPZ=LIST_541993;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=90,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:42:01.840 PM",,Infoblox,Data Connector,RPZ-QNAME-NXDOMAIN,8,,NXDOMAIN,NXDOMAIN,,"""RPZ QNAME NXDOMAIN rewrite 796f7520686176652061205765622050726f78792c207468656e20.936.zcmt50.hex.acaddff5e4.leeandco.net. [A] via LIST_541993.796f7520686176652061205765622050726f78792c207468656e20.936.zcmt50.hex.acaddff5e4.leeandco.net.""",,7987,208.50.179.13,2.1.3,RPZ EVENT QNAME NXDOMAIN,DNS,796f7520686176652061205765622050726f78792c207468656e20.936.zcmt50.hex.acaddff5e4.leeandco.net.,InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_541993.796f7520686176652061205765622050726f78792c207468656e20.936.zcmt50.hex.acaddff5e4.leeandco.net.;InfobloxRPZ=LIST_541993;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=90,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:21:37.792 PM",,Infoblox,Data Connector,RPZ-QNAME-NXDOMAIN,8,,NXDOMAIN,NXDOMAIN,,"""RPZ QNAME NXDOMAIN rewrite 796f7520686176652061205765622050726f78792c207468656e20.936.ymil00.hex.acaddff5e4.leeandco.net. [A] via LIST_541993.796f7520686176652061205765622050726f78792c207468656e20.936.ymil00.hex.acaddff5e4.leeandco.net.""",,50593,208.50.179.13,2.1.3,RPZ EVENT QNAME NXDOMAIN,DNS,796f7520686176652061205765622050726f78792c207468656e20.936.ymil00.hex.acaddff5e4.leeandco.net.,InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_541993.796f7520686176652061205765622050726f78792c207468656e20.936.ymil00.hex.acaddff5e4.leeandco.net.;InfobloxRPZ=LIST_541993;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=90,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:41:51.880 PM",,Infoblox,Data Connector,RPZ-QNAME-NXDOMAIN,8,,NXDOMAIN,NXDOMAIN,,"""RPZ QNAME NXDOMAIN rewrite 796f7520686176652061205765622050726f78792c207468656e20.839.zcmt50.hex.acaddff5e4.leeandco.net. [A] via LIST_541993.796f7520686176652061205765622050726f78792c207468656e20.839.zcmt50.hex.acaddff5e4.leeandco.net.""",,56540,208.50.179.13,2.1.3,RPZ EVENT QNAME NXDOMAIN,DNS,796f7520686176652061205765622050726f78792c207468656e20.839.zcmt50.hex.acaddff5e4.leeandco.net.,InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_541993.796f7520686176652061205765622050726f78792c207468656e20.839.zcmt50.hex.acaddff5e4.leeandco.net.;InfobloxRPZ=LIST_541993;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=90,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:21:30.175 PM",,Infoblox,Data Connector,RPZ-QNAME-NXDOMAIN,8,,NXDOMAIN,NXDOMAIN,,"""RPZ QNAME NXDOMAIN rewrite 796f7520686176652061205765622050726f78792c207468656e20.839.ymil00.hex.acaddff5e4.leeandco.net. [A] via LIST_541993.796f7520686176652061205765622050726f78792c207468656e20.839.ymil00.hex.acaddff5e4.leeandco.net.""",,50593,208.50.179.13,2.1.3,RPZ EVENT QNAME NXDOMAIN,DNS,796f7520686176652061205765622050726f78792c207468656e20.839.ymil00.hex.acaddff5e4.leeandco.net.,InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_541993.796f7520686176652061205765622050726f78792c207468656e20.839.ymil00.hex.acaddff5e4.leeandco.net.;InfobloxRPZ=LIST_541993;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=90,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:41:24.046 PM",,Infoblox,Data Connector,RPZ-QNAME-NXDOMAIN,8,,NXDOMAIN,NXDOMAIN,,"""RPZ QNAME NXDOMAIN rewrite 796f7520686176652061205765622050726f78792c207468656e20.742.zcmt50.hex.acaddff5e4.leeandco.net. [A] via LIST_541993.796f7520686176652061205765622050726f78792c207468656e20.742.zcmt50.hex.acaddff5e4.leeandco.net.""",,56540,208.50.179.13,2.1.3,RPZ EVENT QNAME NXDOMAIN,DNS,796f7520686176652061205765622050726f78792c207468656e20.742.zcmt50.hex.acaddff5e4.leeandco.net.,InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_541993.796f7520686176652061205765622050726f78792c207468656e20.742.zcmt50.hex.acaddff5e4.leeandco.net.;InfobloxRPZ=LIST_541993;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=90,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:21:22.607 PM",,Infoblox,Data Connector,RPZ-QNAME-NXDOMAIN,8,,NXDOMAIN,NXDOMAIN,,"""RPZ QNAME NXDOMAIN rewrite 796f7520686176652061205765622050726f78792c207468656e20.742.ymil00.hex.acaddff5e4.leeandco.net. [A] via LIST_541993.796f7520686176652061205765622050726f78792c207468656e20.742.ymil00.hex.acaddff5e4.leeandco.net.""",,50593,208.50.179.13,2.1.3,RPZ EVENT QNAME NXDOMAIN,DNS,796f7520686176652061205765622050726f78792c207468656e20.742.ymil00.hex.acaddff5e4.leeandco.net.,InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_541993.796f7520686176652061205765622050726f78792c207468656e20.742.ymil00.hex.acaddff5e4.leeandco.net.;InfobloxRPZ=LIST_541993;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=90,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:41:27.050 PM",,Infoblox,Data Connector,RPZ-QNAME-NXDOMAIN,8,,NXDOMAIN,NXDOMAIN,,"""RPZ QNAME NXDOMAIN rewrite 796f7520686176652061205765622050726f78792c207468656e20.645.zcmt50.hex.acaddff5e4.leeandco.net. [A] via LIST_541993.796f7520686176652061205765622050726f78792c207468656e20.645.zcmt50.hex.acaddff5e4.leeandco.net.""",,46369,208.50.179.13,2.1.3,RPZ EVENT QNAME NXDOMAIN,DNS,796f7520686176652061205765622050726f78792c207468656e20.645.zcmt50.hex.acaddff5e4.leeandco.net.,InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_541993.796f7520686176652061205765622050726f78792c207468656e20.645.zcmt50.hex.acaddff5e4.leeandco.net.;InfobloxRPZ=LIST_541993;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=90,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:21:07.637 PM",,Infoblox,Data Connector,RPZ-QNAME-NXDOMAIN,8,,NXDOMAIN,NXDOMAIN,,"""RPZ QNAME NXDOMAIN rewrite 796f7520686176652061205765622050726f78792c207468656e20.645.ymil00.hex.acaddff5e4.leeandco.net. [A] via LIST_541993.796f7520686176652061205765622050726f78792c207468656e20.645.ymil00.hex.acaddff5e4.leeandco.net.""",,50593,208.50.179.13,2.1.3,RPZ EVENT QNAME NXDOMAIN,DNS,796f7520686176652061205765622050726f78792c207468656e20.645.ymil00.hex.acaddff5e4.leeandco.net.,InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_541993.796f7520686176652061205765622050726f78792c207468656e20.645.ymil00.hex.acaddff5e4.leeandco.net.;InfobloxRPZ=LIST_541993;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=90,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:41:09.308 PM",,Infoblox,Data Connector,RPZ-QNAME-NXDOMAIN,8,,NXDOMAIN,NXDOMAIN,,"""RPZ QNAME NXDOMAIN rewrite 796f7520686176652061205765622050726f78792c207468656e20.548.zcmt50.hex.acaddff5e4.leeandco.net. [A] via LIST_541993.796f7520686176652061205765622050726f78792c207468656e20.548.zcmt50.hex.acaddff5e4.leeandco.net.""",,58534,208.50.179.13,2.1.3,RPZ EVENT QNAME NXDOMAIN,DNS,796f7520686176652061205765622050726f78792c207468656e20.548.zcmt50.hex.acaddff5e4.leeandco.net.,InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_541993.796f7520686176652061205765622050726f78792c207468656e20.548.zcmt50.hex.acaddff5e4.leeandco.net.;InfobloxRPZ=LIST_541993;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=90,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:21:00.469 PM",,Infoblox,Data Connector,RPZ-QNAME-NXDOMAIN,8,,NXDOMAIN,NXDOMAIN,,"""RPZ QNAME NXDOMAIN rewrite 796f7520686176652061205765622050726f78792c207468656e20.548.ymil00.hex.acaddff5e4.leeandco.net. [A] via LIST_541993.796f7520686176652061205765622050726f78792c207468656e20.548.ymil00.hex.acaddff5e4.leeandco.net.""",,50593,208.50.179.13,2.1.3,RPZ EVENT QNAME NXDOMAIN,DNS,796f7520686176652061205765622050726f78792c207468656e20.548.ymil00.hex.acaddff5e4.leeandco.net.,InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_541993.796f7520686176652061205765622050726f78792c207468656e20.548.ymil00.hex.acaddff5e4.leeandco.net.;InfobloxRPZ=LIST_541993;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=90,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:20:44.649 PM",,Infoblox,Data Connector,RPZ-QNAME-NXDOMAIN,8,,NXDOMAIN,NXDOMAIN,,"""RPZ QNAME NXDOMAIN rewrite 796f7520686176652061205765622050726f78792c207468656e20.451.ymil00.hex.acaddff5e4.leeandco.net. [A] via LIST_541993.796f7520686176652061205765622050726f78792c207468656e20.451.ymil00.hex.acaddff5e4.leeandco.net.""",,50593,208.50.179.13,2.1.3,RPZ EVENT QNAME NXDOMAIN,DNS,796f7520686176652061205765622050726f78792c207468656e20.451.ymil00.hex.acaddff5e4.leeandco.net.,InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_541993.796f7520686176652061205765622050726f78792c207468656e20.451.ymil00.hex.acaddff5e4.leeandco.net.;InfobloxRPZ=LIST_541993;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=90,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:20:36.902 PM",,Infoblox,Data Connector,RPZ-QNAME-NXDOMAIN,8,,NXDOMAIN,NXDOMAIN,,"""RPZ QNAME NXDOMAIN rewrite 796f7520686176652061205765622050726f78792c207468656e20.354.ymil00.hex.acaddff5e4.leeandco.net. [A] via LIST_541993.796f7520686176652061205765622050726f78792c207468656e20.354.ymil00.hex.acaddff5e4.leeandco.net.""",,50593,208.50.179.13,2.1.3,RPZ EVENT QNAME NXDOMAIN,DNS,796f7520686176652061205765622050726f78792c207468656e20.354.ymil00.hex.acaddff5e4.leeandco.net.,InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_541993.796f7520686176652061205765622050726f78792c207468656e20.354.ymil00.hex.acaddff5e4.leeandco.net.;InfobloxRPZ=LIST_541993;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=90,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:24:49.110 PM",,Infoblox,Data Connector,RPZ-QNAME-NXDOMAIN,8,,NXDOMAIN,NXDOMAIN,,"""RPZ QNAME NXDOMAIN rewrite 796f7520686176652061205765622050726f78792c207468656e20.2682.ymil00.hex.acaddff5e4.leeandco.net. [A] via LIST_541993.796f7520686176652061205765622050726f78792c207468656e20.2682.ymil00.hex.acaddff5e4.leeandco.net.""",,53819,208.50.179.13,2.1.3,RPZ EVENT QNAME NXDOMAIN,DNS,796f7520686176652061205765622050726f78792c207468656e20.2682.ymil00.hex.acaddff5e4.leeandco.net.,InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_541993.796f7520686176652061205765622050726f78792c207468656e20.2682.ymil00.hex.acaddff5e4.leeandco.net.;InfobloxRPZ=LIST_541993;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=90,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:24:40.102 PM",,Infoblox,Data Connector,RPZ-QNAME-NXDOMAIN,8,,NXDOMAIN,NXDOMAIN,,"""RPZ QNAME NXDOMAIN rewrite 796f7520686176652061205765622050726f78792c207468656e20.2585.ymil00.hex.acaddff5e4.leeandco.net. [A] via LIST_541993.796f7520686176652061205765622050726f78792c207468656e20.2585.ymil00.hex.acaddff5e4.leeandco.net.""",,53819,208.50.179.13,2.1.3,RPZ EVENT QNAME NXDOMAIN,DNS,796f7520686176652061205765622050726f78792c207468656e20.2585.ymil00.hex.acaddff5e4.leeandco.net.,InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_541993.796f7520686176652061205765622050726f78792c207468656e20.2585.ymil00.hex.acaddff5e4.leeandco.net.;InfobloxRPZ=LIST_541993;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=90,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:24:30.802 PM",,Infoblox,Data Connector,RPZ-QNAME-NXDOMAIN,8,,NXDOMAIN,NXDOMAIN,,"""RPZ QNAME NXDOMAIN rewrite 796f7520686176652061205765622050726f78792c207468656e20.2488.ymil00.hex.acaddff5e4.leeandco.net. [A] via LIST_541993.796f7520686176652061205765622050726f78792c207468656e20.2488.ymil00.hex.acaddff5e4.leeandco.net.""",,48394,208.50.179.13,2.1.3,RPZ EVENT QNAME NXDOMAIN,DNS,796f7520686176652061205765622050726f78792c207468656e20.2488.ymil00.hex.acaddff5e4.leeandco.net.,InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_541993.796f7520686176652061205765622050726f78792c207468656e20.2488.ymil00.hex.acaddff5e4.leeandco.net.;InfobloxRPZ=LIST_541993;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=90,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:24:16.825 PM",,Infoblox,Data Connector,RPZ-QNAME-NXDOMAIN,8,,NXDOMAIN,NXDOMAIN,,"""RPZ QNAME NXDOMAIN rewrite 796f7520686176652061205765622050726f78792c207468656e20.2391.ymil00.hex.acaddff5e4.leeandco.net. [A] via LIST_541993.796f7520686176652061205765622050726f78792c207468656e20.2391.ymil00.hex.acaddff5e4.leeandco.net.""",,31171,208.50.179.13,2.1.3,RPZ EVENT QNAME NXDOMAIN,DNS,796f7520686176652061205765622050726f78792c207468656e20.2391.ymil00.hex.acaddff5e4.leeandco.net.,InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_541993.796f7520686176652061205765622050726f78792c207468656e20.2391.ymil00.hex.acaddff5e4.leeandco.net.;InfobloxRPZ=LIST_541993;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=90,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:24:08.757 PM",,Infoblox,Data Connector,RPZ-QNAME-NXDOMAIN,8,,NXDOMAIN,NXDOMAIN,,"""RPZ QNAME NXDOMAIN rewrite 796f7520686176652061205765622050726f78792c207468656e20.2294.ymil00.hex.acaddff5e4.leeandco.net. [A] via LIST_541993.796f7520686176652061205765622050726f78792c207468656e20.2294.ymil00.hex.acaddff5e4.leeandco.net.""",,56787,208.50.179.13,2.1.3,RPZ EVENT QNAME NXDOMAIN,DNS,796f7520686176652061205765622050726f78792c207468656e20.2294.ymil00.hex.acaddff5e4.leeandco.net.,InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_541993.796f7520686176652061205765622050726f78792c207468656e20.2294.ymil00.hex.acaddff5e4.leeandco.net.;InfobloxRPZ=LIST_541993;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=90,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:24:00.782 PM",,Infoblox,Data Connector,RPZ-QNAME-NXDOMAIN,8,,NXDOMAIN,NXDOMAIN,,"""RPZ QNAME NXDOMAIN rewrite 796f7520686176652061205765622050726f78792c207468656e20.2197.ymil00.hex.acaddff5e4.leeandco.net. [A] via LIST_541993.796f7520686176652061205765622050726f78792c207468656e20.2197.ymil00.hex.acaddff5e4.leeandco.net.""",,56787,208.50.179.13,2.1.3,RPZ EVENT QNAME NXDOMAIN,DNS,796f7520686176652061205765622050726f78792c207468656e20.2197.ymil00.hex.acaddff5e4.leeandco.net.,InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_541993.796f7520686176652061205765622050726f78792c207468656e20.2197.ymil00.hex.acaddff5e4.leeandco.net.;InfobloxRPZ=LIST_541993;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=90,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:23:45.269 PM",,Infoblox,Data Connector,RPZ-QNAME-NXDOMAIN,8,,NXDOMAIN,NXDOMAIN,,"""RPZ QNAME NXDOMAIN rewrite 796f7520686176652061205765622050726f78792c207468656e20.2100.ymil00.hex.acaddff5e4.leeandco.net. [A] via LIST_541993.796f7520686176652061205765622050726f78792c207468656e20.2100.ymil00.hex.acaddff5e4.leeandco.net.""",,21179,208.50.179.13,2.1.3,RPZ EVENT QNAME NXDOMAIN,DNS,796f7520686176652061205765622050726f78792c207468656e20.2100.ymil00.hex.acaddff5e4.leeandco.net.,InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_541993.796f7520686176652061205765622050726f78792c207468656e20.2100.ymil00.hex.acaddff5e4.leeandco.net.;InfobloxRPZ=LIST_541993;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=90,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:23:38.015 PM",,Infoblox,Data Connector,RPZ-QNAME-NXDOMAIN,8,,NXDOMAIN,NXDOMAIN,,"""RPZ QNAME NXDOMAIN rewrite 796f7520686176652061205765622050726f78792c207468656e20.2003.ymil00.hex.acaddff5e4.leeandco.net. [A] via LIST_541993.796f7520686176652061205765622050726f78792c207468656e20.2003.ymil00.hex.acaddff5e4.leeandco.net.""",,21179,208.50.179.13,2.1.3,RPZ EVENT QNAME NXDOMAIN,DNS,796f7520686176652061205765622050726f78792c207468656e20.2003.ymil00.hex.acaddff5e4.leeandco.net.,InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_541993.796f7520686176652061205765622050726f78792c207468656e20.2003.ymil00.hex.acaddff5e4.leeandco.net.;InfobloxRPZ=LIST_541993;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=90,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:23:27.066 PM",,Infoblox,Data Connector,RPZ-QNAME-NXDOMAIN,8,,NXDOMAIN,NXDOMAIN,,"""RPZ QNAME NXDOMAIN rewrite 796f7520686176652061205765622050726f78792c207468656e20.1906.ymil00.hex.acaddff5e4.leeandco.net. [A] via LIST_541993.796f7520686176652061205765622050726f78792c207468656e20.1906.ymil00.hex.acaddff5e4.leeandco.net.""",,62785,208.50.179.13,2.1.3,RPZ EVENT QNAME NXDOMAIN,DNS,796f7520686176652061205765622050726f78792c207468656e20.1906.ymil00.hex.acaddff5e4.leeandco.net.,InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_541993.796f7520686176652061205765622050726f78792c207468656e20.1906.ymil00.hex.acaddff5e4.leeandco.net.;InfobloxRPZ=LIST_541993;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=90,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:43:36.572 PM",,Infoblox,Data Connector,RPZ-QNAME-NXDOMAIN,8,,NXDOMAIN,NXDOMAIN,,"""RPZ QNAME NXDOMAIN rewrite 796f7520686176652061205765622050726f78792c207468656e20.1809.zcmt50.hex.acaddff5e4.leeandco.net. [A] via LIST_541993.796f7520686176652061205765622050726f78792c207468656e20.1809.zcmt50.hex.acaddff5e4.leeandco.net.""",,20242,208.50.179.13,2.1.3,RPZ EVENT QNAME NXDOMAIN,DNS,796f7520686176652061205765622050726f78792c207468656e20.1809.zcmt50.hex.acaddff5e4.leeandco.net.,InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_541993.796f7520686176652061205765622050726f78792c207468656e20.1809.zcmt50.hex.acaddff5e4.leeandco.net.;InfobloxRPZ=LIST_541993;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=90,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:23:15.115 PM",,Infoblox,Data Connector,RPZ-QNAME-NXDOMAIN,8,,NXDOMAIN,NXDOMAIN,,"""RPZ QNAME NXDOMAIN rewrite 796f7520686176652061205765622050726f78792c207468656e20.1809.ymil00.hex.acaddff5e4.leeandco.net. [A] via LIST_541993.796f7520686176652061205765622050726f78792c207468656e20.1809.ymil00.hex.acaddff5e4.leeandco.net.""",,62785,208.50.179.13,2.1.3,RPZ EVENT QNAME NXDOMAIN,DNS,796f7520686176652061205765622050726f78792c207468656e20.1809.ymil00.hex.acaddff5e4.leeandco.net.,InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_541993.796f7520686176652061205765622050726f78792c207468656e20.1809.ymil00.hex.acaddff5e4.leeandco.net.;InfobloxRPZ=LIST_541993;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=90,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:43:22.339 PM",,Infoblox,Data Connector,RPZ-QNAME-NXDOMAIN,8,,NXDOMAIN,NXDOMAIN,,"""RPZ QNAME NXDOMAIN rewrite 796f7520686176652061205765622050726f78792c207468656e20.1712.zcmt50.hex.acaddff5e4.leeandco.net. [A] via LIST_541993.796f7520686176652061205765622050726f78792c207468656e20.1712.zcmt50.hex.acaddff5e4.leeandco.net.""",,20242,208.50.179.13,2.1.3,RPZ EVENT QNAME NXDOMAIN,DNS,796f7520686176652061205765622050726f78792c207468656e20.1712.zcmt50.hex.acaddff5e4.leeandco.net.,InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_541993.796f7520686176652061205765622050726f78792c207468656e20.1712.zcmt50.hex.acaddff5e4.leeandco.net.;InfobloxRPZ=LIST_541993;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=90,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:23:02.181 PM",,Infoblox,Data Connector,RPZ-QNAME-NXDOMAIN,8,,NXDOMAIN,NXDOMAIN,,"""RPZ QNAME NXDOMAIN rewrite 796f7520686176652061205765622050726f78792c207468656e20.1712.ymil00.hex.acaddff5e4.leeandco.net. [A] via LIST_541993.796f7520686176652061205765622050726f78792c207468656e20.1712.ymil00.hex.acaddff5e4.leeandco.net.""",,62785,208.50.179.13,2.1.3,RPZ EVENT QNAME NXDOMAIN,DNS,796f7520686176652061205765622050726f78792c207468656e20.1712.ymil00.hex.acaddff5e4.leeandco.net.,InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_541993.796f7520686176652061205765622050726f78792c207468656e20.1712.ymil00.hex.acaddff5e4.leeandco.net.;InfobloxRPZ=LIST_541993;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=90,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:43:12.054 PM",,Infoblox,Data Connector,RPZ-QNAME-NXDOMAIN,8,,NXDOMAIN,NXDOMAIN,,"""RPZ QNAME NXDOMAIN rewrite 796f7520686176652061205765622050726f78792c207468656e20.1615.zcmt50.hex.acaddff5e4.leeandco.net. [A] via LIST_541993.796f7520686176652061205765622050726f78792c207468656e20.1615.zcmt50.hex.acaddff5e4.leeandco.net.""",,36519,208.50.179.13,2.1.3,RPZ EVENT QNAME NXDOMAIN,DNS,796f7520686176652061205765622050726f78792c207468656e20.1615.zcmt50.hex.acaddff5e4.leeandco.net.,InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_541993.796f7520686176652061205765622050726f78792c207468656e20.1615.zcmt50.hex.acaddff5e4.leeandco.net.;InfobloxRPZ=LIST_541993;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=90,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:22:52.030 PM",,Infoblox,Data Connector,RPZ-QNAME-NXDOMAIN,8,,NXDOMAIN,NXDOMAIN,,"""RPZ QNAME NXDOMAIN rewrite 796f7520686176652061205765622050726f78792c207468656e20.1615.ymil00.hex.acaddff5e4.leeandco.net. [A] via LIST_541993.796f7520686176652061205765622050726f78792c207468656e20.1615.ymil00.hex.acaddff5e4.leeandco.net.""",,62785,208.50.179.13,2.1.3,RPZ EVENT QNAME NXDOMAIN,DNS,796f7520686176652061205765622050726f78792c207468656e20.1615.ymil00.hex.acaddff5e4.leeandco.net.,InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_541993.796f7520686176652061205765622050726f78792c207468656e20.1615.ymil00.hex.acaddff5e4.leeandco.net.;InfobloxRPZ=LIST_541993;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=90,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:43:01.280 PM",,Infoblox,Data Connector,RPZ-QNAME-NXDOMAIN,8,,NXDOMAIN,NXDOMAIN,,"""RPZ QNAME NXDOMAIN rewrite 796f7520686176652061205765622050726f78792c207468656e20.1518.zcmt50.hex.acaddff5e4.leeandco.net. [A] via LIST_541993.796f7520686176652061205765622050726f78792c207468656e20.1518.zcmt50.hex.acaddff5e4.leeandco.net.""",,14474,208.50.179.13,2.1.3,RPZ EVENT QNAME NXDOMAIN,DNS,796f7520686176652061205765622050726f78792c207468656e20.1518.zcmt50.hex.acaddff5e4.leeandco.net.,InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_541993.796f7520686176652061205765622050726f78792c207468656e20.1518.zcmt50.hex.acaddff5e4.leeandco.net.;InfobloxRPZ=LIST_541993;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=90,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:22:43.545 PM",,Infoblox,Data Connector,RPZ-QNAME-NXDOMAIN,8,,NXDOMAIN,NXDOMAIN,,"""RPZ QNAME NXDOMAIN rewrite 796f7520686176652061205765622050726f78792c207468656e20.1518.ymil00.hex.acaddff5e4.leeandco.net. [A] via LIST_541993.796f7520686176652061205765622050726f78792c207468656e20.1518.ymil00.hex.acaddff5e4.leeandco.net.""",,61377,208.50.179.13,2.1.3,RPZ EVENT QNAME NXDOMAIN,DNS,796f7520686176652061205765622050726f78792c207468656e20.1518.ymil00.hex.acaddff5e4.leeandco.net.,InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_541993.796f7520686176652061205765622050726f78792c207468656e20.1518.ymil00.hex.acaddff5e4.leeandco.net.;InfobloxRPZ=LIST_541993;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=90,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:42:49.736 PM",,Infoblox,Data Connector,RPZ-QNAME-NXDOMAIN,8,,NXDOMAIN,NXDOMAIN,,"""RPZ QNAME NXDOMAIN rewrite 796f7520686176652061205765622050726f78792c207468656e20.1421.zcmt50.hex.acaddff5e4.leeandco.net. [A] via LIST_541993.796f7520686176652061205765622050726f78792c207468656e20.1421.zcmt50.hex.acaddff5e4.leeandco.net.""",,7987,208.50.179.13,2.1.3,RPZ EVENT QNAME NXDOMAIN,DNS,796f7520686176652061205765622050726f78792c207468656e20.1421.zcmt50.hex.acaddff5e4.leeandco.net.,InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_541993.796f7520686176652061205765622050726f78792c207468656e20.1421.zcmt50.hex.acaddff5e4.leeandco.net.;InfobloxRPZ=LIST_541993;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=90,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:22:36.508 PM",,Infoblox,Data Connector,RPZ-QNAME-NXDOMAIN,8,,NXDOMAIN,NXDOMAIN,,"""RPZ QNAME NXDOMAIN rewrite 796f7520686176652061205765622050726f78792c207468656e20.1421.ymil00.hex.acaddff5e4.leeandco.net. [A] via LIST_541993.796f7520686176652061205765622050726f78792c207468656e20.1421.ymil00.hex.acaddff5e4.leeandco.net.""",,61377,208.50.179.13,2.1.3,RPZ EVENT QNAME NXDOMAIN,DNS,796f7520686176652061205765622050726f78792c207468656e20.1421.ymil00.hex.acaddff5e4.leeandco.net.,InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_541993.796f7520686176652061205765622050726f78792c207468656e20.1421.ymil00.hex.acaddff5e4.leeandco.net.;InfobloxRPZ=LIST_541993;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=90,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:42:45.872 PM",,Infoblox,Data Connector,RPZ-QNAME-NXDOMAIN,8,,NXDOMAIN,NXDOMAIN,,"""RPZ QNAME NXDOMAIN rewrite 796f7520686176652061205765622050726f78792c207468656e20.1324.zcmt50.hex.acaddff5e4.leeandco.net. [A] via LIST_541993.796f7520686176652061205765622050726f78792c207468656e20.1324.zcmt50.hex.acaddff5e4.leeandco.net.""",,15223,208.50.179.13,2.1.3,RPZ EVENT QNAME NXDOMAIN,DNS,796f7520686176652061205765622050726f78792c207468656e20.1324.zcmt50.hex.acaddff5e4.leeandco.net.,InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_541993.796f7520686176652061205765622050726f78792c207468656e20.1324.zcmt50.hex.acaddff5e4.leeandco.net.;InfobloxRPZ=LIST_541993;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=90,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:22:22.500 PM",,Infoblox,Data Connector,RPZ-QNAME-NXDOMAIN,8,,NXDOMAIN,NXDOMAIN,,"""RPZ QNAME NXDOMAIN rewrite 796f7520686176652061205765622050726f78792c207468656e20.1324.ymil00.hex.acaddff5e4.leeandco.net. [A] via LIST_541993.796f7520686176652061205765622050726f78792c207468656e20.1324.ymil00.hex.acaddff5e4.leeandco.net.""",,61377,208.50.179.13,2.1.3,RPZ EVENT QNAME NXDOMAIN,DNS,796f7520686176652061205765622050726f78792c207468656e20.1324.ymil00.hex.acaddff5e4.leeandco.net.,InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_541993.796f7520686176652061205765622050726f78792c207468656e20.1324.ymil00.hex.acaddff5e4.leeandco.net.;InfobloxRPZ=LIST_541993;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=90,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:42:26.848 PM",,Infoblox,Data Connector,RPZ-QNAME-NXDOMAIN,8,,NXDOMAIN,NXDOMAIN,,"""RPZ QNAME NXDOMAIN rewrite 796f7520686176652061205765622050726f78792c207468656e20.1227.zcmt50.hex.acaddff5e4.leeandco.net. [A] via LIST_541993.796f7520686176652061205765622050726f78792c207468656e20.1227.zcmt50.hex.acaddff5e4.leeandco.net.""",,7987,208.50.179.13,2.1.3,RPZ EVENT QNAME NXDOMAIN,DNS,796f7520686176652061205765622050726f78792c207468656e20.1227.zcmt50.hex.acaddff5e4.leeandco.net.,InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_541993.796f7520686176652061205765622050726f78792c207468656e20.1227.zcmt50.hex.acaddff5e4.leeandco.net.;InfobloxRPZ=LIST_541993;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=90,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:22:15.514 PM",,Infoblox,Data Connector,RPZ-QNAME-NXDOMAIN,8,,NXDOMAIN,NXDOMAIN,,"""RPZ QNAME NXDOMAIN rewrite 796f7520686176652061205765622050726f78792c207468656e20.1227.ymil00.hex.acaddff5e4.leeandco.net. [A] via LIST_541993.796f7520686176652061205765622050726f78792c207468656e20.1227.ymil00.hex.acaddff5e4.leeandco.net.""",,61377,208.50.179.13,2.1.3,RPZ EVENT QNAME NXDOMAIN,DNS,796f7520686176652061205765622050726f78792c207468656e20.1227.ymil00.hex.acaddff5e4.leeandco.net.,InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_541993.796f7520686176652061205765622050726f78792c207468656e20.1227.ymil00.hex.acaddff5e4.leeandco.net.;InfobloxRPZ=LIST_541993;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=90,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:42:19.191 PM",,Infoblox,Data Connector,RPZ-QNAME-NXDOMAIN,8,,NXDOMAIN,NXDOMAIN,,"""RPZ QNAME NXDOMAIN rewrite 796f7520686176652061205765622050726f78792c207468656e20.1130.zcmt50.hex.acaddff5e4.leeandco.net. [A] via LIST_541993.796f7520686176652061205765622050726f78792c207468656e20.1130.zcmt50.hex.acaddff5e4.leeandco.net.""",,7987,208.50.179.13,2.1.3,RPZ EVENT QNAME NXDOMAIN,DNS,796f7520686176652061205765622050726f78792c207468656e20.1130.zcmt50.hex.acaddff5e4.leeandco.net.,InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_541993.796f7520686176652061205765622050726f78792c207468656e20.1130.zcmt50.hex.acaddff5e4.leeandco.net.;InfobloxRPZ=LIST_541993;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=90,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:22:01.774 PM",,Infoblox,Data Connector,RPZ-QNAME-NXDOMAIN,8,,NXDOMAIN,NXDOMAIN,,"""RPZ QNAME NXDOMAIN rewrite 796f7520686176652061205765622050726f78792c207468656e20.1130.ymil00.hex.acaddff5e4.leeandco.net. [A] via LIST_541993.796f7520686176652061205765622050726f78792c207468656e20.1130.ymil00.hex.acaddff5e4.leeandco.net.""",,61377,208.50.179.13,2.1.3,RPZ EVENT QNAME NXDOMAIN,DNS,796f7520686176652061205765622050726f78792c207468656e20.1130.ymil00.hex.acaddff5e4.leeandco.net.,InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_541993.796f7520686176652061205765622050726f78792c207468656e20.1130.ymil00.hex.acaddff5e4.leeandco.net.;InfobloxRPZ=LIST_541993;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=90,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:42:09.794 PM",,Infoblox,Data Connector,RPZ-QNAME-NXDOMAIN,8,,NXDOMAIN,NXDOMAIN,,"""RPZ QNAME NXDOMAIN rewrite 796f7520686176652061205765622050726f78792c207468656e20.1033.zcmt50.hex.acaddff5e4.leeandco.net. [A] via LIST_541993.796f7520686176652061205765622050726f78792c207468656e20.1033.zcmt50.hex.acaddff5e4.leeandco.net.""",,7987,208.50.179.13,2.1.3,RPZ EVENT QNAME NXDOMAIN,DNS,796f7520686176652061205765622050726f78792c207468656e20.1033.zcmt50.hex.acaddff5e4.leeandco.net.,InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_541993.796f7520686176652061205765622050726f78792c207468656e20.1033.zcmt50.hex.acaddff5e4.leeandco.net.;InfobloxRPZ=LIST_541993;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=90,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:21:44.603 PM",,Infoblox,Data Connector,RPZ-QNAME-NXDOMAIN,8,,NXDOMAIN,NXDOMAIN,,"""RPZ QNAME NXDOMAIN rewrite 796f7520686176652061205765622050726f78792c207468656e20.1033.ymil00.hex.acaddff5e4.leeandco.net. [A] via LIST_541993.796f7520686176652061205765622050726f78792c207468656e20.1033.ymil00.hex.acaddff5e4.leeandco.net.""",,55534,208.50.179.13,2.1.3,RPZ EVENT QNAME NXDOMAIN,DNS,796f7520686176652061205765622050726f78792c207468656e20.1033.ymil00.hex.acaddff5e4.leeandco.net.,InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_541993.796f7520686176652061205765622050726f78792c207468656e20.1033.ymil00.hex.acaddff5e4.leeandco.net.;InfobloxRPZ=LIST_541993;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=90,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:42:01.844 PM",,Infoblox,Data Connector,RPZ-QNAME-NXDOMAIN,8,,NXDOMAIN,NXDOMAIN,,"""RPZ QNAME NXDOMAIN rewrite 78792c207468656e20796f7572205765622050726f787920697320.969.zcmt50.hex.acaddff5e4.leeandco.net. [A] via LIST_541993.78792c207468656e20796f7572205765622050726f787920697320.969.zcmt50.hex.acaddff5e4.leeandco.net.""",,7987,208.50.179.13,2.1.3,RPZ EVENT QNAME NXDOMAIN,DNS,78792c207468656e20796f7572205765622050726f787920697320.969.zcmt50.hex.acaddff5e4.leeandco.net.,InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_541993.78792c207468656e20796f7572205765622050726f787920697320.969.zcmt50.hex.acaddff5e4.leeandco.net.;InfobloxRPZ=LIST_541993;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=90,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:21:44.597 PM",,Infoblox,Data Connector,RPZ-QNAME-NXDOMAIN,8,,NXDOMAIN,NXDOMAIN,,"""RPZ QNAME NXDOMAIN rewrite 78792c207468656e20796f7572205765622050726f787920697320.969.ymil00.hex.acaddff5e4.leeandco.net. [A] via LIST_541993.78792c207468656e20796f7572205765622050726f787920697320.969.ymil00.hex.acaddff5e4.leeandco.net.""",,55534,208.50.179.13,2.1.3,RPZ EVENT QNAME NXDOMAIN,DNS,78792c207468656e20796f7572205765622050726f787920697320.969.ymil00.hex.acaddff5e4.leeandco.net.,InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_541993.78792c207468656e20796f7572205765622050726f787920697320.969.ymil00.hex.acaddff5e4.leeandco.net.;InfobloxRPZ=LIST_541993;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=90,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:41:53.692 PM",,Infoblox,Data Connector,RPZ-QNAME-NXDOMAIN,8,,NXDOMAIN,NXDOMAIN,,"""RPZ QNAME NXDOMAIN rewrite 78792c207468656e20796f7572205765622050726f787920697320.872.zcmt50.hex.acaddff5e4.leeandco.net. [A] via LIST_541993.78792c207468656e20796f7572205765622050726f787920697320.872.zcmt50.hex.acaddff5e4.leeandco.net.""",,7987,208.50.179.13,2.1.3,RPZ EVENT QNAME NXDOMAIN,DNS,78792c207468656e20796f7572205765622050726f787920697320.872.zcmt50.hex.acaddff5e4.leeandco.net.,InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_541993.78792c207468656e20796f7572205765622050726f787920697320.872.zcmt50.hex.acaddff5e4.leeandco.net.;InfobloxRPZ=LIST_541993;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=90,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:21:30.178 PM",,Infoblox,Data Connector,RPZ-QNAME-NXDOMAIN,8,,NXDOMAIN,NXDOMAIN,,"""RPZ QNAME NXDOMAIN rewrite 78792c207468656e20796f7572205765622050726f787920697320.872.ymil00.hex.acaddff5e4.leeandco.net. [A] via LIST_541993.78792c207468656e20796f7572205765622050726f787920697320.872.ymil00.hex.acaddff5e4.leeandco.net.""",,50593,208.50.179.13,2.1.3,RPZ EVENT QNAME NXDOMAIN,DNS,78792c207468656e20796f7572205765622050726f787920697320.872.ymil00.hex.acaddff5e4.leeandco.net.,InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_541993.78792c207468656e20796f7572205765622050726f787920697320.872.ymil00.hex.acaddff5e4.leeandco.net.;InfobloxRPZ=LIST_541993;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=90,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:41:42.672 PM",,Infoblox,Data Connector,RPZ-QNAME-NXDOMAIN,8,,NXDOMAIN,NXDOMAIN,,"""RPZ QNAME NXDOMAIN rewrite 78792c207468656e20796f7572205765622050726f787920697320.775.zcmt50.hex.acaddff5e4.leeandco.net. [A] via LIST_541993.78792c207468656e20796f7572205765622050726f787920697320.775.zcmt50.hex.acaddff5e4.leeandco.net.""",,56540,208.50.179.13,2.1.3,RPZ EVENT QNAME NXDOMAIN,DNS,78792c207468656e20796f7572205765622050726f787920697320.775.zcmt50.hex.acaddff5e4.leeandco.net.,InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_541993.78792c207468656e20796f7572205765622050726f787920697320.775.zcmt50.hex.acaddff5e4.leeandco.net.;InfobloxRPZ=LIST_541993;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=90,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:21:22.610 PM",,Infoblox,Data Connector,RPZ-QNAME-NXDOMAIN,8,,NXDOMAIN,NXDOMAIN,,"""RPZ QNAME NXDOMAIN rewrite 78792c207468656e20796f7572205765622050726f787920697320.775.ymil00.hex.acaddff5e4.leeandco.net. [A] via LIST_541993.78792c207468656e20796f7572205765622050726f787920697320.775.ymil00.hex.acaddff5e4.leeandco.net.""",,50593,208.50.179.13,2.1.3,RPZ EVENT QNAME NXDOMAIN,DNS,78792c207468656e20796f7572205765622050726f787920697320.775.ymil00.hex.acaddff5e4.leeandco.net.,InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_541993.78792c207468656e20796f7572205765622050726f787920697320.775.ymil00.hex.acaddff5e4.leeandco.net.;InfobloxRPZ=LIST_541993;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=90,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:41:27.054 PM",,Infoblox,Data Connector,RPZ-QNAME-NXDOMAIN,8,,NXDOMAIN,NXDOMAIN,,"""RPZ QNAME NXDOMAIN rewrite 78792c207468656e20796f7572205765622050726f787920697320.678.zcmt50.hex.acaddff5e4.leeandco.net. [A] via LIST_541993.78792c207468656e20796f7572205765622050726f787920697320.678.zcmt50.hex.acaddff5e4.leeandco.net.""",,46369,208.50.179.13,2.1.3,RPZ EVENT QNAME NXDOMAIN,DNS,78792c207468656e20796f7572205765622050726f787920697320.678.zcmt50.hex.acaddff5e4.leeandco.net.,InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_541993.78792c207468656e20796f7572205765622050726f787920697320.678.zcmt50.hex.acaddff5e4.leeandco.net.;InfobloxRPZ=LIST_541993;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=90,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/12/2021, 12:00:16.636 AM",,Infoblox,Data Connector,DNS Response,1,,,,8.8.8.8,"""wns.notify.trafficmanager.net. 58 IN CNAME vip2-dm3p.wns.notify.trafficmanager.net. vip2-dm3p.wns.notify.trafficmanager.net. 162 IN A 52.242.211.89 . 32768 512 OPT """,UDP,46716,172.0.0.253,2.1.3,DNS Response IN A NOERROR,DNS,wns.notify.trafficmanager.net.,InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=2;InfobloxNsCount=0;InfobloxArCount=1,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/12/2021, 12:25:46.643 AM",,Infoblox,Data Connector,DNS Response,1,,,,8.8.8.8,"""wns.notify.trafficmanager.net. 5 IN CNAME vip2-dm3p.wns.notify.trafficmanager.net. vip2-dm3p.wns.notify.trafficmanager.net. 145 IN A 52.242.211.89 . 32768 512 OPT """,UDP,59321,172.0.0.253,2.1.3,DNS Response IN A NOERROR,DNS,wns.notify.trafficmanager.net.,InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=2;InfobloxNsCount=0;InfobloxArCount=1,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/12/2021, 12:20:31.660 AM",,Infoblox,Data Connector,DNS Response,1,,,,8.8.8.8,"""wns.notify.trafficmanager.net. 49 IN CNAME vip2-dm3p.wns.notify.trafficmanager.net. vip2-dm3p.wns.notify.trafficmanager.net. 114 IN A 52.242.211.89 . 32768 512 OPT """,UDP,51916,172.0.0.253,2.1.3,DNS Response IN A NOERROR,DNS,wns.notify.trafficmanager.net.,InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=2;InfobloxNsCount=0;InfobloxArCount=1,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/12/2021, 12:05:16.647 AM",,Infoblox,Data Connector,DNS Response,1,,,,8.8.8.8,"""wns.notify.trafficmanager.net. 299 IN A 52.230.222.68 . 32768 512 OPT """,UDP,53156,172.0.0.253,2.1.3,DNS Response IN A NOERROR,DNS,wns.notify.trafficmanager.net.,InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:55:01.617 PM",,Infoblox,Data Connector,DNS Response,1,,,,8.8.8.8,"""wns.notify.trafficmanager.net. 260 IN CNAME vip2-dm3p.wns.notify.trafficmanager.net. vip2-dm3p.wns.notify.trafficmanager.net. 237 IN A 52.242.211.89 . 32768 512 OPT """,UDP,39254,172.0.0.253,2.1.3,DNS Response IN A NOERROR,DNS,wns.notify.trafficmanager.net.,InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=2;InfobloxNsCount=0;InfobloxArCount=1,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/12/2021, 12:10:16.636 AM",,Infoblox,Data Connector,DNS Response,1,,,,8.8.8.8,"""wns.notify.trafficmanager.net. 257 IN CNAME vip2-dm3p.wns.notify.trafficmanager.net. vip2-dm3p.wns.notify.trafficmanager.net. 186 IN A 52.242.211.89 . 32768 512 OPT """,UDP,33749,172.0.0.253,2.1.3,DNS Response IN A NOERROR,DNS,wns.notify.trafficmanager.net.,InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=2;InfobloxNsCount=0;InfobloxArCount=1,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/12/2021, 12:15:16.650 AM",,Infoblox,Data Connector,DNS Response,1,,,,8.8.8.8,"""wns.notify.trafficmanager.net. 134 IN CNAME vip2-dm3p.wns.notify.trafficmanager.net. vip2-dm3p.wns.notify.trafficmanager.net. 287 IN A 52.242.211.89 . 32768 512 OPT """,UDP,35005,172.0.0.253,2.1.3,DNS Response IN A NOERROR,DNS,wns.notify.trafficmanager.net.,InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=2;InfobloxNsCount=0;InfobloxArCount=1,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/12/2021, 12:16:16.630 AM",,Infoblox,Data Connector,DNS Response,1,,,,8.8.8.8,"""wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 59 IN A 18.235.149.1 wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 59 IN A 18.233.189.178 wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 59 IN A 18.209.243.220 . 32768 512 OPT """,UDP,57418,172.0.0.253,2.1.3,DNS Response IN A NOERROR,DNS,wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com.,InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=3;InfobloxNsCount=0;InfobloxArCount=1,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/12/2021, 12:06:01.637 AM",,Infoblox,Data Connector,DNS Response,1,,,,8.8.8.8,"""wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 59 IN A 18.209.243.220 wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 59 IN A 18.235.149.1 wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 59 IN A 18.233.189.178 . 32768 512 OPT """,UDP,40393,172.0.0.253,2.1.3,DNS Response IN A NOERROR,DNS,wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com.,InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=3;InfobloxNsCount=0;InfobloxArCount=1,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:55:16.617 PM",,Infoblox,Data Connector,DNS Response,1,,,,8.8.8.8,"""wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 59 IN A 18.209.243.220 wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 59 IN A 18.233.189.178 wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 59 IN A 18.235.149.1 . 32768 512 OPT """,UDP,60290,172.0.0.253,2.1.3,DNS Response IN A NOERROR,DNS,wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com.,InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=3;InfobloxNsCount=0;InfobloxArCount=1,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/12/2021, 12:25:46.644 AM",,Infoblox,Data Connector,DNS Response,1,,,,8.8.8.8,"""wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 58 IN A 18.233.189.178 wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 58 IN A 18.235.149.1 wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 58 IN A 18.209.243.220 . 32768 512 OPT """,UDP,48161,172.0.0.253,2.1.3,DNS Response IN A NOERROR,DNS,wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com.,InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=3;InfobloxNsCount=0;InfobloxArCount=1,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/12/2021, 12:05:31.638 AM",,Infoblox,Data Connector,DNS Response,1,,,,8.8.8.8,"""wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 30 IN A 18.235.149.1 wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 30 IN A 18.233.189.178 wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 30 IN A 18.209.243.220 . 32768 512 OPT """,UDP,44954,172.0.0.253,2.1.3,DNS Response IN A NOERROR,DNS,wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com.,InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=3;InfobloxNsCount=0;InfobloxArCount=1,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/12/2021, 12:15:46.640 AM",,Infoblox,Data Connector,DNS Response,1,,,,8.8.8.8,"""wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 30 IN A 18.209.243.220 wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 30 IN A 18.233.189.178 wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 30 IN A 18.235.149.1 . 32768 512 OPT """,UDP,54506,172.0.0.253,2.1.3,DNS Response IN A NOERROR,DNS,wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com.,InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=3;InfobloxNsCount=0;InfobloxArCount=1,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:57:31.631 PM",,Infoblox,Data Connector,DNS Response,1,,,,8.8.8.8,"""wildcard.weather.microsoft.com.edgekey.net. 513 IN CNAME e15275.g.akamaiedge.net. e15275.g.akamaiedge.net. 19 IN A 104.86.95.226 . 32768 512 OPT """,UDP,45460,172.0.0.253,2.1.3,DNS Response IN A NOERROR,DNS,wildcard.weather.microsoft.com.edgekey.net.,InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=2;InfobloxNsCount=0;InfobloxArCount=1,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/12/2021, 12:10:16.635 AM",,Infoblox,Data Connector,DNS Response,1,,,,8.8.8.8,"""vip2-dm3p.wns.notify.trafficmanager.net. 203 IN A 52.242.211.89 . 32768 512 OPT """,UDP,33886,172.0.0.253,2.1.3,DNS Response IN A NOERROR,DNS,vip2-dm3p.wns.notify.trafficmanager.net.,InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/12/2021, 12:15:16.651 AM",,Infoblox,Data Connector,DNS Response,1,,,,8.8.8.8,"""vip2-dm3p.wns.notify.trafficmanager.net. 202 IN A 52.242.211.89 . 32768 512 OPT """,UDP,50754,172.0.0.253,2.1.3,DNS Response IN A NOERROR,DNS,vip2-dm3p.wns.notify.trafficmanager.net.,InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/12/2021, 12:25:46.643 AM",,Infoblox,Data Connector,DNS Response,1,,,,8.8.8.8,"""vip2-dm3p.wns.notify.trafficmanager.net. 162 IN A 52.242.211.89 . 32768 512 OPT """,UDP,58415,172.0.0.253,2.1.3,DNS Response IN A NOERROR,DNS,vip2-dm3p.wns.notify.trafficmanager.net.,InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/12/2021, 12:00:16.637 AM",,Infoblox,Data Connector,DNS Response,1,,,,8.8.8.8,"""vip2-dm3p.wns.notify.trafficmanager.net. 125 IN A 52.242.211.89 . 32768 512 OPT """,UDP,49076,172.0.0.253,2.1.3,DNS Response IN A NOERROR,DNS,vip2-dm3p.wns.notify.trafficmanager.net.,InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/12/2021, 12:20:31.660 AM",,Infoblox,Data Connector,DNS Response,1,,,,8.8.8.8,"""vip2-dm3p.wns.notify.trafficmanager.net. 114 IN A 52.242.211.89 . 32768 512 OPT """,UDP,51750,172.0.0.253,2.1.3,DNS Response IN A NOERROR,DNS,vip2-dm3p.wns.notify.trafficmanager.net.,InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:55:01.617 PM",,Infoblox,Data Connector,DNS Response,1,,,,8.8.8.8,"""vip2-dm3p.wns.notify.trafficmanager.net. 108 IN A 52.242.211.89 . 32768 512 OPT """,UDP,43847,172.0.0.253,2.1.3,DNS Response IN A NOERROR,DNS,vip2-dm3p.wns.notify.trafficmanager.net.,InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/12/2021, 12:16:46.627 AM",,Infoblox,Data Connector,DNS Response,1,,,,172.0.0.253,"""v10.events.data.microsoft.com. 756 IN CNAME global.asimov.events.data.trafficmanager.net. global.asimov.events.data.trafficmanager.net. 15 IN CNAME skypedataprdcoljpe03.cloudapp.net. skypedataprdcoljpe03.cloudapp.net. 9 IN A 52.114.32.8 net. 146266 IN NS e.gtld-servers.net. net. 146266 IN NS b.gtld-servers.net. net. 146266 IN NS f.gtld-servers.net. net. 146266 IN NS l.gtld-servers.net. net. 146266 IN NS d.gtld-servers.net. net. 146266 IN NS k.gtld-servers.net. net. 146266 IN NS h.gtld-servers.net. net. 146266 IN NS g.gtld-servers.net. net. 146266 IN NS a.gtld-servers.net. net. 146266 IN NS j.gtld-servers.net. net. 146266 IN NS c.gtld-servers.net. net. 146266 IN NS i.gtld-servers.net. net. 146266 IN NS m.gtld-servers.net. a.gtld-servers.net. 146266 IN A 192.5.6.30 b.gtld-servers.net. 146266 IN A 192.33.14.30 c.gtld-servers.net. 146266 IN A 192.26.92.30 d.gtld-servers.net. 146266 IN A 192.31.80.30 e.gtld-servers.net. 146266 IN A 192.12.94.30 f.gtld-servers.net. 146266 IN A 192.35.51.30 g.gtld-servers.net. 146266 IN A 192.42.93.30""",UDP,54957,172.0.0.110,2.1.3,DNS Response IN A NOERROR,DNS,v10.events.data.microsoft.com.,InfobloxDNSView=2fa70211-f936-4bff-8810-56103877d7ad;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=3;InfobloxNsCount=13;InfobloxArCount=7,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/12/2021, 12:05:16.647 AM",,Infoblox,Data Connector,DNS Response,1,,,,8.8.8.8,"""tm2.edgedns-tm.info. 67 IN A 13.107.247.10 . 32768 512 OPT """,UDP,45694,172.0.0.253,2.1.3,DNS Response IN A NOERROR,DNS,tm2.edgedns-tm.info.,InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/12/2021, 12:20:31.659 AM",,Infoblox,Data Connector,DNS Response,1,,,,8.8.8.8,"""tm2.edgedns-tm.info. 294 IN A 13.107.247.10 . 32768 512 OPT """,UDP,56767,172.0.0.253,2.1.3,DNS Response IN A NOERROR,DNS,tm2.edgedns-tm.info.,InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:55:01.617 PM",,Infoblox,Data Connector,DNS Response,1,,,,8.8.8.8,"""tm2.edgedns-tm.info. 233 IN A 13.107.247.10 . 32768 512 OPT """,UDP,44411,172.0.0.253,2.1.3,DNS Response IN A NOERROR,DNS,tm2.edgedns-tm.info.,InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/12/2021, 12:00:16.638 AM",,Infoblox,Data Connector,DNS Response,1,,,,8.8.8.8,"""tm2.edgedns-tm.info. 217 IN A 13.107.247.10 . 32768 512 OPT """,UDP,45841,172.0.0.253,2.1.3,DNS Response IN A NOERROR,DNS,tm2.edgedns-tm.info.,InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/12/2021, 12:15:16.651 AM",,Infoblox,Data Connector,DNS Response,1,,,,8.8.8.8,"""tm2.edgedns-tm.info. 212 IN A 13.107.247.10 . 32768 512 OPT """,UDP,47004,172.0.0.253,2.1.3,DNS Response IN A NOERROR,DNS,tm2.edgedns-tm.info.,InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/12/2021, 12:25:46.644 AM",,Infoblox,Data Connector,DNS Response,1,,,,8.8.8.8,"""tm2.edgedns-tm.info. 211 IN A 13.107.247.10 . 32768 512 OPT """,UDP,54364,172.0.0.253,2.1.3,DNS Response IN A NOERROR,DNS,tm2.edgedns-tm.info.,InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/12/2021, 12:10:16.634 AM",,Infoblox,Data Connector,DNS Response,1,,,,8.8.8.8,"""tm2.edgedns-tm.info. 191 IN A 13.107.247.10 . 32768 512 OPT """,UDP,38492,172.0.0.253,2.1.3,DNS Response IN A NOERROR,DNS,tm2.edgedns-tm.info.,InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/12/2021, 12:16:46.627 AM",,Infoblox,Data Connector,DNS Response,1,,,,8.8.8.8,"""tm2.dns-tm.com. 86 IN A 65.55.117.41 . 32768 512 OPT """,UDP,44426,172.0.0.253,2.1.3,DNS Response IN A NOERROR,DNS,tm2.dns-tm.com.,InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/12/2021, 12:15:16.649 AM",,Infoblox,Data Connector,DNS Response,1,,,,8.8.8.8,"""tm2.dns-tm.com. 38 IN A 65.55.117.41 . 32768 512 OPT """,UDP,56447,172.0.0.253,2.1.3,DNS Response IN A NOERROR,DNS,tm2.dns-tm.com.,InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/12/2021, 12:20:31.659 AM",,Infoblox,Data Connector,DNS Response,1,,,,8.8.8.8,"""tm2.dns-tm.com. 260 IN A 65.55.117.41 . 32768 512 OPT """,UDP,45204,172.0.0.253,2.1.3,DNS Response IN A NOERROR,DNS,tm2.dns-tm.com.,InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/12/2021, 12:05:16.646 AM",,Infoblox,Data Connector,DNS Response,1,,,,8.8.8.8,"""tm2.dns-tm.com. 174 IN A 65.55.117.41 . 32768 512 OPT """,UDP,45333,172.0.0.253,2.1.3,DNS Response IN A NOERROR,DNS,tm2.dns-tm.com.,InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/12/2021, 12:10:16.636 AM",,Infoblox,Data Connector,DNS Response,1,,,,8.8.8.8,"""tm2.dns-tm.com. 173 IN A 65.55.117.41 . 32768 512 OPT """,UDP,42399,172.0.0.253,2.1.3,DNS Response IN A NOERROR,DNS,tm2.dns-tm.com.,InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/12/2021, 12:25:46.643 AM",,Infoblox,Data Connector,DNS Response,1,,,,8.8.8.8,"""tm2.dns-tm.com. 164 IN A 65.55.117.41 . 32768 512 OPT """,UDP,55072,172.0.0.253,2.1.3,DNS Response IN A NOERROR,DNS,tm2.dns-tm.com.,InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:55:01.617 PM",,Infoblox,Data Connector,DNS Response,1,,,,8.8.8.8,"""tm2.dns-tm.com. 158 IN A 65.55.117.41 . 32768 512 OPT """,UDP,34805,172.0.0.253,2.1.3,DNS Response IN A NOERROR,DNS,tm2.dns-tm.com.,InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/12/2021, 12:00:16.638 AM",,Infoblox,Data Connector,DNS Response,1,,,,8.8.8.8,"""tm2.dns-tm.com. 156 IN A 65.55.117.41 . 32768 512 OPT """,UDP,42203,172.0.0.253,2.1.3,DNS Response IN A NOERROR,DNS,tm2.dns-tm.com.,InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/12/2021, 12:15:16.651 AM",,Infoblox,Data Connector,DNS Response,1,,,,8.8.8.8,"""tm1.edgedns-tm.info. 247 IN A 13.107.252.10 . 32768 512 OPT """,UDP,34255,172.0.0.253,2.1.3,DNS Response IN A NOERROR,DNS,tm1.edgedns-tm.info.,InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/12/2021, 12:20:31.659 AM",,Infoblox,Data Connector,DNS Response,1,,,,8.8.8.8,"""tm1.edgedns-tm.info. 240 IN A 13.107.252.10 . 32768 512 OPT """,UDP,42884,172.0.0.253,2.1.3,DNS Response IN A NOERROR,DNS,tm1.edgedns-tm.info.,InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/12/2021, 12:25:46.643 AM",,Infoblox,Data Connector,DNS Response,1,,,,8.8.8.8,"""tm1.edgedns-tm.info. 239 IN A 13.107.252.10 . 32768 512 OPT """,UDP,50464,172.0.0.253,2.1.3,DNS Response IN A NOERROR,DNS,tm1.edgedns-tm.info.,InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:55:01.617 PM",,Infoblox,Data Connector,DNS Response,1,,,,8.8.8.8,"""tm1.edgedns-tm.info. 159 IN A 13.107.252.10 . 32768 512 OPT """,UDP,57673,172.0.0.253,2.1.3,DNS Response IN A NOERROR,DNS,tm1.edgedns-tm.info.,InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/12/2021, 12:10:16.636 AM",,Infoblox,Data Connector,DNS Response,1,,,,8.8.8.8,"""tm1.edgedns-tm.info. 144 IN A 13.107.252.10 . 32768 512 OPT """,UDP,45191,172.0.0.253,2.1.3,DNS Response IN A NOERROR,DNS,tm1.edgedns-tm.info.,InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/12/2021, 12:00:16.637 AM",,Infoblox,Data Connector,DNS Response,1,,,,8.8.8.8,"""tm1.edgedns-tm.info. 106 IN A 13.107.252.10 . 32768 512 OPT """,UDP,45896,172.0.0.253,2.1.3,DNS Response IN A NOERROR,DNS,tm1.edgedns-tm.info.,InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/12/2021, 12:05:16.647 AM",,Infoblox,Data Connector,DNS Response,1,,,,8.8.8.8,"""tm1.edgedns-tm.info. 103 IN A 13.107.252.10 . 32768 512 OPT """,UDP,54183,172.0.0.253,2.1.3,DNS Response IN A NOERROR,DNS,tm1.edgedns-tm.info.,InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:55:01.617 PM",,Infoblox,Data Connector,DNS Response,1,,,,8.8.8.8,"""tm1.dns-tm.com. 5 IN A 204.79.195.41 . 32768 512 OPT """,UDP,37550,172.0.0.253,2.1.3,DNS Response IN A NOERROR,DNS,tm1.dns-tm.com.,InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/12/2021, 12:00:16.637 AM",,Infoblox,Data Connector,DNS Response,1,,,,8.8.8.8,"""tm1.dns-tm.com. 298 IN A 204.79.195.41 . 32768 512 OPT """,UDP,36466,172.0.0.253,2.1.3,DNS Response IN A NOERROR,DNS,tm1.dns-tm.com.,InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/12/2021, 12:15:16.651 AM",,Infoblox,Data Connector,DNS Response,1,,,,8.8.8.8,"""tm1.dns-tm.com. 296 IN A 204.79.195.41 . 32768 512 OPT """,UDP,57690,172.0.0.253,2.1.3,DNS Response IN A NOERROR,DNS,tm1.dns-tm.com.,InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/12/2021, 12:20:31.659 AM",,Infoblox,Data Connector,DNS Response,1,,,,8.8.8.8,"""tm1.dns-tm.com. 296 IN A 204.79.195.41 . 32768 512 OPT """,UDP,47952,172.0.0.253,2.1.3,DNS Response IN A NOERROR,DNS,tm1.dns-tm.com.,InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/12/2021, 12:05:16.646 AM",,Infoblox,Data Connector,DNS Response,1,,,,8.8.8.8,"""tm1.dns-tm.com. 275 IN A 204.79.195.41 . 32768 512 OPT """,UDP,36516,172.0.0.253,2.1.3,DNS Response IN A NOERROR,DNS,tm1.dns-tm.com.,InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/12/2021, 12:25:46.643 AM",,Infoblox,Data Connector,DNS Response,1,,,,8.8.8.8,"""tm1.dns-tm.com. 266 IN A 204.79.195.41 . 32768 512 OPT """,UDP,56147,172.0.0.253,2.1.3,DNS Response IN A NOERROR,DNS,tm1.dns-tm.com.,InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/12/2021, 12:10:16.636 AM",,Infoblox,Data Connector,DNS Response,1,,,,8.8.8.8,"""tm1.dns-tm.com. 207 IN A 204.79.195.41 . 32768 512 OPT """,UDP,50986,172.0.0.253,2.1.3,DNS Response IN A NOERROR,DNS,tm1.dns-tm.com.,InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:57:31.632 PM",,Infoblox,Data Connector,DNS Response,1,,,,172.0.0.253,"""tile-service.weather.microsoft.com. 181 IN CNAME wildcard.weather.microsoft.com.edgekey.net. wildcard.weather.microsoft.com.edgekey.net. 513 IN CNAME e15275.g.akamaiedge.net. e15275.g.akamaiedge.net. 19 IN A 104.86.95.226 net. 147420 IN NS i.gtld-servers.net. net. 147420 IN NS b.gtld-servers.net. net. 147420 IN NS k.gtld-servers.net. net. 147420 IN NS g.gtld-servers.net. net. 147420 IN NS l.gtld-servers.net. net. 147420 IN NS a.gtld-servers.net. net. 147420 IN NS c.gtld-servers.net. net. 147420 IN NS e.gtld-servers.net. net. 147420 IN NS j.gtld-servers.net. net. 147420 IN NS f.gtld-servers.net. net. 147420 IN NS h.gtld-servers.net. net. 147420 IN NS d.gtld-servers.net. net. 147420 IN NS m.gtld-servers.net. a.gtld-servers.net. 147420 IN A 192.5.6.30 b.gtld-servers.net. 147420 IN A 192.33.14.30 c.gtld-servers.net. 147420 IN A 192.26.92.30 d.gtld-servers.net. 147420 IN A 192.31.80.30 e.gtld-servers.net. 147420 IN A 192.12.94.30 f.gtld-servers.net. 147420 IN A 192.35.51.30 g.gtld-servers.net. 147420 IN A 192.42.93.30 h.gtld-servers.net. 147420 IN A 192.54.112.30""",UDP,56656,172.0.0.110,2.1.3,DNS Response IN A NOERROR,DNS,tile-service.weather.microsoft.com.,InfobloxDNSView=2fa70211-f936-4bff-8810-56103877d7ad;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=3;InfobloxNsCount=13;InfobloxArCount=8,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/12/2021, 12:16:46.627 AM",,Infoblox,Data Connector,DNS Response,1,,,,8.8.8.8,"""skypedataprdcoljpe03.cloudapp.net. 9 IN A 52.114.32.8 . 32768 512 OPT """,UDP,51053,172.0.0.253,2.1.3,DNS Response IN A NOERROR,DNS,skypedataprdcoljpe03.cloudapp.net.,InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/12/2021, 12:13:16.671 AM",,Infoblox,Data Connector,DNS Response,1,,,,172.0.0.253,"""safebrowsing.googleapis.com. 52 IN A 74.125.137.95 com. 146494 IN NS h.gtld-servers.net. com. 146494 IN NS g.gtld-servers.net. com. 146494 IN NS e.gtld-servers.net. com. 146494 IN NS l.gtld-servers.net. com. 146494 IN NS d.gtld-servers.net. com. 146494 IN NS i.gtld-servers.net. com. 146494 IN NS a.gtld-servers.net. com. 146494 IN NS b.gtld-servers.net. com. 146494 IN NS f.gtld-servers.net. com. 146494 IN NS k.gtld-servers.net. com. 146494 IN NS m.gtld-servers.net. com. 146494 IN NS j.gtld-servers.net. com. 146494 IN NS c.gtld-servers.net. a.gtld-servers.net. 146476 IN A 192.5.6.30 b.gtld-servers.net. 146476 IN A 192.33.14.30 c.gtld-servers.net. 146476 IN A 192.26.92.30 d.gtld-servers.net. 146476 IN A 192.31.80.30 e.gtld-servers.net. 146476 IN A 192.12.94.30 f.gtld-servers.net. 146476 IN A 192.35.51.30 g.gtld-servers.net. 146476 IN A 192.42.93.30 h.gtld-servers.net. 146476 IN A 192.54.112.30 i.gtld-servers.net. 146476 IN A 192.43.172.30 j.gtld-servers.net. 146476 IN A 192.48.79.30 k.gtld-servers.net. 146476 IN A 192.52.178.30 l.gtld-servers.net. 146476 IN A 192.41.162.30 m.gtld-servers.net. 146476 IN A 192.55.83.30""",UDP,53788,172.0.0.110,2.1.3,DNS Response IN A NOERROR,DNS,safebrowsing.googleapis.com.,InfobloxDNSView=2fa70211-f936-4bff-8810-56103877d7ad;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=13;InfobloxArCount=13,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/12/2021, 12:13:16.670 AM",,Infoblox,Data Connector,DNS Response,1,,,,8.8.8.8,"""safebrowsing.googleapis.com. 52 IN A 74.125.137.95 . 32768 512 OPT """,UDP,58976,172.0.0.253,2.1.3,DNS Response IN A NOERROR,DNS,safebrowsing.googleapis.com.,InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/12/2021, 12:10:16.636 AM",,Infoblox,Data Connector,DNS Response,1,,,,8.8.8.8,"""ns4-09.azure-dns.info. 3596 IN A 13.107.160.9 . 32768 512 OPT """,UDP,55306,172.0.0.253,2.1.3,DNS Response IN A NOERROR,DNS,ns4-09.azure-dns.info.,InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/12/2021, 12:05:16.646 AM",,Infoblox,Data Connector,DNS Response,1,,,,8.8.8.8,"""ns3-09.azure-dns.org. 2748 IN A 13.107.24.9 . 32768 512 OPT """,UDP,52253,172.0.0.253,2.1.3,DNS Response IN A NOERROR,DNS,ns3-09.azure-dns.org.,InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/12/2021, 12:10:16.636 AM",,Infoblox,Data Connector,DNS Response,1,,,,8.8.8.8,"""ns2-09.azure-dns.net. 2730 IN A 64.4.48.9 . 32768 512 OPT """,UDP,32807,172.0.0.253,2.1.3,DNS Response IN A NOERROR,DNS,ns2-09.azure-dns.net.,InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/12/2021, 12:25:46.644 AM",,Infoblox,Data Connector,DNS Response,1,,,,172.0.0.253,"""infoblox.com. 836 IN SOA thens.infoblox.com. dns.infoblox.com. 2006594658 10800 1080 1209600 3600""",UDP,62059,172.0.0.33,2.1.3,DNS Response IN TXT NXDOMAIN,DNS,probe.infoblox.com.,InfobloxDNSView=2fa70211-f936-4bff-8810-56103877d7ad;InfobloxDNSQClass=IN;InfobloxDNSQType=TXT;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NXDOMAIN;InfobloxAnCount=0;InfobloxNsCount=1;InfobloxArCount=0,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/12/2021, 12:25:46.645 AM",,Infoblox,Data Connector,DNS Response,1,,,,8.8.8.8,"""infoblox.com. 836 IN SOA thens.infoblox.com. dns.infoblox.com. 2006594658 10800 1080 1209600 3600 infoblox.com. 836 IN RRSIG SOA 5 2 3600 20210216000453 20210211230453 42390 infoblox.com.",UDP,55004,172.0.0.253,2.1.3,DNS Response IN TXT NXDOMAIN,DNS,probe.infoblox.com.,"InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=TXT;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NXDOMAIN;KM0UDEZaKvjwv7o7Du25SdACInDRrrjkgBfnquwSdW4cE2TaqsW7sjr+cw01rNikDGQexi5sFgu63NLZEErVWOB7QmaNBbHwnQznxlOD5HSaJtALqSPv4+bX+fOTmUPF7Iv4ciAMVhrZNip6UyZkuA/AHEQpEV8j8aZC5zyq8SY= infoblox.com. 2636 IN NSEC 6map.infoblox.com. A NS SOA MX TXT AAAA RRSIG NSEC DNSKEY infoblox.com. 2636 IN RRSIG NSEC 5 2 3600 20210215102520 20210211094432 42390 infoblox.com.;ltbHfYR2kCklsWj6Pc6RffRuKBEttxvj9xuCJNAIfNHm0Tcc6j0i1dxG8Z86M/7U00ARch8F6L2zVWtRq+CoUJw4eIm2cMm6QR1vou6Pzfff53n88h5U3MaRXzGpco3YCz9B0QL+q5hg9+uqbHgQGau1TXYoSglLEqpdQKECbTM= preprod-noa.infoblox.com. 2636 IN NSEC pstraining.infoblox.com. NS RRSIG NSEC preprod-noa.infoblox.com. 2636 IN RRSIG NSEC 5 3 3600 20210215220928 20210211214809 42390 infoblox.com.;jkCvy1LpbSPNmDeuqIVJlONQgVC01X80rwYN8Xj7R59wqhg9nuYa7sGYzNXzWjzy6MHpVFfgfXEtDYgY4E42W+StAvTi4hx77KmzGD2xuKO/KGKd3/RqsMCwsdtHmzCLtHU7EY6tumRBjlu7E/ErTRkJeSrECrtaZsHHhpLhKho= . 32768 512 OPT "";InfobloxAnCount=0;InfobloxNsCount=6;InfobloxArCount=1",CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/12/2021, 12:26:31.640 AM",,Infoblox,Data Connector,DNS Response,1,,,,172.0.0.253,"""infoblox.com. 799 IN SOA thens.infoblox.com. dns.infoblox.com. 2006594658 10800 1080 1209600 3600""",UDP,62091,172.0.0.32,2.1.3,DNS Response IN TXT NXDOMAIN,DNS,probe.infoblox.com.,InfobloxDNSView=2fa70211-f936-4bff-8810-56103877d7ad;InfobloxDNSQClass=IN;InfobloxDNSQType=TXT;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NXDOMAIN;InfobloxAnCount=0;InfobloxNsCount=1;InfobloxArCount=0,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/12/2021, 12:15:46.640 AM",,Infoblox,Data Connector,DNS Response,1,,,,172.0.0.253,"""infoblox.com. 438 IN SOA thens.infoblox.com. dns.infoblox.com. 2006594654 10800 1080 1209600 3600""",UDP,55225,172.0.0.33,2.1.3,DNS Response IN TXT NXDOMAIN,DNS,probe.infoblox.com.,InfobloxDNSView=2fa70211-f936-4bff-8810-56103877d7ad;InfobloxDNSQClass=IN;InfobloxDNSQType=TXT;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NXDOMAIN;InfobloxAnCount=0;InfobloxNsCount=1;InfobloxArCount=0,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/12/2021, 12:16:16.630 AM",,Infoblox,Data Connector,DNS Response,1,,,,172.0.0.253,"""infoblox.com. 403 IN SOA thens.infoblox.com. dns.infoblox.com. 2006594654 10800 1080 1209600 3600""",UDP,56468,172.0.0.32,2.1.3,DNS Response IN TXT NXDOMAIN,DNS,probe.infoblox.com.,InfobloxDNSView=2fa70211-f936-4bff-8810-56103877d7ad;InfobloxDNSQClass=IN;InfobloxDNSQType=TXT;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NXDOMAIN;InfobloxAnCount=0;InfobloxNsCount=1;InfobloxArCount=0,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:55:16.617 PM",,Infoblox,Data Connector,DNS Response,1,,,,172.0.0.253,"""infoblox.com. 1664 IN SOA thens.infoblox.com. dns.infoblox.com. 2006594654 10800 1080 1209600 3600""",UDP,60664,172.0.0.33,2.1.3,DNS Response IN TXT NXDOMAIN,DNS,probe.infoblox.com.,InfobloxDNSView=2fa70211-f936-4bff-8810-56103877d7ad;InfobloxDNSQClass=IN;InfobloxDNSQType=TXT;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NXDOMAIN;InfobloxAnCount=0;InfobloxNsCount=1;InfobloxArCount=0,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:55:16.617 PM",,Infoblox,Data Connector,DNS Response,1,,,,8.8.8.8,"""infoblox.com. 1664 IN SOA thens.infoblox.com. dns.infoblox.com. 2006594654 10800 1080 1209600 3600 infoblox.com. 1664 IN RRSIG SOA 5 2 3600 20210215235054 20210211225054 42390 infoblox.com.",UDP,37721,172.0.0.253,2.1.3,DNS Response IN TXT NXDOMAIN,DNS,probe.infoblox.com.,"InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=TXT;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NXDOMAIN;URQjpbnaduy5A2bj673Rl5LUTrbsJU1hVTr/z7NlAe5dglgGYcpp1ROwCJsOOfhtq99TxxowkcmD+AwCm3Ggtvmrh3s2hCW3ik/vGY+ul51ltp1faMaAz6q0w6vntqVlZ5+/1TZ9yIHPRRLQnAGxcBAKwvmOwEUJY/wI3USQ8Wo= infoblox.com. 3464 IN NSEC 6map.infoblox.com. A NS SOA MX TXT AAAA RRSIG NSEC DNSKEY infoblox.com. 3464 IN RRSIG NSEC 5 2 3600 20210215102520 20210211094432 42390 infoblox.com.;ltbHfYR2kCklsWj6Pc6RffRuKBEttxvj9xuCJNAIfNHm0Tcc6j0i1dxG8Z86M/7U00ARch8F6L2zVWtRq+CoUJw4eIm2cMm6QR1vou6Pzfff53n88h5U3MaRXzGpco3YCz9B0QL+q5hg9+uqbHgQGau1TXYoSglLEqpdQKECbTM= preprod-noa.infoblox.com. 3464 IN NSEC pstraining.infoblox.com. NS RRSIG NSEC preprod-noa.infoblox.com. 3464 IN RRSIG NSEC 5 3 3600 20210215220928 20210211214809 42390 infoblox.com.;jkCvy1LpbSPNmDeuqIVJlONQgVC01X80rwYN8Xj7R59wqhg9nuYa7sGYzNXzWjzy6MHpVFfgfXEtDYgY4E42W+StAvTi4hx77KmzGD2xuKO/KGKd3/RqsMCwsdtHmzCLtHU7EY6tumRBjlu7E/ErTRkJeSrECrtaZsHHhpLhKho= . 32768 512 OPT "";InfobloxAnCount=0;InfobloxNsCount=6;InfobloxArCount=1",CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:55:46.638 PM",,Infoblox,Data Connector,DNS Response,1,,,,172.0.0.253,"""infoblox.com. 1632 IN SOA thens.infoblox.com. dns.infoblox.com. 2006594654 10800 1080 1209600 3600""",UDP,53104,172.0.0.32,2.1.3,DNS Response IN TXT NXDOMAIN,DNS,probe.infoblox.com.,InfobloxDNSView=2fa70211-f936-4bff-8810-56103877d7ad;InfobloxDNSQClass=IN;InfobloxDNSQType=TXT;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NXDOMAIN;InfobloxAnCount=0;InfobloxNsCount=1;InfobloxArCount=0,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/12/2021, 12:05:31.639 AM",,Infoblox,Data Connector,DNS Response,1,,,,172.0.0.253,"""infoblox.com. 1051 IN SOA thens.infoblox.com. dns.infoblox.com. 2006594654 10800 1080 1209600 3600""",UDP,56038,172.0.0.33,2.1.3,DNS Response IN TXT NXDOMAIN,DNS,probe.infoblox.com.,InfobloxDNSView=2fa70211-f936-4bff-8810-56103877d7ad;InfobloxDNSQClass=IN;InfobloxDNSQType=TXT;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NXDOMAIN;InfobloxAnCount=0;InfobloxNsCount=1;InfobloxArCount=0,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/12/2021, 12:06:01.638 AM",,Infoblox,Data Connector,DNS Response,1,,,,172.0.0.253,"""infoblox.com. 1017 IN SOA thens.infoblox.com. dns.infoblox.com. 2006594654 10800 1080 1209600 3600""",UDP,51793,172.0.0.32,2.1.3,DNS Response IN TXT NXDOMAIN,DNS,probe.infoblox.com.,InfobloxDNSView=2fa70211-f936-4bff-8810-56103877d7ad;InfobloxDNSQClass=IN;InfobloxDNSQType=TXT;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NXDOMAIN;InfobloxAnCount=0;InfobloxNsCount=1;InfobloxArCount=0,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/12/2021, 12:16:46.627 AM",,Infoblox,Data Connector,DNS Response,1,,,,8.8.8.8,"""global.asimov.events.data.trafficmanager.net. 15 IN CNAME skypedataprdcoljpe03.cloudapp.net. skypedataprdcoljpe03.cloudapp.net. 1 IN A 52.114.32.8 . 32768 512 OPT """,UDP,58700,172.0.0.253,2.1.3,DNS Response IN A NOERROR,DNS,global.asimov.events.data.trafficmanager.net.,InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=2;InfobloxNsCount=0;InfobloxArCount=1,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/12/2021, 12:01:46.672 AM",,Infoblox,Data Connector,DNS Response,1,,,,8.8.8.8,"""e28578.d.akamaiedge.net. 19 IN A 23.66.115.88 e28578.d.akamaiedge.net. 19 IN A 23.66.115.65 . 32768 512 OPT """,UDP,43777,172.0.0.253,2.1.3,DNS Response IN A NOERROR,DNS,e28578.d.akamaiedge.net.,InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=2;InfobloxNsCount=0;InfobloxArCount=1,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:57:31.632 PM",,Infoblox,Data Connector,DNS Response,1,,,,8.8.8.8,"""e15275.g.akamaiedge.net. 19 IN A 104.86.95.226 . 32768 512 OPT """,UDP,50478,172.0.0.253,2.1.3,DNS Response IN A NOERROR,DNS,e15275.g.akamaiedge.net.,InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/12/2021, 12:01:46.671 AM",,Infoblox,Data Connector,DNS Response,1,,,,8.8.8.8,"""e10663.dscg.akamaiedge.net. 19 IN A 23.44.13.99 . 32768 512 OPT """,UDP,50449,172.0.0.253,2.1.3,DNS Response IN A NOERROR,DNS,e10663.dscg.akamaiedge.net.,InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/12/2021, 12:17:46.668 AM",,Infoblox,Data Connector,DNS Response,1,,,,172.0.0.253,"""ctldl.windowsupdate.com. 1610 IN CNAME au-bg-shim.trafficmanager.net. au-bg-shim.trafficmanager.net. 3339 IN CNAME audownload.windowsupdate.nsatc.net. audownload.windowsupdate.nsatc.net. 412 IN CNAME au.download.windowsupdate.com.hwcdn.net. au.download.windowsupdate.com.hwcdn.net. 2629 IN CNAME cds.d2s7q6s2.hwcdn.net. cds.d2s7q6s2.hwcdn.net. 294 IN A 205.185.216.10 net. 146205 IN NS d.gtld-servers.net. net. 146205 IN NS h.gtld-servers.net. net. 146205 IN NS f.gtld-servers.net. net. 146205 IN NS l.gtld-servers.net. net. 146205 IN NS a.gtld-servers.net. net. 146205 IN NS i.gtld-servers.net. net. 146205 IN NS j.gtld-servers.net. net. 146205 IN NS b.gtld-servers.net. net. 146205 IN NS c.gtld-servers.net. net. 146205 IN NS k.gtld-servers.net. net. 146205 IN NS m.gtld-servers.net. net. 146205 IN NS g.gtld-servers.net. net. 146205 IN NS e.gtld-servers.net. a.gtld-servers.net. 146205 IN A 192.5.6.30 b.gtld-servers.net. 146205 IN A 192.33.14.30 c.gtld-servers.net. 146205 IN A 192.26.92.30 d.gtld-servers.net. 146205 IN A 192.31.80.30""",UDP,60429,172.0.0.110,2.1.3,DNS Response IN A NOERROR,DNS,ctldl.windowsupdate.com.,InfobloxDNSView=2fa70211-f936-4bff-8810-56103877d7ad;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=5;InfobloxNsCount=13;InfobloxArCount=4,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/12/2021, 12:17:46.666 AM",,Infoblox,Data Connector,DNS Response,1,,,,8.8.8.8,"""ctldl.windowsupdate.com. 1610 IN CNAME au-bg-shim.trafficmanager.net. au-bg-shim.trafficmanager.net. 1862 IN CNAME audownload.windowsupdate.nsatc.net. audownload.windowsupdate.nsatc.net. 424 IN CNAME auto.au.download.windowsupdate.com.c.footprint.net. auto.au.download.windowsupdate.com.c.footprint.net. 436 IN A 8.250.208.126 auto.au.download.windowsupdate.com.c.footprint.net. 436 IN A 8.253.133.112 auto.au.download.windowsupdate.com.c.footprint.net. 436 IN A 8.252.68.254 auto.au.download.windowsupdate.com.c.footprint.net. 436 IN A 8.253.231.254 auto.au.download.windowsupdate.com.c.footprint.net. 436 IN A 8.253.133.248 . 32768 512 OPT """,UDP,37184,172.0.0.253,2.1.3,DNS Response IN A NOERROR,DNS,ctldl.windowsupdate.com.,InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=8;InfobloxNsCount=0;InfobloxArCount=1,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/12/2021, 12:05:31.639 AM",,Infoblox,Data Connector,DNS Response,1,,,,172.0.0.253,"""csp.infoblox.com. 59 IN CNAME wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 30 IN A 18.233.189.178 wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 30 IN A 18.235.149.1 wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 30 IN A 18.209.243.220 amazonaws.com. 146976 IN NS r2.amazonaws.com. amazonaws.com. 146976 IN NS r1.amazonaws.com. amazonaws.com. 146976 IN NS u2.amazonaws.com. amazonaws.com. 146976 IN NS u1.amazonaws.com. r1.amazonaws.com. 146976 IN A 205.251.192.27 r2.amazonaws.com. 146976 IN A 205.251.195.199 u1.amazonaws.com. 146976 IN A 156.154.64.10 u2.amazonaws.com. 146976 IN A 156.154.65.10 r1.amazonaws.com. 146976 IN AAAA 2600:9000:5300:1b00::1 r2.amazonaws.com. 146976 IN AAAA 2600:9000:5303:c700::1 u1.amazonaws.com. 146976 IN AAAA 2001:502:f3ff::10 u2.amazonaws.com. 146976 IN AAAA 2610:a1:1014::10""",UDP,53359,172.0.0.33,2.1.3,DNS Response IN A NOERROR,DNS,csp.infoblox.com.,InfobloxDNSView=2fa70211-f936-4bff-8810-56103877d7ad;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=4;InfobloxNsCount=4;InfobloxArCount=8,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/12/2021, 12:05:31.639 AM",,Infoblox,Data Connector,DNS Response,1,,,,8.8.8.8,"""csp.infoblox.com. 59 IN CNAME wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. csp.infoblox.com. 59 IN RRSIG CNAME 5 3 60 20210215080312 20210211072137 42390 infoblox.com.",UDP,33872,172.0.0.253,2.1.3,DNS Response IN A NOERROR,DNS,csp.infoblox.com.,"InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;hmNp5KUN+Ve+rnbcXP4qK12Xy4UeoLsjop2V9t3DchBHtYvIQN1YA3E9X31zygaFcYyqCN7Pl+ee31lGJt1NacBHxQO9dlXHP0cwlbEgTpP1gLyBnUGxLS31vDP7NmObmLN4B223WvsvaiIBxf+OPTVFPjUR9GinDj2MjN2dWHs= wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 59 IN A 18.209.243.220 wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 59 IN A 18.233.189.178 wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 59 IN A 18.235.149.1 . 32768 512 OPT "";InfobloxAnCount=5;InfobloxNsCount=0;InfobloxArCount=1",CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/12/2021, 12:16:16.630 AM",,Infoblox,Data Connector,DNS Response,1,,,,172.0.0.253,"""csp.infoblox.com. 57 IN CNAME wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 59 IN A 18.233.189.178 wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 59 IN A 18.235.149.1 wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 59 IN A 18.209.243.220 amazonaws.com. 146327 IN NS u1.amazonaws.com. amazonaws.com. 146327 IN NS u2.amazonaws.com. amazonaws.com. 146327 IN NS r1.amazonaws.com. amazonaws.com. 146327 IN NS r2.amazonaws.com. r1.amazonaws.com. 146327 IN A 205.251.192.27 r2.amazonaws.com. 146327 IN A 205.251.195.199 u1.amazonaws.com. 146327 IN A 156.154.64.10 u2.amazonaws.com. 146327 IN A 156.154.65.10 r1.amazonaws.com. 146327 IN AAAA 2600:9000:5300:1b00::1 r2.amazonaws.com. 146327 IN AAAA 2600:9000:5303:c700::1 u1.amazonaws.com. 146327 IN AAAA 2001:502:f3ff::10 u2.amazonaws.com. 146327 IN AAAA 2610:a1:1014::10""",UDP,56467,172.0.0.32,2.1.3,DNS Response IN A NOERROR,DNS,csp.infoblox.com.,InfobloxDNSView=2fa70211-f936-4bff-8810-56103877d7ad;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=4;InfobloxNsCount=4;InfobloxArCount=8,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/12/2021, 12:16:16.630 AM",,Infoblox,Data Connector,DNS Response,1,,,,8.8.8.8,"""csp.infoblox.com. 57 IN CNAME wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. csp.infoblox.com. 57 IN RRSIG CNAME 5 3 60 20210215080312 20210211072137 42390 infoblox.com.",UDP,49295,172.0.0.253,2.1.3,DNS Response IN A NOERROR,DNS,csp.infoblox.com.,"InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;hmNp5KUN+Ve+rnbcXP4qK12Xy4UeoLsjop2V9t3DchBHtYvIQN1YA3E9X31zygaFcYyqCN7Pl+ee31lGJt1NacBHxQO9dlXHP0cwlbEgTpP1gLyBnUGxLS31vDP7NmObmLN4B223WvsvaiIBxf+OPTVFPjUR9GinDj2MjN2dWHs= wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 20 IN A 18.235.149.1 wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 20 IN A 18.209.243.220 wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 20 IN A 18.233.189.178 . 32768 512 OPT "";InfobloxAnCount=5;InfobloxNsCount=0;InfobloxArCount=1",CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/12/2021, 12:26:31.640 AM",,Infoblox,Data Connector,DNS Response,1,,,,172.0.0.253,"""csp.infoblox.com. 51 IN CNAME wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 22 IN A 18.209.243.220 wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 22 IN A 18.235.149.1 wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 22 IN A 18.233.189.178 amazonaws.com. 145713 IN NS u1.amazonaws.com. amazonaws.com. 145713 IN NS r1.amazonaws.com. amazonaws.com. 145713 IN NS u2.amazonaws.com. amazonaws.com. 145713 IN NS r2.amazonaws.com. r1.amazonaws.com. 145713 IN A 205.251.192.27 r2.amazonaws.com. 145713 IN A 205.251.195.199 u1.amazonaws.com. 145713 IN A 156.154.64.10 u2.amazonaws.com. 145713 IN A 156.154.65.10 r1.amazonaws.com. 145713 IN AAAA 2600:9000:5300:1b00::1 r2.amazonaws.com. 145713 IN AAAA 2600:9000:5303:c700::1 u1.amazonaws.com. 145713 IN AAAA 2001:502:f3ff::10 u2.amazonaws.com. 145713 IN AAAA 2610:a1:1014::10""",UDP,53347,172.0.0.32,2.1.3,DNS Response IN A NOERROR,DNS,csp.infoblox.com.,InfobloxDNSView=2fa70211-f936-4bff-8810-56103877d7ad;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=4;InfobloxNsCount=4;InfobloxArCount=8,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/12/2021, 12:26:31.640 AM",,Infoblox,Data Connector,DNS Response,1,,,,8.8.8.8,"""csp.infoblox.com. 51 IN CNAME wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. csp.infoblox.com. 51 IN RRSIG CNAME 5 3 60 20210215080312 20210211072137 42390 infoblox.com.",UDP,51652,172.0.0.253,2.1.3,DNS Response IN A NOERROR,DNS,csp.infoblox.com.,"InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;hmNp5KUN+Ve+rnbcXP4qK12Xy4UeoLsjop2V9t3DchBHtYvIQN1YA3E9X31zygaFcYyqCN7Pl+ee31lGJt1NacBHxQO9dlXHP0cwlbEgTpP1gLyBnUGxLS31vDP7NmObmLN4B223WvsvaiIBxf+OPTVFPjUR9GinDj2MjN2dWHs= wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 23 IN A 18.209.243.220 wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 23 IN A 18.233.189.178 wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 23 IN A 18.235.149.1 . 32768 512 OPT "";InfobloxAnCount=5;InfobloxNsCount=0;InfobloxArCount=1",CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:55:46.637 PM",,Infoblox,Data Connector,DNS Response,1,,,,172.0.0.253,"""csp.infoblox.com. 48 IN CNAME wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 27 IN A 18.233.189.178 wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 27 IN A 18.235.149.1 wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 27 IN A 18.209.243.220 amazonaws.com. 147557 IN NS r2.amazonaws.com. amazonaws.com. 147557 IN NS r1.amazonaws.com. amazonaws.com. 147557 IN NS u1.amazonaws.com. amazonaws.com. 147557 IN NS u2.amazonaws.com. r1.amazonaws.com. 147557 IN A 205.251.192.27 r2.amazonaws.com. 147557 IN A 205.251.195.199 u1.amazonaws.com. 147557 IN A 156.154.64.10 u2.amazonaws.com. 147557 IN A 156.154.65.10 r1.amazonaws.com. 147557 IN AAAA 2600:9000:5300:1b00::1 r2.amazonaws.com. 147557 IN AAAA 2600:9000:5303:c700::1 u1.amazonaws.com. 147557 IN AAAA 2001:502:f3ff::10 u2.amazonaws.com. 147557 IN AAAA 2610:a1:1014::10""",UDP,60620,172.0.0.32,2.1.3,DNS Response IN A NOERROR,DNS,csp.infoblox.com.,InfobloxDNSView=2fa70211-f936-4bff-8810-56103877d7ad;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=4;InfobloxNsCount=4;InfobloxArCount=8,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:55:46.638 PM",,Infoblox,Data Connector,DNS Response,1,,,,8.8.8.8,"""csp.infoblox.com. 48 IN CNAME wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. csp.infoblox.com. 48 IN RRSIG CNAME 5 3 60 20210215080312 20210211072137 42390 infoblox.com.",UDP,41368,172.0.0.253,2.1.3,DNS Response IN A NOERROR,DNS,csp.infoblox.com.,"InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;hmNp5KUN+Ve+rnbcXP4qK12Xy4UeoLsjop2V9t3DchBHtYvIQN1YA3E9X31zygaFcYyqCN7Pl+ee31lGJt1NacBHxQO9dlXHP0cwlbEgTpP1gLyBnUGxLS31vDP7NmObmLN4B223WvsvaiIBxf+OPTVFPjUR9GinDj2MjN2dWHs= wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 25 IN A 18.209.243.220 wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 25 IN A 18.235.149.1 wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 25 IN A 18.233.189.178 . 32768 512 OPT "";InfobloxAnCount=5;InfobloxNsCount=0;InfobloxArCount=1",CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/12/2021, 12:25:46.644 AM",,Infoblox,Data Connector,DNS Response,1,,,,172.0.0.253,"""csp.infoblox.com. 31 IN CNAME wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 58 IN A 18.209.243.220 wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 58 IN A 18.235.149.1 wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 58 IN A 18.233.189.178 amazonaws.com. 145749 IN NS r1.amazonaws.com. amazonaws.com. 145749 IN NS u2.amazonaws.com. amazonaws.com. 145749 IN NS u1.amazonaws.com. amazonaws.com. 145749 IN NS r2.amazonaws.com. r1.amazonaws.com. 145749 IN A 205.251.192.27 r2.amazonaws.com. 145749 IN A 205.251.195.199 u1.amazonaws.com. 145749 IN A 156.154.64.10 u2.amazonaws.com. 145749 IN A 156.154.65.10 r1.amazonaws.com. 145749 IN AAAA 2600:9000:5300:1b00::1 r2.amazonaws.com. 145749 IN AAAA 2600:9000:5303:c700::1 u1.amazonaws.com. 145749 IN AAAA 2001:502:f3ff::10 u2.amazonaws.com. 145749 IN AAAA 2610:a1:1014::10""",UDP,61571,172.0.0.33,2.1.3,DNS Response IN A NOERROR,DNS,csp.infoblox.com.,InfobloxDNSView=2fa70211-f936-4bff-8810-56103877d7ad;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=4;InfobloxNsCount=4;InfobloxArCount=8,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/12/2021, 12:25:46.644 AM",,Infoblox,Data Connector,DNS Response,1,,,,8.8.8.8,"""csp.infoblox.com. 31 IN CNAME wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. csp.infoblox.com. 31 IN RRSIG CNAME 5 3 60 20210215080312 20210211072137 42390 infoblox.com.",UDP,38939,172.0.0.253,2.1.3,DNS Response IN A NOERROR,DNS,csp.infoblox.com.,"InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;hmNp5KUN+Ve+rnbcXP4qK12Xy4UeoLsjop2V9t3DchBHtYvIQN1YA3E9X31zygaFcYyqCN7Pl+ee31lGJt1NacBHxQO9dlXHP0cwlbEgTpP1gLyBnUGxLS31vDP7NmObmLN4B223WvsvaiIBxf+OPTVFPjUR9GinDj2MjN2dWHs= wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 32 IN A 18.233.189.178 wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 32 IN A 18.235.149.1 wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 32 IN A 18.209.243.220 . 32768 512 OPT "";InfobloxAnCount=5;InfobloxNsCount=0;InfobloxArCount=1",CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/12/2021, 12:15:46.640 AM",,Infoblox,Data Connector,DNS Response,1,,,,172.0.0.253,"""csp.infoblox.com. 30 IN CNAME wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 30 IN A 18.233.189.178 wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 30 IN A 18.209.243.220 wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 30 IN A 18.235.149.1 amazonaws.com. 146362 IN NS r2.amazonaws.com. amazonaws.com. 146362 IN NS r1.amazonaws.com. amazonaws.com. 146362 IN NS u2.amazonaws.com. amazonaws.com. 146362 IN NS u1.amazonaws.com. r1.amazonaws.com. 146362 IN A 205.251.192.27 r2.amazonaws.com. 146362 IN A 205.251.195.199 u1.amazonaws.com. 146362 IN A 156.154.64.10 u2.amazonaws.com. 146362 IN A 156.154.65.10 r1.amazonaws.com. 146362 IN AAAA 2600:9000:5300:1b00::1 r2.amazonaws.com. 146362 IN AAAA 2600:9000:5303:c700::1 u1.amazonaws.com. 146362 IN AAAA 2001:502:f3ff::10 u2.amazonaws.com. 146362 IN AAAA 2610:a1:1014::10""",UDP,55224,172.0.0.33,2.1.3,DNS Response IN A NOERROR,DNS,csp.infoblox.com.,InfobloxDNSView=2fa70211-f936-4bff-8810-56103877d7ad;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=4;InfobloxNsCount=4;InfobloxArCount=8,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/12/2021, 12:15:46.640 AM",,Infoblox,Data Connector,DNS Response,1,,,,8.8.8.8,"""csp.infoblox.com. 30 IN CNAME wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. csp.infoblox.com. 30 IN RRSIG CNAME 5 3 60 20210215080312 20210211072137 42390 infoblox.com.",UDP,51524,172.0.0.253,2.1.3,DNS Response IN A NOERROR,DNS,csp.infoblox.com.,"InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;hmNp5KUN+Ve+rnbcXP4qK12Xy4UeoLsjop2V9t3DchBHtYvIQN1YA3E9X31zygaFcYyqCN7Pl+ee31lGJt1NacBHxQO9dlXHP0cwlbEgTpP1gLyBnUGxLS31vDP7NmObmLN4B223WvsvaiIBxf+OPTVFPjUR9GinDj2MjN2dWHs= wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 47 IN A 18.233.189.178 wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 47 IN A 18.209.243.220 wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 47 IN A 18.235.149.1 . 32768 512 OPT "";InfobloxAnCount=5;InfobloxNsCount=0;InfobloxArCount=1",CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/12/2021, 12:06:01.638 AM",,Infoblox,Data Connector,DNS Response,1,,,,172.0.0.253,"""csp.infoblox.com. 26 IN CNAME wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 59 IN A 18.209.243.220 wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 59 IN A 18.235.149.1 wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 59 IN A 18.233.189.178 amazonaws.com. 146943 IN NS u1.amazonaws.com. amazonaws.com. 146943 IN NS r1.amazonaws.com. amazonaws.com. 146943 IN NS u2.amazonaws.com. amazonaws.com. 146943 IN NS r2.amazonaws.com. r1.amazonaws.com. 146943 IN A 205.251.192.27 r2.amazonaws.com. 146943 IN A 205.251.195.199 u1.amazonaws.com. 146943 IN A 156.154.64.10 u2.amazonaws.com. 146943 IN A 156.154.65.10 r1.amazonaws.com. 146943 IN AAAA 2600:9000:5300:1b00::1 r2.amazonaws.com. 146943 IN AAAA 2600:9000:5303:c700::1 u1.amazonaws.com. 146943 IN AAAA 2001:502:f3ff::10 u2.amazonaws.com. 146943 IN AAAA 2610:a1:1014::10""",UDP,63942,172.0.0.32,2.1.3,DNS Response IN A NOERROR,DNS,csp.infoblox.com.,InfobloxDNSView=2fa70211-f936-4bff-8810-56103877d7ad;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=4;InfobloxNsCount=4;InfobloxArCount=8,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:55:16.616 PM",,Infoblox,Data Connector,DNS Response,1,,,,172.0.0.253,"""csp.infoblox.com. 19 IN CNAME wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 59 IN A 18.235.149.1 wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 59 IN A 18.233.189.178 wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 59 IN A 18.209.243.220 amazonaws.com. 147589 IN NS r1.amazonaws.com. amazonaws.com. 147589 IN NS u2.amazonaws.com. amazonaws.com. 147589 IN NS u1.amazonaws.com. amazonaws.com. 147589 IN NS r2.amazonaws.com. r1.amazonaws.com. 147589 IN A 205.251.192.27 r2.amazonaws.com. 147589 IN A 205.251.195.199 u1.amazonaws.com. 147589 IN A 156.154.64.10 u2.amazonaws.com. 147589 IN A 156.154.65.10 r1.amazonaws.com. 147589 IN AAAA 2600:9000:5300:1b00::1 r2.amazonaws.com. 147589 IN AAAA 2600:9000:5303:c700::1 u1.amazonaws.com. 147589 IN AAAA 2001:502:f3ff::10 u2.amazonaws.com. 147589 IN AAAA 2610:a1:1014::10""",UDP,58478,172.0.0.33,2.1.3,DNS Response IN A NOERROR,DNS,csp.infoblox.com.,InfobloxDNSView=2fa70211-f936-4bff-8810-56103877d7ad;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=4;InfobloxNsCount=4;InfobloxArCount=8,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:55:16.618 PM",,Infoblox,Data Connector,DNS Response,1,,,,8.8.8.8,"""csp.infoblox.com. 19 IN CNAME wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. csp.infoblox.com. 19 IN RRSIG CNAME 5 3 60 20210215080312 20210211072137 42390 infoblox.com.",UDP,46821,172.0.0.253,2.1.3,DNS Response IN A NOERROR,DNS,csp.infoblox.com.,"InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;hmNp5KUN+Ve+rnbcXP4qK12Xy4UeoLsjop2V9t3DchBHtYvIQN1YA3E9X31zygaFcYyqCN7Pl+ee31lGJt1NacBHxQO9dlXHP0cwlbEgTpP1gLyBnUGxLS31vDP7NmObmLN4B223WvsvaiIBxf+OPTVFPjUR9GinDj2MjN2dWHs= wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 57 IN A 18.209.243.220 wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 57 IN A 18.235.149.1 wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 57 IN A 18.233.189.178 . 32768 512 OPT "";InfobloxAnCount=5;InfobloxNsCount=0;InfobloxArCount=1",CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/12/2021, 12:02:31.642 AM",,Infoblox,Data Connector,DNS Response,1,,,,172.0.0.253,"""clientservices.googleapis.com. 299 IN A 216.58.194.163 com. 147135 IN NS l.gtld-servers.net. com. 147135 IN NS g.gtld-servers.net. com. 147135 IN NS h.gtld-servers.net. com. 147135 IN NS k.gtld-servers.net. com. 147135 IN NS a.gtld-servers.net. com. 147135 IN NS c.gtld-servers.net. com. 147135 IN NS f.gtld-servers.net. com. 147135 IN NS i.gtld-servers.net. com. 147135 IN NS e.gtld-servers.net. com. 147135 IN NS j.gtld-servers.net. com. 147135 IN NS d.gtld-servers.net. com. 147135 IN NS b.gtld-servers.net. com. 147135 IN NS m.gtld-servers.net. a.gtld-servers.net. 147117 IN A 192.5.6.30 b.gtld-servers.net. 147117 IN A 192.33.14.30 c.gtld-servers.net. 147117 IN A 192.26.92.30 d.gtld-servers.net. 147117 IN A 192.31.80.30 e.gtld-servers.net. 147117 IN A 192.12.94.30 f.gtld-servers.net. 147117 IN A 192.35.51.30 g.gtld-servers.net. 147117 IN A 192.42.93.30 h.gtld-servers.net. 147117 IN A 192.54.112.30 i.gtld-servers.net. 147117 IN A 192.43.172.30 j.gtld-servers.net. 147117 IN A 192.48.79.30 k.gtld-servers.net. 147117 IN A 192.52.178.30 l.gtld-servers.net. 147117 IN A 192.41.162.30 m.gtld-servers.net. 147117 IN A 192.55.83.30""",UDP,57944,172.0.0.110,2.1.3,DNS Response IN A NOERROR,DNS,clientservices.googleapis.com.,InfobloxDNSView=2fa70211-f936-4bff-8810-56103877d7ad;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=13;InfobloxArCount=13,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/12/2021, 12:02:31.642 AM",,Infoblox,Data Connector,DNS Response,1,,,,8.8.8.8,"""clientservices.googleapis.com. 299 IN A 216.58.194.163 . 32768 512 OPT """,UDP,51232,172.0.0.253,2.1.3,DNS Response IN A NOERROR,DNS,clientservices.googleapis.com.,InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/12/2021, 12:05:16.647 AM",,Infoblox,Data Connector,DNS Response,1,,,,172.0.0.253,"""client.wns.windows.com. 896 IN CNAME wns.notify.trafficmanager.net. wns.notify.trafficmanager.net. 299 IN A 52.230.222.68 trafficmanager.net. 146966 IN NS tm2.dns-tm.com. trafficmanager.net. 146966 IN NS tm1.dns-tm.com. trafficmanager.net. 146966 IN NS tm2.edgedns-tm.info. trafficmanager.net. 146966 IN NS tm1.edgedns-tm.info.""",UDP,61689,172.0.0.110,2.1.3,DNS Response IN A NOERROR,DNS,client.wns.windows.com.,InfobloxDNSView=2fa70211-f936-4bff-8810-56103877d7ad;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=2;InfobloxNsCount=4;InfobloxArCount=0,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/12/2021, 12:10:16.636 AM",,Infoblox,Data Connector,DNS Response,1,,,,172.0.0.253,"""client.wns.windows.com. 591 IN CNAME wns.notify.trafficmanager.net. wns.notify.trafficmanager.net. 257 IN CNAME vip2-dm3p.wns.notify.trafficmanager.net. vip2-dm3p.wns.notify.trafficmanager.net. 203 IN A 52.242.211.89 trafficmanager.net. 146661 IN NS tm1.dns-tm.com. trafficmanager.net. 146661 IN NS tm2.edgedns-tm.info. trafficmanager.net. 146661 IN NS tm1.edgedns-tm.info. trafficmanager.net. 146661 IN NS tm2.dns-tm.com.""",UDP,49526,172.0.0.110,2.1.3,DNS Response IN A NOERROR,DNS,client.wns.windows.com.,InfobloxDNSView=2fa70211-f936-4bff-8810-56103877d7ad;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=3;InfobloxNsCount=4;InfobloxArCount=0,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/12/2021, 12:15:16.651 AM",,Infoblox,Data Connector,DNS Response,1,,,,172.0.0.253,"""client.wns.windows.com. 291 IN CNAME wns.notify.trafficmanager.net. wns.notify.trafficmanager.net. 134 IN CNAME vip2-dm3p.wns.notify.trafficmanager.net. vip2-dm3p.wns.notify.trafficmanager.net. 202 IN A 52.242.211.89 trafficmanager.net. 146361 IN NS tm1.edgedns-tm.info. trafficmanager.net. 146361 IN NS tm1.dns-tm.com. trafficmanager.net. 146361 IN NS tm2.dns-tm.com. trafficmanager.net. 146361 IN NS tm2.edgedns-tm.info.""",UDP,55406,172.0.0.110,2.1.3,DNS Response IN A NOERROR,DNS,client.wns.windows.com.,InfobloxDNSView=2fa70211-f936-4bff-8810-56103877d7ad;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=3;InfobloxNsCount=4;InfobloxArCount=0,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/12/2021, 12:20:31.660 AM",,Infoblox,Data Connector,DNS Response,1,,,,172.0.0.253,"""client.wns.windows.com. 2295 IN CNAME wns.notify.trafficmanager.net. wns.notify.trafficmanager.net. 49 IN CNAME vip2-dm3p.wns.notify.trafficmanager.net. vip2-dm3p.wns.notify.trafficmanager.net. 114 IN A 52.242.211.89 trafficmanager.net. 146055 IN NS tm2.dns-tm.com. trafficmanager.net. 146055 IN NS tm2.edgedns-tm.info. trafficmanager.net. 146055 IN NS tm1.dns-tm.com. trafficmanager.net. 146055 IN NS tm1.edgedns-tm.info.""",UDP,65381,172.0.0.110,2.1.3,DNS Response IN A NOERROR,DNS,client.wns.windows.com.,InfobloxDNSView=2fa70211-f936-4bff-8810-56103877d7ad;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=3;InfobloxNsCount=4;InfobloxArCount=0,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/12/2021, 12:20:31.659 AM",,Infoblox,Data Connector,DNS Response,1,,,,8.8.8.8,"""client.wns.windows.com. 2295 IN CNAME wns.notify.trafficmanager.net. wns.notify.trafficmanager.net. 151 IN CNAME vip1-dm3p.wns.notify.trafficmanager.net. vip1-dm3p.wns.notify.trafficmanager.net. 108 IN A 52.230.222.68 . 32768 512 OPT """,UDP,44222,172.0.0.253,2.1.3,DNS Response IN A NOERROR,DNS,client.wns.windows.com.,InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=3;InfobloxNsCount=0;InfobloxArCount=1,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/12/2021, 12:25:46.644 AM",,Infoblox,Data Connector,DNS Response,1,,,,172.0.0.253,"""client.wns.windows.com. 1972 IN CNAME wns.notify.trafficmanager.net. wns.notify.trafficmanager.net. 5 IN CNAME vip2-dm3p.wns.notify.trafficmanager.net. vip2-dm3p.wns.notify.trafficmanager.net. 162 IN A 52.242.211.89 trafficmanager.net. 145732 IN NS tm2.edgedns-tm.info. trafficmanager.net. 145732 IN NS tm1.dns-tm.com. trafficmanager.net. 145732 IN NS tm2.dns-tm.com. trafficmanager.net. 145732 IN NS tm1.edgedns-tm.info.""",UDP,62917,172.0.0.110,2.1.3,DNS Response IN A NOERROR,DNS,client.wns.windows.com.,InfobloxDNSView=2fa70211-f936-4bff-8810-56103877d7ad;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=3;InfobloxNsCount=4;InfobloxArCount=0,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:55:01.617 PM",,Infoblox,Data Connector,DNS Response,1,,,,172.0.0.253,"""client.wns.windows.com. 1506 IN CNAME wns.notify.trafficmanager.net. wns.notify.trafficmanager.net. 260 IN CNAME vip2-dm3p.wns.notify.trafficmanager.net. vip2-dm3p.wns.notify.trafficmanager.net. 108 IN A 52.242.211.89 trafficmanager.net. 147576 IN NS tm2.dns-tm.com. trafficmanager.net. 147576 IN NS tm1.edgedns-tm.info. trafficmanager.net. 147576 IN NS tm2.edgedns-tm.info. trafficmanager.net. 147576 IN NS tm1.dns-tm.com.""",UDP,54152,172.0.0.110,2.1.3,DNS Response IN A NOERROR,DNS,client.wns.windows.com.,InfobloxDNSView=2fa70211-f936-4bff-8810-56103877d7ad;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=3;InfobloxNsCount=4;InfobloxArCount=0,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/12/2021, 12:00:16.638 AM",,Infoblox,Data Connector,DNS Response,1,,,,172.0.0.253,"""client.wns.windows.com. 1198 IN CNAME wns.notify.trafficmanager.net. wns.notify.trafficmanager.net. 58 IN CNAME vip2-dm3p.wns.notify.trafficmanager.net. vip2-dm3p.wns.notify.trafficmanager.net. 125 IN A 52.242.211.89 trafficmanager.net. 147268 IN NS tm1.edgedns-tm.info. trafficmanager.net. 147268 IN NS tm2.dns-tm.com. trafficmanager.net. 147268 IN NS tm1.dns-tm.com. trafficmanager.net. 147268 IN NS tm2.edgedns-tm.info.""",UDP,55940,172.0.0.110,2.1.3,DNS Response IN A NOERROR,DNS,client.wns.windows.com.,InfobloxDNSView=2fa70211-f936-4bff-8810-56103877d7ad;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=3;InfobloxNsCount=4;InfobloxArCount=0,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/12/2021, 12:17:46.667 AM",,Infoblox,Data Connector,DNS Response,1,,,,8.8.8.8,"""cds.d2s7q6s2.hwcdn.net. 294 IN A 205.185.216.10 . 32768 512 OPT """,UDP,46744,172.0.0.253,2.1.3,DNS Response IN A NOERROR,DNS,cds.d2s7q6s2.hwcdn.net.,InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/12/2021, 12:01:46.671 AM",,Infoblox,Data Connector,DNS Response,1,,,,8.8.8.8,"""cdn.content.prod.cms.msn.com.edgekey.net. 785 IN CNAME e10663.dscg.akamaiedge.net. e10663.dscg.akamaiedge.net. 19 IN A 23.44.13.99 . 32768 512 OPT """,UDP,57986,172.0.0.253,2.1.3,DNS Response IN A NOERROR,DNS,cdn.content.prod.cms.msn.com.edgekey.net.,InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=2;InfobloxNsCount=0;InfobloxArCount=1,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/12/2021, 12:01:46.671 AM",,Infoblox,Data Connector,DNS Response,1,,,,172.0.0.253,"""cdn.content.prod.cms.msn.com. 12758 IN CNAME cdn.content.prod.cms.msn.com.edgekey.net. cdn.content.prod.cms.msn.com.edgekey.net. 785 IN CNAME e10663.dscg.akamaiedge.net. e10663.dscg.akamaiedge.net. 19 IN A 23.44.13.99 net. 147173 IN NS f.gtld-servers.net. net. 147173 IN NS d.gtld-servers.net. net. 147173 IN NS i.gtld-servers.net. net. 147173 IN NS c.gtld-servers.net. net. 147173 IN NS b.gtld-servers.net. net. 147173 IN NS m.gtld-servers.net. net. 147173 IN NS j.gtld-servers.net. net. 147173 IN NS e.gtld-servers.net. net. 147173 IN NS a.gtld-servers.net. net. 147173 IN NS g.gtld-servers.net. net. 147173 IN NS l.gtld-servers.net. net. 147173 IN NS h.gtld-servers.net. net. 147173 IN NS k.gtld-servers.net. a.gtld-servers.net. 147173 IN A 192.5.6.30 b.gtld-servers.net. 147173 IN A 192.33.14.30 c.gtld-servers.net. 147173 IN A 192.26.92.30 d.gtld-servers.net. 147173 IN A 192.31.80.30 e.gtld-servers.net. 147173 IN A 192.12.94.30 f.gtld-servers.net. 147173 IN A 192.35.51.30 g.gtld-servers.net. 147173 IN A 192.42.93.30 h.gtld-servers.net. 147173 IN A 192.54.112.30""",UDP,51957,172.0.0.110,2.1.3,DNS Response IN A NOERROR,DNS,cdn.content.prod.cms.msn.com.,InfobloxDNSView=2fa70211-f936-4bff-8810-56103877d7ad;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=3;InfobloxNsCount=13;InfobloxArCount=8,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/12/2021, 12:01:46.670 AM",,Infoblox,Data Connector,DNS Response,1,,,,8.8.8.8,"""cdn.content.prod.cms.msn.com. 12758 IN CNAME cdn.content.prod.cms.msn.com.edgekey.net. cdn.content.prod.cms.msn.com.edgekey.net. 388 IN CNAME e10663.dscg.akamaiedge.net. e10663.dscg.akamaiedge.net. 4 IN A 104.84.227.92 . 32768 512 OPT """,UDP,37752,172.0.0.253,2.1.3,DNS Response IN A NOERROR,DNS,cdn.content.prod.cms.msn.com.,InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=3;InfobloxNsCount=0;InfobloxArCount=1,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/12/2021, 12:17:46.667 AM",,Infoblox,Data Connector,DNS Response,1,,,,8.8.8.8,"""audownload.windowsupdate.nsatc.net. 412 IN CNAME au.download.windowsupdate.com.hwcdn.net. au.download.windowsupdate.com.hwcdn.net. 3412 IN CNAME cds.d2s7q6s2.hwcdn.net. cds.d2s7q6s2.hwcdn.net. 112 IN A 205.185.216.10 . 32768 512 OPT """,UDP,52040,172.0.0.253,2.1.3,DNS Response IN A NOERROR,DNS,audownload.windowsupdate.nsatc.net.,InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=3;InfobloxNsCount=0;InfobloxArCount=1,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/12/2021, 12:17:46.667 AM",,Infoblox,Data Connector,DNS Response,1,,,,8.8.8.8,"""au.download.windowsupdate.com.hwcdn.net. 2629 IN CNAME cds.d2s7q6s2.hwcdn.net. cds.d2s7q6s2.hwcdn.net. 33 IN A 205.185.216.10 cds.d2s7q6s2.hwcdn.net. 33 IN A 205.185.216.42 . 32768 512 OPT """,UDP,34400,172.0.0.253,2.1.3,DNS Response IN A NOERROR,DNS,au.download.windowsupdate.com.hwcdn.net.,InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=3;InfobloxNsCount=0;InfobloxArCount=1,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/12/2021, 12:17:46.667 AM",,Infoblox,Data Connector,DNS Response,1,,,,8.8.8.8,"""au-bg-shim.trafficmanager.net. 3339 IN CNAME audownload.windowsupdate.nsatc.net. audownload.windowsupdate.nsatc.net. 416 IN CNAME wu.azureedge.net. wu.azureedge.net. 1708 IN CNAME wu.ec.azureedge.net. wu.ec.azureedge.net. 299 IN CNAME wu.wpc.apr-52dd2.edgecastdns.net. wu.wpc.apr-52dd2.edgecastdns.net. 299 IN CNAME hlb.apr-52dd2-0.edgecastdns.net. hlb.apr-52dd2-0.edgecastdns.net. 299 IN CNAME cs11.wpc.v0cdn.net. cs11.wpc.v0cdn.net. 3599 IN A 72.21.81.240 . 32768 512 OPT """,UDP,50524,172.0.0.253,2.1.3,DNS Response IN A NOERROR,DNS,au-bg-shim.trafficmanager.net.,InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=7;InfobloxNsCount=0;InfobloxArCount=1,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/12/2021, 12:01:46.672 AM",,Infoblox,Data Connector,DNS Response,1,,,,8.8.8.8,"""assets.msn.com.edgekey.net. 868 IN CNAME e28578.d.akamaiedge.net. e28578.d.akamaiedge.net. 19 IN A 23.66.115.88 e28578.d.akamaiedge.net. 19 IN A 23.66.115.65 . 32768 512 OPT """,UDP,46937,172.0.0.253,2.1.3,DNS Response IN A NOERROR,DNS,assets.msn.com.edgekey.net.,InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=3;InfobloxNsCount=0;InfobloxArCount=1,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/12/2021, 12:01:46.672 AM",,Infoblox,Data Connector,DNS Response,1,,,,172.0.0.253,"""assets.msn.com. 7200 IN CNAME assets.msn.com.edgekey.net. assets.msn.com.edgekey.net. 868 IN CNAME e28578.d.akamaiedge.net. e28578.d.akamaiedge.net. 19 IN A 23.66.115.65 e28578.d.akamaiedge.net. 19 IN A 23.66.115.88 net. 147173 IN NS g.gtld-servers.net. net. 147173 IN NS k.gtld-servers.net. net. 147173 IN NS b.gtld-servers.net. net. 147173 IN NS h.gtld-servers.net. net. 147173 IN NS f.gtld-servers.net. net. 147173 IN NS l.gtld-servers.net. net. 147173 IN NS m.gtld-servers.net. net. 147173 IN NS e.gtld-servers.net. net. 147173 IN NS j.gtld-servers.net. net. 147173 IN NS i.gtld-servers.net. net. 147173 IN NS a.gtld-servers.net. net. 147173 IN NS c.gtld-servers.net. net. 147173 IN NS d.gtld-servers.net. a.gtld-servers.net. 147173 IN A 192.5.6.30 b.gtld-servers.net. 147173 IN A 192.33.14.30 c.gtld-servers.net. 147173 IN A 192.26.92.30 d.gtld-servers.net. 147173 IN A 192.31.80.30 e.gtld-servers.net. 147173 IN A 192.12.94.30 f.gtld-servers.net. 147173 IN A 192.35.51.30 g.gtld-servers.net. 147173 IN A 192.42.93.30 h.gtld-servers.net. 147173 IN A 192.54.112.30 i.gtld-servers.net. 147173 IN A 192.43.172.30""",UDP,53603,172.0.0.110,2.1.3,DNS Response IN A NOERROR,DNS,assets.msn.com.,InfobloxDNSView=2fa70211-f936-4bff-8810-56103877d7ad;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=4;InfobloxNsCount=13;InfobloxArCount=9,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/12/2021, 12:01:46.671 AM",,Infoblox,Data Connector,DNS Response,1,,,,8.8.8.8,"""assets.msn.com. 7200 IN CNAME assets.msn.com.edgekey.net. assets.msn.com.edgekey.net. 241 IN CNAME e28578.d.akamaiedge.net. e28578.d.akamaiedge.net. 19 IN A 23.11.231.178 . 32768 512 OPT """,UDP,33198,172.0.0.253,2.1.3,DNS Response IN A NOERROR,DNS,assets.msn.com.,InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=3;InfobloxNsCount=0;InfobloxArCount=1,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/12/2021, 12:13:16.670 AM",,Infoblox,Data Connector,DNS Response,1,,,,8.8.8.8,"""CK0POJMG874LJREF7EFN8430QVIT8BSM.com. 21308 IN NSEC3 1 1 0 - CK0Q1GIN43N1ARRC9OSM6QPQR81H5M9A NS SOA RRSIG DNSKEY NSEC3PARAM CK0POJMG874LJREF7EFN8430QVIT8BSM.com. 21308 IN RRSIG NSEC3 8 2 86400 20210217054119 20210210043119 58540 com.",UDP,39855,172.0.0.253,2.1.3,DNS Response IN DS NOERROR,DNS,googleapis.com.,InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=DS;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;FD+n+fO9jI2LoVi9ULqvx6lIp8ZP5yC/0HzfnJqiqgTTubTJiVzoVT29xai2LSeepPqzS/+sehbGHpqOgj21uJoOLePqmaVx/f73ZGcP6Ud2tlkQQIE++OwDlcQK6P/BM96xdHmGEnG/RaMrFiHV919Xog+sFZddMpjVTtYRq9nST68IU2gLDcNTFeeM7P3CaUdaSRl3LIRz8iuWMrYNSg=;x0c9nZQaudzMH5fswE6GNzVS9W7s8JyBuv9BWS1IOC/i4RD47UqBk/lDuwuim6IOR0ZyziqErbJ19SZ8sSZIAMRB1TQXQJm+SdWslsQFWHtPFFZ5NHSVYHhPT3GeeOSlKsUv49Br4fcS+k6A9qiBrptVpg/7smGjYDayNmteBeFKi8Zl4mwBQWnK65mq4/SWj1z6j5oqNMog4nkmVUbx4g=;wy3o2Mbrzk0n7WOLVdjeIUKhf7UOLV6tjoVuL8Mvgk1ocSftelyWeV2urCSOxxaqdbBBNfUkM3g7hJ4GKLuleecAbm/u+hC8M9KjNEz+KYFOTcKFXWYvS/1nhiuTO4UgjCid0UWOQK2tZOE9GxGcoT8T0taPE81ED1oDXmT3oB75O2kuQURwpixRiLhwvoKyW8C1mzVhcCkeXUiVnIM1Tw=;InfobloxAnCount=0;InfobloxNsCount=6;InfobloxArCount=1,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/12/2021, 12:01:46.671 AM",,Infoblox,Data Connector,DNS Response,1,,,,8.8.8.8,"""CK0POJMG874LJREF7EFN8430QVIT8BSM.com. 21162 IN NSEC3 1 1 0 - CK0Q1GIN43N1ARRC9OSM6QPQR81H5M9A NS SOA RRSIG DNSKEY NSEC3PARAM CK0POJMG874LJREF7EFN8430QVIT8BSM.com. 21162 IN RRSIG NSEC3 8 2 86400 20210217054119 20210210043119 58540 com.",UDP,56801,172.0.0.253,2.1.3,DNS Response IN DS NOERROR,DNS,msn.com.,InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=DS;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;FD+n+fO9jI2LoVi9ULqvx6lIp8ZP5yC/0HzfnJqiqgTTubTJiVzoVT29xai2LSeepPqzS/+sehbGHpqOgj21uJoOLePqmaVx/f73ZGcP6Ud2tlkQQIE++OwDlcQK6P/BM96xdHmGEnG/RaMrFiHV919Xog+sFZddMpjVTtYRq9nST68IU2gLDcNTFeeM7P3CaUdaSRl3LIRz8iuWMrYNSg=;oJ48JfbbIbLoC4SQBs8Q9KFNZGY6XVS+ofjb2ZbBkfpSvQK5Kpi/l5AX5tSJu3zBYNAbWwM3CSA9C/Gh3PSFq+Qpf7Co7hS3rvFryA4XspS76uB2Y1LvgG+WQXXq4pqtAu5r46A1I6NRjyuF4NOJuJLbIh3ahi5+LG+3pMvsCp/2Mev7Ec24JuliV/6wjPxfA3Row/QjmSLIOT6wi7X7rw=;dawgopSM/x8vaajFRD55KgGPTpOzW+WPq45INVsBnWtd228GT5R2tK265JutaDO73umLqG5HWdUOPq2QBnBteKp4IlDm7/WqlOawA1Kfr73G34JfI7L9OJWz6ZGQDgS4+cvfn6FLI9fPfwWdy4FZhc7r8wGKG/SvbJh6dSq9HuOyAnYlVH6tq8D7E9Y9vDbtKp2v51ZJ1m6o3Z7/F/lO0A=;InfobloxAnCount=0;InfobloxNsCount=6;InfobloxArCount=1,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/12/2021, 12:20:31.659 AM",,Infoblox,Data Connector,DNS Response,1,,,,8.8.8.8,"""CK0POJMG874LJREF7EFN8430QVIT8BSM.com. 21160 IN NSEC3 1 1 0 - CK0Q1GIN43N1ARRC9OSM6QPQR81H5M9A NS SOA RRSIG DNSKEY NSEC3PARAM CK0POJMG874LJREF7EFN8430QVIT8BSM.com. 21160 IN RRSIG NSEC3 8 2 86400 20210217054119 20210210043119 58540 com.",UDP,54481,172.0.0.253,2.1.3,DNS Response IN DS NOERROR,DNS,windows.com.,InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=DS;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;FD+n+fO9jI2LoVi9ULqvx6lIp8ZP5yC/0HzfnJqiqgTTubTJiVzoVT29xai2LSeepPqzS/+sehbGHpqOgj21uJoOLePqmaVx/f73ZGcP6Ud2tlkQQIE++OwDlcQK6P/BM96xdHmGEnG/RaMrFiHV919Xog+sFZddMpjVTtYRq9nST68IU2gLDcNTFeeM7P3CaUdaSRl3LIRz8iuWMrYNSg=;xWOxyHcyTp7XW7rSu7644VBgJGtTp/A8aykILMJgT15p9YeMN2Wwvhpzxf8cPauDph5yj3/Vo9Sh/5VUcaJ1nu1I+CeaARHIdUKToLNQCJg5imX3wZcy9VU3X/eIoJ3ZFW7LJvNdRQIrNAZW+QXXAeh01uKeq2pvMkGnolrsfLs4ekizqT/Uz6Kn9MbCrt46sTsxnGfVx84O3ije1F7qsw=;MS+suyXsyBD7QEnSEpHUNI09q6G/b8IJI+JReaD4MjzOvMZSdmvlO63DLWIkuJmCG1LY+QUWL7Vv00j+pw3xmlRkgY46Db7Z9qbFm0bAaxmQ/jWbOabGSmcSSZTdt68XLCkwtp9yccWPgUxtmc4nWicMAw5SVuQEHsNj3X/hX34cQaKXScjWSDlk0HhQenbsVJM8V/mAe0NTNLBPnyvtZA=;InfobloxAnCount=0;InfobloxNsCount=6;InfobloxArCount=1,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/12/2021, 12:25:46.644 AM",,Infoblox,Data Connector,DNS Response,1,,,,8.8.8.8,"""CK0POJMG874LJREF7EFN8430QVIT8BSM.com. 21122 IN NSEC3 1 1 0 - CK0Q1GIN43N1ARRC9OSM6QPQR81H5M9A NS SOA RRSIG DNSKEY NSEC3PARAM CK0POJMG874LJREF7EFN8430QVIT8BSM.com. 21122 IN RRSIG NSEC3 8 2 86400 20210217054119 20210210043119 58540 com.",UDP,37752,172.0.0.253,2.1.3,DNS Response IN DS NOERROR,DNS,amazonaws.com.,InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=DS;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;FD+n+fO9jI2LoVi9ULqvx6lIp8ZP5yC/0HzfnJqiqgTTubTJiVzoVT29xai2LSeepPqzS/+sehbGHpqOgj21uJoOLePqmaVx/f73ZGcP6Ud2tlkQQIE++OwDlcQK6P/BM96xdHmGEnG/RaMrFiHV919Xog+sFZddMpjVTtYRq9nST68IU2gLDcNTFeeM7P3CaUdaSRl3LIRz8iuWMrYNSg=;pbvi0wM+bG/B/dBpiXgTGyVh/crqdRn/5zbfEpoWX1OAB+Xr/s2+A7kT3U2aJABbtIBXnoXQvuUkrW6ZEDOZzRppyw3NTdSyHvstYdCGWvr8rAcXNCEf/S0tGEZf4IO6/9vBZuu9QG8KGnxWLEO00f40TyE/PTWk1Juw/1k8mzqVT7bxn69kuW3JqQc0Y72E7mC3EYApLfnIPvPd4QwI5A=;FGcGCo21Q7YylOEDVNXZArBunK8NQFL0KqEKhyBnY0AqYyxbZfEJR7XtTvHsmPbnXPNaBjBwDHxqjyWzZXGRDKshK7/rxxOnJt+cS8N4H382zzQor3jqu9dhT4SwlLfs18IYq8jWeOccgSyYFuj6HKQ9k20tagv1ASwo8EHXcHTIRjdOtM9DeHSsgBEsH5Jl+S68cbH9yr1un6D26l/kSg=;InfobloxAnCount=0;InfobloxNsCount=6;InfobloxArCount=1,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/12/2021, 12:17:46.667 AM",,Infoblox,Data Connector,DNS Response,1,,,,8.8.8.8,"""CK0POJMG874LJREF7EFN8430QVIT8BSM.com. 21109 IN NSEC3 1 1 0 - CK0Q1GIN43N1ARRC9OSM6QPQR81H5M9A NS SOA RRSIG DNSKEY NSEC3PARAM CK0POJMG874LJREF7EFN8430QVIT8BSM.com. 21109 IN RRSIG NSEC3 8 2 86400 20210217054119 20210210043119 58540 com.",UDP,42396,172.0.0.253,2.1.3,DNS Response IN DS NOERROR,DNS,windowsupdate.com.,InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=DS;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;FD+n+fO9jI2LoVi9ULqvx6lIp8ZP5yC/0HzfnJqiqgTTubTJiVzoVT29xai2LSeepPqzS/+sehbGHpqOgj21uJoOLePqmaVx/f73ZGcP6Ud2tlkQQIE++OwDlcQK6P/BM96xdHmGEnG/RaMrFiHV919Xog+sFZddMpjVTtYRq9nST68IU2gLDcNTFeeM7P3CaUdaSRl3LIRz8iuWMrYNSg=;K2UJnIOuqvcKeXDI5ov7tb+pdRcWrQtuRqMPpvOgaxf0NmZZmuL4yqjoRqQooUwHtL0meIDWbbMgwrsgSf2wJPLZ3AkSak8JTiDYtitGhKvbWRU8ObWgFp0FXcbWcLX2392wmGMKhwPGR/ok3iddD7hwB/sT2h6u0/4rOc+ahiUwGbpPFb4RCWgOgda1EeglInhX4DF0akfmjIVFIRA8IQ=;RNVTwdvv9JmnrKTjiUKbgbx4omzp5bLLvvlUyCNzBntZsorF8OCVV0M7NOOz5WdLN9ah01BLKSh6Yt3nAAuPnYwEVJkc8zoeENAD9QS/ZnjSZVJqWjMzyBydsRFBOclxAE+qQmDcZZB6HP8+lGrPwPEBYb0sff+z6LHwnLIo2CjhocJy9fWqGd9G/x+vSzHIrnaFPkhgI13+pPYrGBCumw=;InfobloxAnCount=0;InfobloxNsCount=6;InfobloxArCount=1,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/12/2021, 12:02:31.642 AM",,Infoblox,Data Connector,DNS Response,1,,,,8.8.8.8,"""CK0POJMG874LJREF7EFN8430QVIT8BSM.com. 21030 IN NSEC3 1 1 0 - CK0Q1GIN43N1ARRC9OSM6QPQR81H5M9A NS SOA RRSIG DNSKEY NSEC3PARAM CK0POJMG874LJREF7EFN8430QVIT8BSM.com. 21030 IN RRSIG NSEC3 8 2 86400 20210217054119 20210210043119 58540 com.",UDP,40632,172.0.0.253,2.1.3,DNS Response IN DS NOERROR,DNS,googleapis.com.,InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=DS;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;FD+n+fO9jI2LoVi9ULqvx6lIp8ZP5yC/0HzfnJqiqgTTubTJiVzoVT29xai2LSeepPqzS/+sehbGHpqOgj21uJoOLePqmaVx/f73ZGcP6Ud2tlkQQIE++OwDlcQK6P/BM96xdHmGEnG/RaMrFiHV919Xog+sFZddMpjVTtYRq9nST68IU2gLDcNTFeeM7P3CaUdaSRl3LIRz8iuWMrYNSg=;jde8LbAIYqw7GtoE7ci9Jcm9gO92cM2gXyg2B/OfBDXMebgEGGtr+yN4YKzcTQEB9dJiHjerAljPM4nlz+jBVfxNfh7U2OnYmb9LcPkIpZaTgpGGxjkyo1dfPEj07bz9Ltdb/GhaA9nY3JY+LZSA0qlNq44tW6ygZbbLLEQCYwZAXc5WH6Uy1TxXd+9/UWIikbOas3+NJXHmXWjD99x0Yg=;wy3o2Mbrzk0n7WOLVdjeIUKhf7UOLV6tjoVuL8Mvgk1ocSftelyWeV2urCSOxxaqdbBBNfUkM3g7hJ4GKLuleecAbm/u+hC8M9KjNEz+KYFOTcKFXWYvS/1nhiuTO4UgjCid0UWOQK2tZOE9GxGcoT8T0taPE81ED1oDXmT3oB75O2kuQURwpixRiLhwvoKyW8C1mzVhcCkeXUiVnIM1Tw=;InfobloxAnCount=0;InfobloxNsCount=6;InfobloxArCount=1,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/12/2021, 12:05:31.639 AM",,Infoblox,Data Connector,DNS Response,1,,,,8.8.8.8,"""CK0POJMG874LJREF7EFN8430QVIT8BSM.com. 20862 IN NSEC3 1 1 0 - CK0Q1GIN43N1ARRC9OSM6QPQR81H5M9A NS SOA RRSIG DNSKEY NSEC3PARAM CK0POJMG874LJREF7EFN8430QVIT8BSM.com. 20862 IN RRSIG NSEC3 8 2 86400 20210217054119 20210210043119 58540 com.",UDP,33168,172.0.0.253,2.1.3,DNS Response IN DS NOERROR,DNS,amazonaws.com.,InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=DS;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;FD+n+fO9jI2LoVi9ULqvx6lIp8ZP5yC/0HzfnJqiqgTTubTJiVzoVT29xai2LSeepPqzS/+sehbGHpqOgj21uJoOLePqmaVx/f73ZGcP6Ud2tlkQQIE++OwDlcQK6P/BM96xdHmGEnG/RaMrFiHV919Xog+sFZddMpjVTtYRq9nST68IU2gLDcNTFeeM7P3CaUdaSRl3LIRz8iuWMrYNSg=;tZu6LRECi8XkWdAi3MHvzLVqXF0rlTWFcKqoWChcf98bLrIO7iSrnih0c55c7qIBdiRElsNcPER14M6TibE1C3RitMFTvmOan6z8xMTzoL7ex3kl0iDceAALjlfOwQ4xT94zZdbfYy10MhHI975/NuUPt/zhvHTnG5Fdxq26zV77aBH5lYHqOoMySigSD1ITd/rxsOYnYbuQASfpSTFH/g=;FGcGCo21Q7YylOEDVNXZArBunK8NQFL0KqEKhyBnY0AqYyxbZfEJR7XtTvHsmPbnXPNaBjBwDHxqjyWzZXGRDKshK7/rxxOnJt+cS8N4H382zzQor3jqu9dhT4SwlLfs18IYq8jWeOccgSyYFuj6HKQ9k20tagv1ASwo8EHXcHTIRjdOtM9DeHSsgBEsH5Jl+S68cbH9yr1un6D26l/kSg=;InfobloxAnCount=0;InfobloxNsCount=6;InfobloxArCount=1,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/12/2021, 12:15:46.640 AM",,Infoblox,Data Connector,DNS Response,1,,,,8.8.8.8,"""CK0POJMG874LJREF7EFN8430QVIT8BSM.com. 20794 IN NSEC3 1 1 0 - CK0Q1GIN43N1ARRC9OSM6QPQR81H5M9A NS SOA RRSIG DNSKEY NSEC3PARAM CK0POJMG874LJREF7EFN8430QVIT8BSM.com. 20794 IN RRSIG NSEC3 8 2 86400 20210217054119 20210210043119 58540 com.",UDP,45685,172.0.0.253,2.1.3,DNS Response IN DS NOERROR,DNS,amazonaws.com.,InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=DS;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;FD+n+fO9jI2LoVi9ULqvx6lIp8ZP5yC/0HzfnJqiqgTTubTJiVzoVT29xai2LSeepPqzS/+sehbGHpqOgj21uJoOLePqmaVx/f73ZGcP6Ud2tlkQQIE++OwDlcQK6P/BM96xdHmGEnG/RaMrFiHV919Xog+sFZddMpjVTtYRq9nST68IU2gLDcNTFeeM7P3CaUdaSRl3LIRz8iuWMrYNSg=;C9Vcv4hdlFCwX6U5v3wlP1QK1jPVJHZps27+CTPZqQx/Ily6ItVsBbfRSr5hjET7e1HFJuBp+zNsEn63wQFDektY10paLwtQHl8KbnuBndN6R5Nu9QPWV1wbXVaGq7v1v/ra3ZX3z587X09Q6wuvOQXnyXXn4sLwzzZKgo7/bnKOwTazXfqHwOpTRJLWGnTl0ZHgzv1ENdyEJ1AypOqGQQ=;FGcGCo21Q7YylOEDVNXZArBunK8NQFL0KqEKhyBnY0AqYyxbZfEJR7XtTvHsmPbnXPNaBjBwDHxqjyWzZXGRDKshK7/rxxOnJt+cS8N4H382zzQor3jqu9dhT4SwlLfs18IYq8jWeOccgSyYFuj6HKQ9k20tagv1ASwo8EHXcHTIRjdOtM9DeHSsgBEsH5Jl+S68cbH9yr1un6D26l/kSg=;InfobloxAnCount=0;InfobloxNsCount=6;InfobloxArCount=1,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/12/2021, 12:17:46.667 AM",,Infoblox,Data Connector,DNS Response,1,,,,8.8.8.8,"""A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 21591 IN NSEC3 1 1 0 - A1RUUFFJKCT2Q54P78F8EJGJ8JBK7I8B NS SOA RRSIG DNSKEY NSEC3PARAM A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 21591 IN RRSIG NSEC3 8 2 86400 20210217084924 20210210073924 30944 net.",UDP,35140,172.0.0.253,2.1.3,DNS Response IN DS NOERROR,DNS,nsatc.net.,InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=DS;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;nt7g1B8bCLrN7mkMa/FRIdlD+Ndq9jW7yNXKcZjWHTzvAmHjWw0IkF5JdUvlOurd4HOgiNaczhueq7Cr1DQBkMptz6LP3xc91kZ5UwGjKgr2Y6K27MsQT+pbjDY0JS5rhqAbfYI46xIySEiP6HcQBU1DAZlg09CQHlXQFEy/nTX8jErBvUl8aPLN1ETMjW7af0TbC4daW8RIPQ5XOVl1cA=;KGfpcbZ5+NMS2poFnvMuORoSCoARv3aAv/0g3k0C9OA6t8WuZIVCTL8iTKoaN1bdBObJt52jr9WUHlOr9N5Ox2yd8Tnq0WHUNSrLZcE4UGXocuWjJ5pugnjp03/Thtpzv/8Aa4Fsfj+uHbrjnyHzL9mzY/1zajJOJsprtRd5TFj1eyr6a/s5PMAjZX/YNpSFPr6X8FVtEZAe5qp/RW4N5g=;j4FGClSNtszyBtlByjBB6WLeEsMPC4Y2G12XgXWh2Pp2vk8vVewWJdA9WIWDZkzfE48+RiJPKU3bu5yTKXcW8tfzirNIOntW8mJ7vogfjZF4P7mMvjLwQ97D1yuMW32Q4r/qjEIvoITIYAxgufJzH6jUzRNyvDfb0S6bYYOmGwarVWMTuT9jzg2E5mKdfs1ak7NRF6rYUYGdCnXwrrYBAA=;InfobloxAnCount=0;InfobloxNsCount=6;InfobloxArCount=1,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/12/2021, 12:16:46.627 AM",,Infoblox,Data Connector,DNS Response,1,,,,8.8.8.8,"""A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 21538 IN NSEC3 1 1 0 - A1RUUFFJKCT2Q54P78F8EJGJ8JBK7I8B NS SOA RRSIG DNSKEY NSEC3PARAM A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 21538 IN RRSIG NSEC3 8 2 86400 20210217084924 20210210073924 30944 net.",UDP,39511,172.0.0.253,2.1.3,DNS Response IN DS NOERROR,DNS,cloudapp.net.,InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=DS;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;nt7g1B8bCLrN7mkMa/FRIdlD+Ndq9jW7yNXKcZjWHTzvAmHjWw0IkF5JdUvlOurd4HOgiNaczhueq7Cr1DQBkMptz6LP3xc91kZ5UwGjKgr2Y6K27MsQT+pbjDY0JS5rhqAbfYI46xIySEiP6HcQBU1DAZlg09CQHlXQFEy/nTX8jErBvUl8aPLN1ETMjW7af0TbC4daW8RIPQ5XOVl1cA=;ggtNJJdd9uKyw7JrYh0ZyJs0B1pYM6Dt9FCWljQg/NcWBcYAdpkKn4DaWElrhCLN5gfz5G932Ksun9vX+nixzVpL1HRnLxRikJOK7lwWSsY/sS2heP/xJKPIqKxpuZL2YqFll1O7fRjcEc1TzItr1gMMaMM8AddMituVJDanJgQbCuWlRFBxMtBwSfEF4ZT619rO3tRQvUbu+ktWUi2Ugg=;oTxLz7B5W1X3R38+SlL0KcBE1x7vGuECFnwRdcAPoHIbqtRje/DYltkcV44+9QKDM8oYkdK54v3IZQoqJEiFAPsbzYOm9dPXOusYS6k2jVbEnWKEI612opFMjHGs7FTjjrOFd8kPghrkD8JZVuZAgiMCBwhZ66N3z87SOtgHbORA2W5j+aFI14NsMDdKh0MmNbueyM4O985MDt9+NVyFBQ=;InfobloxAnCount=0;InfobloxNsCount=6;InfobloxArCount=1,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/12/2021, 12:17:46.667 AM",,Infoblox,Data Connector,DNS Response,1,,,,8.8.8.8,"""A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 21485 IN NSEC3 1 1 0 - A1RUUFFJKCT2Q54P78F8EJGJ8JBK7I8B NS SOA RRSIG DNSKEY NSEC3PARAM A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 21485 IN RRSIG NSEC3 8 2 86400 20210217084924 20210210073924 30944 net.",UDP,32985,172.0.0.253,2.1.3,DNS Response IN DS NOERROR,DNS,hwcdn.net.,InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=DS;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;nt7g1B8bCLrN7mkMa/FRIdlD+Ndq9jW7yNXKcZjWHTzvAmHjWw0IkF5JdUvlOurd4HOgiNaczhueq7Cr1DQBkMptz6LP3xc91kZ5UwGjKgr2Y6K27MsQT+pbjDY0JS5rhqAbfYI46xIySEiP6HcQBU1DAZlg09CQHlXQFEy/nTX8jErBvUl8aPLN1ETMjW7af0TbC4daW8RIPQ5XOVl1cA=;ggtNJJdd9uKyw7JrYh0ZyJs0B1pYM6Dt9FCWljQg/NcWBcYAdpkKn4DaWElrhCLN5gfz5G932Ksun9vX+nixzVpL1HRnLxRikJOK7lwWSsY/sS2heP/xJKPIqKxpuZL2YqFll1O7fRjcEc1TzItr1gMMaMM8AddMituVJDanJgQbCuWlRFBxMtBwSfEF4ZT619rO3tRQvUbu+ktWUi2Ugg=;rkSoMXb48rv5X6GFB8CCvY0CWbWISgVsy581GMH0TVbkJGGBNM8f+sV4BNJ9J3LoHjAWiYDQIwnYd9GBRPNpbntMpqEDWW4TAkcN2SIVcPa+a2lNm6xpL1/KsHM/scLXJ+o7DCl80ue92PBlHEuMw4S1xsTUaYmvM6Vhjgtu9vtxJ/KBLWcctXvvsc+MS0P5Q18+1pVHITWxsD6eI7beHw=;InfobloxAnCount=0;InfobloxNsCount=6;InfobloxArCount=1,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/12/2021, 12:15:16.650 AM",,Infoblox,Data Connector,DNS Response,1,,,,8.8.8.8,"""A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 21478 IN NSEC3 1 1 0 - A1RUUFFJKCT2Q54P78F8EJGJ8JBK7I8B NS SOA RRSIG DNSKEY NSEC3PARAM A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 21478 IN RRSIG NSEC3 8 2 86400 20210217084924 20210210073924 30944 net.",UDP,35042,172.0.0.253,2.1.3,DNS Response IN DS NOERROR,DNS,trafficmanager.net.,InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=DS;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;nt7g1B8bCLrN7mkMa/FRIdlD+Ndq9jW7yNXKcZjWHTzvAmHjWw0IkF5JdUvlOurd4HOgiNaczhueq7Cr1DQBkMptz6LP3xc91kZ5UwGjKgr2Y6K27MsQT+pbjDY0JS5rhqAbfYI46xIySEiP6HcQBU1DAZlg09CQHlXQFEy/nTX8jErBvUl8aPLN1ETMjW7af0TbC4daW8RIPQ5XOVl1cA=;neHEZCc7aSicDpTu+vGOI1LgS9dALhOEQen58Il+3g7Zgl3hKaA0FTatZmHQokzUUFY8yRup+hMXcmZl5EYZ9ZN82cM0r6NsDkgNZn4jR3qlw2Ph9PRrKBXau9cCZ2cjPNS2feL38tCtAUxcIE1HcMjcL9Iko6WFUOARsSzN/P+2Og0nD8qdr4ujkJjb2Nmq0eBuXD8aOz6LRfaTYles9Q=;tNeiuF8NGOTF9NmDyxx2Vzfsk1sMosf6XHNxX2CE1/+yRJEERVJ8zfKq+zjoXcdXL7xbBy/Zs2vAfWcFPdC78R43Jmb8IqH2g4VOEkbvCkJeBpt+Rky8aFWWghRvpOHIZyGAAkZ99b8gS2ootA1dOcfyK+ZViSvv33/MsbMIEKiTLJofeFJ23WppPBkXwy7GwNbHCHfuBuKHI3axHckypQ=;InfobloxAnCount=0;InfobloxNsCount=6;InfobloxArCount=1,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/12/2021, 12:01:46.671 AM",,Infoblox,Data Connector,DNS Response,1,,,,8.8.8.8,"""A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 21449 IN NSEC3 1 1 0 - A1RUUFFJKCT2Q54P78F8EJGJ8JBK7I8B NS SOA RRSIG DNSKEY NSEC3PARAM A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 21449 IN RRSIG NSEC3 8 2 86400 20210217084924 20210210073924 30944 net.",UDP,35832,172.0.0.253,2.1.3,DNS Response IN DS NOERROR,DNS,akamaiedge.net.,InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=DS;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;nt7g1B8bCLrN7mkMa/FRIdlD+Ndq9jW7yNXKcZjWHTzvAmHjWw0IkF5JdUvlOurd4HOgiNaczhueq7Cr1DQBkMptz6LP3xc91kZ5UwGjKgr2Y6K27MsQT+pbjDY0JS5rhqAbfYI46xIySEiP6HcQBU1DAZlg09CQHlXQFEy/nTX8jErBvUl8aPLN1ETMjW7af0TbC4daW8RIPQ5XOVl1cA=;CGBCcRfCoTaU0ycL/WVgf3kV8r1De5Xgi00s2dXW34V1+4ZsPh6zP5quie4F8JT88XdVEIzgy9nFjHihfIqtD8YgnhHEPW1zBUzWE7Rxzr5141bv062xv4YogtUOnxT3j14vIytXRbNtLpt+cVjFlgNSShprsCa/V+gmZKOZUSFsxU3GFszOcMr48Gl5AsgQNKvSxYKNlgNulC2LMmK2ug=;q561ysTDa51jrKQeom8iayySW8Qz9OI/+UEtW9VUxfiDebXteEuVBP+7R1MkwwvoQvHkoKA3AyJhgwlOq9DAQuII55UYWU4b04fhj6TpjK57bHzmrvgez/M3SRfQKOsh4qKd6xb+t5BoRGDiZR5Hh/Sc2ryZ8rMonlK0tBz/EQXOPjlQG7B8N6R7e3QhOI91VFeTyvPSNzJmS82xCnQ6fg=;InfobloxAnCount=0;InfobloxNsCount=6;InfobloxArCount=1,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:55:01.617 PM",,Infoblox,Data Connector,DNS Response,1,,,,8.8.8.8,"""A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 21134 IN NSEC3 1 1 0 - A1RUUFFJKCT2Q54P78F8EJGJ8JBK7I8B NS SOA RRSIG DNSKEY NSEC3PARAM A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 21134 IN RRSIG NSEC3 8 2 86400 20210217084924 20210210073924 30944 net.",UDP,38583,172.0.0.253,2.1.3,DNS Response IN DS NOERROR,DNS,trafficmanager.net.,InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=DS;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;nt7g1B8bCLrN7mkMa/FRIdlD+Ndq9jW7yNXKcZjWHTzvAmHjWw0IkF5JdUvlOurd4HOgiNaczhueq7Cr1DQBkMptz6LP3xc91kZ5UwGjKgr2Y6K27MsQT+pbjDY0JS5rhqAbfYI46xIySEiP6HcQBU1DAZlg09CQHlXQFEy/nTX8jErBvUl8aPLN1ETMjW7af0TbC4daW8RIPQ5XOVl1cA=;Mj2HMmnLlQ2wlq5e0BfkjIftiZaILCytFP2tiBIdTrBEMCaYL49f5huoxXNJMBZIMQweicDZMlcORodIgS/UmJmXRvyJTr+UG4J7u3l9qqDsUtzL8BveJYcJn8EuYZp/vxs7ccX/fpqeGfEP7e3Rxwfjf8GTHQQqHFeeasUQPRYo/OnKuM8cTpzTC386Xo+GMlB5VkiAbiFsfavBucNwpQ=;tNeiuF8NGOTF9NmDyxx2Vzfsk1sMosf6XHNxX2CE1/+yRJEERVJ8zfKq+zjoXcdXL7xbBy/Zs2vAfWcFPdC78R43Jmb8IqH2g4VOEkbvCkJeBpt+Rky8aFWWghRvpOHIZyGAAkZ99b8gS2ootA1dOcfyK+ZViSvv33/MsbMIEKiTLJofeFJ23WppPBkXwy7GwNbHCHfuBuKHI3axHckypQ=;InfobloxAnCount=0;InfobloxNsCount=6;InfobloxArCount=1,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:57:31.632 PM",,Infoblox,Data Connector,DNS Response,1,,,,8.8.8.8,"""A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 21030 IN NSEC3 1 1 0 - A1RUUFFJKCT2Q54P78F8EJGJ8JBK7I8B NS SOA RRSIG DNSKEY NSEC3PARAM A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 21030 IN RRSIG NSEC3 8 2 86400 20210217084924 20210210073924 30944 net.",UDP,54375,172.0.0.253,2.1.3,DNS Response IN DS NOERROR,DNS,edgekey.net.,InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=DS;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;nt7g1B8bCLrN7mkMa/FRIdlD+Ndq9jW7yNXKcZjWHTzvAmHjWw0IkF5JdUvlOurd4HOgiNaczhueq7Cr1DQBkMptz6LP3xc91kZ5UwGjKgr2Y6K27MsQT+pbjDY0JS5rhqAbfYI46xIySEiP6HcQBU1DAZlg09CQHlXQFEy/nTX8jErBvUl8aPLN1ETMjW7af0TbC4daW8RIPQ5XOVl1cA=;bfI3oIF4I9Lj5W+EE4mZ0oYpecOTHtq5QEfZBS5oaAmgX1QXg8M9HSX3HbbQZGvHnFPox83HgTXHK6hgHkBqS9dPFEsq18uHsnSJ6RZgs2EYWB1+UoPwS6ww5BHhYLtQz3pUCBGKStAx5/9+FUkcK+++8eXxm38aRRtwKGiZ1qIhYvOuu1CwFXPHIOtuPidRHXmBeL7FIju87JAPH3B9PA=;FnXhWPZhqcZMe8qsOmOBFkFv8+j/M5nRmVs8HOAHPTXkHBUi/I+1wUNTjrrSUBKpSJGoikibHrXvzoMVybU3akZlM2QHP7GlxHJKni0RvaYtDYdLK7YcUMwS3DKMoJ+jKe64kli2oUp7I+fOwvxCx/6lLLjSPZbUJbiz1MwARmAGYklo5oLxhPXE0uexpE6K8U4rc0RrsfqG5KWgPqzUhw=;InfobloxAnCount=0;InfobloxNsCount=6;InfobloxArCount=1,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/12/2021, 12:10:16.636 AM",,Infoblox,Data Connector,DNS Response,1,,,,8.8.8.8,"""A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 20790 IN NSEC3 1 1 0 - A1RUUFFJKCT2Q54P78F8EJGJ8JBK7I8B NS SOA RRSIG DNSKEY NSEC3PARAM A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 20790 IN RRSIG NSEC3 8 2 86400 20210217084924 20210210073924 30944 net.",UDP,40497,172.0.0.253,2.1.3,DNS Response IN DS NOERROR,DNS,trafficmanager.net.,InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=DS;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;nt7g1B8bCLrN7mkMa/FRIdlD+Ndq9jW7yNXKcZjWHTzvAmHjWw0IkF5JdUvlOurd4HOgiNaczhueq7Cr1DQBkMptz6LP3xc91kZ5UwGjKgr2Y6K27MsQT+pbjDY0JS5rhqAbfYI46xIySEiP6HcQBU1DAZlg09CQHlXQFEy/nTX8jErBvUl8aPLN1ETMjW7af0TbC4daW8RIPQ5XOVl1cA=;cJhML08IhhuDiLfndh6ZdtbkzEvnO5nEUHVPeeUj6flbIoqQpctE5tJgU3pz4Q4YbI3W8mv9UJFWb874U6SSe/vXXPrUQ2sy56eJQo8kRlgvW+rpKIKSV0W4kubdy3bdcRU2WLnaSmMBb8xATDLouquVhMXY4r8b6I8f/RLUnPdR82J8Nb1SyYp4cyp6yp18z6FADuuV4LxoefureSSRDw=;tNeiuF8NGOTF9NmDyxx2Vzfsk1sMosf6XHNxX2CE1/+yRJEERVJ8zfKq+zjoXcdXL7xbBy/Zs2vAfWcFPdC78R43Jmb8IqH2g4VOEkbvCkJeBpt+Rky8aFWWghRvpOHIZyGAAkZ99b8gS2ootA1dOcfyK+ZViSvv33/MsbMIEKiTLJofeFJ23WppPBkXwy7GwNbHCHfuBuKHI3axHckypQ=;InfobloxAnCount=0;InfobloxNsCount=6;InfobloxArCount=1,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/12/2021, 12:05:16.647 AM",,Infoblox,Data Connector,DNS Response,1,,,,8.8.8.8,"""A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 20774 IN NSEC3 1 1 0 - A1RUUFFJKCT2Q54P78F8EJGJ8JBK7I8B NS SOA RRSIG DNSKEY NSEC3PARAM A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 20774 IN RRSIG NSEC3 8 2 86400 20210217084924 20210210073924 30944 net.",UDP,47100,172.0.0.253,2.1.3,DNS Response IN DS NOERROR,DNS,trafficmanager.net.,InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=DS;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;nt7g1B8bCLrN7mkMa/FRIdlD+Ndq9jW7yNXKcZjWHTzvAmHjWw0IkF5JdUvlOurd4HOgiNaczhueq7Cr1DQBkMptz6LP3xc91kZ5UwGjKgr2Y6K27MsQT+pbjDY0JS5rhqAbfYI46xIySEiP6HcQBU1DAZlg09CQHlXQFEy/nTX8jErBvUl8aPLN1ETMjW7af0TbC4daW8RIPQ5XOVl1cA=;YyTMa0Wp16i/eWYLwXpktkpDa80n2FCd+X0nqs8S/8J1ObgcOJIets3K+Tp6oaK4b1mmV8aIHfHtp9Cj5M/WidukCGTcIyshhZJUgBrfRr/ulXH1cZa4bYq+a9nvSV+WaZ12FfFGV3Kr3ACAoTABT+IoYJoisHKxFZIw/wEYNxKOyfqVVX0DdCmQDLTlftrGGVj896pFiTQ9FkdZWwcvUw=;tNeiuF8NGOTF9NmDyxx2Vzfsk1sMosf6XHNxX2CE1/+yRJEERVJ8zfKq+zjoXcdXL7xbBy/Zs2vAfWcFPdC78R43Jmb8IqH2g4VOEkbvCkJeBpt+Rky8aFWWghRvpOHIZyGAAkZ99b8gS2ootA1dOcfyK+ZViSvv33/MsbMIEKiTLJofeFJ23WppPBkXwy7GwNbHCHfuBuKHI3axHckypQ=;InfobloxAnCount=0;InfobloxNsCount=6;InfobloxArCount=1,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:57:31.632 PM",,Infoblox,Data Connector,DNS Response,1,,,,8.8.8.8,"""A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 20771 IN NSEC3 1 1 0 - A1RUUFFJKCT2Q54P78F8EJGJ8JBK7I8B NS SOA RRSIG DNSKEY NSEC3PARAM A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 20771 IN RRSIG NSEC3 8 2 86400 20210217084924 20210210073924 30944 net.",UDP,48713,172.0.0.253,2.1.3,DNS Response IN DS NOERROR,DNS,akamaiedge.net.,InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=DS;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;nt7g1B8bCLrN7mkMa/FRIdlD+Ndq9jW7yNXKcZjWHTzvAmHjWw0IkF5JdUvlOurd4HOgiNaczhueq7Cr1DQBkMptz6LP3xc91kZ5UwGjKgr2Y6K27MsQT+pbjDY0JS5rhqAbfYI46xIySEiP6HcQBU1DAZlg09CQHlXQFEy/nTX8jErBvUl8aPLN1ETMjW7af0TbC4daW8RIPQ5XOVl1cA=;Mc5xo5vWOfGE6yXyRN8ExgTet4d8PC51JCe4Ard9XtXcaiRDj9taikVI2mBnfgv1X7//7eyZusZvVyqoKERftCNgt3olURkJxEkspijjdKDdAMo+1C87LpidArCXvE4KtaYZz17NANpUwB765JyAr5bMUWOIk1oZdL36VmorPLxTNAzNaffBSTh0v4NDEjPFKfvK3nFfL2h7eeA67G8QDA=;q561ysTDa51jrKQeom8iayySW8Qz9OI/+UEtW9VUxfiDebXteEuVBP+7R1MkwwvoQvHkoKA3AyJhgwlOq9DAQuII55UYWU4b04fhj6TpjK57bHzmrvgez/M3SRfQKOsh4qKd6xb+t5BoRGDiZR5Hh/Sc2ryZ8rMonlK0tBz/EQXOPjlQG7B8N6R7e3QhOI91VFeTyvPSNzJmS82xCnQ6fg=;InfobloxAnCount=0;InfobloxNsCount=6;InfobloxArCount=1,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:51:46.999 PM",,Infoblox,Data Connector,DNS Response,1,,,,,"""""",TCP,26823,208.50.179.13,2.1.3,DNS Response IN A NOERROR,DNS,youtube.com.,InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=-EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:51:40.268 PM",,Infoblox,Data Connector,DNS Response,1,,,,,"""""",TCP,11091,208.50.179.13,2.1.3,DNS Response IN A NOERROR,DNS,youtube.com.,InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=-EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:51:38.718 PM",,Infoblox,Data Connector,DNS Response,1,,,,,"""""",TCP,26823,208.50.179.13,2.1.3,DNS Response IN A NOERROR,DNS,www.bing.com.,InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=-EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:51:40.268 PM",,Infoblox,Data Connector,DNS Response,1,,,,,"""""",TCP,11091,208.50.179.13,2.1.3,DNS Response IN A NOERROR,DNS,www.bing.com.,InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=-EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:56:32.515 PM",,Infoblox,Data Connector,DNS Response,1,,,,,"""""",TCP,25989,208.50.179.13,2.1.3,DNS Response IN A NOERROR,DNS,watson.telemetry.microsoft.com.,InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=-EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:56:52.995 PM",,Infoblox,Data Connector,DNS Response,1,,,,,"""""",TCP,49493,208.50.179.13,2.1.3,DNS Response IN A NOERROR,DNS,watson.telemetry.microsoft.com.,InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=-EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/12/2021, 12:11:36.441 AM",,Infoblox,Data Connector,DNS Response,1,,,,,"""""",TCP,48906,208.50.179.13,2.1.3,DNS Response IN A NOERROR,DNS,v10.events.data.microsoft.com.,InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=-EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/12/2021, 12:11:08.117 AM",,Infoblox,Data Connector,DNS Response,1,,,,,"""""",TCP,46798,208.50.179.13,2.1.3,DNS Response IN A NOERROR,DNS,v10.events.data.microsoft.com.,InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=-EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:52:25.459 PM",,Infoblox,Data Connector,DNS Response,1,,,,,"""""",TCP,11500,208.50.179.13,2.1.3,DNS Response IN A NOERROR,DNS,update.googleapis.com.,InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=-EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:52:29.933 PM",,Infoblox,Data Connector,DNS Response,1,,,,,"""""",TCP,4772,208.50.179.13,2.1.3,DNS Response IN A NOERROR,DNS,update.googleapis.com.,InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=-EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/12/2021, 12:10:21.647 AM",,Infoblox,Data Connector,DNS Response,1,,,,,"""""",TCP,45027,208.50.179.13,2.1.3,DNS Response IN A NOERROR,DNS,update.googleapis.com.,InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=-EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:52:44.067 PM",,Infoblox,Data Connector,DNS Response,1,,,,,"""""",TCP,2113,208.50.179.13,2.1.3,DNS Response IN A NOERROR,DNS,update.googleapis.com.,InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=-EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:52:49.883 PM",,Infoblox,Data Connector,DNS Response,1,,,,,"""""",TCP,60222,208.50.179.13,2.1.3,DNS Response IN A NOERROR,DNS,update.googleapis.com.,InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=-EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/12/2021, 12:10:22.143 AM",,Infoblox,Data Connector,DNS Response,1,,,,,"""""",TCP,52569,208.50.179.13,2.1.3,DNS Response IN A NOERROR,DNS,update.googleapis.com.,InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=-EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/12/2021, 12:23:50.805 AM",,Infoblox,Data Connector,DNS Response,1,,,,,"""""",TCP,53238,208.50.179.13,2.1.3,DNS Response IN A NOERROR,DNS,update.googleapis.com.,InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=-EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/12/2021, 12:23:51.036 AM",,Infoblox,Data Connector,DNS Response,1,,,,,"""""",TCP,13216,208.50.179.13,2.1.3,DNS Response IN A NOERROR,DNS,update.googleapis.com.,InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=-EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/12/2021, 12:25:31.690 AM",,Infoblox,Data Connector,DNS Response,1,,,,,"""""",TCP,16301,208.50.179.13,2.1.3,DNS Response IN A NOERROR,DNS,tile-service.weather.microsoft.com.,InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=-EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/12/2021, 12:25:33.065 AM",,Infoblox,Data Connector,DNS Response,1,,,,,"""""",TCP,41618,208.50.179.13,2.1.3,DNS Response IN A NOERROR,DNS,tile-service.weather.microsoft.com.,InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=-EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:58:06.189 PM",,Infoblox,Data Connector,DNS Response,1,,,,,"""""",TCP,44892,208.50.179.13,2.1.3,DNS Response IN A NOERROR,DNS,tile-service.weather.microsoft.com.,InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=-EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:58:11.113 PM",,Infoblox,Data Connector,DNS Response,1,,,,,"""""",TCP,40734,208.50.179.13,2.1.3,DNS Response IN A NOERROR,DNS,tile-service.weather.microsoft.com.,InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=-EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:53:40.040 PM",,Infoblox,Data Connector,DNS Response,1,,,,,"""""",TCP,10691,208.50.179.13,2.1.3,DNS Response IN A NOERROR,DNS,sls.update.microsoft.com.,InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=-EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:53:38.531 PM",,Infoblox,Data Connector,DNS Response,1,,,,,"""""",TCP,42264,208.50.179.13,2.1.3,DNS Response IN A NOERROR,DNS,sls.update.microsoft.com.,InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=-EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:53:38.531 PM",,Infoblox,Data Connector,DNS Response,1,,,,,"""""",TCP,42264,208.50.179.13,2.1.3,DNS Response IN A NOERROR,DNS,sls.update.microsoft.com.,InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=-EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:53:38.531 PM",,Infoblox,Data Connector,DNS Response,1,,,,,"""""",TCP,42264,208.50.179.13,2.1.3,DNS Response IN A NOERROR,DNS,sls.update.microsoft.com.,InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=-EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:53:38.530 PM",,Infoblox,Data Connector,DNS Response,1,,,,,"""""",TCP,42264,208.50.179.13,2.1.3,DNS Response IN A NOERROR,DNS,sls.update.microsoft.com.,InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=-EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:53:40.040 PM",,Infoblox,Data Connector,DNS Response,1,,,,,"""""",TCP,10691,208.50.179.13,2.1.3,DNS Response IN A NOERROR,DNS,sls.update.microsoft.com.,InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=-EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:53:40.040 PM",,Infoblox,Data Connector,DNS Response,1,,,,,"""""",TCP,10691,208.50.179.13,2.1.3,DNS Response IN A NOERROR,DNS,sls.update.microsoft.com.,InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=-EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:53:38.531 PM",,Infoblox,Data Connector,DNS Response,1,,,,,"""""",TCP,42264,208.50.179.13,2.1.3,DNS Response IN A NOERROR,DNS,sls.update.microsoft.com.,InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=-EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:53:38.531 PM",,Infoblox,Data Connector,DNS Response,1,,,,,"""""",TCP,42264,208.50.179.13,2.1.3,DNS Response IN A NOERROR,DNS,sls.update.microsoft.com.,InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=-EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:56:43.787 PM",,Infoblox,Data Connector,DNS Response,1,,,,,"""""",TCP,63440,208.50.179.13,2.1.3,DNS Response IN A NOERROR,DNS,settings-win.data.microsoft.com.,InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=-EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/12/2021, 12:23:29.314 AM",,Infoblox,Data Connector,DNS Response,1,,,,,"""""",TCP,53354,208.50.179.13,2.1.3,DNS Response IN A NOERROR,DNS,settings-win.data.microsoft.com.,InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=-EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/12/2021, 12:26:49.328 AM",,Infoblox,Data Connector,DNS Response,1,,,,,"""""",TCP,59942,208.50.179.13,2.1.3,DNS Response IN A NOERROR,DNS,settings-win.data.microsoft.com.,InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=-EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/12/2021, 12:08:21.305 AM",,Infoblox,Data Connector,DNS Response,1,,,,,"""""",TCP,8899,208.50.179.13,2.1.3,DNS Response IN A NOERROR,DNS,settings-win.data.microsoft.com.,InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=-EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:56:47.435 PM",,Infoblox,Data Connector,DNS Response,1,,,,,"""""",TCP,26052,208.50.179.13,2.1.3,DNS Response IN A NOERROR,DNS,settings-win.data.microsoft.com.,InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=-EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:53:24.229 PM",,Infoblox,Data Connector,DNS Response,1,,,,,"""""",TCP,24396,208.50.179.13,2.1.3,DNS Response IN A NOERROR,DNS,settings-win.data.microsoft.com.,InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=-EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/12/2021, 12:02:21.331 AM",,Infoblox,Data Connector,DNS Response,1,,,,,"""""",TCP,35514,208.50.179.13,2.1.3,DNS Response IN A NOERROR,DNS,pool.ntp.org.,InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=4;InfobloxNsCount=0;InfobloxArCount=1,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/12/2021, 12:02:21.331 AM",,Infoblox,Data Connector,DNS Response,1,,,,,"""""",TCP,49521,208.50.179.13,2.1.3,DNS Response IN A NOERROR,DNS,pool.ntp.org.,InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=4;InfobloxNsCount=0;InfobloxArCount=1,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/12/2021, 12:06:08.170 AM",,Infoblox,Data Connector,DNS Response,1,,,,,"""""",TCP,37415,208.50.179.13,2.1.3,DNS Response IN A NOERROR,DNS,ocsp.digicert.com.,InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=-EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/12/2021, 12:05:34.981 AM",,Infoblox,Data Connector,DNS Response,1,,,,,"""""",TCP,14692,208.50.179.13,2.1.3,DNS Response IN A NOERROR,DNS,ocsp.digicert.com.,InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=-EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/12/2021, 12:05:35.299 AM",,Infoblox,Data Connector,DNS Response,1,,,,,"""""",TCP,53484,208.50.179.13,2.1.3,DNS Response IN A NOERROR,DNS,ocsp.digicert.com.,InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=-EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/12/2021, 12:06:10.063 AM",,Infoblox,Data Connector,DNS Response,1,,,,,"""""",TCP,60979,208.50.179.13,2.1.3,DNS Response IN A NOERROR,DNS,ocsp.digicert.com.,InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=-EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/12/2021, 12:05:21.024 AM",,Infoblox,Data Connector,DNS Response,1,,,,,"""""",TCP,56387,208.50.179.13,2.1.3,DNS Response IN A NOERROR,DNS,ntp.ubuntu.com.,InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=4;InfobloxNsCount=0;InfobloxArCount=1,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/12/2021, 12:05:17.985 AM",,Infoblox,Data Connector,DNS Response,1,,,,,"""""",TCP,43314,208.50.179.13,2.1.3,DNS Response IN A NOERROR,DNS,ntp.ubuntu.com.,InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=4;InfobloxNsCount=0;InfobloxArCount=1,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/12/2021, 12:11:41.502 AM",,Infoblox,Data Connector,DNS Response,1,,,,,"""""",TCP,30717,208.50.179.13,2.1.3,DNS Response IN A NOERROR,DNS,login.live.com.,InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=-EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:56:33.193 PM",,Infoblox,Data Connector,DNS Response,1,,,,,"""""",TCP,34276,208.50.179.13,2.1.3,DNS Response IN A NOERROR,DNS,login.live.com.,InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=-EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/12/2021, 12:19:11.198 AM",,Infoblox,Data Connector,DNS Response,1,,,,,"""""",TCP,45395,208.50.179.13,2.1.3,DNS Response IN A NOERROR,DNS,login.live.com.,InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=-EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:56:52.994 PM",,Infoblox,Data Connector,DNS Response,1,,,,,"""""",TCP,49493,208.50.179.13,2.1.3,DNS Response IN A NOERROR,DNS,ctldl.windowsupdate.com.,InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=-EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/12/2021, 12:26:57.528 AM",,Infoblox,Data Connector,DNS Response,1,,,,,"""""",TCP,15022,208.50.179.13,2.1.3,DNS Response IN A NOERROR,DNS,ctldl.windowsupdate.com.,InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=-EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/12/2021, 12:27:04.691 AM",,Infoblox,Data Connector,DNS Response,1,,,,,"""""",TCP,46404,208.50.179.13,2.1.3,DNS Response IN A NOERROR,DNS,ctldl.windowsupdate.com.,InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=-EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/12/2021, 12:06:10.063 AM",,Infoblox,Data Connector,DNS Response,1,,,,,"""""",TCP,60979,208.50.179.13,2.1.3,DNS Response IN A NOERROR,DNS,crl4.digicert.com.,InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=-EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/12/2021, 12:05:34.982 AM",,Infoblox,Data Connector,DNS Response,1,,,,,"""""",TCP,14692,208.50.179.13,2.1.3,DNS Response IN A NOERROR,DNS,crl4.digicert.com.,InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=-EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/12/2021, 12:05:35.298 AM",,Infoblox,Data Connector,DNS Response,1,,,,,"""""",TCP,14692,208.50.179.13,2.1.3,DNS Response IN A NOERROR,DNS,crl4.digicert.com.,InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=-EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:52:36.805 PM",,Infoblox,Data Connector,DNS Response,1,,,,,"""""",TCP,26804,208.50.179.13,2.1.3,DNS Response IN A NOERROR,DNS,config.edge.skype.com.,InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=-EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/12/2021, 12:03:01.177 AM",,Infoblox,Data Connector,DNS Response,1,,,,,"""""",TCP,48173,208.50.179.13,2.1.3,DNS Response IN A NOERROR,DNS,clientservices.googleapis.com.,InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=-EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/12/2021, 12:03:02.109 AM",,Infoblox,Data Connector,DNS Response,1,,,,,"""""",TCP,34924,208.50.179.13,2.1.3,DNS Response IN A NOERROR,DNS,clientservices.googleapis.com.,InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=-EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/12/2021, 12:01:18.968 AM",,Infoblox,Data Connector,DNS Response,1,,,,,"""""",TCP,37715,208.50.179.13,2.1.3,DNS Response IN A NOERROR,DNS,clientservices.googleapis.com.,InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=-EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/12/2021, 12:01:20.957 AM",,Infoblox,Data Connector,DNS Response,1,,,,,"""""",TCP,16924,208.50.179.13,2.1.3,DNS Response IN A NOERROR,DNS,clientservices.googleapis.com.,InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=-EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:58:01.090 PM",,Infoblox,Data Connector,DNS Response,1,,,,,"""""",TCP,41258,208.50.179.13,2.1.3,DNS Response IN A NOERROR,DNS,cdn.content.prod.cms.msn.com.,InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=-EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/12/2021, 12:25:29.138 AM",,Infoblox,Data Connector,DNS Response,1,,,,,"""""",TCP,21303,208.50.179.13,2.1.3,DNS Response IN A NOERROR,DNS,cdn.content.prod.cms.msn.com.,InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=-EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1,CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc,OpsManager,"2/11/2021, 11:56:32.515 PM",,Infoblox,Data Connector,DNS Response,1,,,,,"""""",TCP,25989,208.50.179.13,2.1.3,DNS Response IN A NOERROR,DNS,cdn.content.prod.cms.msn.com.,InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=-EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1,CommonSecurityLog
SourceSystem,TimeGenerated [Pacific Time (US and Canada) Tijuana],DeviceVendor,DeviceProduct,DeviceEventClassID,LogSeverity,DeviceAction,SimplifiedDeviceAction,Computer,CommunicationDirection,DestinationIP,DeviceAddress,DeviceName,Message,Protocol,SourcePort,SourceIP,DeviceVersion,Activity,AdditionalExtensions,ApplicationProtocol,DestinationDnsDomain,SourceHostName,SourceMACAddress,SourceUserName,Type,AdditionalExtensionsParsedNested,cat,code_12,code_53,code_55,code_57,code_61,code_82,InfobloxAnCount,InfobloxArCount,InfobloxB1ConnectionType,InfobloxB1DNSTags,InfobloxB1FeedName,InfobloxB1FeedType,InfobloxB1Network,InfobloxB1OPHIPAddress,InfobloxB1OPHName,InfobloxB1PolicyAction,InfobloxB1PolicyName,InfobloxB1Region,InfobloxB1SrcOSVersion,InfobloxB1ThreatIndicator,InfobloxClientID,InfobloxCSiteId,InfobloxDNSQClass,InfobloxDNSQFlags,InfobloxDNSQType,InfobloxDNSRCode,InfobloxDNSView,InfobloxDomainCat,InfobloxFingerprintPr,InfobloxLeaseOp,InfobloxLeaseUUID,InfobloxLifetime,InfobloxNsCount,InfobloxPolicyID,InfobloxRPZ,InfobloxRPZRule,InfobloxServerID,InfobloxSubnetID,InfobloxThreatConfidence,InfobloxThreatLevel,InfobloxThreatProperty,ThreatLevel_Score,ThreatLevel,ThreatClass,ThreatProperty
OpsManager,"10/26/2021, 2:16:58.298 PM",Infoblox,Data Connector,RPZ-QNAME-REDIRECT,0,REDIRECT,REDIRECT,infoblox-virtual-machine,,,208.50.179.13,Sentinel-Win-Main2,"""rpz QNAME REDIRECT rewrite crl4.digicert.com. [A] via CAT_Streaming Media.crl4.digicert.com.""",,18544,208.50.179.13,2.1.3,RPZ EVENT QNAME REDIRECT,"InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=CAT_Streaming Media.crl4.digicert.com.;InfobloxRPZ=CAT_Streaming Media;InfobloxCSiteId=;InfobloxPolicyID=99986;InfobloxDomainCat=Streaming Media;InfobloxThreatProperty=;InfobloxThreatConfidence=;InfobloxThreatLevel=;InfobloxB1Region=us-west-1;InfobloxB1ConnectionType=remote_client;InfobloxB1OPHName=;InfobloxB1OPHIPAddress=;InfobloxB1Network=BloxOne Endpoint;InfobloxB1SrcOSVersion=Windows 10 Enterprise;InfobloxB1DHCPFingerprint=;InfobloxB1DNSTags=APP_Microsoft 365,APP_Uncategorized,CAT_Content Server,CAT_Software/Hardware,CAT_Streaming Media;InfobloxB1ThreatIndicator=CAT;InfobloxB1FeedName=CAT_Streaming Media;InfobloxB1FeedType=FQDN;InfobloxB1PolicyName=Sentinel-Security-Policy;InfobloxB1PolicyAction=Redirect",DNS,crl4.digicert.com.,,00:50:56:01:13:0f,rdp,CommonSecurityLog,"{""InfobloxDNSQType"":""A"",""InfobloxRPZRule"":""CAT_Streaming Media.crl4.digicert.com."",""InfobloxRPZ"":""CAT_Streaming Media"",""InfobloxPolicyID"":""99986"",""InfobloxDomainCat"":""Streaming Media"",""InfobloxB1Region"":""us-west-1"",""InfobloxB1ConnectionType"":""remote_client"",""InfobloxB1Network"":""BloxOne Endpoint"",""InfobloxB1SrcOSVersion"":""Windows 10 Enterprise"",""InfobloxB1DNSTags"":""APP_Microsoft 365,APP_Uncategorized,CAT_Content Server,CAT_Software/Hardware,CAT_Streaming Media"",""InfobloxB1ThreatIndicator"":""CAT"",""InfobloxB1FeedName"":""CAT_Streaming Media"",""InfobloxB1FeedType"":""FQDN"",""InfobloxB1PolicyName"":""Sentinel-Security-Policy"",""InfobloxB1PolicyAction"":""Redirect""}",,,,,,,,,,remote_client,"APP_Microsoft 365,APP_Uncategorized,CAT_Content Server,CAT_Software/Hardware,CAT_Streaming Media",CAT_Streaming Media,FQDN,BloxOne Endpoint,,,Redirect,Sentinel-Security-Policy,us-west-1,Windows 10 Enterprise,CAT,,,,,A,,,Streaming Media,,,,,,99986,CAT_Streaming Media,CAT_Streaming Media.crl4.digicert.com.,,,,,,,N/A,,
OpsManager,"10/26/2021, 2:52:30.581 PM",Infoblox,Data Connector,RPZ-QNAME-REDIRECT,0,REDIRECT,REDIRECT,infoblox-virtual-machine,,,192.168.1.90,,"""rpz QNAME REDIRECT rewrite ocsp.digicert.com. [AAAA] via CAT_Streaming Media.ocsp.digicert.com.""",,31206,192.168.1.90,2.1.3,RPZ EVENT QNAME REDIRECT,"InfobloxDNSView=default;InfobloxDNSQType=AAAA;InfobloxRPZRule=CAT_Streaming Media.ocsp.digicert.com.;InfobloxRPZ=CAT_Streaming Media;InfobloxCSiteId=261392d3041b4a9b96c47e3c2b8446dd;InfobloxPolicyID=99986;InfobloxDomainCat=Streaming Media;InfobloxThreatProperty=;InfobloxThreatConfidence=;InfobloxThreatLevel=;InfobloxB1Region=us-west-1;InfobloxB1ConnectionType=dfp;InfobloxB1OPHName=Sentinel-Demo-DNS+DFP+DHCP;InfobloxB1OPHIPAddress=192.168.1.201;InfobloxB1Network=Sentinel-Demo-DNS+DFP+DHCP (DFP);InfobloxB1SrcOSVersion=;InfobloxB1DHCPFingerprint=;InfobloxB1DNSTags=APP_Microsoft 365,APP_Uncategorized,CAT_Content Server,CAT_Software/Hardware,CAT_Streaming Media;InfobloxB1ThreatIndicator=CAT;InfobloxB1FeedName=CAT_Streaming Media;InfobloxB1FeedType=FQDN;InfobloxB1PolicyName=Sentinel-Security-Policy;InfobloxB1PolicyAction=Redirect",DNS,ocsp.digicert.com.,,00:50:56:0b:0f:80,,CommonSecurityLog,"{""InfobloxDNSView"":""default"",""InfobloxDNSQType"":""AAAA"",""InfobloxRPZRule"":""CAT_Streaming Media.ocsp.digicert.com."",""InfobloxRPZ"":""CAT_Streaming Media"",""InfobloxCSiteId"":""261392d3041b4a9b96c47e3c2b8446dd"",""InfobloxPolicyID"":""99986"",""InfobloxDomainCat"":""Streaming Media"",""InfobloxB1Region"":""us-west-1"",""InfobloxB1ConnectionType"":""dfp"",""InfobloxB1OPHName"":""Sentinel-Demo-DNS+DFP+DHCP"",""InfobloxB1OPHIPAddress"":""192.168.1.201"",""InfobloxB1Network"":""Sentinel-Demo-DNS+DFP+DHCP (DFP)"",""InfobloxB1DNSTags"":""APP_Microsoft 365,APP_Uncategorized,CAT_Content Server,CAT_Software/Hardware,CAT_Streaming Media"",""InfobloxB1ThreatIndicator"":""CAT"",""InfobloxB1FeedName"":""CAT_Streaming Media"",""InfobloxB1FeedType"":""FQDN"",""InfobloxB1PolicyName"":""Sentinel-Security-Policy"",""InfobloxB1PolicyAction"":""Redirect""}",,,,,,,,,,dfp,"APP_Microsoft 365,APP_Uncategorized,CAT_Content Server,CAT_Software/Hardware,CAT_Streaming Media",CAT_Streaming Media,FQDN,Sentinel-Demo-DNS+DFP+DHCP (DFP),192.168.1.201,Sentinel-Demo-DNS+DFP+DHCP,Redirect,Sentinel-Security-Policy,us-west-1,,CAT,,261392d3041b4a9b96c47e3c2b8446dd,,,AAAA,,default,Streaming Media,,,,,,99986,CAT_Streaming Media,CAT_Streaming Media.ocsp.digicert.com.,,,,,,,N/A,,
OpsManager,"10/26/2021, 2:43:39.969 PM",Infoblox,Data Connector,RPZ-QNAME-REDIRECT,0,REDIRECT,REDIRECT,infoblox-virtual-machine,,,192.168.1.106,,"""rpz QNAME REDIRECT rewrite www.amazon.com. [A] via CAT_Online Shopping.www.amazon.com.""",,7930,192.168.1.106,2.1.3,RPZ EVENT QNAME REDIRECT,"InfobloxDNSView=default;InfobloxDNSQType=A;InfobloxRPZRule=CAT_Online Shopping.www.amazon.com.;InfobloxRPZ=CAT_Online Shopping;InfobloxCSiteId=261392d3041b4a9b96c47e3c2b8446dd;InfobloxPolicyID=99986;InfobloxDomainCat=Online Shopping;InfobloxThreatProperty=;InfobloxThreatConfidence=;InfobloxThreatLevel=;InfobloxB1Region=us-west-1;InfobloxB1ConnectionType=dfp;InfobloxB1OPHName=Sentinel-Demo-DNS+DFP+DHCP;InfobloxB1OPHIPAddress=192.168.1.201;InfobloxB1Network=Sentinel-Demo-DNS+DFP+DHCP (DFP);InfobloxB1SrcOSVersion=;InfobloxB1DHCPFingerprint=;InfobloxB1DNSTags=APP_Uncategorized,CAT_Content Server,CAT_Online Shopping;InfobloxB1ThreatIndicator=CAT;InfobloxB1FeedName=CAT_Online Shopping;InfobloxB1FeedType=FQDN;InfobloxB1PolicyName=Sentinel-Security-Policy;InfobloxB1PolicyAction=Redirect",DNS,www.amazon.com.,,00:50:56:0b:0f:15,,CommonSecurityLog,"{""InfobloxDNSView"":""default"",""InfobloxDNSQType"":""A"",""InfobloxRPZRule"":""CAT_Online Shopping.www.amazon.com."",""InfobloxRPZ"":""CAT_Online Shopping"",""InfobloxCSiteId"":""261392d3041b4a9b96c47e3c2b8446dd"",""InfobloxPolicyID"":""99986"",""InfobloxDomainCat"":""Online Shopping"",""InfobloxB1Region"":""us-west-1"",""InfobloxB1ConnectionType"":""dfp"",""InfobloxB1OPHName"":""Sentinel-Demo-DNS+DFP+DHCP"",""InfobloxB1OPHIPAddress"":""192.168.1.201"",""InfobloxB1Network"":""Sentinel-Demo-DNS+DFP+DHCP (DFP)"",""InfobloxB1DNSTags"":""APP_Uncategorized,CAT_Content Server,CAT_Online Shopping"",""InfobloxB1ThreatIndicator"":""CAT"",""InfobloxB1FeedName"":""CAT_Online Shopping"",""InfobloxB1FeedType"":""FQDN"",""InfobloxB1PolicyName"":""Sentinel-Security-Policy"",""InfobloxB1PolicyAction"":""Redirect""}",,,,,,,,,,dfp,"APP_Uncategorized,CAT_Content Server,CAT_Online Shopping",CAT_Online Shopping,FQDN,Sentinel-Demo-DNS+DFP+DHCP (DFP),192.168.1.201,Sentinel-Demo-DNS+DFP+DHCP,Redirect,Sentinel-Security-Policy,us-west-1,,CAT,,261392d3041b4a9b96c47e3c2b8446dd,,,A,,default,Online Shopping,,,,,,99986,CAT_Online Shopping,CAT_Online Shopping.www.amazon.com.,,,,,,,N/A,,
OpsManager,"10/26/2021, 2:28:39.138 PM",Infoblox,Data Connector,RPZ-QNAME-REDIRECT,0,REDIRECT,REDIRECT,infoblox-virtual-machine,,,192.168.1.106,,"""rpz QNAME REDIRECT rewrite www.amazon.com. [AAAA] via CAT_Online Shopping.www.amazon.com.""",,31846,192.168.1.106,2.1.3,RPZ EVENT QNAME REDIRECT,"InfobloxDNSView=default;InfobloxDNSQType=AAAA;InfobloxRPZRule=CAT_Online Shopping.www.amazon.com.;InfobloxRPZ=CAT_Online Shopping;InfobloxCSiteId=261392d3041b4a9b96c47e3c2b8446dd;InfobloxPolicyID=99986;InfobloxDomainCat=Online Shopping;InfobloxThreatProperty=;InfobloxThreatConfidence=;InfobloxThreatLevel=;InfobloxB1Region=us-west-1;InfobloxB1ConnectionType=dfp;InfobloxB1OPHName=Sentinel-Demo-DNS+DFP+DHCP;InfobloxB1OPHIPAddress=192.168.1.201;InfobloxB1Network=Sentinel-Demo-DNS+DFP+DHCP (DFP);InfobloxB1SrcOSVersion=;InfobloxB1DHCPFingerprint=;InfobloxB1DNSTags=APP_GoToMyPC,APP_Uncategorized,CAT_Content Server,CAT_Online Shopping;InfobloxB1ThreatIndicator=CAT;InfobloxB1FeedName=CAT_Online Shopping;InfobloxB1FeedType=FQDN;InfobloxB1PolicyName=Sentinel-Security-Policy;InfobloxB1PolicyAction=Redirect",DNS,www.amazon.com.,,00:50:56:0b:0f:15,,CommonSecurityLog,"{""InfobloxDNSView"":""default"",""InfobloxDNSQType"":""AAAA"",""InfobloxRPZRule"":""CAT_Online Shopping.www.amazon.com."",""InfobloxRPZ"":""CAT_Online Shopping"",""InfobloxCSiteId"":""261392d3041b4a9b96c47e3c2b8446dd"",""InfobloxPolicyID"":""99986"",""InfobloxDomainCat"":""Online Shopping"",""InfobloxB1Region"":""us-west-1"",""InfobloxB1ConnectionType"":""dfp"",""InfobloxB1OPHName"":""Sentinel-Demo-DNS+DFP+DHCP"",""InfobloxB1OPHIPAddress"":""192.168.1.201"",""InfobloxB1Network"":""Sentinel-Demo-DNS+DFP+DHCP (DFP)"",""InfobloxB1DNSTags"":""APP_GoToMyPC,APP_Uncategorized,CAT_Content Server,CAT_Online Shopping"",""InfobloxB1ThreatIndicator"":""CAT"",""InfobloxB1FeedName"":""CAT_Online Shopping"",""InfobloxB1FeedType"":""FQDN"",""InfobloxB1PolicyName"":""Sentinel-Security-Policy"",""InfobloxB1PolicyAction"":""Redirect""}",,,,,,,,,,dfp,"APP_GoToMyPC,APP_Uncategorized,CAT_Content Server,CAT_Online Shopping",CAT_Online Shopping,FQDN,Sentinel-Demo-DNS+DFP+DHCP (DFP),192.168.1.201,Sentinel-Demo-DNS+DFP+DHCP,Redirect,Sentinel-Security-Policy,us-west-1,,CAT,,261392d3041b4a9b96c47e3c2b8446dd,,,AAAA,,default,Online Shopping,,,,,,99986,CAT_Online Shopping,CAT_Online Shopping.www.amazon.com.,,,,,,,N/A,,
OpsManager,"10/26/2021, 2:28:42.405 PM",Infoblox,Data Connector,RPZ-QNAME-REDIRECT,0,REDIRECT,REDIRECT,infoblox-virtual-machine,,,192.168.1.106,,"""rpz QNAME REDIRECT rewrite www.amazon.com. [A] via CAT_Online Shopping.www.amazon.com.""",,60808,192.168.1.106,2.1.3,RPZ EVENT QNAME REDIRECT,"InfobloxDNSView=default;InfobloxDNSQType=A;InfobloxRPZRule=CAT_Online Shopping.www.amazon.com.;InfobloxRPZ=CAT_Online Shopping;InfobloxCSiteId=261392d3041b4a9b96c47e3c2b8446dd;InfobloxPolicyID=99986;InfobloxDomainCat=Online Shopping;InfobloxThreatProperty=;InfobloxThreatConfidence=;InfobloxThreatLevel=;InfobloxB1Region=us-west-1;InfobloxB1ConnectionType=dfp;InfobloxB1OPHName=Sentinel-Demo-DNS+DFP+DHCP;InfobloxB1OPHIPAddress=192.168.1.201;InfobloxB1Network=Sentinel-Demo-DNS+DFP+DHCP (DFP);InfobloxB1SrcOSVersion=;InfobloxB1DHCPFingerprint=;InfobloxB1DNSTags=APP_Uncategorized,CAT_Content Server,CAT_Online Shopping;InfobloxB1ThreatIndicator=CAT;InfobloxB1FeedName=CAT_Online Shopping;InfobloxB1FeedType=FQDN;InfobloxB1PolicyName=Sentinel-Security-Policy;InfobloxB1PolicyAction=Redirect",DNS,www.amazon.com.,,00:50:56:0b:0f:15,,CommonSecurityLog,"{""InfobloxDNSView"":""default"",""InfobloxDNSQType"":""A"",""InfobloxRPZRule"":""CAT_Online Shopping.www.amazon.com."",""InfobloxRPZ"":""CAT_Online Shopping"",""InfobloxCSiteId"":""261392d3041b4a9b96c47e3c2b8446dd"",""InfobloxPolicyID"":""99986"",""InfobloxDomainCat"":""Online Shopping"",""InfobloxB1Region"":""us-west-1"",""InfobloxB1ConnectionType"":""dfp"",""InfobloxB1OPHName"":""Sentinel-Demo-DNS+DFP+DHCP"",""InfobloxB1OPHIPAddress"":""192.168.1.201"",""InfobloxB1Network"":""Sentinel-Demo-DNS+DFP+DHCP (DFP)"",""InfobloxB1DNSTags"":""APP_Uncategorized,CAT_Content Server,CAT_Online Shopping"",""InfobloxB1ThreatIndicator"":""CAT"",""InfobloxB1FeedName"":""CAT_Online Shopping"",""InfobloxB1FeedType"":""FQDN"",""InfobloxB1PolicyName"":""Sentinel-Security-Policy"",""InfobloxB1PolicyAction"":""Redirect""}",,,,,,,,,,dfp,"APP_Uncategorized,CAT_Content Server,CAT_Online Shopping",CAT_Online Shopping,FQDN,Sentinel-Demo-DNS+DFP+DHCP (DFP),192.168.1.201,Sentinel-Demo-DNS+DFP+DHCP,Redirect,Sentinel-Security-Policy,us-west-1,,CAT,,261392d3041b4a9b96c47e3c2b8446dd,,,A,,default,Online Shopping,,,,,,99986,CAT_Online Shopping,CAT_Online Shopping.www.amazon.com.,,,,,,,N/A,,
OpsManager,"10/26/2021, 2:08:22.872 PM",Infoblox,Data Connector,RPZ-QNAME-REDIRECT,0,REDIRECT,REDIRECT,infoblox-virtual-machine,,,208.50.179.13,Sentinel-Win-Main2,"""rpz QNAME REDIRECT rewrite photograph.myfw.us. [A] via CAT_Malicious Sites.photograph.myfw.us.""",,42222,208.50.179.13,2.1.3,RPZ EVENT QNAME REDIRECT,"InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=CAT_Malicious Sites.photograph.myfw.us.;InfobloxRPZ=CAT_Malicious Sites;InfobloxCSiteId=;InfobloxPolicyID=99986;InfobloxDomainCat=Malicious Sites;InfobloxThreatProperty=;InfobloxThreatConfidence=;InfobloxThreatLevel=;InfobloxB1Region=us-west-1;InfobloxB1ConnectionType=remote_client;InfobloxB1OPHName=;InfobloxB1OPHIPAddress=;InfobloxB1Network=BloxOne Endpoint;InfobloxB1SrcOSVersion=Windows 10 Enterprise;InfobloxB1DHCPFingerprint=;InfobloxB1DNSTags=APP_Uncategorized,CAT_Malicious Sites,etiqrisk-ip;InfobloxB1ThreatIndicator=CAT;InfobloxB1FeedName=CAT_Malicious Sites;InfobloxB1FeedType=FQDN;InfobloxB1PolicyName=Sentinel-Security-Policy;InfobloxB1PolicyAction=Redirect",DNS,photograph.myfw.us.,,00:50:56:01:13:0f,rdp,CommonSecurityLog,"{""InfobloxDNSQType"":""A"",""InfobloxRPZRule"":""CAT_Malicious Sites.photograph.myfw.us."",""InfobloxRPZ"":""CAT_Malicious Sites"",""InfobloxPolicyID"":""99986"",""InfobloxDomainCat"":""Malicious Sites"",""InfobloxB1Region"":""us-west-1"",""InfobloxB1ConnectionType"":""remote_client"",""InfobloxB1Network"":""BloxOne Endpoint"",""InfobloxB1SrcOSVersion"":""Windows 10 Enterprise"",""InfobloxB1DNSTags"":""APP_Uncategorized,CAT_Malicious Sites,etiqrisk-ip"",""InfobloxB1ThreatIndicator"":""CAT"",""InfobloxB1FeedName"":""CAT_Malicious Sites"",""InfobloxB1FeedType"":""FQDN"",""InfobloxB1PolicyName"":""Sentinel-Security-Policy"",""InfobloxB1PolicyAction"":""Redirect""}",,,,,,,,,,remote_client,"APP_Uncategorized,CAT_Malicious Sites,etiqrisk-ip",CAT_Malicious Sites,FQDN,BloxOne Endpoint,,,Redirect,Sentinel-Security-Policy,us-west-1,Windows 10 Enterprise,CAT,,,,,A,,,Malicious Sites,,,,,,99986,CAT_Malicious Sites,CAT_Malicious Sites.photograph.myfw.us.,,,,,,,N/A,,
OpsManager,"10/26/2021, 2:43:40.097 PM",Infoblox,Data Connector,RPZ-QNAME-REDIRECT,0,REDIRECT,REDIRECT,infoblox-virtual-machine,,,192.168.1.106,,"""rpz QNAME REDIRECT rewrite www.ebay.com. [AAAA] via CAT_Auctions/Classifieds.www.ebay.com.""",,44483,192.168.1.106,2.1.3,RPZ EVENT QNAME REDIRECT,"InfobloxDNSView=default;InfobloxDNSQType=AAAA;InfobloxRPZRule=CAT_Auctions/Classifieds.www.ebay.com.;InfobloxRPZ=CAT_Auctions/Classifieds;InfobloxCSiteId=261392d3041b4a9b96c47e3c2b8446dd;InfobloxPolicyID=99986;InfobloxDomainCat=Auctions/Classifieds;InfobloxThreatProperty=;InfobloxThreatConfidence=;InfobloxThreatLevel=;InfobloxB1Region=us-west-1;InfobloxB1ConnectionType=dfp;InfobloxB1OPHName=Sentinel-Demo-DNS+DFP+DHCP;InfobloxB1OPHIPAddress=192.168.1.201;InfobloxB1Network=Sentinel-Demo-DNS+DFP+DHCP (DFP);InfobloxB1SrcOSVersion=;InfobloxB1DHCPFingerprint=;InfobloxB1DNSTags=APP_Uncategorized,CAT_Auctions/Classifieds,CAT_Content Server;InfobloxB1ThreatIndicator=CAT;InfobloxB1FeedName=CAT_Auctions/Classifieds;InfobloxB1FeedType=FQDN;InfobloxB1PolicyName=Sentinel-Security-Policy;InfobloxB1PolicyAction=Redirect",DNS,www.ebay.com.,,00:50:56:0b:0f:15,,CommonSecurityLog,"{""InfobloxDNSView"":""default"",""InfobloxDNSQType"":""AAAA"",""InfobloxRPZRule"":""CAT_Auctions/Classifieds.www.ebay.com."",""InfobloxRPZ"":""CAT_Auctions/Classifieds"",""InfobloxCSiteId"":""261392d3041b4a9b96c47e3c2b8446dd"",""InfobloxPolicyID"":""99986"",""InfobloxDomainCat"":""Auctions/Classifieds"",""InfobloxB1Region"":""us-west-1"",""InfobloxB1ConnectionType"":""dfp"",""InfobloxB1OPHName"":""Sentinel-Demo-DNS+DFP+DHCP"",""InfobloxB1OPHIPAddress"":""192.168.1.201"",""InfobloxB1Network"":""Sentinel-Demo-DNS+DFP+DHCP (DFP)"",""InfobloxB1DNSTags"":""APP_Uncategorized,CAT_Auctions/Classifieds,CAT_Content Server"",""InfobloxB1ThreatIndicator"":""CAT"",""InfobloxB1FeedName"":""CAT_Auctions/Classifieds"",""InfobloxB1FeedType"":""FQDN"",""InfobloxB1PolicyName"":""Sentinel-Security-Policy"",""InfobloxB1PolicyAction"":""Redirect""}",,,,,,,,,,dfp,"APP_Uncategorized,CAT_Auctions/Classifieds,CAT_Content Server",CAT_Auctions/Classifieds,FQDN,Sentinel-Demo-DNS+DFP+DHCP (DFP),192.168.1.201,Sentinel-Demo-DNS+DFP+DHCP,Redirect,Sentinel-Security-Policy,us-west-1,,CAT,,261392d3041b4a9b96c47e3c2b8446dd,,,AAAA,,default,Auctions/Classifieds,,,,,,99986,CAT_Auctions/Classifieds,CAT_Auctions/Classifieds.www.ebay.com.,,,,,,,N/A,,
OpsManager,"10/26/2021, 2:28:40.171 PM",Infoblox,Data Connector,RPZ-QNAME-REDIRECT,0,REDIRECT,REDIRECT,infoblox-virtual-machine,,,192.168.1.106,,"""rpz QNAME REDIRECT rewrite www.ebay.com. [AAAA] via CAT_Auctions/Classifieds.www.ebay.com.""",,41235,192.168.1.106,2.1.3,RPZ EVENT QNAME REDIRECT,"InfobloxDNSView=default;InfobloxDNSQType=AAAA;InfobloxRPZRule=CAT_Auctions/Classifieds.www.ebay.com.;InfobloxRPZ=CAT_Auctions/Classifieds;InfobloxCSiteId=261392d3041b4a9b96c47e3c2b8446dd;InfobloxPolicyID=99986;InfobloxDomainCat=Auctions/Classifieds;InfobloxThreatProperty=;InfobloxThreatConfidence=;InfobloxThreatLevel=;InfobloxB1Region=us-west-1;InfobloxB1ConnectionType=dfp;InfobloxB1OPHName=Sentinel-Demo-DNS+DFP+DHCP;InfobloxB1OPHIPAddress=192.168.1.201;InfobloxB1Network=Sentinel-Demo-DNS+DFP+DHCP (DFP);InfobloxB1SrcOSVersion=;InfobloxB1DHCPFingerprint=;InfobloxB1DNSTags=APP_Uncategorized,CAT_Auctions/Classifieds,CAT_Content Server;InfobloxB1ThreatIndicator=CAT;InfobloxB1FeedName=CAT_Auctions/Classifieds;InfobloxB1FeedType=FQDN;InfobloxB1PolicyName=Sentinel-Security-Policy;InfobloxB1PolicyAction=Redirect",DNS,www.ebay.com.,,00:50:56:0b:0f:15,,CommonSecurityLog,"{""InfobloxDNSView"":""default"",""InfobloxDNSQType"":""AAAA"",""InfobloxRPZRule"":""CAT_Auctions/Classifieds.www.ebay.com."",""InfobloxRPZ"":""CAT_Auctions/Classifieds"",""InfobloxCSiteId"":""261392d3041b4a9b96c47e3c2b8446dd"",""InfobloxPolicyID"":""99986"",""InfobloxDomainCat"":""Auctions/Classifieds"",""InfobloxB1Region"":""us-west-1"",""InfobloxB1ConnectionType"":""dfp"",""InfobloxB1OPHName"":""Sentinel-Demo-DNS+DFP+DHCP"",""InfobloxB1OPHIPAddress"":""192.168.1.201"",""InfobloxB1Network"":""Sentinel-Demo-DNS+DFP+DHCP (DFP)"",""InfobloxB1DNSTags"":""APP_Uncategorized,CAT_Auctions/Classifieds,CAT_Content Server"",""InfobloxB1ThreatIndicator"":""CAT"",""InfobloxB1FeedName"":""CAT_Auctions/Classifieds"",""InfobloxB1FeedType"":""FQDN"",""InfobloxB1PolicyName"":""Sentinel-Security-Policy"",""InfobloxB1PolicyAction"":""Redirect""}",,,,,,,,,,dfp,"APP_Uncategorized,CAT_Auctions/Classifieds,CAT_Content Server",CAT_Auctions/Classifieds,FQDN,Sentinel-Demo-DNS+DFP+DHCP (DFP),192.168.1.201,Sentinel-Demo-DNS+DFP+DHCP,Redirect,Sentinel-Security-Policy,us-west-1,,CAT,,261392d3041b4a9b96c47e3c2b8446dd,,,AAAA,,default,Auctions/Classifieds,,,,,,99986,CAT_Auctions/Classifieds,CAT_Auctions/Classifieds.www.ebay.com.,,,,,,,N/A,,
OpsManager,"10/26/2021, 2:43:24.870 PM",Infoblox,Data Connector,RPZ-QNAME-REDIRECT,0,REDIRECT,REDIRECT,infoblox-virtual-machine,,,208.50.179.13,Sentinel-Win-Main2,"""rpz QNAME REDIRECT rewrite salesforce.com. [A] via APP_Salesforce.salesforce.com.""",,6155,208.50.179.13,2.1.3,RPZ EVENT QNAME REDIRECT,"InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=APP_Salesforce.salesforce.com.;InfobloxRPZ=APP_Salesforce;InfobloxCSiteId=;InfobloxPolicyID=99986;InfobloxDomainCat=Salesforce;InfobloxThreatProperty=;InfobloxThreatConfidence=;InfobloxThreatLevel=;InfobloxB1Region=us-west-1;InfobloxB1ConnectionType=remote_client;InfobloxB1OPHName=;InfobloxB1OPHIPAddress=;InfobloxB1Network=BloxOne Endpoint;InfobloxB1SrcOSVersion=Windows 10 Enterprise;InfobloxB1DHCPFingerprint=;InfobloxB1DNSTags=APP_Salesforce,APP_Uncategorized,CAT_Business,CAT_Software/Hardware;InfobloxB1ThreatIndicator=APP;InfobloxB1FeedName=APP_Salesforce;InfobloxB1FeedType=FQDN;InfobloxB1PolicyName=Sentinel-Security-Policy;InfobloxB1PolicyAction=Redirect",DNS,salesforce.com.,,00:50:56:01:13:0f,rdp,CommonSecurityLog,"{""InfobloxDNSQType"":""A"",""InfobloxRPZRule"":""APP_Salesforce.salesforce.com."",""InfobloxRPZ"":""APP_Salesforce"",""InfobloxPolicyID"":""99986"",""InfobloxDomainCat"":""Salesforce"",""InfobloxB1Region"":""us-west-1"",""InfobloxB1ConnectionType"":""remote_client"",""InfobloxB1Network"":""BloxOne Endpoint"",""InfobloxB1SrcOSVersion"":""Windows 10 Enterprise"",""InfobloxB1DNSTags"":""APP_Salesforce,APP_Uncategorized,CAT_Business,CAT_Software/Hardware"",""InfobloxB1ThreatIndicator"":""APP"",""InfobloxB1FeedName"":""APP_Salesforce"",""InfobloxB1FeedType"":""FQDN"",""InfobloxB1PolicyName"":""Sentinel-Security-Policy"",""InfobloxB1PolicyAction"":""Redirect""}",,,,,,,,,,remote_client,"APP_Salesforce,APP_Uncategorized,CAT_Business,CAT_Software/Hardware",APP_Salesforce,FQDN,BloxOne Endpoint,,,Redirect,Sentinel-Security-Policy,us-west-1,Windows 10 Enterprise,APP,,,,,A,,,Salesforce,,,,,,99986,APP_Salesforce,APP_Salesforce.salesforce.com.,,,,,,,N/A,,
OpsManager,"10/26/2021, 2:43:32.735 PM",Infoblox,Data Connector,RPZ-QNAME-REDIRECT,0,REDIRECT,REDIRECT,infoblox-virtual-machine,,,208.50.179.13,Sentinel-Win-Main2,"""rpz QNAME REDIRECT rewrite github.com. [A] via APP_GitHub.github.com.""",,42085,208.50.179.13,2.1.3,RPZ EVENT QNAME REDIRECT,"InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=APP_GitHub.github.com.;InfobloxRPZ=APP_GitHub;InfobloxCSiteId=;InfobloxPolicyID=99986;InfobloxDomainCat=GitHub;InfobloxThreatProperty=;InfobloxThreatConfidence=;InfobloxThreatLevel=;InfobloxB1Region=us-west-1;InfobloxB1ConnectionType=remote_client;InfobloxB1OPHName=;InfobloxB1OPHIPAddress=;InfobloxB1Network=BloxOne Endpoint;InfobloxB1SrcOSVersion=Windows 10 Enterprise;InfobloxB1DHCPFingerprint=;InfobloxB1DNSTags=APP_GitHub,APP_Uncategorized,CAT_Technical/Business Forums;InfobloxB1ThreatIndicator=APP;InfobloxB1FeedName=APP_GitHub;InfobloxB1FeedType=FQDN;InfobloxB1PolicyName=Sentinel-Security-Policy;InfobloxB1PolicyAction=Redirect",DNS,github.com.,,00:50:56:01:13:0f,rdp,CommonSecurityLog,"{""InfobloxDNSQType"":""A"",""InfobloxRPZRule"":""APP_GitHub.github.com."",""InfobloxRPZ"":""APP_GitHub"",""InfobloxPolicyID"":""99986"",""InfobloxDomainCat"":""GitHub"",""InfobloxB1Region"":""us-west-1"",""InfobloxB1ConnectionType"":""remote_client"",""InfobloxB1Network"":""BloxOne Endpoint"",""InfobloxB1SrcOSVersion"":""Windows 10 Enterprise"",""InfobloxB1DNSTags"":""APP_GitHub,APP_Uncategorized,CAT_Technical/Business Forums"",""InfobloxB1ThreatIndicator"":""APP"",""InfobloxB1FeedName"":""APP_GitHub"",""InfobloxB1FeedType"":""FQDN"",""InfobloxB1PolicyName"":""Sentinel-Security-Policy"",""InfobloxB1PolicyAction"":""Redirect""}",,,,,,,,,,remote_client,"APP_GitHub,APP_Uncategorized,CAT_Technical/Business Forums",APP_GitHub,FQDN,BloxOne Endpoint,,,Redirect,Sentinel-Security-Policy,us-west-1,Windows 10 Enterprise,APP,,,,,A,,,GitHub,,,,,,99986,APP_GitHub,APP_GitHub.github.com.,,,,,,,N/A,,
OpsManager,"10/26/2021, 2:43:40.097 PM",Infoblox,Data Connector,RPZ-QNAME-REDIRECT,0,REDIRECT,REDIRECT,infoblox-virtual-machine,,,208.50.179.13,Sentinel-Win-Main2,"""rpz QNAME REDIRECT rewrite dropbox.com. [A] via APP_Dropbox.dropbox.com.""",,43754,208.50.179.13,2.1.3,RPZ EVENT QNAME REDIRECT,"InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=APP_Dropbox.dropbox.com.;InfobloxRPZ=APP_Dropbox;InfobloxCSiteId=;InfobloxPolicyID=99986;InfobloxDomainCat=Dropbox;InfobloxThreatProperty=;InfobloxThreatConfidence=;InfobloxThreatLevel=;InfobloxB1Region=us-west-1;InfobloxB1ConnectionType=remote_client;InfobloxB1OPHName=;InfobloxB1OPHIPAddress=;InfobloxB1Network=BloxOne Endpoint;InfobloxB1SrcOSVersion=Windows 10 Enterprise;InfobloxB1DHCPFingerprint=;InfobloxB1DNSTags=APP_Dropbox,APP_Uncategorized,CAT_Personal Network Storage;InfobloxB1ThreatIndicator=APP;InfobloxB1FeedName=APP_Dropbox;InfobloxB1FeedType=FQDN;InfobloxB1PolicyName=Sentinel-Security-Policy;InfobloxB1PolicyAction=Redirect",DNS,dropbox.com.,,00:50:56:01:13:0f,rdp,CommonSecurityLog,"{""InfobloxDNSQType"":""A"",""InfobloxRPZRule"":""APP_Dropbox.dropbox.com."",""InfobloxRPZ"":""APP_Dropbox"",""InfobloxPolicyID"":""99986"",""InfobloxDomainCat"":""Dropbox"",""InfobloxB1Region"":""us-west-1"",""InfobloxB1ConnectionType"":""remote_client"",""InfobloxB1Network"":""BloxOne Endpoint"",""InfobloxB1SrcOSVersion"":""Windows 10 Enterprise"",""InfobloxB1DNSTags"":""APP_Dropbox,APP_Uncategorized,CAT_Personal Network Storage"",""InfobloxB1ThreatIndicator"":""APP"",""InfobloxB1FeedName"":""APP_Dropbox"",""InfobloxB1FeedType"":""FQDN"",""InfobloxB1PolicyName"":""Sentinel-Security-Policy"",""InfobloxB1PolicyAction"":""Redirect""}",,,,,,,,,,remote_client,"APP_Dropbox,APP_Uncategorized,CAT_Personal Network Storage",APP_Dropbox,FQDN,BloxOne Endpoint,,,Redirect,Sentinel-Security-Policy,us-west-1,Windows 10 Enterprise,APP,,,,,A,,,Dropbox,,,,,,99986,APP_Dropbox,APP_Dropbox.dropbox.com.,,,,,,,N/A,,
OpsManager,"10/26/2021, 2:43:32.735 PM",Infoblox,Data Connector,RPZ-QNAME-REDIRECT,0,REDIRECT,REDIRECT,infoblox-virtual-machine,,,208.50.179.13,Sentinel-Win-Main2,"""rpz QNAME REDIRECT rewrite www.gstatic.com. [A] via APP_Dropbox.www.gstatic.com.""",,42085,208.50.179.13,2.1.3,RPZ EVENT QNAME REDIRECT,"InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=APP_Dropbox.www.gstatic.com.;InfobloxRPZ=APP_Dropbox;InfobloxCSiteId=;InfobloxPolicyID=99986;InfobloxDomainCat=Dropbox;InfobloxThreatProperty=;InfobloxThreatConfidence=;InfobloxThreatLevel=;InfobloxB1Region=us-west-1;InfobloxB1ConnectionType=remote_client;InfobloxB1OPHName=;InfobloxB1OPHIPAddress=;InfobloxB1Network=BloxOne Endpoint;InfobloxB1SrcOSVersion=Windows 10 Enterprise;InfobloxB1DHCPFingerprint=;InfobloxB1DNSTags=APP_Box,APP_Dropbox,APP_Google Drive,APP_Google Gmail,APP_Google Jamboard,APP_Google Meet,APP_Google Sites,APP_Google Voice,APP_Uncategorized,CAT_Content Server,CAT_Internet Services;InfobloxB1ThreatIndicator=APP;InfobloxB1FeedName=APP_Dropbox;InfobloxB1FeedType=FQDN;InfobloxB1PolicyName=Sentinel-Security-Policy;InfobloxB1PolicyAction=Redirect",DNS,www.gstatic.com.,,00:50:56:01:13:0f,rdp,CommonSecurityLog,"{""InfobloxDNSQType"":""A"",""InfobloxRPZRule"":""APP_Dropbox.www.gstatic.com."",""InfobloxRPZ"":""APP_Dropbox"",""InfobloxPolicyID"":""99986"",""InfobloxDomainCat"":""Dropbox"",""InfobloxB1Region"":""us-west-1"",""InfobloxB1ConnectionType"":""remote_client"",""InfobloxB1Network"":""BloxOne Endpoint"",""InfobloxB1SrcOSVersion"":""Windows 10 Enterprise"",""InfobloxB1DNSTags"":""APP_Box,APP_Dropbox,APP_Google Drive,APP_Google Gmail,APP_Google Jamboard,APP_Google Meet,APP_Google Sites,APP_Google Voice,APP_Uncategorized,CAT_Content Server,CAT_Internet Services"",""InfobloxB1ThreatIndicator"":""APP"",""InfobloxB1FeedName"":""APP_Dropbox"",""InfobloxB1FeedType"":""FQDN"",""InfobloxB1PolicyName"":""Sentinel-Security-Policy"",""InfobloxB1PolicyAction"":""Redirect""}",,,,,,,,,,remote_client,"APP_Box,APP_Dropbox,APP_Google Drive,APP_Google Gmail,APP_Google Jamboard,APP_Google Meet,APP_Google Sites,APP_Google Voice,APP_Uncategorized,CAT_Content Server,CAT_Internet Services",APP_Dropbox,FQDN,BloxOne Endpoint,,,Redirect,Sentinel-Security-Policy,us-west-1,Windows 10 Enterprise,APP,,,,,A,,,Dropbox,,,,,,99986,APP_Dropbox,APP_Dropbox.www.gstatic.com.,,,,,,,N/A,,
OpsManager,"10/26/2021, 2:43:40.265 PM",Infoblox,Data Connector,RPZ-QNAME-REDIRECT,0,REDIRECT,REDIRECT,infoblox-virtual-machine,,,208.50.179.13,Sentinel-Win-Main2,"""rpz QNAME REDIRECT rewrite dropbox.com. [A] via APP_Dropbox.dropbox.com.""",,41838,208.50.179.13,2.1.3,RPZ EVENT QNAME REDIRECT,"InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=APP_Dropbox.dropbox.com.;InfobloxRPZ=APP_Dropbox;InfobloxCSiteId=;InfobloxPolicyID=99986;InfobloxDomainCat=Dropbox;InfobloxThreatProperty=;InfobloxThreatConfidence=;InfobloxThreatLevel=;InfobloxB1Region=us-west-1;InfobloxB1ConnectionType=remote_client;InfobloxB1OPHName=;InfobloxB1OPHIPAddress=;InfobloxB1Network=BloxOne Endpoint;InfobloxB1SrcOSVersion=Windows 10 Enterprise;InfobloxB1DHCPFingerprint=;InfobloxB1DNSTags=APP_Dropbox,APP_Uncategorized,CAT_Personal Network Storage;InfobloxB1ThreatIndicator=APP;InfobloxB1FeedName=APP_Dropbox;InfobloxB1FeedType=FQDN;InfobloxB1PolicyName=Sentinel-Security-Policy;InfobloxB1PolicyAction=Redirect",DNS,dropbox.com.,,00:50:56:01:13:0f,rdp,CommonSecurityLog,"{""InfobloxDNSQType"":""A"",""InfobloxRPZRule"":""APP_Dropbox.dropbox.com."",""InfobloxRPZ"":""APP_Dropbox"",""InfobloxPolicyID"":""99986"",""InfobloxDomainCat"":""Dropbox"",""InfobloxB1Region"":""us-west-1"",""InfobloxB1ConnectionType"":""remote_client"",""InfobloxB1Network"":""BloxOne Endpoint"",""InfobloxB1SrcOSVersion"":""Windows 10 Enterprise"",""InfobloxB1DNSTags"":""APP_Dropbox,APP_Uncategorized,CAT_Personal Network Storage"",""InfobloxB1ThreatIndicator"":""APP"",""InfobloxB1FeedName"":""APP_Dropbox"",""InfobloxB1FeedType"":""FQDN"",""InfobloxB1PolicyName"":""Sentinel-Security-Policy"",""InfobloxB1PolicyAction"":""Redirect""}",,,,,,,,,,remote_client,"APP_Dropbox,APP_Uncategorized,CAT_Personal Network Storage",APP_Dropbox,FQDN,BloxOne Endpoint,,,Redirect,Sentinel-Security-Policy,us-west-1,Windows 10 Enterprise,APP,,,,,A,,,Dropbox,,,,,,99986,APP_Dropbox,APP_Dropbox.dropbox.com.,,,,,,,N/A,,
OpsManager,"10/26/2021, 2:52:30.580 PM",Infoblox,Data Connector,RPZ-QNAME-REDIRECT,0,REDIRECT,REDIRECT,infoblox-virtual-machine,,,,,"""rpz QNAME REDIRECT rewrite ocsp.digicert.com. [A] via CAT_Streaming Media.ocsp.digicert.com.""",,31206,192.168.1.90,2.1.3,RPZ EVENT QNAME REDIRECT,InfobloxDNSView=default;InfobloxDNSQType=A;InfobloxRPZRule=CAT_Streaming Media.ocsp.digicert.com.;InfobloxRPZ=CAT_Streaming Media;InfobloxCSiteId=261392d3041b4a9b96c47e3c2b8446dd;InfobloxPolicyID=99986;InfobloxDomainCat=Streaming Media;InfobloxThreatProperty=;InfobloxThreatConfidence=;InfobloxThreatLevel=;InfobloxB1Region=us-west-1;InfobloxB1ConnectionType=dfp;InfobloxB1OPHName=Sentinel-Demo-DNS+DFP+DHCP;InfobloxB1OPHIPAddress=192.168.1.201;InfobloxB1Network=Sentinel-Demo-DNS+DFP+DHCP (DFP),DNS,ocsp.digicert.com.,,00:50:56:0b:0f:80, ],CommonSecurityLog,"{""InfobloxDNSView"":""default"",""InfobloxDNSQType"":""A"",""InfobloxRPZRule"":""CAT_Streaming Media.ocsp.digicert.com."",""InfobloxRPZ"":""CAT_Streaming Media"",""InfobloxCSiteId"":""261392d3041b4a9b96c47e3c2b8446dd"",""InfobloxPolicyID"":""99986"",""InfobloxDomainCat"":""Streaming Media"",""InfobloxB1Region"":""us-west-1"",""InfobloxB1ConnectionType"":""dfp"",""InfobloxB1OPHName"":""Sentinel-Demo-DNS+DFP+DHCP"",""InfobloxB1OPHIPAddress"":""192.168.1.201"",""InfobloxB1Network"":""Sentinel-Demo-DNS+DFP+DHCP (DFP)""}",,,,,,,,,,dfp,,,,Sentinel-Demo-DNS+DFP+DHCP (DFP),192.168.1.201,Sentinel-Demo-DNS+DFP+DHCP,,,us-west-1,,,,261392d3041b4a9b96c47e3c2b8446dd,,,A,,default,Streaming Media,,,,,,99986,CAT_Streaming Media,CAT_Streaming Media.ocsp.digicert.com.,,,,,,,N/A,,
OpsManager,"10/26/2021, 2:07:47.257 PM",Infoblox,Data Connector,RPZ-QNAME-NXDOMAIN,8,NXDOMAIN,NXDOMAIN,infoblox-virtual-machine,,,208.50.179.13,Sentinel-Win-Main2,"""rpz QNAME NXDOMAIN rewrite nxead.itemdb.com. [A] via ext-base-antimalware.nxead.itemdb.com.""",,37404,208.50.179.13,2.1.3,RPZ EVENT QNAME NXDOMAIN,"InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=ext-base-antimalware.nxead.itemdb.com.;InfobloxRPZ=ext-base-antimalware;InfobloxCSiteId=;InfobloxPolicyID=99986;InfobloxDomainCat=;InfobloxThreatProperty=APT_MalwareC2;InfobloxThreatConfidence=80;InfobloxThreatLevel=80;InfobloxB1Region=us-west-1;InfobloxB1ConnectionType=remote_client;InfobloxB1OPHName=;InfobloxB1OPHIPAddress=;InfobloxB1Network=BloxOne Endpoint;InfobloxB1SrcOSVersion=Windows 10 Enterprise;InfobloxB1DHCPFingerprint=;InfobloxB1DNSTags=APP_Uncategorized,CAT_Malicious Sites,CAT_PUPs (potentially unwanted programs),CAT_Phishing,bogon,ext-base-antimalware;InfobloxB1ThreatIndicator=nxead.itemdb.com;InfobloxB1FeedName=Ext_Base_AntiMalware;InfobloxB1FeedType=FQDN;InfobloxB1PolicyName=Sentinel-Security-Policy;InfobloxB1PolicyAction=Block",DNS,nxead.itemdb.com.,,00:50:56:01:13:0f,rdp,CommonSecurityLog,"{""InfobloxDNSQType"":""A"",""InfobloxRPZRule"":""ext-base-antimalware.nxead.itemdb.com."",""InfobloxRPZ"":""ext-base-antimalware"",""InfobloxPolicyID"":""99986"",""InfobloxThreatProperty"":""APT_MalwareC2"",""InfobloxThreatConfidence"":""80"",""InfobloxThreatLevel"":""80"",""InfobloxB1Region"":""us-west-1"",""InfobloxB1ConnectionType"":""remote_client"",""InfobloxB1Network"":""BloxOne Endpoint"",""InfobloxB1SrcOSVersion"":""Windows 10 Enterprise"",""InfobloxB1DNSTags"":""APP_Uncategorized,CAT_Malicious Sites,CAT_PUPs (potentially unwanted programs),CAT_Phishing,bogon,ext-base-antimalware"",""InfobloxB1ThreatIndicator"":""nxead.itemdb.com"",""InfobloxB1FeedName"":""Ext_Base_AntiMalware"",""InfobloxB1FeedType"":""FQDN"",""InfobloxB1PolicyName"":""Sentinel-Security-Policy"",""InfobloxB1PolicyAction"":""Block""}",,,,,,,,,,remote_client,"APP_Uncategorized,CAT_Malicious Sites,CAT_PUPs (potentially unwanted programs),CAT_Phishing,bogon,ext-base-antimalware",Ext_Base_AntiMalware,FQDN,BloxOne Endpoint,,,Block,Sentinel-Security-Policy,us-west-1,Windows 10 Enterprise,nxead.itemdb.com,,,,,A,,,,,,,,,99986,ext-base-antimalware,ext-base-antimalware.nxead.itemdb.com.,,,80,80,APT_MalwareC2,80,High,APT,MalwareC2
OpsManager,"10/26/2021, 2:08:16.819 PM",Infoblox,Data Connector,RPZ-QNAME-NXDOMAIN,8,NXDOMAIN,NXDOMAIN,infoblox-virtual-machine,,,208.50.179.13,Sentinel-Win-Main2,"""rpz QNAME NXDOMAIN rewrite nxead.itemdb.com. [A] via ext-base-antimalware.nxead.itemdb.com.""",,42222,208.50.179.13,2.1.3,RPZ EVENT QNAME NXDOMAIN,"InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=ext-base-antimalware.nxead.itemdb.com.;InfobloxRPZ=ext-base-antimalware;InfobloxCSiteId=;InfobloxPolicyID=99986;InfobloxDomainCat=;InfobloxThreatProperty=APT_MalwareC2;InfobloxThreatConfidence=80;InfobloxThreatLevel=80;InfobloxB1Region=us-west-1;InfobloxB1ConnectionType=remote_client;InfobloxB1OPHName=;InfobloxB1OPHIPAddress=;InfobloxB1Network=BloxOne Endpoint;InfobloxB1SrcOSVersion=Windows 10 Enterprise;InfobloxB1DHCPFingerprint=;InfobloxB1DNSTags=APP_Uncategorized,CAT_Malicious Sites,CAT_PUPs (potentially unwanted programs),CAT_Phishing,bogon,ext-base-antimalware;InfobloxB1ThreatIndicator=nxead.itemdb.com;InfobloxB1FeedName=Ext_Base_AntiMalware;InfobloxB1FeedType=FQDN;InfobloxB1PolicyName=Sentinel-Security-Policy;InfobloxB1PolicyAction=Block",DNS,nxead.itemdb.com.,,00:50:56:01:13:0f,rdp,CommonSecurityLog,"{""InfobloxDNSQType"":""A"",""InfobloxRPZRule"":""ext-base-antimalware.nxead.itemdb.com."",""InfobloxRPZ"":""ext-base-antimalware"",""InfobloxPolicyID"":""99986"",""InfobloxThreatProperty"":""APT_MalwareC2"",""InfobloxThreatConfidence"":""80"",""InfobloxThreatLevel"":""80"",""InfobloxB1Region"":""us-west-1"",""InfobloxB1ConnectionType"":""remote_client"",""InfobloxB1Network"":""BloxOne Endpoint"",""InfobloxB1SrcOSVersion"":""Windows 10 Enterprise"",""InfobloxB1DNSTags"":""APP_Uncategorized,CAT_Malicious Sites,CAT_PUPs (potentially unwanted programs),CAT_Phishing,bogon,ext-base-antimalware"",""InfobloxB1ThreatIndicator"":""nxead.itemdb.com"",""InfobloxB1FeedName"":""Ext_Base_AntiMalware"",""InfobloxB1FeedType"":""FQDN"",""InfobloxB1PolicyName"":""Sentinel-Security-Policy"",""InfobloxB1PolicyAction"":""Block""}",,,,,,,,,,remote_client,"APP_Uncategorized,CAT_Malicious Sites,CAT_PUPs (potentially unwanted programs),CAT_Phishing,bogon,ext-base-antimalware",Ext_Base_AntiMalware,FQDN,BloxOne Endpoint,,,Block,Sentinel-Security-Policy,us-west-1,Windows 10 Enterprise,nxead.itemdb.com,,,,,A,,,,,,,,,99986,ext-base-antimalware,ext-base-antimalware.nxead.itemdb.com.,,,80,80,APT_MalwareC2,80,High,APT,MalwareC2
OpsManager,"10/26/2021, 2:08:16.974 PM",Infoblox,Data Connector,RPZ-QNAME-NXDOMAIN,8,NXDOMAIN,NXDOMAIN,infoblox-virtual-machine,,,208.50.179.13,Sentinel-Win-Main2,"""rpz QNAME NXDOMAIN rewrite nxead.itemdb.com. [A] via ext-base-antimalware.nxead.itemdb.com.""",,42222,208.50.179.13,2.1.3,RPZ EVENT QNAME NXDOMAIN,"InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=ext-base-antimalware.nxead.itemdb.com.;InfobloxRPZ=ext-base-antimalware;InfobloxCSiteId=;InfobloxPolicyID=99986;InfobloxDomainCat=;InfobloxThreatProperty=APT_MalwareC2;InfobloxThreatConfidence=80;InfobloxThreatLevel=80;InfobloxB1Region=us-west-1;InfobloxB1ConnectionType=remote_client;InfobloxB1OPHName=;InfobloxB1OPHIPAddress=;InfobloxB1Network=BloxOne Endpoint;InfobloxB1SrcOSVersion=Windows 10 Enterprise;InfobloxB1DHCPFingerprint=;InfobloxB1DNSTags=APP_Uncategorized,CAT_Malicious Sites,CAT_PUPs (potentially unwanted programs),CAT_Phishing,bogon,ext-base-antimalware;InfobloxB1ThreatIndicator=nxead.itemdb.com;InfobloxB1FeedName=Ext_Base_AntiMalware;InfobloxB1FeedType=FQDN;InfobloxB1PolicyName=Sentinel-Security-Policy;InfobloxB1PolicyAction=Block",DNS,nxead.itemdb.com.,,00:50:56:01:13:0f,rdp,CommonSecurityLog,"{""InfobloxDNSQType"":""A"",""InfobloxRPZRule"":""ext-base-antimalware.nxead.itemdb.com."",""InfobloxRPZ"":""ext-base-antimalware"",""InfobloxPolicyID"":""99986"",""InfobloxThreatProperty"":""APT_MalwareC2"",""InfobloxThreatConfidence"":""80"",""InfobloxThreatLevel"":""80"",""InfobloxB1Region"":""us-west-1"",""InfobloxB1ConnectionType"":""remote_client"",""InfobloxB1Network"":""BloxOne Endpoint"",""InfobloxB1SrcOSVersion"":""Windows 10 Enterprise"",""InfobloxB1DNSTags"":""APP_Uncategorized,CAT_Malicious Sites,CAT_PUPs (potentially unwanted programs),CAT_Phishing,bogon,ext-base-antimalware"",""InfobloxB1ThreatIndicator"":""nxead.itemdb.com"",""InfobloxB1FeedName"":""Ext_Base_AntiMalware"",""InfobloxB1FeedType"":""FQDN"",""InfobloxB1PolicyName"":""Sentinel-Security-Policy"",""InfobloxB1PolicyAction"":""Block""}",,,,,,,,,,remote_client,"APP_Uncategorized,CAT_Malicious Sites,CAT_PUPs (potentially unwanted programs),CAT_Phishing,bogon,ext-base-antimalware",Ext_Base_AntiMalware,FQDN,BloxOne Endpoint,,,Block,Sentinel-Security-Policy,us-west-1,Windows 10 Enterprise,nxead.itemdb.com,,,,,A,,,,,,,,,99986,ext-base-antimalware,ext-base-antimalware.nxead.itemdb.com.,,,80,80,APT_MalwareC2,80,High,APT,MalwareC2
OpsManager,"10/26/2021, 2:05:57.191 PM",Infoblox,Data Connector,RPZ-QNAME-NXDOMAIN,8,NXDOMAIN,NXDOMAIN,infoblox-virtual-machine,,,208.50.179.13,Sentinel-Win-Main2,"""rpz QNAME NXDOMAIN rewrite editorswa.com. [A] via base.editorswa.com.""",,20330,208.50.179.13,2.1.3,RPZ EVENT QNAME NXDOMAIN,"InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=base.editorswa.com.;InfobloxRPZ=base;InfobloxCSiteId=;InfobloxPolicyID=99986;InfobloxDomainCat=;InfobloxThreatProperty=APT_MalwareC2;InfobloxThreatConfidence=;InfobloxThreatLevel=100;InfobloxB1Region=us-west-1;InfobloxB1ConnectionType=remote_client;InfobloxB1OPHName=;InfobloxB1OPHIPAddress=;InfobloxB1Network=BloxOne Endpoint;InfobloxB1SrcOSVersion=Windows 10 Enterprise;InfobloxB1DHCPFingerprint=;InfobloxB1DNSTags=APP_Uncategorized,CAT_Blogs/Wiki,base;InfobloxB1ThreatIndicator=editorswa.com;InfobloxB1FeedName=Base;InfobloxB1FeedType=FQDN;InfobloxB1PolicyName=Sentinel-Security-Policy;InfobloxB1PolicyAction=Block",DNS,editorswa.com.,,00:50:56:01:13:0f,rdp,CommonSecurityLog,"{""InfobloxDNSQType"":""A"",""InfobloxRPZRule"":""base.editorswa.com."",""InfobloxRPZ"":""base"",""InfobloxPolicyID"":""99986"",""InfobloxThreatProperty"":""APT_MalwareC2"",""InfobloxThreatLevel"":""100"",""InfobloxB1Region"":""us-west-1"",""InfobloxB1ConnectionType"":""remote_client"",""InfobloxB1Network"":""BloxOne Endpoint"",""InfobloxB1SrcOSVersion"":""Windows 10 Enterprise"",""InfobloxB1DNSTags"":""APP_Uncategorized,CAT_Blogs/Wiki,base"",""InfobloxB1ThreatIndicator"":""editorswa.com"",""InfobloxB1FeedName"":""Base"",""InfobloxB1FeedType"":""FQDN"",""InfobloxB1PolicyName"":""Sentinel-Security-Policy"",""InfobloxB1PolicyAction"":""Block""}",,,,,,,,,,remote_client,"APP_Uncategorized,CAT_Blogs/Wiki,base",Base,FQDN,BloxOne Endpoint,,,Block,Sentinel-Security-Policy,us-west-1,Windows 10 Enterprise,editorswa.com,,,,,A,,,,,,,,,99986,base,base.editorswa.com.,,,,100,APT_MalwareC2,100,High,APT,MalwareC2
OpsManager,"10/26/2021, 2:06:13.371 PM",Infoblox,Data Connector,RPZ-QNAME-NXDOMAIN,8,NXDOMAIN,NXDOMAIN,infoblox-virtual-machine,,,208.50.179.13,Sentinel-Win-Main2,"""rpz QNAME NXDOMAIN rewrite editorswa.com. [A] via base.editorswa.com.""",,20330,208.50.179.13,2.1.3,RPZ EVENT QNAME NXDOMAIN,"InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=base.editorswa.com.;InfobloxRPZ=base;InfobloxCSiteId=;InfobloxPolicyID=99986;InfobloxDomainCat=;InfobloxThreatProperty=APT_MalwareC2;InfobloxThreatConfidence=;InfobloxThreatLevel=100;InfobloxB1Region=us-west-1;InfobloxB1ConnectionType=remote_client;InfobloxB1OPHName=;InfobloxB1OPHIPAddress=;InfobloxB1Network=BloxOne Endpoint;InfobloxB1SrcOSVersion=Windows 10 Enterprise;InfobloxB1DHCPFingerprint=;InfobloxB1DNSTags=APP_Uncategorized,CAT_Blogs/Wiki,base;InfobloxB1ThreatIndicator=editorswa.com;InfobloxB1FeedName=Base;InfobloxB1FeedType=FQDN;InfobloxB1PolicyName=Sentinel-Security-Policy;InfobloxB1PolicyAction=Block",DNS,editorswa.com.,,00:50:56:01:13:0f,rdp,CommonSecurityLog,"{""InfobloxDNSQType"":""A"",""InfobloxRPZRule"":""base.editorswa.com."",""InfobloxRPZ"":""base"",""InfobloxPolicyID"":""99986"",""InfobloxThreatProperty"":""APT_MalwareC2"",""InfobloxThreatLevel"":""100"",""InfobloxB1Region"":""us-west-1"",""InfobloxB1ConnectionType"":""remote_client"",""InfobloxB1Network"":""BloxOne Endpoint"",""InfobloxB1SrcOSVersion"":""Windows 10 Enterprise"",""InfobloxB1DNSTags"":""APP_Uncategorized,CAT_Blogs/Wiki,base"",""InfobloxB1ThreatIndicator"":""editorswa.com"",""InfobloxB1FeedName"":""Base"",""InfobloxB1FeedType"":""FQDN"",""InfobloxB1PolicyName"":""Sentinel-Security-Policy"",""InfobloxB1PolicyAction"":""Block""}",,,,,,,,,,remote_client,"APP_Uncategorized,CAT_Blogs/Wiki,base",Base,FQDN,BloxOne Endpoint,,,Block,Sentinel-Security-Policy,us-west-1,Windows 10 Enterprise,editorswa.com,,,,,A,,,,,,,,,99986,base,base.editorswa.com.,,,,100,APT_MalwareC2,100,High,APT,MalwareC2
OpsManager,"10/26/2021, 2:06:13.371 PM",Infoblox,Data Connector,RPZ-QNAME-NXDOMAIN,8,NXDOMAIN,NXDOMAIN,infoblox-virtual-machine,,,208.50.179.13,Sentinel-Win-Main2,"""rpz QNAME NXDOMAIN rewrite hg8l3u.loan. [A] via base.hg8l3u.loan.""",,20330,208.50.179.13,2.1.3,RPZ EVENT QNAME NXDOMAIN,"InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=base.hg8l3u.loan.;InfobloxRPZ=base;InfobloxCSiteId=;InfobloxPolicyID=99986;InfobloxDomainCat=;InfobloxThreatProperty=APT_MalwareC2;InfobloxThreatConfidence=;InfobloxThreatLevel=100;InfobloxB1Region=us-west-1;InfobloxB1ConnectionType=remote_client;InfobloxB1OPHName=;InfobloxB1OPHIPAddress=;InfobloxB1Network=BloxOne Endpoint;InfobloxB1SrcOSVersion=Windows 10 Enterprise;InfobloxB1DHCPFingerprint=;InfobloxB1DNSTags=APP_Uncategorized,CAT_Uncategorized,base;InfobloxB1ThreatIndicator=hg8l3u.loan;InfobloxB1FeedName=Base;InfobloxB1FeedType=FQDN;InfobloxB1PolicyName=Sentinel-Security-Policy;InfobloxB1PolicyAction=Block",DNS,hg8l3u.loan.,,00:50:56:01:13:0f,rdp,CommonSecurityLog,"{""InfobloxDNSQType"":""A"",""InfobloxRPZRule"":""base.hg8l3u.loan."",""InfobloxRPZ"":""base"",""InfobloxPolicyID"":""99986"",""InfobloxThreatProperty"":""APT_MalwareC2"",""InfobloxThreatLevel"":""100"",""InfobloxB1Region"":""us-west-1"",""InfobloxB1ConnectionType"":""remote_client"",""InfobloxB1Network"":""BloxOne Endpoint"",""InfobloxB1SrcOSVersion"":""Windows 10 Enterprise"",""InfobloxB1DNSTags"":""APP_Uncategorized,CAT_Uncategorized,base"",""InfobloxB1ThreatIndicator"":""hg8l3u.loan"",""InfobloxB1FeedName"":""Base"",""InfobloxB1FeedType"":""FQDN"",""InfobloxB1PolicyName"":""Sentinel-Security-Policy"",""InfobloxB1PolicyAction"":""Block""}",,,,,,,,,,remote_client,"APP_Uncategorized,CAT_Uncategorized,base",Base,FQDN,BloxOne Endpoint,,,Block,Sentinel-Security-Policy,us-west-1,Windows 10 Enterprise,hg8l3u.loan,,,,,A,,,,,,,,,99986,base,base.hg8l3u.loan.,,,,100,APT_MalwareC2,100,High,APT,MalwareC2
OpsManager,"10/26/2021, 2:05:57.191 PM",Infoblox,Data Connector,RPZ-QNAME-NXDOMAIN,8,NXDOMAIN,NXDOMAIN,infoblox-virtual-machine,,,208.50.179.13,Sentinel-Win-Main2,"""rpz QNAME NXDOMAIN rewrite mail.google.com-recoveryservice.info. [A] via base.mail.google.com-recoveryservice.info.""",,20330,208.50.179.13,2.1.3,RPZ EVENT QNAME NXDOMAIN,"InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=base.mail.google.com-recoveryservice.info.;InfobloxRPZ=base;InfobloxCSiteId=;InfobloxPolicyID=99986;InfobloxDomainCat=;InfobloxThreatProperty=APT_MalwareC2;InfobloxThreatConfidence=;InfobloxThreatLevel=100;InfobloxB1Region=us-west-1;InfobloxB1ConnectionType=remote_client;InfobloxB1OPHName=;InfobloxB1OPHIPAddress=;InfobloxB1Network=BloxOne Endpoint;InfobloxB1SrcOSVersion=Windows 10 Enterprise;InfobloxB1DHCPFingerprint=;InfobloxB1DNSTags=APP_Uncategorized,CAT_Malicious Sites,base;InfobloxB1ThreatIndicator=mail.google.com-recoveryservice.info;InfobloxB1FeedName=Base;InfobloxB1FeedType=FQDN;InfobloxB1PolicyName=Sentinel-Security-Policy;InfobloxB1PolicyAction=Block",DNS,mail.google.com-recoveryservice.info.,,00:50:56:01:13:0f,rdp,CommonSecurityLog,"{""InfobloxDNSQType"":""A"",""InfobloxRPZRule"":""base.mail.google.com-recoveryservice.info."",""InfobloxRPZ"":""base"",""InfobloxPolicyID"":""99986"",""InfobloxThreatProperty"":""APT_MalwareC2"",""InfobloxThreatLevel"":""100"",""InfobloxB1Region"":""us-west-1"",""InfobloxB1ConnectionType"":""remote_client"",""InfobloxB1Network"":""BloxOne Endpoint"",""InfobloxB1SrcOSVersion"":""Windows 10 Enterprise"",""InfobloxB1DNSTags"":""APP_Uncategorized,CAT_Malicious Sites,base"",""InfobloxB1ThreatIndicator"":""mail.google.com-recoveryservice.info"",""InfobloxB1FeedName"":""Base"",""InfobloxB1FeedType"":""FQDN"",""InfobloxB1PolicyName"":""Sentinel-Security-Policy"",""InfobloxB1PolicyAction"":""Block""}",,,,,,,,,,remote_client,"APP_Uncategorized,CAT_Malicious Sites,base",Base,FQDN,BloxOne Endpoint,,,Block,Sentinel-Security-Policy,us-west-1,Windows 10 Enterprise,mail.google.com-recoveryservice.info,,,,,A,,,,,,,,,99986,base,base.mail.google.com-recoveryservice.info.,,,,100,APT_MalwareC2,100,High,APT,MalwareC2
OpsManager,"10/26/2021, 2:08:11.199 PM",Infoblox,Data Connector,RPZ-QNAME-NXDOMAIN,8,NXDOMAIN,NXDOMAIN,infoblox-virtual-machine,,,208.50.179.13,Sentinel-Win-Main2,"""rpz QNAME NXDOMAIN rewrite dpc.servegame.com. [A] via base.dpc.servegame.com.""",,42222,208.50.179.13,2.1.3,RPZ EVENT QNAME NXDOMAIN,"InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=base.dpc.servegame.com.;InfobloxRPZ=base;InfobloxCSiteId=;InfobloxPolicyID=99986;InfobloxDomainCat=;InfobloxThreatProperty=APT_MalwareC2;InfobloxThreatConfidence=;InfobloxThreatLevel=100;InfobloxB1Region=us-west-1;InfobloxB1ConnectionType=remote_client;InfobloxB1OPHName=;InfobloxB1OPHIPAddress=;InfobloxB1Network=BloxOne Endpoint;InfobloxB1SrcOSVersion=Windows 10 Enterprise;InfobloxB1DHCPFingerprint=;InfobloxB1DNSTags=APP_Uncategorized,CAT_Internet Services,CAT_Personal Pages,base;InfobloxB1ThreatIndicator=dpc.servegame.com;InfobloxB1FeedName=Base;InfobloxB1FeedType=FQDN;InfobloxB1PolicyName=Sentinel-Security-Policy;InfobloxB1PolicyAction=Block",DNS,dpc.servegame.com.,,00:50:56:01:13:0f,rdp,CommonSecurityLog,"{""InfobloxDNSQType"":""A"",""InfobloxRPZRule"":""base.dpc.servegame.com."",""InfobloxRPZ"":""base"",""InfobloxPolicyID"":""99986"",""InfobloxThreatProperty"":""APT_MalwareC2"",""InfobloxThreatLevel"":""100"",""InfobloxB1Region"":""us-west-1"",""InfobloxB1ConnectionType"":""remote_client"",""InfobloxB1Network"":""BloxOne Endpoint"",""InfobloxB1SrcOSVersion"":""Windows 10 Enterprise"",""InfobloxB1DNSTags"":""APP_Uncategorized,CAT_Internet Services,CAT_Personal Pages,base"",""InfobloxB1ThreatIndicator"":""dpc.servegame.com"",""InfobloxB1FeedName"":""Base"",""InfobloxB1FeedType"":""FQDN"",""InfobloxB1PolicyName"":""Sentinel-Security-Policy"",""InfobloxB1PolicyAction"":""Block""}",,,,,,,,,,remote_client,"APP_Uncategorized,CAT_Internet Services,CAT_Personal Pages,base",Base,FQDN,BloxOne Endpoint,,,Block,Sentinel-Security-Policy,us-west-1,Windows 10 Enterprise,dpc.servegame.com,,,,,A,,,,,,,,,99986,base,base.dpc.servegame.com.,,,,100,APT_MalwareC2,100,High,APT,MalwareC2
OpsManager,"10/26/2021, 2:06:23.026 PM",Infoblox,Data Connector,DNS Response,1,,,infoblox-virtual-machine,,,208.50.179.13,Sentinel-Win-Main2,"""cdn.content.prod.cms.msn.com. 1657 IN CNAME cdn.content.prod.cms.msn.com.edgekey.net. cdn.content.prod.cms.msn.com.edgekey.net. 2 IN CNAME e10663.dscg.akamaiedge.net. e10663.dscg.akamaiedge.net. 20 IN A 23.1.245.167 . 0 4096 OPT """,TCP,25880,208.50.179.13,2.1.3,DNS Response IN A NOERROR,"InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=3;InfobloxNsCount=0;InfobloxArCount=1;InfobloxB1Region=us-west-1;InfobloxB1ConnectionType=remote_client;InfobloxB1OPHName=;InfobloxB1OPHIPAddress=;InfobloxB1Network=BloxOne Endpoint;InfobloxB1SrcOSVersion=Windows 10 Enterprise;InfobloxB1DHCPFingerprint=;InfobloxB1DNSTags=APP_Uncategorized,CAT_Content Server,CAT_Portal Sites",DNS,cdn.content.prod.cms.msn.com.,,00:50:56:01:13:0f,rdp,CommonSecurityLog,"{""InfobloxDNSQClass"":""IN"",""InfobloxDNSQType"":""A"",""InfobloxDNSQFlags"":""+EV"",""InfobloxDNSRCode"":""NOERROR"",""InfobloxAnCount"":""3"",""InfobloxNsCount"":""0"",""InfobloxArCount"":""1"",""InfobloxB1Region"":""us-west-1"",""InfobloxB1ConnectionType"":""remote_client"",""InfobloxB1Network"":""BloxOne Endpoint"",""InfobloxB1SrcOSVersion"":""Windows 10 Enterprise"",""InfobloxB1DNSTags"":""APP_Uncategorized,CAT_Content Server,CAT_Portal Sites""}",,,,,,,,3,1,remote_client,"APP_Uncategorized,CAT_Content Server,CAT_Portal Sites",,,BloxOne Endpoint,,,,,us-west-1,Windows 10 Enterprise,,,,IN,#NAME?,A,NOERROR,,,,,,,0,,,,,,,,,,N/A,,
OpsManager,"10/26/2021, 2:06:24.448 PM",Infoblox,Data Connector,DNS Response,1,,,infoblox-virtual-machine,,,208.50.179.13,Sentinel-Win-Main2,""". 0 4096 OPT """,TCP,41853,208.50.179.13,2.1.3,DNS Response IN A NXDOMAIN,"InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=-EV;InfobloxDNSRCode=NXDOMAIN;InfobloxAnCount=0;InfobloxNsCount=0;InfobloxArCount=1;InfobloxB1Region=us-west-1;InfobloxB1ConnectionType=remote_client;InfobloxB1OPHName=;InfobloxB1OPHIPAddress=;InfobloxB1Network=BloxOne Endpoint;InfobloxB1SrcOSVersion=Windows 10 Enterprise;InfobloxB1DHCPFingerprint=;InfobloxB1DNSTags=APP_Uncategorized,CAT_Uncategorized,base",DNS,hg8p7q.tech.,,00:50:56:01:13:0f,rdp,CommonSecurityLog,"{""InfobloxDNSQClass"":""IN"",""InfobloxDNSQType"":""A"",""InfobloxDNSQFlags"":""-EV"",""InfobloxDNSRCode"":""NXDOMAIN"",""InfobloxAnCount"":""0"",""InfobloxNsCount"":""0"",""InfobloxArCount"":""1"",""InfobloxB1Region"":""us-west-1"",""InfobloxB1ConnectionType"":""remote_client"",""InfobloxB1Network"":""BloxOne Endpoint"",""InfobloxB1SrcOSVersion"":""Windows 10 Enterprise"",""InfobloxB1DNSTags"":""APP_Uncategorized,CAT_Uncategorized,base""}",,,,,,,,0,1,remote_client,"APP_Uncategorized,CAT_Uncategorized,base",,,BloxOne Endpoint,,,,,us-west-1,Windows 10 Enterprise,,,,IN,#NAME?,A,NXDOMAIN,,,,,,,0,,,,,,,,,,N/A,,
OpsManager,"10/26/2021, 2:06:24.449 PM",Infoblox,Data Connector,DNS Response,1,,,infoblox-virtual-machine,,,208.50.179.13,Sentinel-Win-Main2,""". 0 4096 OPT """,TCP,41853,208.50.179.13,2.1.3,DNS Response IN A NXDOMAIN,"InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=-EV;InfobloxDNSRCode=NXDOMAIN;InfobloxAnCount=0;InfobloxNsCount=0;InfobloxArCount=1;InfobloxB1Region=us-west-1;InfobloxB1ConnectionType=remote_client;InfobloxB1OPHName=;InfobloxB1OPHIPAddress=;InfobloxB1Network=BloxOne Endpoint;InfobloxB1SrcOSVersion=Windows 10 Enterprise;InfobloxB1DHCPFingerprint=;InfobloxB1DNSTags=APP_Uncategorized,CAT_Uncategorized,base",DNS,udp.jjevil.com.,,00:50:56:01:13:0f,rdp,CommonSecurityLog,"{""InfobloxDNSQClass"":""IN"",""InfobloxDNSQType"":""A"",""InfobloxDNSQFlags"":""-EV"",""InfobloxDNSRCode"":""NXDOMAIN"",""InfobloxAnCount"":""0"",""InfobloxNsCount"":""0"",""InfobloxArCount"":""1"",""InfobloxB1Region"":""us-west-1"",""InfobloxB1ConnectionType"":""remote_client"",""InfobloxB1Network"":""BloxOne Endpoint"",""InfobloxB1SrcOSVersion"":""Windows 10 Enterprise"",""InfobloxB1DNSTags"":""APP_Uncategorized,CAT_Uncategorized,base""}",,,,,,,,0,1,remote_client,"APP_Uncategorized,CAT_Uncategorized,base",,,BloxOne Endpoint,,,,,us-west-1,Windows 10 Enterprise,,,,IN,#NAME?,A,NXDOMAIN,,,,,,,0,,,,,,,,,,N/A,,
OpsManager,"10/26/2021, 2:06:24.968 PM",Infoblox,Data Connector,DNS Response,1,,,infoblox-virtual-machine,,,208.50.179.13,Sentinel-Win-Main2,"""assets.msn.com. 6779 IN CNAME assets.msn.com.edgekey.net. assets.msn.com.edgekey.net. 179 IN CNAME e28578.d.akamaiedge.net. e28578.d.akamaiedge.net. 15 IN A 23.50.233.55 e28578.d.akamaiedge.net. 15 IN A 23.50.233.125 e28578.d.akamaiedge.net. 15 IN A 23.50.233.134 e28578.d.akamaiedge.net. 15 IN A 23.50.233.53 e28578.d.akamaiedge.net. 15 IN A 23.50.233.135 e28578.d.akamaiedge.net. 15 IN A 23.50.233.56 e28578.d.akamaiedge.net. 15 IN A 23.50.233.119 e28578.d.akamaiedge.net. 15 IN A 23.50.233.48 e28578.d.akamaiedge.net. 15 IN A 23.50.233.133 . 0 4096 OPT """,TCP,57010,208.50.179.13,2.1.3,DNS Response IN A NOERROR,"InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=11;InfobloxNsCount=0;InfobloxArCount=1;InfobloxB1Region=us-west-1;InfobloxB1ConnectionType=remote_client;InfobloxB1OPHName=;InfobloxB1OPHIPAddress=;InfobloxB1Network=BloxOne Endpoint;InfobloxB1SrcOSVersion=Windows 10 Enterprise;InfobloxB1DHCPFingerprint=;InfobloxB1DNSTags=APP_Uncategorized,CAT_Content Server,CAT_Portal Sites",DNS,assets.msn.com.,,00:50:56:01:13:0f,rdp,CommonSecurityLog,"{""InfobloxDNSQClass"":""IN"",""InfobloxDNSQType"":""A"",""InfobloxDNSQFlags"":""+EV"",""InfobloxDNSRCode"":""NOERROR"",""InfobloxAnCount"":""11"",""InfobloxNsCount"":""0"",""InfobloxArCount"":""1"",""InfobloxB1Region"":""us-west-1"",""InfobloxB1ConnectionType"":""remote_client"",""InfobloxB1Network"":""BloxOne Endpoint"",""InfobloxB1SrcOSVersion"":""Windows 10 Enterprise"",""InfobloxB1DNSTags"":""APP_Uncategorized,CAT_Content Server,CAT_Portal Sites""}",,,,,,,,11,1,remote_client,"APP_Uncategorized,CAT_Content Server,CAT_Portal Sites",,,BloxOne Endpoint,,,,,us-west-1,Windows 10 Enterprise,,,,IN,#NAME?,A,NOERROR,,,,,,,0,,,,,,,,,,N/A,,
OpsManager,"10/26/2021, 2:06:24.968 PM",Infoblox,Data Connector,DNS Response,1,,,infoblox-virtual-machine,,,208.50.179.13,Sentinel-Win-Main2,""". 0 4096 OPT """,TCP,57010,208.50.179.13,2.1.3,DNS Response IN A NXDOMAIN,"InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=-EV;InfobloxDNSRCode=NXDOMAIN;InfobloxAnCount=0;InfobloxNsCount=0;InfobloxArCount=1;InfobloxB1Region=us-west-1;InfobloxB1ConnectionType=remote_client;InfobloxB1OPHName=;InfobloxB1OPHIPAddress=;InfobloxB1Network=BloxOne Endpoint;InfobloxB1SrcOSVersion=Windows 10 Enterprise;InfobloxB1DHCPFingerprint=;InfobloxB1DNSTags=APP_Uncategorized,CAT_PUPs (potentially unwanted programs),base",DNS,jepsen.r3u8.com.,,00:50:56:01:13:0f,rdp,CommonSecurityLog,"{""InfobloxDNSQClass"":""IN"",""InfobloxDNSQType"":""A"",""InfobloxDNSQFlags"":""-EV"",""InfobloxDNSRCode"":""NXDOMAIN"",""InfobloxAnCount"":""0"",""InfobloxNsCount"":""0"",""InfobloxArCount"":""1"",""InfobloxB1Region"":""us-west-1"",""InfobloxB1ConnectionType"":""remote_client"",""InfobloxB1Network"":""BloxOne Endpoint"",""InfobloxB1SrcOSVersion"":""Windows 10 Enterprise"",""InfobloxB1DNSTags"":""APP_Uncategorized,CAT_PUPs (potentially unwanted programs),base""}",,,,,,,,0,1,remote_client,"APP_Uncategorized,CAT_PUPs (potentially unwanted programs),base",,,BloxOne Endpoint,,,,,us-west-1,Windows 10 Enterprise,,,,IN,#NAME?,A,NXDOMAIN,,,,,,,0,,,,,,,,,,N/A,,
OpsManager,"10/26/2021, 2:06:26.519 PM",Infoblox,Data Connector,DNS Response,1,,,infoblox-virtual-machine,,,208.50.179.13,Sentinel-Win-Main2,""". 0 4096 OPT """,TCP,40134,208.50.179.13,2.1.3,DNS Response IN A NXDOMAIN,"InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=-EV;InfobloxDNSRCode=NXDOMAIN;InfobloxAnCount=0;InfobloxNsCount=0;InfobloxArCount=1;InfobloxB1Region=us-west-1;InfobloxB1ConnectionType=remote_client;InfobloxB1OPHName=;InfobloxB1OPHIPAddress=;InfobloxB1Network=BloxOne Endpoint;InfobloxB1SrcOSVersion=Windows 10 Enterprise;InfobloxB1DHCPFingerprint=;InfobloxB1DNSTags=APP_Uncategorized,CAT_Malicious Sites,CAT_Parked Domain,base",DNS,updatepatch.icr38.net.,,00:50:56:01:13:0f,rdp,CommonSecurityLog,"{""InfobloxDNSQClass"":""IN"",""InfobloxDNSQType"":""A"",""InfobloxDNSQFlags"":""-EV"",""InfobloxDNSRCode"":""NXDOMAIN"",""InfobloxAnCount"":""0"",""InfobloxNsCount"":""0"",""InfobloxArCount"":""1"",""InfobloxB1Region"":""us-west-1"",""InfobloxB1ConnectionType"":""remote_client"",""InfobloxB1Network"":""BloxOne Endpoint"",""InfobloxB1SrcOSVersion"":""Windows 10 Enterprise"",""InfobloxB1DNSTags"":""APP_Uncategorized,CAT_Malicious Sites,CAT_Parked Domain,base""}",,,,,,,,0,1,remote_client,"APP_Uncategorized,CAT_Malicious Sites,CAT_Parked Domain,base",,,BloxOne Endpoint,,,,,us-west-1,Windows 10 Enterprise,,,,IN,#NAME?,A,NXDOMAIN,,,,,,,0,,,,,,,,,,N/A,,
OpsManager,"10/26/2021, 2:06:26.519 PM",Infoblox,Data Connector,DNS Response,1,,,infoblox-virtual-machine,,,208.50.179.13,Sentinel-Win-Main2,""". 0 4096 OPT """,TCP,40134,208.50.179.13,2.1.3,DNS Response IN A NXDOMAIN,"InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=-EV;InfobloxDNSRCode=NXDOMAIN;InfobloxAnCount=0;InfobloxNsCount=0;InfobloxArCount=1;InfobloxB1Region=us-west-1;InfobloxB1ConnectionType=remote_client;InfobloxB1OPHName=;InfobloxB1OPHIPAddress=;InfobloxB1Network=BloxOne Endpoint;InfobloxB1SrcOSVersion=Windows 10 Enterprise;InfobloxB1DHCPFingerprint=;InfobloxB1DNSTags=APP_Uncategorized,CAT_Malicious Sites,base,etiqrisk-ip,ext-antimalware-ip",DNS,ftp.scarlet-witch.com.,,00:50:56:01:13:0f,rdp,CommonSecurityLog,"{""InfobloxDNSQClass"":""IN"",""InfobloxDNSQType"":""A"",""InfobloxDNSQFlags"":""-EV"",""InfobloxDNSRCode"":""NXDOMAIN"",""InfobloxAnCount"":""0"",""InfobloxNsCount"":""0"",""InfobloxArCount"":""1"",""InfobloxB1Region"":""us-west-1"",""InfobloxB1ConnectionType"":""remote_client"",""InfobloxB1Network"":""BloxOne Endpoint"",""InfobloxB1SrcOSVersion"":""Windows 10 Enterprise"",""InfobloxB1DNSTags"":""APP_Uncategorized,CAT_Malicious Sites,base,etiqrisk-ip,ext-antimalware-ip""}",,,,,,,,0,1,remote_client,"APP_Uncategorized,CAT_Malicious Sites,base,etiqrisk-ip,ext-antimalware-ip",,,BloxOne Endpoint,,,,,us-west-1,Windows 10 Enterprise,,,,IN,#NAME?,A,NXDOMAIN,,,,,,,0,,,,,,,,,,N/A,,
OpsManager,"10/26/2021, 2:49:48.161 PM",Infoblox,Data Connector,DNS Response,1,,,infoblox-virtual-machine,,,192.168.1.90,,"""client.wns.windows.com. 1459 IN CNAME wns.notify.trafficmanager.net. wns.notify.trafficmanager.net. 284 IN A 40.83.240.146 . 32768 4096 OPT """,TCP,35175,192.168.1.90,2.1.3,DNS Response IN A NOERROR,"InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=2;InfobloxNsCount=0;InfobloxArCount=1;InfobloxB1Region=us-west-1;InfobloxB1ConnectionType=dfp;InfobloxB1OPHName=Sentinel-Demo-DNS+DFP+DHCP;InfobloxB1OPHIPAddress=192.168.1.201;InfobloxB1Network=Sentinel-Demo-DNS+DFP+DHCP (DFP);InfobloxB1SrcOSVersion=;InfobloxB1DHCPFingerprint=;InfobloxB1DNSTags=APP_Microsoft OneDrive,APP_Microsoft Sharepoint,APP_Uncategorized,CAT_Business,CAT_Internet Services,CAT_Software/Hardware",DNS,client.wns.windows.com.,,00:50:56:0b:0f:80,,CommonSecurityLog,"{""InfobloxDNSQClass"":""IN"",""InfobloxDNSQType"":""A"",""InfobloxDNSQFlags"":""+EV"",""InfobloxDNSRCode"":""NOERROR"",""InfobloxAnCount"":""2"",""InfobloxNsCount"":""0"",""InfobloxArCount"":""1"",""InfobloxB1Region"":""us-west-1"",""InfobloxB1ConnectionType"":""dfp"",""InfobloxB1OPHName"":""Sentinel-Demo-DNS+DFP+DHCP"",""InfobloxB1OPHIPAddress"":""192.168.1.201"",""InfobloxB1Network"":""Sentinel-Demo-DNS+DFP+DHCP (DFP)"",""InfobloxB1DNSTags"":""APP_Microsoft OneDrive,APP_Microsoft Sharepoint,APP_Uncategorized,CAT_Business,CAT_Internet Services,CAT_Software/Hardware""}",,,,,,,,2,1,dfp,"APP_Microsoft OneDrive,APP_Microsoft Sharepoint,APP_Uncategorized,CAT_Business,CAT_Internet Services,CAT_Software/Hardware",,,Sentinel-Demo-DNS+DFP+DHCP (DFP),192.168.1.201,Sentinel-Demo-DNS+DFP+DHCP,,,us-west-1,,,,,IN,#NAME?,A,NOERROR,,,,,,,0,,,,,,,,,,N/A,,
OpsManager,"10/26/2021, 2:43:38.815 PM",Infoblox,Data Connector,DNS Response,1,,,infoblox-virtual-machine,,,192.168.1.106,,"""contile.services.mozilla.com. 513 IN A 34.117.237.239 . 32768 4096 OPT """,TCP,17458,192.168.1.106,2.1.3,DNS Response IN A NOERROR,"InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1;InfobloxB1Region=us-west-1;InfobloxB1ConnectionType=dfp;InfobloxB1OPHName=Sentinel-Demo-DNS+DFP+DHCP;InfobloxB1OPHIPAddress=192.168.1.201;InfobloxB1Network=Sentinel-Demo-DNS+DFP+DHCP (DFP);InfobloxB1SrcOSVersion=;InfobloxB1DHCPFingerprint=;InfobloxB1DNSTags=APP_Uncategorized,CAT_Software/Hardware",DNS,contile.services.mozilla.com.,,00:50:56:0b:0f:15,,CommonSecurityLog,"{""InfobloxDNSQClass"":""IN"",""InfobloxDNSQType"":""A"",""InfobloxDNSQFlags"":""+EV"",""InfobloxDNSRCode"":""NOERROR"",""InfobloxAnCount"":""1"",""InfobloxNsCount"":""0"",""InfobloxArCount"":""1"",""InfobloxB1Region"":""us-west-1"",""InfobloxB1ConnectionType"":""dfp"",""InfobloxB1OPHName"":""Sentinel-Demo-DNS+DFP+DHCP"",""InfobloxB1OPHIPAddress"":""192.168.1.201"",""InfobloxB1Network"":""Sentinel-Demo-DNS+DFP+DHCP (DFP)"",""InfobloxB1DNSTags"":""APP_Uncategorized,CAT_Software/Hardware""}",,,,,,,,1,1,dfp,"APP_Uncategorized,CAT_Software/Hardware",,,Sentinel-Demo-DNS+DFP+DHCP (DFP),192.168.1.201,Sentinel-Demo-DNS+DFP+DHCP,,,us-west-1,,,,,IN,#NAME?,A,NOERROR,,,,,,,0,,,,,,,,,,N/A,,
OpsManager,"10/26/2021, 2:43:38.816 PM",Infoblox,Data Connector,DNS Response,1,,,infoblox-virtual-machine,,,192.168.1.106,,"""www.ebay.com. 0 IN A 3.215.231.251 . 32768 1232 OPT """,TCP,17458,192.168.1.106,2.1.3,DNS Response IN A NOERROR,"InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=-EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1;InfobloxB1Region=us-west-1;InfobloxB1ConnectionType=dfp;InfobloxB1OPHName=Sentinel-Demo-DNS+DFP+DHCP;InfobloxB1OPHIPAddress=192.168.1.201;InfobloxB1Network=Sentinel-Demo-DNS+DFP+DHCP (DFP);InfobloxB1SrcOSVersion=;InfobloxB1DHCPFingerprint=;InfobloxB1DNSTags=APP_Uncategorized,CAT_Auctions/Classifieds,CAT_Content Server",DNS,www.ebay.com.,,00:50:56:0b:0f:15,,CommonSecurityLog,"{""InfobloxDNSQClass"":""IN"",""InfobloxDNSQType"":""A"",""InfobloxDNSQFlags"":""-EV"",""InfobloxDNSRCode"":""NOERROR"",""InfobloxAnCount"":""1"",""InfobloxNsCount"":""0"",""InfobloxArCount"":""1"",""InfobloxB1Region"":""us-west-1"",""InfobloxB1ConnectionType"":""dfp"",""InfobloxB1OPHName"":""Sentinel-Demo-DNS+DFP+DHCP"",""InfobloxB1OPHIPAddress"":""192.168.1.201"",""InfobloxB1Network"":""Sentinel-Demo-DNS+DFP+DHCP (DFP)"",""InfobloxB1DNSTags"":""APP_Uncategorized,CAT_Auctions/Classifieds,CAT_Content Server""}",,,,,,,,1,1,dfp,"APP_Uncategorized,CAT_Auctions/Classifieds,CAT_Content Server",,,Sentinel-Demo-DNS+DFP+DHCP (DFP),192.168.1.201,Sentinel-Demo-DNS+DFP+DHCP,,,us-west-1,,,,,IN,#NAME?,A,NOERROR,,,,,,,0,,,,,,,,,,N/A,,
OpsManager,"10/26/2021, 2:43:39.788 PM",Infoblox,Data Connector,DNS Response,1,,,infoblox-virtual-machine,,,192.168.1.106,,"""www.amazon.com. 0 IN AAAA 2600:1f18:1043:dc00:8083:68e:ef0f:46de . 32768 1232 OPT """,TCP,39838,192.168.1.106,2.1.3,DNS Response IN AAAA NOERROR,"InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=AAAA;InfobloxDNSQFlags=-EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1;InfobloxB1Region=us-west-1;InfobloxB1ConnectionType=dfp;InfobloxB1OPHName=Sentinel-Demo-DNS+DFP+DHCP;InfobloxB1OPHIPAddress=192.168.1.201;InfobloxB1Network=Sentinel-Demo-DNS+DFP+DHCP (DFP);InfobloxB1SrcOSVersion=;InfobloxB1DHCPFingerprint=;InfobloxB1DNSTags=APP_Uncategorized,CAT_Content Server,CAT_Online Shopping",DNS,www.amazon.com.,,00:50:56:0b:0f:15,,CommonSecurityLog,"{""InfobloxDNSQClass"":""IN"",""InfobloxDNSQType"":""AAAA"",""InfobloxDNSQFlags"":""-EV"",""InfobloxDNSRCode"":""NOERROR"",""InfobloxAnCount"":""1"",""InfobloxNsCount"":""0"",""InfobloxArCount"":""1"",""InfobloxB1Region"":""us-west-1"",""InfobloxB1ConnectionType"":""dfp"",""InfobloxB1OPHName"":""Sentinel-Demo-DNS+DFP+DHCP"",""InfobloxB1OPHIPAddress"":""192.168.1.201"",""InfobloxB1Network"":""Sentinel-Demo-DNS+DFP+DHCP (DFP)"",""InfobloxB1DNSTags"":""APP_Uncategorized,CAT_Content Server,CAT_Online Shopping""}",,,,,,,,1,1,dfp,"APP_Uncategorized,CAT_Content Server,CAT_Online Shopping",,,Sentinel-Demo-DNS+DFP+DHCP (DFP),192.168.1.201,Sentinel-Demo-DNS+DFP+DHCP,,,us-west-1,,,,,IN,#NAME?,AAAA,NOERROR,,,,,,,0,,,,,,,,,,N/A,,
OpsManager,"10/26/2021, 2:49:48.161 PM",Infoblox,Data Connector,DNS Response,1,,,infoblox-virtual-machine,,,192.168.1.90,,"""wns.notify.trafficmanager.net. 137 IN A 13.64.180.106 . 32768 4096 OPT """,TCP,35175,192.168.1.90,2.1.3,DNS Response IN A NOERROR,"InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1;InfobloxB1Region=us-west-1;InfobloxB1ConnectionType=dfp;InfobloxB1OPHName=Sentinel-Demo-DNS+DFP+DHCP;InfobloxB1OPHIPAddress=192.168.1.201;InfobloxB1Network=Sentinel-Demo-DNS+DFP+DHCP (DFP);InfobloxB1SrcOSVersion=;InfobloxB1DHCPFingerprint=;InfobloxB1DNSTags=APP_Uncategorized,CAT_Internet Services",DNS,wns.notify.trafficmanager.net.,,00:50:56:0b:0f:80,,CommonSecurityLog,"{""InfobloxDNSQClass"":""IN"",""InfobloxDNSQType"":""A"",""InfobloxDNSQFlags"":""+EV"",""InfobloxDNSRCode"":""NOERROR"",""InfobloxAnCount"":""1"",""InfobloxNsCount"":""0"",""InfobloxArCount"":""1"",""InfobloxB1Region"":""us-west-1"",""InfobloxB1ConnectionType"":""dfp"",""InfobloxB1OPHName"":""Sentinel-Demo-DNS+DFP+DHCP"",""InfobloxB1OPHIPAddress"":""192.168.1.201"",""InfobloxB1Network"":""Sentinel-Demo-DNS+DFP+DHCP (DFP)"",""InfobloxB1DNSTags"":""APP_Uncategorized,CAT_Internet Services""}",,,,,,,,1,1,dfp,"APP_Uncategorized,CAT_Internet Services",,,Sentinel-Demo-DNS+DFP+DHCP (DFP),192.168.1.201,Sentinel-Demo-DNS+DFP+DHCP,,,us-west-1,,,,,IN,#NAME?,A,NOERROR,,,,,,,0,,,,,,,,,,N/A,,
OpsManager,"10/26/2021, 2:27:45.244 PM",Infoblox,Data Connector,DNS Response,1,,,infoblox-virtual-machine,,192.168.1.201,,,"""ocsp.digicert.com. 0 IN A 3.215.231.251 . 150792 IN NS b.root-servers.net. . 150792 IN NS j.root-servers.net. . 150792 IN NS h.root-servers.net. . 150792 IN NS c.root-servers.net. . 150792 IN NS a.root-servers.net. . 150792 IN NS f.root-servers.net. . 150792 IN NS i.root-servers.net. . 150792 IN NS e.root-servers.net. . 150792 IN NS m.root-servers.net. . 150792 IN NS d.root-servers.net. . 150792 IN NS g.root-servers.net. . 150792 IN NS l.root-servers.net. . 150792 IN NS k.root-servers.net. a.root-servers.net. 150792 IN A 198.41.0.4 b.root-servers.net. 150792 IN A 199.9.14.201 c.root-servers.net. 150792 IN A 192.33.4.12 d.root-servers.net. 150792 IN A 199.7.91.13 e.root-servers.net. 150792 IN A 192.203.230.10 f.root-servers.net. 150792 IN A 192.5.5.241 g.root-servers.net. 150792 IN A 192.112.36.4 h.root-servers.net. 150792 IN A 198.97.190.53 i.root-servers.net. 150792 IN A 192.36.148.17 j.root-servers.net. 150792 IN A 192.58.128.30 k.root-servers.net. 150792 IN A 193.0.14.129 l.root-servers.net. 150792 IN A 199.7.83.42 m.root-servers.net. 150792 IN A 202.12.27.33 a.root-servers.net. 150792 IN AAAA 2001:503:ba3e::2:30""",UDP,61908,192.168.1.90,2.1.3,DNS Response IN A NOERROR,InfobloxDNSView=_default;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=13;InfobloxArCount=14,DNS,ocsp.digicert.com.,,,,CommonSecurityLog,"{""InfobloxDNSView"":""_default"",""InfobloxDNSQClass"":""IN"",""InfobloxDNSQType"":""A"",""InfobloxDNSQFlags"":""+EV"",""InfobloxDNSRCode"":""NOERROR"",""InfobloxAnCount"":""1"",""InfobloxNsCount"":""13"",""InfobloxArCount"":""14""}",,,,,,,,1,14,,,,,,,,,,,,,,,IN,#NAME?,A,NOERROR,_default,,,,,,13,,,,,,,,,,N/A,,
OpsManager,"10/26/2021, 2:48:39.990 PM",Infoblox,Data Connector,DNS Response,1,,,infoblox-virtual-machine,,,192.168.1.106,,"""us-east-1.elb.amazonaws.com. 59 IN SOA ns-1119.awsdns-11.org. awsdns-hostmaster.amazon.com. 1 7200 900 1209600 60 . 32768 4096 OPT """,TCP,21360,192.168.1.106,2.1.3,DNS Response IN AAAA NOERROR,"InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=AAAA;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=0;InfobloxNsCount=1;InfobloxArCount=1;InfobloxB1Region=us-west-1;InfobloxB1ConnectionType=dfp;InfobloxB1OPHName=Sentinel-Demo-DNS+DFP+DHCP;InfobloxB1OPHIPAddress=192.168.1.201;InfobloxB1Network=Sentinel-Demo-DNS+DFP+DHCP (DFP);InfobloxB1SrcOSVersion=;InfobloxB1DHCPFingerprint=;InfobloxB1DNSTags=APP_Uncategorized,CAT_Internet Services",DNS,int-classic-scout-production-1074780512.us-east-1.elb.amazonaws.com.,,00:50:56:0b:0f:15,,CommonSecurityLog,"{""InfobloxDNSQClass"":""IN"",""InfobloxDNSQType"":""AAAA"",""InfobloxDNSQFlags"":""+EV"",""InfobloxDNSRCode"":""NOERROR"",""InfobloxAnCount"":""0"",""InfobloxNsCount"":""1"",""InfobloxArCount"":""1"",""InfobloxB1Region"":""us-west-1"",""InfobloxB1ConnectionType"":""dfp"",""InfobloxB1OPHName"":""Sentinel-Demo-DNS+DFP+DHCP"",""InfobloxB1OPHIPAddress"":""192.168.1.201"",""InfobloxB1Network"":""Sentinel-Demo-DNS+DFP+DHCP (DFP)"",""InfobloxB1DNSTags"":""APP_Uncategorized,CAT_Internet Services""}",,,,,,,,0,1,dfp,"APP_Uncategorized,CAT_Internet Services",,,Sentinel-Demo-DNS+DFP+DHCP (DFP),192.168.1.201,Sentinel-Demo-DNS+DFP+DHCP,,,us-west-1,,,,,IN,#NAME?,AAAA,NOERROR,,,,,,,1,,,,,,,,,,N/A,,
OpsManager,"10/26/2021, 2:38:30.252 PM",Infoblox,Data Connector,DNS Response,1,,,infoblox-virtual-machine,,192.168.1.201,,,"""connectivity-check.ubuntu.com. 600 IN A 35.224.170.84 connectivity-check.ubuntu.com. 600 IN A 35.232.111.17 . 0 1232 OPT """,UDP,43700,192.168.1.106,2.1.3,DNS Response IN A NOERROR,InfobloxDNSView=_default;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=2;InfobloxNsCount=0;InfobloxArCount=1,DNS,connectivity-check.ubuntu.com.,,,,CommonSecurityLog,"{""InfobloxDNSView"":""_default"",""InfobloxDNSQClass"":""IN"",""InfobloxDNSQType"":""A"",""InfobloxDNSQFlags"":""+EV"",""InfobloxDNSRCode"":""NOERROR"",""InfobloxAnCount"":""2"",""InfobloxNsCount"":""0"",""InfobloxArCount"":""1""}",,,,,,,,2,1,,,,,,,,,,,,,,,IN,#NAME?,A,NOERROR,_default,,,,,,0,,,,,,,,,,N/A,,
OpsManager,"10/26/2021, 2:38:36.521 PM",Infoblox,Data Connector,DNS Response,1,,,infoblox-virtual-machine,,,192.168.1.106,,"""connectivity-check.ubuntu.com. 600 IN A 35.232.111.17 connectivity-check.ubuntu.com. 600 IN A 35.224.170.84 . 32768 4096 OPT """,TCP,55942,192.168.1.106,2.1.3,DNS Response IN A NOERROR,"InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=2;InfobloxNsCount=0;InfobloxArCount=1;InfobloxB1Region=us-west-1;InfobloxB1ConnectionType=dfp;InfobloxB1OPHName=Sentinel-Demo-DNS+DFP+DHCP;InfobloxB1OPHIPAddress=192.168.1.201;InfobloxB1Network=Sentinel-Demo-DNS+DFP+DHCP (DFP);InfobloxB1SrcOSVersion=;InfobloxB1DHCPFingerprint=;InfobloxB1DNSTags=APP_Uncategorized,CAT_Software/Hardware",DNS,connectivity-check.ubuntu.com.,,00:50:56:0b:0f:15,,CommonSecurityLog,"{""InfobloxDNSQClass"":""IN"",""InfobloxDNSQType"":""A"",""InfobloxDNSQFlags"":""+EV"",""InfobloxDNSRCode"":""NOERROR"",""InfobloxAnCount"":""2"",""InfobloxNsCount"":""0"",""InfobloxArCount"":""1"",""InfobloxB1Region"":""us-west-1"",""InfobloxB1ConnectionType"":""dfp"",""InfobloxB1OPHName"":""Sentinel-Demo-DNS+DFP+DHCP"",""InfobloxB1OPHIPAddress"":""192.168.1.201"",""InfobloxB1Network"":""Sentinel-Demo-DNS+DFP+DHCP (DFP)"",""InfobloxB1DNSTags"":""APP_Uncategorized,CAT_Software/Hardware""}",,,,,,,,2,1,dfp,"APP_Uncategorized,CAT_Software/Hardware",,,Sentinel-Demo-DNS+DFP+DHCP (DFP),192.168.1.201,Sentinel-Demo-DNS+DFP+DHCP,,,us-west-1,,,,,IN,#NAME?,A,NOERROR,,,,,,,0,,,,,,,,,,N/A,,
OpsManager,"10/26/2021, 2:48:42.365 PM",Infoblox,Data Connector,DNS Response,1,,,infoblox-virtual-machine,,,192.168.1.106,,"""article.smartasset.com. 84365 IN CNAME unbouncepages.com. unbouncepages.com. 900 IN SOA ns-748.awsdns-29.net. awsdns-hostmaster.amazon.com. 1 7200 900 1209600 86400 . 32768 4096 OPT """,TCP,19173,192.168.1.106,2.1.3,DNS Response IN AAAA NOERROR,"InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=AAAA;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=1;InfobloxArCount=1;InfobloxB1Region=us-west-1;InfobloxB1ConnectionType=dfp;InfobloxB1OPHName=Sentinel-Demo-DNS+DFP+DHCP;InfobloxB1OPHIPAddress=192.168.1.201;InfobloxB1Network=Sentinel-Demo-DNS+DFP+DHCP (DFP);InfobloxB1SrcOSVersion=;InfobloxB1DHCPFingerprint=;InfobloxB1DNSTags=APP_Uncategorized,CAT_Finance/Banking,CAT_Internet Services",DNS,article.smartasset.com.,,00:50:56:0b:0f:15,,CommonSecurityLog,"{""InfobloxDNSQClass"":""IN"",""InfobloxDNSQType"":""AAAA"",""InfobloxDNSQFlags"":""+EV"",""InfobloxDNSRCode"":""NOERROR"",""InfobloxAnCount"":""1"",""InfobloxNsCount"":""1"",""InfobloxArCount"":""1"",""InfobloxB1Region"":""us-west-1"",""InfobloxB1ConnectionType"":""dfp"",""InfobloxB1OPHName"":""Sentinel-Demo-DNS+DFP+DHCP"",""InfobloxB1OPHIPAddress"":""192.168.1.201"",""InfobloxB1Network"":""Sentinel-Demo-DNS+DFP+DHCP (DFP)"",""InfobloxB1DNSTags"":""APP_Uncategorized,CAT_Finance/Banking,CAT_Internet Services""}",,,,,,,,1,1,dfp,"APP_Uncategorized,CAT_Finance/Banking,CAT_Internet Services",,,Sentinel-Demo-DNS+DFP+DHCP (DFP),192.168.1.201,Sentinel-Demo-DNS+DFP+DHCP,,,us-west-1,,,,,IN,#NAME?,AAAA,NOERROR,,,,,,,1,,,,,,,,,,N/A,,
OpsManager,"10/26/2021, 2:28:30.237 PM",Infoblox,Data Connector,DNS Response,1,,,infoblox-virtual-machine,,192.168.1.201,,,"""connectivity-check.ubuntu.com. 350 IN A 35.232.111.17 connectivity-check.ubuntu.com. 350 IN A 35.224.170.84 . 0 1232 OPT """,UDP,43089,192.168.1.106,2.1.3,DNS Response IN A NOERROR,InfobloxDNSView=_default;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=2;InfobloxNsCount=0;InfobloxArCount=1,DNS,connectivity-check.ubuntu.com.,,,,CommonSecurityLog,"{""InfobloxDNSView"":""_default"",""InfobloxDNSQClass"":""IN"",""InfobloxDNSQType"":""A"",""InfobloxDNSQFlags"":""+EV"",""InfobloxDNSRCode"":""NOERROR"",""InfobloxAnCount"":""2"",""InfobloxNsCount"":""0"",""InfobloxArCount"":""1""}",,,,,,,,2,1,,,,,,,,,,,,,,,IN,#NAME?,A,NOERROR,_default,,,,,,0,,,,,,,,,,N/A,,
OpsManager,"10/26/2021, 2:48:44.761 PM",Infoblox,Data Connector,DNS Response,1,,,infoblox-virtual-machine,,,192.168.1.106,,"""unbouncepages.com. 60 IN A 108.128.55.166 unbouncepages.com. 60 IN A 18.200.10.24 . 32768 4096 OPT """,TCP,3638,192.168.1.106,2.1.3,DNS Response IN A NOERROR,"InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=2;InfobloxNsCount=0;InfobloxArCount=1;InfobloxB1Region=us-west-1;InfobloxB1ConnectionType=dfp;InfobloxB1OPHName=Sentinel-Demo-DNS+DFP+DHCP;InfobloxB1OPHIPAddress=192.168.1.201;InfobloxB1Network=Sentinel-Demo-DNS+DFP+DHCP (DFP);InfobloxB1SrcOSVersion=;InfobloxB1DHCPFingerprint=;InfobloxB1DNSTags=APP_Uncategorized,CAT_Internet Services",DNS,unbouncepages.com.,,00:50:56:0b:0f:15,,CommonSecurityLog,"{""InfobloxDNSQClass"":""IN"",""InfobloxDNSQType"":""A"",""InfobloxDNSQFlags"":""+EV"",""InfobloxDNSRCode"":""NOERROR"",""InfobloxAnCount"":""2"",""InfobloxNsCount"":""0"",""InfobloxArCount"":""1"",""InfobloxB1Region"":""us-west-1"",""InfobloxB1ConnectionType"":""dfp"",""InfobloxB1OPHName"":""Sentinel-Demo-DNS+DFP+DHCP"",""InfobloxB1OPHIPAddress"":""192.168.1.201"",""InfobloxB1Network"":""Sentinel-Demo-DNS+DFP+DHCP (DFP)"",""InfobloxB1DNSTags"":""APP_Uncategorized,CAT_Internet Services""}",,,,,,,,2,1,dfp,"APP_Uncategorized,CAT_Internet Services",,,Sentinel-Demo-DNS+DFP+DHCP (DFP),192.168.1.201,Sentinel-Demo-DNS+DFP+DHCP,,,us-west-1,,,,,IN,#NAME?,A,NOERROR,,,,,,,0,,,,,,,,,,N/A,,
OpsManager,"10/26/2021, 2:28:30.237 PM",Infoblox,Data Connector,DNS Response,1,,,infoblox-virtual-machine,,192.168.1.201,,,"""services.mozilla.com. 356 IN SOA ns-679.awsdns-20.net. awsdns-hostmaster.amazon.com. 1 7200 900 1209600 86400 . 0 1232 OPT """,UDP,57187,192.168.1.106,2.1.3,DNS Response IN AAAA NOERROR,InfobloxDNSView=_default;InfobloxDNSQClass=IN;InfobloxDNSQType=AAAA;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=0;InfobloxNsCount=1;InfobloxArCount=1,DNS,contile.services.mozilla.com.,,,,CommonSecurityLog,"{""InfobloxDNSView"":""_default"",""InfobloxDNSQClass"":""IN"",""InfobloxDNSQType"":""AAAA"",""InfobloxDNSQFlags"":""+EV"",""InfobloxDNSRCode"":""NOERROR"",""InfobloxAnCount"":""0"",""InfobloxNsCount"":""1"",""InfobloxArCount"":""1""}",,,,,,,,0,1,,,,,,,,,,,,,,,IN,#NAME?,AAAA,NOERROR,_default,,,,,,1,,,,,,,,,,N/A,,
OpsManager,"10/26/2021, 2:43:39.788 PM",Infoblox,Data Connector,DNS Response,1,,,infoblox-virtual-machine,,,192.168.1.106,,"""www.amazon.com. 0 IN A 3.215.231.251 . 32768 1232 OPT """,TCP,7930,192.168.1.106,2.1.3,DNS Response IN A NOERROR,"InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=-EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1;InfobloxB1Region=us-west-1;InfobloxB1ConnectionType=dfp;InfobloxB1OPHName=Sentinel-Demo-DNS+DFP+DHCP;InfobloxB1OPHIPAddress=192.168.1.201;InfobloxB1Network=Sentinel-Demo-DNS+DFP+DHCP (DFP);InfobloxB1SrcOSVersion=;InfobloxB1DHCPFingerprint=;InfobloxB1DNSTags=APP_Uncategorized,CAT_Content Server,CAT_Online Shopping",DNS,www.amazon.com.,,00:50:56:0b:0f:15,,CommonSecurityLog,"{""InfobloxDNSQClass"":""IN"",""InfobloxDNSQType"":""A"",""InfobloxDNSQFlags"":""-EV"",""InfobloxDNSRCode"":""NOERROR"",""InfobloxAnCount"":""1"",""InfobloxNsCount"":""0"",""InfobloxArCount"":""1"",""InfobloxB1Region"":""us-west-1"",""InfobloxB1ConnectionType"":""dfp"",""InfobloxB1OPHName"":""Sentinel-Demo-DNS+DFP+DHCP"",""InfobloxB1OPHIPAddress"":""192.168.1.201"",""InfobloxB1Network"":""Sentinel-Demo-DNS+DFP+DHCP (DFP)"",""InfobloxB1DNSTags"":""APP_Uncategorized,CAT_Content Server,CAT_Online Shopping""}",,,,,,,,1,1,dfp,"APP_Uncategorized,CAT_Content Server,CAT_Online Shopping",,,Sentinel-Demo-DNS+DFP+DHCP (DFP),192.168.1.201,Sentinel-Demo-DNS+DFP+DHCP,,,us-west-1,,,,,IN,#NAME?,A,NOERROR,,,,,,,0,,,,,,,,,,N/A,,
OpsManager,"10/26/2021, 2:28:30.237 PM",Infoblox,Data Connector,DNS Response,1,,,infoblox-virtual-machine,,192.168.1.201,,,"""contile.services.mozilla.com. 296 IN A 34.117.237.239 . 0 1232 OPT """,UDP,53808,192.168.1.106,2.1.3,DNS Response IN A NOERROR,InfobloxDNSView=_default;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1,DNS,contile.services.mozilla.com.,,,,CommonSecurityLog,"{""InfobloxDNSView"":""_default"",""InfobloxDNSQClass"":""IN"",""InfobloxDNSQType"":""A"",""InfobloxDNSQFlags"":""+EV"",""InfobloxDNSRCode"":""NOERROR"",""InfobloxAnCount"":""1"",""InfobloxNsCount"":""0"",""InfobloxArCount"":""1""}",,,,,,,,1,1,,,,,,,,,,,,,,,IN,#NAME?,A,NOERROR,_default,,,,,,0,,,,,,,,,,N/A,,
OpsManager,"10/26/2021, 2:43:40.178 PM",Infoblox,Data Connector,DNS Response,1,,,infoblox-virtual-machine,,,192.168.1.106,,"""services.mozilla.com. 842 IN SOA ns-679.awsdns-20.net. awsdns-hostmaster.amazon.com. 1 7200 900 1209600 86400 . 32768 4096 OPT """,TCP,44483,192.168.1.106,2.1.3,DNS Response IN AAAA NOERROR,"InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=AAAA;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=0;InfobloxNsCount=1;InfobloxArCount=1;InfobloxB1Region=us-west-1;InfobloxB1ConnectionType=dfp;InfobloxB1OPHName=Sentinel-Demo-DNS+DFP+DHCP;InfobloxB1OPHIPAddress=192.168.1.201;InfobloxB1Network=Sentinel-Demo-DNS+DFP+DHCP (DFP);InfobloxB1SrcOSVersion=;InfobloxB1DHCPFingerprint=;InfobloxB1DNSTags=APP_Uncategorized,CAT_Software/Hardware",DNS,contile.services.mozilla.com.,,00:50:56:0b:0f:15,,CommonSecurityLog,"{""InfobloxDNSQClass"":""IN"",""InfobloxDNSQType"":""AAAA"",""InfobloxDNSQFlags"":""+EV"",""InfobloxDNSRCode"":""NOERROR"",""InfobloxAnCount"":""0"",""InfobloxNsCount"":""1"",""InfobloxArCount"":""1"",""InfobloxB1Region"":""us-west-1"",""InfobloxB1ConnectionType"":""dfp"",""InfobloxB1OPHName"":""Sentinel-Demo-DNS+DFP+DHCP"",""InfobloxB1OPHIPAddress"":""192.168.1.201"",""InfobloxB1Network"":""Sentinel-Demo-DNS+DFP+DHCP (DFP)"",""InfobloxB1DNSTags"":""APP_Uncategorized,CAT_Software/Hardware""}",,,,,,,,0,1,dfp,"APP_Uncategorized,CAT_Software/Hardware",,,Sentinel-Demo-DNS+DFP+DHCP (DFP),192.168.1.201,Sentinel-Demo-DNS+DFP+DHCP,,,us-west-1,,,,,IN,#NAME?,AAAA,NOERROR,,,,,,,1,,,,,,,,,,N/A,,
OpsManager,"10/26/2021, 2:43:40.178 PM",Infoblox,Data Connector,DNS Response,1,,,infoblox-virtual-machine,,,192.168.1.106,,"""www.ebay.com. 0 IN AAAA 2600:1f18:1043:dc00:8083:68e:ef0f:46de . 32768 1232 OPT """,TCP,44483,192.168.1.106,2.1.3,DNS Response IN AAAA NOERROR,"InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=AAAA;InfobloxDNSQFlags=-EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1;InfobloxB1Region=us-west-1;InfobloxB1ConnectionType=dfp;InfobloxB1OPHName=Sentinel-Demo-DNS+DFP+DHCP;InfobloxB1OPHIPAddress=192.168.1.201;InfobloxB1Network=Sentinel-Demo-DNS+DFP+DHCP (DFP);InfobloxB1SrcOSVersion=;InfobloxB1DHCPFingerprint=;InfobloxB1DNSTags=APP_Uncategorized,CAT_Auctions/Classifieds,CAT_Content Server",DNS,www.ebay.com.,,00:50:56:0b:0f:15,,CommonSecurityLog,"{""InfobloxDNSQClass"":""IN"",""InfobloxDNSQType"":""AAAA"",""InfobloxDNSQFlags"":""-EV"",""InfobloxDNSRCode"":""NOERROR"",""InfobloxAnCount"":""1"",""InfobloxNsCount"":""0"",""InfobloxArCount"":""1"",""InfobloxB1Region"":""us-west-1"",""InfobloxB1ConnectionType"":""dfp"",""InfobloxB1OPHName"":""Sentinel-Demo-DNS+DFP+DHCP"",""InfobloxB1OPHIPAddress"":""192.168.1.201"",""InfobloxB1Network"":""Sentinel-Demo-DNS+DFP+DHCP (DFP)"",""InfobloxB1DNSTags"":""APP_Uncategorized,CAT_Auctions/Classifieds,CAT_Content Server""}",,,,,,,,1,1,dfp,"APP_Uncategorized,CAT_Auctions/Classifieds,CAT_Content Server",,,Sentinel-Demo-DNS+DFP+DHCP (DFP),192.168.1.201,Sentinel-Demo-DNS+DFP+DHCP,,,us-west-1,,,,,IN,#NAME?,AAAA,NOERROR,,,,,,,0,,,,,,,,,,N/A,,
OpsManager,"10/26/2021, 2:48:45.260 PM",Infoblox,Data Connector,DNS Response,1,,,infoblox-virtual-machine,,192.168.1.201,,,"""i.geistm.com. 38 IN CNAME int-classic-scout-production-1074780512.us-east-1.elb.amazonaws.com. us-east-1.elb.amazonaws.com. 59 IN SOA ns-1119.awsdns-11.org. awsdns-hostmaster.amazon.com. 1 7200 900 1209600 60 . 0 1232 OPT """,UDP,46383,192.168.1.106,2.1.3,DNS Response IN AAAA NOERROR,InfobloxDNSView=_default;InfobloxDNSQClass=IN;InfobloxDNSQType=AAAA;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=1;InfobloxArCount=1,DNS,i.geistm.com.,,,,CommonSecurityLog,"{""InfobloxDNSView"":""_default"",""InfobloxDNSQClass"":""IN"",""InfobloxDNSQType"":""AAAA"",""InfobloxDNSQFlags"":""+EV"",""InfobloxDNSRCode"":""NOERROR"",""InfobloxAnCount"":""1"",""InfobloxNsCount"":""1"",""InfobloxArCount"":""1""}",,,,,,,,1,1,,,,,,,,,,,,,,,IN,#NAME?,AAAA,NOERROR,_default,,,,,,1,,,,,,,,,,N/A,,
OpsManager,"10/26/2021, 2:38:45.246 PM",Infoblox,Data Connector,DNS Response,1,,,infoblox-virtual-machine,,192.168.1.201,,,"""client.wns.windows.com. 222 IN CNAME wns.notify.trafficmanager.net. wns.notify.trafficmanager.net. 194 IN A 40.83.247.108 . 150134 IN NS g.root-servers.net. . 150134 IN NS l.root-servers.net. . 150134 IN NS e.root-servers.net. . 150134 IN NS h.root-servers.net. . 150134 IN NS i.root-servers.net. . 150134 IN NS b.root-servers.net. . 150134 IN NS f.root-servers.net. . 150134 IN NS a.root-servers.net. . 150134 IN NS m.root-servers.net. . 150134 IN NS d.root-servers.net. . 150134 IN NS j.root-servers.net. . 150134 IN NS k.root-servers.net. . 150134 IN NS c.root-servers.net. a.root-servers.net. 150134 IN A 198.41.0.4 b.root-servers.net. 150134 IN A 199.9.14.201 c.root-servers.net. 150134 IN A 192.33.4.12 d.root-servers.net. 150134 IN A 199.7.91.13 e.root-servers.net. 150134 IN A 192.203.230.10 f.root-servers.net. 150134 IN A 192.5.5.241 g.root-servers.net. 150134 IN A 192.112.36.4 h.root-servers.net. 150134 IN A 198.97.190.53 i.root-servers.net. 150134 IN A 192.36.148.17 j.root-servers.net. 150134 IN A 192.58.128.30 k.root-servers.net. 150134 IN A 193.0.14.129""",UDP,58700,192.168.1.90,2.1.3,DNS Response IN A NOERROR,InfobloxDNSView=_default;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=2;InfobloxNsCount=13;InfobloxArCount=11,DNS,client.wns.windows.com.,,,,CommonSecurityLog,"{""InfobloxDNSView"":""_default"",""InfobloxDNSQClass"":""IN"",""InfobloxDNSQType"":""A"",""InfobloxDNSQFlags"":""+EV"",""InfobloxDNSRCode"":""NOERROR"",""InfobloxAnCount"":""2"",""InfobloxNsCount"":""13"",""InfobloxArCount"":""11""}",,,,,,,,2,11,,,,,,,,,,,,,,,IN,#NAME?,A,NOERROR,_default,,,,,,13,,,,,,,,,,N/A,,
OpsManager,"10/26/2021, 2:38:45.246 PM",Infoblox,Data Connector,DNS Response,1,,,infoblox-virtual-machine,,192.168.1.201,,,"""client.wns.windows.com. 222 IN CNAME wns.notify.trafficmanager.net. wns.notify.trafficmanager.net. 194 IN A 40.83.247.108 . 150134 IN NS k.root-servers.net. . 150134 IN NS d.root-servers.net. . 150134 IN NS l.root-servers.net. . 150134 IN NS h.root-servers.net. . 150134 IN NS j.root-servers.net. . 150134 IN NS c.root-servers.net. . 150134 IN NS i.root-servers.net. . 150134 IN NS e.root-servers.net. . 150134 IN NS m.root-servers.net. . 150134 IN NS f.root-servers.net. . 150134 IN NS g.root-servers.net. . 150134 IN NS b.root-servers.net. . 150134 IN NS a.root-servers.net. a.root-servers.net. 150134 IN A 198.41.0.4 b.root-servers.net. 150134 IN A 199.9.14.201 c.root-servers.net. 150134 IN A 192.33.4.12 d.root-servers.net. 150134 IN A 199.7.91.13 e.root-servers.net. 150134 IN A 192.203.230.10 f.root-servers.net. 150134 IN A 192.5.5.241 g.root-servers.net. 150134 IN A 192.112.36.4 h.root-servers.net. 150134 IN A 198.97.190.53 i.root-servers.net. 150134 IN A 192.36.148.17 j.root-servers.net. 150134 IN A 192.58.128.30 k.root-servers.net. 150134 IN A 193.0.14.129""",UDP,58700,192.168.1.90,2.1.3,DNS Response IN A NOERROR,InfobloxDNSView=_default;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=2;InfobloxNsCount=13;InfobloxArCount=11,DNS,client.wns.windows.com.,,,,CommonSecurityLog,"{""InfobloxDNSView"":""_default"",""InfobloxDNSQClass"":""IN"",""InfobloxDNSQType"":""A"",""InfobloxDNSQFlags"":""+EV"",""InfobloxDNSRCode"":""NOERROR"",""InfobloxAnCount"":""2"",""InfobloxNsCount"":""13"",""InfobloxArCount"":""11""}",,,,,,,,2,11,,,,,,,,,,,,,,,IN,#NAME?,A,NOERROR,_default,,,,,,13,,,,,,,,,,N/A,,
OpsManager,"10/26/2021, 2:38:50.387 PM",Infoblox,Data Connector,DNS Response,1,,,infoblox-virtual-machine,,,192.168.1.90,,"""client.wns.windows.com. 2124 IN CNAME wns.notify.trafficmanager.net. wns.notify.trafficmanager.net. 222 IN A 40.83.240.146 . 32768 4096 OPT """,TCP,45265,192.168.1.90,2.1.3,DNS Response IN A NOERROR,"InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=2;InfobloxNsCount=0;InfobloxArCount=1;InfobloxB1Region=us-west-1;InfobloxB1ConnectionType=dfp;InfobloxB1OPHName=Sentinel-Demo-DNS+DFP+DHCP;InfobloxB1OPHIPAddress=192.168.1.201;InfobloxB1Network=Sentinel-Demo-DNS+DFP+DHCP (DFP);InfobloxB1SrcOSVersion=;InfobloxB1DHCPFingerprint=;InfobloxB1DNSTags=APP_Microsoft OneDrive,APP_Microsoft Sharepoint,APP_Uncategorized,CAT_Business,CAT_Internet Services,CAT_Software/Hardware",DNS,client.wns.windows.com.,,00:50:56:0b:0f:80,,CommonSecurityLog,"{""InfobloxDNSQClass"":""IN"",""InfobloxDNSQType"":""A"",""InfobloxDNSQFlags"":""+EV"",""InfobloxDNSRCode"":""NOERROR"",""InfobloxAnCount"":""2"",""InfobloxNsCount"":""0"",""InfobloxArCount"":""1"",""InfobloxB1Region"":""us-west-1"",""InfobloxB1ConnectionType"":""dfp"",""InfobloxB1OPHName"":""Sentinel-Demo-DNS+DFP+DHCP"",""InfobloxB1OPHIPAddress"":""192.168.1.201"",""InfobloxB1Network"":""Sentinel-Demo-DNS+DFP+DHCP (DFP)"",""InfobloxB1DNSTags"":""APP_Microsoft OneDrive,APP_Microsoft Sharepoint,APP_Uncategorized,CAT_Business,CAT_Internet Services,CAT_Software/Hardware""}",,,,,,,,2,1,dfp,"APP_Microsoft OneDrive,APP_Microsoft Sharepoint,APP_Uncategorized,CAT_Business,CAT_Internet Services,CAT_Software/Hardware",,,Sentinel-Demo-DNS+DFP+DHCP (DFP),192.168.1.201,Sentinel-Demo-DNS+DFP+DHCP,,,us-west-1,,,,,IN,#NAME?,A,NOERROR,,,,,,,0,,,,,,,,,,N/A,,
OpsManager,"10/26/2021, 2:07:30.270 PM",Infoblox,Data Connector,DNS Response,1,,,infoblox-virtual-machine,,192.168.1.201,,,"""us-east-1.elb.amazonaws.com. 55 IN SOA ns-1119.awsdns-11.org. awsdns-hostmaster.amazon.com. 1 7200 900 1209600 60""",UDP,63104,192.168.1.90,2.1.3,DNS Response IN AAAA NOERROR,InfobloxDNSView=_default;InfobloxDNSQClass=IN;InfobloxDNSQType=AAAA;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=0;InfobloxNsCount=1;InfobloxArCount=0,DNS,proxyserverecs-1736642167.us-east-1.elb.amazonaws.com.,,,,CommonSecurityLog,"{""InfobloxDNSView"":""_default"",""InfobloxDNSQClass"":""IN"",""InfobloxDNSQType"":""AAAA"",""InfobloxDNSQFlags"":""+EV"",""InfobloxDNSRCode"":""NOERROR"",""InfobloxAnCount"":""0"",""InfobloxNsCount"":""1"",""InfobloxArCount"":""0""}",,,,,,,,0,0,,,,,,,,,,,,,,,IN,#NAME?,AAAA,NOERROR,_default,,,,,,1,,,,,,,,,,N/A,,
OpsManager,"10/26/2021, 2:44:00.280 PM",Infoblox,Data Connector,DNS Response,1,,,infoblox-virtual-machine,,192.168.1.201,,,"""ubuntu.com. 1985 IN SOA ns1.canonical.com. hostmaster.canonical.com. 2018054618 10800 3600 604800 3600 . 0 1232 OPT """,UDP,43569,192.168.1.106,2.1.3,DNS Response IN AAAA NOERROR,InfobloxDNSView=_default;InfobloxDNSQClass=IN;InfobloxDNSQType=AAAA;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=0;InfobloxNsCount=1;InfobloxArCount=1,DNS,connectivity-check.ubuntu.com.,,,,CommonSecurityLog,"{""InfobloxDNSView"":""_default"",""InfobloxDNSQClass"":""IN"",""InfobloxDNSQType"":""AAAA"",""InfobloxDNSQFlags"":""+EV"",""InfobloxDNSRCode"":""NOERROR"",""InfobloxAnCount"":""0"",""InfobloxNsCount"":""1"",""InfobloxArCount"":""1""}",,,,,,,,0,1,,,,,,,,,,,,,,,IN,#NAME?,AAAA,NOERROR,_default,,,,,,1,,,,,,,,,,N/A,,
OpsManager,"10/26/2021, 2:44:00.281 PM",Infoblox,Data Connector,DNS Response,1,,,infoblox-virtual-machine,,192.168.1.201,,,"""ubuntu.com. 1985 IN SOA ns1.canonical.com. hostmaster.canonical.com. 2018054618 10800 3600 604800 3600 . 0 1232 OPT """,UDP,38962,192.168.1.106,2.1.3,DNS Response IN AAAA NOERROR,InfobloxDNSView=_default;InfobloxDNSQClass=IN;InfobloxDNSQType=AAAA;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=0;InfobloxNsCount=1;InfobloxArCount=1,DNS,connectivity-check.ubuntu.com.,,,,CommonSecurityLog,"{""InfobloxDNSView"":""_default"",""InfobloxDNSQClass"":""IN"",""InfobloxDNSQType"":""AAAA"",""InfobloxDNSQFlags"":""+EV"",""InfobloxDNSRCode"":""NOERROR"",""InfobloxAnCount"":""0"",""InfobloxNsCount"":""1"",""InfobloxArCount"":""1""}",,,,,,,,0,1,,,,,,,,,,,,,,,IN,#NAME?,AAAA,NOERROR,_default,,,,,,1,,,,,,,,,,N/A,,
OpsManager,"10/26/2021, 2:27:48.928 PM",Infoblox,Data Connector,DNS Response,1,,,infoblox-virtual-machine,,,192.168.1.90,,"""client.wns.windows.com. 2785 IN CNAME wns.notify.trafficmanager.net. wns.notify.trafficmanager.net. 33 IN A 40.83.240.146 . 32768 4096 OPT """,TCP,45226,192.168.1.90,2.1.3,DNS Response IN A NOERROR,"InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=2;InfobloxNsCount=0;InfobloxArCount=1;InfobloxB1Region=us-west-1;InfobloxB1ConnectionType=dfp;InfobloxB1OPHName=Sentinel-Demo-DNS+DFP+DHCP;InfobloxB1OPHIPAddress=192.168.1.201;InfobloxB1Network=Sentinel-Demo-DNS+DFP+DHCP (DFP);InfobloxB1SrcOSVersion=;InfobloxB1DHCPFingerprint=;InfobloxB1DNSTags=APP_Microsoft OneDrive,APP_Microsoft Sharepoint,APP_Uncategorized,CAT_Business,CAT_Internet Services,CAT_Software/Hardware",DNS,client.wns.windows.com.,,00:50:56:0b:0f:80,,CommonSecurityLog,"{""InfobloxDNSQClass"":""IN"",""InfobloxDNSQType"":""A"",""InfobloxDNSQFlags"":""+EV"",""InfobloxDNSRCode"":""NOERROR"",""InfobloxAnCount"":""2"",""InfobloxNsCount"":""0"",""InfobloxArCount"":""1"",""InfobloxB1Region"":""us-west-1"",""InfobloxB1ConnectionType"":""dfp"",""InfobloxB1OPHName"":""Sentinel-Demo-DNS+DFP+DHCP"",""InfobloxB1OPHIPAddress"":""192.168.1.201"",""InfobloxB1Network"":""Sentinel-Demo-DNS+DFP+DHCP (DFP)"",""InfobloxB1DNSTags"":""APP_Microsoft OneDrive,APP_Microsoft Sharepoint,APP_Uncategorized,CAT_Business,CAT_Internet Services,CAT_Software/Hardware""}",,,,,,,,2,1,dfp,"APP_Microsoft OneDrive,APP_Microsoft Sharepoint,APP_Uncategorized,CAT_Business,CAT_Internet Services,CAT_Software/Hardware",,,Sentinel-Demo-DNS+DFP+DHCP (DFP),192.168.1.201,Sentinel-Demo-DNS+DFP+DHCP,,,us-west-1,,,,,IN,#NAME?,A,NOERROR,,,,,,,0,,,,,,,,,,N/A,,
OpsManager,"10/26/2021, 2:27:48.928 PM",Infoblox,Data Connector,DNS Response,1,,,infoblox-virtual-machine,,,192.168.1.90,,"""wns.notify.trafficmanager.net. 45 IN A 40.83.247.108 . 32768 4096 OPT """,TCP,45226,192.168.1.90,2.1.3,DNS Response IN A NOERROR,"InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1;InfobloxB1Region=us-west-1;InfobloxB1ConnectionType=dfp;InfobloxB1OPHName=Sentinel-Demo-DNS+DFP+DHCP;InfobloxB1OPHIPAddress=192.168.1.201;InfobloxB1Network=Sentinel-Demo-DNS+DFP+DHCP (DFP);InfobloxB1SrcOSVersion=;InfobloxB1DHCPFingerprint=;InfobloxB1DNSTags=APP_Uncategorized,CAT_Internet Services",DNS,wns.notify.trafficmanager.net.,,00:50:56:0b:0f:80,,CommonSecurityLog,"{""InfobloxDNSQClass"":""IN"",""InfobloxDNSQType"":""A"",""InfobloxDNSQFlags"":""+EV"",""InfobloxDNSRCode"":""NOERROR"",""InfobloxAnCount"":""1"",""InfobloxNsCount"":""0"",""InfobloxArCount"":""1"",""InfobloxB1Region"":""us-west-1"",""InfobloxB1ConnectionType"":""dfp"",""InfobloxB1OPHName"":""Sentinel-Demo-DNS+DFP+DHCP"",""InfobloxB1OPHIPAddress"":""192.168.1.201"",""InfobloxB1Network"":""Sentinel-Demo-DNS+DFP+DHCP (DFP)"",""InfobloxB1DNSTags"":""APP_Uncategorized,CAT_Internet Services""}",,,,,,,,1,1,dfp,"APP_Uncategorized,CAT_Internet Services",,,Sentinel-Demo-DNS+DFP+DHCP (DFP),192.168.1.201,Sentinel-Demo-DNS+DFP+DHCP,,,us-west-1,,,,,IN,#NAME?,A,NOERROR,,,,,,,0,,,,,,,,,,N/A,,
OpsManager,"10/26/2021, 2:08:57.119 PM",Infoblox,Data Connector,DNS Response,1,,,infoblox-virtual-machine,,,192.168.1.90,,"""go.microsoft.com. 2165 IN CNAME go.microsoft.com.edgekey.net. go.microsoft.com.edgekey.net. 278 IN CNAME e11290.dspg.akamaiedge.net. e11290.dspg.akamaiedge.net. 11 IN A 104.86.5.150 . 32768 4096 OPT """,TCP,40468,192.168.1.90,2.1.3,DNS Response IN A NOERROR,"InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=3;InfobloxNsCount=0;InfobloxArCount=1;InfobloxB1Region=us-west-1;InfobloxB1ConnectionType=dfp;InfobloxB1OPHName=Sentinel-Demo-DNS+DFP+DHCP;InfobloxB1OPHIPAddress=192.168.1.201;InfobloxB1Network=Sentinel-Demo-DNS+DFP+DHCP (DFP);InfobloxB1SrcOSVersion=;InfobloxB1DHCPFingerprint=;InfobloxB1DNSTags=APP_Microsoft 365,APP_Uncategorized,CAT_Business,CAT_Content Server,CAT_Software/Hardware",DNS,go.microsoft.com.,,00:50:56:0b:0f:80,,CommonSecurityLog,"{""InfobloxDNSQClass"":""IN"",""InfobloxDNSQType"":""A"",""InfobloxDNSQFlags"":""+EV"",""InfobloxDNSRCode"":""NOERROR"",""InfobloxAnCount"":""3"",""InfobloxNsCount"":""0"",""InfobloxArCount"":""1"",""InfobloxB1Region"":""us-west-1"",""InfobloxB1ConnectionType"":""dfp"",""InfobloxB1OPHName"":""Sentinel-Demo-DNS+DFP+DHCP"",""InfobloxB1OPHIPAddress"":""192.168.1.201"",""InfobloxB1Network"":""Sentinel-Demo-DNS+DFP+DHCP (DFP)"",""InfobloxB1DNSTags"":""APP_Microsoft 365,APP_Uncategorized,CAT_Business,CAT_Content Server,CAT_Software/Hardware""}",,,,,,,,3,1,dfp,"APP_Microsoft 365,APP_Uncategorized,CAT_Business,CAT_Content Server,CAT_Software/Hardware",,,Sentinel-Demo-DNS+DFP+DHCP (DFP),192.168.1.201,Sentinel-Demo-DNS+DFP+DHCP,,,us-west-1,,,,,IN,#NAME?,A,NOERROR,,,,,,,0,,,,,,,,,,N/A,,
OpsManager,"10/26/2021, 2:08:57.119 PM",Infoblox,Data Connector,DNS Response,1,,,infoblox-virtual-machine,,,192.168.1.90,,"""go.microsoft.com.edgekey.net. 256 IN CNAME e11290.dspg.akamaiedge.net. e11290.dspg.akamaiedge.net. 7 IN A 104.86.5.150 . 32768 4096 OPT """,TCP,40468,192.168.1.90,2.1.3,DNS Response IN A NOERROR,"InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=2;InfobloxNsCount=0;InfobloxArCount=1;InfobloxB1Region=us-west-1;InfobloxB1ConnectionType=dfp;InfobloxB1OPHName=Sentinel-Demo-DNS+DFP+DHCP;InfobloxB1OPHIPAddress=192.168.1.201;InfobloxB1Network=Sentinel-Demo-DNS+DFP+DHCP (DFP);InfobloxB1SrcOSVersion=;InfobloxB1DHCPFingerprint=;InfobloxB1DNSTags=APP_Uncategorized,CAT_Content Server",DNS,go.microsoft.com.edgekey.net.,,00:50:56:0b:0f:80,,CommonSecurityLog,"{""InfobloxDNSQClass"":""IN"",""InfobloxDNSQType"":""A"",""InfobloxDNSQFlags"":""+EV"",""InfobloxDNSRCode"":""NOERROR"",""InfobloxAnCount"":""2"",""InfobloxNsCount"":""0"",""InfobloxArCount"":""1"",""InfobloxB1Region"":""us-west-1"",""InfobloxB1ConnectionType"":""dfp"",""InfobloxB1OPHName"":""Sentinel-Demo-DNS+DFP+DHCP"",""InfobloxB1OPHIPAddress"":""192.168.1.201"",""InfobloxB1Network"":""Sentinel-Demo-DNS+DFP+DHCP (DFP)"",""InfobloxB1DNSTags"":""APP_Uncategorized,CAT_Content Server""}",,,,,,,,2,1,dfp,"APP_Uncategorized,CAT_Content Server",,,Sentinel-Demo-DNS+DFP+DHCP (DFP),192.168.1.201,Sentinel-Demo-DNS+DFP+DHCP,,,us-west-1,,,,,IN,#NAME?,A,NOERROR,,,,,,,0,,,,,,,,,,N/A,,
OpsManager,"10/26/2021, 2:08:57.119 PM",Infoblox,Data Connector,DNS Response,1,,,infoblox-virtual-machine,,,192.168.1.90,,"""e11290.dspg.akamaiedge.net. 8 IN A 104.86.5.150 . 32768 4096 OPT """,TCP,40468,192.168.1.90,2.1.3,DNS Response IN A NOERROR,"InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1;InfobloxB1Region=us-west-1;InfobloxB1ConnectionType=dfp;InfobloxB1OPHName=Sentinel-Demo-DNS+DFP+DHCP;InfobloxB1OPHIPAddress=192.168.1.201;InfobloxB1Network=Sentinel-Demo-DNS+DFP+DHCP (DFP);InfobloxB1SrcOSVersion=;InfobloxB1DHCPFingerprint=;InfobloxB1DNSTags=APP_Uncategorized,CAT_Content Server",DNS,e11290.dspg.akamaiedge.net.,,00:50:56:0b:0f:80,,CommonSecurityLog,"{""InfobloxDNSQClass"":""IN"",""InfobloxDNSQType"":""A"",""InfobloxDNSQFlags"":""+EV"",""InfobloxDNSRCode"":""NOERROR"",""InfobloxAnCount"":""1"",""InfobloxNsCount"":""0"",""InfobloxArCount"":""1"",""InfobloxB1Region"":""us-west-1"",""InfobloxB1ConnectionType"":""dfp"",""InfobloxB1OPHName"":""Sentinel-Demo-DNS+DFP+DHCP"",""InfobloxB1OPHIPAddress"":""192.168.1.201"",""InfobloxB1Network"":""Sentinel-Demo-DNS+DFP+DHCP (DFP)"",""InfobloxB1DNSTags"":""APP_Uncategorized,CAT_Content Server""}",,,,,,,,1,1,dfp,"APP_Uncategorized,CAT_Content Server",,,Sentinel-Demo-DNS+DFP+DHCP (DFP),192.168.1.201,Sentinel-Demo-DNS+DFP+DHCP,,,us-west-1,,,,,IN,#NAME?,A,NOERROR,,,,,,,0,,,,,,,,,,N/A,,
OpsManager,"10/26/2021, 2:08:57.119 PM",Infoblox,Data Connector,DNS Response,1,,,infoblox-virtual-machine,,,192.168.1.90,,"""settings-win.data.microsoft.com. 2359 IN CNAME settingsfd-geo.trafficmanager.net. settingsfd-geo.trafficmanager.net. 27 IN A 52.185.211.133 . 32768 4096 OPT """,TCP,40468,192.168.1.90,2.1.3,DNS Response IN A NOERROR,"InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=2;InfobloxNsCount=0;InfobloxArCount=1;InfobloxB1Region=us-west-1;InfobloxB1ConnectionType=dfp;InfobloxB1OPHName=Sentinel-Demo-DNS+DFP+DHCP;InfobloxB1OPHIPAddress=192.168.1.201;InfobloxB1Network=Sentinel-Demo-DNS+DFP+DHCP (DFP);InfobloxB1SrcOSVersion=;InfobloxB1DHCPFingerprint=;InfobloxB1DNSTags=APP_Uncategorized,CAT_Business,CAT_Internet Services,CAT_Software/Hardware",DNS,settings-win.data.microsoft.com.,,00:50:56:0b:0f:80,,CommonSecurityLog,"{""InfobloxDNSQClass"":""IN"",""InfobloxDNSQType"":""A"",""InfobloxDNSQFlags"":""+EV"",""InfobloxDNSRCode"":""NOERROR"",""InfobloxAnCount"":""2"",""InfobloxNsCount"":""0"",""InfobloxArCount"":""1"",""InfobloxB1Region"":""us-west-1"",""InfobloxB1ConnectionType"":""dfp"",""InfobloxB1OPHName"":""Sentinel-Demo-DNS+DFP+DHCP"",""InfobloxB1OPHIPAddress"":""192.168.1.201"",""InfobloxB1Network"":""Sentinel-Demo-DNS+DFP+DHCP (DFP)"",""InfobloxB1DNSTags"":""APP_Uncategorized,CAT_Business,CAT_Internet Services,CAT_Software/Hardware""}",,,,,,,,2,1,dfp,"APP_Uncategorized,CAT_Business,CAT_Internet Services,CAT_Software/Hardware",,,Sentinel-Demo-DNS+DFP+DHCP (DFP),192.168.1.201,Sentinel-Demo-DNS+DFP+DHCP,,,us-west-1,,,,,IN,#NAME?,A,NOERROR,,,,,,,0,,,,,,,,,,N/A,,
OpsManager,"10/26/2021, 2:09:00.415 PM",Infoblox,Data Connector,DNS Response,1,,,infoblox-virtual-machine,,192.168.1.201,,,"""go.microsoft.com. 11 IN CNAME go.microsoft.com.edgekey.net. go.microsoft.com.edgekey.net. 7 IN CNAME e11290.dspg.akamaiedge.net. e11290.dspg.akamaiedge.net. 8 IN A 104.86.5.150 . 151925 IN NS b.root-servers.net. . 151925 IN NS e.root-servers.net. . 151925 IN NS l.root-servers.net. . 151925 IN NS i.root-servers.net. . 151925 IN NS k.root-servers.net. . 151925 IN NS d.root-servers.net. . 151925 IN NS c.root-servers.net. . 151925 IN NS a.root-servers.net. . 151925 IN NS f.root-servers.net. . 151925 IN NS m.root-servers.net. . 151925 IN NS h.root-servers.net. . 151925 IN NS j.root-servers.net. . 151925 IN NS g.root-servers.net. a.root-servers.net. 151925 IN A 198.41.0.4 b.root-servers.net. 151925 IN A 199.9.14.201 c.root-servers.net. 151925 IN A 192.33.4.12 d.root-servers.net. 151925 IN A 199.7.91.13 e.root-servers.net. 151925 IN A 192.203.230.10 f.root-servers.net. 151925 IN A 192.5.5.241 g.root-servers.net. 151925 IN A 192.112.36.4 h.root-servers.net. 151925 IN A 198.97.190.53 i.root-servers.net. 151925 IN A 192.36.148.17""",UDP,58238,192.168.1.90,2.1.3,DNS Response IN A NOERROR,InfobloxDNSView=_default;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=3;InfobloxNsCount=13;InfobloxArCount=9,DNS,go.microsoft.com.,,,,CommonSecurityLog,"{""InfobloxDNSView"":""_default"",""InfobloxDNSQClass"":""IN"",""InfobloxDNSQType"":""A"",""InfobloxDNSQFlags"":""+EV"",""InfobloxDNSRCode"":""NOERROR"",""InfobloxAnCount"":""3"",""InfobloxNsCount"":""13"",""InfobloxArCount"":""9""}",,,,,,,,3,9,,,,,,,,,,,,,,,IN,#NAME?,A,NOERROR,_default,,,,,,13,,,,,,,,,,N/A,,
OpsManager,"10/26/2021, 2:09:00.415 PM",Infoblox,Data Connector,DNS Response,1,,,infoblox-virtual-machine,,192.168.1.201,,,"""ubuntu.com. 1113 IN SOA ns1.canonical.com. hostmaster.canonical.com. 2018054618 10800 3600 604800 3600 . 0 1232 OPT """,UDP,42027,192.168.1.106,2.1.3,DNS Response IN AAAA NOERROR,InfobloxDNSView=_default;InfobloxDNSQClass=IN;InfobloxDNSQType=AAAA;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=0;InfobloxNsCount=1;InfobloxArCount=1,DNS,connectivity-check.ubuntu.com.,,,,CommonSecurityLog,"{""InfobloxDNSView"":""_default"",""InfobloxDNSQClass"":""IN"",""InfobloxDNSQType"":""AAAA"",""InfobloxDNSQFlags"":""+EV"",""InfobloxDNSRCode"":""NOERROR"",""InfobloxAnCount"":""0"",""InfobloxNsCount"":""1"",""InfobloxArCount"":""1""}",,,,,,,,0,1,,,,,,,,,,,,,,,IN,#NAME?,AAAA,NOERROR,_default,,,,,,1,,,,,,,,,,N/A,,
OpsManager,"10/26/2021, 2:09:00.415 PM",Infoblox,Data Connector,DNS Response,1,,,infoblox-virtual-machine,,192.168.1.201,,,"""settings-win.data.microsoft.com. 27 IN CNAME settingsfd-geo.trafficmanager.net. settingsfd-geo.trafficmanager.net. 14 IN A 52.137.106.217 . 151925 IN NS h.root-servers.net. . 151925 IN NS g.root-servers.net. . 151925 IN NS j.root-servers.net. . 151925 IN NS m.root-servers.net. . 151925 IN NS c.root-servers.net. . 151925 IN NS k.root-servers.net. . 151925 IN NS b.root-servers.net. . 151925 IN NS d.root-servers.net. . 151925 IN NS a.root-servers.net. . 151925 IN NS f.root-servers.net. . 151925 IN NS i.root-servers.net. . 151925 IN NS e.root-servers.net. . 151925 IN NS l.root-servers.net. a.root-servers.net. 151925 IN A 198.41.0.4 b.root-servers.net. 151925 IN A 199.9.14.201 c.root-servers.net. 151925 IN A 192.33.4.12 d.root-servers.net. 151925 IN A 199.7.91.13 e.root-servers.net. 151925 IN A 192.203.230.10 f.root-servers.net. 151925 IN A 192.5.5.241 g.root-servers.net. 151925 IN A 192.112.36.4 h.root-servers.net. 151925 IN A 198.97.190.53 i.root-servers.net. 151925 IN A 192.36.148.17 j.root-servers.net. 151925 IN A 192.58.128.30 k.root-servers.net. 151925 IN A 193.0.14.129""",UDP,63617,192.168.1.90,2.1.3,DNS Response IN A NOERROR,InfobloxDNSView=_default;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=2;InfobloxNsCount=13;InfobloxArCount=11,DNS,settings-win.data.microsoft.com.,,,,CommonSecurityLog,"{""InfobloxDNSView"":""_default"",""InfobloxDNSQClass"":""IN"",""InfobloxDNSQType"":""A"",""InfobloxDNSQFlags"":""+EV"",""InfobloxDNSRCode"":""NOERROR"",""InfobloxAnCount"":""2"",""InfobloxNsCount"":""13"",""InfobloxArCount"":""11""}",,,,,,,,2,11,,,,,,,,,,,,,,,IN,#NAME?,A,NOERROR,_default,,,,,,13,,,,,,,,,,N/A,,
OpsManager,"10/26/2021, 2:09:00.415 PM",Infoblox,Data Connector,DNS Response,1,,,infoblox-virtual-machine,,192.168.1.201,,,"""ubuntu.com. 1113 IN SOA ns1.canonical.com. hostmaster.canonical.com. 2018054618 10800 3600 604800 3600 . 0 1232 OPT """,UDP,60509,192.168.1.106,2.1.3,DNS Response IN AAAA NOERROR,InfobloxDNSView=_default;InfobloxDNSQClass=IN;InfobloxDNSQType=AAAA;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=0;InfobloxNsCount=1;InfobloxArCount=1,DNS,connectivity-check.ubuntu.com.,,,,CommonSecurityLog,"{""InfobloxDNSView"":""_default"",""InfobloxDNSQClass"":""IN"",""InfobloxDNSQType"":""AAAA"",""InfobloxDNSQFlags"":""+EV"",""InfobloxDNSRCode"":""NOERROR"",""InfobloxAnCount"":""0"",""InfobloxNsCount"":""1"",""InfobloxArCount"":""1""}",,,,,,,,0,1,,,,,,,,,,,,,,,IN,#NAME?,AAAA,NOERROR,_default,,,,,,1,,,,,,,,,,N/A,,
OpsManager,"10/26/2021, 2:09:30.220 PM",Infoblox,Data Connector,DNS Response,1,,,infoblox-virtual-machine,,192.168.1.201,,,"""csp.infoblox.com. 12 IN CNAME wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 33 IN A 18.235.149.1 wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 33 IN A 18.233.189.178 wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 33 IN A 18.209.243.220 . 151889 IN NS b.root-servers.net. . 151889 IN NS j.root-servers.net. . 151889 IN NS e.root-servers.net. . 151889 IN NS l.root-servers.net. . 151889 IN NS a.root-servers.net. . 151889 IN NS f.root-servers.net. . 151889 IN NS d.root-servers.net. . 151889 IN NS c.root-servers.net. . 151889 IN NS g.root-servers.net. . 151889 IN NS h.root-servers.net. . 151889 IN NS m.root-servers.net. . 151889 IN NS i.root-servers.net. . 151889 IN NS k.root-servers.net. a.root-servers.net. 151889 IN A 198.41.0.4 b.root-servers.net. 151889 IN A 199.9.14.201 c.root-servers.net. 151889 IN A 192.33.4.12 d.root-servers.net. 151889 IN A 199.7.91.13 e.root-servers.net. 151889 IN A 192.203.230.10 f.root-servers.net. 151889 IN A 192.5.5.241 g.root-servers.net. 151889 IN A 192.112.36.4 h.root-servers.net. 151889 IN A 198.97.190.53""",UDP,63618,192.168.1.90,2.1.3,DNS Response IN A NOERROR,InfobloxDNSView=_default;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=4;InfobloxNsCount=13;InfobloxArCount=8,DNS,csp.infoblox.com.,,,,CommonSecurityLog,"{""InfobloxDNSView"":""_default"",""InfobloxDNSQClass"":""IN"",""InfobloxDNSQType"":""A"",""InfobloxDNSQFlags"":""+EV"",""InfobloxDNSRCode"":""NOERROR"",""InfobloxAnCount"":""4"",""InfobloxNsCount"":""13"",""InfobloxArCount"":""8""}",,,,,,,,4,8,,,,,,,,,,,,,,,IN,#NAME?,A,NOERROR,_default,,,,,,13,,,,,,,,,,N/A,,
OpsManager,"10/26/2021, 2:09:30.221 PM",Infoblox,Data Connector,DNS Response,1,,,infoblox-virtual-machine,,192.168.1.201,,,"""probe.infoblox.com. 0 IN TXT \""ABYZX9GLUYQUVWDQZIECEGAFF3NC89ZE\""""",UDP,63620,192.168.1.90,2.1.3,DNS Response IN TXT NOERROR,InfobloxDNSView=_default;InfobloxDNSQClass=IN;InfobloxDNSQType=TXT;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=0,DNS,probe.infoblox.com.,,,,CommonSecurityLog,"{""InfobloxDNSView"":""_default"",""InfobloxDNSQClass"":""IN"",""InfobloxDNSQType"":""TXT"",""InfobloxDNSQFlags"":""+EV"",""InfobloxDNSRCode"":""NOERROR"",""InfobloxAnCount"":""1"",""InfobloxNsCount"":""0"",""InfobloxArCount"":""0""}",,,,,,,,1,0,,,,,,,,,,,,,,,IN,#NAME?,TXT,NOERROR,_default,,,,,,0,,,,,,,,,,N/A,,
OpsManager,"10/26/2021, 2:09:30.388 PM",Infoblox,Data Connector,DNS Response,1,,,infoblox-virtual-machine,,192.168.1.201,192.168.1.90,,"""probe.infoblox.com. 0 IN TXT \""ABYZX9GLUYQUVWDQZIECEGAFF3NC89ZE\""""",UDP,63620,192.168.1.90,2.1.3,DNS Response IN TXT NOERROR,InfobloxDNSView=_default;InfobloxDNSQClass=IN;InfobloxDNSQType=TXT;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=0;InfobloxB1Region=;InfobloxB1ConnectionType=dfp;InfobloxB1OPHName=Sentinel-Demo-DNS+DFP+DHCP;InfobloxB1OPHIPAddress=192.168.1.201;InfobloxB1Network=Sentinel-Demo-DNS+DFP+DHCP (DFP);InfobloxB1SrcOSVersion=;InfobloxB1DHCPFingerprint=;InfobloxB1DNSTags=,DNS,probe.infoblox.com.,,00:50:56:0b:0f:80,,CommonSecurityLog,"{""InfobloxDNSView"":""_default"",""InfobloxDNSQClass"":""IN"",""InfobloxDNSQType"":""TXT"",""InfobloxDNSQFlags"":""+EV"",""InfobloxDNSRCode"":""NOERROR"",""InfobloxAnCount"":""1"",""InfobloxNsCount"":""0"",""InfobloxArCount"":""0"",""InfobloxB1ConnectionType"":""dfp"",""InfobloxB1OPHName"":""Sentinel-Demo-DNS+DFP+DHCP"",""InfobloxB1OPHIPAddress"":""192.168.1.201"",""InfobloxB1Network"":""Sentinel-Demo-DNS+DFP+DHCP (DFP)""}",,,,,,,,1,0,dfp,,,,Sentinel-Demo-DNS+DFP+DHCP (DFP),192.168.1.201,Sentinel-Demo-DNS+DFP+DHCP,,,,,,,,IN,#NAME?,TXT,NOERROR,_default,,,,,,0,,,,,,,,,,N/A,,
OpsManager,"10/26/2021, 2:14:05.910 PM",Infoblox,Data Connector,DNS Response,1,,,infoblox-virtual-machine,,,192.168.1.106,,"""ubuntu.com. 834 IN SOA ns1.canonical.com. hostmaster.canonical.com. 2018054618 10800 3600 604800 3600 . 32768 4096 OPT """,TCP,47767,192.168.1.106,2.1.3,DNS Response IN AAAA NOERROR,"InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=AAAA;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=0;InfobloxNsCount=1;InfobloxArCount=1;InfobloxB1Region=us-west-1;InfobloxB1ConnectionType=dfp;InfobloxB1OPHName=Sentinel-Demo-DNS+DFP+DHCP;InfobloxB1OPHIPAddress=192.168.1.201;InfobloxB1Network=Sentinel-Demo-DNS+DFP+DHCP (DFP);InfobloxB1SrcOSVersion=;InfobloxB1DHCPFingerprint=;InfobloxB1DNSTags=APP_Uncategorized,CAT_Software/Hardware",DNS,connectivity-check.ubuntu.com.,,00:50:56:0b:0f:15,,CommonSecurityLog,"{""InfobloxDNSQClass"":""IN"",""InfobloxDNSQType"":""AAAA"",""InfobloxDNSQFlags"":""+EV"",""InfobloxDNSRCode"":""NOERROR"",""InfobloxAnCount"":""0"",""InfobloxNsCount"":""1"",""InfobloxArCount"":""1"",""InfobloxB1Region"":""us-west-1"",""InfobloxB1ConnectionType"":""dfp"",""InfobloxB1OPHName"":""Sentinel-Demo-DNS+DFP+DHCP"",""InfobloxB1OPHIPAddress"":""192.168.1.201"",""InfobloxB1Network"":""Sentinel-Demo-DNS+DFP+DHCP (DFP)"",""InfobloxB1DNSTags"":""APP_Uncategorized,CAT_Software/Hardware""}",,,,,,,,0,1,dfp,"APP_Uncategorized,CAT_Software/Hardware",,,Sentinel-Demo-DNS+DFP+DHCP (DFP),192.168.1.201,Sentinel-Demo-DNS+DFP+DHCP,,,us-west-1,,,,,IN,#NAME?,AAAA,NOERROR,,,,,,,1,,,,,,,,,,N/A,,
OpsManager,"10/26/2021, 2:28:30.237 PM",Infoblox,Data Connector,DNS Response,1,,,infoblox-virtual-machine,,192.168.1.201,,,"""www.amazon.com. 0 IN AAAA 2600:1f18:1043:dc00:8083:68e:ef0f:46de . 0 1232 OPT """,UDP,42801,192.168.1.106,2.1.3,DNS Response IN AAAA NOERROR,InfobloxDNSView=_default;InfobloxDNSQClass=IN;InfobloxDNSQType=AAAA;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1,DNS,www.amazon.com.,,,,CommonSecurityLog,"{""InfobloxDNSView"":""_default"",""InfobloxDNSQClass"":""IN"",""InfobloxDNSQType"":""AAAA"",""InfobloxDNSQFlags"":""+EV"",""InfobloxDNSRCode"":""NOERROR"",""InfobloxAnCount"":""1"",""InfobloxNsCount"":""0"",""InfobloxArCount"":""1""}",,,,,,,,1,1,,,,,,,,,,,,,,,IN,#NAME?,AAAA,NOERROR,_default,,,,,,0,,,,,,,,,,N/A,,
OpsManager,"10/26/2021, 2:28:30.237 PM",Infoblox,Data Connector,DNS Response,1,,,infoblox-virtual-machine,,192.168.1.201,,,"""www.amazon.com. 0 IN A 3.215.231.251 . 0 1232 OPT """,UDP,48634,192.168.1.106,2.1.3,DNS Response IN A NOERROR,InfobloxDNSView=_default;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1,DNS,www.amazon.com.,,,,CommonSecurityLog,"{""InfobloxDNSView"":""_default"",""InfobloxDNSQClass"":""IN"",""InfobloxDNSQType"":""A"",""InfobloxDNSQFlags"":""+EV"",""InfobloxDNSRCode"":""NOERROR"",""InfobloxAnCount"":""1"",""InfobloxNsCount"":""0"",""InfobloxArCount"":""1""}",,,,,,,,1,1,,,,,,,,,,,,,,,IN,#NAME?,A,NOERROR,_default,,,,,,0,,,,,,,,,,N/A,,
OpsManager,"10/26/2021, 2:38:50.388 PM",Infoblox,Data Connector,DNS Response,1,,,infoblox-virtual-machine,,,192.168.1.90,,"""wns.notify.trafficmanager.net. 194 IN A 40.83.247.108 . 32768 4096 OPT """,TCP,45265,192.168.1.90,2.1.3,DNS Response IN A NOERROR,"InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1;InfobloxB1Region=us-west-1;InfobloxB1ConnectionType=dfp;InfobloxB1OPHName=Sentinel-Demo-DNS+DFP+DHCP;InfobloxB1OPHIPAddress=192.168.1.201;InfobloxB1Network=Sentinel-Demo-DNS+DFP+DHCP (DFP);InfobloxB1SrcOSVersion=;InfobloxB1DHCPFingerprint=;InfobloxB1DNSTags=APP_Uncategorized,CAT_Internet Services",DNS,wns.notify.trafficmanager.net.,,00:50:56:0b:0f:80,,CommonSecurityLog,"{""InfobloxDNSQClass"":""IN"",""InfobloxDNSQType"":""A"",""InfobloxDNSQFlags"":""+EV"",""InfobloxDNSRCode"":""NOERROR"",""InfobloxAnCount"":""1"",""InfobloxNsCount"":""0"",""InfobloxArCount"":""1"",""InfobloxB1Region"":""us-west-1"",""InfobloxB1ConnectionType"":""dfp"",""InfobloxB1OPHName"":""Sentinel-Demo-DNS+DFP+DHCP"",""InfobloxB1OPHIPAddress"":""192.168.1.201"",""InfobloxB1Network"":""Sentinel-Demo-DNS+DFP+DHCP (DFP)"",""InfobloxB1DNSTags"":""APP_Uncategorized,CAT_Internet Services""}",,,,,,,,1,1,dfp,"APP_Uncategorized,CAT_Internet Services",,,Sentinel-Demo-DNS+DFP+DHCP (DFP),192.168.1.201,Sentinel-Demo-DNS+DFP+DHCP,,,us-west-1,,,,,IN,#NAME?,A,NOERROR,,,,,,,0,,,,,,,,,,N/A,,
OpsManager,"10/26/2021, 2:39:00.326 PM",Infoblox,Data Connector,DNS Response,1,,,infoblox-virtual-machine,,192.168.1.201,,,"""ubuntu.com. 2285 IN SOA ns1.canonical.com. hostmaster.canonical.com. 2018054618 10800 3600 604800 3600 . 0 1232 OPT """,UDP,53671,192.168.1.106,2.1.3,DNS Response IN AAAA NOERROR,InfobloxDNSView=_default;InfobloxDNSQClass=IN;InfobloxDNSQType=AAAA;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=0;InfobloxNsCount=1;InfobloxArCount=1,DNS,connectivity-check.ubuntu.com.,,,,CommonSecurityLog,"{""InfobloxDNSView"":""_default"",""InfobloxDNSQClass"":""IN"",""InfobloxDNSQType"":""AAAA"",""InfobloxDNSQFlags"":""+EV"",""InfobloxDNSRCode"":""NOERROR"",""InfobloxAnCount"":""0"",""InfobloxNsCount"":""1"",""InfobloxArCount"":""1""}",,,,,,,,0,1,,,,,,,,,,,,,,,IN,#NAME?,AAAA,NOERROR,_default,,,,,,1,,,,,,,,,,N/A,,
OpsManager,"10/26/2021, 2:28:30.238 PM",Infoblox,Data Connector,DNS Response,1,,,infoblox-virtual-machine,,192.168.1.201,,,"""www.ebay.com. 0 IN AAAA 2600:1f18:1043:dc00:8083:68e:ef0f:46de . 0 1232 OPT """,UDP,53682,192.168.1.106,2.1.3,DNS Response IN AAAA NOERROR,InfobloxDNSView=_default;InfobloxDNSQClass=IN;InfobloxDNSQType=AAAA;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1,DNS,www.ebay.com.,,,,CommonSecurityLog,"{""InfobloxDNSView"":""_default"",""InfobloxDNSQClass"":""IN"",""InfobloxDNSQType"":""AAAA"",""InfobloxDNSQFlags"":""+EV"",""InfobloxDNSRCode"":""NOERROR"",""InfobloxAnCount"":""1"",""InfobloxNsCount"":""0"",""InfobloxArCount"":""1""}",,,,,,,,1,1,,,,,,,,,,,,,,,IN,#NAME?,AAAA,NOERROR,_default,,,,,,0,,,,,,,,,,N/A,,
OpsManager,"10/26/2021, 2:28:30.238 PM",Infoblox,Data Connector,DNS Response,1,,,infoblox-virtual-machine,,192.168.1.201,,,"""www.ebay.com. 0 IN A 3.215.231.251 . 0 1232 OPT """,UDP,35508,192.168.1.106,2.1.3,DNS Response IN A NOERROR,InfobloxDNSView=_default;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1,DNS,www.ebay.com.,,,,CommonSecurityLog,"{""InfobloxDNSView"":""_default"",""InfobloxDNSQClass"":""IN"",""InfobloxDNSQType"":""A"",""InfobloxDNSQFlags"":""+EV"",""InfobloxDNSRCode"":""NOERROR"",""InfobloxAnCount"":""1"",""InfobloxNsCount"":""0"",""InfobloxArCount"":""1""}",,,,,,,,1,1,,,,,,,,,,,,,,,IN,#NAME?,A,NOERROR,_default,,,,,,0,,,,,,,,,,N/A,,
OpsManager,"10/26/2021, 2:28:38.819 PM",Infoblox,Data Connector,DNS Response,1,,,infoblox-virtual-machine,,,192.168.1.106,,"""services.mozilla.com. 356 IN SOA ns-679.awsdns-20.net. awsdns-hostmaster.amazon.com. 1 7200 900 1209600 86400 . 32768 4096 OPT """,TCP,31846,192.168.1.106,2.1.3,DNS Response IN AAAA NOERROR,"InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=AAAA;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=0;InfobloxNsCount=1;InfobloxArCount=1;InfobloxB1Region=us-west-1;InfobloxB1ConnectionType=dfp;InfobloxB1OPHName=Sentinel-Demo-DNS+DFP+DHCP;InfobloxB1OPHIPAddress=192.168.1.201;InfobloxB1Network=Sentinel-Demo-DNS+DFP+DHCP (DFP);InfobloxB1SrcOSVersion=;InfobloxB1DHCPFingerprint=;InfobloxB1DNSTags=APP_Uncategorized,CAT_Software/Hardware",DNS,contile.services.mozilla.com.,,00:50:56:0b:0f:15,,CommonSecurityLog,"{""InfobloxDNSQClass"":""IN"",""InfobloxDNSQType"":""AAAA"",""InfobloxDNSQFlags"":""+EV"",""InfobloxDNSRCode"":""NOERROR"",""InfobloxAnCount"":""0"",""InfobloxNsCount"":""1"",""InfobloxArCount"":""1"",""InfobloxB1Region"":""us-west-1"",""InfobloxB1ConnectionType"":""dfp"",""InfobloxB1OPHName"":""Sentinel-Demo-DNS+DFP+DHCP"",""InfobloxB1OPHIPAddress"":""192.168.1.201"",""InfobloxB1Network"":""Sentinel-Demo-DNS+DFP+DHCP (DFP)"",""InfobloxB1DNSTags"":""APP_Uncategorized,CAT_Software/Hardware""}",,,,,,,,0,1,dfp,"APP_Uncategorized,CAT_Software/Hardware",,,Sentinel-Demo-DNS+DFP+DHCP (DFP),192.168.1.201,Sentinel-Demo-DNS+DFP+DHCP,,,us-west-1,,,,,IN,#NAME?,AAAA,NOERROR,,,,,,,1,,,,,,,,,,N/A,,
OpsManager,"10/26/2021, 2:39:00.326 PM",Infoblox,Data Connector,DNS Response,1,,,infoblox-virtual-machine,,192.168.1.201,,,"""ubuntu.com. 2285 IN SOA ns1.canonical.com. hostmaster.canonical.com. 2018054618 10800 3600 604800 3600 . 0 1232 OPT """,UDP,57705,192.168.1.106,2.1.3,DNS Response IN AAAA NOERROR,InfobloxDNSView=_default;InfobloxDNSQClass=IN;InfobloxDNSQType=AAAA;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=0;InfobloxNsCount=1;InfobloxArCount=1,DNS,connectivity-check.ubuntu.com.,,,,CommonSecurityLog,"{""InfobloxDNSView"":""_default"",""InfobloxDNSQClass"":""IN"",""InfobloxDNSQType"":""AAAA"",""InfobloxDNSQFlags"":""+EV"",""InfobloxDNSRCode"":""NOERROR"",""InfobloxAnCount"":""0"",""InfobloxNsCount"":""1"",""InfobloxArCount"":""1""}",,,,,,,,0,1,,,,,,,,,,,,,,,IN,#NAME?,AAAA,NOERROR,_default,,,,,,1,,,,,,,,,,N/A,,
OpsManager,"10/26/2021, 2:27:52.295 PM",Infoblox,Data Connector,DNS Response,1,,,infoblox-virtual-machine,,,192.168.1.90,,"""arc.msn.com. 20755 IN CNAME arc.trafficmanager.net. arc.trafficmanager.net. 46 IN CNAME iris-de-prod-azsc-wus2-b.westus2.cloudapp.azure.com. iris-de-prod-azsc-wus2-b.westus2.cloudapp.azure.com. 3 IN A 20.69.130.185 . 32768 4096 OPT """,TCP,45226,192.168.1.90,2.1.3,DNS Response IN A NOERROR,"InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=3;InfobloxNsCount=0;InfobloxArCount=1;InfobloxB1Region=us-west-1;InfobloxB1ConnectionType=dfp;InfobloxB1OPHName=Sentinel-Demo-DNS+DFP+DHCP;InfobloxB1OPHIPAddress=192.168.1.201;InfobloxB1Network=Sentinel-Demo-DNS+DFP+DHCP (DFP);InfobloxB1SrcOSVersion=;InfobloxB1DHCPFingerprint=;InfobloxB1DNSTags=APP_Uncategorized,CAT_Internet Services,CAT_Portal Sites",DNS,arc.msn.com.,,00:50:56:0b:0f:80,,CommonSecurityLog,"{""InfobloxDNSQClass"":""IN"",""InfobloxDNSQType"":""A"",""InfobloxDNSQFlags"":""+EV"",""InfobloxDNSRCode"":""NOERROR"",""InfobloxAnCount"":""3"",""InfobloxNsCount"":""0"",""InfobloxArCount"":""1"",""InfobloxB1Region"":""us-west-1"",""InfobloxB1ConnectionType"":""dfp"",""InfobloxB1OPHName"":""Sentinel-Demo-DNS+DFP+DHCP"",""InfobloxB1OPHIPAddress"":""192.168.1.201"",""InfobloxB1Network"":""Sentinel-Demo-DNS+DFP+DHCP (DFP)"",""InfobloxB1DNSTags"":""APP_Uncategorized,CAT_Internet Services,CAT_Portal Sites""}",,,,,,,,3,1,dfp,"APP_Uncategorized,CAT_Internet Services,CAT_Portal Sites",,,Sentinel-Demo-DNS+DFP+DHCP (DFP),192.168.1.201,Sentinel-Demo-DNS+DFP+DHCP,,,us-west-1,,,,,IN,#NAME?,A,NOERROR,,,,,,,0,,,,,,,,,,N/A,,
OpsManager,"10/26/2021, 2:40:00.290 PM",Infoblox,Data Connector,DNS Response,1,,,infoblox-virtual-machine,,192.168.1.201,,,"""probe.infoblox.com. 0 IN TXT \""ABYZX9GLUYQUVWDQZIECEGAFF3NC89ZE\"" . 150059 IN NS h.root-servers.net. . 150059 IN NS l.root-servers.net. . 150059 IN NS k.root-servers.net. . 150059 IN NS b.root-servers.net. . 150059 IN NS f.root-servers.net. . 150059 IN NS d.root-servers.net. . 150059 IN NS e.root-servers.net. . 150059 IN NS g.root-servers.net. . 150059 IN NS a.root-servers.net. . 150059 IN NS i.root-servers.net. . 150059 IN NS j.root-servers.net. . 150059 IN NS c.root-servers.net. . 150059 IN NS m.root-servers.net. a.root-servers.net. 150059 IN A 198.41.0.4 b.root-servers.net. 150059 IN A 199.9.14.201 c.root-servers.net. 150059 IN A 192.33.4.12 d.root-servers.net. 150059 IN A 199.7.91.13 e.root-servers.net. 150059 IN A 192.203.230.10 f.root-servers.net. 150059 IN A 192.5.5.241 g.root-servers.net. 150059 IN A 192.112.36.4 h.root-servers.net. 150059 IN A 198.97.190.53 i.root-servers.net. 150059 IN A 192.36.148.17 j.root-servers.net. 150059 IN A 192.58.128.30 k.root-servers.net. 150059 IN A 193.0.14.129 l.root-servers.net. 150059 IN A 199.7.83.42 m.root-servers.net. 150059 IN A 202.12.27.33""",UDP,58704,192.168.1.90,2.1.3,DNS Response IN TXT NOERROR,InfobloxDNSView=_default;InfobloxDNSQClass=IN;InfobloxDNSQType=TXT;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=13;InfobloxArCount=13,DNS,probe.infoblox.com.,,,,CommonSecurityLog,"{""InfobloxDNSView"":""_default"",""InfobloxDNSQClass"":""IN"",""InfobloxDNSQType"":""TXT"",""InfobloxDNSQFlags"":""+EV"",""InfobloxDNSRCode"":""NOERROR"",""InfobloxAnCount"":""1"",""InfobloxNsCount"":""13"",""InfobloxArCount"":""13""}",,,,,,,,1,13,,,,,,,,,,,,,,,IN,#NAME?,TXT,NOERROR,_default,,,,,,13,,,,,,,,,,N/A,,
OpsManager,"10/26/2021, 2:40:00.290 PM",Infoblox,Data Connector,DNS Response,1,,,infoblox-virtual-machine,,192.168.1.201,,,"""csp.infoblox.com. 17 IN CNAME wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 44 IN A 18.209.243.220 wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 44 IN A 18.235.149.1 wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 44 IN A 18.233.189.178 . 150059 IN NS a.root-servers.net. . 150059 IN NS c.root-servers.net. . 150059 IN NS g.root-servers.net. . 150059 IN NS k.root-servers.net. . 150059 IN NS i.root-servers.net. . 150059 IN NS d.root-servers.net. . 150059 IN NS h.root-servers.net. . 150059 IN NS e.root-servers.net. . 150059 IN NS f.root-servers.net. . 150059 IN NS b.root-servers.net. . 150059 IN NS l.root-servers.net. . 150059 IN NS m.root-servers.net. . 150059 IN NS j.root-servers.net. a.root-servers.net. 150059 IN A 198.41.0.4 b.root-servers.net. 150059 IN A 199.9.14.201 c.root-servers.net. 150059 IN A 192.33.4.12 d.root-servers.net. 150059 IN A 199.7.91.13 e.root-servers.net. 150059 IN A 192.203.230.10 f.root-servers.net. 150059 IN A 192.5.5.241 g.root-servers.net. 150059 IN A 192.112.36.4 h.root-servers.net. 150059 IN A 198.97.190.53""",UDP,58702,192.168.1.90,2.1.3,DNS Response IN A NOERROR,InfobloxDNSView=_default;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=4;InfobloxNsCount=13;InfobloxArCount=8,DNS,csp.infoblox.com.,,,,CommonSecurityLog,"{""InfobloxDNSView"":""_default"",""InfobloxDNSQClass"":""IN"",""InfobloxDNSQType"":""A"",""InfobloxDNSQFlags"":""+EV"",""InfobloxDNSRCode"":""NOERROR"",""InfobloxAnCount"":""4"",""InfobloxNsCount"":""13"",""InfobloxArCount"":""8""}",,,,,,,,4,8,,,,,,,,,,,,,,,IN,#NAME?,A,NOERROR,_default,,,,,,13,,,,,,,,,,N/A,,
OpsManager,"10/26/2021, 2:40:00.687 PM",Infoblox,Data Connector,DNS Response,1,,,infoblox-virtual-machine,,192.168.1.201,192.168.1.90,,"""probe.infoblox.com. 0 IN TXT \""ABYZX9GLUYQUVWDQZIECEGAFF3NC89ZE\"" . 150059 IN NS h.root-servers.net. . 150059 IN NS l.root-servers.net. . 150059 IN NS k.root-servers.net. . 150059 IN NS b.root-servers.net. . 150059 IN NS f.root-servers.net. . 150059 IN NS d.root-servers.net. . 150059 IN NS e.root-servers.net. . 150059 IN NS g.root-servers.net. . 150059 IN NS a.root-servers.net. . 150059 IN NS i.root-servers.net. . 150059 IN NS j.root-servers.net. . 150059 IN NS c.root-servers.net. . 150059 IN NS m.root-servers.net. a.root-servers.net. 150059 IN A 198.41.0.4 b.root-servers.net. 150059 IN A 199.9.14.201 c.root-servers.net. 150059 IN A 192.33.4.12 d.root-servers.net. 150059 IN A 199.7.91.13 e.root-servers.net. 150059 IN A 192.203.230.10 f.root-servers.net. 150059 IN A 192.5.5.241 g.root-servers.net. 150059 IN A 192.112.36.4 h.root-servers.net. 150059 IN A 198.97.190.53 i.root-servers.net. 150059 IN A 192.36.148.17 j.root-servers.net. 150059 IN A 192.58.128.30 k.root-servers.net. 150059 IN A 193.0.14.129 l.root-servers.net. 150059 IN A 199.7.83.42 m.root-servers.net. 150059 IN A 202.12.27.33""",UDP,58704,192.168.1.90,2.1.3,DNS Response IN TXT NOERROR,InfobloxDNSView=_default;InfobloxDNSQClass=IN;InfobloxDNSQType=TXT;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=13;InfobloxArCount=13;InfobloxB1Region=;InfobloxB1ConnectionType=dfp;InfobloxB1OPHName=Sentinel-Demo-DNS+DFP+DHCP;InfobloxB1OPHIPAddress=192.168.1.201;InfobloxB1Network=Sentinel-Demo-DNS+DFP+DHCP (DFP);InfobloxB1SrcOSVersion=;InfobloxB1DHCPFingerprint=;InfobloxB1DNSTags=,DNS,probe.infoblox.com.,,00:50:56:0b:0f:80,,CommonSecurityLog,"{""InfobloxDNSView"":""_default"",""InfobloxDNSQClass"":""IN"",""InfobloxDNSQType"":""TXT"",""InfobloxDNSQFlags"":""+EV"",""InfobloxDNSRCode"":""NOERROR"",""InfobloxAnCount"":""1"",""InfobloxNsCount"":""13"",""InfobloxArCount"":""13"",""InfobloxB1ConnectionType"":""dfp"",""InfobloxB1OPHName"":""Sentinel-Demo-DNS+DFP+DHCP"",""InfobloxB1OPHIPAddress"":""192.168.1.201"",""InfobloxB1Network"":""Sentinel-Demo-DNS+DFP+DHCP (DFP)""}",,,,,,,,1,13,dfp,,,,Sentinel-Demo-DNS+DFP+DHCP (DFP),192.168.1.201,Sentinel-Demo-DNS+DFP+DHCP,,,,,,,,IN,#NAME?,TXT,NOERROR,_default,,,,,,13,,,,,,,,,,N/A,,
OpsManager,"10/26/2021, 2:40:00.687 PM",Infoblox,Data Connector,DNS Response,1,,,infoblox-virtual-machine,,192.168.1.201,192.168.1.90,,"""csp.infoblox.com. 17 IN CNAME wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 44 IN A 18.209.243.220 wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 44 IN A 18.235.149.1 wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 44 IN A 18.233.189.178 . 150059 IN NS a.root-servers.net. . 150059 IN NS c.root-servers.net. . 150059 IN NS g.root-servers.net. . 150059 IN NS k.root-servers.net. . 150059 IN NS i.root-servers.net. . 150059 IN NS d.root-servers.net. . 150059 IN NS h.root-servers.net. . 150059 IN NS e.root-servers.net. . 150059 IN NS f.root-servers.net. . 150059 IN NS b.root-servers.net. . 150059 IN NS l.root-servers.net. . 150059 IN NS m.root-servers.net. . 150059 IN NS j.root-servers.net. a.root-servers.net. 150059 IN A 198.41.0.4 b.root-servers.net. 150059 IN A 199.9.14.201 c.root-servers.net. 150059 IN A 192.33.4.12 d.root-servers.net. 150059 IN A 199.7.91.13 e.root-servers.net. 150059 IN A 192.203.230.10 f.root-servers.net. 150059 IN A 192.5.5.241 g.root-servers.net. 150059 IN A 192.112.36.4 h.root-servers.net. 150059 IN A 198.97.190.53""",UDP,58702,192.168.1.90,2.1.3,DNS Response IN A NOERROR,InfobloxDNSView=_default;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=4;InfobloxNsCount=13;InfobloxArCount=8;InfobloxB1Region=;InfobloxB1ConnectionType=dfp;InfobloxB1OPHName=Sentinel-Demo-DNS+DFP+DHCP;InfobloxB1OPHIPAddress=192.168.1.201;InfobloxB1Network=Sentinel-Demo-DNS+DFP+DHCP (DFP);InfobloxB1SrcOSVersion=;InfobloxB1DHCPFingerprint=;InfobloxB1DNSTags=,DNS,csp.infoblox.com.,,00:50:56:0b:0f:80,,CommonSecurityLog,"{""InfobloxDNSView"":""_default"",""InfobloxDNSQClass"":""IN"",""InfobloxDNSQType"":""A"",""InfobloxDNSQFlags"":""+EV"",""InfobloxDNSRCode"":""NOERROR"",""InfobloxAnCount"":""4"",""InfobloxNsCount"":""13"",""InfobloxArCount"":""8"",""InfobloxB1ConnectionType"":""dfp"",""InfobloxB1OPHName"":""Sentinel-Demo-DNS+DFP+DHCP"",""InfobloxB1OPHIPAddress"":""192.168.1.201"",""InfobloxB1Network"":""Sentinel-Demo-DNS+DFP+DHCP (DFP)""}",,,,,,,,4,8,dfp,,,,Sentinel-Demo-DNS+DFP+DHCP (DFP),192.168.1.201,Sentinel-Demo-DNS+DFP+DHCP,,,,,,,,IN,#NAME?,A,NOERROR,_default,,,,,,13,,,,,,,,,,N/A,,
OpsManager,"10/26/2021, 2:40:02.715 PM",Infoblox,Data Connector,DNS Response,1,,,infoblox-virtual-machine,,,192.168.1.90,,"""csp.infoblox.com. 37 IN CNAME wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. csp.infoblox.com. 37 IN RRSIG CNAME 5 3 60 20211030035028 20211026032210 51153 infoblox.com.",TCP,42434,192.168.1.90,2.1.3,DNS Response IN A NOERROR,"InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;GGOUG8KYpXfmGFIh0VSI3IzjZ61XmYb849xIGN7zVVxKBKMUIVzheVsbfoM16kZgTTTs8oXTplmh6bPyjbvzS8wThIF2uXGj416MNqa1Ci0yGeWDhN6npXErWKv4IQT0K346qv1S1US0JYi4vFZY3MfQAHUiTkxeVdPRwo20KWU= csp.infoblox.com. 37 IN RRSIG CNAME 5 3 60 20211030035028 20211026032210 61272 infoblox.com.;o8tonjeIlHiWq8VQtKS6LjaX1Sjte+NHKCNzdEV5oBsipH+53DFWI0rIIUyY7DfUttCII3eTb3A7aqUXWAWmc/zKxFP1Nz34kike2mlWaMm4e0C7mtrG5JpPh+AzyoEGsLVQP6gGYvsLMIUXumt/EKbUSNJFwg3CvEaCRj5Q3Tk= wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 17 IN A 18.233.189.178 wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 17 IN A 18.209.243.220 wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 17 IN A 18.235.149.1 . 32768 4096 OPT "";InfobloxAnCount=6;InfobloxNsCount=0;InfobloxArCount=1;InfobloxB1Region=us-west-1;InfobloxB1ConnectionType=nios;InfobloxB1OPHName=Sentinel-Demo-DNS+DFP+DHCP;InfobloxB1OPHIPAddress=192.168.1.201;InfobloxB1Network=on-prem;InfobloxB1SrcOSVersion=;InfobloxB1DHCPFingerprint=;InfobloxB1DNSTags=",DNS,csp.infoblox.com.,,00:50:56:0b:0f:80,,CommonSecurityLog,"{""InfobloxDNSQClass"":""IN"",""InfobloxDNSQType"":""A"",""InfobloxDNSQFlags"":""+EV"",""InfobloxDNSRCode"":""NOERROR"",""GGOUG8KYpXfmGFIh0VSI3IzjZ61XmYb849xIGN7zVVxKBKMUIVzheVsbfoM16kZgTTTs8oXTplmh6bPyjbvzS8wThIF2uXGj416MNqa1Ci0yGeWDhN6npXErWKv4IQT0K346qv1S1US0JYi4vFZY3MfQAHUiTkxeVdPRwo20KWU"":"" csp.infoblox.com. 37 IN RRSIG CNAME 5 3 60 20211030035028 20211026032210 61272 infoblox.com."",""o8tonjeIlHiWq8VQtKS6LjaX1Sjte+NHKCNzdEV5oBsipH+53DFWI0rIIUyY7DfUttCII3eTb3A7aqUXWAWmc/zKxFP1Nz34kike2mlWaMm4e0C7mtrG5JpPh+AzyoEGsLVQP6gGYvsLMIUXumt/EKbUSNJFwg3CvEaCRj5Q3Tk"":"" wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 17 IN A 18.233.189.178 wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 17 IN A 18.209.243.220 wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 17 IN A 18.235.149.1 . 32768 4096 OPT \"""",""InfobloxAnCount"":""6"",""InfobloxNsCount"":""0"",""InfobloxArCount"":""1"",""InfobloxB1Region"":""us-west-1"",""InfobloxB1ConnectionType"":""nios"",""InfobloxB1OPHName"":""Sentinel-Demo-DNS+DFP+DHCP"",""InfobloxB1OPHIPAddress"":""192.168.1.201"",""InfobloxB1Network"":""on-prem""}",,,,,,,,6,1,nios,,,,on-prem,192.168.1.201,Sentinel-Demo-DNS+DFP+DHCP,,,us-west-1,,,,,IN,#NAME?,A,NOERROR,,,,,,,0,,,,,,,,,,N/A,,
OpsManager,"10/26/2021, 2:28:38.819 PM",Infoblox,Data Connector,DNS Response,1,,,infoblox-virtual-machine,,,192.168.1.106,,"""www.amazon.com. 0 IN AAAA 2600:1f18:1043:dc00:8083:68e:ef0f:46de . 32768 1232 OPT """,TCP,31846,192.168.1.106,2.1.3,DNS Response IN AAAA NOERROR,"InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=AAAA;InfobloxDNSQFlags=-EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1;InfobloxB1Region=us-west-1;InfobloxB1ConnectionType=dfp;InfobloxB1OPHName=Sentinel-Demo-DNS+DFP+DHCP;InfobloxB1OPHIPAddress=192.168.1.201;InfobloxB1Network=Sentinel-Demo-DNS+DFP+DHCP (DFP);InfobloxB1SrcOSVersion=;InfobloxB1DHCPFingerprint=;InfobloxB1DNSTags=APP_GoToMyPC,APP_Uncategorized,CAT_Content Server,CAT_Online Shopping",DNS,www.amazon.com.,,00:50:56:0b:0f:15,,CommonSecurityLog,"{""InfobloxDNSQClass"":""IN"",""InfobloxDNSQType"":""AAAA"",""InfobloxDNSQFlags"":""-EV"",""InfobloxDNSRCode"":""NOERROR"",""InfobloxAnCount"":""1"",""InfobloxNsCount"":""0"",""InfobloxArCount"":""1"",""InfobloxB1Region"":""us-west-1"",""InfobloxB1ConnectionType"":""dfp"",""InfobloxB1OPHName"":""Sentinel-Demo-DNS+DFP+DHCP"",""InfobloxB1OPHIPAddress"":""192.168.1.201"",""InfobloxB1Network"":""Sentinel-Demo-DNS+DFP+DHCP (DFP)"",""InfobloxB1DNSTags"":""APP_GoToMyPC,APP_Uncategorized,CAT_Content Server,CAT_Online Shopping""}",,,,,,,,1,1,dfp,"APP_GoToMyPC,APP_Uncategorized,CAT_Content Server,CAT_Online Shopping",,,Sentinel-Demo-DNS+DFP+DHCP (DFP),192.168.1.201,Sentinel-Demo-DNS+DFP+DHCP,,,us-west-1,,,,,IN,#NAME?,AAAA,NOERROR,,,,,,,0,,,,,,,,,,N/A,,
OpsManager,"10/26/2021, 2:48:42.365 PM",Infoblox,Data Connector,DNS Response,1,,,infoblox-virtual-machine,,,192.168.1.106,,"""unbouncepages.com. 388 IN SOA ns-748.awsdns-29.net. awsdns-hostmaster.amazon.com. 1 7200 900 1209600 86400 . 32768 4096 OPT """,TCP,19173,192.168.1.106,2.1.3,DNS Response IN AAAA NOERROR,"InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=AAAA;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=0;InfobloxNsCount=1;InfobloxArCount=1;InfobloxB1Region=us-west-1;InfobloxB1ConnectionType=dfp;InfobloxB1OPHName=Sentinel-Demo-DNS+DFP+DHCP;InfobloxB1OPHIPAddress=192.168.1.201;InfobloxB1Network=Sentinel-Demo-DNS+DFP+DHCP (DFP);InfobloxB1SrcOSVersion=;InfobloxB1DHCPFingerprint=;InfobloxB1DNSTags=APP_Uncategorized,CAT_Internet Services",DNS,unbouncepages.com.,,00:50:56:0b:0f:15,,CommonSecurityLog,"{""InfobloxDNSQClass"":""IN"",""InfobloxDNSQType"":""AAAA"",""InfobloxDNSQFlags"":""+EV"",""InfobloxDNSRCode"":""NOERROR"",""InfobloxAnCount"":""0"",""InfobloxNsCount"":""1"",""InfobloxArCount"":""1"",""InfobloxB1Region"":""us-west-1"",""InfobloxB1ConnectionType"":""dfp"",""InfobloxB1OPHName"":""Sentinel-Demo-DNS+DFP+DHCP"",""InfobloxB1OPHIPAddress"":""192.168.1.201"",""InfobloxB1Network"":""Sentinel-Demo-DNS+DFP+DHCP (DFP)"",""InfobloxB1DNSTags"":""APP_Uncategorized,CAT_Internet Services""}",,,,,,,,0,1,dfp,"APP_Uncategorized,CAT_Internet Services",,,Sentinel-Demo-DNS+DFP+DHCP (DFP),192.168.1.201,Sentinel-Demo-DNS+DFP+DHCP,,,us-west-1,,,,,IN,#NAME?,AAAA,NOERROR,,,,,,,1,,,,,,,,,,N/A,,
OpsManager,"10/26/2021, 2:27:52.295 PM",Infoblox,Data Connector,DNS Response,1,,,infoblox-virtual-machine,,,192.168.1.90,,"""ris.api.iris.microsoft.com. 2996 IN CNAME ris-prod.trafficmanager.net. ris-prod.trafficmanager.net. 18 IN CNAME asf-ris-prod-scus-azsc.southcentralus.cloudapp.azure.com. asf-ris-prod-scus-azsc.southcentralus.cloudapp.azure.com. 9 IN A 104.214.104.116 . 32768 4096 OPT """,TCP,45226,192.168.1.90,2.1.3,DNS Response IN A NOERROR,"InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=3;InfobloxNsCount=0;InfobloxArCount=1;InfobloxB1Region=us-west-1;InfobloxB1ConnectionType=dfp;InfobloxB1OPHName=Sentinel-Demo-DNS+DFP+DHCP;InfobloxB1OPHIPAddress=192.168.1.201;InfobloxB1Network=Sentinel-Demo-DNS+DFP+DHCP (DFP);InfobloxB1SrcOSVersion=;InfobloxB1DHCPFingerprint=;InfobloxB1DNSTags=APP_Uncategorized,CAT_Business,CAT_Internet Services,CAT_Software/Hardware",DNS,ris.api.iris.microsoft.com.,,00:50:56:0b:0f:80,,CommonSecurityLog,"{""InfobloxDNSQClass"":""IN"",""InfobloxDNSQType"":""A"",""InfobloxDNSQFlags"":""+EV"",""InfobloxDNSRCode"":""NOERROR"",""InfobloxAnCount"":""3"",""InfobloxNsCount"":""0"",""InfobloxArCount"":""1"",""InfobloxB1Region"":""us-west-1"",""InfobloxB1ConnectionType"":""dfp"",""InfobloxB1OPHName"":""Sentinel-Demo-DNS+DFP+DHCP"",""InfobloxB1OPHIPAddress"":""192.168.1.201"",""InfobloxB1Network"":""Sentinel-Demo-DNS+DFP+DHCP (DFP)"",""InfobloxB1DNSTags"":""APP_Uncategorized,CAT_Business,CAT_Internet Services,CAT_Software/Hardware""}",,,,,,,,3,1,dfp,"APP_Uncategorized,CAT_Business,CAT_Internet Services,CAT_Software/Hardware",,,Sentinel-Demo-DNS+DFP+DHCP (DFP),192.168.1.201,Sentinel-Demo-DNS+DFP+DHCP,,,us-west-1,,,,,IN,#NAME?,A,NOERROR,,,,,,,0,,,,,,,,,,N/A,,
OpsManager,"10/26/2021, 2:42:05.148 PM",Infoblox,Data Connector,DNS Response,1,,,infoblox-virtual-machine,,,192.168.1.90,,"""arc.msn.com. 19922 IN CNAME arc.trafficmanager.net. arc.trafficmanager.net. 55 IN CNAME iris-de-prod-azsc-wus2-b.westus2.cloudapp.azure.com. iris-de-prod-azsc-wus2-b.westus2.cloudapp.azure.com. 6 IN A 20.69.130.185 . 32768 4096 OPT """,TCP,25671,192.168.1.90,2.1.3,DNS Response IN A NOERROR,"InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=3;InfobloxNsCount=0;InfobloxArCount=1;InfobloxB1Region=us-west-1;InfobloxB1ConnectionType=dfp;InfobloxB1OPHName=Sentinel-Demo-DNS+DFP+DHCP;InfobloxB1OPHIPAddress=192.168.1.201;InfobloxB1Network=Sentinel-Demo-DNS+DFP+DHCP (DFP);InfobloxB1SrcOSVersion=;InfobloxB1DHCPFingerprint=;InfobloxB1DNSTags=APP_Uncategorized,CAT_Internet Services,CAT_Portal Sites",DNS,arc.msn.com.,,00:50:56:0b:0f:80,,CommonSecurityLog,"{""InfobloxDNSQClass"":""IN"",""InfobloxDNSQType"":""A"",""InfobloxDNSQFlags"":""+EV"",""InfobloxDNSRCode"":""NOERROR"",""InfobloxAnCount"":""3"",""InfobloxNsCount"":""0"",""InfobloxArCount"":""1"",""InfobloxB1Region"":""us-west-1"",""InfobloxB1ConnectionType"":""dfp"",""InfobloxB1OPHName"":""Sentinel-Demo-DNS+DFP+DHCP"",""InfobloxB1OPHIPAddress"":""192.168.1.201"",""InfobloxB1Network"":""Sentinel-Demo-DNS+DFP+DHCP (DFP)"",""InfobloxB1DNSTags"":""APP_Uncategorized,CAT_Internet Services,CAT_Portal Sites""}",,,,,,,,3,1,dfp,"APP_Uncategorized,CAT_Internet Services,CAT_Portal Sites",,,Sentinel-Demo-DNS+DFP+DHCP (DFP),192.168.1.201,Sentinel-Demo-DNS+DFP+DHCP,,,us-west-1,,,,,IN,#NAME?,A,NOERROR,,,,,,,0,,,,,,,,,,N/A,,
OpsManager,"10/26/2021, 2:42:05.148 PM",Infoblox,Data Connector,DNS Response,1,,,infoblox-virtual-machine,,,192.168.1.90,,"""arc.trafficmanager.net. 59 IN CNAME iris-de-prod-azsc-wus2-b.westus2.cloudapp.azure.com. iris-de-prod-azsc-wus2-b.westus2.cloudapp.azure.com. 9 IN A 20.69.130.185 . 32768 4096 OPT """,TCP,25671,192.168.1.90,2.1.3,DNS Response IN A NOERROR,"InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=2;InfobloxNsCount=0;InfobloxArCount=1;InfobloxB1Region=us-west-1;InfobloxB1ConnectionType=dfp;InfobloxB1OPHName=Sentinel-Demo-DNS+DFP+DHCP;InfobloxB1OPHIPAddress=192.168.1.201;InfobloxB1Network=Sentinel-Demo-DNS+DFP+DHCP (DFP);InfobloxB1SrcOSVersion=;InfobloxB1DHCPFingerprint=;InfobloxB1DNSTags=APP_Uncategorized,CAT_Internet Services",DNS,arc.trafficmanager.net.,,00:50:56:0b:0f:80,,CommonSecurityLog,"{""InfobloxDNSQClass"":""IN"",""InfobloxDNSQType"":""A"",""InfobloxDNSQFlags"":""+EV"",""InfobloxDNSRCode"":""NOERROR"",""InfobloxAnCount"":""2"",""InfobloxNsCount"":""0"",""InfobloxArCount"":""1"",""InfobloxB1Region"":""us-west-1"",""InfobloxB1ConnectionType"":""dfp"",""InfobloxB1OPHName"":""Sentinel-Demo-DNS+DFP+DHCP"",""InfobloxB1OPHIPAddress"":""192.168.1.201"",""InfobloxB1Network"":""Sentinel-Demo-DNS+DFP+DHCP (DFP)"",""InfobloxB1DNSTags"":""APP_Uncategorized,CAT_Internet Services""}",,,,,,,,2,1,dfp,"APP_Uncategorized,CAT_Internet Services",,,Sentinel-Demo-DNS+DFP+DHCP (DFP),192.168.1.201,Sentinel-Demo-DNS+DFP+DHCP,,,us-west-1,,,,,IN,#NAME?,A,NOERROR,,,,,,,0,,,,,,,,,,N/A,,
OpsManager,"10/26/2021, 2:42:05.148 PM",Infoblox,Data Connector,DNS Response,1,,,infoblox-virtual-machine,,,192.168.1.90,,"""iris-de-prod-azsc-wus2-b.westus2.cloudapp.azure.com. 9 IN A 20.69.130.185 . 32768 4096 OPT """,TCP,25671,192.168.1.90,2.1.3,DNS Response IN A NOERROR,"InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1;InfobloxB1Region=us-west-1;InfobloxB1ConnectionType=dfp;InfobloxB1OPHName=Sentinel-Demo-DNS+DFP+DHCP;InfobloxB1OPHIPAddress=192.168.1.201;InfobloxB1Network=Sentinel-Demo-DNS+DFP+DHCP (DFP);InfobloxB1SrcOSVersion=;InfobloxB1DHCPFingerprint=;InfobloxB1DNSTags=APP_Uncategorized,CAT_Internet Services",DNS,iris-de-prod-azsc-wus2-b.westus2.cloudapp.azure.com.,,00:50:56:0b:0f:80,,CommonSecurityLog,"{""InfobloxDNSQClass"":""IN"",""InfobloxDNSQType"":""A"",""InfobloxDNSQFlags"":""+EV"",""InfobloxDNSRCode"":""NOERROR"",""InfobloxAnCount"":""1"",""InfobloxNsCount"":""0"",""InfobloxArCount"":""1"",""InfobloxB1Region"":""us-west-1"",""InfobloxB1ConnectionType"":""dfp"",""InfobloxB1OPHName"":""Sentinel-Demo-DNS+DFP+DHCP"",""InfobloxB1OPHIPAddress"":""192.168.1.201"",""InfobloxB1Network"":""Sentinel-Demo-DNS+DFP+DHCP (DFP)"",""InfobloxB1DNSTags"":""APP_Uncategorized,CAT_Internet Services""}",,,,,,,,1,1,dfp,"APP_Uncategorized,CAT_Internet Services",,,Sentinel-Demo-DNS+DFP+DHCP (DFP),192.168.1.201,Sentinel-Demo-DNS+DFP+DHCP,,,us-west-1,,,,,IN,#NAME?,A,NOERROR,,,,,,,0,,,,,,,,,,N/A,,
OpsManager,"10/26/2021, 2:19:44.811 PM",Infoblox,Data Connector,DNS Response,1,,,infoblox-virtual-machine,,,192.168.1.90,,"""csp.infoblox.com. 56 IN CNAME wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. csp.infoblox.com. 56 IN RRSIG CNAME 5 3 60 20211030035028 20211026032210 51153 infoblox.com.",TCP,9594,192.168.1.90,2.1.3,DNS Response IN A NOERROR,"InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;GGOUG8KYpXfmGFIh0VSI3IzjZ61XmYb849xIGN7zVVxKBKMUIVzheVsbfoM16kZgTTTs8oXTplmh6bPyjbvzS8wThIF2uXGj416MNqa1Ci0yGeWDhN6npXErWKv4IQT0K346qv1S1US0JYi4vFZY3MfQAHUiTkxeVdPRwo20KWU= csp.infoblox.com. 56 IN RRSIG CNAME 5 3 60 20211030035028 20211026032210 61272 infoblox.com.;o8tonjeIlHiWq8VQtKS6LjaX1Sjte+NHKCNzdEV5oBsipH+53DFWI0rIIUyY7DfUttCII3eTb3A7aqUXWAWmc/zKxFP1Nz34kike2mlWaMm4e0C7mtrG5JpPh+AzyoEGsLVQP6gGYvsLMIUXumt/EKbUSNJFwg3CvEaCRj5Q3Tk= wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 56 IN A 18.235.149.1 wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 56 IN A 18.233.189.178 wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 56 IN A 18.209.243.220 . 32768 4096 OPT "";InfobloxAnCount=6;InfobloxNsCount=0;InfobloxArCount=1;InfobloxB1Region=us-west-1;InfobloxB1ConnectionType=nios;InfobloxB1OPHName=Sentinel-Demo-DNS+DFP+DHCP;InfobloxB1OPHIPAddress=192.168.1.201;InfobloxB1Network=on-prem;InfobloxB1SrcOSVersion=;InfobloxB1DHCPFingerprint=;InfobloxB1DNSTags=",DNS,csp.infoblox.com.,,00:50:56:0b:0f:80,,CommonSecurityLog,"{""InfobloxDNSQClass"":""IN"",""InfobloxDNSQType"":""A"",""InfobloxDNSQFlags"":""+EV"",""InfobloxDNSRCode"":""NOERROR"",""GGOUG8KYpXfmGFIh0VSI3IzjZ61XmYb849xIGN7zVVxKBKMUIVzheVsbfoM16kZgTTTs8oXTplmh6bPyjbvzS8wThIF2uXGj416MNqa1Ci0yGeWDhN6npXErWKv4IQT0K346qv1S1US0JYi4vFZY3MfQAHUiTkxeVdPRwo20KWU"":"" csp.infoblox.com. 56 IN RRSIG CNAME 5 3 60 20211030035028 20211026032210 61272 infoblox.com."",""o8tonjeIlHiWq8VQtKS6LjaX1Sjte+NHKCNzdEV5oBsipH+53DFWI0rIIUyY7DfUttCII3eTb3A7aqUXWAWmc/zKxFP1Nz34kike2mlWaMm4e0C7mtrG5JpPh+AzyoEGsLVQP6gGYvsLMIUXumt/EKbUSNJFwg3CvEaCRj5Q3Tk"":"" wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 56 IN A 18.235.149.1 wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 56 IN A 18.233.189.178 wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 56 IN A 18.209.243.220 . 32768 4096 OPT \"""",""InfobloxAnCount"":""6"",""InfobloxNsCount"":""0"",""InfobloxArCount"":""1"",""InfobloxB1Region"":""us-west-1"",""InfobloxB1ConnectionType"":""nios"",""InfobloxB1OPHName"":""Sentinel-Demo-DNS+DFP+DHCP"",""InfobloxB1OPHIPAddress"":""192.168.1.201"",""InfobloxB1Network"":""on-prem""}",,,,,,,,6,1,nios,,,,on-prem,192.168.1.201,Sentinel-Demo-DNS+DFP+DHCP,,,us-west-1,,,,,IN,#NAME?,A,NOERROR,,,,,,,0,,,,,,,,,,N/A,,
OpsManager,"10/26/2021, 2:19:44.811 PM",Infoblox,Data Connector,DNS Response,1,,,infoblox-virtual-machine,,,192.168.1.90,,"""probe.infoblox.com. 0 IN TXT \""ABYZX9GLUYQUVWDQZIECEGAFF3NC89ZE\"" . 32768 1232 OPT """,TCP,9594,192.168.1.90,2.1.3,DNS Response IN TXT NOERROR,"InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=TXT;InfobloxDNSQFlags=-EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1;InfobloxB1Region=us-west-1;InfobloxB1ConnectionType=dfp;InfobloxB1OPHName=Sentinel-Demo-DNS+DFP+DHCP;InfobloxB1OPHIPAddress=192.168.1.201;InfobloxB1Network=Sentinel-Demo-DNS+DFP+DHCP (DFP);InfobloxB1SrcOSVersion=;InfobloxB1DHCPFingerprint=;InfobloxB1DNSTags=APP_Uncategorized,CAT_Business,LIST_PROBE_209101",DNS,probe.infoblox.com.,,00:50:56:0b:0f:80,,CommonSecurityLog,"{""InfobloxDNSQClass"":""IN"",""InfobloxDNSQType"":""TXT"",""InfobloxDNSQFlags"":""-EV"",""InfobloxDNSRCode"":""NOERROR"",""InfobloxAnCount"":""1"",""InfobloxNsCount"":""0"",""InfobloxArCount"":""1"",""InfobloxB1Region"":""us-west-1"",""InfobloxB1ConnectionType"":""dfp"",""InfobloxB1OPHName"":""Sentinel-Demo-DNS+DFP+DHCP"",""InfobloxB1OPHIPAddress"":""192.168.1.201"",""InfobloxB1Network"":""Sentinel-Demo-DNS+DFP+DHCP (DFP)"",""InfobloxB1DNSTags"":""APP_Uncategorized,CAT_Business,LIST_PROBE_209101""}",,,,,,,,1,1,dfp,"APP_Uncategorized,CAT_Business,LIST_PROBE_209101",,,Sentinel-Demo-DNS+DFP+DHCP (DFP),192.168.1.201,Sentinel-Demo-DNS+DFP+DHCP,,,us-west-1,,,,,IN,#NAME?,TXT,NOERROR,,,,,,,0,,,,,,,,,,N/A,,
OpsManager,"10/26/2021, 2:19:45.521 PM",Infoblox,Data Connector,DNS Response,1,,,infoblox-virtual-machine,,192.168.1.201,192.168.1.90,,"""csp.infoblox.com. 56 IN CNAME wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 5 IN A 18.233.189.178 wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 5 IN A 18.209.243.220 wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 5 IN A 18.235.149.1 . 151279 IN NS k.root-servers.net. . 151279 IN NS a.root-servers.net. . 151279 IN NS e.root-servers.net. . 151279 IN NS b.root-servers.net. . 151279 IN NS h.root-servers.net. . 151279 IN NS d.root-servers.net. . 151279 IN NS l.root-servers.net. . 151279 IN NS f.root-servers.net. . 151279 IN NS c.root-servers.net. . 151279 IN NS i.root-servers.net. . 151279 IN NS j.root-servers.net. . 151279 IN NS m.root-servers.net. . 151279 IN NS g.root-servers.net. a.root-servers.net. 151279 IN A 198.41.0.4 b.root-servers.net. 151279 IN A 199.9.14.201 c.root-servers.net. 151279 IN A 192.33.4.12 d.root-servers.net. 151279 IN A 199.7.91.13 e.root-servers.net. 151279 IN A 192.203.230.10 f.root-servers.net. 151279 IN A 192.5.5.241 g.root-servers.net. 151279 IN A 192.112.36.4 h.root-servers.net. 151279 IN A 198.97.190.53""",UDP,60059,192.168.1.90,2.1.3,DNS Response IN A NOERROR,InfobloxDNSView=_default;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=4;InfobloxNsCount=13;InfobloxArCount=8;InfobloxB1Region=;InfobloxB1ConnectionType=dfp;InfobloxB1OPHName=Sentinel-Demo-DNS+DFP+DHCP;InfobloxB1OPHIPAddress=192.168.1.201;InfobloxB1Network=Sentinel-Demo-DNS+DFP+DHCP (DFP);InfobloxB1SrcOSVersion=;InfobloxB1DHCPFingerprint=;InfobloxB1DNSTags=,DNS,csp.infoblox.com.,,00:50:56:0b:0f:80,,CommonSecurityLog,"{""InfobloxDNSView"":""_default"",""InfobloxDNSQClass"":""IN"",""InfobloxDNSQType"":""A"",""InfobloxDNSQFlags"":""+EV"",""InfobloxDNSRCode"":""NOERROR"",""InfobloxAnCount"":""4"",""InfobloxNsCount"":""13"",""InfobloxArCount"":""8"",""InfobloxB1ConnectionType"":""dfp"",""InfobloxB1OPHName"":""Sentinel-Demo-DNS+DFP+DHCP"",""InfobloxB1OPHIPAddress"":""192.168.1.201"",""InfobloxB1Network"":""Sentinel-Demo-DNS+DFP+DHCP (DFP)""}",,,,,,,,4,8,dfp,,,,Sentinel-Demo-DNS+DFP+DHCP (DFP),192.168.1.201,Sentinel-Demo-DNS+DFP+DHCP,,,,,,,,IN,#NAME?,A,NOERROR,_default,,,,,,13,,,,,,,,,,N/A,,
OpsManager,"10/26/2021, 2:19:45.521 PM",Infoblox,Data Connector,DNS Response,1,,,infoblox-virtual-machine,,192.168.1.201,192.168.1.90,,"""probe.infoblox.com. 0 IN TXT \""ABYZX9GLUYQUVWDQZIECEGAFF3NC89ZE\"" . 151279 IN NS c.root-servers.net. . 151279 IN NS j.root-servers.net. . 151279 IN NS m.root-servers.net. . 151279 IN NS l.root-servers.net. . 151279 IN NS a.root-servers.net. . 151279 IN NS f.root-servers.net. . 151279 IN NS k.root-servers.net. . 151279 IN NS b.root-servers.net. . 151279 IN NS d.root-servers.net. . 151279 IN NS h.root-servers.net. . 151279 IN NS e.root-servers.net. . 151279 IN NS i.root-servers.net. . 151279 IN NS g.root-servers.net. a.root-servers.net. 151279 IN A 198.41.0.4 b.root-servers.net. 151279 IN A 199.9.14.201 c.root-servers.net. 151279 IN A 192.33.4.12 d.root-servers.net. 151279 IN A 199.7.91.13 e.root-servers.net. 151279 IN A 192.203.230.10 f.root-servers.net. 151279 IN A 192.5.5.241 g.root-servers.net. 151279 IN A 192.112.36.4 h.root-servers.net. 151279 IN A 198.97.190.53 i.root-servers.net. 151279 IN A 192.36.148.17 j.root-servers.net. 151279 IN A 192.58.128.30 k.root-servers.net. 151279 IN A 193.0.14.129 l.root-servers.net. 151279 IN A 199.7.83.42 m.root-servers.net. 151279 IN A 202.12.27.33""",UDP,60061,192.168.1.90,2.1.3,DNS Response IN TXT NOERROR,InfobloxDNSView=_default;InfobloxDNSQClass=IN;InfobloxDNSQType=TXT;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=13;InfobloxArCount=13;InfobloxB1Region=;InfobloxB1ConnectionType=dfp;InfobloxB1OPHName=Sentinel-Demo-DNS+DFP+DHCP;InfobloxB1OPHIPAddress=192.168.1.201;InfobloxB1Network=Sentinel-Demo-DNS+DFP+DHCP (DFP);InfobloxB1SrcOSVersion=;InfobloxB1DHCPFingerprint=;InfobloxB1DNSTags=,DNS,probe.infoblox.com.,,00:50:56:0b:0f:80,,CommonSecurityLog,"{""InfobloxDNSView"":""_default"",""InfobloxDNSQClass"":""IN"",""InfobloxDNSQType"":""TXT"",""InfobloxDNSQFlags"":""+EV"",""InfobloxDNSRCode"":""NOERROR"",""InfobloxAnCount"":""1"",""InfobloxNsCount"":""13"",""InfobloxArCount"":""13"",""InfobloxB1ConnectionType"":""dfp"",""InfobloxB1OPHName"":""Sentinel-Demo-DNS+DFP+DHCP"",""InfobloxB1OPHIPAddress"":""192.168.1.201"",""InfobloxB1Network"":""Sentinel-Demo-DNS+DFP+DHCP (DFP)""}",,,,,,,,1,13,dfp,,,,Sentinel-Demo-DNS+DFP+DHCP (DFP),192.168.1.201,Sentinel-Demo-DNS+DFP+DHCP,,,,,,,,IN,#NAME?,TXT,NOERROR,_default,,,,,,13,,,,,,,,,,N/A,,
OpsManager,"10/26/2021, 2:07:30.926 PM",Infoblox,Data Connector,DNS Response,1,,,infoblox-virtual-machine,,,192.168.1.90,,"""us-east-1.elb.amazonaws.com. 55 IN SOA ns-1119.awsdns-11.org. awsdns-hostmaster.amazon.com. 1 7200 900 1209600 60 . 32768 4096 OPT """,TCP,31406,192.168.1.90,2.1.3,DNS Response IN AAAA NOERROR,"InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=AAAA;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=0;InfobloxNsCount=1;InfobloxArCount=1;InfobloxB1Region=us-west-1;InfobloxB1ConnectionType=dfp;InfobloxB1OPHName=Sentinel-Demo-DNS+DFP+DHCP;InfobloxB1OPHIPAddress=192.168.1.201;InfobloxB1Network=Sentinel-Demo-DNS+DFP+DHCP (DFP);InfobloxB1SrcOSVersion=;InfobloxB1DHCPFingerprint=;InfobloxB1DNSTags=APP_Uncategorized,CAT_Internet Services",DNS,proxyserverecs-1736642167.us-east-1.elb.amazonaws.com.,,00:50:56:0b:0f:80,,CommonSecurityLog,"{""InfobloxDNSQClass"":""IN"",""InfobloxDNSQType"":""AAAA"",""InfobloxDNSQFlags"":""+EV"",""InfobloxDNSRCode"":""NOERROR"",""InfobloxAnCount"":""0"",""InfobloxNsCount"":""1"",""InfobloxArCount"":""1"",""InfobloxB1Region"":""us-west-1"",""InfobloxB1ConnectionType"":""dfp"",""InfobloxB1OPHName"":""Sentinel-Demo-DNS+DFP+DHCP"",""InfobloxB1OPHIPAddress"":""192.168.1.201"",""InfobloxB1Network"":""Sentinel-Demo-DNS+DFP+DHCP (DFP)"",""InfobloxB1DNSTags"":""APP_Uncategorized,CAT_Internet Services""}",,,,,,,,0,1,dfp,"APP_Uncategorized,CAT_Internet Services",,,Sentinel-Demo-DNS+DFP+DHCP (DFP),192.168.1.201,Sentinel-Demo-DNS+DFP+DHCP,,,us-west-1,,,,,IN,#NAME?,AAAA,NOERROR,,,,,,,1,,,,,,,,,,N/A,,
OpsManager,"10/26/2021, 2:22:19.752 PM",Infoblox,Data Connector,DNS Response,1,,,infoblox-virtual-machine,,,192.168.1.90,,"""client.wns.windows.com. 3137 IN CNAME wns.notify.trafficmanager.net. wns.notify.trafficmanager.net. 117 IN A 13.64.180.106 . 32768 4096 OPT """,TCP,45375,192.168.1.90,2.1.3,DNS Response IN A NOERROR,"InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=2;InfobloxNsCount=0;InfobloxArCount=1;InfobloxB1Region=us-west-1;InfobloxB1ConnectionType=dfp;InfobloxB1OPHName=Sentinel-Demo-DNS+DFP+DHCP;InfobloxB1OPHIPAddress=192.168.1.201;InfobloxB1Network=Sentinel-Demo-DNS+DFP+DHCP (DFP);InfobloxB1SrcOSVersion=;InfobloxB1DHCPFingerprint=;InfobloxB1DNSTags=APP_Microsoft OneDrive,APP_Microsoft Sharepoint,APP_Uncategorized,CAT_Business,CAT_Internet Services,CAT_Software/Hardware",DNS,client.wns.windows.com.,,00:50:56:0b:0f:80,,CommonSecurityLog,"{""InfobloxDNSQClass"":""IN"",""InfobloxDNSQType"":""A"",""InfobloxDNSQFlags"":""+EV"",""InfobloxDNSRCode"":""NOERROR"",""InfobloxAnCount"":""2"",""InfobloxNsCount"":""0"",""InfobloxArCount"":""1"",""InfobloxB1Region"":""us-west-1"",""InfobloxB1ConnectionType"":""dfp"",""InfobloxB1OPHName"":""Sentinel-Demo-DNS+DFP+DHCP"",""InfobloxB1OPHIPAddress"":""192.168.1.201"",""InfobloxB1Network"":""Sentinel-Demo-DNS+DFP+DHCP (DFP)"",""InfobloxB1DNSTags"":""APP_Microsoft OneDrive,APP_Microsoft Sharepoint,APP_Uncategorized,CAT_Business,CAT_Internet Services,CAT_Software/Hardware""}",,,,,,,,2,1,dfp,"APP_Microsoft OneDrive,APP_Microsoft Sharepoint,APP_Uncategorized,CAT_Business,CAT_Internet Services,CAT_Software/Hardware",,,Sentinel-Demo-DNS+DFP+DHCP (DFP),192.168.1.201,Sentinel-Demo-DNS+DFP+DHCP,,,us-west-1,,,,,IN,#NAME?,A,NOERROR,,,,,,,0,,,,,,,,,,N/A,,
OpsManager,"10/26/2021, 2:22:30.651 PM",Infoblox,Data Connector,DNS Response,1,,,infoblox-virtual-machine,,,192.168.1.90,,"""getpocket-cdn.prod.mozaws.net. 138 IN CNAME prod.pocket.prod.cloudops.mozgcp.net. prod.pocket.prod.cloudops.mozgcp.net. 426 IN A 34.120.5.221 . 32768 4096 OPT """,TCP,45709,192.168.1.90,2.1.3,DNS Response IN A NOERROR,"InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=2;InfobloxNsCount=0;InfobloxArCount=1;InfobloxB1Region=us-west-1;InfobloxB1ConnectionType=dfp;InfobloxB1OPHName=Sentinel-Demo-DNS+DFP+DHCP;InfobloxB1OPHIPAddress=192.168.1.201;InfobloxB1Network=Sentinel-Demo-DNS+DFP+DHCP (DFP);InfobloxB1SrcOSVersion=;InfobloxB1DHCPFingerprint=;InfobloxB1DNSTags=APP_Uncategorized,CAT_Business,CAT_Internet Services,CAT_Software/Hardware",DNS,getpocket-cdn.prod.mozaws.net.,,00:50:56:0b:0f:80,,CommonSecurityLog,"{""InfobloxDNSQClass"":""IN"",""InfobloxDNSQType"":""A"",""InfobloxDNSQFlags"":""+EV"",""InfobloxDNSRCode"":""NOERROR"",""InfobloxAnCount"":""2"",""InfobloxNsCount"":""0"",""InfobloxArCount"":""1"",""InfobloxB1Region"":""us-west-1"",""InfobloxB1ConnectionType"":""dfp"",""InfobloxB1OPHName"":""Sentinel-Demo-DNS+DFP+DHCP"",""InfobloxB1OPHIPAddress"":""192.168.1.201"",""InfobloxB1Network"":""Sentinel-Demo-DNS+DFP+DHCP (DFP)"",""InfobloxB1DNSTags"":""APP_Uncategorized,CAT_Business,CAT_Internet Services,CAT_Software/Hardware""}",,,,,,,,2,1,dfp,"APP_Uncategorized,CAT_Business,CAT_Internet Services,CAT_Software/Hardware",,,Sentinel-Demo-DNS+DFP+DHCP (DFP),192.168.1.201,Sentinel-Demo-DNS+DFP+DHCP,,,us-west-1,,,,,IN,#NAME?,A,NOERROR,,,,,,,0,,,,,,,,,,N/A,,
OpsManager,"10/26/2021, 2:22:30.651 PM",Infoblox,Data Connector,DNS Response,1,,,infoblox-virtual-machine,,,192.168.1.90,,"""getpocket.cdn.mozilla.net. 60 IN CNAME getpocket-cdn.prod.mozaws.net. getpocket-cdn.prod.mozaws.net. 150 IN CNAME prod.pocket.prod.cloudops.mozgcp.net. prod.pocket.prod.cloudops.mozgcp.net. 408 IN A 34.120.5.221 . 32768 4096 OPT """,TCP,45709,192.168.1.90,2.1.3,DNS Response IN A NOERROR,"InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=3;InfobloxNsCount=0;InfobloxArCount=1;InfobloxB1Region=us-west-1;InfobloxB1ConnectionType=dfp;InfobloxB1OPHName=Sentinel-Demo-DNS+DFP+DHCP;InfobloxB1OPHIPAddress=192.168.1.201;InfobloxB1Network=Sentinel-Demo-DNS+DFP+DHCP (DFP);InfobloxB1SrcOSVersion=;InfobloxB1DHCPFingerprint=;InfobloxB1DNSTags=APP_Uncategorized,CAT_Business,CAT_Internet Services,CAT_Software/Hardware",DNS,getpocket.cdn.mozilla.net.,,00:50:56:0b:0f:80,,CommonSecurityLog,"{""InfobloxDNSQClass"":""IN"",""InfobloxDNSQType"":""A"",""InfobloxDNSQFlags"":""+EV"",""InfobloxDNSRCode"":""NOERROR"",""InfobloxAnCount"":""3"",""InfobloxNsCount"":""0"",""InfobloxArCount"":""1"",""InfobloxB1Region"":""us-west-1"",""InfobloxB1ConnectionType"":""dfp"",""InfobloxB1OPHName"":""Sentinel-Demo-DNS+DFP+DHCP"",""InfobloxB1OPHIPAddress"":""192.168.1.201"",""InfobloxB1Network"":""Sentinel-Demo-DNS+DFP+DHCP (DFP)"",""InfobloxB1DNSTags"":""APP_Uncategorized,CAT_Business,CAT_Internet Services,CAT_Software/Hardware""}",,,,,,,,3,1,dfp,"APP_Uncategorized,CAT_Business,CAT_Internet Services,CAT_Software/Hardware",,,Sentinel-Demo-DNS+DFP+DHCP (DFP),192.168.1.201,Sentinel-Demo-DNS+DFP+DHCP,,,us-west-1,,,,,IN,#NAME?,A,NOERROR,,,,,,,0,,,,,,,,,,N/A,,
OpsManager,"10/26/2021, 2:23:18.430 PM",Infoblox,Data Connector,DNS Response,1,,,infoblox-virtual-machine,,,192.168.1.90,,"""settings-win.data.microsoft.com. 3044 IN CNAME settingsfd-geo.trafficmanager.net. settingsfd-geo.trafficmanager.net. 60 IN A 52.183.220.149 . 32768 4096 OPT """,TCP,56678,192.168.1.90,2.1.3,DNS Response IN A NOERROR,"InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=2;InfobloxNsCount=0;InfobloxArCount=1;InfobloxB1Region=us-west-1;InfobloxB1ConnectionType=dfp;InfobloxB1OPHName=Sentinel-Demo-DNS+DFP+DHCP;InfobloxB1OPHIPAddress=192.168.1.201;InfobloxB1Network=Sentinel-Demo-DNS+DFP+DHCP (DFP);InfobloxB1SrcOSVersion=;InfobloxB1DHCPFingerprint=;InfobloxB1DNSTags=APP_Uncategorized,CAT_Business,CAT_Internet Services,CAT_Software/Hardware",DNS,settings-win.data.microsoft.com.,,00:50:56:0b:0f:80,,CommonSecurityLog,"{""InfobloxDNSQClass"":""IN"",""InfobloxDNSQType"":""A"",""InfobloxDNSQFlags"":""+EV"",""InfobloxDNSRCode"":""NOERROR"",""InfobloxAnCount"":""2"",""InfobloxNsCount"":""0"",""InfobloxArCount"":""1"",""InfobloxB1Region"":""us-west-1"",""InfobloxB1ConnectionType"":""dfp"",""InfobloxB1OPHName"":""Sentinel-Demo-DNS+DFP+DHCP"",""InfobloxB1OPHIPAddress"":""192.168.1.201"",""InfobloxB1Network"":""Sentinel-Demo-DNS+DFP+DHCP (DFP)"",""InfobloxB1DNSTags"":""APP_Uncategorized,CAT_Business,CAT_Internet Services,CAT_Software/Hardware""}",,,,,,,,2,1,dfp,"APP_Uncategorized,CAT_Business,CAT_Internet Services,CAT_Software/Hardware",,,Sentinel-Demo-DNS+DFP+DHCP (DFP),192.168.1.201,Sentinel-Demo-DNS+DFP+DHCP,,,us-west-1,,,,,IN,#NAME?,A,NOERROR,,,,,,,0,,,,,,,,,,N/A,,
OpsManager,"10/26/2021, 2:23:18.431 PM",Infoblox,Data Connector,DNS Response,1,,,infoblox-virtual-machine,,,192.168.1.90,,"""settingsfd-geo.trafficmanager.net. 12 IN A 52.185.211.133 . 32768 4096 OPT """,TCP,56678,192.168.1.90,2.1.3,DNS Response IN A NOERROR,"InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1;InfobloxB1Region=us-west-1;InfobloxB1ConnectionType=dfp;InfobloxB1OPHName=Sentinel-Demo-DNS+DFP+DHCP;InfobloxB1OPHIPAddress=192.168.1.201;InfobloxB1Network=Sentinel-Demo-DNS+DFP+DHCP (DFP);InfobloxB1SrcOSVersion=;InfobloxB1DHCPFingerprint=;InfobloxB1DNSTags=APP_Uncategorized,CAT_Internet Services",DNS,settingsfd-geo.trafficmanager.net.,,00:50:56:0b:0f:80,,CommonSecurityLog,"{""InfobloxDNSQClass"":""IN"",""InfobloxDNSQType"":""A"",""InfobloxDNSQFlags"":""+EV"",""InfobloxDNSRCode"":""NOERROR"",""InfobloxAnCount"":""1"",""InfobloxNsCount"":""0"",""InfobloxArCount"":""1"",""InfobloxB1Region"":""us-west-1"",""InfobloxB1ConnectionType"":""dfp"",""InfobloxB1OPHName"":""Sentinel-Demo-DNS+DFP+DHCP"",""InfobloxB1OPHIPAddress"":""192.168.1.201"",""InfobloxB1Network"":""Sentinel-Demo-DNS+DFP+DHCP (DFP)"",""InfobloxB1DNSTags"":""APP_Uncategorized,CAT_Internet Services""}",,,,,,,,1,1,dfp,"APP_Uncategorized,CAT_Internet Services",,,Sentinel-Demo-DNS+DFP+DHCP (DFP),192.168.1.201,Sentinel-Demo-DNS+DFP+DHCP,,,us-west-1,,,,,IN,#NAME?,A,NOERROR,,,,,,,0,,,,,,,,,,N/A,,
OpsManager,"10/26/2021, 2:23:31.083 PM",Infoblox,Data Connector,DNS Response,1,,,infoblox-virtual-machine,,192.168.1.201,192.168.1.90,,"""wpad.tme.infoblox.com. 3600 IN A 208.50.179.11 . 151052 IN NS g.root-servers.net. . 151052 IN NS m.root-servers.net. . 151052 IN NS j.root-servers.net. . 151052 IN NS i.root-servers.net. . 151052 IN NS c.root-servers.net. . 151052 IN NS b.root-servers.net. . 151052 IN NS l.root-servers.net. . 151052 IN NS f.root-servers.net. . 151052 IN NS d.root-servers.net. . 151052 IN NS h.root-servers.net. . 151052 IN NS e.root-servers.net. . 151052 IN NS k.root-servers.net. . 151052 IN NS a.root-servers.net. a.root-servers.net. 151052 IN A 198.41.0.4 b.root-servers.net. 151052 IN A 199.9.14.201 c.root-servers.net. 151052 IN A 192.33.4.12 d.root-servers.net. 151052 IN A 199.7.91.13 e.root-servers.net. 151052 IN A 192.203.230.10 f.root-servers.net. 151052 IN A 192.5.5.241 g.root-servers.net. 151052 IN A 192.112.36.4 h.root-servers.net. 151052 IN A 198.97.190.53 i.root-servers.net. 151052 IN A 192.36.148.17 j.root-servers.net. 151052 IN A 192.58.128.30 k.root-servers.net. 151052 IN A 193.0.14.129 l.root-servers.net. 151052 IN A 199.7.83.42 m.root-servers.net. 151052 IN A 202.12.27.33""",UDP,64479,192.168.1.90,2.1.3,DNS Response IN A NOERROR,InfobloxDNSView=_default;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=13;InfobloxArCount=13;InfobloxB1Region=;InfobloxB1ConnectionType=dfp;InfobloxB1OPHName=Sentinel-Demo-DNS+DFP+DHCP;InfobloxB1OPHIPAddress=192.168.1.201;InfobloxB1Network=Sentinel-Demo-DNS+DFP+DHCP (DFP);InfobloxB1SrcOSVersion=;InfobloxB1DHCPFingerprint=;InfobloxB1DNSTags=,DNS,wpad.tme.infoblox.com.,,00:50:56:0b:0f:80,,CommonSecurityLog,"{""InfobloxDNSView"":""_default"",""InfobloxDNSQClass"":""IN"",""InfobloxDNSQType"":""A"",""InfobloxDNSQFlags"":""+EV"",""InfobloxDNSRCode"":""NOERROR"",""InfobloxAnCount"":""1"",""InfobloxNsCount"":""13"",""InfobloxArCount"":""13"",""InfobloxB1ConnectionType"":""dfp"",""InfobloxB1OPHName"":""Sentinel-Demo-DNS+DFP+DHCP"",""InfobloxB1OPHIPAddress"":""192.168.1.201"",""InfobloxB1Network"":""Sentinel-Demo-DNS+DFP+DHCP (DFP)""}",,,,,,,,1,13,dfp,,,,Sentinel-Demo-DNS+DFP+DHCP (DFP),192.168.1.201,Sentinel-Demo-DNS+DFP+DHCP,,,,,,,,IN,#NAME?,A,NOERROR,_default,,,,,,13,,,,,,,,,,N/A,,
OpsManager,"10/26/2021, 2:23:31.083 PM",Infoblox,Data Connector,DNS Response,1,,,infoblox-virtual-machine,,192.168.1.201,192.168.1.90,,"""wpad.tme.infoblox.com. 3600 IN A 208.50.179.11 . 151052 IN NS h.root-servers.net. . 151052 IN NS b.root-servers.net. . 151052 IN NS d.root-servers.net. . 151052 IN NS c.root-servers.net. . 151052 IN NS a.root-servers.net. . 151052 IN NS f.root-servers.net. . 151052 IN NS e.root-servers.net. . 151052 IN NS g.root-servers.net. . 151052 IN NS i.root-servers.net. . 151052 IN NS j.root-servers.net. . 151052 IN NS k.root-servers.net. . 151052 IN NS l.root-servers.net. . 151052 IN NS m.root-servers.net. a.root-servers.net. 151052 IN A 198.41.0.4 b.root-servers.net. 151052 IN A 199.9.14.201 c.root-servers.net. 151052 IN A 192.33.4.12 d.root-servers.net. 151052 IN A 199.7.91.13 e.root-servers.net. 151052 IN A 192.203.230.10 f.root-servers.net. 151052 IN A 192.5.5.241 g.root-servers.net. 151052 IN A 192.112.36.4 h.root-servers.net. 151052 IN A 198.97.190.53 i.root-servers.net. 151052 IN A 192.36.148.17 j.root-servers.net. 151052 IN A 192.58.128.30 k.root-servers.net. 151052 IN A 193.0.14.129 l.root-servers.net. 151052 IN A 199.7.83.42 m.root-servers.net. 151052 IN A 202.12.27.33""",UDP,53312,192.168.1.90,2.1.3,DNS Response IN A NOERROR,InfobloxDNSView=_default;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=13;InfobloxArCount=13;InfobloxB1Region=;InfobloxB1ConnectionType=dfp;InfobloxB1OPHName=Sentinel-Demo-DNS+DFP+DHCP;InfobloxB1OPHIPAddress=192.168.1.201;InfobloxB1Network=Sentinel-Demo-DNS+DFP+DHCP (DFP);InfobloxB1SrcOSVersion=;InfobloxB1DHCPFingerprint=;InfobloxB1DNSTags=,DNS,wpad.tme.infoblox.com.,,00:50:56:0b:0f:80,,CommonSecurityLog,"{""InfobloxDNSView"":""_default"",""InfobloxDNSQClass"":""IN"",""InfobloxDNSQType"":""A"",""InfobloxDNSQFlags"":""+EV"",""InfobloxDNSRCode"":""NOERROR"",""InfobloxAnCount"":""1"",""InfobloxNsCount"":""13"",""InfobloxArCount"":""13"",""InfobloxB1ConnectionType"":""dfp"",""InfobloxB1OPHName"":""Sentinel-Demo-DNS+DFP+DHCP"",""InfobloxB1OPHIPAddress"":""192.168.1.201"",""InfobloxB1Network"":""Sentinel-Demo-DNS+DFP+DHCP (DFP)""}",,,,,,,,1,13,dfp,,,,Sentinel-Demo-DNS+DFP+DHCP (DFP),192.168.1.201,Sentinel-Demo-DNS+DFP+DHCP,,,,,,,,IN,#NAME?,A,NOERROR,_default,,,,,,13,,,,,,,,,,N/A,,
OpsManager,"10/26/2021, 2:23:31.796 PM",Infoblox,Data Connector,DNS Response,1,,,infoblox-virtual-machine,,,192.168.1.90,,"""wpad.tme.infoblox.com. 3600 IN A 208.50.179.11 wpad.tme.infoblox.com. 3600 IN RRSIG A 5 3 3600 20211030154037 20211026150411 51153 infoblox.com.",TCP,32362,192.168.1.90,2.1.3,DNS Response IN A NOERROR,"InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;deK3G8Hhy9bQOPz6n6mMVIlaJdEAatYhwbXfibTZuIuY74PlFO17RyIWVDhaJkrefwIM/P9TQowFwW3JVkZpOUypw8zd52IKTBVn+RxNDl6Wni/zLMVVAtH99pAwEO01ECUn+FG29UENtB8Lh7wO6IEPOu8f/aCizTleCyQOA0M= wpad.tme.infoblox.com. 3600 IN RRSIG A 5 3 3600 20211030154037 20211026150411 61272 infoblox.com.;hK/Hr0rTxawCuZvr79g2vMNXrRe2umJJqSwEZU7SlUjN4BVmOZDIRgxuGm1byfYCb9RMmUvNWjxVi+rWjqJ9F5onfjTyEf5ku2WVBZNTQnJ57ZJD3MbGZ22fESGnGXN1wrkL9dzG2wok5P0cDUvBRqrdXlG1WtidBboSjnhwNv0= *.tme.infoblox.com. 3600 IN NSEC tp-poc-public.infoblox.com. A RRSIG NSEC *.tme.infoblox.com. 3600 IN RRSIG NSEC 5 3 3600 20211030185629 20211026182505 51153 infoblox.com.;eLW679sybatWWu0B2ECKiwJi9lCBAqg6qCkG49BB2DM93kl88osn/e2wQHl9ekQ1ytCBsrGjsdDIxCPD2yCOFkEEJKUVR58Ns4YJH5Hs6UGWfhoJLV1LmVIohiJpqVOPQP8ix5l6f5GE5Arr5o/C/SzrtgXsXcU+td7tlqjOYbI= *.tme.infoblox.com. 3600 IN RRSIG NSEC 5 3 3600 20211030185629 20211026182505 61272 infoblox.com.;gRAX8zN/IhEXg3j5s/YJBnXMsYOqTvhDvPrm/hz60OYdNHW9/oT3zXqAD6cnifPRuO543glUSyRqbUlgiCtSR5B/nwlPfavWWGuPZ0OcMUfZvgpGxSVvuAUCBUcyTzBb62PBAcVM7ELWRxlSNMdJA2RsI5HoiaVM1Jsurn/AmRY= . 32768 4096 OPT "";InfobloxAnCount=3;InfobloxNsCount=3;InfobloxArCount=1;InfobloxB1Region=us-west-1;InfobloxB1ConnectionType=nios;InfobloxB1OPHName=Sentinel-Demo-DNS+DFP+DHCP;InfobloxB1OPHIPAddress=192.168.1.201;InfobloxB1Network=on-prem;InfobloxB1SrcOSVersion=;InfobloxB1DHCPFingerprint=;InfobloxB1DNSTags=",DNS,wpad.tme.infoblox.com.,,00:50:56:0b:0f:80,,CommonSecurityLog,"{""InfobloxDNSQClass"":""IN"",""InfobloxDNSQType"":""A"",""InfobloxDNSQFlags"":""+EV"",""InfobloxDNSRCode"":""NOERROR"",""deK3G8Hhy9bQOPz6n6mMVIlaJdEAatYhwbXfibTZuIuY74PlFO17RyIWVDhaJkrefwIM/P9TQowFwW3JVkZpOUypw8zd52IKTBVn+RxNDl6Wni/zLMVVAtH99pAwEO01ECUn+FG29UENtB8Lh7wO6IEPOu8f/aCizTleCyQOA0M"":"" wpad.tme.infoblox.com. 3600 IN RRSIG A 5 3 3600 20211030154037 20211026150411 61272 infoblox.com."",""hK/Hr0rTxawCuZvr79g2vMNXrRe2umJJqSwEZU7SlUjN4BVmOZDIRgxuGm1byfYCb9RMmUvNWjxVi+rWjqJ9F5onfjTyEf5ku2WVBZNTQnJ57ZJD3MbGZ22fESGnGXN1wrkL9dzG2wok5P0cDUvBRqrdXlG1WtidBboSjnhwNv0"":"" *.tme.infoblox.com. 3600 IN NSEC tp-poc-public.infoblox.com. A RRSIG NSEC *.tme.infoblox.com. 3600 IN RRSIG NSEC 5 3 3600 20211030185629 20211026182505 51153 infoblox.com."",""eLW679sybatWWu0B2ECKiwJi9lCBAqg6qCkG49BB2DM93kl88osn/e2wQHl9ekQ1ytCBsrGjsdDIxCPD2yCOFkEEJKUVR58Ns4YJH5Hs6UGWfhoJLV1LmVIohiJpqVOPQP8ix5l6f5GE5Arr5o/C/SzrtgXsXcU+td7tlqjOYbI"":"" *.tme.infoblox.com. 3600 IN RRSIG NSEC 5 3 3600 20211030185629 20211026182505 61272 infoblox.com."",""gRAX8zN/IhEXg3j5s/YJBnXMsYOqTvhDvPrm/hz60OYdNHW9/oT3zXqAD6cnifPRuO543glUSyRqbUlgiCtSR5B/nwlPfavWWGuPZ0OcMUfZvgpGxSVvuAUCBUcyTzBb62PBAcVM7ELWRxlSNMdJA2RsI5HoiaVM1Jsurn/AmRY"":"" . 32768 4096 OPT \"""",""InfobloxAnCount"":""3"",""InfobloxNsCount"":""3"",""InfobloxArCount"":""1"",""InfobloxB1Region"":""us-west-1"",""InfobloxB1ConnectionType"":""nios"",""InfobloxB1OPHName"":""Sentinel-Demo-DNS+DFP+DHCP"",""InfobloxB1OPHIPAddress"":""192.168.1.201"",""InfobloxB1Network"":""on-prem""}",,,,,,,,3,1,nios,,,,on-prem,192.168.1.201,Sentinel-Demo-DNS+DFP+DHCP,,,us-west-1,,,,,IN,#NAME?,A,NOERROR,,,,,,,3,,,,,,,,,,N/A,,
OpsManager,"10/26/2021, 2:23:58.392 PM",Infoblox,Data Connector,DNS Response,1,,,infoblox-virtual-machine,,,192.168.1.90,,"""global.asimov.events.data.trafficmanager.net. 57 IN CNAME onedscolprdcus01.centralus.cloudapp.azure.com. onedscolprdcus01.centralus.cloudapp.azure.com. 7 IN A 52.182.141.63 . 32768 4096 OPT """,TCP,3130,192.168.1.90,2.1.3,DNS Response IN A NOERROR,"InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=2;InfobloxNsCount=0;InfobloxArCount=1;InfobloxB1Region=us-west-1;InfobloxB1ConnectionType=dfp;InfobloxB1OPHName=Sentinel-Demo-DNS+DFP+DHCP;InfobloxB1OPHIPAddress=192.168.1.201;InfobloxB1Network=Sentinel-Demo-DNS+DFP+DHCP (DFP);InfobloxB1SrcOSVersion=;InfobloxB1DHCPFingerprint=;InfobloxB1DNSTags=APP_Uncategorized,CAT_Internet Services",DNS,global.asimov.events.data.trafficmanager.net.,,00:50:56:0b:0f:80,,CommonSecurityLog,"{""InfobloxDNSQClass"":""IN"",""InfobloxDNSQType"":""A"",""InfobloxDNSQFlags"":""+EV"",""InfobloxDNSRCode"":""NOERROR"",""InfobloxAnCount"":""2"",""InfobloxNsCount"":""0"",""InfobloxArCount"":""1"",""InfobloxB1Region"":""us-west-1"",""InfobloxB1ConnectionType"":""dfp"",""InfobloxB1OPHName"":""Sentinel-Demo-DNS+DFP+DHCP"",""InfobloxB1OPHIPAddress"":""192.168.1.201"",""InfobloxB1Network"":""Sentinel-Demo-DNS+DFP+DHCP (DFP)"",""InfobloxB1DNSTags"":""APP_Uncategorized,CAT_Internet Services""}",,,,,,,,2,1,dfp,"APP_Uncategorized,CAT_Internet Services",,,Sentinel-Demo-DNS+DFP+DHCP (DFP),192.168.1.201,Sentinel-Demo-DNS+DFP+DHCP,,,us-west-1,,,,,IN,#NAME?,A,NOERROR,,,,,,,0,,,,,,,,,,N/A,,
OpsManager,"10/26/2021, 2:23:58.392 PM",Infoblox,Data Connector,DNS Response,1,,,infoblox-virtual-machine,,,192.168.1.90,,"""v10.events.data.microsoft.com. 2997 IN CNAME global.asimov.events.data.trafficmanager.net. global.asimov.events.data.trafficmanager.net. 56 IN CNAME onedscolprdneu01.northeurope.cloudapp.azure.com. onedscolprdneu01.northeurope.cloudapp.azure.com. 6 IN A 20.50.73.9 . 32768 4096 OPT """,TCP,3130,192.168.1.90,2.1.3,DNS Response IN A NOERROR,"InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=3;InfobloxNsCount=0;InfobloxArCount=1;InfobloxB1Region=us-west-1;InfobloxB1ConnectionType=dfp;InfobloxB1OPHName=Sentinel-Demo-DNS+DFP+DHCP;InfobloxB1OPHIPAddress=192.168.1.201;InfobloxB1Network=Sentinel-Demo-DNS+DFP+DHCP (DFP);InfobloxB1SrcOSVersion=;InfobloxB1DHCPFingerprint=;InfobloxB1DNSTags=APP_Microsoft 365,APP_Uncategorized,CAT_Business,CAT_Internet Services,CAT_Software/Hardware",DNS,v10.events.data.microsoft.com.,,00:50:56:0b:0f:80,,CommonSecurityLog,"{""InfobloxDNSQClass"":""IN"",""InfobloxDNSQType"":""A"",""InfobloxDNSQFlags"":""+EV"",""InfobloxDNSRCode"":""NOERROR"",""InfobloxAnCount"":""3"",""InfobloxNsCount"":""0"",""InfobloxArCount"":""1"",""InfobloxB1Region"":""us-west-1"",""InfobloxB1ConnectionType"":""dfp"",""InfobloxB1OPHName"":""Sentinel-Demo-DNS+DFP+DHCP"",""InfobloxB1OPHIPAddress"":""192.168.1.201"",""InfobloxB1Network"":""Sentinel-Demo-DNS+DFP+DHCP (DFP)"",""InfobloxB1DNSTags"":""APP_Microsoft 365,APP_Uncategorized,CAT_Business,CAT_Internet Services,CAT_Software/Hardware""}",,,,,,,,3,1,dfp,"APP_Microsoft 365,APP_Uncategorized,CAT_Business,CAT_Internet Services,CAT_Software/Hardware",,,Sentinel-Demo-DNS+DFP+DHCP (DFP),192.168.1.201,Sentinel-Demo-DNS+DFP+DHCP,,,us-west-1,,,,,IN,#NAME?,A,NOERROR,,,,,,,0,,,,,,,,,,N/A,,
OpsManager,"10/26/2021, 2:23:58.392 PM",Infoblox,Data Connector,DNS Response,1,,,infoblox-virtual-machine,,,192.168.1.90,,"""onedscolprdcus01.centralus.cloudapp.azure.com. 9 IN A 52.182.141.63 . 32768 4096 OPT """,TCP,3130,192.168.1.90,2.1.3,DNS Response IN A NOERROR,"InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1;InfobloxB1Region=us-west-1;InfobloxB1ConnectionType=dfp;InfobloxB1OPHName=Sentinel-Demo-DNS+DFP+DHCP;InfobloxB1OPHIPAddress=192.168.1.201;InfobloxB1Network=Sentinel-Demo-DNS+DFP+DHCP (DFP);InfobloxB1SrcOSVersion=;InfobloxB1DHCPFingerprint=;InfobloxB1DNSTags=APP_Uncategorized,CAT_Internet Services",DNS,onedscolprdcus01.centralus.cloudapp.azure.com.,,00:50:56:0b:0f:80,,CommonSecurityLog,"{""InfobloxDNSQClass"":""IN"",""InfobloxDNSQType"":""A"",""InfobloxDNSQFlags"":""+EV"",""InfobloxDNSRCode"":""NOERROR"",""InfobloxAnCount"":""1"",""InfobloxNsCount"":""0"",""InfobloxArCount"":""1"",""InfobloxB1Region"":""us-west-1"",""InfobloxB1ConnectionType"":""dfp"",""InfobloxB1OPHName"":""Sentinel-Demo-DNS+DFP+DHCP"",""InfobloxB1OPHIPAddress"":""192.168.1.201"",""InfobloxB1Network"":""Sentinel-Demo-DNS+DFP+DHCP (DFP)"",""InfobloxB1DNSTags"":""APP_Uncategorized,CAT_Internet Services""}",,,,,,,,1,1,dfp,"APP_Uncategorized,CAT_Internet Services",,,Sentinel-Demo-DNS+DFP+DHCP (DFP),192.168.1.201,Sentinel-Demo-DNS+DFP+DHCP,,,us-west-1,,,,,IN,#NAME?,A,NOERROR,,,,,,,0,,,,,,,,,,N/A,,
OpsManager,"10/26/2021, 2:28:40.485 PM",Infoblox,Data Connector,DNS Response,1,,,infoblox-virtual-machine,,,192.168.1.106,,"""contile.services.mozilla.com. 296 IN A 34.117.237.239 . 32768 4096 OPT """,TCP,41235,192.168.1.106,2.1.3,DNS Response IN A NOERROR,"InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1;InfobloxB1Region=us-west-1;InfobloxB1ConnectionType=dfp;InfobloxB1OPHName=Sentinel-Demo-DNS+DFP+DHCP;InfobloxB1OPHIPAddress=192.168.1.201;InfobloxB1Network=Sentinel-Demo-DNS+DFP+DHCP (DFP);InfobloxB1SrcOSVersion=;InfobloxB1DHCPFingerprint=;InfobloxB1DNSTags=APP_Uncategorized,CAT_Software/Hardware",DNS,contile.services.mozilla.com.,,00:50:56:0b:0f:15,,CommonSecurityLog,"{""InfobloxDNSQClass"":""IN"",""InfobloxDNSQType"":""A"",""InfobloxDNSQFlags"":""+EV"",""InfobloxDNSRCode"":""NOERROR"",""InfobloxAnCount"":""1"",""InfobloxNsCount"":""0"",""InfobloxArCount"":""1"",""InfobloxB1Region"":""us-west-1"",""InfobloxB1ConnectionType"":""dfp"",""InfobloxB1OPHName"":""Sentinel-Demo-DNS+DFP+DHCP"",""InfobloxB1OPHIPAddress"":""192.168.1.201"",""InfobloxB1Network"":""Sentinel-Demo-DNS+DFP+DHCP (DFP)"",""InfobloxB1DNSTags"":""APP_Uncategorized,CAT_Software/Hardware""}",,,,,,,,1,1,dfp,"APP_Uncategorized,CAT_Software/Hardware",,,Sentinel-Demo-DNS+DFP+DHCP (DFP),192.168.1.201,Sentinel-Demo-DNS+DFP+DHCP,,,us-west-1,,,,,IN,#NAME?,A,NOERROR,,,,,,,0,,,,,,,,,,N/A,,
OpsManager,"10/26/2021, 2:08:15.015 PM",Infoblox,Data Connector,DNS Response,1,,,infoblox-virtual-machine,,,192.168.1.106,,"""connectivity-check.ubuntu.com. 6 IN A 35.224.170.84 connectivity-check.ubuntu.com. 6 IN A 35.232.111.17 . 32768 4096 OPT """,TCP,64985,192.168.1.106,2.1.3,DNS Response IN A NOERROR,"InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=2;InfobloxNsCount=0;InfobloxArCount=1;InfobloxB1Region=us-west-1;InfobloxB1ConnectionType=dfp;InfobloxB1OPHName=Sentinel-Demo-DNS+DFP+DHCP;InfobloxB1OPHIPAddress=192.168.1.201;InfobloxB1Network=Sentinel-Demo-DNS+DFP+DHCP (DFP);InfobloxB1SrcOSVersion=;InfobloxB1DHCPFingerprint=;InfobloxB1DNSTags=APP_Uncategorized,CAT_Software/Hardware",DNS,connectivity-check.ubuntu.com.,,00:50:56:0b:0f:15,,CommonSecurityLog,"{""InfobloxDNSQClass"":""IN"",""InfobloxDNSQType"":""A"",""InfobloxDNSQFlags"":""+EV"",""InfobloxDNSRCode"":""NOERROR"",""InfobloxAnCount"":""2"",""InfobloxNsCount"":""0"",""InfobloxArCount"":""1"",""InfobloxB1Region"":""us-west-1"",""InfobloxB1ConnectionType"":""dfp"",""InfobloxB1OPHName"":""Sentinel-Demo-DNS+DFP+DHCP"",""InfobloxB1OPHIPAddress"":""192.168.1.201"",""InfobloxB1Network"":""Sentinel-Demo-DNS+DFP+DHCP (DFP)"",""InfobloxB1DNSTags"":""APP_Uncategorized,CAT_Software/Hardware""}",,,,,,,,2,1,dfp,"APP_Uncategorized,CAT_Software/Hardware",,,Sentinel-Demo-DNS+DFP+DHCP (DFP),192.168.1.201,Sentinel-Demo-DNS+DFP+DHCP,,,us-west-1,,,,,IN,#NAME?,A,NOERROR,,,,,,,0,,,,,,,,,,N/A,,
OpsManager,"10/26/2021, 2:13:41.580 PM",Infoblox,Data Connector,DNS Response,1,,,infoblox-virtual-machine,,,192.168.1.106,,"""int-classic-scout-production-1074780512.us-east-1.elb.amazonaws.com. 51 IN A 67.202.62.77 int-classic-scout-production-1074780512.us-east-1.elb.amazonaws.com. 51 IN A 44.194.147.142 . 32768 4096 OPT """,TCP,28250,192.168.1.106,2.1.3,DNS Response IN A NOERROR,"InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=2;InfobloxNsCount=0;InfobloxArCount=1;InfobloxB1Region=us-west-1;InfobloxB1ConnectionType=dfp;InfobloxB1OPHName=Sentinel-Demo-DNS+DFP+DHCP;InfobloxB1OPHIPAddress=192.168.1.201;InfobloxB1Network=Sentinel-Demo-DNS+DFP+DHCP (DFP);InfobloxB1SrcOSVersion=;InfobloxB1DHCPFingerprint=;InfobloxB1DNSTags=APP_Uncategorized,CAT_Internet Services",DNS,int-classic-scout-production-1074780512.us-east-1.elb.amazonaws.com.,,00:50:56:0b:0f:15,,CommonSecurityLog,"{""InfobloxDNSQClass"":""IN"",""InfobloxDNSQType"":""A"",""InfobloxDNSQFlags"":""+EV"",""InfobloxDNSRCode"":""NOERROR"",""InfobloxAnCount"":""2"",""InfobloxNsCount"":""0"",""InfobloxArCount"":""1"",""InfobloxB1Region"":""us-west-1"",""InfobloxB1ConnectionType"":""dfp"",""InfobloxB1OPHName"":""Sentinel-Demo-DNS+DFP+DHCP"",""InfobloxB1OPHIPAddress"":""192.168.1.201"",""InfobloxB1Network"":""Sentinel-Demo-DNS+DFP+DHCP (DFP)"",""InfobloxB1DNSTags"":""APP_Uncategorized,CAT_Internet Services""}",,,,,,,,2,1,dfp,"APP_Uncategorized,CAT_Internet Services",,,Sentinel-Demo-DNS+DFP+DHCP (DFP),192.168.1.201,Sentinel-Demo-DNS+DFP+DHCP,,,us-west-1,,,,,IN,#NAME?,A,NOERROR,,,,,,,0,,,,,,,,,,N/A,,
OpsManager,"10/26/2021, 2:12:52.891 PM",Infoblox,Data Connector,DHCP-LEASE-UPDATE,1,,,infoblox-virtual-machine,,,,,,,,192.168.1.106,2.1.3,DHCP Lease Update,"cat=""DHCP Lease Update"";InfobloxLeaseOp=Update;InfobloxClientID=01:00:50:56:0b:0f:15;InfobloxLifetime=300;InfobloxSubnetID=245079;InfobloxServerID=1;InfobloxLeaseUUID=996854c4-27ab-11ec-a802-7270aef5e23e;InfobloxFingerprintPr=true;InfobloxFingerprint=;InfobloxDHCPOptions=;code_12='dhcp-virtual-machine';code_53='\003';code_55='\001\002\006\014\017\032\034y\003!()*w\371\374\021';code_57='\377\377';code_61='\001\000PV\013\017\025';code_82='\013\004\300\250\001\311'",DHCP,,dhcp-virtual-machine,00:50:56:0b:0f:15,,CommonSecurityLog,"{""cat"":""\""DHCP Lease Update\"""",""InfobloxLeaseOp"":""Update"",""InfobloxClientID"":""01:00:50:56:0b:0f:15"",""InfobloxLifetime"":""300"",""InfobloxSubnetID"":""245079"",""InfobloxServerID"":""1"",""InfobloxLeaseUUID"":""996854c4-27ab-11ec-a802-7270aef5e23e"",""InfobloxFingerprintPr"":""true"",""code_12"":""'dhcp-virtual-machine'"",""code_53"":""'\\003'"",""code_55"":""'\\001\\002\\006\\014\\017\\032\\034y\\003!()*w\\371\\374\\021'"",""code_57"":""'\\377\\377'"",""code_61"":""'\\001\\000PV\\013\\017\\025'"",""code_82"":""'\\013\\004\\300\\250\\001\\311'""}","""DHCP Lease Update""",'dhcp-virtual-machine','\003','\001\002\006\014\017\032\034y\003!()*w\371\374\021','\377\377','\001\000PV\013\017\025','\013\004\300\250\001\311',,,,,,,,,,,,,,,01:00:50:56:0b:0f:15,,,,,,,,TRUE,Update,996854c4-27ab-11ec-a802-7270aef5e23e,300,,,,,1,245079,,,,,N/A,,

1 TenantId SourceSystem TimeGenerated [Pacific Time (US and Canada) Tijuana] TimeGenerated [UTC] DeviceVendor DeviceProduct DeviceEventClassID LogSeverity DeviceAction SimplifiedDeviceAction Computer ReceiptTime CommunicationDirection DestinationIP DeviceAddress DeviceName Message Protocol SourcePort SourceIP DeviceVersion Activity AdditionalExtensions ApplicationProtocol DestinationDnsDomain OriginalLogSeverity SourceHostName SourceMACAddress SourceUserName Type AdditionalExtensionsParsedNested cat code_12 code_53 code_55 code_57 code_61 code_82 InfobloxAnCount InfobloxArCount InfobloxB1ConnectionType InfobloxB1DNSTags InfobloxB1FeedName InfobloxB1FeedType InfobloxB1Network InfobloxB1OPHIPAddress InfobloxB1OPHName InfobloxB1PolicyAction InfobloxB1PolicyName InfobloxB1Region InfobloxB1SrcOSVersion InfobloxB1ThreatIndicator InfobloxClientID InfobloxCSiteId InfobloxDNSQClass InfobloxDNSQFlags InfobloxDNSQType InfobloxDNSRCode InfobloxDNSView InfobloxDomainCat InfobloxFingerprintPr InfobloxLeaseOp InfobloxLeaseUUID InfobloxLifetime InfobloxNsCount InfobloxPolicyID InfobloxRPZ InfobloxRPZRule InfobloxServerID InfobloxSubnetID InfobloxThreatConfidence InfobloxThreatLevel InfobloxThreatProperty ThreatLevel_Score ThreatLevel ThreatClass ThreatProperty
2 846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 10/26/2021, 2:16:58.298 PM 2/11/2021, 10:41:29.593 PM Infoblox Data Connector RPZ-QNAME-REDIRECT 0 REDIRECT REDIRECT infoblox-virtual-machine 208.50.179.13 Sentinel-Win-Main2 "RPZ QNAME REDIRECT rewrite amazon.com. [A] via CAT_Online Shopping.amazon.com." "rpz QNAME REDIRECT rewrite crl4.digicert.com. [A] via CAT_Streaming Media.crl4.digicert.com." 49835 18544 208.50.179.13 2.1.3 RPZ EVENT QNAME REDIRECT InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=CAT_Online Shopping.amazon.com.;InfobloxRPZ=CAT_Online Shopping;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=Online Shopping;InfobloxThreatProperty=;InfobloxThreatConfidence=;InfobloxThreatLevel= InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=CAT_Streaming Media.crl4.digicert.com.;InfobloxRPZ=CAT_Streaming Media;InfobloxCSiteId=;InfobloxPolicyID=99986;InfobloxDomainCat=Streaming Media;InfobloxThreatProperty=;InfobloxThreatConfidence=;InfobloxThreatLevel=;InfobloxB1Region=us-west-1;InfobloxB1ConnectionType=remote_client;InfobloxB1OPHName=;InfobloxB1OPHIPAddress=;InfobloxB1Network=BloxOne Endpoint;InfobloxB1SrcOSVersion=Windows 10 Enterprise;InfobloxB1DHCPFingerprint=;InfobloxB1DNSTags=APP_Microsoft 365,APP_Uncategorized,CAT_Content Server,CAT_Software/Hardware,CAT_Streaming Media;InfobloxB1ThreatIndicator=CAT;InfobloxB1FeedName=CAT_Streaming Media;InfobloxB1FeedType=FQDN;InfobloxB1PolicyName=Sentinel-Security-Policy;InfobloxB1PolicyAction=Redirect DNS amazon.com. crl4.digicert.com. 00:50:56:01:13:0f rdp CommonSecurityLog {"InfobloxDNSQType":"A","InfobloxRPZRule":"CAT_Streaming Media.crl4.digicert.com.","InfobloxRPZ":"CAT_Streaming Media","InfobloxPolicyID":"99986","InfobloxDomainCat":"Streaming Media","InfobloxB1Region":"us-west-1","InfobloxB1ConnectionType":"remote_client","InfobloxB1Network":"BloxOne Endpoint","InfobloxB1SrcOSVersion":"Windows 10 Enterprise","InfobloxB1DNSTags":"APP_Microsoft 365,APP_Uncategorized,CAT_Content Server,CAT_Software/Hardware,CAT_Streaming Media","InfobloxB1ThreatIndicator":"CAT","InfobloxB1FeedName":"CAT_Streaming Media","InfobloxB1FeedType":"FQDN","InfobloxB1PolicyName":"Sentinel-Security-Policy","InfobloxB1PolicyAction":"Redirect"} remote_client APP_Microsoft 365,APP_Uncategorized,CAT_Content Server,CAT_Software/Hardware,CAT_Streaming Media CAT_Streaming Media FQDN BloxOne Endpoint Redirect Sentinel-Security-Policy us-west-1 Windows 10 Enterprise CAT A Streaming Media 99986 CAT_Streaming Media CAT_Streaming Media.crl4.digicert.com. N/A
3 846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 10/26/2021, 2:52:30.581 PM 2/11/2021, 10:41:44.408 PM Infoblox Data Connector RPZ-QNAME-REDIRECT 0 REDIRECT REDIRECT infoblox-virtual-machine 192.168.1.90 "RPZ QNAME REDIRECT rewrite connectivity.office.com. [A] via CAT_Personal Pages.connectivity.office.com." "rpz QNAME REDIRECT rewrite ocsp.digicert.com. [AAAA] via CAT_Streaming Media.ocsp.digicert.com." 47868 31206 208.50.179.13 192.168.1.90 2.1.3 RPZ EVENT QNAME REDIRECT InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=CAT_Personal Pages.connectivity.office.com.;InfobloxRPZ=CAT_Personal Pages;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=Personal Pages;InfobloxThreatProperty=;InfobloxThreatConfidence=;InfobloxThreatLevel= InfobloxDNSView=default;InfobloxDNSQType=AAAA;InfobloxRPZRule=CAT_Streaming Media.ocsp.digicert.com.;InfobloxRPZ=CAT_Streaming Media;InfobloxCSiteId=261392d3041b4a9b96c47e3c2b8446dd;InfobloxPolicyID=99986;InfobloxDomainCat=Streaming Media;InfobloxThreatProperty=;InfobloxThreatConfidence=;InfobloxThreatLevel=;InfobloxB1Region=us-west-1;InfobloxB1ConnectionType=dfp;InfobloxB1OPHName=Sentinel-Demo-DNS+DFP+DHCP;InfobloxB1OPHIPAddress=192.168.1.201;InfobloxB1Network=Sentinel-Demo-DNS+DFP+DHCP (DFP);InfobloxB1SrcOSVersion=;InfobloxB1DHCPFingerprint=;InfobloxB1DNSTags=APP_Microsoft 365,APP_Uncategorized,CAT_Content Server,CAT_Software/Hardware,CAT_Streaming Media;InfobloxB1ThreatIndicator=CAT;InfobloxB1FeedName=CAT_Streaming Media;InfobloxB1FeedType=FQDN;InfobloxB1PolicyName=Sentinel-Security-Policy;InfobloxB1PolicyAction=Redirect DNS connectivity.office.com. ocsp.digicert.com. 00:50:56:0b:0f:80 CommonSecurityLog {"InfobloxDNSView":"default","InfobloxDNSQType":"AAAA","InfobloxRPZRule":"CAT_Streaming Media.ocsp.digicert.com.","InfobloxRPZ":"CAT_Streaming Media","InfobloxCSiteId":"261392d3041b4a9b96c47e3c2b8446dd","InfobloxPolicyID":"99986","InfobloxDomainCat":"Streaming Media","InfobloxB1Region":"us-west-1","InfobloxB1ConnectionType":"dfp","InfobloxB1OPHName":"Sentinel-Demo-DNS+DFP+DHCP","InfobloxB1OPHIPAddress":"192.168.1.201","InfobloxB1Network":"Sentinel-Demo-DNS+DFP+DHCP (DFP)","InfobloxB1DNSTags":"APP_Microsoft 365,APP_Uncategorized,CAT_Content Server,CAT_Software/Hardware,CAT_Streaming Media","InfobloxB1ThreatIndicator":"CAT","InfobloxB1FeedName":"CAT_Streaming Media","InfobloxB1FeedType":"FQDN","InfobloxB1PolicyName":"Sentinel-Security-Policy","InfobloxB1PolicyAction":"Redirect"} dfp APP_Microsoft 365,APP_Uncategorized,CAT_Content Server,CAT_Software/Hardware,CAT_Streaming Media CAT_Streaming Media FQDN Sentinel-Demo-DNS+DFP+DHCP (DFP) 192.168.1.201 Sentinel-Demo-DNS+DFP+DHCP Redirect Sentinel-Security-Policy us-west-1 CAT 261392d3041b4a9b96c47e3c2b8446dd AAAA default Streaming Media 99986 CAT_Streaming Media CAT_Streaming Media.ocsp.digicert.com. N/A
4 846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 10/26/2021, 2:43:39.969 PM 2/11/2021, 10:41:46.222 PM Infoblox Data Connector RPZ-QNAME-REDIRECT 0 REDIRECT REDIRECT infoblox-virtual-machine 192.168.1.106 "RPZ QNAME REDIRECT rewrite connectivity.office.com. [A] via CAT_Personal Pages.connectivity.office.com." "rpz QNAME REDIRECT rewrite www.amazon.com. [A] via CAT_Online Shopping.www.amazon.com." 49835 7930 208.50.179.13 192.168.1.106 2.1.3 RPZ EVENT QNAME REDIRECT InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=CAT_Personal Pages.connectivity.office.com.;InfobloxRPZ=CAT_Personal Pages;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=Personal Pages;InfobloxThreatProperty=;InfobloxThreatConfidence=;InfobloxThreatLevel= InfobloxDNSView=default;InfobloxDNSQType=A;InfobloxRPZRule=CAT_Online Shopping.www.amazon.com.;InfobloxRPZ=CAT_Online Shopping;InfobloxCSiteId=261392d3041b4a9b96c47e3c2b8446dd;InfobloxPolicyID=99986;InfobloxDomainCat=Online Shopping;InfobloxThreatProperty=;InfobloxThreatConfidence=;InfobloxThreatLevel=;InfobloxB1Region=us-west-1;InfobloxB1ConnectionType=dfp;InfobloxB1OPHName=Sentinel-Demo-DNS+DFP+DHCP;InfobloxB1OPHIPAddress=192.168.1.201;InfobloxB1Network=Sentinel-Demo-DNS+DFP+DHCP (DFP);InfobloxB1SrcOSVersion=;InfobloxB1DHCPFingerprint=;InfobloxB1DNSTags=APP_Uncategorized,CAT_Content Server,CAT_Online Shopping;InfobloxB1ThreatIndicator=CAT;InfobloxB1FeedName=CAT_Online Shopping;InfobloxB1FeedType=FQDN;InfobloxB1PolicyName=Sentinel-Security-Policy;InfobloxB1PolicyAction=Redirect DNS connectivity.office.com. www.amazon.com. 00:50:56:0b:0f:15 CommonSecurityLog {"InfobloxDNSView":"default","InfobloxDNSQType":"A","InfobloxRPZRule":"CAT_Online Shopping.www.amazon.com.","InfobloxRPZ":"CAT_Online Shopping","InfobloxCSiteId":"261392d3041b4a9b96c47e3c2b8446dd","InfobloxPolicyID":"99986","InfobloxDomainCat":"Online Shopping","InfobloxB1Region":"us-west-1","InfobloxB1ConnectionType":"dfp","InfobloxB1OPHName":"Sentinel-Demo-DNS+DFP+DHCP","InfobloxB1OPHIPAddress":"192.168.1.201","InfobloxB1Network":"Sentinel-Demo-DNS+DFP+DHCP (DFP)","InfobloxB1DNSTags":"APP_Uncategorized,CAT_Content Server,CAT_Online Shopping","InfobloxB1ThreatIndicator":"CAT","InfobloxB1FeedName":"CAT_Online Shopping","InfobloxB1FeedType":"FQDN","InfobloxB1PolicyName":"Sentinel-Security-Policy","InfobloxB1PolicyAction":"Redirect"} dfp APP_Uncategorized,CAT_Content Server,CAT_Online Shopping CAT_Online Shopping FQDN Sentinel-Demo-DNS+DFP+DHCP (DFP) 192.168.1.201 Sentinel-Demo-DNS+DFP+DHCP Redirect Sentinel-Security-Policy us-west-1 CAT 261392d3041b4a9b96c47e3c2b8446dd A default Online Shopping 99986 CAT_Online Shopping CAT_Online Shopping.www.amazon.com. N/A
5 846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 10/26/2021, 2:28:39.138 PM 2/11/2021, 10:41:37.435 PM Infoblox Data Connector RPZ-QNAME-REDIRECT 0 REDIRECT REDIRECT infoblox-virtual-machine 192.168.1.106 "RPZ QNAME REDIRECT rewrite facebook.com. [A] via CAT_Social Networking.facebook.com." "rpz QNAME REDIRECT rewrite www.amazon.com. [AAAA] via CAT_Online Shopping.www.amazon.com." 47868 31846 208.50.179.13 192.168.1.106 2.1.3 RPZ EVENT QNAME REDIRECT InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=CAT_Social Networking.facebook.com.;InfobloxRPZ=CAT_Social Networking;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=Social Networking;InfobloxThreatProperty=;InfobloxThreatConfidence=;InfobloxThreatLevel= InfobloxDNSView=default;InfobloxDNSQType=AAAA;InfobloxRPZRule=CAT_Online Shopping.www.amazon.com.;InfobloxRPZ=CAT_Online Shopping;InfobloxCSiteId=261392d3041b4a9b96c47e3c2b8446dd;InfobloxPolicyID=99986;InfobloxDomainCat=Online Shopping;InfobloxThreatProperty=;InfobloxThreatConfidence=;InfobloxThreatLevel=;InfobloxB1Region=us-west-1;InfobloxB1ConnectionType=dfp;InfobloxB1OPHName=Sentinel-Demo-DNS+DFP+DHCP;InfobloxB1OPHIPAddress=192.168.1.201;InfobloxB1Network=Sentinel-Demo-DNS+DFP+DHCP (DFP);InfobloxB1SrcOSVersion=;InfobloxB1DHCPFingerprint=;InfobloxB1DNSTags=APP_GoToMyPC,APP_Uncategorized,CAT_Content Server,CAT_Online Shopping;InfobloxB1ThreatIndicator=CAT;InfobloxB1FeedName=CAT_Online Shopping;InfobloxB1FeedType=FQDN;InfobloxB1PolicyName=Sentinel-Security-Policy;InfobloxB1PolicyAction=Redirect DNS facebook.com. www.amazon.com. 00:50:56:0b:0f:15 CommonSecurityLog {"InfobloxDNSView":"default","InfobloxDNSQType":"AAAA","InfobloxRPZRule":"CAT_Online Shopping.www.amazon.com.","InfobloxRPZ":"CAT_Online Shopping","InfobloxCSiteId":"261392d3041b4a9b96c47e3c2b8446dd","InfobloxPolicyID":"99986","InfobloxDomainCat":"Online Shopping","InfobloxB1Region":"us-west-1","InfobloxB1ConnectionType":"dfp","InfobloxB1OPHName":"Sentinel-Demo-DNS+DFP+DHCP","InfobloxB1OPHIPAddress":"192.168.1.201","InfobloxB1Network":"Sentinel-Demo-DNS+DFP+DHCP (DFP)","InfobloxB1DNSTags":"APP_GoToMyPC,APP_Uncategorized,CAT_Content Server,CAT_Online Shopping","InfobloxB1ThreatIndicator":"CAT","InfobloxB1FeedName":"CAT_Online Shopping","InfobloxB1FeedType":"FQDN","InfobloxB1PolicyName":"Sentinel-Security-Policy","InfobloxB1PolicyAction":"Redirect"} dfp APP_GoToMyPC,APP_Uncategorized,CAT_Content Server,CAT_Online Shopping CAT_Online Shopping FQDN Sentinel-Demo-DNS+DFP+DHCP (DFP) 192.168.1.201 Sentinel-Demo-DNS+DFP+DHCP Redirect Sentinel-Security-Policy us-west-1 CAT 261392d3041b4a9b96c47e3c2b8446dd AAAA default Online Shopping 99986 CAT_Online Shopping CAT_Online Shopping.www.amazon.com. N/A
6 846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 10/26/2021, 2:28:42.405 PM 2/11/2021, 10:41:38.519 PM Infoblox Data Connector RPZ-QNAME-REDIRECT 0 REDIRECT REDIRECT infoblox-virtual-machine 192.168.1.106 "RPZ QNAME REDIRECT rewrite facebook.com. [A] via CAT_Social Networking.facebook.com." "rpz QNAME REDIRECT rewrite www.amazon.com. [A] via CAT_Online Shopping.www.amazon.com." 49835 60808 208.50.179.13 192.168.1.106 2.1.3 RPZ EVENT QNAME REDIRECT InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=CAT_Social Networking.facebook.com.;InfobloxRPZ=CAT_Social Networking;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=Social Networking;InfobloxThreatProperty=;InfobloxThreatConfidence=;InfobloxThreatLevel= InfobloxDNSView=default;InfobloxDNSQType=A;InfobloxRPZRule=CAT_Online Shopping.www.amazon.com.;InfobloxRPZ=CAT_Online Shopping;InfobloxCSiteId=261392d3041b4a9b96c47e3c2b8446dd;InfobloxPolicyID=99986;InfobloxDomainCat=Online Shopping;InfobloxThreatProperty=;InfobloxThreatConfidence=;InfobloxThreatLevel=;InfobloxB1Region=us-west-1;InfobloxB1ConnectionType=dfp;InfobloxB1OPHName=Sentinel-Demo-DNS+DFP+DHCP;InfobloxB1OPHIPAddress=192.168.1.201;InfobloxB1Network=Sentinel-Demo-DNS+DFP+DHCP (DFP);InfobloxB1SrcOSVersion=;InfobloxB1DHCPFingerprint=;InfobloxB1DNSTags=APP_Uncategorized,CAT_Content Server,CAT_Online Shopping;InfobloxB1ThreatIndicator=CAT;InfobloxB1FeedName=CAT_Online Shopping;InfobloxB1FeedType=FQDN;InfobloxB1PolicyName=Sentinel-Security-Policy;InfobloxB1PolicyAction=Redirect DNS facebook.com. www.amazon.com. 00:50:56:0b:0f:15 CommonSecurityLog {"InfobloxDNSView":"default","InfobloxDNSQType":"A","InfobloxRPZRule":"CAT_Online Shopping.www.amazon.com.","InfobloxRPZ":"CAT_Online Shopping","InfobloxCSiteId":"261392d3041b4a9b96c47e3c2b8446dd","InfobloxPolicyID":"99986","InfobloxDomainCat":"Online Shopping","InfobloxB1Region":"us-west-1","InfobloxB1ConnectionType":"dfp","InfobloxB1OPHName":"Sentinel-Demo-DNS+DFP+DHCP","InfobloxB1OPHIPAddress":"192.168.1.201","InfobloxB1Network":"Sentinel-Demo-DNS+DFP+DHCP (DFP)","InfobloxB1DNSTags":"APP_Uncategorized,CAT_Content Server,CAT_Online Shopping","InfobloxB1ThreatIndicator":"CAT","InfobloxB1FeedName":"CAT_Online Shopping","InfobloxB1FeedType":"FQDN","InfobloxB1PolicyName":"Sentinel-Security-Policy","InfobloxB1PolicyAction":"Redirect"} dfp APP_Uncategorized,CAT_Content Server,CAT_Online Shopping CAT_Online Shopping FQDN Sentinel-Demo-DNS+DFP+DHCP (DFP) 192.168.1.201 Sentinel-Demo-DNS+DFP+DHCP Redirect Sentinel-Security-Policy us-west-1 CAT 261392d3041b4a9b96c47e3c2b8446dd A default Online Shopping 99986 CAT_Online Shopping CAT_Online Shopping.www.amazon.com. N/A
7 846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 10/26/2021, 2:08:22.872 PM 2/11/2021, 11:45:03.791 PM Infoblox Data Connector RPZ-QNAME-REDIRECT 0 REDIRECT REDIRECT infoblox-virtual-machine 208.50.179.13 Sentinel-Win-Main2 "RPZ QNAME REDIRECT rewrite netflix.com. [A] via CAT_Entertainment.netflix.com." "rpz QNAME REDIRECT rewrite photograph.myfw.us. [A] via CAT_Malicious Sites.photograph.myfw.us." 10893 42222 208.50.179.13 2.1.3 RPZ EVENT QNAME REDIRECT InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=CAT_Entertainment.netflix.com.;InfobloxRPZ=CAT_Entertainment;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=Entertainment;InfobloxThreatProperty=;InfobloxThreatConfidence=;InfobloxThreatLevel= InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=CAT_Malicious Sites.photograph.myfw.us.;InfobloxRPZ=CAT_Malicious Sites;InfobloxCSiteId=;InfobloxPolicyID=99986;InfobloxDomainCat=Malicious Sites;InfobloxThreatProperty=;InfobloxThreatConfidence=;InfobloxThreatLevel=;InfobloxB1Region=us-west-1;InfobloxB1ConnectionType=remote_client;InfobloxB1OPHName=;InfobloxB1OPHIPAddress=;InfobloxB1Network=BloxOne Endpoint;InfobloxB1SrcOSVersion=Windows 10 Enterprise;InfobloxB1DHCPFingerprint=;InfobloxB1DNSTags=APP_Uncategorized,CAT_Malicious Sites,etiqrisk-ip;InfobloxB1ThreatIndicator=CAT;InfobloxB1FeedName=CAT_Malicious Sites;InfobloxB1FeedType=FQDN;InfobloxB1PolicyName=Sentinel-Security-Policy;InfobloxB1PolicyAction=Redirect DNS netflix.com. photograph.myfw.us. 00:50:56:01:13:0f rdp CommonSecurityLog {"InfobloxDNSQType":"A","InfobloxRPZRule":"CAT_Malicious Sites.photograph.myfw.us.","InfobloxRPZ":"CAT_Malicious Sites","InfobloxPolicyID":"99986","InfobloxDomainCat":"Malicious Sites","InfobloxB1Region":"us-west-1","InfobloxB1ConnectionType":"remote_client","InfobloxB1Network":"BloxOne Endpoint","InfobloxB1SrcOSVersion":"Windows 10 Enterprise","InfobloxB1DNSTags":"APP_Uncategorized,CAT_Malicious Sites,etiqrisk-ip","InfobloxB1ThreatIndicator":"CAT","InfobloxB1FeedName":"CAT_Malicious Sites","InfobloxB1FeedType":"FQDN","InfobloxB1PolicyName":"Sentinel-Security-Policy","InfobloxB1PolicyAction":"Redirect"} remote_client APP_Uncategorized,CAT_Malicious Sites,etiqrisk-ip CAT_Malicious Sites FQDN BloxOne Endpoint Redirect Sentinel-Security-Policy us-west-1 Windows 10 Enterprise CAT A Malicious Sites 99986 CAT_Malicious Sites CAT_Malicious Sites.photograph.myfw.us. N/A
8 846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 10/26/2021, 2:43:40.097 PM 2/11/2021, 11:45:03.791 PM Infoblox Data Connector RPZ-QNAME-REDIRECT 0 REDIRECT REDIRECT infoblox-virtual-machine 192.168.1.106 "RPZ QNAME REDIRECT rewrite netflix.com. [A] via CAT_Entertainment.netflix.com." "rpz QNAME REDIRECT rewrite www.ebay.com. [AAAA] via CAT_Auctions/Classifieds.www.ebay.com." 36196 44483 208.50.179.13 192.168.1.106 2.1.3 RPZ EVENT QNAME REDIRECT InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=CAT_Entertainment.netflix.com.;InfobloxRPZ=CAT_Entertainment;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=Entertainment;InfobloxThreatProperty=;InfobloxThreatConfidence=;InfobloxThreatLevel= InfobloxDNSView=default;InfobloxDNSQType=AAAA;InfobloxRPZRule=CAT_Auctions/Classifieds.www.ebay.com.;InfobloxRPZ=CAT_Auctions/Classifieds;InfobloxCSiteId=261392d3041b4a9b96c47e3c2b8446dd;InfobloxPolicyID=99986;InfobloxDomainCat=Auctions/Classifieds;InfobloxThreatProperty=;InfobloxThreatConfidence=;InfobloxThreatLevel=;InfobloxB1Region=us-west-1;InfobloxB1ConnectionType=dfp;InfobloxB1OPHName=Sentinel-Demo-DNS+DFP+DHCP;InfobloxB1OPHIPAddress=192.168.1.201;InfobloxB1Network=Sentinel-Demo-DNS+DFP+DHCP (DFP);InfobloxB1SrcOSVersion=;InfobloxB1DHCPFingerprint=;InfobloxB1DNSTags=APP_Uncategorized,CAT_Auctions/Classifieds,CAT_Content Server;InfobloxB1ThreatIndicator=CAT;InfobloxB1FeedName=CAT_Auctions/Classifieds;InfobloxB1FeedType=FQDN;InfobloxB1PolicyName=Sentinel-Security-Policy;InfobloxB1PolicyAction=Redirect DNS netflix.com. www.ebay.com. 00:50:56:0b:0f:15 CommonSecurityLog {"InfobloxDNSView":"default","InfobloxDNSQType":"AAAA","InfobloxRPZRule":"CAT_Auctions/Classifieds.www.ebay.com.","InfobloxRPZ":"CAT_Auctions/Classifieds","InfobloxCSiteId":"261392d3041b4a9b96c47e3c2b8446dd","InfobloxPolicyID":"99986","InfobloxDomainCat":"Auctions/Classifieds","InfobloxB1Region":"us-west-1","InfobloxB1ConnectionType":"dfp","InfobloxB1OPHName":"Sentinel-Demo-DNS+DFP+DHCP","InfobloxB1OPHIPAddress":"192.168.1.201","InfobloxB1Network":"Sentinel-Demo-DNS+DFP+DHCP (DFP)","InfobloxB1DNSTags":"APP_Uncategorized,CAT_Auctions/Classifieds,CAT_Content Server","InfobloxB1ThreatIndicator":"CAT","InfobloxB1FeedName":"CAT_Auctions/Classifieds","InfobloxB1FeedType":"FQDN","InfobloxB1PolicyName":"Sentinel-Security-Policy","InfobloxB1PolicyAction":"Redirect"} dfp APP_Uncategorized,CAT_Auctions/Classifieds,CAT_Content Server CAT_Auctions/Classifieds FQDN Sentinel-Demo-DNS+DFP+DHCP (DFP) 192.168.1.201 Sentinel-Demo-DNS+DFP+DHCP Redirect Sentinel-Security-Policy us-west-1 CAT 261392d3041b4a9b96c47e3c2b8446dd AAAA default Auctions/Classifieds 99986 CAT_Auctions/Classifieds CAT_Auctions/Classifieds.www.ebay.com. N/A
9 846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 10/26/2021, 2:28:40.171 PM 2/11/2021, 11:48:44.899 PM Infoblox Data Connector RPZ-QNAME-REDIRECT 0 REDIRECT REDIRECT infoblox-virtual-machine 192.168.1.106 "RPZ QNAME REDIRECT rewrite vodka.com. [A] via CAT_Alcohol.vodka.com." "rpz QNAME REDIRECT rewrite www.ebay.com. [AAAA] via CAT_Auctions/Classifieds.www.ebay.com." 23916 41235 208.50.179.13 192.168.1.106 2.1.3 RPZ EVENT QNAME REDIRECT InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=CAT_Alcohol.vodka.com.;InfobloxRPZ=CAT_Alcohol;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=Alcohol;InfobloxThreatProperty=;InfobloxThreatConfidence=;InfobloxThreatLevel= InfobloxDNSView=default;InfobloxDNSQType=AAAA;InfobloxRPZRule=CAT_Auctions/Classifieds.www.ebay.com.;InfobloxRPZ=CAT_Auctions/Classifieds;InfobloxCSiteId=261392d3041b4a9b96c47e3c2b8446dd;InfobloxPolicyID=99986;InfobloxDomainCat=Auctions/Classifieds;InfobloxThreatProperty=;InfobloxThreatConfidence=;InfobloxThreatLevel=;InfobloxB1Region=us-west-1;InfobloxB1ConnectionType=dfp;InfobloxB1OPHName=Sentinel-Demo-DNS+DFP+DHCP;InfobloxB1OPHIPAddress=192.168.1.201;InfobloxB1Network=Sentinel-Demo-DNS+DFP+DHCP (DFP);InfobloxB1SrcOSVersion=;InfobloxB1DHCPFingerprint=;InfobloxB1DNSTags=APP_Uncategorized,CAT_Auctions/Classifieds,CAT_Content Server;InfobloxB1ThreatIndicator=CAT;InfobloxB1FeedName=CAT_Auctions/Classifieds;InfobloxB1FeedType=FQDN;InfobloxB1PolicyName=Sentinel-Security-Policy;InfobloxB1PolicyAction=Redirect DNS vodka.com. www.ebay.com. 00:50:56:0b:0f:15 CommonSecurityLog {"InfobloxDNSView":"default","InfobloxDNSQType":"AAAA","InfobloxRPZRule":"CAT_Auctions/Classifieds.www.ebay.com.","InfobloxRPZ":"CAT_Auctions/Classifieds","InfobloxCSiteId":"261392d3041b4a9b96c47e3c2b8446dd","InfobloxPolicyID":"99986","InfobloxDomainCat":"Auctions/Classifieds","InfobloxB1Region":"us-west-1","InfobloxB1ConnectionType":"dfp","InfobloxB1OPHName":"Sentinel-Demo-DNS+DFP+DHCP","InfobloxB1OPHIPAddress":"192.168.1.201","InfobloxB1Network":"Sentinel-Demo-DNS+DFP+DHCP (DFP)","InfobloxB1DNSTags":"APP_Uncategorized,CAT_Auctions/Classifieds,CAT_Content Server","InfobloxB1ThreatIndicator":"CAT","InfobloxB1FeedName":"CAT_Auctions/Classifieds","InfobloxB1FeedType":"FQDN","InfobloxB1PolicyName":"Sentinel-Security-Policy","InfobloxB1PolicyAction":"Redirect"} dfp APP_Uncategorized,CAT_Auctions/Classifieds,CAT_Content Server CAT_Auctions/Classifieds FQDN Sentinel-Demo-DNS+DFP+DHCP (DFP) 192.168.1.201 Sentinel-Demo-DNS+DFP+DHCP Redirect Sentinel-Security-Policy us-west-1 CAT 261392d3041b4a9b96c47e3c2b8446dd AAAA default Auctions/Classifieds 99986 CAT_Auctions/Classifieds CAT_Auctions/Classifieds.www.ebay.com. N/A
10 846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 10/26/2021, 2:43:24.870 PM 2/11/2021, 11:48:49.601 PM Infoblox Data Connector RPZ-QNAME-REDIRECT 0 REDIRECT REDIRECT infoblox-virtual-machine 208.50.179.13 Sentinel-Win-Main2 "RPZ QNAME REDIRECT rewrite vodka.com. [A] via CAT_Alcohol.vodka.com." "rpz QNAME REDIRECT rewrite salesforce.com. [A] via APP_Salesforce.salesforce.com." 40544 6155 208.50.179.13 2.1.3 RPZ EVENT QNAME REDIRECT InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=CAT_Alcohol.vodka.com.;InfobloxRPZ=CAT_Alcohol;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=Alcohol;InfobloxThreatProperty=;InfobloxThreatConfidence=;InfobloxThreatLevel= InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=APP_Salesforce.salesforce.com.;InfobloxRPZ=APP_Salesforce;InfobloxCSiteId=;InfobloxPolicyID=99986;InfobloxDomainCat=Salesforce;InfobloxThreatProperty=;InfobloxThreatConfidence=;InfobloxThreatLevel=;InfobloxB1Region=us-west-1;InfobloxB1ConnectionType=remote_client;InfobloxB1OPHName=;InfobloxB1OPHIPAddress=;InfobloxB1Network=BloxOne Endpoint;InfobloxB1SrcOSVersion=Windows 10 Enterprise;InfobloxB1DHCPFingerprint=;InfobloxB1DNSTags=APP_Salesforce,APP_Uncategorized,CAT_Business,CAT_Software/Hardware;InfobloxB1ThreatIndicator=APP;InfobloxB1FeedName=APP_Salesforce;InfobloxB1FeedType=FQDN;InfobloxB1PolicyName=Sentinel-Security-Policy;InfobloxB1PolicyAction=Redirect DNS vodka.com. salesforce.com. 00:50:56:01:13:0f rdp CommonSecurityLog {"InfobloxDNSQType":"A","InfobloxRPZRule":"APP_Salesforce.salesforce.com.","InfobloxRPZ":"APP_Salesforce","InfobloxPolicyID":"99986","InfobloxDomainCat":"Salesforce","InfobloxB1Region":"us-west-1","InfobloxB1ConnectionType":"remote_client","InfobloxB1Network":"BloxOne Endpoint","InfobloxB1SrcOSVersion":"Windows 10 Enterprise","InfobloxB1DNSTags":"APP_Salesforce,APP_Uncategorized,CAT_Business,CAT_Software/Hardware","InfobloxB1ThreatIndicator":"APP","InfobloxB1FeedName":"APP_Salesforce","InfobloxB1FeedType":"FQDN","InfobloxB1PolicyName":"Sentinel-Security-Policy","InfobloxB1PolicyAction":"Redirect"} remote_client APP_Salesforce,APP_Uncategorized,CAT_Business,CAT_Software/Hardware APP_Salesforce FQDN BloxOne Endpoint Redirect Sentinel-Security-Policy us-west-1 Windows 10 Enterprise APP A Salesforce 99986 APP_Salesforce APP_Salesforce.salesforce.com. N/A
11 846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 10/26/2021, 2:43:32.735 PM 2/11/2021, 11:48:55.783 PM Infoblox Data Connector RPZ-QNAME-REDIRECT 0 REDIRECT REDIRECT infoblox-virtual-machine 208.50.179.13 Sentinel-Win-Main2 "RPZ QNAME REDIRECT rewrite vodka.com. [A] via CAT_Alcohol.vodka.com." "rpz QNAME REDIRECT rewrite github.com. [A] via APP_GitHub.github.com." 40544 42085 208.50.179.13 2.1.3 RPZ EVENT QNAME REDIRECT InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=CAT_Alcohol.vodka.com.;InfobloxRPZ=CAT_Alcohol;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=Alcohol;InfobloxThreatProperty=;InfobloxThreatConfidence=;InfobloxThreatLevel= InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=APP_GitHub.github.com.;InfobloxRPZ=APP_GitHub;InfobloxCSiteId=;InfobloxPolicyID=99986;InfobloxDomainCat=GitHub;InfobloxThreatProperty=;InfobloxThreatConfidence=;InfobloxThreatLevel=;InfobloxB1Region=us-west-1;InfobloxB1ConnectionType=remote_client;InfobloxB1OPHName=;InfobloxB1OPHIPAddress=;InfobloxB1Network=BloxOne Endpoint;InfobloxB1SrcOSVersion=Windows 10 Enterprise;InfobloxB1DHCPFingerprint=;InfobloxB1DNSTags=APP_GitHub,APP_Uncategorized,CAT_Technical/Business Forums;InfobloxB1ThreatIndicator=APP;InfobloxB1FeedName=APP_GitHub;InfobloxB1FeedType=FQDN;InfobloxB1PolicyName=Sentinel-Security-Policy;InfobloxB1PolicyAction=Redirect DNS vodka.com. github.com. 00:50:56:01:13:0f rdp CommonSecurityLog {"InfobloxDNSQType":"A","InfobloxRPZRule":"APP_GitHub.github.com.","InfobloxRPZ":"APP_GitHub","InfobloxPolicyID":"99986","InfobloxDomainCat":"GitHub","InfobloxB1Region":"us-west-1","InfobloxB1ConnectionType":"remote_client","InfobloxB1Network":"BloxOne Endpoint","InfobloxB1SrcOSVersion":"Windows 10 Enterprise","InfobloxB1DNSTags":"APP_GitHub,APP_Uncategorized,CAT_Technical/Business Forums","InfobloxB1ThreatIndicator":"APP","InfobloxB1FeedName":"APP_GitHub","InfobloxB1FeedType":"FQDN","InfobloxB1PolicyName":"Sentinel-Security-Policy","InfobloxB1PolicyAction":"Redirect"} remote_client APP_GitHub,APP_Uncategorized,CAT_Technical/Business Forums APP_GitHub FQDN BloxOne Endpoint Redirect Sentinel-Security-Policy us-west-1 Windows 10 Enterprise APP A GitHub 99986 APP_GitHub APP_GitHub.github.com. N/A
12 846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 10/26/2021, 2:43:40.097 PM 2/11/2021, 11:48:44.899 PM Infoblox Data Connector RPZ-QNAME-REDIRECT 0 REDIRECT REDIRECT infoblox-virtual-machine 208.50.179.13 Sentinel-Win-Main2 "RPZ QNAME REDIRECT rewrite wine.com. [A] via CAT_Alcohol.wine.com." "rpz QNAME REDIRECT rewrite dropbox.com. [A] via APP_Dropbox.dropbox.com." 23916 43754 208.50.179.13 2.1.3 RPZ EVENT QNAME REDIRECT InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=CAT_Alcohol.wine.com.;InfobloxRPZ=CAT_Alcohol;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=Alcohol;InfobloxThreatProperty=;InfobloxThreatConfidence=;InfobloxThreatLevel= InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=APP_Dropbox.dropbox.com.;InfobloxRPZ=APP_Dropbox;InfobloxCSiteId=;InfobloxPolicyID=99986;InfobloxDomainCat=Dropbox;InfobloxThreatProperty=;InfobloxThreatConfidence=;InfobloxThreatLevel=;InfobloxB1Region=us-west-1;InfobloxB1ConnectionType=remote_client;InfobloxB1OPHName=;InfobloxB1OPHIPAddress=;InfobloxB1Network=BloxOne Endpoint;InfobloxB1SrcOSVersion=Windows 10 Enterprise;InfobloxB1DHCPFingerprint=;InfobloxB1DNSTags=APP_Dropbox,APP_Uncategorized,CAT_Personal Network Storage;InfobloxB1ThreatIndicator=APP;InfobloxB1FeedName=APP_Dropbox;InfobloxB1FeedType=FQDN;InfobloxB1PolicyName=Sentinel-Security-Policy;InfobloxB1PolicyAction=Redirect DNS wine.com. dropbox.com. 00:50:56:01:13:0f rdp CommonSecurityLog {"InfobloxDNSQType":"A","InfobloxRPZRule":"APP_Dropbox.dropbox.com.","InfobloxRPZ":"APP_Dropbox","InfobloxPolicyID":"99986","InfobloxDomainCat":"Dropbox","InfobloxB1Region":"us-west-1","InfobloxB1ConnectionType":"remote_client","InfobloxB1Network":"BloxOne Endpoint","InfobloxB1SrcOSVersion":"Windows 10 Enterprise","InfobloxB1DNSTags":"APP_Dropbox,APP_Uncategorized,CAT_Personal Network Storage","InfobloxB1ThreatIndicator":"APP","InfobloxB1FeedName":"APP_Dropbox","InfobloxB1FeedType":"FQDN","InfobloxB1PolicyName":"Sentinel-Security-Policy","InfobloxB1PolicyAction":"Redirect"} remote_client APP_Dropbox,APP_Uncategorized,CAT_Personal Network Storage APP_Dropbox FQDN BloxOne Endpoint Redirect Sentinel-Security-Policy us-west-1 Windows 10 Enterprise APP A Dropbox 99986 APP_Dropbox APP_Dropbox.dropbox.com. N/A
13 846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 10/26/2021, 2:43:32.735 PM 2/11/2021, 11:51:40.459 PM Infoblox Data Connector RPZ-QNAME-REDIRECT 0 REDIRECT REDIRECT infoblox-virtual-machine 208.50.179.13 Sentinel-Win-Main2 "RPZ QNAME REDIRECT rewrite youtube.com. [A] via CAT_Media Sharing.youtube.com." "rpz QNAME REDIRECT rewrite www.gstatic.com. [A] via APP_Dropbox.www.gstatic.com." 11091 42085 208.50.179.13 2.1.3 RPZ EVENT QNAME REDIRECT InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=CAT_Media Sharing.youtube.com.;InfobloxRPZ=CAT_Media Sharing;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=Media Sharing;InfobloxThreatProperty=;InfobloxThreatConfidence=;InfobloxThreatLevel= InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=APP_Dropbox.www.gstatic.com.;InfobloxRPZ=APP_Dropbox;InfobloxCSiteId=;InfobloxPolicyID=99986;InfobloxDomainCat=Dropbox;InfobloxThreatProperty=;InfobloxThreatConfidence=;InfobloxThreatLevel=;InfobloxB1Region=us-west-1;InfobloxB1ConnectionType=remote_client;InfobloxB1OPHName=;InfobloxB1OPHIPAddress=;InfobloxB1Network=BloxOne Endpoint;InfobloxB1SrcOSVersion=Windows 10 Enterprise;InfobloxB1DHCPFingerprint=;InfobloxB1DNSTags=APP_Box,APP_Dropbox,APP_Google Drive,APP_Google Gmail,APP_Google Jamboard,APP_Google Meet,APP_Google Sites,APP_Google Voice,APP_Uncategorized,CAT_Content Server,CAT_Internet Services;InfobloxB1ThreatIndicator=APP;InfobloxB1FeedName=APP_Dropbox;InfobloxB1FeedType=FQDN;InfobloxB1PolicyName=Sentinel-Security-Policy;InfobloxB1PolicyAction=Redirect DNS youtube.com. www.gstatic.com. 00:50:56:01:13:0f rdp CommonSecurityLog {"InfobloxDNSQType":"A","InfobloxRPZRule":"APP_Dropbox.www.gstatic.com.","InfobloxRPZ":"APP_Dropbox","InfobloxPolicyID":"99986","InfobloxDomainCat":"Dropbox","InfobloxB1Region":"us-west-1","InfobloxB1ConnectionType":"remote_client","InfobloxB1Network":"BloxOne Endpoint","InfobloxB1SrcOSVersion":"Windows 10 Enterprise","InfobloxB1DNSTags":"APP_Box,APP_Dropbox,APP_Google Drive,APP_Google Gmail,APP_Google Jamboard,APP_Google Meet,APP_Google Sites,APP_Google Voice,APP_Uncategorized,CAT_Content Server,CAT_Internet Services","InfobloxB1ThreatIndicator":"APP","InfobloxB1FeedName":"APP_Dropbox","InfobloxB1FeedType":"FQDN","InfobloxB1PolicyName":"Sentinel-Security-Policy","InfobloxB1PolicyAction":"Redirect"} remote_client APP_Box,APP_Dropbox,APP_Google Drive,APP_Google Gmail,APP_Google Jamboard,APP_Google Meet,APP_Google Sites,APP_Google Voice,APP_Uncategorized,CAT_Content Server,CAT_Internet Services APP_Dropbox FQDN BloxOne Endpoint Redirect Sentinel-Security-Policy us-west-1 Windows 10 Enterprise APP A Dropbox 99986 APP_Dropbox APP_Dropbox.www.gstatic.com. N/A
14 846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 10/26/2021, 2:43:40.265 PM 2/11/2021, 11:51:46.963 PM Infoblox Data Connector RPZ-QNAME-REDIRECT 0 REDIRECT REDIRECT infoblox-virtual-machine 208.50.179.13 Sentinel-Win-Main2 "RPZ QNAME REDIRECT rewrite youtube.com. [A] via CAT_Media Sharing.youtube.com." "rpz QNAME REDIRECT rewrite dropbox.com. [A] via APP_Dropbox.dropbox.com." 26823 41838 208.50.179.13 2.1.3 RPZ EVENT QNAME REDIRECT InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=CAT_Media Sharing.youtube.com.;InfobloxRPZ=CAT_Media Sharing;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=Media Sharing;InfobloxThreatProperty=;InfobloxThreatConfidence=;InfobloxThreatLevel= InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=APP_Dropbox.dropbox.com.;InfobloxRPZ=APP_Dropbox;InfobloxCSiteId=;InfobloxPolicyID=99986;InfobloxDomainCat=Dropbox;InfobloxThreatProperty=;InfobloxThreatConfidence=;InfobloxThreatLevel=;InfobloxB1Region=us-west-1;InfobloxB1ConnectionType=remote_client;InfobloxB1OPHName=;InfobloxB1OPHIPAddress=;InfobloxB1Network=BloxOne Endpoint;InfobloxB1SrcOSVersion=Windows 10 Enterprise;InfobloxB1DHCPFingerprint=;InfobloxB1DNSTags=APP_Dropbox,APP_Uncategorized,CAT_Personal Network Storage;InfobloxB1ThreatIndicator=APP;InfobloxB1FeedName=APP_Dropbox;InfobloxB1FeedType=FQDN;InfobloxB1PolicyName=Sentinel-Security-Policy;InfobloxB1PolicyAction=Redirect DNS youtube.com. dropbox.com. 00:50:56:01:13:0f rdp CommonSecurityLog {"InfobloxDNSQType":"A","InfobloxRPZRule":"APP_Dropbox.dropbox.com.","InfobloxRPZ":"APP_Dropbox","InfobloxPolicyID":"99986","InfobloxDomainCat":"Dropbox","InfobloxB1Region":"us-west-1","InfobloxB1ConnectionType":"remote_client","InfobloxB1Network":"BloxOne Endpoint","InfobloxB1SrcOSVersion":"Windows 10 Enterprise","InfobloxB1DNSTags":"APP_Dropbox,APP_Uncategorized,CAT_Personal Network Storage","InfobloxB1ThreatIndicator":"APP","InfobloxB1FeedName":"APP_Dropbox","InfobloxB1FeedType":"FQDN","InfobloxB1PolicyName":"Sentinel-Security-Policy","InfobloxB1PolicyAction":"Redirect"} remote_client APP_Dropbox,APP_Uncategorized,CAT_Personal Network Storage APP_Dropbox FQDN BloxOne Endpoint Redirect Sentinel-Security-Policy us-west-1 Windows 10 Enterprise APP A Dropbox 99986 APP_Dropbox APP_Dropbox.dropbox.com. N/A
15 846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 10/26/2021, 2:52:30.580 PM 2/11/2021, 11:34:33.764 PM Infoblox Data Connector RPZ-QNAME-NXDOMAIN RPZ-QNAME-REDIRECT 8 0 NXDOMAIN REDIRECT NXDOMAIN REDIRECT infoblox-virtual-machine "RPZ QNAME NXDOMAIN rewrite www.domowaplaza.pl. [A] via ext-base-antimalware.www.domowaplaza.pl." "rpz QNAME REDIRECT rewrite ocsp.digicert.com. [A] via CAT_Streaming Media.ocsp.digicert.com." 60161 31206 208.50.179.13 192.168.1.90 2.1.3 RPZ EVENT QNAME NXDOMAIN RPZ EVENT QNAME REDIRECT InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=ext-base-antimalware.www.domowaplaza.pl.;InfobloxRPZ=ext-base-antimalware;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=Phishing_Generic;InfobloxThreatConfidence=80;InfobloxThreatLevel=80 InfobloxDNSView=default;InfobloxDNSQType=A;InfobloxRPZRule=CAT_Streaming Media.ocsp.digicert.com.;InfobloxRPZ=CAT_Streaming Media;InfobloxCSiteId=261392d3041b4a9b96c47e3c2b8446dd;InfobloxPolicyID=99986;InfobloxDomainCat=Streaming Media;InfobloxThreatProperty=;InfobloxThreatConfidence=;InfobloxThreatLevel=;InfobloxB1Region=us-west-1;InfobloxB1ConnectionType=dfp;InfobloxB1OPHName=Sentinel-Demo-DNS+DFP+DHCP;InfobloxB1OPHIPAddress=192.168.1.201;InfobloxB1Network=Sentinel-Demo-DNS+DFP+DHCP (DFP) DNS www.domowaplaza.pl. ocsp.digicert.com. 00:50:56:0b:0f:80 ] CommonSecurityLog {"InfobloxDNSView":"default","InfobloxDNSQType":"A","InfobloxRPZRule":"CAT_Streaming Media.ocsp.digicert.com.","InfobloxRPZ":"CAT_Streaming Media","InfobloxCSiteId":"261392d3041b4a9b96c47e3c2b8446dd","InfobloxPolicyID":"99986","InfobloxDomainCat":"Streaming Media","InfobloxB1Region":"us-west-1","InfobloxB1ConnectionType":"dfp","InfobloxB1OPHName":"Sentinel-Demo-DNS+DFP+DHCP","InfobloxB1OPHIPAddress":"192.168.1.201","InfobloxB1Network":"Sentinel-Demo-DNS+DFP+DHCP (DFP)"} dfp Sentinel-Demo-DNS+DFP+DHCP (DFP) 192.168.1.201 Sentinel-Demo-DNS+DFP+DHCP us-west-1 261392d3041b4a9b96c47e3c2b8446dd A default Streaming Media 99986 CAT_Streaming Media CAT_Streaming Media.ocsp.digicert.com. N/A
16 846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 10/26/2021, 2:07:47.257 PM 2/11/2021, 11:28:32.165 PM Infoblox Data Connector RPZ-QNAME-NXDOMAIN 8 NXDOMAIN NXDOMAIN infoblox-virtual-machine 208.50.179.13 Sentinel-Win-Main2 "RPZ QNAME NXDOMAIN rewrite www.domowaplaza.pl. [A] via ext-base-antimalware.www.domowaplaza.pl." "rpz QNAME NXDOMAIN rewrite nxead.itemdb.com. [A] via ext-base-antimalware.nxead.itemdb.com." 33227 37404 208.50.179.13 2.1.3 RPZ EVENT QNAME NXDOMAIN InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=ext-base-antimalware.www.domowaplaza.pl.;InfobloxRPZ=ext-base-antimalware;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=Phishing_Generic;InfobloxThreatConfidence=80;InfobloxThreatLevel=80 InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=ext-base-antimalware.nxead.itemdb.com.;InfobloxRPZ=ext-base-antimalware;InfobloxCSiteId=;InfobloxPolicyID=99986;InfobloxDomainCat=;InfobloxThreatProperty=APT_MalwareC2;InfobloxThreatConfidence=80;InfobloxThreatLevel=80;InfobloxB1Region=us-west-1;InfobloxB1ConnectionType=remote_client;InfobloxB1OPHName=;InfobloxB1OPHIPAddress=;InfobloxB1Network=BloxOne Endpoint;InfobloxB1SrcOSVersion=Windows 10 Enterprise;InfobloxB1DHCPFingerprint=;InfobloxB1DNSTags=APP_Uncategorized,CAT_Malicious Sites,CAT_PUPs (potentially unwanted programs),CAT_Phishing,bogon,ext-base-antimalware;InfobloxB1ThreatIndicator=nxead.itemdb.com;InfobloxB1FeedName=Ext_Base_AntiMalware;InfobloxB1FeedType=FQDN;InfobloxB1PolicyName=Sentinel-Security-Policy;InfobloxB1PolicyAction=Block DNS www.domowaplaza.pl. nxead.itemdb.com. 00:50:56:01:13:0f rdp CommonSecurityLog {"InfobloxDNSQType":"A","InfobloxRPZRule":"ext-base-antimalware.nxead.itemdb.com.","InfobloxRPZ":"ext-base-antimalware","InfobloxPolicyID":"99986","InfobloxThreatProperty":"APT_MalwareC2","InfobloxThreatConfidence":"80","InfobloxThreatLevel":"80","InfobloxB1Region":"us-west-1","InfobloxB1ConnectionType":"remote_client","InfobloxB1Network":"BloxOne Endpoint","InfobloxB1SrcOSVersion":"Windows 10 Enterprise","InfobloxB1DNSTags":"APP_Uncategorized,CAT_Malicious Sites,CAT_PUPs (potentially unwanted programs),CAT_Phishing,bogon,ext-base-antimalware","InfobloxB1ThreatIndicator":"nxead.itemdb.com","InfobloxB1FeedName":"Ext_Base_AntiMalware","InfobloxB1FeedType":"FQDN","InfobloxB1PolicyName":"Sentinel-Security-Policy","InfobloxB1PolicyAction":"Block"} remote_client APP_Uncategorized,CAT_Malicious Sites,CAT_PUPs (potentially unwanted programs),CAT_Phishing,bogon,ext-base-antimalware Ext_Base_AntiMalware FQDN BloxOne Endpoint Block Sentinel-Security-Policy us-west-1 Windows 10 Enterprise nxead.itemdb.com A 99986 ext-base-antimalware ext-base-antimalware.nxead.itemdb.com. 80 80 APT_MalwareC2 80 High APT MalwareC2
17 846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 10/26/2021, 2:08:16.819 PM 2/11/2021, 11:28:05.764 PM Infoblox Data Connector RPZ-QNAME-NXDOMAIN 8 NXDOMAIN NXDOMAIN infoblox-virtual-machine 208.50.179.13 Sentinel-Win-Main2 "RPZ QNAME NXDOMAIN rewrite www.domowaplaza.pl. [A] via ext-base-antimalware.www.domowaplaza.pl." "rpz QNAME NXDOMAIN rewrite nxead.itemdb.com. [A] via ext-base-antimalware.nxead.itemdb.com." 5915 42222 208.50.179.13 2.1.3 RPZ EVENT QNAME NXDOMAIN InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=ext-base-antimalware.www.domowaplaza.pl.;InfobloxRPZ=ext-base-antimalware;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=Phishing_Generic;InfobloxThreatConfidence=80;InfobloxThreatLevel=80 InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=ext-base-antimalware.nxead.itemdb.com.;InfobloxRPZ=ext-base-antimalware;InfobloxCSiteId=;InfobloxPolicyID=99986;InfobloxDomainCat=;InfobloxThreatProperty=APT_MalwareC2;InfobloxThreatConfidence=80;InfobloxThreatLevel=80;InfobloxB1Region=us-west-1;InfobloxB1ConnectionType=remote_client;InfobloxB1OPHName=;InfobloxB1OPHIPAddress=;InfobloxB1Network=BloxOne Endpoint;InfobloxB1SrcOSVersion=Windows 10 Enterprise;InfobloxB1DHCPFingerprint=;InfobloxB1DNSTags=APP_Uncategorized,CAT_Malicious Sites,CAT_PUPs (potentially unwanted programs),CAT_Phishing,bogon,ext-base-antimalware;InfobloxB1ThreatIndicator=nxead.itemdb.com;InfobloxB1FeedName=Ext_Base_AntiMalware;InfobloxB1FeedType=FQDN;InfobloxB1PolicyName=Sentinel-Security-Policy;InfobloxB1PolicyAction=Block DNS www.domowaplaza.pl. nxead.itemdb.com. 00:50:56:01:13:0f rdp CommonSecurityLog {"InfobloxDNSQType":"A","InfobloxRPZRule":"ext-base-antimalware.nxead.itemdb.com.","InfobloxRPZ":"ext-base-antimalware","InfobloxPolicyID":"99986","InfobloxThreatProperty":"APT_MalwareC2","InfobloxThreatConfidence":"80","InfobloxThreatLevel":"80","InfobloxB1Region":"us-west-1","InfobloxB1ConnectionType":"remote_client","InfobloxB1Network":"BloxOne Endpoint","InfobloxB1SrcOSVersion":"Windows 10 Enterprise","InfobloxB1DNSTags":"APP_Uncategorized,CAT_Malicious Sites,CAT_PUPs (potentially unwanted programs),CAT_Phishing,bogon,ext-base-antimalware","InfobloxB1ThreatIndicator":"nxead.itemdb.com","InfobloxB1FeedName":"Ext_Base_AntiMalware","InfobloxB1FeedType":"FQDN","InfobloxB1PolicyName":"Sentinel-Security-Policy","InfobloxB1PolicyAction":"Block"} remote_client APP_Uncategorized,CAT_Malicious Sites,CAT_PUPs (potentially unwanted programs),CAT_Phishing,bogon,ext-base-antimalware Ext_Base_AntiMalware FQDN BloxOne Endpoint Block Sentinel-Security-Policy us-west-1 Windows 10 Enterprise nxead.itemdb.com A 99986 ext-base-antimalware ext-base-antimalware.nxead.itemdb.com. 80 80 APT_MalwareC2 80 High APT MalwareC2
18 846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 10/26/2021, 2:08:16.974 PM 2/11/2021, 11:29:34.748 PM Infoblox Data Connector RPZ-QNAME-NXDOMAIN 8 NXDOMAIN NXDOMAIN infoblox-virtual-machine 208.50.179.13 Sentinel-Win-Main2 "RPZ QNAME NXDOMAIN rewrite www.domowaplaza.pl. [A] via ext-base-antimalware.www.domowaplaza.pl." "rpz QNAME NXDOMAIN rewrite nxead.itemdb.com. [A] via ext-base-antimalware.nxead.itemdb.com." 22575 42222 208.50.179.13 2.1.3 RPZ EVENT QNAME NXDOMAIN InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=ext-base-antimalware.www.domowaplaza.pl.;InfobloxRPZ=ext-base-antimalware;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=Phishing_Generic;InfobloxThreatConfidence=80;InfobloxThreatLevel=80 InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=ext-base-antimalware.nxead.itemdb.com.;InfobloxRPZ=ext-base-antimalware;InfobloxCSiteId=;InfobloxPolicyID=99986;InfobloxDomainCat=;InfobloxThreatProperty=APT_MalwareC2;InfobloxThreatConfidence=80;InfobloxThreatLevel=80;InfobloxB1Region=us-west-1;InfobloxB1ConnectionType=remote_client;InfobloxB1OPHName=;InfobloxB1OPHIPAddress=;InfobloxB1Network=BloxOne Endpoint;InfobloxB1SrcOSVersion=Windows 10 Enterprise;InfobloxB1DHCPFingerprint=;InfobloxB1DNSTags=APP_Uncategorized,CAT_Malicious Sites,CAT_PUPs (potentially unwanted programs),CAT_Phishing,bogon,ext-base-antimalware;InfobloxB1ThreatIndicator=nxead.itemdb.com;InfobloxB1FeedName=Ext_Base_AntiMalware;InfobloxB1FeedType=FQDN;InfobloxB1PolicyName=Sentinel-Security-Policy;InfobloxB1PolicyAction=Block DNS www.domowaplaza.pl. nxead.itemdb.com. 00:50:56:01:13:0f rdp CommonSecurityLog {"InfobloxDNSQType":"A","InfobloxRPZRule":"ext-base-antimalware.nxead.itemdb.com.","InfobloxRPZ":"ext-base-antimalware","InfobloxPolicyID":"99986","InfobloxThreatProperty":"APT_MalwareC2","InfobloxThreatConfidence":"80","InfobloxThreatLevel":"80","InfobloxB1Region":"us-west-1","InfobloxB1ConnectionType":"remote_client","InfobloxB1Network":"BloxOne Endpoint","InfobloxB1SrcOSVersion":"Windows 10 Enterprise","InfobloxB1DNSTags":"APP_Uncategorized,CAT_Malicious Sites,CAT_PUPs (potentially unwanted programs),CAT_Phishing,bogon,ext-base-antimalware","InfobloxB1ThreatIndicator":"nxead.itemdb.com","InfobloxB1FeedName":"Ext_Base_AntiMalware","InfobloxB1FeedType":"FQDN","InfobloxB1PolicyName":"Sentinel-Security-Policy","InfobloxB1PolicyAction":"Block"} remote_client APP_Uncategorized,CAT_Malicious Sites,CAT_PUPs (potentially unwanted programs),CAT_Phishing,bogon,ext-base-antimalware Ext_Base_AntiMalware FQDN BloxOne Endpoint Block Sentinel-Security-Policy us-west-1 Windows 10 Enterprise nxead.itemdb.com A 99986 ext-base-antimalware ext-base-antimalware.nxead.itemdb.com. 80 80 APT_MalwareC2 80 High APT MalwareC2
19 846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 10/26/2021, 2:05:57.191 PM 2/11/2021, 11:27:58.324 PM Infoblox Data Connector RPZ-QNAME-NXDOMAIN 8 NXDOMAIN NXDOMAIN infoblox-virtual-machine 208.50.179.13 Sentinel-Win-Main2 "RPZ QNAME NXDOMAIN rewrite www.domowaplaza.pl. [A] via ext-base-antimalware.www.domowaplaza.pl." "rpz QNAME NXDOMAIN rewrite editorswa.com. [A] via base.editorswa.com." 29413 20330 208.50.179.13 2.1.3 RPZ EVENT QNAME NXDOMAIN InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=ext-base-antimalware.www.domowaplaza.pl.;InfobloxRPZ=ext-base-antimalware;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=Phishing_Generic;InfobloxThreatConfidence=80;InfobloxThreatLevel=80 InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=base.editorswa.com.;InfobloxRPZ=base;InfobloxCSiteId=;InfobloxPolicyID=99986;InfobloxDomainCat=;InfobloxThreatProperty=APT_MalwareC2;InfobloxThreatConfidence=;InfobloxThreatLevel=100;InfobloxB1Region=us-west-1;InfobloxB1ConnectionType=remote_client;InfobloxB1OPHName=;InfobloxB1OPHIPAddress=;InfobloxB1Network=BloxOne Endpoint;InfobloxB1SrcOSVersion=Windows 10 Enterprise;InfobloxB1DHCPFingerprint=;InfobloxB1DNSTags=APP_Uncategorized,CAT_Blogs/Wiki,base;InfobloxB1ThreatIndicator=editorswa.com;InfobloxB1FeedName=Base;InfobloxB1FeedType=FQDN;InfobloxB1PolicyName=Sentinel-Security-Policy;InfobloxB1PolicyAction=Block DNS www.domowaplaza.pl. editorswa.com. 00:50:56:01:13:0f rdp CommonSecurityLog {"InfobloxDNSQType":"A","InfobloxRPZRule":"base.editorswa.com.","InfobloxRPZ":"base","InfobloxPolicyID":"99986","InfobloxThreatProperty":"APT_MalwareC2","InfobloxThreatLevel":"100","InfobloxB1Region":"us-west-1","InfobloxB1ConnectionType":"remote_client","InfobloxB1Network":"BloxOne Endpoint","InfobloxB1SrcOSVersion":"Windows 10 Enterprise","InfobloxB1DNSTags":"APP_Uncategorized,CAT_Blogs/Wiki,base","InfobloxB1ThreatIndicator":"editorswa.com","InfobloxB1FeedName":"Base","InfobloxB1FeedType":"FQDN","InfobloxB1PolicyName":"Sentinel-Security-Policy","InfobloxB1PolicyAction":"Block"} remote_client APP_Uncategorized,CAT_Blogs/Wiki,base Base FQDN BloxOne Endpoint Block Sentinel-Security-Policy us-west-1 Windows 10 Enterprise editorswa.com A 99986 base base.editorswa.com. 100 APT_MalwareC2 100 High APT MalwareC2
20 846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 10/26/2021, 2:06:13.371 PM 2/11/2021, 11:28:01.795 PM Infoblox Data Connector RPZ-QNAME-NXDOMAIN 8 NXDOMAIN NXDOMAIN infoblox-virtual-machine 208.50.179.13 Sentinel-Win-Main2 "RPZ QNAME NXDOMAIN rewrite www.domowaplaza.pl. [A] via ext-base-antimalware.www.domowaplaza.pl." "rpz QNAME NXDOMAIN rewrite editorswa.com. [A] via base.editorswa.com." 1974 20330 208.50.179.13 2.1.3 RPZ EVENT QNAME NXDOMAIN InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=ext-base-antimalware.www.domowaplaza.pl.;InfobloxRPZ=ext-base-antimalware;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=Phishing_Generic;InfobloxThreatConfidence=80;InfobloxThreatLevel=80 InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=base.editorswa.com.;InfobloxRPZ=base;InfobloxCSiteId=;InfobloxPolicyID=99986;InfobloxDomainCat=;InfobloxThreatProperty=APT_MalwareC2;InfobloxThreatConfidence=;InfobloxThreatLevel=100;InfobloxB1Region=us-west-1;InfobloxB1ConnectionType=remote_client;InfobloxB1OPHName=;InfobloxB1OPHIPAddress=;InfobloxB1Network=BloxOne Endpoint;InfobloxB1SrcOSVersion=Windows 10 Enterprise;InfobloxB1DHCPFingerprint=;InfobloxB1DNSTags=APP_Uncategorized,CAT_Blogs/Wiki,base;InfobloxB1ThreatIndicator=editorswa.com;InfobloxB1FeedName=Base;InfobloxB1FeedType=FQDN;InfobloxB1PolicyName=Sentinel-Security-Policy;InfobloxB1PolicyAction=Block DNS www.domowaplaza.pl. editorswa.com. 00:50:56:01:13:0f rdp CommonSecurityLog {"InfobloxDNSQType":"A","InfobloxRPZRule":"base.editorswa.com.","InfobloxRPZ":"base","InfobloxPolicyID":"99986","InfobloxThreatProperty":"APT_MalwareC2","InfobloxThreatLevel":"100","InfobloxB1Region":"us-west-1","InfobloxB1ConnectionType":"remote_client","InfobloxB1Network":"BloxOne Endpoint","InfobloxB1SrcOSVersion":"Windows 10 Enterprise","InfobloxB1DNSTags":"APP_Uncategorized,CAT_Blogs/Wiki,base","InfobloxB1ThreatIndicator":"editorswa.com","InfobloxB1FeedName":"Base","InfobloxB1FeedType":"FQDN","InfobloxB1PolicyName":"Sentinel-Security-Policy","InfobloxB1PolicyAction":"Block"} remote_client APP_Uncategorized,CAT_Blogs/Wiki,base Base FQDN BloxOne Endpoint Block Sentinel-Security-Policy us-west-1 Windows 10 Enterprise editorswa.com A 99986 base base.editorswa.com. 100 APT_MalwareC2 100 High APT MalwareC2
21 846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 10/26/2021, 2:06:13.371 PM 2/11/2021, 11:34:33.735 PM Infoblox Data Connector RPZ-QNAME-NXDOMAIN 8 NXDOMAIN NXDOMAIN infoblox-virtual-machine 208.50.179.13 Sentinel-Win-Main2 "RPZ QNAME NXDOMAIN rewrite www.domowaplaza.pl. [A] via ext-base-antimalware.www.domowaplaza.pl." "rpz QNAME NXDOMAIN rewrite hg8l3u.loan. [A] via base.hg8l3u.loan." 60161 20330 208.50.179.13 2.1.3 RPZ EVENT QNAME NXDOMAIN InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=ext-base-antimalware.www.domowaplaza.pl.;InfobloxRPZ=ext-base-antimalware;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=Phishing_Generic;InfobloxThreatConfidence=80;InfobloxThreatLevel=80 InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=base.hg8l3u.loan.;InfobloxRPZ=base;InfobloxCSiteId=;InfobloxPolicyID=99986;InfobloxDomainCat=;InfobloxThreatProperty=APT_MalwareC2;InfobloxThreatConfidence=;InfobloxThreatLevel=100;InfobloxB1Region=us-west-1;InfobloxB1ConnectionType=remote_client;InfobloxB1OPHName=;InfobloxB1OPHIPAddress=;InfobloxB1Network=BloxOne Endpoint;InfobloxB1SrcOSVersion=Windows 10 Enterprise;InfobloxB1DHCPFingerprint=;InfobloxB1DNSTags=APP_Uncategorized,CAT_Uncategorized,base;InfobloxB1ThreatIndicator=hg8l3u.loan;InfobloxB1FeedName=Base;InfobloxB1FeedType=FQDN;InfobloxB1PolicyName=Sentinel-Security-Policy;InfobloxB1PolicyAction=Block DNS www.domowaplaza.pl. hg8l3u.loan. 00:50:56:01:13:0f rdp CommonSecurityLog {"InfobloxDNSQType":"A","InfobloxRPZRule":"base.hg8l3u.loan.","InfobloxRPZ":"base","InfobloxPolicyID":"99986","InfobloxThreatProperty":"APT_MalwareC2","InfobloxThreatLevel":"100","InfobloxB1Region":"us-west-1","InfobloxB1ConnectionType":"remote_client","InfobloxB1Network":"BloxOne Endpoint","InfobloxB1SrcOSVersion":"Windows 10 Enterprise","InfobloxB1DNSTags":"APP_Uncategorized,CAT_Uncategorized,base","InfobloxB1ThreatIndicator":"hg8l3u.loan","InfobloxB1FeedName":"Base","InfobloxB1FeedType":"FQDN","InfobloxB1PolicyName":"Sentinel-Security-Policy","InfobloxB1PolicyAction":"Block"} remote_client APP_Uncategorized,CAT_Uncategorized,base Base FQDN BloxOne Endpoint Block Sentinel-Security-Policy us-west-1 Windows 10 Enterprise hg8l3u.loan A 99986 base base.hg8l3u.loan. 100 APT_MalwareC2 100 High APT MalwareC2
22 846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 10/26/2021, 2:05:57.191 PM 2/11/2021, 11:28:33.700 PM Infoblox Data Connector RPZ-QNAME-NXDOMAIN 8 NXDOMAIN NXDOMAIN infoblox-virtual-machine 208.50.179.13 Sentinel-Win-Main2 "RPZ QNAME NXDOMAIN rewrite www.domowaplaza.pl. [A] via ext-base-antimalware.www.domowaplaza.pl." "rpz QNAME NXDOMAIN rewrite mail.google.com-recoveryservice.info. [A] via base.mail.google.com-recoveryservice.info." 12830 20330 208.50.179.13 2.1.3 RPZ EVENT QNAME NXDOMAIN InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=ext-base-antimalware.www.domowaplaza.pl.;InfobloxRPZ=ext-base-antimalware;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=Phishing_Generic;InfobloxThreatConfidence=80;InfobloxThreatLevel=80 InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=base.mail.google.com-recoveryservice.info.;InfobloxRPZ=base;InfobloxCSiteId=;InfobloxPolicyID=99986;InfobloxDomainCat=;InfobloxThreatProperty=APT_MalwareC2;InfobloxThreatConfidence=;InfobloxThreatLevel=100;InfobloxB1Region=us-west-1;InfobloxB1ConnectionType=remote_client;InfobloxB1OPHName=;InfobloxB1OPHIPAddress=;InfobloxB1Network=BloxOne Endpoint;InfobloxB1SrcOSVersion=Windows 10 Enterprise;InfobloxB1DHCPFingerprint=;InfobloxB1DNSTags=APP_Uncategorized,CAT_Malicious Sites,base;InfobloxB1ThreatIndicator=mail.google.com-recoveryservice.info;InfobloxB1FeedName=Base;InfobloxB1FeedType=FQDN;InfobloxB1PolicyName=Sentinel-Security-Policy;InfobloxB1PolicyAction=Block DNS www.domowaplaza.pl. mail.google.com-recoveryservice.info. 00:50:56:01:13:0f rdp CommonSecurityLog {"InfobloxDNSQType":"A","InfobloxRPZRule":"base.mail.google.com-recoveryservice.info.","InfobloxRPZ":"base","InfobloxPolicyID":"99986","InfobloxThreatProperty":"APT_MalwareC2","InfobloxThreatLevel":"100","InfobloxB1Region":"us-west-1","InfobloxB1ConnectionType":"remote_client","InfobloxB1Network":"BloxOne Endpoint","InfobloxB1SrcOSVersion":"Windows 10 Enterprise","InfobloxB1DNSTags":"APP_Uncategorized,CAT_Malicious Sites,base","InfobloxB1ThreatIndicator":"mail.google.com-recoveryservice.info","InfobloxB1FeedName":"Base","InfobloxB1FeedType":"FQDN","InfobloxB1PolicyName":"Sentinel-Security-Policy","InfobloxB1PolicyAction":"Block"} remote_client APP_Uncategorized,CAT_Malicious Sites,base Base FQDN BloxOne Endpoint Block Sentinel-Security-Policy us-west-1 Windows 10 Enterprise mail.google.com-recoveryservice.info A 99986 base base.mail.google.com-recoveryservice.info. 100 APT_MalwareC2 100 High APT MalwareC2
23 846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 10/26/2021, 2:08:11.199 PM 2/11/2021, 11:28:05.764 PM Infoblox Data Connector RPZ-QNAME-NXDOMAIN 8 NXDOMAIN NXDOMAIN infoblox-virtual-machine 208.50.179.13 Sentinel-Win-Main2 "RPZ QNAME NXDOMAIN rewrite www.domowaplaza.pl. [A] via ext-base-antimalware.www.domowaplaza.pl." "rpz QNAME NXDOMAIN rewrite dpc.servegame.com. [A] via base.dpc.servegame.com." 1974 42222 208.50.179.13 2.1.3 RPZ EVENT QNAME NXDOMAIN InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=ext-base-antimalware.www.domowaplaza.pl.;InfobloxRPZ=ext-base-antimalware;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=Phishing_Generic;InfobloxThreatConfidence=80;InfobloxThreatLevel=80 InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=base.dpc.servegame.com.;InfobloxRPZ=base;InfobloxCSiteId=;InfobloxPolicyID=99986;InfobloxDomainCat=;InfobloxThreatProperty=APT_MalwareC2;InfobloxThreatConfidence=;InfobloxThreatLevel=100;InfobloxB1Region=us-west-1;InfobloxB1ConnectionType=remote_client;InfobloxB1OPHName=;InfobloxB1OPHIPAddress=;InfobloxB1Network=BloxOne Endpoint;InfobloxB1SrcOSVersion=Windows 10 Enterprise;InfobloxB1DHCPFingerprint=;InfobloxB1DNSTags=APP_Uncategorized,CAT_Internet Services,CAT_Personal Pages,base;InfobloxB1ThreatIndicator=dpc.servegame.com;InfobloxB1FeedName=Base;InfobloxB1FeedType=FQDN;InfobloxB1PolicyName=Sentinel-Security-Policy;InfobloxB1PolicyAction=Block DNS www.domowaplaza.pl. dpc.servegame.com. 00:50:56:01:13:0f rdp CommonSecurityLog {"InfobloxDNSQType":"A","InfobloxRPZRule":"base.dpc.servegame.com.","InfobloxRPZ":"base","InfobloxPolicyID":"99986","InfobloxThreatProperty":"APT_MalwareC2","InfobloxThreatLevel":"100","InfobloxB1Region":"us-west-1","InfobloxB1ConnectionType":"remote_client","InfobloxB1Network":"BloxOne Endpoint","InfobloxB1SrcOSVersion":"Windows 10 Enterprise","InfobloxB1DNSTags":"APP_Uncategorized,CAT_Internet Services,CAT_Personal Pages,base","InfobloxB1ThreatIndicator":"dpc.servegame.com","InfobloxB1FeedName":"Base","InfobloxB1FeedType":"FQDN","InfobloxB1PolicyName":"Sentinel-Security-Policy","InfobloxB1PolicyAction":"Block"} remote_client APP_Uncategorized,CAT_Internet Services,CAT_Personal Pages,base Base FQDN BloxOne Endpoint Block Sentinel-Security-Policy us-west-1 Windows 10 Enterprise dpc.servegame.com A 99986 base base.dpc.servegame.com. 100 APT_MalwareC2 100 High APT MalwareC2
24 846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 10/26/2021, 2:06:23.026 PM 2/11/2021, 11:29:31.879 PM Infoblox Data Connector RPZ-QNAME-NXDOMAIN DNS Response 8 1 NXDOMAIN NXDOMAIN infoblox-virtual-machine 208.50.179.13 Sentinel-Win-Main2 "RPZ QNAME NXDOMAIN rewrite www.domowaplaza.pl. [A] via ext-base-antimalware.www.domowaplaza.pl." "cdn.content.prod.cms.msn.com. 1657 IN CNAME cdn.content.prod.cms.msn.com.edgekey.net. cdn.content.prod.cms.msn.com.edgekey.net. 2 IN CNAME e10663.dscg.akamaiedge.net. e10663.dscg.akamaiedge.net. 20 IN A 23.1.245.167 . 0 4096 OPT " TCP 46048 25880 208.50.179.13 2.1.3 RPZ EVENT QNAME NXDOMAIN DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=ext-base-antimalware.www.domowaplaza.pl.;InfobloxRPZ=ext-base-antimalware;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=Phishing_Generic;InfobloxThreatConfidence=80;InfobloxThreatLevel=80 InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=3;InfobloxNsCount=0;InfobloxArCount=1;InfobloxB1Region=us-west-1;InfobloxB1ConnectionType=remote_client;InfobloxB1OPHName=;InfobloxB1OPHIPAddress=;InfobloxB1Network=BloxOne Endpoint;InfobloxB1SrcOSVersion=Windows 10 Enterprise;InfobloxB1DHCPFingerprint=;InfobloxB1DNSTags=APP_Uncategorized,CAT_Content Server,CAT_Portal Sites DNS www.domowaplaza.pl. cdn.content.prod.cms.msn.com. 00:50:56:01:13:0f rdp CommonSecurityLog {"InfobloxDNSQClass":"IN","InfobloxDNSQType":"A","InfobloxDNSQFlags":"+EV","InfobloxDNSRCode":"NOERROR","InfobloxAnCount":"3","InfobloxNsCount":"0","InfobloxArCount":"1","InfobloxB1Region":"us-west-1","InfobloxB1ConnectionType":"remote_client","InfobloxB1Network":"BloxOne Endpoint","InfobloxB1SrcOSVersion":"Windows 10 Enterprise","InfobloxB1DNSTags":"APP_Uncategorized,CAT_Content Server,CAT_Portal Sites"} 3 1 remote_client APP_Uncategorized,CAT_Content Server,CAT_Portal Sites BloxOne Endpoint us-west-1 Windows 10 Enterprise IN #NAME? A NOERROR 0 N/A
25 846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 10/26/2021, 2:06:24.448 PM 2/11/2021, 11:34:37.401 PM Infoblox Data Connector RPZ-QNAME-NXDOMAIN DNS Response 8 1 NXDOMAIN NXDOMAIN infoblox-virtual-machine 208.50.179.13 Sentinel-Win-Main2 "RPZ QNAME NXDOMAIN rewrite www.domowaplaza.pl. [A] via ext-base-antimalware.www.domowaplaza.pl." ". 0 4096 OPT " TCP 50087 41853 208.50.179.13 2.1.3 RPZ EVENT QNAME NXDOMAIN DNS Response IN A NXDOMAIN InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=ext-base-antimalware.www.domowaplaza.pl.;InfobloxRPZ=ext-base-antimalware;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=Phishing_Generic;InfobloxThreatConfidence=80;InfobloxThreatLevel=80 InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=-EV;InfobloxDNSRCode=NXDOMAIN;InfobloxAnCount=0;InfobloxNsCount=0;InfobloxArCount=1;InfobloxB1Region=us-west-1;InfobloxB1ConnectionType=remote_client;InfobloxB1OPHName=;InfobloxB1OPHIPAddress=;InfobloxB1Network=BloxOne Endpoint;InfobloxB1SrcOSVersion=Windows 10 Enterprise;InfobloxB1DHCPFingerprint=;InfobloxB1DNSTags=APP_Uncategorized,CAT_Uncategorized,base DNS www.domowaplaza.pl. hg8p7q.tech. 00:50:56:01:13:0f rdp CommonSecurityLog {"InfobloxDNSQClass":"IN","InfobloxDNSQType":"A","InfobloxDNSQFlags":"-EV","InfobloxDNSRCode":"NXDOMAIN","InfobloxAnCount":"0","InfobloxNsCount":"0","InfobloxArCount":"1","InfobloxB1Region":"us-west-1","InfobloxB1ConnectionType":"remote_client","InfobloxB1Network":"BloxOne Endpoint","InfobloxB1SrcOSVersion":"Windows 10 Enterprise","InfobloxB1DNSTags":"APP_Uncategorized,CAT_Uncategorized,base"} 0 1 remote_client APP_Uncategorized,CAT_Uncategorized,base BloxOne Endpoint us-west-1 Windows 10 Enterprise IN #NAME? A NXDOMAIN 0 N/A
26 846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 10/26/2021, 2:06:24.449 PM 2/11/2021, 11:27:56.843 PM Infoblox Data Connector RPZ-QNAME-NXDOMAIN DNS Response 8 1 NXDOMAIN NXDOMAIN infoblox-virtual-machine 208.50.179.13 Sentinel-Win-Main2 "RPZ QNAME NXDOMAIN rewrite www.domowaplaza.pl. [A] via ext-base-antimalware.www.domowaplaza.pl." ". 0 4096 OPT " TCP 5915 41853 208.50.179.13 2.1.3 RPZ EVENT QNAME NXDOMAIN DNS Response IN A NXDOMAIN InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=ext-base-antimalware.www.domowaplaza.pl.;InfobloxRPZ=ext-base-antimalware;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=Phishing_Generic;InfobloxThreatConfidence=80;InfobloxThreatLevel=80 InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=-EV;InfobloxDNSRCode=NXDOMAIN;InfobloxAnCount=0;InfobloxNsCount=0;InfobloxArCount=1;InfobloxB1Region=us-west-1;InfobloxB1ConnectionType=remote_client;InfobloxB1OPHName=;InfobloxB1OPHIPAddress=;InfobloxB1Network=BloxOne Endpoint;InfobloxB1SrcOSVersion=Windows 10 Enterprise;InfobloxB1DHCPFingerprint=;InfobloxB1DNSTags=APP_Uncategorized,CAT_Uncategorized,base DNS www.domowaplaza.pl. udp.jjevil.com. 00:50:56:01:13:0f rdp CommonSecurityLog {"InfobloxDNSQClass":"IN","InfobloxDNSQType":"A","InfobloxDNSQFlags":"-EV","InfobloxDNSRCode":"NXDOMAIN","InfobloxAnCount":"0","InfobloxNsCount":"0","InfobloxArCount":"1","InfobloxB1Region":"us-west-1","InfobloxB1ConnectionType":"remote_client","InfobloxB1Network":"BloxOne Endpoint","InfobloxB1SrcOSVersion":"Windows 10 Enterprise","InfobloxB1DNSTags":"APP_Uncategorized,CAT_Uncategorized,base"} 0 1 remote_client APP_Uncategorized,CAT_Uncategorized,base BloxOne Endpoint us-west-1 Windows 10 Enterprise IN #NAME? A NXDOMAIN 0 N/A
27 846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 10/26/2021, 2:06:24.968 PM 2/11/2021, 11:27:57.703 PM Infoblox Data Connector RPZ-QNAME-NXDOMAIN DNS Response 8 1 NXDOMAIN NXDOMAIN infoblox-virtual-machine 208.50.179.13 Sentinel-Win-Main2 "RPZ QNAME NXDOMAIN rewrite www.domowaplaza.pl. [A] via ext-base-antimalware.www.domowaplaza.pl." "assets.msn.com. 6779 IN CNAME assets.msn.com.edgekey.net. assets.msn.com.edgekey.net. 179 IN CNAME e28578.d.akamaiedge.net. e28578.d.akamaiedge.net. 15 IN A 23.50.233.55 e28578.d.akamaiedge.net. 15 IN A 23.50.233.125 e28578.d.akamaiedge.net. 15 IN A 23.50.233.134 e28578.d.akamaiedge.net. 15 IN A 23.50.233.53 e28578.d.akamaiedge.net. 15 IN A 23.50.233.135 e28578.d.akamaiedge.net. 15 IN A 23.50.233.56 e28578.d.akamaiedge.net. 15 IN A 23.50.233.119 e28578.d.akamaiedge.net. 15 IN A 23.50.233.48 e28578.d.akamaiedge.net. 15 IN A 23.50.233.133 . 0 4096 OPT " TCP 4847 57010 208.50.179.13 2.1.3 RPZ EVENT QNAME NXDOMAIN DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=ext-base-antimalware.www.domowaplaza.pl.;InfobloxRPZ=ext-base-antimalware;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=Phishing_Generic;InfobloxThreatConfidence=80;InfobloxThreatLevel=80 InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=11;InfobloxNsCount=0;InfobloxArCount=1;InfobloxB1Region=us-west-1;InfobloxB1ConnectionType=remote_client;InfobloxB1OPHName=;InfobloxB1OPHIPAddress=;InfobloxB1Network=BloxOne Endpoint;InfobloxB1SrcOSVersion=Windows 10 Enterprise;InfobloxB1DHCPFingerprint=;InfobloxB1DNSTags=APP_Uncategorized,CAT_Content Server,CAT_Portal Sites DNS www.domowaplaza.pl. assets.msn.com. 00:50:56:01:13:0f rdp CommonSecurityLog {"InfobloxDNSQClass":"IN","InfobloxDNSQType":"A","InfobloxDNSQFlags":"+EV","InfobloxDNSRCode":"NOERROR","InfobloxAnCount":"11","InfobloxNsCount":"0","InfobloxArCount":"1","InfobloxB1Region":"us-west-1","InfobloxB1ConnectionType":"remote_client","InfobloxB1Network":"BloxOne Endpoint","InfobloxB1SrcOSVersion":"Windows 10 Enterprise","InfobloxB1DNSTags":"APP_Uncategorized,CAT_Content Server,CAT_Portal Sites"} 11 1 remote_client APP_Uncategorized,CAT_Content Server,CAT_Portal Sites BloxOne Endpoint us-west-1 Windows 10 Enterprise IN #NAME? A NOERROR 0 N/A
28 846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 10/26/2021, 2:06:24.968 PM 2/11/2021, 11:00:00.703 PM Infoblox Data Connector RPZ-QNAME-NXDOMAIN DNS Response 8 1 NXDOMAIN NXDOMAIN infoblox-virtual-machine 208.50.179.13 Sentinel-Win-Main2 "RPZ QNAME NXDOMAIN rewrite walla.link. [A] via base.walla.link." ". 0 4096 OPT " TCP 10437 57010 208.50.179.13 2.1.3 RPZ EVENT QNAME NXDOMAIN DNS Response IN A NXDOMAIN InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=base.walla.link.;InfobloxRPZ=base;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=APT_MalwareC2;InfobloxThreatConfidence=;InfobloxThreatLevel=100 InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=-EV;InfobloxDNSRCode=NXDOMAIN;InfobloxAnCount=0;InfobloxNsCount=0;InfobloxArCount=1;InfobloxB1Region=us-west-1;InfobloxB1ConnectionType=remote_client;InfobloxB1OPHName=;InfobloxB1OPHIPAddress=;InfobloxB1Network=BloxOne Endpoint;InfobloxB1SrcOSVersion=Windows 10 Enterprise;InfobloxB1DHCPFingerprint=;InfobloxB1DNSTags=APP_Uncategorized,CAT_PUPs (potentially unwanted programs),base DNS walla.link. jepsen.r3u8.com. 00:50:56:01:13:0f rdp CommonSecurityLog {"InfobloxDNSQClass":"IN","InfobloxDNSQType":"A","InfobloxDNSQFlags":"-EV","InfobloxDNSRCode":"NXDOMAIN","InfobloxAnCount":"0","InfobloxNsCount":"0","InfobloxArCount":"1","InfobloxB1Region":"us-west-1","InfobloxB1ConnectionType":"remote_client","InfobloxB1Network":"BloxOne Endpoint","InfobloxB1SrcOSVersion":"Windows 10 Enterprise","InfobloxB1DNSTags":"APP_Uncategorized,CAT_PUPs (potentially unwanted programs),base"} 0 1 remote_client APP_Uncategorized,CAT_PUPs (potentially unwanted programs),base BloxOne Endpoint us-west-1 Windows 10 Enterprise IN #NAME? A NXDOMAIN 0 N/A
29 846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 10/26/2021, 2:06:26.519 PM 2/11/2021, 11:00:04.531 PM Infoblox Data Connector RPZ-QNAME-NXDOMAIN DNS Response 8 1 NXDOMAIN NXDOMAIN infoblox-virtual-machine 208.50.179.13 Sentinel-Win-Main2 "RPZ QNAME NXDOMAIN rewrite walla.link. [A] via base.walla.link." ". 0 4096 OPT " TCP 33946 40134 208.50.179.13 2.1.3 RPZ EVENT QNAME NXDOMAIN DNS Response IN A NXDOMAIN InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=base.walla.link.;InfobloxRPZ=base;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=APT_MalwareC2;InfobloxThreatConfidence=;InfobloxThreatLevel=100 InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=-EV;InfobloxDNSRCode=NXDOMAIN;InfobloxAnCount=0;InfobloxNsCount=0;InfobloxArCount=1;InfobloxB1Region=us-west-1;InfobloxB1ConnectionType=remote_client;InfobloxB1OPHName=;InfobloxB1OPHIPAddress=;InfobloxB1Network=BloxOne Endpoint;InfobloxB1SrcOSVersion=Windows 10 Enterprise;InfobloxB1DHCPFingerprint=;InfobloxB1DNSTags=APP_Uncategorized,CAT_Malicious Sites,CAT_Parked Domain,base DNS walla.link. updatepatch.icr38.net. 00:50:56:01:13:0f rdp CommonSecurityLog {"InfobloxDNSQClass":"IN","InfobloxDNSQType":"A","InfobloxDNSQFlags":"-EV","InfobloxDNSRCode":"NXDOMAIN","InfobloxAnCount":"0","InfobloxNsCount":"0","InfobloxArCount":"1","InfobloxB1Region":"us-west-1","InfobloxB1ConnectionType":"remote_client","InfobloxB1Network":"BloxOne Endpoint","InfobloxB1SrcOSVersion":"Windows 10 Enterprise","InfobloxB1DNSTags":"APP_Uncategorized,CAT_Malicious Sites,CAT_Parked Domain,base"} 0 1 remote_client APP_Uncategorized,CAT_Malicious Sites,CAT_Parked Domain,base BloxOne Endpoint us-west-1 Windows 10 Enterprise IN #NAME? A NXDOMAIN 0 N/A
30 846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 10/26/2021, 2:06:26.519 PM 2/11/2021, 11:00:31.433 PM Infoblox Data Connector RPZ-QNAME-NXDOMAIN DNS Response 8 1 NXDOMAIN NXDOMAIN infoblox-virtual-machine 208.50.179.13 Sentinel-Win-Main2 "RPZ QNAME NXDOMAIN rewrite walla.link. [A] via base.walla.link." ". 0 4096 OPT " TCP 16228 40134 208.50.179.13 2.1.3 RPZ EVENT QNAME NXDOMAIN DNS Response IN A NXDOMAIN InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=base.walla.link.;InfobloxRPZ=base;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=APT_MalwareC2;InfobloxThreatConfidence=;InfobloxThreatLevel=100 InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=-EV;InfobloxDNSRCode=NXDOMAIN;InfobloxAnCount=0;InfobloxNsCount=0;InfobloxArCount=1;InfobloxB1Region=us-west-1;InfobloxB1ConnectionType=remote_client;InfobloxB1OPHName=;InfobloxB1OPHIPAddress=;InfobloxB1Network=BloxOne Endpoint;InfobloxB1SrcOSVersion=Windows 10 Enterprise;InfobloxB1DHCPFingerprint=;InfobloxB1DNSTags=APP_Uncategorized,CAT_Malicious Sites,base,etiqrisk-ip,ext-antimalware-ip DNS walla.link. ftp.scarlet-witch.com. 00:50:56:01:13:0f rdp CommonSecurityLog {"InfobloxDNSQClass":"IN","InfobloxDNSQType":"A","InfobloxDNSQFlags":"-EV","InfobloxDNSRCode":"NXDOMAIN","InfobloxAnCount":"0","InfobloxNsCount":"0","InfobloxArCount":"1","InfobloxB1Region":"us-west-1","InfobloxB1ConnectionType":"remote_client","InfobloxB1Network":"BloxOne Endpoint","InfobloxB1SrcOSVersion":"Windows 10 Enterprise","InfobloxB1DNSTags":"APP_Uncategorized,CAT_Malicious Sites,base,etiqrisk-ip,ext-antimalware-ip"} 0 1 remote_client APP_Uncategorized,CAT_Malicious Sites,base,etiqrisk-ip,ext-antimalware-ip BloxOne Endpoint us-west-1 Windows 10 Enterprise IN #NAME? A NXDOMAIN 0 N/A
31 846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 10/26/2021, 2:49:48.161 PM 2/11/2021, 11:06:32.999 PM Infoblox Data Connector RPZ-QNAME-NXDOMAIN DNS Response 8 1 NXDOMAIN NXDOMAIN infoblox-virtual-machine 192.168.1.90 "RPZ QNAME NXDOMAIN rewrite walla.link. [A] via base.walla.link." "client.wns.windows.com. 1459 IN CNAME wns.notify.trafficmanager.net. wns.notify.trafficmanager.net. 284 IN A 40.83.240.146 . 32768 4096 OPT " TCP 19932 35175 208.50.179.13 192.168.1.90 2.1.3 RPZ EVENT QNAME NXDOMAIN DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=base.walla.link.;InfobloxRPZ=base;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=APT_MalwareC2;InfobloxThreatConfidence=;InfobloxThreatLevel=100 InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=2;InfobloxNsCount=0;InfobloxArCount=1;InfobloxB1Region=us-west-1;InfobloxB1ConnectionType=dfp;InfobloxB1OPHName=Sentinel-Demo-DNS+DFP+DHCP;InfobloxB1OPHIPAddress=192.168.1.201;InfobloxB1Network=Sentinel-Demo-DNS+DFP+DHCP (DFP);InfobloxB1SrcOSVersion=;InfobloxB1DHCPFingerprint=;InfobloxB1DNSTags=APP_Microsoft OneDrive,APP_Microsoft Sharepoint,APP_Uncategorized,CAT_Business,CAT_Internet Services,CAT_Software/Hardware DNS walla.link. client.wns.windows.com. 00:50:56:0b:0f:80 CommonSecurityLog {"InfobloxDNSQClass":"IN","InfobloxDNSQType":"A","InfobloxDNSQFlags":"+EV","InfobloxDNSRCode":"NOERROR","InfobloxAnCount":"2","InfobloxNsCount":"0","InfobloxArCount":"1","InfobloxB1Region":"us-west-1","InfobloxB1ConnectionType":"dfp","InfobloxB1OPHName":"Sentinel-Demo-DNS+DFP+DHCP","InfobloxB1OPHIPAddress":"192.168.1.201","InfobloxB1Network":"Sentinel-Demo-DNS+DFP+DHCP (DFP)","InfobloxB1DNSTags":"APP_Microsoft OneDrive,APP_Microsoft Sharepoint,APP_Uncategorized,CAT_Business,CAT_Internet Services,CAT_Software/Hardware"} 2 1 dfp APP_Microsoft OneDrive,APP_Microsoft Sharepoint,APP_Uncategorized,CAT_Business,CAT_Internet Services,CAT_Software/Hardware Sentinel-Demo-DNS+DFP+DHCP (DFP) 192.168.1.201 Sentinel-Demo-DNS+DFP+DHCP us-west-1 IN #NAME? A NOERROR 0 N/A
32 846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 10/26/2021, 2:43:38.815 PM 2/11/2021, 11:00:36.871 PM Infoblox Data Connector RPZ-QNAME-NXDOMAIN DNS Response 8 1 NXDOMAIN NXDOMAIN infoblox-virtual-machine 192.168.1.106 "RPZ QNAME NXDOMAIN rewrite walla.link. [A] via base.walla.link." "contile.services.mozilla.com. 513 IN A 34.117.237.239 . 32768 4096 OPT " TCP 40398 17458 208.50.179.13 192.168.1.106 2.1.3 RPZ EVENT QNAME NXDOMAIN DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=base.walla.link.;InfobloxRPZ=base;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=APT_MalwareC2;InfobloxThreatConfidence=;InfobloxThreatLevel=100 InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1;InfobloxB1Region=us-west-1;InfobloxB1ConnectionType=dfp;InfobloxB1OPHName=Sentinel-Demo-DNS+DFP+DHCP;InfobloxB1OPHIPAddress=192.168.1.201;InfobloxB1Network=Sentinel-Demo-DNS+DFP+DHCP (DFP);InfobloxB1SrcOSVersion=;InfobloxB1DHCPFingerprint=;InfobloxB1DNSTags=APP_Uncategorized,CAT_Software/Hardware DNS walla.link. contile.services.mozilla.com. 00:50:56:0b:0f:15 CommonSecurityLog {"InfobloxDNSQClass":"IN","InfobloxDNSQType":"A","InfobloxDNSQFlags":"+EV","InfobloxDNSRCode":"NOERROR","InfobloxAnCount":"1","InfobloxNsCount":"0","InfobloxArCount":"1","InfobloxB1Region":"us-west-1","InfobloxB1ConnectionType":"dfp","InfobloxB1OPHName":"Sentinel-Demo-DNS+DFP+DHCP","InfobloxB1OPHIPAddress":"192.168.1.201","InfobloxB1Network":"Sentinel-Demo-DNS+DFP+DHCP (DFP)","InfobloxB1DNSTags":"APP_Uncategorized,CAT_Software/Hardware"} 1 1 dfp APP_Uncategorized,CAT_Software/Hardware Sentinel-Demo-DNS+DFP+DHCP (DFP) 192.168.1.201 Sentinel-Demo-DNS+DFP+DHCP us-west-1 IN #NAME? A NOERROR 0 N/A
33 846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 10/26/2021, 2:43:38.816 PM 2/11/2021, 11:01:33.754 PM Infoblox Data Connector RPZ-QNAME-NXDOMAIN DNS Response 8 1 NXDOMAIN NXDOMAIN infoblox-virtual-machine 192.168.1.106 "RPZ QNAME NXDOMAIN rewrite walla.link. [A] via base.walla.link." "www.ebay.com. 0 IN A 3.215.231.251 . 32768 1232 OPT " TCP 12250 17458 208.50.179.13 192.168.1.106 2.1.3 RPZ EVENT QNAME NXDOMAIN DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=base.walla.link.;InfobloxRPZ=base;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=APT_MalwareC2;InfobloxThreatConfidence=;InfobloxThreatLevel=100 InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=-EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1;InfobloxB1Region=us-west-1;InfobloxB1ConnectionType=dfp;InfobloxB1OPHName=Sentinel-Demo-DNS+DFP+DHCP;InfobloxB1OPHIPAddress=192.168.1.201;InfobloxB1Network=Sentinel-Demo-DNS+DFP+DHCP (DFP);InfobloxB1SrcOSVersion=;InfobloxB1DHCPFingerprint=;InfobloxB1DNSTags=APP_Uncategorized,CAT_Auctions/Classifieds,CAT_Content Server DNS walla.link. www.ebay.com. 00:50:56:0b:0f:15 CommonSecurityLog {"InfobloxDNSQClass":"IN","InfobloxDNSQType":"A","InfobloxDNSQFlags":"-EV","InfobloxDNSRCode":"NOERROR","InfobloxAnCount":"1","InfobloxNsCount":"0","InfobloxArCount":"1","InfobloxB1Region":"us-west-1","InfobloxB1ConnectionType":"dfp","InfobloxB1OPHName":"Sentinel-Demo-DNS+DFP+DHCP","InfobloxB1OPHIPAddress":"192.168.1.201","InfobloxB1Network":"Sentinel-Demo-DNS+DFP+DHCP (DFP)","InfobloxB1DNSTags":"APP_Uncategorized,CAT_Auctions/Classifieds,CAT_Content Server"} 1 1 dfp APP_Uncategorized,CAT_Auctions/Classifieds,CAT_Content Server Sentinel-Demo-DNS+DFP+DHCP (DFP) 192.168.1.201 Sentinel-Demo-DNS+DFP+DHCP us-west-1 IN #NAME? A NOERROR 0 N/A
34 846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 10/26/2021, 2:43:39.788 PM 2/11/2021, 11:00:00.749 PM Infoblox Data Connector RPZ-QNAME-NXDOMAIN DNS Response 8 1 NXDOMAIN NXDOMAIN infoblox-virtual-machine 192.168.1.106 "RPZ QNAME NXDOMAIN rewrite walla.link. [A] via base.walla.link." "www.amazon.com. 0 IN AAAA 2600:1f18:1043:dc00:8083:68e:ef0f:46de . 32768 1232 OPT " TCP 10437 39838 208.50.179.13 192.168.1.106 2.1.3 RPZ EVENT QNAME NXDOMAIN DNS Response IN AAAA NOERROR InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=base.walla.link.;InfobloxRPZ=base;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=APT_MalwareC2;InfobloxThreatConfidence=;InfobloxThreatLevel=100 InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=AAAA;InfobloxDNSQFlags=-EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1;InfobloxB1Region=us-west-1;InfobloxB1ConnectionType=dfp;InfobloxB1OPHName=Sentinel-Demo-DNS+DFP+DHCP;InfobloxB1OPHIPAddress=192.168.1.201;InfobloxB1Network=Sentinel-Demo-DNS+DFP+DHCP (DFP);InfobloxB1SrcOSVersion=;InfobloxB1DHCPFingerprint=;InfobloxB1DNSTags=APP_Uncategorized,CAT_Content Server,CAT_Online Shopping DNS walla.link. www.amazon.com. 00:50:56:0b:0f:15 CommonSecurityLog {"InfobloxDNSQClass":"IN","InfobloxDNSQType":"AAAA","InfobloxDNSQFlags":"-EV","InfobloxDNSRCode":"NOERROR","InfobloxAnCount":"1","InfobloxNsCount":"0","InfobloxArCount":"1","InfobloxB1Region":"us-west-1","InfobloxB1ConnectionType":"dfp","InfobloxB1OPHName":"Sentinel-Demo-DNS+DFP+DHCP","InfobloxB1OPHIPAddress":"192.168.1.201","InfobloxB1Network":"Sentinel-Demo-DNS+DFP+DHCP (DFP)","InfobloxB1DNSTags":"APP_Uncategorized,CAT_Content Server,CAT_Online Shopping"} 1 1 dfp APP_Uncategorized,CAT_Content Server,CAT_Online Shopping Sentinel-Demo-DNS+DFP+DHCP (DFP) 192.168.1.201 Sentinel-Demo-DNS+DFP+DHCP us-west-1 IN #NAME? AAAA NOERROR 0 N/A
35 846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 10/26/2021, 2:49:48.161 PM 2/11/2021, 11:06:32.712 PM Infoblox Data Connector RPZ-QNAME-NXDOMAIN DNS Response 8 1 NXDOMAIN NXDOMAIN infoblox-virtual-machine 192.168.1.90 "RPZ QNAME NXDOMAIN rewrite walla.link. [A] via base.walla.link." "wns.notify.trafficmanager.net. 137 IN A 13.64.180.106 . 32768 4096 OPT " TCP 52859 35175 208.50.179.13 192.168.1.90 2.1.3 RPZ EVENT QNAME NXDOMAIN DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=base.walla.link.;InfobloxRPZ=base;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=APT_MalwareC2;InfobloxThreatConfidence=;InfobloxThreatLevel=100 InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1;InfobloxB1Region=us-west-1;InfobloxB1ConnectionType=dfp;InfobloxB1OPHName=Sentinel-Demo-DNS+DFP+DHCP;InfobloxB1OPHIPAddress=192.168.1.201;InfobloxB1Network=Sentinel-Demo-DNS+DFP+DHCP (DFP);InfobloxB1SrcOSVersion=;InfobloxB1DHCPFingerprint=;InfobloxB1DNSTags=APP_Uncategorized,CAT_Internet Services DNS walla.link. wns.notify.trafficmanager.net. 00:50:56:0b:0f:80 CommonSecurityLog {"InfobloxDNSQClass":"IN","InfobloxDNSQType":"A","InfobloxDNSQFlags":"+EV","InfobloxDNSRCode":"NOERROR","InfobloxAnCount":"1","InfobloxNsCount":"0","InfobloxArCount":"1","InfobloxB1Region":"us-west-1","InfobloxB1ConnectionType":"dfp","InfobloxB1OPHName":"Sentinel-Demo-DNS+DFP+DHCP","InfobloxB1OPHIPAddress":"192.168.1.201","InfobloxB1Network":"Sentinel-Demo-DNS+DFP+DHCP (DFP)","InfobloxB1DNSTags":"APP_Uncategorized,CAT_Internet Services"} 1 1 dfp APP_Uncategorized,CAT_Internet Services Sentinel-Demo-DNS+DFP+DHCP (DFP) 192.168.1.201 Sentinel-Demo-DNS+DFP+DHCP us-west-1 IN #NAME? A NOERROR 0 N/A
36 846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 10/26/2021, 2:27:45.244 PM 2/11/2021, 11:01:36.336 PM Infoblox Data Connector RPZ-QNAME-NXDOMAIN DNS Response 8 1 NXDOMAIN NXDOMAIN infoblox-virtual-machine 192.168.1.201 "RPZ QNAME NXDOMAIN rewrite walla.link. [A] via base.walla.link." "ocsp.digicert.com. 0 IN A 3.215.231.251 . 150792 IN NS b.root-servers.net. . 150792 IN NS j.root-servers.net. . 150792 IN NS h.root-servers.net. . 150792 IN NS c.root-servers.net. . 150792 IN NS a.root-servers.net. . 150792 IN NS f.root-servers.net. . 150792 IN NS i.root-servers.net. . 150792 IN NS e.root-servers.net. . 150792 IN NS m.root-servers.net. . 150792 IN NS d.root-servers.net. . 150792 IN NS g.root-servers.net. . 150792 IN NS l.root-servers.net. . 150792 IN NS k.root-servers.net. a.root-servers.net. 150792 IN A 198.41.0.4 b.root-servers.net. 150792 IN A 199.9.14.201 c.root-servers.net. 150792 IN A 192.33.4.12 d.root-servers.net. 150792 IN A 199.7.91.13 e.root-servers.net. 150792 IN A 192.203.230.10 f.root-servers.net. 150792 IN A 192.5.5.241 g.root-servers.net. 150792 IN A 192.112.36.4 h.root-servers.net. 150792 IN A 198.97.190.53 i.root-servers.net. 150792 IN A 192.36.148.17 j.root-servers.net. 150792 IN A 192.58.128.30 k.root-servers.net. 150792 IN A 193.0.14.129 l.root-servers.net. 150792 IN A 199.7.83.42 m.root-servers.net. 150792 IN A 202.12.27.33 a.root-servers.net. 150792 IN AAAA 2001:503:ba3e::2:30" UDP 39215 61908 208.50.179.13 192.168.1.90 2.1.3 RPZ EVENT QNAME NXDOMAIN DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=base.walla.link.;InfobloxRPZ=base;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=APT_MalwareC2;InfobloxThreatConfidence=;InfobloxThreatLevel=100 InfobloxDNSView=_default;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=13;InfobloxArCount=14 DNS walla.link. ocsp.digicert.com. CommonSecurityLog {"InfobloxDNSView":"_default","InfobloxDNSQClass":"IN","InfobloxDNSQType":"A","InfobloxDNSQFlags":"+EV","InfobloxDNSRCode":"NOERROR","InfobloxAnCount":"1","InfobloxNsCount":"13","InfobloxArCount":"14"} 1 14 IN #NAME? A NOERROR _default 13 N/A
37 846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 10/26/2021, 2:48:39.990 PM 2/11/2021, 11:00:36.898 PM Infoblox Data Connector RPZ-QNAME-NXDOMAIN DNS Response 8 1 NXDOMAIN NXDOMAIN infoblox-virtual-machine 192.168.1.106 "RPZ QNAME NXDOMAIN rewrite walla.link. [A] via base.walla.link." "us-east-1.elb.amazonaws.com. 59 IN SOA ns-1119.awsdns-11.org. awsdns-hostmaster.amazon.com. 1 7200 900 1209600 60 . 32768 4096 OPT " TCP 40398 21360 208.50.179.13 192.168.1.106 2.1.3 RPZ EVENT QNAME NXDOMAIN DNS Response IN AAAA NOERROR InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=base.walla.link.;InfobloxRPZ=base;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=APT_MalwareC2;InfobloxThreatConfidence=;InfobloxThreatLevel=100 InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=AAAA;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=0;InfobloxNsCount=1;InfobloxArCount=1;InfobloxB1Region=us-west-1;InfobloxB1ConnectionType=dfp;InfobloxB1OPHName=Sentinel-Demo-DNS+DFP+DHCP;InfobloxB1OPHIPAddress=192.168.1.201;InfobloxB1Network=Sentinel-Demo-DNS+DFP+DHCP (DFP);InfobloxB1SrcOSVersion=;InfobloxB1DHCPFingerprint=;InfobloxB1DNSTags=APP_Uncategorized,CAT_Internet Services DNS walla.link. int-classic-scout-production-1074780512.us-east-1.elb.amazonaws.com. 00:50:56:0b:0f:15 CommonSecurityLog {"InfobloxDNSQClass":"IN","InfobloxDNSQType":"AAAA","InfobloxDNSQFlags":"+EV","InfobloxDNSRCode":"NOERROR","InfobloxAnCount":"0","InfobloxNsCount":"1","InfobloxArCount":"1","InfobloxB1Region":"us-west-1","InfobloxB1ConnectionType":"dfp","InfobloxB1OPHName":"Sentinel-Demo-DNS+DFP+DHCP","InfobloxB1OPHIPAddress":"192.168.1.201","InfobloxB1Network":"Sentinel-Demo-DNS+DFP+DHCP (DFP)","InfobloxB1DNSTags":"APP_Uncategorized,CAT_Internet Services"} 0 1 dfp APP_Uncategorized,CAT_Internet Services Sentinel-Demo-DNS+DFP+DHCP (DFP) 192.168.1.201 Sentinel-Demo-DNS+DFP+DHCP us-west-1 IN #NAME? AAAA NOERROR 1 N/A
38 846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 10/26/2021, 2:38:30.252 PM 2/11/2021, 10:59:57.510 PM Infoblox Data Connector RPZ-QNAME-NXDOMAIN DNS Response 8 1 NXDOMAIN NXDOMAIN infoblox-virtual-machine 192.168.1.201 "RPZ QNAME NXDOMAIN rewrite walla.link. [A] via base.walla.link." "connectivity-check.ubuntu.com. 600 IN A 35.224.170.84 connectivity-check.ubuntu.com. 600 IN A 35.232.111.17 . 0 1232 OPT " UDP 33946 43700 208.50.179.13 192.168.1.106 2.1.3 RPZ EVENT QNAME NXDOMAIN DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=base.walla.link.;InfobloxRPZ=base;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=APT_MalwareC2;InfobloxThreatConfidence=;InfobloxThreatLevel=100 InfobloxDNSView=_default;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=2;InfobloxNsCount=0;InfobloxArCount=1 DNS walla.link. connectivity-check.ubuntu.com. CommonSecurityLog {"InfobloxDNSView":"_default","InfobloxDNSQClass":"IN","InfobloxDNSQType":"A","InfobloxDNSQFlags":"+EV","InfobloxDNSRCode":"NOERROR","InfobloxAnCount":"2","InfobloxNsCount":"0","InfobloxArCount":"1"} 2 1 IN #NAME? A NOERROR _default 0 N/A
39 846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 10/26/2021, 2:38:36.521 PM 2/11/2021, 11:27:17.545 PM Infoblox Data Connector RPZ-QNAME-NXDOMAIN DNS Response 8 1 NXDOMAIN NXDOMAIN infoblox-virtual-machine 192.168.1.106 "RPZ QNAME NXDOMAIN rewrite ftp.windowsstores.organiccrap.com. [A] via base.ftp.windowsstores.organiccrap.com." "connectivity-check.ubuntu.com. 600 IN A 35.232.111.17 connectivity-check.ubuntu.com. 600 IN A 35.224.170.84 . 32768 4096 OPT " TCP 62347 55942 208.50.179.13 192.168.1.106 2.1.3 RPZ EVENT QNAME NXDOMAIN DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=base.ftp.windowsstores.organiccrap.com.;InfobloxRPZ=base;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=APT_MalwareC2;InfobloxThreatConfidence=;InfobloxThreatLevel=100 InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=2;InfobloxNsCount=0;InfobloxArCount=1;InfobloxB1Region=us-west-1;InfobloxB1ConnectionType=dfp;InfobloxB1OPHName=Sentinel-Demo-DNS+DFP+DHCP;InfobloxB1OPHIPAddress=192.168.1.201;InfobloxB1Network=Sentinel-Demo-DNS+DFP+DHCP (DFP);InfobloxB1SrcOSVersion=;InfobloxB1DHCPFingerprint=;InfobloxB1DNSTags=APP_Uncategorized,CAT_Software/Hardware DNS ftp.windowsstores.organiccrap.com. connectivity-check.ubuntu.com. 00:50:56:0b:0f:15 CommonSecurityLog {"InfobloxDNSQClass":"IN","InfobloxDNSQType":"A","InfobloxDNSQFlags":"+EV","InfobloxDNSRCode":"NOERROR","InfobloxAnCount":"2","InfobloxNsCount":"0","InfobloxArCount":"1","InfobloxB1Region":"us-west-1","InfobloxB1ConnectionType":"dfp","InfobloxB1OPHName":"Sentinel-Demo-DNS+DFP+DHCP","InfobloxB1OPHIPAddress":"192.168.1.201","InfobloxB1Network":"Sentinel-Demo-DNS+DFP+DHCP (DFP)","InfobloxB1DNSTags":"APP_Uncategorized,CAT_Software/Hardware"} 2 1 dfp APP_Uncategorized,CAT_Software/Hardware Sentinel-Demo-DNS+DFP+DHCP (DFP) 192.168.1.201 Sentinel-Demo-DNS+DFP+DHCP us-west-1 IN #NAME? A NOERROR 0 N/A
40 846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 10/26/2021, 2:48:42.365 PM 2/11/2021, 11:27:17.545 PM Infoblox Data Connector RPZ-QNAME-NXDOMAIN DNS Response 8 1 NXDOMAIN NXDOMAIN infoblox-virtual-machine 192.168.1.106 "RPZ QNAME NXDOMAIN rewrite ftp.windowsstores.organiccrap.com. [A] via base.ftp.windowsstores.organiccrap.com." "article.smartasset.com. 84365 IN CNAME unbouncepages.com. unbouncepages.com. 900 IN SOA ns-748.awsdns-29.net. awsdns-hostmaster.amazon.com. 1 7200 900 1209600 86400 . 32768 4096 OPT " TCP 20911 19173 208.50.179.13 192.168.1.106 2.1.3 RPZ EVENT QNAME NXDOMAIN DNS Response IN AAAA NOERROR InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=base.ftp.windowsstores.organiccrap.com.;InfobloxRPZ=base;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=APT_MalwareC2;InfobloxThreatConfidence=;InfobloxThreatLevel=100 InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=AAAA;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=1;InfobloxArCount=1;InfobloxB1Region=us-west-1;InfobloxB1ConnectionType=dfp;InfobloxB1OPHName=Sentinel-Demo-DNS+DFP+DHCP;InfobloxB1OPHIPAddress=192.168.1.201;InfobloxB1Network=Sentinel-Demo-DNS+DFP+DHCP (DFP);InfobloxB1SrcOSVersion=;InfobloxB1DHCPFingerprint=;InfobloxB1DNSTags=APP_Uncategorized,CAT_Finance/Banking,CAT_Internet Services DNS ftp.windowsstores.organiccrap.com. article.smartasset.com. 00:50:56:0b:0f:15 CommonSecurityLog {"InfobloxDNSQClass":"IN","InfobloxDNSQType":"AAAA","InfobloxDNSQFlags":"+EV","InfobloxDNSRCode":"NOERROR","InfobloxAnCount":"1","InfobloxNsCount":"1","InfobloxArCount":"1","InfobloxB1Region":"us-west-1","InfobloxB1ConnectionType":"dfp","InfobloxB1OPHName":"Sentinel-Demo-DNS+DFP+DHCP","InfobloxB1OPHIPAddress":"192.168.1.201","InfobloxB1Network":"Sentinel-Demo-DNS+DFP+DHCP (DFP)","InfobloxB1DNSTags":"APP_Uncategorized,CAT_Finance/Banking,CAT_Internet Services"} 1 1 dfp APP_Uncategorized,CAT_Finance/Banking,CAT_Internet Services Sentinel-Demo-DNS+DFP+DHCP (DFP) 192.168.1.201 Sentinel-Demo-DNS+DFP+DHCP us-west-1 IN #NAME? AAAA NOERROR 1 N/A
41 846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 10/26/2021, 2:28:30.237 PM 2/11/2021, 11:27:21.192 PM Infoblox Data Connector RPZ-QNAME-NXDOMAIN DNS Response 8 1 NXDOMAIN NXDOMAIN infoblox-virtual-machine 192.168.1.201 "RPZ QNAME NXDOMAIN rewrite ftp.windowsstores.organiccrap.com. [A] via base.ftp.windowsstores.organiccrap.com." "connectivity-check.ubuntu.com. 350 IN A 35.232.111.17 connectivity-check.ubuntu.com. 350 IN A 35.224.170.84 . 0 1232 OPT " UDP 11356 43089 208.50.179.13 192.168.1.106 2.1.3 RPZ EVENT QNAME NXDOMAIN DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=base.ftp.windowsstores.organiccrap.com.;InfobloxRPZ=base;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=APT_MalwareC2;InfobloxThreatConfidence=;InfobloxThreatLevel=100 InfobloxDNSView=_default;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=2;InfobloxNsCount=0;InfobloxArCount=1 DNS ftp.windowsstores.organiccrap.com. connectivity-check.ubuntu.com. CommonSecurityLog {"InfobloxDNSView":"_default","InfobloxDNSQClass":"IN","InfobloxDNSQType":"A","InfobloxDNSQFlags":"+EV","InfobloxDNSRCode":"NOERROR","InfobloxAnCount":"2","InfobloxNsCount":"0","InfobloxArCount":"1"} 2 1 IN #NAME? A NOERROR _default 0 N/A
42 846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 10/26/2021, 2:48:44.761 PM 2/11/2021, 10:57:25.060 PM Infoblox Data Connector RPZ-QNAME-REDIRECT DNS Response 8 1 REDIRECT REDIRECT infoblox-virtual-machine 192.168.1.106 "RPZ QNAME REDIRECT rewrite example.com. [A] via LIST_658153.example.com." "unbouncepages.com. 60 IN A 108.128.55.166 unbouncepages.com. 60 IN A 18.200.10.24 . 32768 4096 OPT " TCP 39956 3638 208.50.179.13 192.168.1.106 2.1.3 RPZ EVENT QNAME REDIRECT DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_658153.example.com.;InfobloxRPZ=LIST_658153;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=90;InfobloxThreatLevel=90 InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=2;InfobloxNsCount=0;InfobloxArCount=1;InfobloxB1Region=us-west-1;InfobloxB1ConnectionType=dfp;InfobloxB1OPHName=Sentinel-Demo-DNS+DFP+DHCP;InfobloxB1OPHIPAddress=192.168.1.201;InfobloxB1Network=Sentinel-Demo-DNS+DFP+DHCP (DFP);InfobloxB1SrcOSVersion=;InfobloxB1DHCPFingerprint=;InfobloxB1DNSTags=APP_Uncategorized,CAT_Internet Services DNS example.com. unbouncepages.com. 00:50:56:0b:0f:15 CommonSecurityLog {"InfobloxDNSQClass":"IN","InfobloxDNSQType":"A","InfobloxDNSQFlags":"+EV","InfobloxDNSRCode":"NOERROR","InfobloxAnCount":"2","InfobloxNsCount":"0","InfobloxArCount":"1","InfobloxB1Region":"us-west-1","InfobloxB1ConnectionType":"dfp","InfobloxB1OPHName":"Sentinel-Demo-DNS+DFP+DHCP","InfobloxB1OPHIPAddress":"192.168.1.201","InfobloxB1Network":"Sentinel-Demo-DNS+DFP+DHCP (DFP)","InfobloxB1DNSTags":"APP_Uncategorized,CAT_Internet Services"} 2 1 dfp APP_Uncategorized,CAT_Internet Services Sentinel-Demo-DNS+DFP+DHCP (DFP) 192.168.1.201 Sentinel-Demo-DNS+DFP+DHCP us-west-1 IN #NAME? A NOERROR 0 N/A
43 846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 10/26/2021, 2:28:30.237 PM 2/11/2021, 10:57:21.002 PM Infoblox Data Connector RPZ-QNAME-REDIRECT DNS Response 8 1 REDIRECT REDIRECT infoblox-virtual-machine 192.168.1.201 "RPZ QNAME REDIRECT rewrite example.com. [A] via LIST_658153.example.com." "services.mozilla.com. 356 IN SOA ns-679.awsdns-20.net. awsdns-hostmaster.amazon.com. 1 7200 900 1209600 86400 . 0 1232 OPT " UDP 15089 57187 208.50.179.13 192.168.1.106 2.1.3 RPZ EVENT QNAME REDIRECT DNS Response IN AAAA NOERROR InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_658153.example.com.;InfobloxRPZ=LIST_658153;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=90;InfobloxThreatLevel=90 InfobloxDNSView=_default;InfobloxDNSQClass=IN;InfobloxDNSQType=AAAA;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=0;InfobloxNsCount=1;InfobloxArCount=1 DNS example.com. contile.services.mozilla.com. CommonSecurityLog {"InfobloxDNSView":"_default","InfobloxDNSQClass":"IN","InfobloxDNSQType":"AAAA","InfobloxDNSQFlags":"+EV","InfobloxDNSRCode":"NOERROR","InfobloxAnCount":"0","InfobloxNsCount":"1","InfobloxArCount":"1"} 0 1 IN #NAME? AAAA NOERROR _default 1 N/A
44 846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 10/26/2021, 2:43:39.788 PM 2/11/2021, 10:55:39.475 PM Infoblox Data Connector RPZ-QNAME-REDIRECT DNS Response 1 REDIRECT REDIRECT infoblox-virtual-machine 192.168.1.106 "RPZ QNAME REDIRECT rewrite example.com. [A] via LIST_658153.example.com." "www.amazon.com. 0 IN A 3.215.231.251 . 32768 1232 OPT " TCP 22336 7930 208.50.179.13 192.168.1.106 2.1.3 RPZ EVENT QNAME REDIRECT DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_658153.example.com.;InfobloxRPZ=LIST_658153;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=10 InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=-EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1;InfobloxB1Region=us-west-1;InfobloxB1ConnectionType=dfp;InfobloxB1OPHName=Sentinel-Demo-DNS+DFP+DHCP;InfobloxB1OPHIPAddress=192.168.1.201;InfobloxB1Network=Sentinel-Demo-DNS+DFP+DHCP (DFP);InfobloxB1SrcOSVersion=;InfobloxB1DHCPFingerprint=;InfobloxB1DNSTags=APP_Uncategorized,CAT_Content Server,CAT_Online Shopping DNS example.com. www.amazon.com. 00:50:56:0b:0f:15 CommonSecurityLog {"InfobloxDNSQClass":"IN","InfobloxDNSQType":"A","InfobloxDNSQFlags":"-EV","InfobloxDNSRCode":"NOERROR","InfobloxAnCount":"1","InfobloxNsCount":"0","InfobloxArCount":"1","InfobloxB1Region":"us-west-1","InfobloxB1ConnectionType":"dfp","InfobloxB1OPHName":"Sentinel-Demo-DNS+DFP+DHCP","InfobloxB1OPHIPAddress":"192.168.1.201","InfobloxB1Network":"Sentinel-Demo-DNS+DFP+DHCP (DFP)","InfobloxB1DNSTags":"APP_Uncategorized,CAT_Content Server,CAT_Online Shopping"} 1 1 dfp APP_Uncategorized,CAT_Content Server,CAT_Online Shopping Sentinel-Demo-DNS+DFP+DHCP (DFP) 192.168.1.201 Sentinel-Demo-DNS+DFP+DHCP us-west-1 IN #NAME? A NOERROR 0 N/A
45 846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 10/26/2021, 2:28:30.237 PM 2/11/2021, 10:37:24.052 PM Infoblox Data Connector RPZ-QNAME-REDIRECT DNS Response 5 1 REDIRECT REDIRECT infoblox-virtual-machine 192.168.1.201 "RPZ QNAME REDIRECT rewrite example.com. [A] via LIST_658153.example.com." "contile.services.mozilla.com. 296 IN A 34.117.237.239 . 0 1232 OPT " UDP 58096 53808 208.50.179.13 192.168.1.106 2.1.3 RPZ EVENT QNAME REDIRECT DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_658153.example.com.;InfobloxRPZ=LIST_658153;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=90;InfobloxThreatLevel=50 InfobloxDNSView=_default;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1 DNS example.com. contile.services.mozilla.com. CommonSecurityLog {"InfobloxDNSView":"_default","InfobloxDNSQClass":"IN","InfobloxDNSQType":"A","InfobloxDNSQFlags":"+EV","InfobloxDNSRCode":"NOERROR","InfobloxAnCount":"1","InfobloxNsCount":"0","InfobloxArCount":"1"} 1 1 IN #NAME? A NOERROR _default 0 N/A
46 846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 10/26/2021, 2:43:40.178 PM 2/11/2021, 10:51:26.375 PM Infoblox Data Connector RPZ-QNAME-REDIRECT DNS Response 1 REDIRECT REDIRECT infoblox-virtual-machine 192.168.1.106 "RPZ QNAME REDIRECT rewrite example.com. [A] via LIST_658153.example.com." "services.mozilla.com. 842 IN SOA ns-679.awsdns-20.net. awsdns-hostmaster.amazon.com. 1 7200 900 1209600 86400 . 32768 4096 OPT " TCP 28269 44483 208.50.179.13 192.168.1.106 2.1.3 RPZ EVENT QNAME REDIRECT DNS Response IN AAAA NOERROR InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_658153.example.com.;InfobloxRPZ=LIST_658153;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=10;InfobloxThreatLevel=0 InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=AAAA;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=0;InfobloxNsCount=1;InfobloxArCount=1;InfobloxB1Region=us-west-1;InfobloxB1ConnectionType=dfp;InfobloxB1OPHName=Sentinel-Demo-DNS+DFP+DHCP;InfobloxB1OPHIPAddress=192.168.1.201;InfobloxB1Network=Sentinel-Demo-DNS+DFP+DHCP (DFP);InfobloxB1SrcOSVersion=;InfobloxB1DHCPFingerprint=;InfobloxB1DNSTags=APP_Uncategorized,CAT_Software/Hardware DNS example.com. contile.services.mozilla.com. 00:50:56:0b:0f:15 CommonSecurityLog {"InfobloxDNSQClass":"IN","InfobloxDNSQType":"AAAA","InfobloxDNSQFlags":"+EV","InfobloxDNSRCode":"NOERROR","InfobloxAnCount":"0","InfobloxNsCount":"1","InfobloxArCount":"1","InfobloxB1Region":"us-west-1","InfobloxB1ConnectionType":"dfp","InfobloxB1OPHName":"Sentinel-Demo-DNS+DFP+DHCP","InfobloxB1OPHIPAddress":"192.168.1.201","InfobloxB1Network":"Sentinel-Demo-DNS+DFP+DHCP (DFP)","InfobloxB1DNSTags":"APP_Uncategorized,CAT_Software/Hardware"} 0 1 dfp APP_Uncategorized,CAT_Software/Hardware Sentinel-Demo-DNS+DFP+DHCP (DFP) 192.168.1.201 Sentinel-Demo-DNS+DFP+DHCP us-west-1 IN #NAME? AAAA NOERROR 1 N/A
47 846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 10/26/2021, 2:43:40.178 PM 2/11/2021, 10:55:40.937 PM Infoblox Data Connector RPZ-QNAME-REDIRECT DNS Response 1 REDIRECT REDIRECT infoblox-virtual-machine 192.168.1.106 "RPZ QNAME REDIRECT rewrite example.com. [A] via LIST_658153.example.com." "www.ebay.com. 0 IN AAAA 2600:1f18:1043:dc00:8083:68e:ef0f:46de . 32768 1232 OPT " TCP 62129 44483 208.50.179.13 192.168.1.106 2.1.3 RPZ EVENT QNAME REDIRECT DNS Response IN AAAA NOERROR InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_658153.example.com.;InfobloxRPZ=LIST_658153;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=10 InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=AAAA;InfobloxDNSQFlags=-EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1;InfobloxB1Region=us-west-1;InfobloxB1ConnectionType=dfp;InfobloxB1OPHName=Sentinel-Demo-DNS+DFP+DHCP;InfobloxB1OPHIPAddress=192.168.1.201;InfobloxB1Network=Sentinel-Demo-DNS+DFP+DHCP (DFP);InfobloxB1SrcOSVersion=;InfobloxB1DHCPFingerprint=;InfobloxB1DNSTags=APP_Uncategorized,CAT_Auctions/Classifieds,CAT_Content Server DNS example.com. www.ebay.com. 00:50:56:0b:0f:15 CommonSecurityLog {"InfobloxDNSQClass":"IN","InfobloxDNSQType":"AAAA","InfobloxDNSQFlags":"-EV","InfobloxDNSRCode":"NOERROR","InfobloxAnCount":"1","InfobloxNsCount":"0","InfobloxArCount":"1","InfobloxB1Region":"us-west-1","InfobloxB1ConnectionType":"dfp","InfobloxB1OPHName":"Sentinel-Demo-DNS+DFP+DHCP","InfobloxB1OPHIPAddress":"192.168.1.201","InfobloxB1Network":"Sentinel-Demo-DNS+DFP+DHCP (DFP)","InfobloxB1DNSTags":"APP_Uncategorized,CAT_Auctions/Classifieds,CAT_Content Server"} 1 1 dfp APP_Uncategorized,CAT_Auctions/Classifieds,CAT_Content Server Sentinel-Demo-DNS+DFP+DHCP (DFP) 192.168.1.201 Sentinel-Demo-DNS+DFP+DHCP us-west-1 IN #NAME? AAAA NOERROR 0 N/A
48 846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 10/26/2021, 2:48:45.260 PM 2/11/2021, 11:27:32.719 PM Infoblox Data Connector RPZ-QNAME-NXDOMAIN DNS Response 8 1 NXDOMAIN NXDOMAIN infoblox-virtual-machine 192.168.1.201 "RPZ QNAME NXDOMAIN rewrite daddy.gostudyantivirus.com. [A] via base.daddy.gostudyantivirus.com." "i.geistm.com. 38 IN CNAME int-classic-scout-production-1074780512.us-east-1.elb.amazonaws.com. us-east-1.elb.amazonaws.com. 59 IN SOA ns-1119.awsdns-11.org. awsdns-hostmaster.amazon.com. 1 7200 900 1209600 60 . 0 1232 OPT " UDP 10205 46383 208.50.179.13 192.168.1.106 2.1.3 RPZ EVENT QNAME NXDOMAIN DNS Response IN AAAA NOERROR InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=base.daddy.gostudyantivirus.com.;InfobloxRPZ=base;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=APT_MalwareC2;InfobloxThreatConfidence=;InfobloxThreatLevel=100 InfobloxDNSView=_default;InfobloxDNSQClass=IN;InfobloxDNSQType=AAAA;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=1;InfobloxArCount=1 DNS daddy.gostudyantivirus.com. i.geistm.com. CommonSecurityLog {"InfobloxDNSView":"_default","InfobloxDNSQClass":"IN","InfobloxDNSQType":"AAAA","InfobloxDNSQFlags":"+EV","InfobloxDNSRCode":"NOERROR","InfobloxAnCount":"1","InfobloxNsCount":"1","InfobloxArCount":"1"} 1 1 IN #NAME? AAAA NOERROR _default 1 N/A
49 846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 10/26/2021, 2:38:45.246 PM 2/11/2021, 11:27:45.134 PM Infoblox Data Connector RPZ-QNAME-NXDOMAIN DNS Response 8 1 NXDOMAIN NXDOMAIN infoblox-virtual-machine 192.168.1.201 "RPZ QNAME NXDOMAIN rewrite daddy.gostudyantivirus.com. [A] via base.daddy.gostudyantivirus.com." "client.wns.windows.com. 222 IN CNAME wns.notify.trafficmanager.net. wns.notify.trafficmanager.net. 194 IN A 40.83.247.108 . 150134 IN NS g.root-servers.net. . 150134 IN NS l.root-servers.net. . 150134 IN NS e.root-servers.net. . 150134 IN NS h.root-servers.net. . 150134 IN NS i.root-servers.net. . 150134 IN NS b.root-servers.net. . 150134 IN NS f.root-servers.net. . 150134 IN NS a.root-servers.net. . 150134 IN NS m.root-servers.net. . 150134 IN NS d.root-servers.net. . 150134 IN NS j.root-servers.net. . 150134 IN NS k.root-servers.net. . 150134 IN NS c.root-servers.net. a.root-servers.net. 150134 IN A 198.41.0.4 b.root-servers.net. 150134 IN A 199.9.14.201 c.root-servers.net. 150134 IN A 192.33.4.12 d.root-servers.net. 150134 IN A 199.7.91.13 e.root-servers.net. 150134 IN A 192.203.230.10 f.root-servers.net. 150134 IN A 192.5.5.241 g.root-servers.net. 150134 IN A 192.112.36.4 h.root-servers.net. 150134 IN A 198.97.190.53 i.root-servers.net. 150134 IN A 192.36.148.17 j.root-servers.net. 150134 IN A 192.58.128.30 k.root-servers.net. 150134 IN A 193.0.14.129" UDP 7992 58700 208.50.179.13 192.168.1.90 2.1.3 RPZ EVENT QNAME NXDOMAIN DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=base.daddy.gostudyantivirus.com.;InfobloxRPZ=base;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=APT_MalwareC2;InfobloxThreatConfidence=;InfobloxThreatLevel=100 InfobloxDNSView=_default;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=2;InfobloxNsCount=13;InfobloxArCount=11 DNS daddy.gostudyantivirus.com. client.wns.windows.com. CommonSecurityLog {"InfobloxDNSView":"_default","InfobloxDNSQClass":"IN","InfobloxDNSQType":"A","InfobloxDNSQFlags":"+EV","InfobloxDNSRCode":"NOERROR","InfobloxAnCount":"2","InfobloxNsCount":"13","InfobloxArCount":"11"} 2 11 IN #NAME? A NOERROR _default 13 N/A
50 846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 10/26/2021, 2:38:45.246 PM 2/11/2021, 11:27:35.579 PM Infoblox Data Connector RPZ-QNAME-NXDOMAIN DNS Response 8 1 NXDOMAIN NXDOMAIN infoblox-virtual-machine 192.168.1.201 "RPZ QNAME NXDOMAIN rewrite daddy.gostudyantivirus.com. [A] via base.daddy.gostudyantivirus.com." "client.wns.windows.com. 222 IN CNAME wns.notify.trafficmanager.net. wns.notify.trafficmanager.net. 194 IN A 40.83.247.108 . 150134 IN NS k.root-servers.net. . 150134 IN NS d.root-servers.net. . 150134 IN NS l.root-servers.net. . 150134 IN NS h.root-servers.net. . 150134 IN NS j.root-servers.net. . 150134 IN NS c.root-servers.net. . 150134 IN NS i.root-servers.net. . 150134 IN NS e.root-servers.net. . 150134 IN NS m.root-servers.net. . 150134 IN NS f.root-servers.net. . 150134 IN NS g.root-servers.net. . 150134 IN NS b.root-servers.net. . 150134 IN NS a.root-servers.net. a.root-servers.net. 150134 IN A 198.41.0.4 b.root-servers.net. 150134 IN A 199.9.14.201 c.root-servers.net. 150134 IN A 192.33.4.12 d.root-servers.net. 150134 IN A 199.7.91.13 e.root-servers.net. 150134 IN A 192.203.230.10 f.root-servers.net. 150134 IN A 192.5.5.241 g.root-servers.net. 150134 IN A 192.112.36.4 h.root-servers.net. 150134 IN A 198.97.190.53 i.root-servers.net. 150134 IN A 192.36.148.17 j.root-servers.net. 150134 IN A 192.58.128.30 k.root-servers.net. 150134 IN A 193.0.14.129" UDP 7992 58700 208.50.179.13 192.168.1.90 2.1.3 RPZ EVENT QNAME NXDOMAIN DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=base.daddy.gostudyantivirus.com.;InfobloxRPZ=base;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=APT_MalwareC2;InfobloxThreatConfidence=;InfobloxThreatLevel=100 InfobloxDNSView=_default;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=2;InfobloxNsCount=13;InfobloxArCount=11 DNS daddy.gostudyantivirus.com. client.wns.windows.com. CommonSecurityLog {"InfobloxDNSView":"_default","InfobloxDNSQClass":"IN","InfobloxDNSQType":"A","InfobloxDNSQFlags":"+EV","InfobloxDNSRCode":"NOERROR","InfobloxAnCount":"2","InfobloxNsCount":"13","InfobloxArCount":"11"} 2 11 IN #NAME? A NOERROR _default 13 N/A
51 846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 10/26/2021, 2:38:50.387 PM 2/11/2021, 11:27:41.751 PM Infoblox Data Connector RPZ-QNAME-NXDOMAIN DNS Response 8 1 NXDOMAIN NXDOMAIN infoblox-virtual-machine 192.168.1.90 "RPZ QNAME NXDOMAIN rewrite daddy.gostudyantivirus.com. [A] via base.daddy.gostudyantivirus.com." "client.wns.windows.com. 2124 IN CNAME wns.notify.trafficmanager.net. wns.notify.trafficmanager.net. 222 IN A 40.83.240.146 . 32768 4096 OPT " TCP 10205 45265 208.50.179.13 192.168.1.90 2.1.3 RPZ EVENT QNAME NXDOMAIN DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=base.daddy.gostudyantivirus.com.;InfobloxRPZ=base;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=APT_MalwareC2;InfobloxThreatConfidence=;InfobloxThreatLevel=100 InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=2;InfobloxNsCount=0;InfobloxArCount=1;InfobloxB1Region=us-west-1;InfobloxB1ConnectionType=dfp;InfobloxB1OPHName=Sentinel-Demo-DNS+DFP+DHCP;InfobloxB1OPHIPAddress=192.168.1.201;InfobloxB1Network=Sentinel-Demo-DNS+DFP+DHCP (DFP);InfobloxB1SrcOSVersion=;InfobloxB1DHCPFingerprint=;InfobloxB1DNSTags=APP_Microsoft OneDrive,APP_Microsoft Sharepoint,APP_Uncategorized,CAT_Business,CAT_Internet Services,CAT_Software/Hardware DNS daddy.gostudyantivirus.com. client.wns.windows.com. 00:50:56:0b:0f:80 CommonSecurityLog {"InfobloxDNSQClass":"IN","InfobloxDNSQType":"A","InfobloxDNSQFlags":"+EV","InfobloxDNSRCode":"NOERROR","InfobloxAnCount":"2","InfobloxNsCount":"0","InfobloxArCount":"1","InfobloxB1Region":"us-west-1","InfobloxB1ConnectionType":"dfp","InfobloxB1OPHName":"Sentinel-Demo-DNS+DFP+DHCP","InfobloxB1OPHIPAddress":"192.168.1.201","InfobloxB1Network":"Sentinel-Demo-DNS+DFP+DHCP (DFP)","InfobloxB1DNSTags":"APP_Microsoft OneDrive,APP_Microsoft Sharepoint,APP_Uncategorized,CAT_Business,CAT_Internet Services,CAT_Software/Hardware"} 2 1 dfp APP_Microsoft OneDrive,APP_Microsoft Sharepoint,APP_Uncategorized,CAT_Business,CAT_Internet Services,CAT_Software/Hardware Sentinel-Demo-DNS+DFP+DHCP (DFP) 192.168.1.201 Sentinel-Demo-DNS+DFP+DHCP us-west-1 IN #NAME? A NOERROR 0 N/A
52 846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 10/26/2021, 2:07:30.270 PM 2/11/2021, 11:42:01.840 PM Infoblox Data Connector RPZ-QNAME-NXDOMAIN DNS Response 8 1 NXDOMAIN NXDOMAIN infoblox-virtual-machine 192.168.1.201 "RPZ QNAME NXDOMAIN rewrite 796f7572205765622050726f787920697320657866696c74726174.937.zcmt50.hex.acaddff5e4.leeandco.net. [A] via LIST_541993.796f7572205765622050726f787920697320657866696c74726174.937.zcmt50.hex.acaddff5e4.leeandco.net." "us-east-1.elb.amazonaws.com. 55 IN SOA ns-1119.awsdns-11.org. awsdns-hostmaster.amazon.com. 1 7200 900 1209600 60" UDP 7987 63104 208.50.179.13 192.168.1.90 2.1.3 RPZ EVENT QNAME NXDOMAIN DNS Response IN AAAA NOERROR InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_541993.796f7572205765622050726f787920697320657866696c74726174.937.zcmt50.hex.acaddff5e4.leeandco.net.;InfobloxRPZ=LIST_541993;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=90 InfobloxDNSView=_default;InfobloxDNSQClass=IN;InfobloxDNSQType=AAAA;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=0;InfobloxNsCount=1;InfobloxArCount=0 DNS 796f7572205765622050726f787920697320657866696c74726174.937.zcmt50.hex.acaddff5e4.leeandco.net. proxyserverecs-1736642167.us-east-1.elb.amazonaws.com. CommonSecurityLog {"InfobloxDNSView":"_default","InfobloxDNSQClass":"IN","InfobloxDNSQType":"AAAA","InfobloxDNSQFlags":"+EV","InfobloxDNSRCode":"NOERROR","InfobloxAnCount":"0","InfobloxNsCount":"1","InfobloxArCount":"0"} 0 0 IN #NAME? AAAA NOERROR _default 1 N/A
53 846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 10/26/2021, 2:44:00.280 PM 2/11/2021, 11:21:37.793 PM Infoblox Data Connector RPZ-QNAME-NXDOMAIN DNS Response 8 1 NXDOMAIN NXDOMAIN infoblox-virtual-machine 192.168.1.201 "RPZ QNAME NXDOMAIN rewrite 796f7572205765622050726f787920697320657866696c74726174.937.ymil00.hex.acaddff5e4.leeandco.net. [A] via LIST_541993.796f7572205765622050726f787920697320657866696c74726174.937.ymil00.hex.acaddff5e4.leeandco.net." "ubuntu.com. 1985 IN SOA ns1.canonical.com. hostmaster.canonical.com. 2018054618 10800 3600 604800 3600 . 0 1232 OPT " UDP 50593 43569 208.50.179.13 192.168.1.106 2.1.3 RPZ EVENT QNAME NXDOMAIN DNS Response IN AAAA NOERROR InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_541993.796f7572205765622050726f787920697320657866696c74726174.937.ymil00.hex.acaddff5e4.leeandco.net.;InfobloxRPZ=LIST_541993;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=90 InfobloxDNSView=_default;InfobloxDNSQClass=IN;InfobloxDNSQType=AAAA;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=0;InfobloxNsCount=1;InfobloxArCount=1 DNS 796f7572205765622050726f787920697320657866696c74726174.937.ymil00.hex.acaddff5e4.leeandco.net. connectivity-check.ubuntu.com. CommonSecurityLog {"InfobloxDNSView":"_default","InfobloxDNSQClass":"IN","InfobloxDNSQType":"AAAA","InfobloxDNSQFlags":"+EV","InfobloxDNSRCode":"NOERROR","InfobloxAnCount":"0","InfobloxNsCount":"1","InfobloxArCount":"1"} 0 1 IN #NAME? AAAA NOERROR _default 1 N/A
54 846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 10/26/2021, 2:44:00.281 PM 2/11/2021, 11:41:51.880 PM Infoblox Data Connector RPZ-QNAME-NXDOMAIN DNS Response 8 1 NXDOMAIN NXDOMAIN infoblox-virtual-machine 192.168.1.201 "RPZ QNAME NXDOMAIN rewrite 796f7572205765622050726f787920697320657866696c74726174.840.zcmt50.hex.acaddff5e4.leeandco.net. [A] via LIST_541993.796f7572205765622050726f787920697320657866696c74726174.840.zcmt50.hex.acaddff5e4.leeandco.net." "ubuntu.com. 1985 IN SOA ns1.canonical.com. hostmaster.canonical.com. 2018054618 10800 3600 604800 3600 . 0 1232 OPT " UDP 56540 38962 208.50.179.13 192.168.1.106 2.1.3 RPZ EVENT QNAME NXDOMAIN DNS Response IN AAAA NOERROR InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_541993.796f7572205765622050726f787920697320657866696c74726174.840.zcmt50.hex.acaddff5e4.leeandco.net.;InfobloxRPZ=LIST_541993;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=90 InfobloxDNSView=_default;InfobloxDNSQClass=IN;InfobloxDNSQType=AAAA;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=0;InfobloxNsCount=1;InfobloxArCount=1 DNS 796f7572205765622050726f787920697320657866696c74726174.840.zcmt50.hex.acaddff5e4.leeandco.net. connectivity-check.ubuntu.com. CommonSecurityLog {"InfobloxDNSView":"_default","InfobloxDNSQClass":"IN","InfobloxDNSQType":"AAAA","InfobloxDNSQFlags":"+EV","InfobloxDNSRCode":"NOERROR","InfobloxAnCount":"0","InfobloxNsCount":"1","InfobloxArCount":"1"} 0 1 IN #NAME? AAAA NOERROR _default 1 N/A
55 846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 10/26/2021, 2:27:48.928 PM 2/11/2021, 11:21:30.175 PM Infoblox Data Connector RPZ-QNAME-NXDOMAIN DNS Response 8 1 NXDOMAIN NXDOMAIN infoblox-virtual-machine 192.168.1.90 "RPZ QNAME NXDOMAIN rewrite 796f7572205765622050726f787920697320657866696c74726174.840.ymil00.hex.acaddff5e4.leeandco.net. [A] via LIST_541993.796f7572205765622050726f787920697320657866696c74726174.840.ymil00.hex.acaddff5e4.leeandco.net." "client.wns.windows.com. 2785 IN CNAME wns.notify.trafficmanager.net. wns.notify.trafficmanager.net. 33 IN A 40.83.240.146 . 32768 4096 OPT " TCP 50593 45226 208.50.179.13 192.168.1.90 2.1.3 RPZ EVENT QNAME NXDOMAIN DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_541993.796f7572205765622050726f787920697320657866696c74726174.840.ymil00.hex.acaddff5e4.leeandco.net.;InfobloxRPZ=LIST_541993;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=90 InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=2;InfobloxNsCount=0;InfobloxArCount=1;InfobloxB1Region=us-west-1;InfobloxB1ConnectionType=dfp;InfobloxB1OPHName=Sentinel-Demo-DNS+DFP+DHCP;InfobloxB1OPHIPAddress=192.168.1.201;InfobloxB1Network=Sentinel-Demo-DNS+DFP+DHCP (DFP);InfobloxB1SrcOSVersion=;InfobloxB1DHCPFingerprint=;InfobloxB1DNSTags=APP_Microsoft OneDrive,APP_Microsoft Sharepoint,APP_Uncategorized,CAT_Business,CAT_Internet Services,CAT_Software/Hardware DNS 796f7572205765622050726f787920697320657866696c74726174.840.ymil00.hex.acaddff5e4.leeandco.net. client.wns.windows.com. 00:50:56:0b:0f:80 CommonSecurityLog {"InfobloxDNSQClass":"IN","InfobloxDNSQType":"A","InfobloxDNSQFlags":"+EV","InfobloxDNSRCode":"NOERROR","InfobloxAnCount":"2","InfobloxNsCount":"0","InfobloxArCount":"1","InfobloxB1Region":"us-west-1","InfobloxB1ConnectionType":"dfp","InfobloxB1OPHName":"Sentinel-Demo-DNS+DFP+DHCP","InfobloxB1OPHIPAddress":"192.168.1.201","InfobloxB1Network":"Sentinel-Demo-DNS+DFP+DHCP (DFP)","InfobloxB1DNSTags":"APP_Microsoft OneDrive,APP_Microsoft Sharepoint,APP_Uncategorized,CAT_Business,CAT_Internet Services,CAT_Software/Hardware"} 2 1 dfp APP_Microsoft OneDrive,APP_Microsoft Sharepoint,APP_Uncategorized,CAT_Business,CAT_Internet Services,CAT_Software/Hardware Sentinel-Demo-DNS+DFP+DHCP (DFP) 192.168.1.201 Sentinel-Demo-DNS+DFP+DHCP us-west-1 IN #NAME? A NOERROR 0 N/A
56 846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 10/26/2021, 2:27:48.928 PM 2/11/2021, 11:41:24.046 PM Infoblox Data Connector RPZ-QNAME-NXDOMAIN DNS Response 8 1 NXDOMAIN NXDOMAIN infoblox-virtual-machine 192.168.1.90 "RPZ QNAME NXDOMAIN rewrite 796f7572205765622050726f787920697320657866696c74726174.743.zcmt50.hex.acaddff5e4.leeandco.net. [A] via LIST_541993.796f7572205765622050726f787920697320657866696c74726174.743.zcmt50.hex.acaddff5e4.leeandco.net." "wns.notify.trafficmanager.net. 45 IN A 40.83.247.108 . 32768 4096 OPT " TCP 56540 45226 208.50.179.13 192.168.1.90 2.1.3 RPZ EVENT QNAME NXDOMAIN DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_541993.796f7572205765622050726f787920697320657866696c74726174.743.zcmt50.hex.acaddff5e4.leeandco.net.;InfobloxRPZ=LIST_541993;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=90 InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1;InfobloxB1Region=us-west-1;InfobloxB1ConnectionType=dfp;InfobloxB1OPHName=Sentinel-Demo-DNS+DFP+DHCP;InfobloxB1OPHIPAddress=192.168.1.201;InfobloxB1Network=Sentinel-Demo-DNS+DFP+DHCP (DFP);InfobloxB1SrcOSVersion=;InfobloxB1DHCPFingerprint=;InfobloxB1DNSTags=APP_Uncategorized,CAT_Internet Services DNS 796f7572205765622050726f787920697320657866696c74726174.743.zcmt50.hex.acaddff5e4.leeandco.net. wns.notify.trafficmanager.net. 00:50:56:0b:0f:80 CommonSecurityLog {"InfobloxDNSQClass":"IN","InfobloxDNSQType":"A","InfobloxDNSQFlags":"+EV","InfobloxDNSRCode":"NOERROR","InfobloxAnCount":"1","InfobloxNsCount":"0","InfobloxArCount":"1","InfobloxB1Region":"us-west-1","InfobloxB1ConnectionType":"dfp","InfobloxB1OPHName":"Sentinel-Demo-DNS+DFP+DHCP","InfobloxB1OPHIPAddress":"192.168.1.201","InfobloxB1Network":"Sentinel-Demo-DNS+DFP+DHCP (DFP)","InfobloxB1DNSTags":"APP_Uncategorized,CAT_Internet Services"} 1 1 dfp APP_Uncategorized,CAT_Internet Services Sentinel-Demo-DNS+DFP+DHCP (DFP) 192.168.1.201 Sentinel-Demo-DNS+DFP+DHCP us-west-1 IN #NAME? A NOERROR 0 N/A
57 846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 10/26/2021, 2:08:57.119 PM 2/11/2021, 11:21:22.607 PM Infoblox Data Connector RPZ-QNAME-NXDOMAIN DNS Response 8 1 NXDOMAIN NXDOMAIN infoblox-virtual-machine 192.168.1.90 "RPZ QNAME NXDOMAIN rewrite 796f7572205765622050726f787920697320657866696c74726174.743.ymil00.hex.acaddff5e4.leeandco.net. [A] via LIST_541993.796f7572205765622050726f787920697320657866696c74726174.743.ymil00.hex.acaddff5e4.leeandco.net." "go.microsoft.com. 2165 IN CNAME go.microsoft.com.edgekey.net. go.microsoft.com.edgekey.net. 278 IN CNAME e11290.dspg.akamaiedge.net. e11290.dspg.akamaiedge.net. 11 IN A 104.86.5.150 . 32768 4096 OPT " TCP 50593 40468 208.50.179.13 192.168.1.90 2.1.3 RPZ EVENT QNAME NXDOMAIN DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_541993.796f7572205765622050726f787920697320657866696c74726174.743.ymil00.hex.acaddff5e4.leeandco.net.;InfobloxRPZ=LIST_541993;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=90 InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=3;InfobloxNsCount=0;InfobloxArCount=1;InfobloxB1Region=us-west-1;InfobloxB1ConnectionType=dfp;InfobloxB1OPHName=Sentinel-Demo-DNS+DFP+DHCP;InfobloxB1OPHIPAddress=192.168.1.201;InfobloxB1Network=Sentinel-Demo-DNS+DFP+DHCP (DFP);InfobloxB1SrcOSVersion=;InfobloxB1DHCPFingerprint=;InfobloxB1DNSTags=APP_Microsoft 365,APP_Uncategorized,CAT_Business,CAT_Content Server,CAT_Software/Hardware DNS 796f7572205765622050726f787920697320657866696c74726174.743.ymil00.hex.acaddff5e4.leeandco.net. go.microsoft.com. 00:50:56:0b:0f:80 CommonSecurityLog {"InfobloxDNSQClass":"IN","InfobloxDNSQType":"A","InfobloxDNSQFlags":"+EV","InfobloxDNSRCode":"NOERROR","InfobloxAnCount":"3","InfobloxNsCount":"0","InfobloxArCount":"1","InfobloxB1Region":"us-west-1","InfobloxB1ConnectionType":"dfp","InfobloxB1OPHName":"Sentinel-Demo-DNS+DFP+DHCP","InfobloxB1OPHIPAddress":"192.168.1.201","InfobloxB1Network":"Sentinel-Demo-DNS+DFP+DHCP (DFP)","InfobloxB1DNSTags":"APP_Microsoft 365,APP_Uncategorized,CAT_Business,CAT_Content Server,CAT_Software/Hardware"} 3 1 dfp APP_Microsoft 365,APP_Uncategorized,CAT_Business,CAT_Content Server,CAT_Software/Hardware Sentinel-Demo-DNS+DFP+DHCP (DFP) 192.168.1.201 Sentinel-Demo-DNS+DFP+DHCP us-west-1 IN #NAME? A NOERROR 0 N/A
58 846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 10/26/2021, 2:08:57.119 PM 2/11/2021, 11:41:27.050 PM Infoblox Data Connector RPZ-QNAME-NXDOMAIN DNS Response 8 1 NXDOMAIN NXDOMAIN infoblox-virtual-machine 192.168.1.90 "RPZ QNAME NXDOMAIN rewrite 796f7572205765622050726f787920697320657866696c74726174.646.zcmt50.hex.acaddff5e4.leeandco.net. [A] via LIST_541993.796f7572205765622050726f787920697320657866696c74726174.646.zcmt50.hex.acaddff5e4.leeandco.net." "go.microsoft.com.edgekey.net. 256 IN CNAME e11290.dspg.akamaiedge.net. e11290.dspg.akamaiedge.net. 7 IN A 104.86.5.150 . 32768 4096 OPT " TCP 46369 40468 208.50.179.13 192.168.1.90 2.1.3 RPZ EVENT QNAME NXDOMAIN DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_541993.796f7572205765622050726f787920697320657866696c74726174.646.zcmt50.hex.acaddff5e4.leeandco.net.;InfobloxRPZ=LIST_541993;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=90 InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=2;InfobloxNsCount=0;InfobloxArCount=1;InfobloxB1Region=us-west-1;InfobloxB1ConnectionType=dfp;InfobloxB1OPHName=Sentinel-Demo-DNS+DFP+DHCP;InfobloxB1OPHIPAddress=192.168.1.201;InfobloxB1Network=Sentinel-Demo-DNS+DFP+DHCP (DFP);InfobloxB1SrcOSVersion=;InfobloxB1DHCPFingerprint=;InfobloxB1DNSTags=APP_Uncategorized,CAT_Content Server DNS 796f7572205765622050726f787920697320657866696c74726174.646.zcmt50.hex.acaddff5e4.leeandco.net. go.microsoft.com.edgekey.net. 00:50:56:0b:0f:80 CommonSecurityLog {"InfobloxDNSQClass":"IN","InfobloxDNSQType":"A","InfobloxDNSQFlags":"+EV","InfobloxDNSRCode":"NOERROR","InfobloxAnCount":"2","InfobloxNsCount":"0","InfobloxArCount":"1","InfobloxB1Region":"us-west-1","InfobloxB1ConnectionType":"dfp","InfobloxB1OPHName":"Sentinel-Demo-DNS+DFP+DHCP","InfobloxB1OPHIPAddress":"192.168.1.201","InfobloxB1Network":"Sentinel-Demo-DNS+DFP+DHCP (DFP)","InfobloxB1DNSTags":"APP_Uncategorized,CAT_Content Server"} 2 1 dfp APP_Uncategorized,CAT_Content Server Sentinel-Demo-DNS+DFP+DHCP (DFP) 192.168.1.201 Sentinel-Demo-DNS+DFP+DHCP us-west-1 IN #NAME? A NOERROR 0 N/A
59 846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 10/26/2021, 2:08:57.119 PM 2/11/2021, 11:21:07.637 PM Infoblox Data Connector RPZ-QNAME-NXDOMAIN DNS Response 8 1 NXDOMAIN NXDOMAIN infoblox-virtual-machine 192.168.1.90 "RPZ QNAME NXDOMAIN rewrite 796f7572205765622050726f787920697320657866696c74726174.646.ymil00.hex.acaddff5e4.leeandco.net. [A] via LIST_541993.796f7572205765622050726f787920697320657866696c74726174.646.ymil00.hex.acaddff5e4.leeandco.net." "e11290.dspg.akamaiedge.net. 8 IN A 104.86.5.150 . 32768 4096 OPT " TCP 50593 40468 208.50.179.13 192.168.1.90 2.1.3 RPZ EVENT QNAME NXDOMAIN DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_541993.796f7572205765622050726f787920697320657866696c74726174.646.ymil00.hex.acaddff5e4.leeandco.net.;InfobloxRPZ=LIST_541993;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=90 InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1;InfobloxB1Region=us-west-1;InfobloxB1ConnectionType=dfp;InfobloxB1OPHName=Sentinel-Demo-DNS+DFP+DHCP;InfobloxB1OPHIPAddress=192.168.1.201;InfobloxB1Network=Sentinel-Demo-DNS+DFP+DHCP (DFP);InfobloxB1SrcOSVersion=;InfobloxB1DHCPFingerprint=;InfobloxB1DNSTags=APP_Uncategorized,CAT_Content Server DNS 796f7572205765622050726f787920697320657866696c74726174.646.ymil00.hex.acaddff5e4.leeandco.net. e11290.dspg.akamaiedge.net. 00:50:56:0b:0f:80 CommonSecurityLog {"InfobloxDNSQClass":"IN","InfobloxDNSQType":"A","InfobloxDNSQFlags":"+EV","InfobloxDNSRCode":"NOERROR","InfobloxAnCount":"1","InfobloxNsCount":"0","InfobloxArCount":"1","InfobloxB1Region":"us-west-1","InfobloxB1ConnectionType":"dfp","InfobloxB1OPHName":"Sentinel-Demo-DNS+DFP+DHCP","InfobloxB1OPHIPAddress":"192.168.1.201","InfobloxB1Network":"Sentinel-Demo-DNS+DFP+DHCP (DFP)","InfobloxB1DNSTags":"APP_Uncategorized,CAT_Content Server"} 1 1 dfp APP_Uncategorized,CAT_Content Server Sentinel-Demo-DNS+DFP+DHCP (DFP) 192.168.1.201 Sentinel-Demo-DNS+DFP+DHCP us-west-1 IN #NAME? A NOERROR 0 N/A
60 846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 10/26/2021, 2:08:57.119 PM 2/11/2021, 11:41:09.308 PM Infoblox Data Connector RPZ-QNAME-NXDOMAIN DNS Response 8 1 NXDOMAIN NXDOMAIN infoblox-virtual-machine 192.168.1.90 "RPZ QNAME NXDOMAIN rewrite 796f7572205765622050726f787920697320657866696c74726174.549.zcmt50.hex.acaddff5e4.leeandco.net. [A] via LIST_541993.796f7572205765622050726f787920697320657866696c74726174.549.zcmt50.hex.acaddff5e4.leeandco.net." "settings-win.data.microsoft.com. 2359 IN CNAME settingsfd-geo.trafficmanager.net. settingsfd-geo.trafficmanager.net. 27 IN A 52.185.211.133 . 32768 4096 OPT " TCP 58534 40468 208.50.179.13 192.168.1.90 2.1.3 RPZ EVENT QNAME NXDOMAIN DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_541993.796f7572205765622050726f787920697320657866696c74726174.549.zcmt50.hex.acaddff5e4.leeandco.net.;InfobloxRPZ=LIST_541993;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=90 InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=2;InfobloxNsCount=0;InfobloxArCount=1;InfobloxB1Region=us-west-1;InfobloxB1ConnectionType=dfp;InfobloxB1OPHName=Sentinel-Demo-DNS+DFP+DHCP;InfobloxB1OPHIPAddress=192.168.1.201;InfobloxB1Network=Sentinel-Demo-DNS+DFP+DHCP (DFP);InfobloxB1SrcOSVersion=;InfobloxB1DHCPFingerprint=;InfobloxB1DNSTags=APP_Uncategorized,CAT_Business,CAT_Internet Services,CAT_Software/Hardware DNS 796f7572205765622050726f787920697320657866696c74726174.549.zcmt50.hex.acaddff5e4.leeandco.net. settings-win.data.microsoft.com. 00:50:56:0b:0f:80 CommonSecurityLog {"InfobloxDNSQClass":"IN","InfobloxDNSQType":"A","InfobloxDNSQFlags":"+EV","InfobloxDNSRCode":"NOERROR","InfobloxAnCount":"2","InfobloxNsCount":"0","InfobloxArCount":"1","InfobloxB1Region":"us-west-1","InfobloxB1ConnectionType":"dfp","InfobloxB1OPHName":"Sentinel-Demo-DNS+DFP+DHCP","InfobloxB1OPHIPAddress":"192.168.1.201","InfobloxB1Network":"Sentinel-Demo-DNS+DFP+DHCP (DFP)","InfobloxB1DNSTags":"APP_Uncategorized,CAT_Business,CAT_Internet Services,CAT_Software/Hardware"} 2 1 dfp APP_Uncategorized,CAT_Business,CAT_Internet Services,CAT_Software/Hardware Sentinel-Demo-DNS+DFP+DHCP (DFP) 192.168.1.201 Sentinel-Demo-DNS+DFP+DHCP us-west-1 IN #NAME? A NOERROR 0 N/A
61 846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 10/26/2021, 2:09:00.415 PM 2/11/2021, 11:21:00.469 PM Infoblox Data Connector RPZ-QNAME-NXDOMAIN DNS Response 8 1 NXDOMAIN NXDOMAIN infoblox-virtual-machine 192.168.1.201 "RPZ QNAME NXDOMAIN rewrite 796f7572205765622050726f787920697320657866696c74726174.549.ymil00.hex.acaddff5e4.leeandco.net. [A] via LIST_541993.796f7572205765622050726f787920697320657866696c74726174.549.ymil00.hex.acaddff5e4.leeandco.net." "go.microsoft.com. 11 IN CNAME go.microsoft.com.edgekey.net. go.microsoft.com.edgekey.net. 7 IN CNAME e11290.dspg.akamaiedge.net. e11290.dspg.akamaiedge.net. 8 IN A 104.86.5.150 . 151925 IN NS b.root-servers.net. . 151925 IN NS e.root-servers.net. . 151925 IN NS l.root-servers.net. . 151925 IN NS i.root-servers.net. . 151925 IN NS k.root-servers.net. . 151925 IN NS d.root-servers.net. . 151925 IN NS c.root-servers.net. . 151925 IN NS a.root-servers.net. . 151925 IN NS f.root-servers.net. . 151925 IN NS m.root-servers.net. . 151925 IN NS h.root-servers.net. . 151925 IN NS j.root-servers.net. . 151925 IN NS g.root-servers.net. a.root-servers.net. 151925 IN A 198.41.0.4 b.root-servers.net. 151925 IN A 199.9.14.201 c.root-servers.net. 151925 IN A 192.33.4.12 d.root-servers.net. 151925 IN A 199.7.91.13 e.root-servers.net. 151925 IN A 192.203.230.10 f.root-servers.net. 151925 IN A 192.5.5.241 g.root-servers.net. 151925 IN A 192.112.36.4 h.root-servers.net. 151925 IN A 198.97.190.53 i.root-servers.net. 151925 IN A 192.36.148.17" UDP 50593 58238 208.50.179.13 192.168.1.90 2.1.3 RPZ EVENT QNAME NXDOMAIN DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_541993.796f7572205765622050726f787920697320657866696c74726174.549.ymil00.hex.acaddff5e4.leeandco.net.;InfobloxRPZ=LIST_541993;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=90 InfobloxDNSView=_default;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=3;InfobloxNsCount=13;InfobloxArCount=9 DNS 796f7572205765622050726f787920697320657866696c74726174.549.ymil00.hex.acaddff5e4.leeandco.net. go.microsoft.com. CommonSecurityLog {"InfobloxDNSView":"_default","InfobloxDNSQClass":"IN","InfobloxDNSQType":"A","InfobloxDNSQFlags":"+EV","InfobloxDNSRCode":"NOERROR","InfobloxAnCount":"3","InfobloxNsCount":"13","InfobloxArCount":"9"} 3 9 IN #NAME? A NOERROR _default 13 N/A
62 846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 10/26/2021, 2:09:00.415 PM 2/11/2021, 11:20:44.649 PM Infoblox Data Connector RPZ-QNAME-NXDOMAIN DNS Response 8 1 NXDOMAIN NXDOMAIN infoblox-virtual-machine 192.168.1.201 "RPZ QNAME NXDOMAIN rewrite 796f7572205765622050726f787920697320657866696c74726174.452.ymil00.hex.acaddff5e4.leeandco.net. [A] via LIST_541993.796f7572205765622050726f787920697320657866696c74726174.452.ymil00.hex.acaddff5e4.leeandco.net." "ubuntu.com. 1113 IN SOA ns1.canonical.com. hostmaster.canonical.com. 2018054618 10800 3600 604800 3600 . 0 1232 OPT " UDP 50593 42027 208.50.179.13 192.168.1.106 2.1.3 RPZ EVENT QNAME NXDOMAIN DNS Response IN AAAA NOERROR InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_541993.796f7572205765622050726f787920697320657866696c74726174.452.ymil00.hex.acaddff5e4.leeandco.net.;InfobloxRPZ=LIST_541993;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=90 InfobloxDNSView=_default;InfobloxDNSQClass=IN;InfobloxDNSQType=AAAA;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=0;InfobloxNsCount=1;InfobloxArCount=1 DNS 796f7572205765622050726f787920697320657866696c74726174.452.ymil00.hex.acaddff5e4.leeandco.net. connectivity-check.ubuntu.com. CommonSecurityLog {"InfobloxDNSView":"_default","InfobloxDNSQClass":"IN","InfobloxDNSQType":"AAAA","InfobloxDNSQFlags":"+EV","InfobloxDNSRCode":"NOERROR","InfobloxAnCount":"0","InfobloxNsCount":"1","InfobloxArCount":"1"} 0 1 IN #NAME? AAAA NOERROR _default 1 N/A
63 846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 10/26/2021, 2:09:00.415 PM 2/11/2021, 11:20:36.902 PM Infoblox Data Connector RPZ-QNAME-NXDOMAIN DNS Response 8 1 NXDOMAIN NXDOMAIN infoblox-virtual-machine 192.168.1.201 "RPZ QNAME NXDOMAIN rewrite 796f7572205765622050726f787920697320657866696c74726174.355.ymil00.hex.acaddff5e4.leeandco.net. [A] via LIST_541993.796f7572205765622050726f787920697320657866696c74726174.355.ymil00.hex.acaddff5e4.leeandco.net." "settings-win.data.microsoft.com. 27 IN CNAME settingsfd-geo.trafficmanager.net. settingsfd-geo.trafficmanager.net. 14 IN A 52.137.106.217 . 151925 IN NS h.root-servers.net. . 151925 IN NS g.root-servers.net. . 151925 IN NS j.root-servers.net. . 151925 IN NS m.root-servers.net. . 151925 IN NS c.root-servers.net. . 151925 IN NS k.root-servers.net. . 151925 IN NS b.root-servers.net. . 151925 IN NS d.root-servers.net. . 151925 IN NS a.root-servers.net. . 151925 IN NS f.root-servers.net. . 151925 IN NS i.root-servers.net. . 151925 IN NS e.root-servers.net. . 151925 IN NS l.root-servers.net. a.root-servers.net. 151925 IN A 198.41.0.4 b.root-servers.net. 151925 IN A 199.9.14.201 c.root-servers.net. 151925 IN A 192.33.4.12 d.root-servers.net. 151925 IN A 199.7.91.13 e.root-servers.net. 151925 IN A 192.203.230.10 f.root-servers.net. 151925 IN A 192.5.5.241 g.root-servers.net. 151925 IN A 192.112.36.4 h.root-servers.net. 151925 IN A 198.97.190.53 i.root-servers.net. 151925 IN A 192.36.148.17 j.root-servers.net. 151925 IN A 192.58.128.30 k.root-servers.net. 151925 IN A 193.0.14.129" UDP 50593 63617 208.50.179.13 192.168.1.90 2.1.3 RPZ EVENT QNAME NXDOMAIN DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_541993.796f7572205765622050726f787920697320657866696c74726174.355.ymil00.hex.acaddff5e4.leeandco.net.;InfobloxRPZ=LIST_541993;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=90 InfobloxDNSView=_default;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=2;InfobloxNsCount=13;InfobloxArCount=11 DNS 796f7572205765622050726f787920697320657866696c74726174.355.ymil00.hex.acaddff5e4.leeandco.net. settings-win.data.microsoft.com. CommonSecurityLog {"InfobloxDNSView":"_default","InfobloxDNSQClass":"IN","InfobloxDNSQType":"A","InfobloxDNSQFlags":"+EV","InfobloxDNSRCode":"NOERROR","InfobloxAnCount":"2","InfobloxNsCount":"13","InfobloxArCount":"11"} 2 11 IN #NAME? A NOERROR _default 13 N/A
64 846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 10/26/2021, 2:09:00.415 PM 2/11/2021, 11:24:49.110 PM Infoblox Data Connector RPZ-QNAME-NXDOMAIN DNS Response 8 1 NXDOMAIN NXDOMAIN infoblox-virtual-machine 192.168.1.201 "RPZ QNAME NXDOMAIN rewrite 796f7572205765622050726f787920697320657866696c74726174.2683.ymil00.hex.acaddff5e4.leeandco.net. [A] via LIST_541993.796f7572205765622050726f787920697320657866696c74726174.2683.ymil00.hex.acaddff5e4.leeandco.net." "ubuntu.com. 1113 IN SOA ns1.canonical.com. hostmaster.canonical.com. 2018054618 10800 3600 604800 3600 . 0 1232 OPT " UDP 53819 60509 208.50.179.13 192.168.1.106 2.1.3 RPZ EVENT QNAME NXDOMAIN DNS Response IN AAAA NOERROR InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_541993.796f7572205765622050726f787920697320657866696c74726174.2683.ymil00.hex.acaddff5e4.leeandco.net.;InfobloxRPZ=LIST_541993;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=90 InfobloxDNSView=_default;InfobloxDNSQClass=IN;InfobloxDNSQType=AAAA;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=0;InfobloxNsCount=1;InfobloxArCount=1 DNS 796f7572205765622050726f787920697320657866696c74726174.2683.ymil00.hex.acaddff5e4.leeandco.net. connectivity-check.ubuntu.com. CommonSecurityLog {"InfobloxDNSView":"_default","InfobloxDNSQClass":"IN","InfobloxDNSQType":"AAAA","InfobloxDNSQFlags":"+EV","InfobloxDNSRCode":"NOERROR","InfobloxAnCount":"0","InfobloxNsCount":"1","InfobloxArCount":"1"} 0 1 IN #NAME? AAAA NOERROR _default 1 N/A
65 846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 10/26/2021, 2:09:30.220 PM 2/11/2021, 11:24:40.102 PM Infoblox Data Connector RPZ-QNAME-NXDOMAIN DNS Response 8 1 NXDOMAIN NXDOMAIN infoblox-virtual-machine 192.168.1.201 "RPZ QNAME NXDOMAIN rewrite 796f7572205765622050726f787920697320657866696c74726174.2586.ymil00.hex.acaddff5e4.leeandco.net. [A] via LIST_541993.796f7572205765622050726f787920697320657866696c74726174.2586.ymil00.hex.acaddff5e4.leeandco.net." "csp.infoblox.com. 12 IN CNAME wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 33 IN A 18.235.149.1 wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 33 IN A 18.233.189.178 wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 33 IN A 18.209.243.220 . 151889 IN NS b.root-servers.net. . 151889 IN NS j.root-servers.net. . 151889 IN NS e.root-servers.net. . 151889 IN NS l.root-servers.net. . 151889 IN NS a.root-servers.net. . 151889 IN NS f.root-servers.net. . 151889 IN NS d.root-servers.net. . 151889 IN NS c.root-servers.net. . 151889 IN NS g.root-servers.net. . 151889 IN NS h.root-servers.net. . 151889 IN NS m.root-servers.net. . 151889 IN NS i.root-servers.net. . 151889 IN NS k.root-servers.net. a.root-servers.net. 151889 IN A 198.41.0.4 b.root-servers.net. 151889 IN A 199.9.14.201 c.root-servers.net. 151889 IN A 192.33.4.12 d.root-servers.net. 151889 IN A 199.7.91.13 e.root-servers.net. 151889 IN A 192.203.230.10 f.root-servers.net. 151889 IN A 192.5.5.241 g.root-servers.net. 151889 IN A 192.112.36.4 h.root-servers.net. 151889 IN A 198.97.190.53" UDP 53819 63618 208.50.179.13 192.168.1.90 2.1.3 RPZ EVENT QNAME NXDOMAIN DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_541993.796f7572205765622050726f787920697320657866696c74726174.2586.ymil00.hex.acaddff5e4.leeandco.net.;InfobloxRPZ=LIST_541993;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=90 InfobloxDNSView=_default;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=4;InfobloxNsCount=13;InfobloxArCount=8 DNS 796f7572205765622050726f787920697320657866696c74726174.2586.ymil00.hex.acaddff5e4.leeandco.net. csp.infoblox.com. CommonSecurityLog {"InfobloxDNSView":"_default","InfobloxDNSQClass":"IN","InfobloxDNSQType":"A","InfobloxDNSQFlags":"+EV","InfobloxDNSRCode":"NOERROR","InfobloxAnCount":"4","InfobloxNsCount":"13","InfobloxArCount":"8"} 4 8 IN #NAME? A NOERROR _default 13 N/A
66 846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 10/26/2021, 2:09:30.221 PM 2/11/2021, 11:24:30.802 PM Infoblox Data Connector RPZ-QNAME-NXDOMAIN DNS Response 8 1 NXDOMAIN NXDOMAIN infoblox-virtual-machine 192.168.1.201 "RPZ QNAME NXDOMAIN rewrite 796f7572205765622050726f787920697320657866696c74726174.2489.ymil00.hex.acaddff5e4.leeandco.net. [A] via LIST_541993.796f7572205765622050726f787920697320657866696c74726174.2489.ymil00.hex.acaddff5e4.leeandco.net." "probe.infoblox.com. 0 IN TXT \"ABYZX9GLUYQUVWDQZIECEGAFF3NC89ZE\"" UDP 48394 63620 208.50.179.13 192.168.1.90 2.1.3 RPZ EVENT QNAME NXDOMAIN DNS Response IN TXT NOERROR InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_541993.796f7572205765622050726f787920697320657866696c74726174.2489.ymil00.hex.acaddff5e4.leeandco.net.;InfobloxRPZ=LIST_541993;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=90 InfobloxDNSView=_default;InfobloxDNSQClass=IN;InfobloxDNSQType=TXT;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=0 DNS 796f7572205765622050726f787920697320657866696c74726174.2489.ymil00.hex.acaddff5e4.leeandco.net. probe.infoblox.com. CommonSecurityLog {"InfobloxDNSView":"_default","InfobloxDNSQClass":"IN","InfobloxDNSQType":"TXT","InfobloxDNSQFlags":"+EV","InfobloxDNSRCode":"NOERROR","InfobloxAnCount":"1","InfobloxNsCount":"0","InfobloxArCount":"0"} 1 0 IN #NAME? TXT NOERROR _default 0 N/A
67 846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 10/26/2021, 2:09:30.388 PM 2/11/2021, 11:24:16.825 PM Infoblox Data Connector RPZ-QNAME-NXDOMAIN DNS Response 8 1 NXDOMAIN NXDOMAIN infoblox-virtual-machine 192.168.1.201 192.168.1.90 "RPZ QNAME NXDOMAIN rewrite 796f7572205765622050726f787920697320657866696c74726174.2392.ymil00.hex.acaddff5e4.leeandco.net. [A] via LIST_541993.796f7572205765622050726f787920697320657866696c74726174.2392.ymil00.hex.acaddff5e4.leeandco.net." "probe.infoblox.com. 0 IN TXT \"ABYZX9GLUYQUVWDQZIECEGAFF3NC89ZE\"" UDP 31171 63620 208.50.179.13 192.168.1.90 2.1.3 RPZ EVENT QNAME NXDOMAIN DNS Response IN TXT NOERROR InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_541993.796f7572205765622050726f787920697320657866696c74726174.2392.ymil00.hex.acaddff5e4.leeandco.net.;InfobloxRPZ=LIST_541993;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=90 InfobloxDNSView=_default;InfobloxDNSQClass=IN;InfobloxDNSQType=TXT;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=0;InfobloxB1Region=;InfobloxB1ConnectionType=dfp;InfobloxB1OPHName=Sentinel-Demo-DNS+DFP+DHCP;InfobloxB1OPHIPAddress=192.168.1.201;InfobloxB1Network=Sentinel-Demo-DNS+DFP+DHCP (DFP);InfobloxB1SrcOSVersion=;InfobloxB1DHCPFingerprint=;InfobloxB1DNSTags= DNS 796f7572205765622050726f787920697320657866696c74726174.2392.ymil00.hex.acaddff5e4.leeandco.net. probe.infoblox.com. 00:50:56:0b:0f:80 CommonSecurityLog {"InfobloxDNSView":"_default","InfobloxDNSQClass":"IN","InfobloxDNSQType":"TXT","InfobloxDNSQFlags":"+EV","InfobloxDNSRCode":"NOERROR","InfobloxAnCount":"1","InfobloxNsCount":"0","InfobloxArCount":"0","InfobloxB1ConnectionType":"dfp","InfobloxB1OPHName":"Sentinel-Demo-DNS+DFP+DHCP","InfobloxB1OPHIPAddress":"192.168.1.201","InfobloxB1Network":"Sentinel-Demo-DNS+DFP+DHCP (DFP)"} 1 0 dfp Sentinel-Demo-DNS+DFP+DHCP (DFP) 192.168.1.201 Sentinel-Demo-DNS+DFP+DHCP IN #NAME? TXT NOERROR _default 0 N/A
68 846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 10/26/2021, 2:14:05.910 PM 2/11/2021, 11:24:08.757 PM Infoblox Data Connector RPZ-QNAME-NXDOMAIN DNS Response 8 1 NXDOMAIN NXDOMAIN infoblox-virtual-machine 192.168.1.106 "RPZ QNAME NXDOMAIN rewrite 796f7572205765622050726f787920697320657866696c74726174.2295.ymil00.hex.acaddff5e4.leeandco.net. [A] via LIST_541993.796f7572205765622050726f787920697320657866696c74726174.2295.ymil00.hex.acaddff5e4.leeandco.net." "ubuntu.com. 834 IN SOA ns1.canonical.com. hostmaster.canonical.com. 2018054618 10800 3600 604800 3600 . 32768 4096 OPT " TCP 56787 47767 208.50.179.13 192.168.1.106 2.1.3 RPZ EVENT QNAME NXDOMAIN DNS Response IN AAAA NOERROR InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_541993.796f7572205765622050726f787920697320657866696c74726174.2295.ymil00.hex.acaddff5e4.leeandco.net.;InfobloxRPZ=LIST_541993;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=90 InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=AAAA;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=0;InfobloxNsCount=1;InfobloxArCount=1;InfobloxB1Region=us-west-1;InfobloxB1ConnectionType=dfp;InfobloxB1OPHName=Sentinel-Demo-DNS+DFP+DHCP;InfobloxB1OPHIPAddress=192.168.1.201;InfobloxB1Network=Sentinel-Demo-DNS+DFP+DHCP (DFP);InfobloxB1SrcOSVersion=;InfobloxB1DHCPFingerprint=;InfobloxB1DNSTags=APP_Uncategorized,CAT_Software/Hardware DNS 796f7572205765622050726f787920697320657866696c74726174.2295.ymil00.hex.acaddff5e4.leeandco.net. connectivity-check.ubuntu.com. 00:50:56:0b:0f:15 CommonSecurityLog {"InfobloxDNSQClass":"IN","InfobloxDNSQType":"AAAA","InfobloxDNSQFlags":"+EV","InfobloxDNSRCode":"NOERROR","InfobloxAnCount":"0","InfobloxNsCount":"1","InfobloxArCount":"1","InfobloxB1Region":"us-west-1","InfobloxB1ConnectionType":"dfp","InfobloxB1OPHName":"Sentinel-Demo-DNS+DFP+DHCP","InfobloxB1OPHIPAddress":"192.168.1.201","InfobloxB1Network":"Sentinel-Demo-DNS+DFP+DHCP (DFP)","InfobloxB1DNSTags":"APP_Uncategorized,CAT_Software/Hardware"} 0 1 dfp APP_Uncategorized,CAT_Software/Hardware Sentinel-Demo-DNS+DFP+DHCP (DFP) 192.168.1.201 Sentinel-Demo-DNS+DFP+DHCP us-west-1 IN #NAME? AAAA NOERROR 1 N/A
69 846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 10/26/2021, 2:28:30.237 PM 2/11/2021, 11:24:00.782 PM Infoblox Data Connector RPZ-QNAME-NXDOMAIN DNS Response 8 1 NXDOMAIN NXDOMAIN infoblox-virtual-machine 192.168.1.201 "RPZ QNAME NXDOMAIN rewrite 796f7572205765622050726f787920697320657866696c74726174.2198.ymil00.hex.acaddff5e4.leeandco.net. [A] via LIST_541993.796f7572205765622050726f787920697320657866696c74726174.2198.ymil00.hex.acaddff5e4.leeandco.net." "www.amazon.com. 0 IN AAAA 2600:1f18:1043:dc00:8083:68e:ef0f:46de . 0 1232 OPT " UDP 56787 42801 208.50.179.13 192.168.1.106 2.1.3 RPZ EVENT QNAME NXDOMAIN DNS Response IN AAAA NOERROR InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_541993.796f7572205765622050726f787920697320657866696c74726174.2198.ymil00.hex.acaddff5e4.leeandco.net.;InfobloxRPZ=LIST_541993;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=90 InfobloxDNSView=_default;InfobloxDNSQClass=IN;InfobloxDNSQType=AAAA;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1 DNS 796f7572205765622050726f787920697320657866696c74726174.2198.ymil00.hex.acaddff5e4.leeandco.net. www.amazon.com. CommonSecurityLog {"InfobloxDNSView":"_default","InfobloxDNSQClass":"IN","InfobloxDNSQType":"AAAA","InfobloxDNSQFlags":"+EV","InfobloxDNSRCode":"NOERROR","InfobloxAnCount":"1","InfobloxNsCount":"0","InfobloxArCount":"1"} 1 1 IN #NAME? AAAA NOERROR _default 0 N/A
70 846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 10/26/2021, 2:28:30.237 PM 2/11/2021, 11:23:45.269 PM Infoblox Data Connector RPZ-QNAME-NXDOMAIN DNS Response 8 1 NXDOMAIN NXDOMAIN infoblox-virtual-machine 192.168.1.201 "RPZ QNAME NXDOMAIN rewrite 796f7572205765622050726f787920697320657866696c74726174.2101.ymil00.hex.acaddff5e4.leeandco.net. [A] via LIST_541993.796f7572205765622050726f787920697320657866696c74726174.2101.ymil00.hex.acaddff5e4.leeandco.net." "www.amazon.com. 0 IN A 3.215.231.251 . 0 1232 OPT " UDP 21179 48634 208.50.179.13 192.168.1.106 2.1.3 RPZ EVENT QNAME NXDOMAIN DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_541993.796f7572205765622050726f787920697320657866696c74726174.2101.ymil00.hex.acaddff5e4.leeandco.net.;InfobloxRPZ=LIST_541993;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=90 InfobloxDNSView=_default;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1 DNS 796f7572205765622050726f787920697320657866696c74726174.2101.ymil00.hex.acaddff5e4.leeandco.net. www.amazon.com. CommonSecurityLog {"InfobloxDNSView":"_default","InfobloxDNSQClass":"IN","InfobloxDNSQType":"A","InfobloxDNSQFlags":"+EV","InfobloxDNSRCode":"NOERROR","InfobloxAnCount":"1","InfobloxNsCount":"0","InfobloxArCount":"1"} 1 1 IN #NAME? A NOERROR _default 0 N/A
71 846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 10/26/2021, 2:38:50.388 PM 2/11/2021, 11:23:38.015 PM Infoblox Data Connector RPZ-QNAME-NXDOMAIN DNS Response 8 1 NXDOMAIN NXDOMAIN infoblox-virtual-machine 192.168.1.90 "RPZ QNAME NXDOMAIN rewrite 796f7572205765622050726f787920697320657866696c74726174.2004.ymil00.hex.acaddff5e4.leeandco.net. [A] via LIST_541993.796f7572205765622050726f787920697320657866696c74726174.2004.ymil00.hex.acaddff5e4.leeandco.net." "wns.notify.trafficmanager.net. 194 IN A 40.83.247.108 . 32768 4096 OPT " TCP 21179 45265 208.50.179.13 192.168.1.90 2.1.3 RPZ EVENT QNAME NXDOMAIN DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_541993.796f7572205765622050726f787920697320657866696c74726174.2004.ymil00.hex.acaddff5e4.leeandco.net.;InfobloxRPZ=LIST_541993;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=90 InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1;InfobloxB1Region=us-west-1;InfobloxB1ConnectionType=dfp;InfobloxB1OPHName=Sentinel-Demo-DNS+DFP+DHCP;InfobloxB1OPHIPAddress=192.168.1.201;InfobloxB1Network=Sentinel-Demo-DNS+DFP+DHCP (DFP);InfobloxB1SrcOSVersion=;InfobloxB1DHCPFingerprint=;InfobloxB1DNSTags=APP_Uncategorized,CAT_Internet Services DNS 796f7572205765622050726f787920697320657866696c74726174.2004.ymil00.hex.acaddff5e4.leeandco.net. wns.notify.trafficmanager.net. 00:50:56:0b:0f:80 CommonSecurityLog {"InfobloxDNSQClass":"IN","InfobloxDNSQType":"A","InfobloxDNSQFlags":"+EV","InfobloxDNSRCode":"NOERROR","InfobloxAnCount":"1","InfobloxNsCount":"0","InfobloxArCount":"1","InfobloxB1Region":"us-west-1","InfobloxB1ConnectionType":"dfp","InfobloxB1OPHName":"Sentinel-Demo-DNS+DFP+DHCP","InfobloxB1OPHIPAddress":"192.168.1.201","InfobloxB1Network":"Sentinel-Demo-DNS+DFP+DHCP (DFP)","InfobloxB1DNSTags":"APP_Uncategorized,CAT_Internet Services"} 1 1 dfp APP_Uncategorized,CAT_Internet Services Sentinel-Demo-DNS+DFP+DHCP (DFP) 192.168.1.201 Sentinel-Demo-DNS+DFP+DHCP us-west-1 IN #NAME? A NOERROR 0 N/A
72 846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 10/26/2021, 2:39:00.326 PM 2/11/2021, 11:23:27.067 PM Infoblox Data Connector RPZ-QNAME-NXDOMAIN DNS Response 8 1 NXDOMAIN NXDOMAIN infoblox-virtual-machine 192.168.1.201 "RPZ QNAME NXDOMAIN rewrite 796f7572205765622050726f787920697320657866696c74726174.1907.ymil00.hex.acaddff5e4.leeandco.net. [A] via LIST_541993.796f7572205765622050726f787920697320657866696c74726174.1907.ymil00.hex.acaddff5e4.leeandco.net." "ubuntu.com. 2285 IN SOA ns1.canonical.com. hostmaster.canonical.com. 2018054618 10800 3600 604800 3600 . 0 1232 OPT " UDP 62785 53671 208.50.179.13 192.168.1.106 2.1.3 RPZ EVENT QNAME NXDOMAIN DNS Response IN AAAA NOERROR InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_541993.796f7572205765622050726f787920697320657866696c74726174.1907.ymil00.hex.acaddff5e4.leeandco.net.;InfobloxRPZ=LIST_541993;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=90 InfobloxDNSView=_default;InfobloxDNSQClass=IN;InfobloxDNSQType=AAAA;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=0;InfobloxNsCount=1;InfobloxArCount=1 DNS 796f7572205765622050726f787920697320657866696c74726174.1907.ymil00.hex.acaddff5e4.leeandco.net. connectivity-check.ubuntu.com. CommonSecurityLog {"InfobloxDNSView":"_default","InfobloxDNSQClass":"IN","InfobloxDNSQType":"AAAA","InfobloxDNSQFlags":"+EV","InfobloxDNSRCode":"NOERROR","InfobloxAnCount":"0","InfobloxNsCount":"1","InfobloxArCount":"1"} 0 1 IN #NAME? AAAA NOERROR _default 1 N/A
73 846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 10/26/2021, 2:28:30.238 PM 2/11/2021, 11:43:36.572 PM Infoblox Data Connector RPZ-QNAME-NXDOMAIN DNS Response 8 1 NXDOMAIN NXDOMAIN infoblox-virtual-machine 192.168.1.201 "RPZ QNAME NXDOMAIN rewrite 796f7572205765622050726f787920697320657866696c74726174.1810.zcmt50.hex.acaddff5e4.leeandco.net. [A] via LIST_541993.796f7572205765622050726f787920697320657866696c74726174.1810.zcmt50.hex.acaddff5e4.leeandco.net." "www.ebay.com. 0 IN AAAA 2600:1f18:1043:dc00:8083:68e:ef0f:46de . 0 1232 OPT " UDP 20242 53682 208.50.179.13 192.168.1.106 2.1.3 RPZ EVENT QNAME NXDOMAIN DNS Response IN AAAA NOERROR InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_541993.796f7572205765622050726f787920697320657866696c74726174.1810.zcmt50.hex.acaddff5e4.leeandco.net.;InfobloxRPZ=LIST_541993;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=90 InfobloxDNSView=_default;InfobloxDNSQClass=IN;InfobloxDNSQType=AAAA;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1 DNS 796f7572205765622050726f787920697320657866696c74726174.1810.zcmt50.hex.acaddff5e4.leeandco.net. www.ebay.com. CommonSecurityLog {"InfobloxDNSView":"_default","InfobloxDNSQClass":"IN","InfobloxDNSQType":"AAAA","InfobloxDNSQFlags":"+EV","InfobloxDNSRCode":"NOERROR","InfobloxAnCount":"1","InfobloxNsCount":"0","InfobloxArCount":"1"} 1 1 IN #NAME? AAAA NOERROR _default 0 N/A
74 846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 10/26/2021, 2:28:30.238 PM 2/11/2021, 11:23:15.116 PM Infoblox Data Connector RPZ-QNAME-NXDOMAIN DNS Response 8 1 NXDOMAIN NXDOMAIN infoblox-virtual-machine 192.168.1.201 "RPZ QNAME NXDOMAIN rewrite 796f7572205765622050726f787920697320657866696c74726174.1810.ymil00.hex.acaddff5e4.leeandco.net. [A] via LIST_541993.796f7572205765622050726f787920697320657866696c74726174.1810.ymil00.hex.acaddff5e4.leeandco.net." "www.ebay.com. 0 IN A 3.215.231.251 . 0 1232 OPT " UDP 62785 35508 208.50.179.13 192.168.1.106 2.1.3 RPZ EVENT QNAME NXDOMAIN DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_541993.796f7572205765622050726f787920697320657866696c74726174.1810.ymil00.hex.acaddff5e4.leeandco.net.;InfobloxRPZ=LIST_541993;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=90 InfobloxDNSView=_default;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1 DNS 796f7572205765622050726f787920697320657866696c74726174.1810.ymil00.hex.acaddff5e4.leeandco.net. www.ebay.com. CommonSecurityLog {"InfobloxDNSView":"_default","InfobloxDNSQClass":"IN","InfobloxDNSQType":"A","InfobloxDNSQFlags":"+EV","InfobloxDNSRCode":"NOERROR","InfobloxAnCount":"1","InfobloxNsCount":"0","InfobloxArCount":"1"} 1 1 IN #NAME? A NOERROR _default 0 N/A
75 846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 10/26/2021, 2:28:38.819 PM 2/11/2021, 11:43:22.339 PM Infoblox Data Connector RPZ-QNAME-NXDOMAIN DNS Response 8 1 NXDOMAIN NXDOMAIN infoblox-virtual-machine 192.168.1.106 "RPZ QNAME NXDOMAIN rewrite 796f7572205765622050726f787920697320657866696c74726174.1713.zcmt50.hex.acaddff5e4.leeandco.net. [A] via LIST_541993.796f7572205765622050726f787920697320657866696c74726174.1713.zcmt50.hex.acaddff5e4.leeandco.net." "services.mozilla.com. 356 IN SOA ns-679.awsdns-20.net. awsdns-hostmaster.amazon.com. 1 7200 900 1209600 86400 . 32768 4096 OPT " TCP 20242 31846 208.50.179.13 192.168.1.106 2.1.3 RPZ EVENT QNAME NXDOMAIN DNS Response IN AAAA NOERROR InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_541993.796f7572205765622050726f787920697320657866696c74726174.1713.zcmt50.hex.acaddff5e4.leeandco.net.;InfobloxRPZ=LIST_541993;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=90 InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=AAAA;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=0;InfobloxNsCount=1;InfobloxArCount=1;InfobloxB1Region=us-west-1;InfobloxB1ConnectionType=dfp;InfobloxB1OPHName=Sentinel-Demo-DNS+DFP+DHCP;InfobloxB1OPHIPAddress=192.168.1.201;InfobloxB1Network=Sentinel-Demo-DNS+DFP+DHCP (DFP);InfobloxB1SrcOSVersion=;InfobloxB1DHCPFingerprint=;InfobloxB1DNSTags=APP_Uncategorized,CAT_Software/Hardware DNS 796f7572205765622050726f787920697320657866696c74726174.1713.zcmt50.hex.acaddff5e4.leeandco.net. contile.services.mozilla.com. 00:50:56:0b:0f:15 CommonSecurityLog {"InfobloxDNSQClass":"IN","InfobloxDNSQType":"AAAA","InfobloxDNSQFlags":"+EV","InfobloxDNSRCode":"NOERROR","InfobloxAnCount":"0","InfobloxNsCount":"1","InfobloxArCount":"1","InfobloxB1Region":"us-west-1","InfobloxB1ConnectionType":"dfp","InfobloxB1OPHName":"Sentinel-Demo-DNS+DFP+DHCP","InfobloxB1OPHIPAddress":"192.168.1.201","InfobloxB1Network":"Sentinel-Demo-DNS+DFP+DHCP (DFP)","InfobloxB1DNSTags":"APP_Uncategorized,CAT_Software/Hardware"} 0 1 dfp APP_Uncategorized,CAT_Software/Hardware Sentinel-Demo-DNS+DFP+DHCP (DFP) 192.168.1.201 Sentinel-Demo-DNS+DFP+DHCP us-west-1 IN #NAME? AAAA NOERROR 1 N/A
76 846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 10/26/2021, 2:39:00.326 PM 2/11/2021, 11:23:02.181 PM Infoblox Data Connector RPZ-QNAME-NXDOMAIN DNS Response 8 1 NXDOMAIN NXDOMAIN infoblox-virtual-machine 192.168.1.201 "RPZ QNAME NXDOMAIN rewrite 796f7572205765622050726f787920697320657866696c74726174.1713.ymil00.hex.acaddff5e4.leeandco.net. [A] via LIST_541993.796f7572205765622050726f787920697320657866696c74726174.1713.ymil00.hex.acaddff5e4.leeandco.net." "ubuntu.com. 2285 IN SOA ns1.canonical.com. hostmaster.canonical.com. 2018054618 10800 3600 604800 3600 . 0 1232 OPT " UDP 62785 57705 208.50.179.13 192.168.1.106 2.1.3 RPZ EVENT QNAME NXDOMAIN DNS Response IN AAAA NOERROR InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_541993.796f7572205765622050726f787920697320657866696c74726174.1713.ymil00.hex.acaddff5e4.leeandco.net.;InfobloxRPZ=LIST_541993;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=90 InfobloxDNSView=_default;InfobloxDNSQClass=IN;InfobloxDNSQType=AAAA;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=0;InfobloxNsCount=1;InfobloxArCount=1 DNS 796f7572205765622050726f787920697320657866696c74726174.1713.ymil00.hex.acaddff5e4.leeandco.net. connectivity-check.ubuntu.com. CommonSecurityLog {"InfobloxDNSView":"_default","InfobloxDNSQClass":"IN","InfobloxDNSQType":"AAAA","InfobloxDNSQFlags":"+EV","InfobloxDNSRCode":"NOERROR","InfobloxAnCount":"0","InfobloxNsCount":"1","InfobloxArCount":"1"} 0 1 IN #NAME? AAAA NOERROR _default 1 N/A
77 846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 10/26/2021, 2:27:52.295 PM 2/11/2021, 11:43:12.054 PM Infoblox Data Connector RPZ-QNAME-NXDOMAIN DNS Response 8 1 NXDOMAIN NXDOMAIN infoblox-virtual-machine 192.168.1.90 "RPZ QNAME NXDOMAIN rewrite 796f7572205765622050726f787920697320657866696c74726174.1616.zcmt50.hex.acaddff5e4.leeandco.net. [A] via LIST_541993.796f7572205765622050726f787920697320657866696c74726174.1616.zcmt50.hex.acaddff5e4.leeandco.net." "arc.msn.com. 20755 IN CNAME arc.trafficmanager.net. arc.trafficmanager.net. 46 IN CNAME iris-de-prod-azsc-wus2-b.westus2.cloudapp.azure.com. iris-de-prod-azsc-wus2-b.westus2.cloudapp.azure.com. 3 IN A 20.69.130.185 . 32768 4096 OPT " TCP 36519 45226 208.50.179.13 192.168.1.90 2.1.3 RPZ EVENT QNAME NXDOMAIN DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_541993.796f7572205765622050726f787920697320657866696c74726174.1616.zcmt50.hex.acaddff5e4.leeandco.net.;InfobloxRPZ=LIST_541993;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=90 InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=3;InfobloxNsCount=0;InfobloxArCount=1;InfobloxB1Region=us-west-1;InfobloxB1ConnectionType=dfp;InfobloxB1OPHName=Sentinel-Demo-DNS+DFP+DHCP;InfobloxB1OPHIPAddress=192.168.1.201;InfobloxB1Network=Sentinel-Demo-DNS+DFP+DHCP (DFP);InfobloxB1SrcOSVersion=;InfobloxB1DHCPFingerprint=;InfobloxB1DNSTags=APP_Uncategorized,CAT_Internet Services,CAT_Portal Sites DNS 796f7572205765622050726f787920697320657866696c74726174.1616.zcmt50.hex.acaddff5e4.leeandco.net. arc.msn.com. 00:50:56:0b:0f:80 CommonSecurityLog {"InfobloxDNSQClass":"IN","InfobloxDNSQType":"A","InfobloxDNSQFlags":"+EV","InfobloxDNSRCode":"NOERROR","InfobloxAnCount":"3","InfobloxNsCount":"0","InfobloxArCount":"1","InfobloxB1Region":"us-west-1","InfobloxB1ConnectionType":"dfp","InfobloxB1OPHName":"Sentinel-Demo-DNS+DFP+DHCP","InfobloxB1OPHIPAddress":"192.168.1.201","InfobloxB1Network":"Sentinel-Demo-DNS+DFP+DHCP (DFP)","InfobloxB1DNSTags":"APP_Uncategorized,CAT_Internet Services,CAT_Portal Sites"} 3 1 dfp APP_Uncategorized,CAT_Internet Services,CAT_Portal Sites Sentinel-Demo-DNS+DFP+DHCP (DFP) 192.168.1.201 Sentinel-Demo-DNS+DFP+DHCP us-west-1 IN #NAME? A NOERROR 0 N/A
78 846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 10/26/2021, 2:40:00.290 PM 2/11/2021, 11:22:52.030 PM Infoblox Data Connector RPZ-QNAME-NXDOMAIN DNS Response 8 1 NXDOMAIN NXDOMAIN infoblox-virtual-machine 192.168.1.201 "RPZ QNAME NXDOMAIN rewrite 796f7572205765622050726f787920697320657866696c74726174.1616.ymil00.hex.acaddff5e4.leeandco.net. [A] via LIST_541993.796f7572205765622050726f787920697320657866696c74726174.1616.ymil00.hex.acaddff5e4.leeandco.net." "probe.infoblox.com. 0 IN TXT \"ABYZX9GLUYQUVWDQZIECEGAFF3NC89ZE\" . 150059 IN NS h.root-servers.net. . 150059 IN NS l.root-servers.net. . 150059 IN NS k.root-servers.net. . 150059 IN NS b.root-servers.net. . 150059 IN NS f.root-servers.net. . 150059 IN NS d.root-servers.net. . 150059 IN NS e.root-servers.net. . 150059 IN NS g.root-servers.net. . 150059 IN NS a.root-servers.net. . 150059 IN NS i.root-servers.net. . 150059 IN NS j.root-servers.net. . 150059 IN NS c.root-servers.net. . 150059 IN NS m.root-servers.net. a.root-servers.net. 150059 IN A 198.41.0.4 b.root-servers.net. 150059 IN A 199.9.14.201 c.root-servers.net. 150059 IN A 192.33.4.12 d.root-servers.net. 150059 IN A 199.7.91.13 e.root-servers.net. 150059 IN A 192.203.230.10 f.root-servers.net. 150059 IN A 192.5.5.241 g.root-servers.net. 150059 IN A 192.112.36.4 h.root-servers.net. 150059 IN A 198.97.190.53 i.root-servers.net. 150059 IN A 192.36.148.17 j.root-servers.net. 150059 IN A 192.58.128.30 k.root-servers.net. 150059 IN A 193.0.14.129 l.root-servers.net. 150059 IN A 199.7.83.42 m.root-servers.net. 150059 IN A 202.12.27.33" UDP 62785 58704 208.50.179.13 192.168.1.90 2.1.3 RPZ EVENT QNAME NXDOMAIN DNS Response IN TXT NOERROR InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_541993.796f7572205765622050726f787920697320657866696c74726174.1616.ymil00.hex.acaddff5e4.leeandco.net.;InfobloxRPZ=LIST_541993;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=90 InfobloxDNSView=_default;InfobloxDNSQClass=IN;InfobloxDNSQType=TXT;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=13;InfobloxArCount=13 DNS 796f7572205765622050726f787920697320657866696c74726174.1616.ymil00.hex.acaddff5e4.leeandco.net. probe.infoblox.com. CommonSecurityLog {"InfobloxDNSView":"_default","InfobloxDNSQClass":"IN","InfobloxDNSQType":"TXT","InfobloxDNSQFlags":"+EV","InfobloxDNSRCode":"NOERROR","InfobloxAnCount":"1","InfobloxNsCount":"13","InfobloxArCount":"13"} 1 13 IN #NAME? TXT NOERROR _default 13 N/A
79 846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 10/26/2021, 2:40:00.290 PM 2/11/2021, 11:43:01.281 PM Infoblox Data Connector RPZ-QNAME-NXDOMAIN DNS Response 8 1 NXDOMAIN NXDOMAIN infoblox-virtual-machine 192.168.1.201 "RPZ QNAME NXDOMAIN rewrite 796f7572205765622050726f787920697320657866696c74726174.1519.zcmt50.hex.acaddff5e4.leeandco.net. [A] via LIST_541993.796f7572205765622050726f787920697320657866696c74726174.1519.zcmt50.hex.acaddff5e4.leeandco.net." "csp.infoblox.com. 17 IN CNAME wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 44 IN A 18.209.243.220 wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 44 IN A 18.235.149.1 wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 44 IN A 18.233.189.178 . 150059 IN NS a.root-servers.net. . 150059 IN NS c.root-servers.net. . 150059 IN NS g.root-servers.net. . 150059 IN NS k.root-servers.net. . 150059 IN NS i.root-servers.net. . 150059 IN NS d.root-servers.net. . 150059 IN NS h.root-servers.net. . 150059 IN NS e.root-servers.net. . 150059 IN NS f.root-servers.net. . 150059 IN NS b.root-servers.net. . 150059 IN NS l.root-servers.net. . 150059 IN NS m.root-servers.net. . 150059 IN NS j.root-servers.net. a.root-servers.net. 150059 IN A 198.41.0.4 b.root-servers.net. 150059 IN A 199.9.14.201 c.root-servers.net. 150059 IN A 192.33.4.12 d.root-servers.net. 150059 IN A 199.7.91.13 e.root-servers.net. 150059 IN A 192.203.230.10 f.root-servers.net. 150059 IN A 192.5.5.241 g.root-servers.net. 150059 IN A 192.112.36.4 h.root-servers.net. 150059 IN A 198.97.190.53" UDP 14474 58702 208.50.179.13 192.168.1.90 2.1.3 RPZ EVENT QNAME NXDOMAIN DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_541993.796f7572205765622050726f787920697320657866696c74726174.1519.zcmt50.hex.acaddff5e4.leeandco.net.;InfobloxRPZ=LIST_541993;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=90 InfobloxDNSView=_default;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=4;InfobloxNsCount=13;InfobloxArCount=8 DNS 796f7572205765622050726f787920697320657866696c74726174.1519.zcmt50.hex.acaddff5e4.leeandco.net. csp.infoblox.com. CommonSecurityLog {"InfobloxDNSView":"_default","InfobloxDNSQClass":"IN","InfobloxDNSQType":"A","InfobloxDNSQFlags":"+EV","InfobloxDNSRCode":"NOERROR","InfobloxAnCount":"4","InfobloxNsCount":"13","InfobloxArCount":"8"} 4 8 IN #NAME? A NOERROR _default 13 N/A
80 846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 10/26/2021, 2:40:00.687 PM 2/11/2021, 11:22:43.545 PM Infoblox Data Connector RPZ-QNAME-NXDOMAIN DNS Response 8 1 NXDOMAIN NXDOMAIN infoblox-virtual-machine 192.168.1.201 192.168.1.90 "RPZ QNAME NXDOMAIN rewrite 796f7572205765622050726f787920697320657866696c74726174.1519.ymil00.hex.acaddff5e4.leeandco.net. [A] via LIST_541993.796f7572205765622050726f787920697320657866696c74726174.1519.ymil00.hex.acaddff5e4.leeandco.net." "probe.infoblox.com. 0 IN TXT \"ABYZX9GLUYQUVWDQZIECEGAFF3NC89ZE\" . 150059 IN NS h.root-servers.net. . 150059 IN NS l.root-servers.net. . 150059 IN NS k.root-servers.net. . 150059 IN NS b.root-servers.net. . 150059 IN NS f.root-servers.net. . 150059 IN NS d.root-servers.net. . 150059 IN NS e.root-servers.net. . 150059 IN NS g.root-servers.net. . 150059 IN NS a.root-servers.net. . 150059 IN NS i.root-servers.net. . 150059 IN NS j.root-servers.net. . 150059 IN NS c.root-servers.net. . 150059 IN NS m.root-servers.net. a.root-servers.net. 150059 IN A 198.41.0.4 b.root-servers.net. 150059 IN A 199.9.14.201 c.root-servers.net. 150059 IN A 192.33.4.12 d.root-servers.net. 150059 IN A 199.7.91.13 e.root-servers.net. 150059 IN A 192.203.230.10 f.root-servers.net. 150059 IN A 192.5.5.241 g.root-servers.net. 150059 IN A 192.112.36.4 h.root-servers.net. 150059 IN A 198.97.190.53 i.root-servers.net. 150059 IN A 192.36.148.17 j.root-servers.net. 150059 IN A 192.58.128.30 k.root-servers.net. 150059 IN A 193.0.14.129 l.root-servers.net. 150059 IN A 199.7.83.42 m.root-servers.net. 150059 IN A 202.12.27.33" UDP 61377 58704 208.50.179.13 192.168.1.90 2.1.3 RPZ EVENT QNAME NXDOMAIN DNS Response IN TXT NOERROR InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_541993.796f7572205765622050726f787920697320657866696c74726174.1519.ymil00.hex.acaddff5e4.leeandco.net.;InfobloxRPZ=LIST_541993;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=90 InfobloxDNSView=_default;InfobloxDNSQClass=IN;InfobloxDNSQType=TXT;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=13;InfobloxArCount=13;InfobloxB1Region=;InfobloxB1ConnectionType=dfp;InfobloxB1OPHName=Sentinel-Demo-DNS+DFP+DHCP;InfobloxB1OPHIPAddress=192.168.1.201;InfobloxB1Network=Sentinel-Demo-DNS+DFP+DHCP (DFP);InfobloxB1SrcOSVersion=;InfobloxB1DHCPFingerprint=;InfobloxB1DNSTags= DNS 796f7572205765622050726f787920697320657866696c74726174.1519.ymil00.hex.acaddff5e4.leeandco.net. probe.infoblox.com. 00:50:56:0b:0f:80 CommonSecurityLog {"InfobloxDNSView":"_default","InfobloxDNSQClass":"IN","InfobloxDNSQType":"TXT","InfobloxDNSQFlags":"+EV","InfobloxDNSRCode":"NOERROR","InfobloxAnCount":"1","InfobloxNsCount":"13","InfobloxArCount":"13","InfobloxB1ConnectionType":"dfp","InfobloxB1OPHName":"Sentinel-Demo-DNS+DFP+DHCP","InfobloxB1OPHIPAddress":"192.168.1.201","InfobloxB1Network":"Sentinel-Demo-DNS+DFP+DHCP (DFP)"} 1 13 dfp Sentinel-Demo-DNS+DFP+DHCP (DFP) 192.168.1.201 Sentinel-Demo-DNS+DFP+DHCP IN #NAME? TXT NOERROR _default 13 N/A
81 846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 10/26/2021, 2:40:00.687 PM 2/11/2021, 11:42:49.736 PM Infoblox Data Connector RPZ-QNAME-NXDOMAIN DNS Response 8 1 NXDOMAIN NXDOMAIN infoblox-virtual-machine 192.168.1.201 192.168.1.90 "RPZ QNAME NXDOMAIN rewrite 796f7572205765622050726f787920697320657866696c74726174.1422.zcmt50.hex.acaddff5e4.leeandco.net. [A] via LIST_541993.796f7572205765622050726f787920697320657866696c74726174.1422.zcmt50.hex.acaddff5e4.leeandco.net." "csp.infoblox.com. 17 IN CNAME wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 44 IN A 18.209.243.220 wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 44 IN A 18.235.149.1 wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 44 IN A 18.233.189.178 . 150059 IN NS a.root-servers.net. . 150059 IN NS c.root-servers.net. . 150059 IN NS g.root-servers.net. . 150059 IN NS k.root-servers.net. . 150059 IN NS i.root-servers.net. . 150059 IN NS d.root-servers.net. . 150059 IN NS h.root-servers.net. . 150059 IN NS e.root-servers.net. . 150059 IN NS f.root-servers.net. . 150059 IN NS b.root-servers.net. . 150059 IN NS l.root-servers.net. . 150059 IN NS m.root-servers.net. . 150059 IN NS j.root-servers.net. a.root-servers.net. 150059 IN A 198.41.0.4 b.root-servers.net. 150059 IN A 199.9.14.201 c.root-servers.net. 150059 IN A 192.33.4.12 d.root-servers.net. 150059 IN A 199.7.91.13 e.root-servers.net. 150059 IN A 192.203.230.10 f.root-servers.net. 150059 IN A 192.5.5.241 g.root-servers.net. 150059 IN A 192.112.36.4 h.root-servers.net. 150059 IN A 198.97.190.53" UDP 7987 58702 208.50.179.13 192.168.1.90 2.1.3 RPZ EVENT QNAME NXDOMAIN DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_541993.796f7572205765622050726f787920697320657866696c74726174.1422.zcmt50.hex.acaddff5e4.leeandco.net.;InfobloxRPZ=LIST_541993;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=90 InfobloxDNSView=_default;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=4;InfobloxNsCount=13;InfobloxArCount=8;InfobloxB1Region=;InfobloxB1ConnectionType=dfp;InfobloxB1OPHName=Sentinel-Demo-DNS+DFP+DHCP;InfobloxB1OPHIPAddress=192.168.1.201;InfobloxB1Network=Sentinel-Demo-DNS+DFP+DHCP (DFP);InfobloxB1SrcOSVersion=;InfobloxB1DHCPFingerprint=;InfobloxB1DNSTags= DNS 796f7572205765622050726f787920697320657866696c74726174.1422.zcmt50.hex.acaddff5e4.leeandco.net. csp.infoblox.com. 00:50:56:0b:0f:80 CommonSecurityLog {"InfobloxDNSView":"_default","InfobloxDNSQClass":"IN","InfobloxDNSQType":"A","InfobloxDNSQFlags":"+EV","InfobloxDNSRCode":"NOERROR","InfobloxAnCount":"4","InfobloxNsCount":"13","InfobloxArCount":"8","InfobloxB1ConnectionType":"dfp","InfobloxB1OPHName":"Sentinel-Demo-DNS+DFP+DHCP","InfobloxB1OPHIPAddress":"192.168.1.201","InfobloxB1Network":"Sentinel-Demo-DNS+DFP+DHCP (DFP)"} 4 8 dfp Sentinel-Demo-DNS+DFP+DHCP (DFP) 192.168.1.201 Sentinel-Demo-DNS+DFP+DHCP IN #NAME? A NOERROR _default 13 N/A
82 846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 10/26/2021, 2:40:02.715 PM 2/11/2021, 11:22:36.508 PM Infoblox Data Connector RPZ-QNAME-NXDOMAIN DNS Response 8 1 NXDOMAIN NXDOMAIN infoblox-virtual-machine 192.168.1.90 "RPZ QNAME NXDOMAIN rewrite 796f7572205765622050726f787920697320657866696c74726174.1422.ymil00.hex.acaddff5e4.leeandco.net. [A] via LIST_541993.796f7572205765622050726f787920697320657866696c74726174.1422.ymil00.hex.acaddff5e4.leeandco.net." "csp.infoblox.com. 37 IN CNAME wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. csp.infoblox.com. 37 IN RRSIG CNAME 5 3 60 20211030035028 20211026032210 51153 infoblox.com. TCP 61377 42434 208.50.179.13 192.168.1.90 2.1.3 RPZ EVENT QNAME NXDOMAIN DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_541993.796f7572205765622050726f787920697320657866696c74726174.1422.ymil00.hex.acaddff5e4.leeandco.net.;InfobloxRPZ=LIST_541993;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=90 InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;GGOUG8KYpXfmGFIh0VSI3IzjZ61XmYb849xIGN7zVVxKBKMUIVzheVsbfoM16kZgTTTs8oXTplmh6bPyjbvzS8wThIF2uXGj416MNqa1Ci0yGeWDhN6npXErWKv4IQT0K346qv1S1US0JYi4vFZY3MfQAHUiTkxeVdPRwo20KWU= csp.infoblox.com. 37 IN RRSIG CNAME 5 3 60 20211030035028 20211026032210 61272 infoblox.com.;o8tonjeIlHiWq8VQtKS6LjaX1Sjte+NHKCNzdEV5oBsipH+53DFWI0rIIUyY7DfUttCII3eTb3A7aqUXWAWmc/zKxFP1Nz34kike2mlWaMm4e0C7mtrG5JpPh+AzyoEGsLVQP6gGYvsLMIUXumt/EKbUSNJFwg3CvEaCRj5Q3Tk= wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 17 IN A 18.233.189.178 wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 17 IN A 18.209.243.220 wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 17 IN A 18.235.149.1 . 32768 4096 OPT ";InfobloxAnCount=6;InfobloxNsCount=0;InfobloxArCount=1;InfobloxB1Region=us-west-1;InfobloxB1ConnectionType=nios;InfobloxB1OPHName=Sentinel-Demo-DNS+DFP+DHCP;InfobloxB1OPHIPAddress=192.168.1.201;InfobloxB1Network=on-prem;InfobloxB1SrcOSVersion=;InfobloxB1DHCPFingerprint=;InfobloxB1DNSTags= DNS 796f7572205765622050726f787920697320657866696c74726174.1422.ymil00.hex.acaddff5e4.leeandco.net. csp.infoblox.com. 00:50:56:0b:0f:80 CommonSecurityLog {"InfobloxDNSQClass":"IN","InfobloxDNSQType":"A","InfobloxDNSQFlags":"+EV","InfobloxDNSRCode":"NOERROR","GGOUG8KYpXfmGFIh0VSI3IzjZ61XmYb849xIGN7zVVxKBKMUIVzheVsbfoM16kZgTTTs8oXTplmh6bPyjbvzS8wThIF2uXGj416MNqa1Ci0yGeWDhN6npXErWKv4IQT0K346qv1S1US0JYi4vFZY3MfQAHUiTkxeVdPRwo20KWU":" csp.infoblox.com. 37 IN RRSIG CNAME 5 3 60 20211030035028 20211026032210 61272 infoblox.com.","o8tonjeIlHiWq8VQtKS6LjaX1Sjte+NHKCNzdEV5oBsipH+53DFWI0rIIUyY7DfUttCII3eTb3A7aqUXWAWmc/zKxFP1Nz34kike2mlWaMm4e0C7mtrG5JpPh+AzyoEGsLVQP6gGYvsLMIUXumt/EKbUSNJFwg3CvEaCRj5Q3Tk":" wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 17 IN A 18.233.189.178 wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 17 IN A 18.209.243.220 wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 17 IN A 18.235.149.1 . 32768 4096 OPT \"","InfobloxAnCount":"6","InfobloxNsCount":"0","InfobloxArCount":"1","InfobloxB1Region":"us-west-1","InfobloxB1ConnectionType":"nios","InfobloxB1OPHName":"Sentinel-Demo-DNS+DFP+DHCP","InfobloxB1OPHIPAddress":"192.168.1.201","InfobloxB1Network":"on-prem"} 6 1 nios on-prem 192.168.1.201 Sentinel-Demo-DNS+DFP+DHCP us-west-1 IN #NAME? A NOERROR 0 N/A
83 846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 10/26/2021, 2:28:38.819 PM 2/11/2021, 11:42:45.872 PM Infoblox Data Connector RPZ-QNAME-NXDOMAIN DNS Response 8 1 NXDOMAIN NXDOMAIN infoblox-virtual-machine 192.168.1.106 "RPZ QNAME NXDOMAIN rewrite 796f7572205765622050726f787920697320657866696c74726174.1325.zcmt50.hex.acaddff5e4.leeandco.net. [A] via LIST_541993.796f7572205765622050726f787920697320657866696c74726174.1325.zcmt50.hex.acaddff5e4.leeandco.net." "www.amazon.com. 0 IN AAAA 2600:1f18:1043:dc00:8083:68e:ef0f:46de . 32768 1232 OPT " TCP 15223 31846 208.50.179.13 192.168.1.106 2.1.3 RPZ EVENT QNAME NXDOMAIN DNS Response IN AAAA NOERROR InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_541993.796f7572205765622050726f787920697320657866696c74726174.1325.zcmt50.hex.acaddff5e4.leeandco.net.;InfobloxRPZ=LIST_541993;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=90 InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=AAAA;InfobloxDNSQFlags=-EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1;InfobloxB1Region=us-west-1;InfobloxB1ConnectionType=dfp;InfobloxB1OPHName=Sentinel-Demo-DNS+DFP+DHCP;InfobloxB1OPHIPAddress=192.168.1.201;InfobloxB1Network=Sentinel-Demo-DNS+DFP+DHCP (DFP);InfobloxB1SrcOSVersion=;InfobloxB1DHCPFingerprint=;InfobloxB1DNSTags=APP_GoToMyPC,APP_Uncategorized,CAT_Content Server,CAT_Online Shopping DNS 796f7572205765622050726f787920697320657866696c74726174.1325.zcmt50.hex.acaddff5e4.leeandco.net. www.amazon.com. 00:50:56:0b:0f:15 CommonSecurityLog {"InfobloxDNSQClass":"IN","InfobloxDNSQType":"AAAA","InfobloxDNSQFlags":"-EV","InfobloxDNSRCode":"NOERROR","InfobloxAnCount":"1","InfobloxNsCount":"0","InfobloxArCount":"1","InfobloxB1Region":"us-west-1","InfobloxB1ConnectionType":"dfp","InfobloxB1OPHName":"Sentinel-Demo-DNS+DFP+DHCP","InfobloxB1OPHIPAddress":"192.168.1.201","InfobloxB1Network":"Sentinel-Demo-DNS+DFP+DHCP (DFP)","InfobloxB1DNSTags":"APP_GoToMyPC,APP_Uncategorized,CAT_Content Server,CAT_Online Shopping"} 1 1 dfp APP_GoToMyPC,APP_Uncategorized,CAT_Content Server,CAT_Online Shopping Sentinel-Demo-DNS+DFP+DHCP (DFP) 192.168.1.201 Sentinel-Demo-DNS+DFP+DHCP us-west-1 IN #NAME? AAAA NOERROR 0 N/A
84 846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 10/26/2021, 2:48:42.365 PM 2/11/2021, 11:22:22.500 PM Infoblox Data Connector RPZ-QNAME-NXDOMAIN DNS Response 8 1 NXDOMAIN NXDOMAIN infoblox-virtual-machine 192.168.1.106 "RPZ QNAME NXDOMAIN rewrite 796f7572205765622050726f787920697320657866696c74726174.1325.ymil00.hex.acaddff5e4.leeandco.net. [A] via LIST_541993.796f7572205765622050726f787920697320657866696c74726174.1325.ymil00.hex.acaddff5e4.leeandco.net." "unbouncepages.com. 388 IN SOA ns-748.awsdns-29.net. awsdns-hostmaster.amazon.com. 1 7200 900 1209600 86400 . 32768 4096 OPT " TCP 61377 19173 208.50.179.13 192.168.1.106 2.1.3 RPZ EVENT QNAME NXDOMAIN DNS Response IN AAAA NOERROR InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_541993.796f7572205765622050726f787920697320657866696c74726174.1325.ymil00.hex.acaddff5e4.leeandco.net.;InfobloxRPZ=LIST_541993;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=90 InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=AAAA;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=0;InfobloxNsCount=1;InfobloxArCount=1;InfobloxB1Region=us-west-1;InfobloxB1ConnectionType=dfp;InfobloxB1OPHName=Sentinel-Demo-DNS+DFP+DHCP;InfobloxB1OPHIPAddress=192.168.1.201;InfobloxB1Network=Sentinel-Demo-DNS+DFP+DHCP (DFP);InfobloxB1SrcOSVersion=;InfobloxB1DHCPFingerprint=;InfobloxB1DNSTags=APP_Uncategorized,CAT_Internet Services DNS 796f7572205765622050726f787920697320657866696c74726174.1325.ymil00.hex.acaddff5e4.leeandco.net. unbouncepages.com. 00:50:56:0b:0f:15 CommonSecurityLog {"InfobloxDNSQClass":"IN","InfobloxDNSQType":"AAAA","InfobloxDNSQFlags":"+EV","InfobloxDNSRCode":"NOERROR","InfobloxAnCount":"0","InfobloxNsCount":"1","InfobloxArCount":"1","InfobloxB1Region":"us-west-1","InfobloxB1ConnectionType":"dfp","InfobloxB1OPHName":"Sentinel-Demo-DNS+DFP+DHCP","InfobloxB1OPHIPAddress":"192.168.1.201","InfobloxB1Network":"Sentinel-Demo-DNS+DFP+DHCP (DFP)","InfobloxB1DNSTags":"APP_Uncategorized,CAT_Internet Services"} 0 1 dfp APP_Uncategorized,CAT_Internet Services Sentinel-Demo-DNS+DFP+DHCP (DFP) 192.168.1.201 Sentinel-Demo-DNS+DFP+DHCP us-west-1 IN #NAME? AAAA NOERROR 1 N/A
85 846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 10/26/2021, 2:27:52.295 PM 2/11/2021, 11:42:26.848 PM Infoblox Data Connector RPZ-QNAME-NXDOMAIN DNS Response 8 1 NXDOMAIN NXDOMAIN infoblox-virtual-machine 192.168.1.90 "RPZ QNAME NXDOMAIN rewrite 796f7572205765622050726f787920697320657866696c74726174.1228.zcmt50.hex.acaddff5e4.leeandco.net. [A] via LIST_541993.796f7572205765622050726f787920697320657866696c74726174.1228.zcmt50.hex.acaddff5e4.leeandco.net." "ris.api.iris.microsoft.com. 2996 IN CNAME ris-prod.trafficmanager.net. ris-prod.trafficmanager.net. 18 IN CNAME asf-ris-prod-scus-azsc.southcentralus.cloudapp.azure.com. asf-ris-prod-scus-azsc.southcentralus.cloudapp.azure.com. 9 IN A 104.214.104.116 . 32768 4096 OPT " TCP 7987 45226 208.50.179.13 192.168.1.90 2.1.3 RPZ EVENT QNAME NXDOMAIN DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_541993.796f7572205765622050726f787920697320657866696c74726174.1228.zcmt50.hex.acaddff5e4.leeandco.net.;InfobloxRPZ=LIST_541993;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=90 InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=3;InfobloxNsCount=0;InfobloxArCount=1;InfobloxB1Region=us-west-1;InfobloxB1ConnectionType=dfp;InfobloxB1OPHName=Sentinel-Demo-DNS+DFP+DHCP;InfobloxB1OPHIPAddress=192.168.1.201;InfobloxB1Network=Sentinel-Demo-DNS+DFP+DHCP (DFP);InfobloxB1SrcOSVersion=;InfobloxB1DHCPFingerprint=;InfobloxB1DNSTags=APP_Uncategorized,CAT_Business,CAT_Internet Services,CAT_Software/Hardware DNS 796f7572205765622050726f787920697320657866696c74726174.1228.zcmt50.hex.acaddff5e4.leeandco.net. ris.api.iris.microsoft.com. 00:50:56:0b:0f:80 CommonSecurityLog {"InfobloxDNSQClass":"IN","InfobloxDNSQType":"A","InfobloxDNSQFlags":"+EV","InfobloxDNSRCode":"NOERROR","InfobloxAnCount":"3","InfobloxNsCount":"0","InfobloxArCount":"1","InfobloxB1Region":"us-west-1","InfobloxB1ConnectionType":"dfp","InfobloxB1OPHName":"Sentinel-Demo-DNS+DFP+DHCP","InfobloxB1OPHIPAddress":"192.168.1.201","InfobloxB1Network":"Sentinel-Demo-DNS+DFP+DHCP (DFP)","InfobloxB1DNSTags":"APP_Uncategorized,CAT_Business,CAT_Internet Services,CAT_Software/Hardware"} 3 1 dfp APP_Uncategorized,CAT_Business,CAT_Internet Services,CAT_Software/Hardware Sentinel-Demo-DNS+DFP+DHCP (DFP) 192.168.1.201 Sentinel-Demo-DNS+DFP+DHCP us-west-1 IN #NAME? A NOERROR 0 N/A
86 846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 10/26/2021, 2:42:05.148 PM 2/11/2021, 11:22:15.514 PM Infoblox Data Connector RPZ-QNAME-NXDOMAIN DNS Response 8 1 NXDOMAIN NXDOMAIN infoblox-virtual-machine 192.168.1.90 "RPZ QNAME NXDOMAIN rewrite 796f7572205765622050726f787920697320657866696c74726174.1228.ymil00.hex.acaddff5e4.leeandco.net. [A] via LIST_541993.796f7572205765622050726f787920697320657866696c74726174.1228.ymil00.hex.acaddff5e4.leeandco.net." "arc.msn.com. 19922 IN CNAME arc.trafficmanager.net. arc.trafficmanager.net. 55 IN CNAME iris-de-prod-azsc-wus2-b.westus2.cloudapp.azure.com. iris-de-prod-azsc-wus2-b.westus2.cloudapp.azure.com. 6 IN A 20.69.130.185 . 32768 4096 OPT " TCP 61377 25671 208.50.179.13 192.168.1.90 2.1.3 RPZ EVENT QNAME NXDOMAIN DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_541993.796f7572205765622050726f787920697320657866696c74726174.1228.ymil00.hex.acaddff5e4.leeandco.net.;InfobloxRPZ=LIST_541993;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=90 InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=3;InfobloxNsCount=0;InfobloxArCount=1;InfobloxB1Region=us-west-1;InfobloxB1ConnectionType=dfp;InfobloxB1OPHName=Sentinel-Demo-DNS+DFP+DHCP;InfobloxB1OPHIPAddress=192.168.1.201;InfobloxB1Network=Sentinel-Demo-DNS+DFP+DHCP (DFP);InfobloxB1SrcOSVersion=;InfobloxB1DHCPFingerprint=;InfobloxB1DNSTags=APP_Uncategorized,CAT_Internet Services,CAT_Portal Sites DNS 796f7572205765622050726f787920697320657866696c74726174.1228.ymil00.hex.acaddff5e4.leeandco.net. arc.msn.com. 00:50:56:0b:0f:80 CommonSecurityLog {"InfobloxDNSQClass":"IN","InfobloxDNSQType":"A","InfobloxDNSQFlags":"+EV","InfobloxDNSRCode":"NOERROR","InfobloxAnCount":"3","InfobloxNsCount":"0","InfobloxArCount":"1","InfobloxB1Region":"us-west-1","InfobloxB1ConnectionType":"dfp","InfobloxB1OPHName":"Sentinel-Demo-DNS+DFP+DHCP","InfobloxB1OPHIPAddress":"192.168.1.201","InfobloxB1Network":"Sentinel-Demo-DNS+DFP+DHCP (DFP)","InfobloxB1DNSTags":"APP_Uncategorized,CAT_Internet Services,CAT_Portal Sites"} 3 1 dfp APP_Uncategorized,CAT_Internet Services,CAT_Portal Sites Sentinel-Demo-DNS+DFP+DHCP (DFP) 192.168.1.201 Sentinel-Demo-DNS+DFP+DHCP us-west-1 IN #NAME? A NOERROR 0 N/A
87 846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 10/26/2021, 2:42:05.148 PM 2/11/2021, 11:42:19.191 PM Infoblox Data Connector RPZ-QNAME-NXDOMAIN DNS Response 8 1 NXDOMAIN NXDOMAIN infoblox-virtual-machine 192.168.1.90 "RPZ QNAME NXDOMAIN rewrite 796f7572205765622050726f787920697320657866696c74726174.1131.zcmt50.hex.acaddff5e4.leeandco.net. [A] via LIST_541993.796f7572205765622050726f787920697320657866696c74726174.1131.zcmt50.hex.acaddff5e4.leeandco.net." "arc.trafficmanager.net. 59 IN CNAME iris-de-prod-azsc-wus2-b.westus2.cloudapp.azure.com. iris-de-prod-azsc-wus2-b.westus2.cloudapp.azure.com. 9 IN A 20.69.130.185 . 32768 4096 OPT " TCP 7987 25671 208.50.179.13 192.168.1.90 2.1.3 RPZ EVENT QNAME NXDOMAIN DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_541993.796f7572205765622050726f787920697320657866696c74726174.1131.zcmt50.hex.acaddff5e4.leeandco.net.;InfobloxRPZ=LIST_541993;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=90 InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=2;InfobloxNsCount=0;InfobloxArCount=1;InfobloxB1Region=us-west-1;InfobloxB1ConnectionType=dfp;InfobloxB1OPHName=Sentinel-Demo-DNS+DFP+DHCP;InfobloxB1OPHIPAddress=192.168.1.201;InfobloxB1Network=Sentinel-Demo-DNS+DFP+DHCP (DFP);InfobloxB1SrcOSVersion=;InfobloxB1DHCPFingerprint=;InfobloxB1DNSTags=APP_Uncategorized,CAT_Internet Services DNS 796f7572205765622050726f787920697320657866696c74726174.1131.zcmt50.hex.acaddff5e4.leeandco.net. arc.trafficmanager.net. 00:50:56:0b:0f:80 CommonSecurityLog {"InfobloxDNSQClass":"IN","InfobloxDNSQType":"A","InfobloxDNSQFlags":"+EV","InfobloxDNSRCode":"NOERROR","InfobloxAnCount":"2","InfobloxNsCount":"0","InfobloxArCount":"1","InfobloxB1Region":"us-west-1","InfobloxB1ConnectionType":"dfp","InfobloxB1OPHName":"Sentinel-Demo-DNS+DFP+DHCP","InfobloxB1OPHIPAddress":"192.168.1.201","InfobloxB1Network":"Sentinel-Demo-DNS+DFP+DHCP (DFP)","InfobloxB1DNSTags":"APP_Uncategorized,CAT_Internet Services"} 2 1 dfp APP_Uncategorized,CAT_Internet Services Sentinel-Demo-DNS+DFP+DHCP (DFP) 192.168.1.201 Sentinel-Demo-DNS+DFP+DHCP us-west-1 IN #NAME? A NOERROR 0 N/A
88 846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 10/26/2021, 2:42:05.148 PM 2/11/2021, 11:22:01.774 PM Infoblox Data Connector RPZ-QNAME-NXDOMAIN DNS Response 8 1 NXDOMAIN NXDOMAIN infoblox-virtual-machine 192.168.1.90 "RPZ QNAME NXDOMAIN rewrite 796f7572205765622050726f787920697320657866696c74726174.1131.ymil00.hex.acaddff5e4.leeandco.net. [A] via LIST_541993.796f7572205765622050726f787920697320657866696c74726174.1131.ymil00.hex.acaddff5e4.leeandco.net." "iris-de-prod-azsc-wus2-b.westus2.cloudapp.azure.com. 9 IN A 20.69.130.185 . 32768 4096 OPT " TCP 61377 25671 208.50.179.13 192.168.1.90 2.1.3 RPZ EVENT QNAME NXDOMAIN DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_541993.796f7572205765622050726f787920697320657866696c74726174.1131.ymil00.hex.acaddff5e4.leeandco.net.;InfobloxRPZ=LIST_541993;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=90 InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1;InfobloxB1Region=us-west-1;InfobloxB1ConnectionType=dfp;InfobloxB1OPHName=Sentinel-Demo-DNS+DFP+DHCP;InfobloxB1OPHIPAddress=192.168.1.201;InfobloxB1Network=Sentinel-Demo-DNS+DFP+DHCP (DFP);InfobloxB1SrcOSVersion=;InfobloxB1DHCPFingerprint=;InfobloxB1DNSTags=APP_Uncategorized,CAT_Internet Services DNS 796f7572205765622050726f787920697320657866696c74726174.1131.ymil00.hex.acaddff5e4.leeandco.net. iris-de-prod-azsc-wus2-b.westus2.cloudapp.azure.com. 00:50:56:0b:0f:80 CommonSecurityLog {"InfobloxDNSQClass":"IN","InfobloxDNSQType":"A","InfobloxDNSQFlags":"+EV","InfobloxDNSRCode":"NOERROR","InfobloxAnCount":"1","InfobloxNsCount":"0","InfobloxArCount":"1","InfobloxB1Region":"us-west-1","InfobloxB1ConnectionType":"dfp","InfobloxB1OPHName":"Sentinel-Demo-DNS+DFP+DHCP","InfobloxB1OPHIPAddress":"192.168.1.201","InfobloxB1Network":"Sentinel-Demo-DNS+DFP+DHCP (DFP)","InfobloxB1DNSTags":"APP_Uncategorized,CAT_Internet Services"} 1 1 dfp APP_Uncategorized,CAT_Internet Services Sentinel-Demo-DNS+DFP+DHCP (DFP) 192.168.1.201 Sentinel-Demo-DNS+DFP+DHCP us-west-1 IN #NAME? A NOERROR 0 N/A
89 846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 10/26/2021, 2:19:44.811 PM 2/11/2021, 11:42:09.794 PM Infoblox Data Connector RPZ-QNAME-NXDOMAIN DNS Response 8 1 NXDOMAIN NXDOMAIN infoblox-virtual-machine 192.168.1.90 "RPZ QNAME NXDOMAIN rewrite 796f7572205765622050726f787920697320657866696c74726174.1034.zcmt50.hex.acaddff5e4.leeandco.net. [A] via LIST_541993.796f7572205765622050726f787920697320657866696c74726174.1034.zcmt50.hex.acaddff5e4.leeandco.net." "csp.infoblox.com. 56 IN CNAME wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. csp.infoblox.com. 56 IN RRSIG CNAME 5 3 60 20211030035028 20211026032210 51153 infoblox.com. TCP 7987 9594 208.50.179.13 192.168.1.90 2.1.3 RPZ EVENT QNAME NXDOMAIN DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_541993.796f7572205765622050726f787920697320657866696c74726174.1034.zcmt50.hex.acaddff5e4.leeandco.net.;InfobloxRPZ=LIST_541993;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=90 InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;GGOUG8KYpXfmGFIh0VSI3IzjZ61XmYb849xIGN7zVVxKBKMUIVzheVsbfoM16kZgTTTs8oXTplmh6bPyjbvzS8wThIF2uXGj416MNqa1Ci0yGeWDhN6npXErWKv4IQT0K346qv1S1US0JYi4vFZY3MfQAHUiTkxeVdPRwo20KWU= csp.infoblox.com. 56 IN RRSIG CNAME 5 3 60 20211030035028 20211026032210 61272 infoblox.com.;o8tonjeIlHiWq8VQtKS6LjaX1Sjte+NHKCNzdEV5oBsipH+53DFWI0rIIUyY7DfUttCII3eTb3A7aqUXWAWmc/zKxFP1Nz34kike2mlWaMm4e0C7mtrG5JpPh+AzyoEGsLVQP6gGYvsLMIUXumt/EKbUSNJFwg3CvEaCRj5Q3Tk= wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 56 IN A 18.235.149.1 wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 56 IN A 18.233.189.178 wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 56 IN A 18.209.243.220 . 32768 4096 OPT ";InfobloxAnCount=6;InfobloxNsCount=0;InfobloxArCount=1;InfobloxB1Region=us-west-1;InfobloxB1ConnectionType=nios;InfobloxB1OPHName=Sentinel-Demo-DNS+DFP+DHCP;InfobloxB1OPHIPAddress=192.168.1.201;InfobloxB1Network=on-prem;InfobloxB1SrcOSVersion=;InfobloxB1DHCPFingerprint=;InfobloxB1DNSTags= DNS 796f7572205765622050726f787920697320657866696c74726174.1034.zcmt50.hex.acaddff5e4.leeandco.net. csp.infoblox.com. 00:50:56:0b:0f:80 CommonSecurityLog {"InfobloxDNSQClass":"IN","InfobloxDNSQType":"A","InfobloxDNSQFlags":"+EV","InfobloxDNSRCode":"NOERROR","GGOUG8KYpXfmGFIh0VSI3IzjZ61XmYb849xIGN7zVVxKBKMUIVzheVsbfoM16kZgTTTs8oXTplmh6bPyjbvzS8wThIF2uXGj416MNqa1Ci0yGeWDhN6npXErWKv4IQT0K346qv1S1US0JYi4vFZY3MfQAHUiTkxeVdPRwo20KWU":" csp.infoblox.com. 56 IN RRSIG CNAME 5 3 60 20211030035028 20211026032210 61272 infoblox.com.","o8tonjeIlHiWq8VQtKS6LjaX1Sjte+NHKCNzdEV5oBsipH+53DFWI0rIIUyY7DfUttCII3eTb3A7aqUXWAWmc/zKxFP1Nz34kike2mlWaMm4e0C7mtrG5JpPh+AzyoEGsLVQP6gGYvsLMIUXumt/EKbUSNJFwg3CvEaCRj5Q3Tk":" wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 56 IN A 18.235.149.1 wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 56 IN A 18.233.189.178 wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 56 IN A 18.209.243.220 . 32768 4096 OPT \"","InfobloxAnCount":"6","InfobloxNsCount":"0","InfobloxArCount":"1","InfobloxB1Region":"us-west-1","InfobloxB1ConnectionType":"nios","InfobloxB1OPHName":"Sentinel-Demo-DNS+DFP+DHCP","InfobloxB1OPHIPAddress":"192.168.1.201","InfobloxB1Network":"on-prem"} 6 1 nios on-prem 192.168.1.201 Sentinel-Demo-DNS+DFP+DHCP us-west-1 IN #NAME? A NOERROR 0 N/A
90 846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 10/26/2021, 2:19:44.811 PM 2/11/2021, 11:21:44.603 PM Infoblox Data Connector RPZ-QNAME-NXDOMAIN DNS Response 8 1 NXDOMAIN NXDOMAIN infoblox-virtual-machine 192.168.1.90 "RPZ QNAME NXDOMAIN rewrite 796f7572205765622050726f787920697320657866696c74726174.1034.ymil00.hex.acaddff5e4.leeandco.net. [A] via LIST_541993.796f7572205765622050726f787920697320657866696c74726174.1034.ymil00.hex.acaddff5e4.leeandco.net." "probe.infoblox.com. 0 IN TXT \"ABYZX9GLUYQUVWDQZIECEGAFF3NC89ZE\" . 32768 1232 OPT " TCP 55534 9594 208.50.179.13 192.168.1.90 2.1.3 RPZ EVENT QNAME NXDOMAIN DNS Response IN TXT NOERROR InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_541993.796f7572205765622050726f787920697320657866696c74726174.1034.ymil00.hex.acaddff5e4.leeandco.net.;InfobloxRPZ=LIST_541993;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=90 InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=TXT;InfobloxDNSQFlags=-EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1;InfobloxB1Region=us-west-1;InfobloxB1ConnectionType=dfp;InfobloxB1OPHName=Sentinel-Demo-DNS+DFP+DHCP;InfobloxB1OPHIPAddress=192.168.1.201;InfobloxB1Network=Sentinel-Demo-DNS+DFP+DHCP (DFP);InfobloxB1SrcOSVersion=;InfobloxB1DHCPFingerprint=;InfobloxB1DNSTags=APP_Uncategorized,CAT_Business,LIST_PROBE_209101 DNS 796f7572205765622050726f787920697320657866696c74726174.1034.ymil00.hex.acaddff5e4.leeandco.net. probe.infoblox.com. 00:50:56:0b:0f:80 CommonSecurityLog {"InfobloxDNSQClass":"IN","InfobloxDNSQType":"TXT","InfobloxDNSQFlags":"-EV","InfobloxDNSRCode":"NOERROR","InfobloxAnCount":"1","InfobloxNsCount":"0","InfobloxArCount":"1","InfobloxB1Region":"us-west-1","InfobloxB1ConnectionType":"dfp","InfobloxB1OPHName":"Sentinel-Demo-DNS+DFP+DHCP","InfobloxB1OPHIPAddress":"192.168.1.201","InfobloxB1Network":"Sentinel-Demo-DNS+DFP+DHCP (DFP)","InfobloxB1DNSTags":"APP_Uncategorized,CAT_Business,LIST_PROBE_209101"} 1 1 dfp APP_Uncategorized,CAT_Business,LIST_PROBE_209101 Sentinel-Demo-DNS+DFP+DHCP (DFP) 192.168.1.201 Sentinel-Demo-DNS+DFP+DHCP us-west-1 IN #NAME? TXT NOERROR 0 N/A
91 846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 10/26/2021, 2:19:45.521 PM 2/11/2021, 11:42:01.840 PM Infoblox Data Connector RPZ-QNAME-NXDOMAIN DNS Response 8 1 NXDOMAIN NXDOMAIN infoblox-virtual-machine 192.168.1.201 192.168.1.90 "RPZ QNAME NXDOMAIN rewrite 796f7520686176652061205765622050726f78792c207468656e20.936.zcmt50.hex.acaddff5e4.leeandco.net. [A] via LIST_541993.796f7520686176652061205765622050726f78792c207468656e20.936.zcmt50.hex.acaddff5e4.leeandco.net." "csp.infoblox.com. 56 IN CNAME wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 5 IN A 18.233.189.178 wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 5 IN A 18.209.243.220 wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 5 IN A 18.235.149.1 . 151279 IN NS k.root-servers.net. . 151279 IN NS a.root-servers.net. . 151279 IN NS e.root-servers.net. . 151279 IN NS b.root-servers.net. . 151279 IN NS h.root-servers.net. . 151279 IN NS d.root-servers.net. . 151279 IN NS l.root-servers.net. . 151279 IN NS f.root-servers.net. . 151279 IN NS c.root-servers.net. . 151279 IN NS i.root-servers.net. . 151279 IN NS j.root-servers.net. . 151279 IN NS m.root-servers.net. . 151279 IN NS g.root-servers.net. a.root-servers.net. 151279 IN A 198.41.0.4 b.root-servers.net. 151279 IN A 199.9.14.201 c.root-servers.net. 151279 IN A 192.33.4.12 d.root-servers.net. 151279 IN A 199.7.91.13 e.root-servers.net. 151279 IN A 192.203.230.10 f.root-servers.net. 151279 IN A 192.5.5.241 g.root-servers.net. 151279 IN A 192.112.36.4 h.root-servers.net. 151279 IN A 198.97.190.53" UDP 7987 60059 208.50.179.13 192.168.1.90 2.1.3 RPZ EVENT QNAME NXDOMAIN DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_541993.796f7520686176652061205765622050726f78792c207468656e20.936.zcmt50.hex.acaddff5e4.leeandco.net.;InfobloxRPZ=LIST_541993;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=90 InfobloxDNSView=_default;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=4;InfobloxNsCount=13;InfobloxArCount=8;InfobloxB1Region=;InfobloxB1ConnectionType=dfp;InfobloxB1OPHName=Sentinel-Demo-DNS+DFP+DHCP;InfobloxB1OPHIPAddress=192.168.1.201;InfobloxB1Network=Sentinel-Demo-DNS+DFP+DHCP (DFP);InfobloxB1SrcOSVersion=;InfobloxB1DHCPFingerprint=;InfobloxB1DNSTags= DNS 796f7520686176652061205765622050726f78792c207468656e20.936.zcmt50.hex.acaddff5e4.leeandco.net. csp.infoblox.com. 00:50:56:0b:0f:80 CommonSecurityLog {"InfobloxDNSView":"_default","InfobloxDNSQClass":"IN","InfobloxDNSQType":"A","InfobloxDNSQFlags":"+EV","InfobloxDNSRCode":"NOERROR","InfobloxAnCount":"4","InfobloxNsCount":"13","InfobloxArCount":"8","InfobloxB1ConnectionType":"dfp","InfobloxB1OPHName":"Sentinel-Demo-DNS+DFP+DHCP","InfobloxB1OPHIPAddress":"192.168.1.201","InfobloxB1Network":"Sentinel-Demo-DNS+DFP+DHCP (DFP)"} 4 8 dfp Sentinel-Demo-DNS+DFP+DHCP (DFP) 192.168.1.201 Sentinel-Demo-DNS+DFP+DHCP IN #NAME? A NOERROR _default 13 N/A
92 846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 10/26/2021, 2:19:45.521 PM 2/11/2021, 11:21:37.792 PM Infoblox Data Connector RPZ-QNAME-NXDOMAIN DNS Response 8 1 NXDOMAIN NXDOMAIN infoblox-virtual-machine 192.168.1.201 192.168.1.90 "RPZ QNAME NXDOMAIN rewrite 796f7520686176652061205765622050726f78792c207468656e20.936.ymil00.hex.acaddff5e4.leeandco.net. [A] via LIST_541993.796f7520686176652061205765622050726f78792c207468656e20.936.ymil00.hex.acaddff5e4.leeandco.net." "probe.infoblox.com. 0 IN TXT \"ABYZX9GLUYQUVWDQZIECEGAFF3NC89ZE\" . 151279 IN NS c.root-servers.net. . 151279 IN NS j.root-servers.net. . 151279 IN NS m.root-servers.net. . 151279 IN NS l.root-servers.net. . 151279 IN NS a.root-servers.net. . 151279 IN NS f.root-servers.net. . 151279 IN NS k.root-servers.net. . 151279 IN NS b.root-servers.net. . 151279 IN NS d.root-servers.net. . 151279 IN NS h.root-servers.net. . 151279 IN NS e.root-servers.net. . 151279 IN NS i.root-servers.net. . 151279 IN NS g.root-servers.net. a.root-servers.net. 151279 IN A 198.41.0.4 b.root-servers.net. 151279 IN A 199.9.14.201 c.root-servers.net. 151279 IN A 192.33.4.12 d.root-servers.net. 151279 IN A 199.7.91.13 e.root-servers.net. 151279 IN A 192.203.230.10 f.root-servers.net. 151279 IN A 192.5.5.241 g.root-servers.net. 151279 IN A 192.112.36.4 h.root-servers.net. 151279 IN A 198.97.190.53 i.root-servers.net. 151279 IN A 192.36.148.17 j.root-servers.net. 151279 IN A 192.58.128.30 k.root-servers.net. 151279 IN A 193.0.14.129 l.root-servers.net. 151279 IN A 199.7.83.42 m.root-servers.net. 151279 IN A 202.12.27.33" UDP 50593 60061 208.50.179.13 192.168.1.90 2.1.3 RPZ EVENT QNAME NXDOMAIN DNS Response IN TXT NOERROR InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_541993.796f7520686176652061205765622050726f78792c207468656e20.936.ymil00.hex.acaddff5e4.leeandco.net.;InfobloxRPZ=LIST_541993;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=90 InfobloxDNSView=_default;InfobloxDNSQClass=IN;InfobloxDNSQType=TXT;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=13;InfobloxArCount=13;InfobloxB1Region=;InfobloxB1ConnectionType=dfp;InfobloxB1OPHName=Sentinel-Demo-DNS+DFP+DHCP;InfobloxB1OPHIPAddress=192.168.1.201;InfobloxB1Network=Sentinel-Demo-DNS+DFP+DHCP (DFP);InfobloxB1SrcOSVersion=;InfobloxB1DHCPFingerprint=;InfobloxB1DNSTags= DNS 796f7520686176652061205765622050726f78792c207468656e20.936.ymil00.hex.acaddff5e4.leeandco.net. probe.infoblox.com. 00:50:56:0b:0f:80 CommonSecurityLog {"InfobloxDNSView":"_default","InfobloxDNSQClass":"IN","InfobloxDNSQType":"TXT","InfobloxDNSQFlags":"+EV","InfobloxDNSRCode":"NOERROR","InfobloxAnCount":"1","InfobloxNsCount":"13","InfobloxArCount":"13","InfobloxB1ConnectionType":"dfp","InfobloxB1OPHName":"Sentinel-Demo-DNS+DFP+DHCP","InfobloxB1OPHIPAddress":"192.168.1.201","InfobloxB1Network":"Sentinel-Demo-DNS+DFP+DHCP (DFP)"} 1 13 dfp Sentinel-Demo-DNS+DFP+DHCP (DFP) 192.168.1.201 Sentinel-Demo-DNS+DFP+DHCP IN #NAME? TXT NOERROR _default 13 N/A
93 846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 10/26/2021, 2:07:30.926 PM 2/11/2021, 11:41:51.880 PM Infoblox Data Connector RPZ-QNAME-NXDOMAIN DNS Response 8 1 NXDOMAIN NXDOMAIN infoblox-virtual-machine 192.168.1.90 "RPZ QNAME NXDOMAIN rewrite 796f7520686176652061205765622050726f78792c207468656e20.839.zcmt50.hex.acaddff5e4.leeandco.net. [A] via LIST_541993.796f7520686176652061205765622050726f78792c207468656e20.839.zcmt50.hex.acaddff5e4.leeandco.net." "us-east-1.elb.amazonaws.com. 55 IN SOA ns-1119.awsdns-11.org. awsdns-hostmaster.amazon.com. 1 7200 900 1209600 60 . 32768 4096 OPT " TCP 56540 31406 208.50.179.13 192.168.1.90 2.1.3 RPZ EVENT QNAME NXDOMAIN DNS Response IN AAAA NOERROR InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_541993.796f7520686176652061205765622050726f78792c207468656e20.839.zcmt50.hex.acaddff5e4.leeandco.net.;InfobloxRPZ=LIST_541993;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=90 InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=AAAA;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=0;InfobloxNsCount=1;InfobloxArCount=1;InfobloxB1Region=us-west-1;InfobloxB1ConnectionType=dfp;InfobloxB1OPHName=Sentinel-Demo-DNS+DFP+DHCP;InfobloxB1OPHIPAddress=192.168.1.201;InfobloxB1Network=Sentinel-Demo-DNS+DFP+DHCP (DFP);InfobloxB1SrcOSVersion=;InfobloxB1DHCPFingerprint=;InfobloxB1DNSTags=APP_Uncategorized,CAT_Internet Services DNS 796f7520686176652061205765622050726f78792c207468656e20.839.zcmt50.hex.acaddff5e4.leeandco.net. proxyserverecs-1736642167.us-east-1.elb.amazonaws.com. 00:50:56:0b:0f:80 CommonSecurityLog {"InfobloxDNSQClass":"IN","InfobloxDNSQType":"AAAA","InfobloxDNSQFlags":"+EV","InfobloxDNSRCode":"NOERROR","InfobloxAnCount":"0","InfobloxNsCount":"1","InfobloxArCount":"1","InfobloxB1Region":"us-west-1","InfobloxB1ConnectionType":"dfp","InfobloxB1OPHName":"Sentinel-Demo-DNS+DFP+DHCP","InfobloxB1OPHIPAddress":"192.168.1.201","InfobloxB1Network":"Sentinel-Demo-DNS+DFP+DHCP (DFP)","InfobloxB1DNSTags":"APP_Uncategorized,CAT_Internet Services"} 0 1 dfp APP_Uncategorized,CAT_Internet Services Sentinel-Demo-DNS+DFP+DHCP (DFP) 192.168.1.201 Sentinel-Demo-DNS+DFP+DHCP us-west-1 IN #NAME? AAAA NOERROR 1 N/A
94 846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 10/26/2021, 2:22:19.752 PM 2/11/2021, 11:21:30.175 PM Infoblox Data Connector RPZ-QNAME-NXDOMAIN DNS Response 8 1 NXDOMAIN NXDOMAIN infoblox-virtual-machine 192.168.1.90 "RPZ QNAME NXDOMAIN rewrite 796f7520686176652061205765622050726f78792c207468656e20.839.ymil00.hex.acaddff5e4.leeandco.net. [A] via LIST_541993.796f7520686176652061205765622050726f78792c207468656e20.839.ymil00.hex.acaddff5e4.leeandco.net." "client.wns.windows.com. 3137 IN CNAME wns.notify.trafficmanager.net. wns.notify.trafficmanager.net. 117 IN A 13.64.180.106 . 32768 4096 OPT " TCP 50593 45375 208.50.179.13 192.168.1.90 2.1.3 RPZ EVENT QNAME NXDOMAIN DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_541993.796f7520686176652061205765622050726f78792c207468656e20.839.ymil00.hex.acaddff5e4.leeandco.net.;InfobloxRPZ=LIST_541993;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=90 InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=2;InfobloxNsCount=0;InfobloxArCount=1;InfobloxB1Region=us-west-1;InfobloxB1ConnectionType=dfp;InfobloxB1OPHName=Sentinel-Demo-DNS+DFP+DHCP;InfobloxB1OPHIPAddress=192.168.1.201;InfobloxB1Network=Sentinel-Demo-DNS+DFP+DHCP (DFP);InfobloxB1SrcOSVersion=;InfobloxB1DHCPFingerprint=;InfobloxB1DNSTags=APP_Microsoft OneDrive,APP_Microsoft Sharepoint,APP_Uncategorized,CAT_Business,CAT_Internet Services,CAT_Software/Hardware DNS 796f7520686176652061205765622050726f78792c207468656e20.839.ymil00.hex.acaddff5e4.leeandco.net. client.wns.windows.com. 00:50:56:0b:0f:80 CommonSecurityLog {"InfobloxDNSQClass":"IN","InfobloxDNSQType":"A","InfobloxDNSQFlags":"+EV","InfobloxDNSRCode":"NOERROR","InfobloxAnCount":"2","InfobloxNsCount":"0","InfobloxArCount":"1","InfobloxB1Region":"us-west-1","InfobloxB1ConnectionType":"dfp","InfobloxB1OPHName":"Sentinel-Demo-DNS+DFP+DHCP","InfobloxB1OPHIPAddress":"192.168.1.201","InfobloxB1Network":"Sentinel-Demo-DNS+DFP+DHCP (DFP)","InfobloxB1DNSTags":"APP_Microsoft OneDrive,APP_Microsoft Sharepoint,APP_Uncategorized,CAT_Business,CAT_Internet Services,CAT_Software/Hardware"} 2 1 dfp APP_Microsoft OneDrive,APP_Microsoft Sharepoint,APP_Uncategorized,CAT_Business,CAT_Internet Services,CAT_Software/Hardware Sentinel-Demo-DNS+DFP+DHCP (DFP) 192.168.1.201 Sentinel-Demo-DNS+DFP+DHCP us-west-1 IN #NAME? A NOERROR 0 N/A
95 846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 10/26/2021, 2:22:30.651 PM 2/11/2021, 11:41:24.046 PM Infoblox Data Connector RPZ-QNAME-NXDOMAIN DNS Response 8 1 NXDOMAIN NXDOMAIN infoblox-virtual-machine 192.168.1.90 "RPZ QNAME NXDOMAIN rewrite 796f7520686176652061205765622050726f78792c207468656e20.742.zcmt50.hex.acaddff5e4.leeandco.net. [A] via LIST_541993.796f7520686176652061205765622050726f78792c207468656e20.742.zcmt50.hex.acaddff5e4.leeandco.net." "getpocket-cdn.prod.mozaws.net. 138 IN CNAME prod.pocket.prod.cloudops.mozgcp.net. prod.pocket.prod.cloudops.mozgcp.net. 426 IN A 34.120.5.221 . 32768 4096 OPT " TCP 56540 45709 208.50.179.13 192.168.1.90 2.1.3 RPZ EVENT QNAME NXDOMAIN DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_541993.796f7520686176652061205765622050726f78792c207468656e20.742.zcmt50.hex.acaddff5e4.leeandco.net.;InfobloxRPZ=LIST_541993;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=90 InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=2;InfobloxNsCount=0;InfobloxArCount=1;InfobloxB1Region=us-west-1;InfobloxB1ConnectionType=dfp;InfobloxB1OPHName=Sentinel-Demo-DNS+DFP+DHCP;InfobloxB1OPHIPAddress=192.168.1.201;InfobloxB1Network=Sentinel-Demo-DNS+DFP+DHCP (DFP);InfobloxB1SrcOSVersion=;InfobloxB1DHCPFingerprint=;InfobloxB1DNSTags=APP_Uncategorized,CAT_Business,CAT_Internet Services,CAT_Software/Hardware DNS 796f7520686176652061205765622050726f78792c207468656e20.742.zcmt50.hex.acaddff5e4.leeandco.net. getpocket-cdn.prod.mozaws.net. 00:50:56:0b:0f:80 CommonSecurityLog {"InfobloxDNSQClass":"IN","InfobloxDNSQType":"A","InfobloxDNSQFlags":"+EV","InfobloxDNSRCode":"NOERROR","InfobloxAnCount":"2","InfobloxNsCount":"0","InfobloxArCount":"1","InfobloxB1Region":"us-west-1","InfobloxB1ConnectionType":"dfp","InfobloxB1OPHName":"Sentinel-Demo-DNS+DFP+DHCP","InfobloxB1OPHIPAddress":"192.168.1.201","InfobloxB1Network":"Sentinel-Demo-DNS+DFP+DHCP (DFP)","InfobloxB1DNSTags":"APP_Uncategorized,CAT_Business,CAT_Internet Services,CAT_Software/Hardware"} 2 1 dfp APP_Uncategorized,CAT_Business,CAT_Internet Services,CAT_Software/Hardware Sentinel-Demo-DNS+DFP+DHCP (DFP) 192.168.1.201 Sentinel-Demo-DNS+DFP+DHCP us-west-1 IN #NAME? A NOERROR 0 N/A
96 846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 10/26/2021, 2:22:30.651 PM 2/11/2021, 11:21:22.607 PM Infoblox Data Connector RPZ-QNAME-NXDOMAIN DNS Response 8 1 NXDOMAIN NXDOMAIN infoblox-virtual-machine 192.168.1.90 "RPZ QNAME NXDOMAIN rewrite 796f7520686176652061205765622050726f78792c207468656e20.742.ymil00.hex.acaddff5e4.leeandco.net. [A] via LIST_541993.796f7520686176652061205765622050726f78792c207468656e20.742.ymil00.hex.acaddff5e4.leeandco.net." "getpocket.cdn.mozilla.net. 60 IN CNAME getpocket-cdn.prod.mozaws.net. getpocket-cdn.prod.mozaws.net. 150 IN CNAME prod.pocket.prod.cloudops.mozgcp.net. prod.pocket.prod.cloudops.mozgcp.net. 408 IN A 34.120.5.221 . 32768 4096 OPT " TCP 50593 45709 208.50.179.13 192.168.1.90 2.1.3 RPZ EVENT QNAME NXDOMAIN DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_541993.796f7520686176652061205765622050726f78792c207468656e20.742.ymil00.hex.acaddff5e4.leeandco.net.;InfobloxRPZ=LIST_541993;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=90 InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=3;InfobloxNsCount=0;InfobloxArCount=1;InfobloxB1Region=us-west-1;InfobloxB1ConnectionType=dfp;InfobloxB1OPHName=Sentinel-Demo-DNS+DFP+DHCP;InfobloxB1OPHIPAddress=192.168.1.201;InfobloxB1Network=Sentinel-Demo-DNS+DFP+DHCP (DFP);InfobloxB1SrcOSVersion=;InfobloxB1DHCPFingerprint=;InfobloxB1DNSTags=APP_Uncategorized,CAT_Business,CAT_Internet Services,CAT_Software/Hardware DNS 796f7520686176652061205765622050726f78792c207468656e20.742.ymil00.hex.acaddff5e4.leeandco.net. getpocket.cdn.mozilla.net. 00:50:56:0b:0f:80 CommonSecurityLog {"InfobloxDNSQClass":"IN","InfobloxDNSQType":"A","InfobloxDNSQFlags":"+EV","InfobloxDNSRCode":"NOERROR","InfobloxAnCount":"3","InfobloxNsCount":"0","InfobloxArCount":"1","InfobloxB1Region":"us-west-1","InfobloxB1ConnectionType":"dfp","InfobloxB1OPHName":"Sentinel-Demo-DNS+DFP+DHCP","InfobloxB1OPHIPAddress":"192.168.1.201","InfobloxB1Network":"Sentinel-Demo-DNS+DFP+DHCP (DFP)","InfobloxB1DNSTags":"APP_Uncategorized,CAT_Business,CAT_Internet Services,CAT_Software/Hardware"} 3 1 dfp APP_Uncategorized,CAT_Business,CAT_Internet Services,CAT_Software/Hardware Sentinel-Demo-DNS+DFP+DHCP (DFP) 192.168.1.201 Sentinel-Demo-DNS+DFP+DHCP us-west-1 IN #NAME? A NOERROR 0 N/A
97 846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 10/26/2021, 2:23:18.430 PM 2/11/2021, 11:41:27.050 PM Infoblox Data Connector RPZ-QNAME-NXDOMAIN DNS Response 8 1 NXDOMAIN NXDOMAIN infoblox-virtual-machine 192.168.1.90 "RPZ QNAME NXDOMAIN rewrite 796f7520686176652061205765622050726f78792c207468656e20.645.zcmt50.hex.acaddff5e4.leeandco.net. [A] via LIST_541993.796f7520686176652061205765622050726f78792c207468656e20.645.zcmt50.hex.acaddff5e4.leeandco.net." "settings-win.data.microsoft.com. 3044 IN CNAME settingsfd-geo.trafficmanager.net. settingsfd-geo.trafficmanager.net. 60 IN A 52.183.220.149 . 32768 4096 OPT " TCP 46369 56678 208.50.179.13 192.168.1.90 2.1.3 RPZ EVENT QNAME NXDOMAIN DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_541993.796f7520686176652061205765622050726f78792c207468656e20.645.zcmt50.hex.acaddff5e4.leeandco.net.;InfobloxRPZ=LIST_541993;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=90 InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=2;InfobloxNsCount=0;InfobloxArCount=1;InfobloxB1Region=us-west-1;InfobloxB1ConnectionType=dfp;InfobloxB1OPHName=Sentinel-Demo-DNS+DFP+DHCP;InfobloxB1OPHIPAddress=192.168.1.201;InfobloxB1Network=Sentinel-Demo-DNS+DFP+DHCP (DFP);InfobloxB1SrcOSVersion=;InfobloxB1DHCPFingerprint=;InfobloxB1DNSTags=APP_Uncategorized,CAT_Business,CAT_Internet Services,CAT_Software/Hardware DNS 796f7520686176652061205765622050726f78792c207468656e20.645.zcmt50.hex.acaddff5e4.leeandco.net. settings-win.data.microsoft.com. 00:50:56:0b:0f:80 CommonSecurityLog {"InfobloxDNSQClass":"IN","InfobloxDNSQType":"A","InfobloxDNSQFlags":"+EV","InfobloxDNSRCode":"NOERROR","InfobloxAnCount":"2","InfobloxNsCount":"0","InfobloxArCount":"1","InfobloxB1Region":"us-west-1","InfobloxB1ConnectionType":"dfp","InfobloxB1OPHName":"Sentinel-Demo-DNS+DFP+DHCP","InfobloxB1OPHIPAddress":"192.168.1.201","InfobloxB1Network":"Sentinel-Demo-DNS+DFP+DHCP (DFP)","InfobloxB1DNSTags":"APP_Uncategorized,CAT_Business,CAT_Internet Services,CAT_Software/Hardware"} 2 1 dfp APP_Uncategorized,CAT_Business,CAT_Internet Services,CAT_Software/Hardware Sentinel-Demo-DNS+DFP+DHCP (DFP) 192.168.1.201 Sentinel-Demo-DNS+DFP+DHCP us-west-1 IN #NAME? A NOERROR 0 N/A
98 846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 10/26/2021, 2:23:18.431 PM 2/11/2021, 11:21:07.637 PM Infoblox Data Connector RPZ-QNAME-NXDOMAIN DNS Response 8 1 NXDOMAIN NXDOMAIN infoblox-virtual-machine 192.168.1.90 "RPZ QNAME NXDOMAIN rewrite 796f7520686176652061205765622050726f78792c207468656e20.645.ymil00.hex.acaddff5e4.leeandco.net. [A] via LIST_541993.796f7520686176652061205765622050726f78792c207468656e20.645.ymil00.hex.acaddff5e4.leeandco.net." "settingsfd-geo.trafficmanager.net. 12 IN A 52.185.211.133 . 32768 4096 OPT " TCP 50593 56678 208.50.179.13 192.168.1.90 2.1.3 RPZ EVENT QNAME NXDOMAIN DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_541993.796f7520686176652061205765622050726f78792c207468656e20.645.ymil00.hex.acaddff5e4.leeandco.net.;InfobloxRPZ=LIST_541993;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=90 InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1;InfobloxB1Region=us-west-1;InfobloxB1ConnectionType=dfp;InfobloxB1OPHName=Sentinel-Demo-DNS+DFP+DHCP;InfobloxB1OPHIPAddress=192.168.1.201;InfobloxB1Network=Sentinel-Demo-DNS+DFP+DHCP (DFP);InfobloxB1SrcOSVersion=;InfobloxB1DHCPFingerprint=;InfobloxB1DNSTags=APP_Uncategorized,CAT_Internet Services DNS 796f7520686176652061205765622050726f78792c207468656e20.645.ymil00.hex.acaddff5e4.leeandco.net. settingsfd-geo.trafficmanager.net. 00:50:56:0b:0f:80 CommonSecurityLog {"InfobloxDNSQClass":"IN","InfobloxDNSQType":"A","InfobloxDNSQFlags":"+EV","InfobloxDNSRCode":"NOERROR","InfobloxAnCount":"1","InfobloxNsCount":"0","InfobloxArCount":"1","InfobloxB1Region":"us-west-1","InfobloxB1ConnectionType":"dfp","InfobloxB1OPHName":"Sentinel-Demo-DNS+DFP+DHCP","InfobloxB1OPHIPAddress":"192.168.1.201","InfobloxB1Network":"Sentinel-Demo-DNS+DFP+DHCP (DFP)","InfobloxB1DNSTags":"APP_Uncategorized,CAT_Internet Services"} 1 1 dfp APP_Uncategorized,CAT_Internet Services Sentinel-Demo-DNS+DFP+DHCP (DFP) 192.168.1.201 Sentinel-Demo-DNS+DFP+DHCP us-west-1 IN #NAME? A NOERROR 0 N/A
99 846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 10/26/2021, 2:23:31.083 PM 2/11/2021, 11:41:09.308 PM Infoblox Data Connector RPZ-QNAME-NXDOMAIN DNS Response 8 1 NXDOMAIN NXDOMAIN infoblox-virtual-machine 192.168.1.201 192.168.1.90 "RPZ QNAME NXDOMAIN rewrite 796f7520686176652061205765622050726f78792c207468656e20.548.zcmt50.hex.acaddff5e4.leeandco.net. [A] via LIST_541993.796f7520686176652061205765622050726f78792c207468656e20.548.zcmt50.hex.acaddff5e4.leeandco.net." "wpad.tme.infoblox.com. 3600 IN A 208.50.179.11 . 151052 IN NS g.root-servers.net. . 151052 IN NS m.root-servers.net. . 151052 IN NS j.root-servers.net. . 151052 IN NS i.root-servers.net. . 151052 IN NS c.root-servers.net. . 151052 IN NS b.root-servers.net. . 151052 IN NS l.root-servers.net. . 151052 IN NS f.root-servers.net. . 151052 IN NS d.root-servers.net. . 151052 IN NS h.root-servers.net. . 151052 IN NS e.root-servers.net. . 151052 IN NS k.root-servers.net. . 151052 IN NS a.root-servers.net. a.root-servers.net. 151052 IN A 198.41.0.4 b.root-servers.net. 151052 IN A 199.9.14.201 c.root-servers.net. 151052 IN A 192.33.4.12 d.root-servers.net. 151052 IN A 199.7.91.13 e.root-servers.net. 151052 IN A 192.203.230.10 f.root-servers.net. 151052 IN A 192.5.5.241 g.root-servers.net. 151052 IN A 192.112.36.4 h.root-servers.net. 151052 IN A 198.97.190.53 i.root-servers.net. 151052 IN A 192.36.148.17 j.root-servers.net. 151052 IN A 192.58.128.30 k.root-servers.net. 151052 IN A 193.0.14.129 l.root-servers.net. 151052 IN A 199.7.83.42 m.root-servers.net. 151052 IN A 202.12.27.33" UDP 58534 64479 208.50.179.13 192.168.1.90 2.1.3 RPZ EVENT QNAME NXDOMAIN DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_541993.796f7520686176652061205765622050726f78792c207468656e20.548.zcmt50.hex.acaddff5e4.leeandco.net.;InfobloxRPZ=LIST_541993;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=90 InfobloxDNSView=_default;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=13;InfobloxArCount=13;InfobloxB1Region=;InfobloxB1ConnectionType=dfp;InfobloxB1OPHName=Sentinel-Demo-DNS+DFP+DHCP;InfobloxB1OPHIPAddress=192.168.1.201;InfobloxB1Network=Sentinel-Demo-DNS+DFP+DHCP (DFP);InfobloxB1SrcOSVersion=;InfobloxB1DHCPFingerprint=;InfobloxB1DNSTags= DNS 796f7520686176652061205765622050726f78792c207468656e20.548.zcmt50.hex.acaddff5e4.leeandco.net. wpad.tme.infoblox.com. 00:50:56:0b:0f:80 CommonSecurityLog {"InfobloxDNSView":"_default","InfobloxDNSQClass":"IN","InfobloxDNSQType":"A","InfobloxDNSQFlags":"+EV","InfobloxDNSRCode":"NOERROR","InfobloxAnCount":"1","InfobloxNsCount":"13","InfobloxArCount":"13","InfobloxB1ConnectionType":"dfp","InfobloxB1OPHName":"Sentinel-Demo-DNS+DFP+DHCP","InfobloxB1OPHIPAddress":"192.168.1.201","InfobloxB1Network":"Sentinel-Demo-DNS+DFP+DHCP (DFP)"} 1 13 dfp Sentinel-Demo-DNS+DFP+DHCP (DFP) 192.168.1.201 Sentinel-Demo-DNS+DFP+DHCP IN #NAME? A NOERROR _default 13 N/A
100 846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 10/26/2021, 2:23:31.083 PM 2/11/2021, 11:21:00.469 PM Infoblox Data Connector RPZ-QNAME-NXDOMAIN DNS Response 8 1 NXDOMAIN NXDOMAIN infoblox-virtual-machine 192.168.1.201 192.168.1.90 "RPZ QNAME NXDOMAIN rewrite 796f7520686176652061205765622050726f78792c207468656e20.548.ymil00.hex.acaddff5e4.leeandco.net. [A] via LIST_541993.796f7520686176652061205765622050726f78792c207468656e20.548.ymil00.hex.acaddff5e4.leeandco.net." "wpad.tme.infoblox.com. 3600 IN A 208.50.179.11 . 151052 IN NS h.root-servers.net. . 151052 IN NS b.root-servers.net. . 151052 IN NS d.root-servers.net. . 151052 IN NS c.root-servers.net. . 151052 IN NS a.root-servers.net. . 151052 IN NS f.root-servers.net. . 151052 IN NS e.root-servers.net. . 151052 IN NS g.root-servers.net. . 151052 IN NS i.root-servers.net. . 151052 IN NS j.root-servers.net. . 151052 IN NS k.root-servers.net. . 151052 IN NS l.root-servers.net. . 151052 IN NS m.root-servers.net. a.root-servers.net. 151052 IN A 198.41.0.4 b.root-servers.net. 151052 IN A 199.9.14.201 c.root-servers.net. 151052 IN A 192.33.4.12 d.root-servers.net. 151052 IN A 199.7.91.13 e.root-servers.net. 151052 IN A 192.203.230.10 f.root-servers.net. 151052 IN A 192.5.5.241 g.root-servers.net. 151052 IN A 192.112.36.4 h.root-servers.net. 151052 IN A 198.97.190.53 i.root-servers.net. 151052 IN A 192.36.148.17 j.root-servers.net. 151052 IN A 192.58.128.30 k.root-servers.net. 151052 IN A 193.0.14.129 l.root-servers.net. 151052 IN A 199.7.83.42 m.root-servers.net. 151052 IN A 202.12.27.33" UDP 50593 53312 208.50.179.13 192.168.1.90 2.1.3 RPZ EVENT QNAME NXDOMAIN DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_541993.796f7520686176652061205765622050726f78792c207468656e20.548.ymil00.hex.acaddff5e4.leeandco.net.;InfobloxRPZ=LIST_541993;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=90 InfobloxDNSView=_default;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=13;InfobloxArCount=13;InfobloxB1Region=;InfobloxB1ConnectionType=dfp;InfobloxB1OPHName=Sentinel-Demo-DNS+DFP+DHCP;InfobloxB1OPHIPAddress=192.168.1.201;InfobloxB1Network=Sentinel-Demo-DNS+DFP+DHCP (DFP);InfobloxB1SrcOSVersion=;InfobloxB1DHCPFingerprint=;InfobloxB1DNSTags= DNS 796f7520686176652061205765622050726f78792c207468656e20.548.ymil00.hex.acaddff5e4.leeandco.net. wpad.tme.infoblox.com. 00:50:56:0b:0f:80 CommonSecurityLog {"InfobloxDNSView":"_default","InfobloxDNSQClass":"IN","InfobloxDNSQType":"A","InfobloxDNSQFlags":"+EV","InfobloxDNSRCode":"NOERROR","InfobloxAnCount":"1","InfobloxNsCount":"13","InfobloxArCount":"13","InfobloxB1ConnectionType":"dfp","InfobloxB1OPHName":"Sentinel-Demo-DNS+DFP+DHCP","InfobloxB1OPHIPAddress":"192.168.1.201","InfobloxB1Network":"Sentinel-Demo-DNS+DFP+DHCP (DFP)"} 1 13 dfp Sentinel-Demo-DNS+DFP+DHCP (DFP) 192.168.1.201 Sentinel-Demo-DNS+DFP+DHCP IN #NAME? A NOERROR _default 13 N/A
101 846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 10/26/2021, 2:23:31.796 PM 2/11/2021, 11:20:44.649 PM Infoblox Data Connector RPZ-QNAME-NXDOMAIN DNS Response 8 1 NXDOMAIN NXDOMAIN infoblox-virtual-machine 192.168.1.90 "RPZ QNAME NXDOMAIN rewrite 796f7520686176652061205765622050726f78792c207468656e20.451.ymil00.hex.acaddff5e4.leeandco.net. [A] via LIST_541993.796f7520686176652061205765622050726f78792c207468656e20.451.ymil00.hex.acaddff5e4.leeandco.net." "wpad.tme.infoblox.com. 3600 IN A 208.50.179.11 wpad.tme.infoblox.com. 3600 IN RRSIG A 5 3 3600 20211030154037 20211026150411 51153 infoblox.com. TCP 50593 32362 208.50.179.13 192.168.1.90 2.1.3 RPZ EVENT QNAME NXDOMAIN DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_541993.796f7520686176652061205765622050726f78792c207468656e20.451.ymil00.hex.acaddff5e4.leeandco.net.;InfobloxRPZ=LIST_541993;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=90 InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;deK3G8Hhy9bQOPz6n6mMVIlaJdEAatYhwbXfibTZuIuY74PlFO17RyIWVDhaJkrefwIM/P9TQowFwW3JVkZpOUypw8zd52IKTBVn+RxNDl6Wni/zLMVVAtH99pAwEO01ECUn+FG29UENtB8Lh7wO6IEPOu8f/aCizTleCyQOA0M= wpad.tme.infoblox.com. 3600 IN RRSIG A 5 3 3600 20211030154037 20211026150411 61272 infoblox.com.;hK/Hr0rTxawCuZvr79g2vMNXrRe2umJJqSwEZU7SlUjN4BVmOZDIRgxuGm1byfYCb9RMmUvNWjxVi+rWjqJ9F5onfjTyEf5ku2WVBZNTQnJ57ZJD3MbGZ22fESGnGXN1wrkL9dzG2wok5P0cDUvBRqrdXlG1WtidBboSjnhwNv0= *.tme.infoblox.com. 3600 IN NSEC tp-poc-public.infoblox.com. A RRSIG NSEC *.tme.infoblox.com. 3600 IN RRSIG NSEC 5 3 3600 20211030185629 20211026182505 51153 infoblox.com.;eLW679sybatWWu0B2ECKiwJi9lCBAqg6qCkG49BB2DM93kl88osn/e2wQHl9ekQ1ytCBsrGjsdDIxCPD2yCOFkEEJKUVR58Ns4YJH5Hs6UGWfhoJLV1LmVIohiJpqVOPQP8ix5l6f5GE5Arr5o/C/SzrtgXsXcU+td7tlqjOYbI= *.tme.infoblox.com. 3600 IN RRSIG NSEC 5 3 3600 20211030185629 20211026182505 61272 infoblox.com.;gRAX8zN/IhEXg3j5s/YJBnXMsYOqTvhDvPrm/hz60OYdNHW9/oT3zXqAD6cnifPRuO543glUSyRqbUlgiCtSR5B/nwlPfavWWGuPZ0OcMUfZvgpGxSVvuAUCBUcyTzBb62PBAcVM7ELWRxlSNMdJA2RsI5HoiaVM1Jsurn/AmRY= . 32768 4096 OPT ";InfobloxAnCount=3;InfobloxNsCount=3;InfobloxArCount=1;InfobloxB1Region=us-west-1;InfobloxB1ConnectionType=nios;InfobloxB1OPHName=Sentinel-Demo-DNS+DFP+DHCP;InfobloxB1OPHIPAddress=192.168.1.201;InfobloxB1Network=on-prem;InfobloxB1SrcOSVersion=;InfobloxB1DHCPFingerprint=;InfobloxB1DNSTags= DNS 796f7520686176652061205765622050726f78792c207468656e20.451.ymil00.hex.acaddff5e4.leeandco.net. wpad.tme.infoblox.com. 00:50:56:0b:0f:80 CommonSecurityLog {"InfobloxDNSQClass":"IN","InfobloxDNSQType":"A","InfobloxDNSQFlags":"+EV","InfobloxDNSRCode":"NOERROR","deK3G8Hhy9bQOPz6n6mMVIlaJdEAatYhwbXfibTZuIuY74PlFO17RyIWVDhaJkrefwIM/P9TQowFwW3JVkZpOUypw8zd52IKTBVn+RxNDl6Wni/zLMVVAtH99pAwEO01ECUn+FG29UENtB8Lh7wO6IEPOu8f/aCizTleCyQOA0M":" wpad.tme.infoblox.com. 3600 IN RRSIG A 5 3 3600 20211030154037 20211026150411 61272 infoblox.com.","hK/Hr0rTxawCuZvr79g2vMNXrRe2umJJqSwEZU7SlUjN4BVmOZDIRgxuGm1byfYCb9RMmUvNWjxVi+rWjqJ9F5onfjTyEf5ku2WVBZNTQnJ57ZJD3MbGZ22fESGnGXN1wrkL9dzG2wok5P0cDUvBRqrdXlG1WtidBboSjnhwNv0":" *.tme.infoblox.com. 3600 IN NSEC tp-poc-public.infoblox.com. A RRSIG NSEC *.tme.infoblox.com. 3600 IN RRSIG NSEC 5 3 3600 20211030185629 20211026182505 51153 infoblox.com.","eLW679sybatWWu0B2ECKiwJi9lCBAqg6qCkG49BB2DM93kl88osn/e2wQHl9ekQ1ytCBsrGjsdDIxCPD2yCOFkEEJKUVR58Ns4YJH5Hs6UGWfhoJLV1LmVIohiJpqVOPQP8ix5l6f5GE5Arr5o/C/SzrtgXsXcU+td7tlqjOYbI":" *.tme.infoblox.com. 3600 IN RRSIG NSEC 5 3 3600 20211030185629 20211026182505 61272 infoblox.com.","gRAX8zN/IhEXg3j5s/YJBnXMsYOqTvhDvPrm/hz60OYdNHW9/oT3zXqAD6cnifPRuO543glUSyRqbUlgiCtSR5B/nwlPfavWWGuPZ0OcMUfZvgpGxSVvuAUCBUcyTzBb62PBAcVM7ELWRxlSNMdJA2RsI5HoiaVM1Jsurn/AmRY":" . 32768 4096 OPT \"","InfobloxAnCount":"3","InfobloxNsCount":"3","InfobloxArCount":"1","InfobloxB1Region":"us-west-1","InfobloxB1ConnectionType":"nios","InfobloxB1OPHName":"Sentinel-Demo-DNS+DFP+DHCP","InfobloxB1OPHIPAddress":"192.168.1.201","InfobloxB1Network":"on-prem"} 3 1 nios on-prem 192.168.1.201 Sentinel-Demo-DNS+DFP+DHCP us-west-1 IN #NAME? A NOERROR 3 N/A
102 846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 10/26/2021, 2:23:58.392 PM 2/11/2021, 11:20:36.902 PM Infoblox Data Connector RPZ-QNAME-NXDOMAIN DNS Response 8 1 NXDOMAIN NXDOMAIN infoblox-virtual-machine 192.168.1.90 "RPZ QNAME NXDOMAIN rewrite 796f7520686176652061205765622050726f78792c207468656e20.354.ymil00.hex.acaddff5e4.leeandco.net. [A] via LIST_541993.796f7520686176652061205765622050726f78792c207468656e20.354.ymil00.hex.acaddff5e4.leeandco.net." "global.asimov.events.data.trafficmanager.net. 57 IN CNAME onedscolprdcus01.centralus.cloudapp.azure.com. onedscolprdcus01.centralus.cloudapp.azure.com. 7 IN A 52.182.141.63 . 32768 4096 OPT " TCP 50593 3130 208.50.179.13 192.168.1.90 2.1.3 RPZ EVENT QNAME NXDOMAIN DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_541993.796f7520686176652061205765622050726f78792c207468656e20.354.ymil00.hex.acaddff5e4.leeandco.net.;InfobloxRPZ=LIST_541993;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=90 InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=2;InfobloxNsCount=0;InfobloxArCount=1;InfobloxB1Region=us-west-1;InfobloxB1ConnectionType=dfp;InfobloxB1OPHName=Sentinel-Demo-DNS+DFP+DHCP;InfobloxB1OPHIPAddress=192.168.1.201;InfobloxB1Network=Sentinel-Demo-DNS+DFP+DHCP (DFP);InfobloxB1SrcOSVersion=;InfobloxB1DHCPFingerprint=;InfobloxB1DNSTags=APP_Uncategorized,CAT_Internet Services DNS 796f7520686176652061205765622050726f78792c207468656e20.354.ymil00.hex.acaddff5e4.leeandco.net. global.asimov.events.data.trafficmanager.net. 00:50:56:0b:0f:80 CommonSecurityLog {"InfobloxDNSQClass":"IN","InfobloxDNSQType":"A","InfobloxDNSQFlags":"+EV","InfobloxDNSRCode":"NOERROR","InfobloxAnCount":"2","InfobloxNsCount":"0","InfobloxArCount":"1","InfobloxB1Region":"us-west-1","InfobloxB1ConnectionType":"dfp","InfobloxB1OPHName":"Sentinel-Demo-DNS+DFP+DHCP","InfobloxB1OPHIPAddress":"192.168.1.201","InfobloxB1Network":"Sentinel-Demo-DNS+DFP+DHCP (DFP)","InfobloxB1DNSTags":"APP_Uncategorized,CAT_Internet Services"} 2 1 dfp APP_Uncategorized,CAT_Internet Services Sentinel-Demo-DNS+DFP+DHCP (DFP) 192.168.1.201 Sentinel-Demo-DNS+DFP+DHCP us-west-1 IN #NAME? A NOERROR 0 N/A
103 846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 10/26/2021, 2:23:58.392 PM 2/11/2021, 11:24:49.110 PM Infoblox Data Connector RPZ-QNAME-NXDOMAIN DNS Response 8 1 NXDOMAIN NXDOMAIN infoblox-virtual-machine 192.168.1.90 "RPZ QNAME NXDOMAIN rewrite 796f7520686176652061205765622050726f78792c207468656e20.2682.ymil00.hex.acaddff5e4.leeandco.net. [A] via LIST_541993.796f7520686176652061205765622050726f78792c207468656e20.2682.ymil00.hex.acaddff5e4.leeandco.net." "v10.events.data.microsoft.com. 2997 IN CNAME global.asimov.events.data.trafficmanager.net. global.asimov.events.data.trafficmanager.net. 56 IN CNAME onedscolprdneu01.northeurope.cloudapp.azure.com. onedscolprdneu01.northeurope.cloudapp.azure.com. 6 IN A 20.50.73.9 . 32768 4096 OPT " TCP 53819 3130 208.50.179.13 192.168.1.90 2.1.3 RPZ EVENT QNAME NXDOMAIN DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_541993.796f7520686176652061205765622050726f78792c207468656e20.2682.ymil00.hex.acaddff5e4.leeandco.net.;InfobloxRPZ=LIST_541993;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=90 InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=3;InfobloxNsCount=0;InfobloxArCount=1;InfobloxB1Region=us-west-1;InfobloxB1ConnectionType=dfp;InfobloxB1OPHName=Sentinel-Demo-DNS+DFP+DHCP;InfobloxB1OPHIPAddress=192.168.1.201;InfobloxB1Network=Sentinel-Demo-DNS+DFP+DHCP (DFP);InfobloxB1SrcOSVersion=;InfobloxB1DHCPFingerprint=;InfobloxB1DNSTags=APP_Microsoft 365,APP_Uncategorized,CAT_Business,CAT_Internet Services,CAT_Software/Hardware DNS 796f7520686176652061205765622050726f78792c207468656e20.2682.ymil00.hex.acaddff5e4.leeandco.net. v10.events.data.microsoft.com. 00:50:56:0b:0f:80 CommonSecurityLog {"InfobloxDNSQClass":"IN","InfobloxDNSQType":"A","InfobloxDNSQFlags":"+EV","InfobloxDNSRCode":"NOERROR","InfobloxAnCount":"3","InfobloxNsCount":"0","InfobloxArCount":"1","InfobloxB1Region":"us-west-1","InfobloxB1ConnectionType":"dfp","InfobloxB1OPHName":"Sentinel-Demo-DNS+DFP+DHCP","InfobloxB1OPHIPAddress":"192.168.1.201","InfobloxB1Network":"Sentinel-Demo-DNS+DFP+DHCP (DFP)","InfobloxB1DNSTags":"APP_Microsoft 365,APP_Uncategorized,CAT_Business,CAT_Internet Services,CAT_Software/Hardware"} 3 1 dfp APP_Microsoft 365,APP_Uncategorized,CAT_Business,CAT_Internet Services,CAT_Software/Hardware Sentinel-Demo-DNS+DFP+DHCP (DFP) 192.168.1.201 Sentinel-Demo-DNS+DFP+DHCP us-west-1 IN #NAME? A NOERROR 0 N/A
104 846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 10/26/2021, 2:23:58.392 PM 2/11/2021, 11:24:40.102 PM Infoblox Data Connector RPZ-QNAME-NXDOMAIN DNS Response 8 1 NXDOMAIN NXDOMAIN infoblox-virtual-machine 192.168.1.90 "RPZ QNAME NXDOMAIN rewrite 796f7520686176652061205765622050726f78792c207468656e20.2585.ymil00.hex.acaddff5e4.leeandco.net. [A] via LIST_541993.796f7520686176652061205765622050726f78792c207468656e20.2585.ymil00.hex.acaddff5e4.leeandco.net." "onedscolprdcus01.centralus.cloudapp.azure.com. 9 IN A 52.182.141.63 . 32768 4096 OPT " TCP 53819 3130 208.50.179.13 192.168.1.90 2.1.3 RPZ EVENT QNAME NXDOMAIN DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_541993.796f7520686176652061205765622050726f78792c207468656e20.2585.ymil00.hex.acaddff5e4.leeandco.net.;InfobloxRPZ=LIST_541993;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=90 InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1;InfobloxB1Region=us-west-1;InfobloxB1ConnectionType=dfp;InfobloxB1OPHName=Sentinel-Demo-DNS+DFP+DHCP;InfobloxB1OPHIPAddress=192.168.1.201;InfobloxB1Network=Sentinel-Demo-DNS+DFP+DHCP (DFP);InfobloxB1SrcOSVersion=;InfobloxB1DHCPFingerprint=;InfobloxB1DNSTags=APP_Uncategorized,CAT_Internet Services DNS 796f7520686176652061205765622050726f78792c207468656e20.2585.ymil00.hex.acaddff5e4.leeandco.net. onedscolprdcus01.centralus.cloudapp.azure.com. 00:50:56:0b:0f:80 CommonSecurityLog {"InfobloxDNSQClass":"IN","InfobloxDNSQType":"A","InfobloxDNSQFlags":"+EV","InfobloxDNSRCode":"NOERROR","InfobloxAnCount":"1","InfobloxNsCount":"0","InfobloxArCount":"1","InfobloxB1Region":"us-west-1","InfobloxB1ConnectionType":"dfp","InfobloxB1OPHName":"Sentinel-Demo-DNS+DFP+DHCP","InfobloxB1OPHIPAddress":"192.168.1.201","InfobloxB1Network":"Sentinel-Demo-DNS+DFP+DHCP (DFP)","InfobloxB1DNSTags":"APP_Uncategorized,CAT_Internet Services"} 1 1 dfp APP_Uncategorized,CAT_Internet Services Sentinel-Demo-DNS+DFP+DHCP (DFP) 192.168.1.201 Sentinel-Demo-DNS+DFP+DHCP us-west-1 IN #NAME? A NOERROR 0 N/A
105 846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 10/26/2021, 2:28:40.485 PM 2/11/2021, 11:24:30.802 PM Infoblox Data Connector RPZ-QNAME-NXDOMAIN DNS Response 8 1 NXDOMAIN NXDOMAIN infoblox-virtual-machine 192.168.1.106 "RPZ QNAME NXDOMAIN rewrite 796f7520686176652061205765622050726f78792c207468656e20.2488.ymil00.hex.acaddff5e4.leeandco.net. [A] via LIST_541993.796f7520686176652061205765622050726f78792c207468656e20.2488.ymil00.hex.acaddff5e4.leeandco.net." "contile.services.mozilla.com. 296 IN A 34.117.237.239 . 32768 4096 OPT " TCP 48394 41235 208.50.179.13 192.168.1.106 2.1.3 RPZ EVENT QNAME NXDOMAIN DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_541993.796f7520686176652061205765622050726f78792c207468656e20.2488.ymil00.hex.acaddff5e4.leeandco.net.;InfobloxRPZ=LIST_541993;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=90 InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1;InfobloxB1Region=us-west-1;InfobloxB1ConnectionType=dfp;InfobloxB1OPHName=Sentinel-Demo-DNS+DFP+DHCP;InfobloxB1OPHIPAddress=192.168.1.201;InfobloxB1Network=Sentinel-Demo-DNS+DFP+DHCP (DFP);InfobloxB1SrcOSVersion=;InfobloxB1DHCPFingerprint=;InfobloxB1DNSTags=APP_Uncategorized,CAT_Software/Hardware DNS 796f7520686176652061205765622050726f78792c207468656e20.2488.ymil00.hex.acaddff5e4.leeandco.net. contile.services.mozilla.com. 00:50:56:0b:0f:15 CommonSecurityLog {"InfobloxDNSQClass":"IN","InfobloxDNSQType":"A","InfobloxDNSQFlags":"+EV","InfobloxDNSRCode":"NOERROR","InfobloxAnCount":"1","InfobloxNsCount":"0","InfobloxArCount":"1","InfobloxB1Region":"us-west-1","InfobloxB1ConnectionType":"dfp","InfobloxB1OPHName":"Sentinel-Demo-DNS+DFP+DHCP","InfobloxB1OPHIPAddress":"192.168.1.201","InfobloxB1Network":"Sentinel-Demo-DNS+DFP+DHCP (DFP)","InfobloxB1DNSTags":"APP_Uncategorized,CAT_Software/Hardware"} 1 1 dfp APP_Uncategorized,CAT_Software/Hardware Sentinel-Demo-DNS+DFP+DHCP (DFP) 192.168.1.201 Sentinel-Demo-DNS+DFP+DHCP us-west-1 IN #NAME? A NOERROR 0 N/A
106 846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 10/26/2021, 2:08:15.015 PM 2/11/2021, 11:24:16.825 PM Infoblox Data Connector RPZ-QNAME-NXDOMAIN DNS Response 8 1 NXDOMAIN NXDOMAIN infoblox-virtual-machine 192.168.1.106 "RPZ QNAME NXDOMAIN rewrite 796f7520686176652061205765622050726f78792c207468656e20.2391.ymil00.hex.acaddff5e4.leeandco.net. [A] via LIST_541993.796f7520686176652061205765622050726f78792c207468656e20.2391.ymil00.hex.acaddff5e4.leeandco.net." "connectivity-check.ubuntu.com. 6 IN A 35.224.170.84 connectivity-check.ubuntu.com. 6 IN A 35.232.111.17 . 32768 4096 OPT " TCP 31171 64985 208.50.179.13 192.168.1.106 2.1.3 RPZ EVENT QNAME NXDOMAIN DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_541993.796f7520686176652061205765622050726f78792c207468656e20.2391.ymil00.hex.acaddff5e4.leeandco.net.;InfobloxRPZ=LIST_541993;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=90 InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=2;InfobloxNsCount=0;InfobloxArCount=1;InfobloxB1Region=us-west-1;InfobloxB1ConnectionType=dfp;InfobloxB1OPHName=Sentinel-Demo-DNS+DFP+DHCP;InfobloxB1OPHIPAddress=192.168.1.201;InfobloxB1Network=Sentinel-Demo-DNS+DFP+DHCP (DFP);InfobloxB1SrcOSVersion=;InfobloxB1DHCPFingerprint=;InfobloxB1DNSTags=APP_Uncategorized,CAT_Software/Hardware DNS 796f7520686176652061205765622050726f78792c207468656e20.2391.ymil00.hex.acaddff5e4.leeandco.net. connectivity-check.ubuntu.com. 00:50:56:0b:0f:15 CommonSecurityLog {"InfobloxDNSQClass":"IN","InfobloxDNSQType":"A","InfobloxDNSQFlags":"+EV","InfobloxDNSRCode":"NOERROR","InfobloxAnCount":"2","InfobloxNsCount":"0","InfobloxArCount":"1","InfobloxB1Region":"us-west-1","InfobloxB1ConnectionType":"dfp","InfobloxB1OPHName":"Sentinel-Demo-DNS+DFP+DHCP","InfobloxB1OPHIPAddress":"192.168.1.201","InfobloxB1Network":"Sentinel-Demo-DNS+DFP+DHCP (DFP)","InfobloxB1DNSTags":"APP_Uncategorized,CAT_Software/Hardware"} 2 1 dfp APP_Uncategorized,CAT_Software/Hardware Sentinel-Demo-DNS+DFP+DHCP (DFP) 192.168.1.201 Sentinel-Demo-DNS+DFP+DHCP us-west-1 IN #NAME? A NOERROR 0 N/A
107 846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 10/26/2021, 2:13:41.580 PM 2/11/2021, 11:24:08.757 PM Infoblox Data Connector RPZ-QNAME-NXDOMAIN DNS Response 8 1 NXDOMAIN NXDOMAIN infoblox-virtual-machine 192.168.1.106 "RPZ QNAME NXDOMAIN rewrite 796f7520686176652061205765622050726f78792c207468656e20.2294.ymil00.hex.acaddff5e4.leeandco.net. [A] via LIST_541993.796f7520686176652061205765622050726f78792c207468656e20.2294.ymil00.hex.acaddff5e4.leeandco.net." "int-classic-scout-production-1074780512.us-east-1.elb.amazonaws.com. 51 IN A 67.202.62.77 int-classic-scout-production-1074780512.us-east-1.elb.amazonaws.com. 51 IN A 44.194.147.142 . 32768 4096 OPT " TCP 56787 28250 208.50.179.13 192.168.1.106 2.1.3 RPZ EVENT QNAME NXDOMAIN DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_541993.796f7520686176652061205765622050726f78792c207468656e20.2294.ymil00.hex.acaddff5e4.leeandco.net.;InfobloxRPZ=LIST_541993;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=90 InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=2;InfobloxNsCount=0;InfobloxArCount=1;InfobloxB1Region=us-west-1;InfobloxB1ConnectionType=dfp;InfobloxB1OPHName=Sentinel-Demo-DNS+DFP+DHCP;InfobloxB1OPHIPAddress=192.168.1.201;InfobloxB1Network=Sentinel-Demo-DNS+DFP+DHCP (DFP);InfobloxB1SrcOSVersion=;InfobloxB1DHCPFingerprint=;InfobloxB1DNSTags=APP_Uncategorized,CAT_Internet Services DNS 796f7520686176652061205765622050726f78792c207468656e20.2294.ymil00.hex.acaddff5e4.leeandco.net. int-classic-scout-production-1074780512.us-east-1.elb.amazonaws.com. 00:50:56:0b:0f:15 CommonSecurityLog {"InfobloxDNSQClass":"IN","InfobloxDNSQType":"A","InfobloxDNSQFlags":"+EV","InfobloxDNSRCode":"NOERROR","InfobloxAnCount":"2","InfobloxNsCount":"0","InfobloxArCount":"1","InfobloxB1Region":"us-west-1","InfobloxB1ConnectionType":"dfp","InfobloxB1OPHName":"Sentinel-Demo-DNS+DFP+DHCP","InfobloxB1OPHIPAddress":"192.168.1.201","InfobloxB1Network":"Sentinel-Demo-DNS+DFP+DHCP (DFP)","InfobloxB1DNSTags":"APP_Uncategorized,CAT_Internet Services"} 2 1 dfp APP_Uncategorized,CAT_Internet Services Sentinel-Demo-DNS+DFP+DHCP (DFP) 192.168.1.201 Sentinel-Demo-DNS+DFP+DHCP us-west-1 IN #NAME? A NOERROR 0 N/A
108 846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 10/26/2021, 2:12:52.891 PM 2/11/2021, 11:24:00.782 PM Infoblox Data Connector RPZ-QNAME-NXDOMAIN DHCP-LEASE-UPDATE 8 1 NXDOMAIN NXDOMAIN infoblox-virtual-machine "RPZ QNAME NXDOMAIN rewrite 796f7520686176652061205765622050726f78792c207468656e20.2197.ymil00.hex.acaddff5e4.leeandco.net. [A] via LIST_541993.796f7520686176652061205765622050726f78792c207468656e20.2197.ymil00.hex.acaddff5e4.leeandco.net." 56787 208.50.179.13 192.168.1.106 2.1.3 RPZ EVENT QNAME NXDOMAIN DHCP Lease Update InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_541993.796f7520686176652061205765622050726f78792c207468656e20.2197.ymil00.hex.acaddff5e4.leeandco.net.;InfobloxRPZ=LIST_541993;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=90 cat="DHCP Lease Update";InfobloxLeaseOp=Update;InfobloxClientID=01:00:50:56:0b:0f:15;InfobloxLifetime=300;InfobloxSubnetID=245079;InfobloxServerID=1;InfobloxLeaseUUID=996854c4-27ab-11ec-a802-7270aef5e23e;InfobloxFingerprintPr=true;InfobloxFingerprint=;InfobloxDHCPOptions=;code_12='dhcp-virtual-machine';code_53='\003';code_55='\001\002\006\014\017\032\034y\003!()*w\371\374\021';code_57='\377\377';code_61='\001\000PV\013\017\025';code_82='\013\004\300\250\001\311' DNS DHCP 796f7520686176652061205765622050726f78792c207468656e20.2197.ymil00.hex.acaddff5e4.leeandco.net. dhcp-virtual-machine 00:50:56:0b:0f:15 CommonSecurityLog {"cat":"\"DHCP Lease Update\"","InfobloxLeaseOp":"Update","InfobloxClientID":"01:00:50:56:0b:0f:15","InfobloxLifetime":"300","InfobloxSubnetID":"245079","InfobloxServerID":"1","InfobloxLeaseUUID":"996854c4-27ab-11ec-a802-7270aef5e23e","InfobloxFingerprintPr":"true","code_12":"'dhcp-virtual-machine'","code_53":"'\\003'","code_55":"'\\001\\002\\006\\014\\017\\032\\034y\\003!()*w\\371\\374\\021'","code_57":"'\\377\\377'","code_61":"'\\001\\000PV\\013\\017\\025'","code_82":"'\\013\\004\\300\\250\\001\\311'"} "DHCP Lease Update" 'dhcp-virtual-machine' '\003' '\001\002\006\014\017\032\034y\003!()*w\371\374\021' '\377\377' '\001\000PV\013\017\025' '\013\004\300\250\001\311' 01:00:50:56:0b:0f:15 TRUE Update 996854c4-27ab-11ec-a802-7270aef5e23e 300 1 245079 N/A
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/11/2021, 11:23:45.269 PM Infoblox Data Connector RPZ-QNAME-NXDOMAIN 8 NXDOMAIN NXDOMAIN "RPZ QNAME NXDOMAIN rewrite 796f7520686176652061205765622050726f78792c207468656e20.2100.ymil00.hex.acaddff5e4.leeandco.net. [A] via LIST_541993.796f7520686176652061205765622050726f78792c207468656e20.2100.ymil00.hex.acaddff5e4.leeandco.net." 21179 208.50.179.13 2.1.3 RPZ EVENT QNAME NXDOMAIN InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_541993.796f7520686176652061205765622050726f78792c207468656e20.2100.ymil00.hex.acaddff5e4.leeandco.net.;InfobloxRPZ=LIST_541993;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=90 DNS 796f7520686176652061205765622050726f78792c207468656e20.2100.ymil00.hex.acaddff5e4.leeandco.net. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/11/2021, 11:23:38.015 PM Infoblox Data Connector RPZ-QNAME-NXDOMAIN 8 NXDOMAIN NXDOMAIN "RPZ QNAME NXDOMAIN rewrite 796f7520686176652061205765622050726f78792c207468656e20.2003.ymil00.hex.acaddff5e4.leeandco.net. [A] via LIST_541993.796f7520686176652061205765622050726f78792c207468656e20.2003.ymil00.hex.acaddff5e4.leeandco.net." 21179 208.50.179.13 2.1.3 RPZ EVENT QNAME NXDOMAIN InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_541993.796f7520686176652061205765622050726f78792c207468656e20.2003.ymil00.hex.acaddff5e4.leeandco.net.;InfobloxRPZ=LIST_541993;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=90 DNS 796f7520686176652061205765622050726f78792c207468656e20.2003.ymil00.hex.acaddff5e4.leeandco.net. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/11/2021, 11:23:27.066 PM Infoblox Data Connector RPZ-QNAME-NXDOMAIN 8 NXDOMAIN NXDOMAIN "RPZ QNAME NXDOMAIN rewrite 796f7520686176652061205765622050726f78792c207468656e20.1906.ymil00.hex.acaddff5e4.leeandco.net. [A] via LIST_541993.796f7520686176652061205765622050726f78792c207468656e20.1906.ymil00.hex.acaddff5e4.leeandco.net." 62785 208.50.179.13 2.1.3 RPZ EVENT QNAME NXDOMAIN InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_541993.796f7520686176652061205765622050726f78792c207468656e20.1906.ymil00.hex.acaddff5e4.leeandco.net.;InfobloxRPZ=LIST_541993;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=90 DNS 796f7520686176652061205765622050726f78792c207468656e20.1906.ymil00.hex.acaddff5e4.leeandco.net. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/11/2021, 11:43:36.572 PM Infoblox Data Connector RPZ-QNAME-NXDOMAIN 8 NXDOMAIN NXDOMAIN "RPZ QNAME NXDOMAIN rewrite 796f7520686176652061205765622050726f78792c207468656e20.1809.zcmt50.hex.acaddff5e4.leeandco.net. [A] via LIST_541993.796f7520686176652061205765622050726f78792c207468656e20.1809.zcmt50.hex.acaddff5e4.leeandco.net." 20242 208.50.179.13 2.1.3 RPZ EVENT QNAME NXDOMAIN InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_541993.796f7520686176652061205765622050726f78792c207468656e20.1809.zcmt50.hex.acaddff5e4.leeandco.net.;InfobloxRPZ=LIST_541993;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=90 DNS 796f7520686176652061205765622050726f78792c207468656e20.1809.zcmt50.hex.acaddff5e4.leeandco.net. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/11/2021, 11:23:15.115 PM Infoblox Data Connector RPZ-QNAME-NXDOMAIN 8 NXDOMAIN NXDOMAIN "RPZ QNAME NXDOMAIN rewrite 796f7520686176652061205765622050726f78792c207468656e20.1809.ymil00.hex.acaddff5e4.leeandco.net. [A] via LIST_541993.796f7520686176652061205765622050726f78792c207468656e20.1809.ymil00.hex.acaddff5e4.leeandco.net." 62785 208.50.179.13 2.1.3 RPZ EVENT QNAME NXDOMAIN InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_541993.796f7520686176652061205765622050726f78792c207468656e20.1809.ymil00.hex.acaddff5e4.leeandco.net.;InfobloxRPZ=LIST_541993;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=90 DNS 796f7520686176652061205765622050726f78792c207468656e20.1809.ymil00.hex.acaddff5e4.leeandco.net. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/11/2021, 11:43:22.339 PM Infoblox Data Connector RPZ-QNAME-NXDOMAIN 8 NXDOMAIN NXDOMAIN "RPZ QNAME NXDOMAIN rewrite 796f7520686176652061205765622050726f78792c207468656e20.1712.zcmt50.hex.acaddff5e4.leeandco.net. [A] via LIST_541993.796f7520686176652061205765622050726f78792c207468656e20.1712.zcmt50.hex.acaddff5e4.leeandco.net." 20242 208.50.179.13 2.1.3 RPZ EVENT QNAME NXDOMAIN InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_541993.796f7520686176652061205765622050726f78792c207468656e20.1712.zcmt50.hex.acaddff5e4.leeandco.net.;InfobloxRPZ=LIST_541993;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=90 DNS 796f7520686176652061205765622050726f78792c207468656e20.1712.zcmt50.hex.acaddff5e4.leeandco.net. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/11/2021, 11:23:02.181 PM Infoblox Data Connector RPZ-QNAME-NXDOMAIN 8 NXDOMAIN NXDOMAIN "RPZ QNAME NXDOMAIN rewrite 796f7520686176652061205765622050726f78792c207468656e20.1712.ymil00.hex.acaddff5e4.leeandco.net. [A] via LIST_541993.796f7520686176652061205765622050726f78792c207468656e20.1712.ymil00.hex.acaddff5e4.leeandco.net." 62785 208.50.179.13 2.1.3 RPZ EVENT QNAME NXDOMAIN InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_541993.796f7520686176652061205765622050726f78792c207468656e20.1712.ymil00.hex.acaddff5e4.leeandco.net.;InfobloxRPZ=LIST_541993;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=90 DNS 796f7520686176652061205765622050726f78792c207468656e20.1712.ymil00.hex.acaddff5e4.leeandco.net. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/11/2021, 11:43:12.054 PM Infoblox Data Connector RPZ-QNAME-NXDOMAIN 8 NXDOMAIN NXDOMAIN "RPZ QNAME NXDOMAIN rewrite 796f7520686176652061205765622050726f78792c207468656e20.1615.zcmt50.hex.acaddff5e4.leeandco.net. [A] via LIST_541993.796f7520686176652061205765622050726f78792c207468656e20.1615.zcmt50.hex.acaddff5e4.leeandco.net." 36519 208.50.179.13 2.1.3 RPZ EVENT QNAME NXDOMAIN InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_541993.796f7520686176652061205765622050726f78792c207468656e20.1615.zcmt50.hex.acaddff5e4.leeandco.net.;InfobloxRPZ=LIST_541993;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=90 DNS 796f7520686176652061205765622050726f78792c207468656e20.1615.zcmt50.hex.acaddff5e4.leeandco.net. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/11/2021, 11:22:52.030 PM Infoblox Data Connector RPZ-QNAME-NXDOMAIN 8 NXDOMAIN NXDOMAIN "RPZ QNAME NXDOMAIN rewrite 796f7520686176652061205765622050726f78792c207468656e20.1615.ymil00.hex.acaddff5e4.leeandco.net. [A] via LIST_541993.796f7520686176652061205765622050726f78792c207468656e20.1615.ymil00.hex.acaddff5e4.leeandco.net." 62785 208.50.179.13 2.1.3 RPZ EVENT QNAME NXDOMAIN InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_541993.796f7520686176652061205765622050726f78792c207468656e20.1615.ymil00.hex.acaddff5e4.leeandco.net.;InfobloxRPZ=LIST_541993;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=90 DNS 796f7520686176652061205765622050726f78792c207468656e20.1615.ymil00.hex.acaddff5e4.leeandco.net. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/11/2021, 11:43:01.280 PM Infoblox Data Connector RPZ-QNAME-NXDOMAIN 8 NXDOMAIN NXDOMAIN "RPZ QNAME NXDOMAIN rewrite 796f7520686176652061205765622050726f78792c207468656e20.1518.zcmt50.hex.acaddff5e4.leeandco.net. [A] via LIST_541993.796f7520686176652061205765622050726f78792c207468656e20.1518.zcmt50.hex.acaddff5e4.leeandco.net." 14474 208.50.179.13 2.1.3 RPZ EVENT QNAME NXDOMAIN InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_541993.796f7520686176652061205765622050726f78792c207468656e20.1518.zcmt50.hex.acaddff5e4.leeandco.net.;InfobloxRPZ=LIST_541993;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=90 DNS 796f7520686176652061205765622050726f78792c207468656e20.1518.zcmt50.hex.acaddff5e4.leeandco.net. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/11/2021, 11:22:43.545 PM Infoblox Data Connector RPZ-QNAME-NXDOMAIN 8 NXDOMAIN NXDOMAIN "RPZ QNAME NXDOMAIN rewrite 796f7520686176652061205765622050726f78792c207468656e20.1518.ymil00.hex.acaddff5e4.leeandco.net. [A] via LIST_541993.796f7520686176652061205765622050726f78792c207468656e20.1518.ymil00.hex.acaddff5e4.leeandco.net." 61377 208.50.179.13 2.1.3 RPZ EVENT QNAME NXDOMAIN InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_541993.796f7520686176652061205765622050726f78792c207468656e20.1518.ymil00.hex.acaddff5e4.leeandco.net.;InfobloxRPZ=LIST_541993;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=90 DNS 796f7520686176652061205765622050726f78792c207468656e20.1518.ymil00.hex.acaddff5e4.leeandco.net. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/11/2021, 11:42:49.736 PM Infoblox Data Connector RPZ-QNAME-NXDOMAIN 8 NXDOMAIN NXDOMAIN "RPZ QNAME NXDOMAIN rewrite 796f7520686176652061205765622050726f78792c207468656e20.1421.zcmt50.hex.acaddff5e4.leeandco.net. [A] via LIST_541993.796f7520686176652061205765622050726f78792c207468656e20.1421.zcmt50.hex.acaddff5e4.leeandco.net." 7987 208.50.179.13 2.1.3 RPZ EVENT QNAME NXDOMAIN InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_541993.796f7520686176652061205765622050726f78792c207468656e20.1421.zcmt50.hex.acaddff5e4.leeandco.net.;InfobloxRPZ=LIST_541993;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=90 DNS 796f7520686176652061205765622050726f78792c207468656e20.1421.zcmt50.hex.acaddff5e4.leeandco.net. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/11/2021, 11:22:36.508 PM Infoblox Data Connector RPZ-QNAME-NXDOMAIN 8 NXDOMAIN NXDOMAIN "RPZ QNAME NXDOMAIN rewrite 796f7520686176652061205765622050726f78792c207468656e20.1421.ymil00.hex.acaddff5e4.leeandco.net. [A] via LIST_541993.796f7520686176652061205765622050726f78792c207468656e20.1421.ymil00.hex.acaddff5e4.leeandco.net." 61377 208.50.179.13 2.1.3 RPZ EVENT QNAME NXDOMAIN InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_541993.796f7520686176652061205765622050726f78792c207468656e20.1421.ymil00.hex.acaddff5e4.leeandco.net.;InfobloxRPZ=LIST_541993;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=90 DNS 796f7520686176652061205765622050726f78792c207468656e20.1421.ymil00.hex.acaddff5e4.leeandco.net. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/11/2021, 11:42:45.872 PM Infoblox Data Connector RPZ-QNAME-NXDOMAIN 8 NXDOMAIN NXDOMAIN "RPZ QNAME NXDOMAIN rewrite 796f7520686176652061205765622050726f78792c207468656e20.1324.zcmt50.hex.acaddff5e4.leeandco.net. [A] via LIST_541993.796f7520686176652061205765622050726f78792c207468656e20.1324.zcmt50.hex.acaddff5e4.leeandco.net." 15223 208.50.179.13 2.1.3 RPZ EVENT QNAME NXDOMAIN InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_541993.796f7520686176652061205765622050726f78792c207468656e20.1324.zcmt50.hex.acaddff5e4.leeandco.net.;InfobloxRPZ=LIST_541993;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=90 DNS 796f7520686176652061205765622050726f78792c207468656e20.1324.zcmt50.hex.acaddff5e4.leeandco.net. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/11/2021, 11:22:22.500 PM Infoblox Data Connector RPZ-QNAME-NXDOMAIN 8 NXDOMAIN NXDOMAIN "RPZ QNAME NXDOMAIN rewrite 796f7520686176652061205765622050726f78792c207468656e20.1324.ymil00.hex.acaddff5e4.leeandco.net. [A] via LIST_541993.796f7520686176652061205765622050726f78792c207468656e20.1324.ymil00.hex.acaddff5e4.leeandco.net." 61377 208.50.179.13 2.1.3 RPZ EVENT QNAME NXDOMAIN InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_541993.796f7520686176652061205765622050726f78792c207468656e20.1324.ymil00.hex.acaddff5e4.leeandco.net.;InfobloxRPZ=LIST_541993;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=90 DNS 796f7520686176652061205765622050726f78792c207468656e20.1324.ymil00.hex.acaddff5e4.leeandco.net. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/11/2021, 11:42:26.848 PM Infoblox Data Connector RPZ-QNAME-NXDOMAIN 8 NXDOMAIN NXDOMAIN "RPZ QNAME NXDOMAIN rewrite 796f7520686176652061205765622050726f78792c207468656e20.1227.zcmt50.hex.acaddff5e4.leeandco.net. [A] via LIST_541993.796f7520686176652061205765622050726f78792c207468656e20.1227.zcmt50.hex.acaddff5e4.leeandco.net." 7987 208.50.179.13 2.1.3 RPZ EVENT QNAME NXDOMAIN InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_541993.796f7520686176652061205765622050726f78792c207468656e20.1227.zcmt50.hex.acaddff5e4.leeandco.net.;InfobloxRPZ=LIST_541993;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=90 DNS 796f7520686176652061205765622050726f78792c207468656e20.1227.zcmt50.hex.acaddff5e4.leeandco.net. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/11/2021, 11:22:15.514 PM Infoblox Data Connector RPZ-QNAME-NXDOMAIN 8 NXDOMAIN NXDOMAIN "RPZ QNAME NXDOMAIN rewrite 796f7520686176652061205765622050726f78792c207468656e20.1227.ymil00.hex.acaddff5e4.leeandco.net. [A] via LIST_541993.796f7520686176652061205765622050726f78792c207468656e20.1227.ymil00.hex.acaddff5e4.leeandco.net." 61377 208.50.179.13 2.1.3 RPZ EVENT QNAME NXDOMAIN InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_541993.796f7520686176652061205765622050726f78792c207468656e20.1227.ymil00.hex.acaddff5e4.leeandco.net.;InfobloxRPZ=LIST_541993;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=90 DNS 796f7520686176652061205765622050726f78792c207468656e20.1227.ymil00.hex.acaddff5e4.leeandco.net. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/11/2021, 11:42:19.191 PM Infoblox Data Connector RPZ-QNAME-NXDOMAIN 8 NXDOMAIN NXDOMAIN "RPZ QNAME NXDOMAIN rewrite 796f7520686176652061205765622050726f78792c207468656e20.1130.zcmt50.hex.acaddff5e4.leeandco.net. [A] via LIST_541993.796f7520686176652061205765622050726f78792c207468656e20.1130.zcmt50.hex.acaddff5e4.leeandco.net." 7987 208.50.179.13 2.1.3 RPZ EVENT QNAME NXDOMAIN InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_541993.796f7520686176652061205765622050726f78792c207468656e20.1130.zcmt50.hex.acaddff5e4.leeandco.net.;InfobloxRPZ=LIST_541993;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=90 DNS 796f7520686176652061205765622050726f78792c207468656e20.1130.zcmt50.hex.acaddff5e4.leeandco.net. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/11/2021, 11:22:01.774 PM Infoblox Data Connector RPZ-QNAME-NXDOMAIN 8 NXDOMAIN NXDOMAIN "RPZ QNAME NXDOMAIN rewrite 796f7520686176652061205765622050726f78792c207468656e20.1130.ymil00.hex.acaddff5e4.leeandco.net. [A] via LIST_541993.796f7520686176652061205765622050726f78792c207468656e20.1130.ymil00.hex.acaddff5e4.leeandco.net." 61377 208.50.179.13 2.1.3 RPZ EVENT QNAME NXDOMAIN InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_541993.796f7520686176652061205765622050726f78792c207468656e20.1130.ymil00.hex.acaddff5e4.leeandco.net.;InfobloxRPZ=LIST_541993;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=90 DNS 796f7520686176652061205765622050726f78792c207468656e20.1130.ymil00.hex.acaddff5e4.leeandco.net. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/11/2021, 11:42:09.794 PM Infoblox Data Connector RPZ-QNAME-NXDOMAIN 8 NXDOMAIN NXDOMAIN "RPZ QNAME NXDOMAIN rewrite 796f7520686176652061205765622050726f78792c207468656e20.1033.zcmt50.hex.acaddff5e4.leeandco.net. [A] via LIST_541993.796f7520686176652061205765622050726f78792c207468656e20.1033.zcmt50.hex.acaddff5e4.leeandco.net." 7987 208.50.179.13 2.1.3 RPZ EVENT QNAME NXDOMAIN InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_541993.796f7520686176652061205765622050726f78792c207468656e20.1033.zcmt50.hex.acaddff5e4.leeandco.net.;InfobloxRPZ=LIST_541993;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=90 DNS 796f7520686176652061205765622050726f78792c207468656e20.1033.zcmt50.hex.acaddff5e4.leeandco.net. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/11/2021, 11:21:44.603 PM Infoblox Data Connector RPZ-QNAME-NXDOMAIN 8 NXDOMAIN NXDOMAIN "RPZ QNAME NXDOMAIN rewrite 796f7520686176652061205765622050726f78792c207468656e20.1033.ymil00.hex.acaddff5e4.leeandco.net. [A] via LIST_541993.796f7520686176652061205765622050726f78792c207468656e20.1033.ymil00.hex.acaddff5e4.leeandco.net." 55534 208.50.179.13 2.1.3 RPZ EVENT QNAME NXDOMAIN InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_541993.796f7520686176652061205765622050726f78792c207468656e20.1033.ymil00.hex.acaddff5e4.leeandco.net.;InfobloxRPZ=LIST_541993;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=90 DNS 796f7520686176652061205765622050726f78792c207468656e20.1033.ymil00.hex.acaddff5e4.leeandco.net. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/11/2021, 11:42:01.844 PM Infoblox Data Connector RPZ-QNAME-NXDOMAIN 8 NXDOMAIN NXDOMAIN "RPZ QNAME NXDOMAIN rewrite 78792c207468656e20796f7572205765622050726f787920697320.969.zcmt50.hex.acaddff5e4.leeandco.net. [A] via LIST_541993.78792c207468656e20796f7572205765622050726f787920697320.969.zcmt50.hex.acaddff5e4.leeandco.net." 7987 208.50.179.13 2.1.3 RPZ EVENT QNAME NXDOMAIN InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_541993.78792c207468656e20796f7572205765622050726f787920697320.969.zcmt50.hex.acaddff5e4.leeandco.net.;InfobloxRPZ=LIST_541993;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=90 DNS 78792c207468656e20796f7572205765622050726f787920697320.969.zcmt50.hex.acaddff5e4.leeandco.net. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/11/2021, 11:21:44.597 PM Infoblox Data Connector RPZ-QNAME-NXDOMAIN 8 NXDOMAIN NXDOMAIN "RPZ QNAME NXDOMAIN rewrite 78792c207468656e20796f7572205765622050726f787920697320.969.ymil00.hex.acaddff5e4.leeandco.net. [A] via LIST_541993.78792c207468656e20796f7572205765622050726f787920697320.969.ymil00.hex.acaddff5e4.leeandco.net." 55534 208.50.179.13 2.1.3 RPZ EVENT QNAME NXDOMAIN InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_541993.78792c207468656e20796f7572205765622050726f787920697320.969.ymil00.hex.acaddff5e4.leeandco.net.;InfobloxRPZ=LIST_541993;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=90 DNS 78792c207468656e20796f7572205765622050726f787920697320.969.ymil00.hex.acaddff5e4.leeandco.net. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/11/2021, 11:41:53.692 PM Infoblox Data Connector RPZ-QNAME-NXDOMAIN 8 NXDOMAIN NXDOMAIN "RPZ QNAME NXDOMAIN rewrite 78792c207468656e20796f7572205765622050726f787920697320.872.zcmt50.hex.acaddff5e4.leeandco.net. [A] via LIST_541993.78792c207468656e20796f7572205765622050726f787920697320.872.zcmt50.hex.acaddff5e4.leeandco.net." 7987 208.50.179.13 2.1.3 RPZ EVENT QNAME NXDOMAIN InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_541993.78792c207468656e20796f7572205765622050726f787920697320.872.zcmt50.hex.acaddff5e4.leeandco.net.;InfobloxRPZ=LIST_541993;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=90 DNS 78792c207468656e20796f7572205765622050726f787920697320.872.zcmt50.hex.acaddff5e4.leeandco.net. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/11/2021, 11:21:30.178 PM Infoblox Data Connector RPZ-QNAME-NXDOMAIN 8 NXDOMAIN NXDOMAIN "RPZ QNAME NXDOMAIN rewrite 78792c207468656e20796f7572205765622050726f787920697320.872.ymil00.hex.acaddff5e4.leeandco.net. [A] via LIST_541993.78792c207468656e20796f7572205765622050726f787920697320.872.ymil00.hex.acaddff5e4.leeandco.net." 50593 208.50.179.13 2.1.3 RPZ EVENT QNAME NXDOMAIN InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_541993.78792c207468656e20796f7572205765622050726f787920697320.872.ymil00.hex.acaddff5e4.leeandco.net.;InfobloxRPZ=LIST_541993;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=90 DNS 78792c207468656e20796f7572205765622050726f787920697320.872.ymil00.hex.acaddff5e4.leeandco.net. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/11/2021, 11:41:42.672 PM Infoblox Data Connector RPZ-QNAME-NXDOMAIN 8 NXDOMAIN NXDOMAIN "RPZ QNAME NXDOMAIN rewrite 78792c207468656e20796f7572205765622050726f787920697320.775.zcmt50.hex.acaddff5e4.leeandco.net. [A] via LIST_541993.78792c207468656e20796f7572205765622050726f787920697320.775.zcmt50.hex.acaddff5e4.leeandco.net." 56540 208.50.179.13 2.1.3 RPZ EVENT QNAME NXDOMAIN InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_541993.78792c207468656e20796f7572205765622050726f787920697320.775.zcmt50.hex.acaddff5e4.leeandco.net.;InfobloxRPZ=LIST_541993;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=90 DNS 78792c207468656e20796f7572205765622050726f787920697320.775.zcmt50.hex.acaddff5e4.leeandco.net. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/11/2021, 11:21:22.610 PM Infoblox Data Connector RPZ-QNAME-NXDOMAIN 8 NXDOMAIN NXDOMAIN "RPZ QNAME NXDOMAIN rewrite 78792c207468656e20796f7572205765622050726f787920697320.775.ymil00.hex.acaddff5e4.leeandco.net. [A] via LIST_541993.78792c207468656e20796f7572205765622050726f787920697320.775.ymil00.hex.acaddff5e4.leeandco.net." 50593 208.50.179.13 2.1.3 RPZ EVENT QNAME NXDOMAIN InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_541993.78792c207468656e20796f7572205765622050726f787920697320.775.ymil00.hex.acaddff5e4.leeandco.net.;InfobloxRPZ=LIST_541993;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=90 DNS 78792c207468656e20796f7572205765622050726f787920697320.775.ymil00.hex.acaddff5e4.leeandco.net. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/11/2021, 11:41:27.054 PM Infoblox Data Connector RPZ-QNAME-NXDOMAIN 8 NXDOMAIN NXDOMAIN "RPZ QNAME NXDOMAIN rewrite 78792c207468656e20796f7572205765622050726f787920697320.678.zcmt50.hex.acaddff5e4.leeandco.net. [A] via LIST_541993.78792c207468656e20796f7572205765622050726f787920697320.678.zcmt50.hex.acaddff5e4.leeandco.net." 46369 208.50.179.13 2.1.3 RPZ EVENT QNAME NXDOMAIN InfobloxDNSView=;InfobloxDNSQType=A;InfobloxRPZRule=LIST_541993.78792c207468656e20796f7572205765622050726f787920697320.678.zcmt50.hex.acaddff5e4.leeandco.net.;InfobloxRPZ=LIST_541993;InfobloxCSiteId=;InfobloxPolicyID=98594;InfobloxDomainCat=;InfobloxThreatProperty=;InfobloxThreatConfidence=50;InfobloxThreatLevel=90 DNS 78792c207468656e20796f7572205765622050726f787920697320.678.zcmt50.hex.acaddff5e4.leeandco.net. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/12/2021, 12:00:16.636 AM Infoblox Data Connector DNS Response 1 8.8.8.8 "wns.notify.trafficmanager.net. 58 IN CNAME vip2-dm3p.wns.notify.trafficmanager.net. vip2-dm3p.wns.notify.trafficmanager.net. 162 IN A 52.242.211.89 . 32768 512 OPT " UDP 46716 172.0.0.253 2.1.3 DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=2;InfobloxNsCount=0;InfobloxArCount=1 DNS wns.notify.trafficmanager.net. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/12/2021, 12:25:46.643 AM Infoblox Data Connector DNS Response 1 8.8.8.8 "wns.notify.trafficmanager.net. 5 IN CNAME vip2-dm3p.wns.notify.trafficmanager.net. vip2-dm3p.wns.notify.trafficmanager.net. 145 IN A 52.242.211.89 . 32768 512 OPT " UDP 59321 172.0.0.253 2.1.3 DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=2;InfobloxNsCount=0;InfobloxArCount=1 DNS wns.notify.trafficmanager.net. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/12/2021, 12:20:31.660 AM Infoblox Data Connector DNS Response 1 8.8.8.8 "wns.notify.trafficmanager.net. 49 IN CNAME vip2-dm3p.wns.notify.trafficmanager.net. vip2-dm3p.wns.notify.trafficmanager.net. 114 IN A 52.242.211.89 . 32768 512 OPT " UDP 51916 172.0.0.253 2.1.3 DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=2;InfobloxNsCount=0;InfobloxArCount=1 DNS wns.notify.trafficmanager.net. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/12/2021, 12:05:16.647 AM Infoblox Data Connector DNS Response 1 8.8.8.8 "wns.notify.trafficmanager.net. 299 IN A 52.230.222.68 . 32768 512 OPT " UDP 53156 172.0.0.253 2.1.3 DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1 DNS wns.notify.trafficmanager.net. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/11/2021, 11:55:01.617 PM Infoblox Data Connector DNS Response 1 8.8.8.8 "wns.notify.trafficmanager.net. 260 IN CNAME vip2-dm3p.wns.notify.trafficmanager.net. vip2-dm3p.wns.notify.trafficmanager.net. 237 IN A 52.242.211.89 . 32768 512 OPT " UDP 39254 172.0.0.253 2.1.3 DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=2;InfobloxNsCount=0;InfobloxArCount=1 DNS wns.notify.trafficmanager.net. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/12/2021, 12:10:16.636 AM Infoblox Data Connector DNS Response 1 8.8.8.8 "wns.notify.trafficmanager.net. 257 IN CNAME vip2-dm3p.wns.notify.trafficmanager.net. vip2-dm3p.wns.notify.trafficmanager.net. 186 IN A 52.242.211.89 . 32768 512 OPT " UDP 33749 172.0.0.253 2.1.3 DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=2;InfobloxNsCount=0;InfobloxArCount=1 DNS wns.notify.trafficmanager.net. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/12/2021, 12:15:16.650 AM Infoblox Data Connector DNS Response 1 8.8.8.8 "wns.notify.trafficmanager.net. 134 IN CNAME vip2-dm3p.wns.notify.trafficmanager.net. vip2-dm3p.wns.notify.trafficmanager.net. 287 IN A 52.242.211.89 . 32768 512 OPT " UDP 35005 172.0.0.253 2.1.3 DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=2;InfobloxNsCount=0;InfobloxArCount=1 DNS wns.notify.trafficmanager.net. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/12/2021, 12:16:16.630 AM Infoblox Data Connector DNS Response 1 8.8.8.8 "wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 59 IN A 18.235.149.1 wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 59 IN A 18.233.189.178 wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 59 IN A 18.209.243.220 . 32768 512 OPT " UDP 57418 172.0.0.253 2.1.3 DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=3;InfobloxNsCount=0;InfobloxArCount=1 DNS wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/12/2021, 12:06:01.637 AM Infoblox Data Connector DNS Response 1 8.8.8.8 "wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 59 IN A 18.209.243.220 wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 59 IN A 18.235.149.1 wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 59 IN A 18.233.189.178 . 32768 512 OPT " UDP 40393 172.0.0.253 2.1.3 DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=3;InfobloxNsCount=0;InfobloxArCount=1 DNS wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/11/2021, 11:55:16.617 PM Infoblox Data Connector DNS Response 1 8.8.8.8 "wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 59 IN A 18.209.243.220 wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 59 IN A 18.233.189.178 wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 59 IN A 18.235.149.1 . 32768 512 OPT " UDP 60290 172.0.0.253 2.1.3 DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=3;InfobloxNsCount=0;InfobloxArCount=1 DNS wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/12/2021, 12:25:46.644 AM Infoblox Data Connector DNS Response 1 8.8.8.8 "wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 58 IN A 18.233.189.178 wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 58 IN A 18.235.149.1 wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 58 IN A 18.209.243.220 . 32768 512 OPT " UDP 48161 172.0.0.253 2.1.3 DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=3;InfobloxNsCount=0;InfobloxArCount=1 DNS wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/12/2021, 12:05:31.638 AM Infoblox Data Connector DNS Response 1 8.8.8.8 "wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 30 IN A 18.235.149.1 wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 30 IN A 18.233.189.178 wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 30 IN A 18.209.243.220 . 32768 512 OPT " UDP 44954 172.0.0.253 2.1.3 DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=3;InfobloxNsCount=0;InfobloxArCount=1 DNS wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/12/2021, 12:15:46.640 AM Infoblox Data Connector DNS Response 1 8.8.8.8 "wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 30 IN A 18.209.243.220 wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 30 IN A 18.233.189.178 wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 30 IN A 18.235.149.1 . 32768 512 OPT " UDP 54506 172.0.0.253 2.1.3 DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=3;InfobloxNsCount=0;InfobloxArCount=1 DNS wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/11/2021, 11:57:31.631 PM Infoblox Data Connector DNS Response 1 8.8.8.8 "wildcard.weather.microsoft.com.edgekey.net. 513 IN CNAME e15275.g.akamaiedge.net. e15275.g.akamaiedge.net. 19 IN A 104.86.95.226 . 32768 512 OPT " UDP 45460 172.0.0.253 2.1.3 DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=2;InfobloxNsCount=0;InfobloxArCount=1 DNS wildcard.weather.microsoft.com.edgekey.net. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/12/2021, 12:10:16.635 AM Infoblox Data Connector DNS Response 1 8.8.8.8 "vip2-dm3p.wns.notify.trafficmanager.net. 203 IN A 52.242.211.89 . 32768 512 OPT " UDP 33886 172.0.0.253 2.1.3 DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1 DNS vip2-dm3p.wns.notify.trafficmanager.net. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/12/2021, 12:15:16.651 AM Infoblox Data Connector DNS Response 1 8.8.8.8 "vip2-dm3p.wns.notify.trafficmanager.net. 202 IN A 52.242.211.89 . 32768 512 OPT " UDP 50754 172.0.0.253 2.1.3 DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1 DNS vip2-dm3p.wns.notify.trafficmanager.net. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/12/2021, 12:25:46.643 AM Infoblox Data Connector DNS Response 1 8.8.8.8 "vip2-dm3p.wns.notify.trafficmanager.net. 162 IN A 52.242.211.89 . 32768 512 OPT " UDP 58415 172.0.0.253 2.1.3 DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1 DNS vip2-dm3p.wns.notify.trafficmanager.net. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/12/2021, 12:00:16.637 AM Infoblox Data Connector DNS Response 1 8.8.8.8 "vip2-dm3p.wns.notify.trafficmanager.net. 125 IN A 52.242.211.89 . 32768 512 OPT " UDP 49076 172.0.0.253 2.1.3 DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1 DNS vip2-dm3p.wns.notify.trafficmanager.net. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/12/2021, 12:20:31.660 AM Infoblox Data Connector DNS Response 1 8.8.8.8 "vip2-dm3p.wns.notify.trafficmanager.net. 114 IN A 52.242.211.89 . 32768 512 OPT " UDP 51750 172.0.0.253 2.1.3 DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1 DNS vip2-dm3p.wns.notify.trafficmanager.net. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/11/2021, 11:55:01.617 PM Infoblox Data Connector DNS Response 1 8.8.8.8 "vip2-dm3p.wns.notify.trafficmanager.net. 108 IN A 52.242.211.89 . 32768 512 OPT " UDP 43847 172.0.0.253 2.1.3 DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1 DNS vip2-dm3p.wns.notify.trafficmanager.net. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/12/2021, 12:16:46.627 AM Infoblox Data Connector DNS Response 1 172.0.0.253 "v10.events.data.microsoft.com. 756 IN CNAME global.asimov.events.data.trafficmanager.net. global.asimov.events.data.trafficmanager.net. 15 IN CNAME skypedataprdcoljpe03.cloudapp.net. skypedataprdcoljpe03.cloudapp.net. 9 IN A 52.114.32.8 net. 146266 IN NS e.gtld-servers.net. net. 146266 IN NS b.gtld-servers.net. net. 146266 IN NS f.gtld-servers.net. net. 146266 IN NS l.gtld-servers.net. net. 146266 IN NS d.gtld-servers.net. net. 146266 IN NS k.gtld-servers.net. net. 146266 IN NS h.gtld-servers.net. net. 146266 IN NS g.gtld-servers.net. net. 146266 IN NS a.gtld-servers.net. net. 146266 IN NS j.gtld-servers.net. net. 146266 IN NS c.gtld-servers.net. net. 146266 IN NS i.gtld-servers.net. net. 146266 IN NS m.gtld-servers.net. a.gtld-servers.net. 146266 IN A 192.5.6.30 b.gtld-servers.net. 146266 IN A 192.33.14.30 c.gtld-servers.net. 146266 IN A 192.26.92.30 d.gtld-servers.net. 146266 IN A 192.31.80.30 e.gtld-servers.net. 146266 IN A 192.12.94.30 f.gtld-servers.net. 146266 IN A 192.35.51.30 g.gtld-servers.net. 146266 IN A 192.42.93.30" UDP 54957 172.0.0.110 2.1.3 DNS Response IN A NOERROR InfobloxDNSView=2fa70211-f936-4bff-8810-56103877d7ad;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=3;InfobloxNsCount=13;InfobloxArCount=7 DNS v10.events.data.microsoft.com. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/12/2021, 12:05:16.647 AM Infoblox Data Connector DNS Response 1 8.8.8.8 "tm2.edgedns-tm.info. 67 IN A 13.107.247.10 . 32768 512 OPT " UDP 45694 172.0.0.253 2.1.3 DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1 DNS tm2.edgedns-tm.info. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/12/2021, 12:20:31.659 AM Infoblox Data Connector DNS Response 1 8.8.8.8 "tm2.edgedns-tm.info. 294 IN A 13.107.247.10 . 32768 512 OPT " UDP 56767 172.0.0.253 2.1.3 DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1 DNS tm2.edgedns-tm.info. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/11/2021, 11:55:01.617 PM Infoblox Data Connector DNS Response 1 8.8.8.8 "tm2.edgedns-tm.info. 233 IN A 13.107.247.10 . 32768 512 OPT " UDP 44411 172.0.0.253 2.1.3 DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1 DNS tm2.edgedns-tm.info. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/12/2021, 12:00:16.638 AM Infoblox Data Connector DNS Response 1 8.8.8.8 "tm2.edgedns-tm.info. 217 IN A 13.107.247.10 . 32768 512 OPT " UDP 45841 172.0.0.253 2.1.3 DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1 DNS tm2.edgedns-tm.info. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/12/2021, 12:15:16.651 AM Infoblox Data Connector DNS Response 1 8.8.8.8 "tm2.edgedns-tm.info. 212 IN A 13.107.247.10 . 32768 512 OPT " UDP 47004 172.0.0.253 2.1.3 DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1 DNS tm2.edgedns-tm.info. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/12/2021, 12:25:46.644 AM Infoblox Data Connector DNS Response 1 8.8.8.8 "tm2.edgedns-tm.info. 211 IN A 13.107.247.10 . 32768 512 OPT " UDP 54364 172.0.0.253 2.1.3 DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1 DNS tm2.edgedns-tm.info. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/12/2021, 12:10:16.634 AM Infoblox Data Connector DNS Response 1 8.8.8.8 "tm2.edgedns-tm.info. 191 IN A 13.107.247.10 . 32768 512 OPT " UDP 38492 172.0.0.253 2.1.3 DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1 DNS tm2.edgedns-tm.info. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/12/2021, 12:16:46.627 AM Infoblox Data Connector DNS Response 1 8.8.8.8 "tm2.dns-tm.com. 86 IN A 65.55.117.41 . 32768 512 OPT " UDP 44426 172.0.0.253 2.1.3 DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1 DNS tm2.dns-tm.com. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/12/2021, 12:15:16.649 AM Infoblox Data Connector DNS Response 1 8.8.8.8 "tm2.dns-tm.com. 38 IN A 65.55.117.41 . 32768 512 OPT " UDP 56447 172.0.0.253 2.1.3 DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1 DNS tm2.dns-tm.com. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/12/2021, 12:20:31.659 AM Infoblox Data Connector DNS Response 1 8.8.8.8 "tm2.dns-tm.com. 260 IN A 65.55.117.41 . 32768 512 OPT " UDP 45204 172.0.0.253 2.1.3 DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1 DNS tm2.dns-tm.com. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/12/2021, 12:05:16.646 AM Infoblox Data Connector DNS Response 1 8.8.8.8 "tm2.dns-tm.com. 174 IN A 65.55.117.41 . 32768 512 OPT " UDP 45333 172.0.0.253 2.1.3 DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1 DNS tm2.dns-tm.com. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/12/2021, 12:10:16.636 AM Infoblox Data Connector DNS Response 1 8.8.8.8 "tm2.dns-tm.com. 173 IN A 65.55.117.41 . 32768 512 OPT " UDP 42399 172.0.0.253 2.1.3 DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1 DNS tm2.dns-tm.com. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/12/2021, 12:25:46.643 AM Infoblox Data Connector DNS Response 1 8.8.8.8 "tm2.dns-tm.com. 164 IN A 65.55.117.41 . 32768 512 OPT " UDP 55072 172.0.0.253 2.1.3 DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1 DNS tm2.dns-tm.com. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/11/2021, 11:55:01.617 PM Infoblox Data Connector DNS Response 1 8.8.8.8 "tm2.dns-tm.com. 158 IN A 65.55.117.41 . 32768 512 OPT " UDP 34805 172.0.0.253 2.1.3 DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1 DNS tm2.dns-tm.com. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/12/2021, 12:00:16.638 AM Infoblox Data Connector DNS Response 1 8.8.8.8 "tm2.dns-tm.com. 156 IN A 65.55.117.41 . 32768 512 OPT " UDP 42203 172.0.0.253 2.1.3 DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1 DNS tm2.dns-tm.com. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/12/2021, 12:15:16.651 AM Infoblox Data Connector DNS Response 1 8.8.8.8 "tm1.edgedns-tm.info. 247 IN A 13.107.252.10 . 32768 512 OPT " UDP 34255 172.0.0.253 2.1.3 DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1 DNS tm1.edgedns-tm.info. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/12/2021, 12:20:31.659 AM Infoblox Data Connector DNS Response 1 8.8.8.8 "tm1.edgedns-tm.info. 240 IN A 13.107.252.10 . 32768 512 OPT " UDP 42884 172.0.0.253 2.1.3 DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1 DNS tm1.edgedns-tm.info. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/12/2021, 12:25:46.643 AM Infoblox Data Connector DNS Response 1 8.8.8.8 "tm1.edgedns-tm.info. 239 IN A 13.107.252.10 . 32768 512 OPT " UDP 50464 172.0.0.253 2.1.3 DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1 DNS tm1.edgedns-tm.info. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/11/2021, 11:55:01.617 PM Infoblox Data Connector DNS Response 1 8.8.8.8 "tm1.edgedns-tm.info. 159 IN A 13.107.252.10 . 32768 512 OPT " UDP 57673 172.0.0.253 2.1.3 DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1 DNS tm1.edgedns-tm.info. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/12/2021, 12:10:16.636 AM Infoblox Data Connector DNS Response 1 8.8.8.8 "tm1.edgedns-tm.info. 144 IN A 13.107.252.10 . 32768 512 OPT " UDP 45191 172.0.0.253 2.1.3 DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1 DNS tm1.edgedns-tm.info. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/12/2021, 12:00:16.637 AM Infoblox Data Connector DNS Response 1 8.8.8.8 "tm1.edgedns-tm.info. 106 IN A 13.107.252.10 . 32768 512 OPT " UDP 45896 172.0.0.253 2.1.3 DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1 DNS tm1.edgedns-tm.info. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/12/2021, 12:05:16.647 AM Infoblox Data Connector DNS Response 1 8.8.8.8 "tm1.edgedns-tm.info. 103 IN A 13.107.252.10 . 32768 512 OPT " UDP 54183 172.0.0.253 2.1.3 DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1 DNS tm1.edgedns-tm.info. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/11/2021, 11:55:01.617 PM Infoblox Data Connector DNS Response 1 8.8.8.8 "tm1.dns-tm.com. 5 IN A 204.79.195.41 . 32768 512 OPT " UDP 37550 172.0.0.253 2.1.3 DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1 DNS tm1.dns-tm.com. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/12/2021, 12:00:16.637 AM Infoblox Data Connector DNS Response 1 8.8.8.8 "tm1.dns-tm.com. 298 IN A 204.79.195.41 . 32768 512 OPT " UDP 36466 172.0.0.253 2.1.3 DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1 DNS tm1.dns-tm.com. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/12/2021, 12:15:16.651 AM Infoblox Data Connector DNS Response 1 8.8.8.8 "tm1.dns-tm.com. 296 IN A 204.79.195.41 . 32768 512 OPT " UDP 57690 172.0.0.253 2.1.3 DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1 DNS tm1.dns-tm.com. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/12/2021, 12:20:31.659 AM Infoblox Data Connector DNS Response 1 8.8.8.8 "tm1.dns-tm.com. 296 IN A 204.79.195.41 . 32768 512 OPT " UDP 47952 172.0.0.253 2.1.3 DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1 DNS tm1.dns-tm.com. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/12/2021, 12:05:16.646 AM Infoblox Data Connector DNS Response 1 8.8.8.8 "tm1.dns-tm.com. 275 IN A 204.79.195.41 . 32768 512 OPT " UDP 36516 172.0.0.253 2.1.3 DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1 DNS tm1.dns-tm.com. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/12/2021, 12:25:46.643 AM Infoblox Data Connector DNS Response 1 8.8.8.8 "tm1.dns-tm.com. 266 IN A 204.79.195.41 . 32768 512 OPT " UDP 56147 172.0.0.253 2.1.3 DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1 DNS tm1.dns-tm.com. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/12/2021, 12:10:16.636 AM Infoblox Data Connector DNS Response 1 8.8.8.8 "tm1.dns-tm.com. 207 IN A 204.79.195.41 . 32768 512 OPT " UDP 50986 172.0.0.253 2.1.3 DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1 DNS tm1.dns-tm.com. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/11/2021, 11:57:31.632 PM Infoblox Data Connector DNS Response 1 172.0.0.253 "tile-service.weather.microsoft.com. 181 IN CNAME wildcard.weather.microsoft.com.edgekey.net. wildcard.weather.microsoft.com.edgekey.net. 513 IN CNAME e15275.g.akamaiedge.net. e15275.g.akamaiedge.net. 19 IN A 104.86.95.226 net. 147420 IN NS i.gtld-servers.net. net. 147420 IN NS b.gtld-servers.net. net. 147420 IN NS k.gtld-servers.net. net. 147420 IN NS g.gtld-servers.net. net. 147420 IN NS l.gtld-servers.net. net. 147420 IN NS a.gtld-servers.net. net. 147420 IN NS c.gtld-servers.net. net. 147420 IN NS e.gtld-servers.net. net. 147420 IN NS j.gtld-servers.net. net. 147420 IN NS f.gtld-servers.net. net. 147420 IN NS h.gtld-servers.net. net. 147420 IN NS d.gtld-servers.net. net. 147420 IN NS m.gtld-servers.net. a.gtld-servers.net. 147420 IN A 192.5.6.30 b.gtld-servers.net. 147420 IN A 192.33.14.30 c.gtld-servers.net. 147420 IN A 192.26.92.30 d.gtld-servers.net. 147420 IN A 192.31.80.30 e.gtld-servers.net. 147420 IN A 192.12.94.30 f.gtld-servers.net. 147420 IN A 192.35.51.30 g.gtld-servers.net. 147420 IN A 192.42.93.30 h.gtld-servers.net. 147420 IN A 192.54.112.30" UDP 56656 172.0.0.110 2.1.3 DNS Response IN A NOERROR InfobloxDNSView=2fa70211-f936-4bff-8810-56103877d7ad;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=3;InfobloxNsCount=13;InfobloxArCount=8 DNS tile-service.weather.microsoft.com. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/12/2021, 12:16:46.627 AM Infoblox Data Connector DNS Response 1 8.8.8.8 "skypedataprdcoljpe03.cloudapp.net. 9 IN A 52.114.32.8 . 32768 512 OPT " UDP 51053 172.0.0.253 2.1.3 DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1 DNS skypedataprdcoljpe03.cloudapp.net. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/12/2021, 12:13:16.671 AM Infoblox Data Connector DNS Response 1 172.0.0.253 "safebrowsing.googleapis.com. 52 IN A 74.125.137.95 com. 146494 IN NS h.gtld-servers.net. com. 146494 IN NS g.gtld-servers.net. com. 146494 IN NS e.gtld-servers.net. com. 146494 IN NS l.gtld-servers.net. com. 146494 IN NS d.gtld-servers.net. com. 146494 IN NS i.gtld-servers.net. com. 146494 IN NS a.gtld-servers.net. com. 146494 IN NS b.gtld-servers.net. com. 146494 IN NS f.gtld-servers.net. com. 146494 IN NS k.gtld-servers.net. com. 146494 IN NS m.gtld-servers.net. com. 146494 IN NS j.gtld-servers.net. com. 146494 IN NS c.gtld-servers.net. a.gtld-servers.net. 146476 IN A 192.5.6.30 b.gtld-servers.net. 146476 IN A 192.33.14.30 c.gtld-servers.net. 146476 IN A 192.26.92.30 d.gtld-servers.net. 146476 IN A 192.31.80.30 e.gtld-servers.net. 146476 IN A 192.12.94.30 f.gtld-servers.net. 146476 IN A 192.35.51.30 g.gtld-servers.net. 146476 IN A 192.42.93.30 h.gtld-servers.net. 146476 IN A 192.54.112.30 i.gtld-servers.net. 146476 IN A 192.43.172.30 j.gtld-servers.net. 146476 IN A 192.48.79.30 k.gtld-servers.net. 146476 IN A 192.52.178.30 l.gtld-servers.net. 146476 IN A 192.41.162.30 m.gtld-servers.net. 146476 IN A 192.55.83.30" UDP 53788 172.0.0.110 2.1.3 DNS Response IN A NOERROR InfobloxDNSView=2fa70211-f936-4bff-8810-56103877d7ad;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=13;InfobloxArCount=13 DNS safebrowsing.googleapis.com. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/12/2021, 12:13:16.670 AM Infoblox Data Connector DNS Response 1 8.8.8.8 "safebrowsing.googleapis.com. 52 IN A 74.125.137.95 . 32768 512 OPT " UDP 58976 172.0.0.253 2.1.3 DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1 DNS safebrowsing.googleapis.com. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/12/2021, 12:10:16.636 AM Infoblox Data Connector DNS Response 1 8.8.8.8 "ns4-09.azure-dns.info. 3596 IN A 13.107.160.9 . 32768 512 OPT " UDP 55306 172.0.0.253 2.1.3 DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1 DNS ns4-09.azure-dns.info. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/12/2021, 12:05:16.646 AM Infoblox Data Connector DNS Response 1 8.8.8.8 "ns3-09.azure-dns.org. 2748 IN A 13.107.24.9 . 32768 512 OPT " UDP 52253 172.0.0.253 2.1.3 DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1 DNS ns3-09.azure-dns.org. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/12/2021, 12:10:16.636 AM Infoblox Data Connector DNS Response 1 8.8.8.8 "ns2-09.azure-dns.net. 2730 IN A 64.4.48.9 . 32768 512 OPT " UDP 32807 172.0.0.253 2.1.3 DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1 DNS ns2-09.azure-dns.net. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/12/2021, 12:25:46.644 AM Infoblox Data Connector DNS Response 1 172.0.0.253 "infoblox.com. 836 IN SOA thens.infoblox.com. dns.infoblox.com. 2006594658 10800 1080 1209600 3600" UDP 62059 172.0.0.33 2.1.3 DNS Response IN TXT NXDOMAIN InfobloxDNSView=2fa70211-f936-4bff-8810-56103877d7ad;InfobloxDNSQClass=IN;InfobloxDNSQType=TXT;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NXDOMAIN;InfobloxAnCount=0;InfobloxNsCount=1;InfobloxArCount=0 DNS probe.infoblox.com. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/12/2021, 12:25:46.645 AM Infoblox Data Connector DNS Response 1 8.8.8.8 "infoblox.com. 836 IN SOA thens.infoblox.com. dns.infoblox.com. 2006594658 10800 1080 1209600 3600 infoblox.com. 836 IN RRSIG SOA 5 2 3600 20210216000453 20210211230453 42390 infoblox.com. UDP 55004 172.0.0.253 2.1.3 DNS Response IN TXT NXDOMAIN InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=TXT;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NXDOMAIN;KM0UDEZaKvjwv7o7Du25SdACInDRrrjkgBfnquwSdW4cE2TaqsW7sjr+cw01rNikDGQexi5sFgu63NLZEErVWOB7QmaNBbHwnQznxlOD5HSaJtALqSPv4+bX+fOTmUPF7Iv4ciAMVhrZNip6UyZkuA/AHEQpEV8j8aZC5zyq8SY= infoblox.com. 2636 IN NSEC 6map.infoblox.com. A NS SOA MX TXT AAAA RRSIG NSEC DNSKEY infoblox.com. 2636 IN RRSIG NSEC 5 2 3600 20210215102520 20210211094432 42390 infoblox.com.;ltbHfYR2kCklsWj6Pc6RffRuKBEttxvj9xuCJNAIfNHm0Tcc6j0i1dxG8Z86M/7U00ARch8F6L2zVWtRq+CoUJw4eIm2cMm6QR1vou6Pzfff53n88h5U3MaRXzGpco3YCz9B0QL+q5hg9+uqbHgQGau1TXYoSglLEqpdQKECbTM= preprod-noa.infoblox.com. 2636 IN NSEC pstraining.infoblox.com. NS RRSIG NSEC preprod-noa.infoblox.com. 2636 IN RRSIG NSEC 5 3 3600 20210215220928 20210211214809 42390 infoblox.com.;jkCvy1LpbSPNmDeuqIVJlONQgVC01X80rwYN8Xj7R59wqhg9nuYa7sGYzNXzWjzy6MHpVFfgfXEtDYgY4E42W+StAvTi4hx77KmzGD2xuKO/KGKd3/RqsMCwsdtHmzCLtHU7EY6tumRBjlu7E/ErTRkJeSrECrtaZsHHhpLhKho= . 32768 512 OPT ";InfobloxAnCount=0;InfobloxNsCount=6;InfobloxArCount=1 DNS probe.infoblox.com. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/12/2021, 12:26:31.640 AM Infoblox Data Connector DNS Response 1 172.0.0.253 "infoblox.com. 799 IN SOA thens.infoblox.com. dns.infoblox.com. 2006594658 10800 1080 1209600 3600" UDP 62091 172.0.0.32 2.1.3 DNS Response IN TXT NXDOMAIN InfobloxDNSView=2fa70211-f936-4bff-8810-56103877d7ad;InfobloxDNSQClass=IN;InfobloxDNSQType=TXT;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NXDOMAIN;InfobloxAnCount=0;InfobloxNsCount=1;InfobloxArCount=0 DNS probe.infoblox.com. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/12/2021, 12:15:46.640 AM Infoblox Data Connector DNS Response 1 172.0.0.253 "infoblox.com. 438 IN SOA thens.infoblox.com. dns.infoblox.com. 2006594654 10800 1080 1209600 3600" UDP 55225 172.0.0.33 2.1.3 DNS Response IN TXT NXDOMAIN InfobloxDNSView=2fa70211-f936-4bff-8810-56103877d7ad;InfobloxDNSQClass=IN;InfobloxDNSQType=TXT;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NXDOMAIN;InfobloxAnCount=0;InfobloxNsCount=1;InfobloxArCount=0 DNS probe.infoblox.com. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/12/2021, 12:16:16.630 AM Infoblox Data Connector DNS Response 1 172.0.0.253 "infoblox.com. 403 IN SOA thens.infoblox.com. dns.infoblox.com. 2006594654 10800 1080 1209600 3600" UDP 56468 172.0.0.32 2.1.3 DNS Response IN TXT NXDOMAIN InfobloxDNSView=2fa70211-f936-4bff-8810-56103877d7ad;InfobloxDNSQClass=IN;InfobloxDNSQType=TXT;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NXDOMAIN;InfobloxAnCount=0;InfobloxNsCount=1;InfobloxArCount=0 DNS probe.infoblox.com. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/11/2021, 11:55:16.617 PM Infoblox Data Connector DNS Response 1 172.0.0.253 "infoblox.com. 1664 IN SOA thens.infoblox.com. dns.infoblox.com. 2006594654 10800 1080 1209600 3600" UDP 60664 172.0.0.33 2.1.3 DNS Response IN TXT NXDOMAIN InfobloxDNSView=2fa70211-f936-4bff-8810-56103877d7ad;InfobloxDNSQClass=IN;InfobloxDNSQType=TXT;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NXDOMAIN;InfobloxAnCount=0;InfobloxNsCount=1;InfobloxArCount=0 DNS probe.infoblox.com. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/11/2021, 11:55:16.617 PM Infoblox Data Connector DNS Response 1 8.8.8.8 "infoblox.com. 1664 IN SOA thens.infoblox.com. dns.infoblox.com. 2006594654 10800 1080 1209600 3600 infoblox.com. 1664 IN RRSIG SOA 5 2 3600 20210215235054 20210211225054 42390 infoblox.com. UDP 37721 172.0.0.253 2.1.3 DNS Response IN TXT NXDOMAIN InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=TXT;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NXDOMAIN;URQjpbnaduy5A2bj673Rl5LUTrbsJU1hVTr/z7NlAe5dglgGYcpp1ROwCJsOOfhtq99TxxowkcmD+AwCm3Ggtvmrh3s2hCW3ik/vGY+ul51ltp1faMaAz6q0w6vntqVlZ5+/1TZ9yIHPRRLQnAGxcBAKwvmOwEUJY/wI3USQ8Wo= infoblox.com. 3464 IN NSEC 6map.infoblox.com. A NS SOA MX TXT AAAA RRSIG NSEC DNSKEY infoblox.com. 3464 IN RRSIG NSEC 5 2 3600 20210215102520 20210211094432 42390 infoblox.com.;ltbHfYR2kCklsWj6Pc6RffRuKBEttxvj9xuCJNAIfNHm0Tcc6j0i1dxG8Z86M/7U00ARch8F6L2zVWtRq+CoUJw4eIm2cMm6QR1vou6Pzfff53n88h5U3MaRXzGpco3YCz9B0QL+q5hg9+uqbHgQGau1TXYoSglLEqpdQKECbTM= preprod-noa.infoblox.com. 3464 IN NSEC pstraining.infoblox.com. NS RRSIG NSEC preprod-noa.infoblox.com. 3464 IN RRSIG NSEC 5 3 3600 20210215220928 20210211214809 42390 infoblox.com.;jkCvy1LpbSPNmDeuqIVJlONQgVC01X80rwYN8Xj7R59wqhg9nuYa7sGYzNXzWjzy6MHpVFfgfXEtDYgY4E42W+StAvTi4hx77KmzGD2xuKO/KGKd3/RqsMCwsdtHmzCLtHU7EY6tumRBjlu7E/ErTRkJeSrECrtaZsHHhpLhKho= . 32768 512 OPT ";InfobloxAnCount=0;InfobloxNsCount=6;InfobloxArCount=1 DNS probe.infoblox.com. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/11/2021, 11:55:46.638 PM Infoblox Data Connector DNS Response 1 172.0.0.253 "infoblox.com. 1632 IN SOA thens.infoblox.com. dns.infoblox.com. 2006594654 10800 1080 1209600 3600" UDP 53104 172.0.0.32 2.1.3 DNS Response IN TXT NXDOMAIN InfobloxDNSView=2fa70211-f936-4bff-8810-56103877d7ad;InfobloxDNSQClass=IN;InfobloxDNSQType=TXT;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NXDOMAIN;InfobloxAnCount=0;InfobloxNsCount=1;InfobloxArCount=0 DNS probe.infoblox.com. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/12/2021, 12:05:31.639 AM Infoblox Data Connector DNS Response 1 172.0.0.253 "infoblox.com. 1051 IN SOA thens.infoblox.com. dns.infoblox.com. 2006594654 10800 1080 1209600 3600" UDP 56038 172.0.0.33 2.1.3 DNS Response IN TXT NXDOMAIN InfobloxDNSView=2fa70211-f936-4bff-8810-56103877d7ad;InfobloxDNSQClass=IN;InfobloxDNSQType=TXT;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NXDOMAIN;InfobloxAnCount=0;InfobloxNsCount=1;InfobloxArCount=0 DNS probe.infoblox.com. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/12/2021, 12:06:01.638 AM Infoblox Data Connector DNS Response 1 172.0.0.253 "infoblox.com. 1017 IN SOA thens.infoblox.com. dns.infoblox.com. 2006594654 10800 1080 1209600 3600" UDP 51793 172.0.0.32 2.1.3 DNS Response IN TXT NXDOMAIN InfobloxDNSView=2fa70211-f936-4bff-8810-56103877d7ad;InfobloxDNSQClass=IN;InfobloxDNSQType=TXT;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NXDOMAIN;InfobloxAnCount=0;InfobloxNsCount=1;InfobloxArCount=0 DNS probe.infoblox.com. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/12/2021, 12:16:46.627 AM Infoblox Data Connector DNS Response 1 8.8.8.8 "global.asimov.events.data.trafficmanager.net. 15 IN CNAME skypedataprdcoljpe03.cloudapp.net. skypedataprdcoljpe03.cloudapp.net. 1 IN A 52.114.32.8 . 32768 512 OPT " UDP 58700 172.0.0.253 2.1.3 DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=2;InfobloxNsCount=0;InfobloxArCount=1 DNS global.asimov.events.data.trafficmanager.net. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/12/2021, 12:01:46.672 AM Infoblox Data Connector DNS Response 1 8.8.8.8 "e28578.d.akamaiedge.net. 19 IN A 23.66.115.88 e28578.d.akamaiedge.net. 19 IN A 23.66.115.65 . 32768 512 OPT " UDP 43777 172.0.0.253 2.1.3 DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=2;InfobloxNsCount=0;InfobloxArCount=1 DNS e28578.d.akamaiedge.net. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/11/2021, 11:57:31.632 PM Infoblox Data Connector DNS Response 1 8.8.8.8 "e15275.g.akamaiedge.net. 19 IN A 104.86.95.226 . 32768 512 OPT " UDP 50478 172.0.0.253 2.1.3 DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1 DNS e15275.g.akamaiedge.net. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/12/2021, 12:01:46.671 AM Infoblox Data Connector DNS Response 1 8.8.8.8 "e10663.dscg.akamaiedge.net. 19 IN A 23.44.13.99 . 32768 512 OPT " UDP 50449 172.0.0.253 2.1.3 DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1 DNS e10663.dscg.akamaiedge.net. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/12/2021, 12:17:46.668 AM Infoblox Data Connector DNS Response 1 172.0.0.253 "ctldl.windowsupdate.com. 1610 IN CNAME au-bg-shim.trafficmanager.net. au-bg-shim.trafficmanager.net. 3339 IN CNAME audownload.windowsupdate.nsatc.net. audownload.windowsupdate.nsatc.net. 412 IN CNAME au.download.windowsupdate.com.hwcdn.net. au.download.windowsupdate.com.hwcdn.net. 2629 IN CNAME cds.d2s7q6s2.hwcdn.net. cds.d2s7q6s2.hwcdn.net. 294 IN A 205.185.216.10 net. 146205 IN NS d.gtld-servers.net. net. 146205 IN NS h.gtld-servers.net. net. 146205 IN NS f.gtld-servers.net. net. 146205 IN NS l.gtld-servers.net. net. 146205 IN NS a.gtld-servers.net. net. 146205 IN NS i.gtld-servers.net. net. 146205 IN NS j.gtld-servers.net. net. 146205 IN NS b.gtld-servers.net. net. 146205 IN NS c.gtld-servers.net. net. 146205 IN NS k.gtld-servers.net. net. 146205 IN NS m.gtld-servers.net. net. 146205 IN NS g.gtld-servers.net. net. 146205 IN NS e.gtld-servers.net. a.gtld-servers.net. 146205 IN A 192.5.6.30 b.gtld-servers.net. 146205 IN A 192.33.14.30 c.gtld-servers.net. 146205 IN A 192.26.92.30 d.gtld-servers.net. 146205 IN A 192.31.80.30" UDP 60429 172.0.0.110 2.1.3 DNS Response IN A NOERROR InfobloxDNSView=2fa70211-f936-4bff-8810-56103877d7ad;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=5;InfobloxNsCount=13;InfobloxArCount=4 DNS ctldl.windowsupdate.com. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/12/2021, 12:17:46.666 AM Infoblox Data Connector DNS Response 1 8.8.8.8 "ctldl.windowsupdate.com. 1610 IN CNAME au-bg-shim.trafficmanager.net. au-bg-shim.trafficmanager.net. 1862 IN CNAME audownload.windowsupdate.nsatc.net. audownload.windowsupdate.nsatc.net. 424 IN CNAME auto.au.download.windowsupdate.com.c.footprint.net. auto.au.download.windowsupdate.com.c.footprint.net. 436 IN A 8.250.208.126 auto.au.download.windowsupdate.com.c.footprint.net. 436 IN A 8.253.133.112 auto.au.download.windowsupdate.com.c.footprint.net. 436 IN A 8.252.68.254 auto.au.download.windowsupdate.com.c.footprint.net. 436 IN A 8.253.231.254 auto.au.download.windowsupdate.com.c.footprint.net. 436 IN A 8.253.133.248 . 32768 512 OPT " UDP 37184 172.0.0.253 2.1.3 DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=8;InfobloxNsCount=0;InfobloxArCount=1 DNS ctldl.windowsupdate.com. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/12/2021, 12:05:31.639 AM Infoblox Data Connector DNS Response 1 172.0.0.253 "csp.infoblox.com. 59 IN CNAME wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 30 IN A 18.233.189.178 wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 30 IN A 18.235.149.1 wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 30 IN A 18.209.243.220 amazonaws.com. 146976 IN NS r2.amazonaws.com. amazonaws.com. 146976 IN NS r1.amazonaws.com. amazonaws.com. 146976 IN NS u2.amazonaws.com. amazonaws.com. 146976 IN NS u1.amazonaws.com. r1.amazonaws.com. 146976 IN A 205.251.192.27 r2.amazonaws.com. 146976 IN A 205.251.195.199 u1.amazonaws.com. 146976 IN A 156.154.64.10 u2.amazonaws.com. 146976 IN A 156.154.65.10 r1.amazonaws.com. 146976 IN AAAA 2600:9000:5300:1b00::1 r2.amazonaws.com. 146976 IN AAAA 2600:9000:5303:c700::1 u1.amazonaws.com. 146976 IN AAAA 2001:502:f3ff::10 u2.amazonaws.com. 146976 IN AAAA 2610:a1:1014::10" UDP 53359 172.0.0.33 2.1.3 DNS Response IN A NOERROR InfobloxDNSView=2fa70211-f936-4bff-8810-56103877d7ad;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=4;InfobloxNsCount=4;InfobloxArCount=8 DNS csp.infoblox.com. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/12/2021, 12:05:31.639 AM Infoblox Data Connector DNS Response 1 8.8.8.8 "csp.infoblox.com. 59 IN CNAME wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. csp.infoblox.com. 59 IN RRSIG CNAME 5 3 60 20210215080312 20210211072137 42390 infoblox.com. UDP 33872 172.0.0.253 2.1.3 DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;hmNp5KUN+Ve+rnbcXP4qK12Xy4UeoLsjop2V9t3DchBHtYvIQN1YA3E9X31zygaFcYyqCN7Pl+ee31lGJt1NacBHxQO9dlXHP0cwlbEgTpP1gLyBnUGxLS31vDP7NmObmLN4B223WvsvaiIBxf+OPTVFPjUR9GinDj2MjN2dWHs= wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 59 IN A 18.209.243.220 wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 59 IN A 18.233.189.178 wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 59 IN A 18.235.149.1 . 32768 512 OPT ";InfobloxAnCount=5;InfobloxNsCount=0;InfobloxArCount=1 DNS csp.infoblox.com. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/12/2021, 12:16:16.630 AM Infoblox Data Connector DNS Response 1 172.0.0.253 "csp.infoblox.com. 57 IN CNAME wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 59 IN A 18.233.189.178 wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 59 IN A 18.235.149.1 wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 59 IN A 18.209.243.220 amazonaws.com. 146327 IN NS u1.amazonaws.com. amazonaws.com. 146327 IN NS u2.amazonaws.com. amazonaws.com. 146327 IN NS r1.amazonaws.com. amazonaws.com. 146327 IN NS r2.amazonaws.com. r1.amazonaws.com. 146327 IN A 205.251.192.27 r2.amazonaws.com. 146327 IN A 205.251.195.199 u1.amazonaws.com. 146327 IN A 156.154.64.10 u2.amazonaws.com. 146327 IN A 156.154.65.10 r1.amazonaws.com. 146327 IN AAAA 2600:9000:5300:1b00::1 r2.amazonaws.com. 146327 IN AAAA 2600:9000:5303:c700::1 u1.amazonaws.com. 146327 IN AAAA 2001:502:f3ff::10 u2.amazonaws.com. 146327 IN AAAA 2610:a1:1014::10" UDP 56467 172.0.0.32 2.1.3 DNS Response IN A NOERROR InfobloxDNSView=2fa70211-f936-4bff-8810-56103877d7ad;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=4;InfobloxNsCount=4;InfobloxArCount=8 DNS csp.infoblox.com. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/12/2021, 12:16:16.630 AM Infoblox Data Connector DNS Response 1 8.8.8.8 "csp.infoblox.com. 57 IN CNAME wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. csp.infoblox.com. 57 IN RRSIG CNAME 5 3 60 20210215080312 20210211072137 42390 infoblox.com. UDP 49295 172.0.0.253 2.1.3 DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;hmNp5KUN+Ve+rnbcXP4qK12Xy4UeoLsjop2V9t3DchBHtYvIQN1YA3E9X31zygaFcYyqCN7Pl+ee31lGJt1NacBHxQO9dlXHP0cwlbEgTpP1gLyBnUGxLS31vDP7NmObmLN4B223WvsvaiIBxf+OPTVFPjUR9GinDj2MjN2dWHs= wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 20 IN A 18.235.149.1 wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 20 IN A 18.209.243.220 wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 20 IN A 18.233.189.178 . 32768 512 OPT ";InfobloxAnCount=5;InfobloxNsCount=0;InfobloxArCount=1 DNS csp.infoblox.com. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/12/2021, 12:26:31.640 AM Infoblox Data Connector DNS Response 1 172.0.0.253 "csp.infoblox.com. 51 IN CNAME wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 22 IN A 18.209.243.220 wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 22 IN A 18.235.149.1 wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 22 IN A 18.233.189.178 amazonaws.com. 145713 IN NS u1.amazonaws.com. amazonaws.com. 145713 IN NS r1.amazonaws.com. amazonaws.com. 145713 IN NS u2.amazonaws.com. amazonaws.com. 145713 IN NS r2.amazonaws.com. r1.amazonaws.com. 145713 IN A 205.251.192.27 r2.amazonaws.com. 145713 IN A 205.251.195.199 u1.amazonaws.com. 145713 IN A 156.154.64.10 u2.amazonaws.com. 145713 IN A 156.154.65.10 r1.amazonaws.com. 145713 IN AAAA 2600:9000:5300:1b00::1 r2.amazonaws.com. 145713 IN AAAA 2600:9000:5303:c700::1 u1.amazonaws.com. 145713 IN AAAA 2001:502:f3ff::10 u2.amazonaws.com. 145713 IN AAAA 2610:a1:1014::10" UDP 53347 172.0.0.32 2.1.3 DNS Response IN A NOERROR InfobloxDNSView=2fa70211-f936-4bff-8810-56103877d7ad;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=4;InfobloxNsCount=4;InfobloxArCount=8 DNS csp.infoblox.com. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/12/2021, 12:26:31.640 AM Infoblox Data Connector DNS Response 1 8.8.8.8 "csp.infoblox.com. 51 IN CNAME wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. csp.infoblox.com. 51 IN RRSIG CNAME 5 3 60 20210215080312 20210211072137 42390 infoblox.com. UDP 51652 172.0.0.253 2.1.3 DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;hmNp5KUN+Ve+rnbcXP4qK12Xy4UeoLsjop2V9t3DchBHtYvIQN1YA3E9X31zygaFcYyqCN7Pl+ee31lGJt1NacBHxQO9dlXHP0cwlbEgTpP1gLyBnUGxLS31vDP7NmObmLN4B223WvsvaiIBxf+OPTVFPjUR9GinDj2MjN2dWHs= wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 23 IN A 18.209.243.220 wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 23 IN A 18.233.189.178 wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 23 IN A 18.235.149.1 . 32768 512 OPT ";InfobloxAnCount=5;InfobloxNsCount=0;InfobloxArCount=1 DNS csp.infoblox.com. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/11/2021, 11:55:46.637 PM Infoblox Data Connector DNS Response 1 172.0.0.253 "csp.infoblox.com. 48 IN CNAME wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 27 IN A 18.233.189.178 wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 27 IN A 18.235.149.1 wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 27 IN A 18.209.243.220 amazonaws.com. 147557 IN NS r2.amazonaws.com. amazonaws.com. 147557 IN NS r1.amazonaws.com. amazonaws.com. 147557 IN NS u1.amazonaws.com. amazonaws.com. 147557 IN NS u2.amazonaws.com. r1.amazonaws.com. 147557 IN A 205.251.192.27 r2.amazonaws.com. 147557 IN A 205.251.195.199 u1.amazonaws.com. 147557 IN A 156.154.64.10 u2.amazonaws.com. 147557 IN A 156.154.65.10 r1.amazonaws.com. 147557 IN AAAA 2600:9000:5300:1b00::1 r2.amazonaws.com. 147557 IN AAAA 2600:9000:5303:c700::1 u1.amazonaws.com. 147557 IN AAAA 2001:502:f3ff::10 u2.amazonaws.com. 147557 IN AAAA 2610:a1:1014::10" UDP 60620 172.0.0.32 2.1.3 DNS Response IN A NOERROR InfobloxDNSView=2fa70211-f936-4bff-8810-56103877d7ad;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=4;InfobloxNsCount=4;InfobloxArCount=8 DNS csp.infoblox.com. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/11/2021, 11:55:46.638 PM Infoblox Data Connector DNS Response 1 8.8.8.8 "csp.infoblox.com. 48 IN CNAME wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. csp.infoblox.com. 48 IN RRSIG CNAME 5 3 60 20210215080312 20210211072137 42390 infoblox.com. UDP 41368 172.0.0.253 2.1.3 DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;hmNp5KUN+Ve+rnbcXP4qK12Xy4UeoLsjop2V9t3DchBHtYvIQN1YA3E9X31zygaFcYyqCN7Pl+ee31lGJt1NacBHxQO9dlXHP0cwlbEgTpP1gLyBnUGxLS31vDP7NmObmLN4B223WvsvaiIBxf+OPTVFPjUR9GinDj2MjN2dWHs= wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 25 IN A 18.209.243.220 wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 25 IN A 18.235.149.1 wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 25 IN A 18.233.189.178 . 32768 512 OPT ";InfobloxAnCount=5;InfobloxNsCount=0;InfobloxArCount=1 DNS csp.infoblox.com. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/12/2021, 12:25:46.644 AM Infoblox Data Connector DNS Response 1 172.0.0.253 "csp.infoblox.com. 31 IN CNAME wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 58 IN A 18.209.243.220 wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 58 IN A 18.235.149.1 wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 58 IN A 18.233.189.178 amazonaws.com. 145749 IN NS r1.amazonaws.com. amazonaws.com. 145749 IN NS u2.amazonaws.com. amazonaws.com. 145749 IN NS u1.amazonaws.com. amazonaws.com. 145749 IN NS r2.amazonaws.com. r1.amazonaws.com. 145749 IN A 205.251.192.27 r2.amazonaws.com. 145749 IN A 205.251.195.199 u1.amazonaws.com. 145749 IN A 156.154.64.10 u2.amazonaws.com. 145749 IN A 156.154.65.10 r1.amazonaws.com. 145749 IN AAAA 2600:9000:5300:1b00::1 r2.amazonaws.com. 145749 IN AAAA 2600:9000:5303:c700::1 u1.amazonaws.com. 145749 IN AAAA 2001:502:f3ff::10 u2.amazonaws.com. 145749 IN AAAA 2610:a1:1014::10" UDP 61571 172.0.0.33 2.1.3 DNS Response IN A NOERROR InfobloxDNSView=2fa70211-f936-4bff-8810-56103877d7ad;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=4;InfobloxNsCount=4;InfobloxArCount=8 DNS csp.infoblox.com. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/12/2021, 12:25:46.644 AM Infoblox Data Connector DNS Response 1 8.8.8.8 "csp.infoblox.com. 31 IN CNAME wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. csp.infoblox.com. 31 IN RRSIG CNAME 5 3 60 20210215080312 20210211072137 42390 infoblox.com. UDP 38939 172.0.0.253 2.1.3 DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;hmNp5KUN+Ve+rnbcXP4qK12Xy4UeoLsjop2V9t3DchBHtYvIQN1YA3E9X31zygaFcYyqCN7Pl+ee31lGJt1NacBHxQO9dlXHP0cwlbEgTpP1gLyBnUGxLS31vDP7NmObmLN4B223WvsvaiIBxf+OPTVFPjUR9GinDj2MjN2dWHs= wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 32 IN A 18.233.189.178 wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 32 IN A 18.235.149.1 wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 32 IN A 18.209.243.220 . 32768 512 OPT ";InfobloxAnCount=5;InfobloxNsCount=0;InfobloxArCount=1 DNS csp.infoblox.com. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/12/2021, 12:15:46.640 AM Infoblox Data Connector DNS Response 1 172.0.0.253 "csp.infoblox.com. 30 IN CNAME wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 30 IN A 18.233.189.178 wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 30 IN A 18.209.243.220 wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 30 IN A 18.235.149.1 amazonaws.com. 146362 IN NS r2.amazonaws.com. amazonaws.com. 146362 IN NS r1.amazonaws.com. amazonaws.com. 146362 IN NS u2.amazonaws.com. amazonaws.com. 146362 IN NS u1.amazonaws.com. r1.amazonaws.com. 146362 IN A 205.251.192.27 r2.amazonaws.com. 146362 IN A 205.251.195.199 u1.amazonaws.com. 146362 IN A 156.154.64.10 u2.amazonaws.com. 146362 IN A 156.154.65.10 r1.amazonaws.com. 146362 IN AAAA 2600:9000:5300:1b00::1 r2.amazonaws.com. 146362 IN AAAA 2600:9000:5303:c700::1 u1.amazonaws.com. 146362 IN AAAA 2001:502:f3ff::10 u2.amazonaws.com. 146362 IN AAAA 2610:a1:1014::10" UDP 55224 172.0.0.33 2.1.3 DNS Response IN A NOERROR InfobloxDNSView=2fa70211-f936-4bff-8810-56103877d7ad;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=4;InfobloxNsCount=4;InfobloxArCount=8 DNS csp.infoblox.com. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/12/2021, 12:15:46.640 AM Infoblox Data Connector DNS Response 1 8.8.8.8 "csp.infoblox.com. 30 IN CNAME wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. csp.infoblox.com. 30 IN RRSIG CNAME 5 3 60 20210215080312 20210211072137 42390 infoblox.com. UDP 51524 172.0.0.253 2.1.3 DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;hmNp5KUN+Ve+rnbcXP4qK12Xy4UeoLsjop2V9t3DchBHtYvIQN1YA3E9X31zygaFcYyqCN7Pl+ee31lGJt1NacBHxQO9dlXHP0cwlbEgTpP1gLyBnUGxLS31vDP7NmObmLN4B223WvsvaiIBxf+OPTVFPjUR9GinDj2MjN2dWHs= wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 47 IN A 18.233.189.178 wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 47 IN A 18.209.243.220 wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 47 IN A 18.235.149.1 . 32768 512 OPT ";InfobloxAnCount=5;InfobloxNsCount=0;InfobloxArCount=1 DNS csp.infoblox.com. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/12/2021, 12:06:01.638 AM Infoblox Data Connector DNS Response 1 172.0.0.253 "csp.infoblox.com. 26 IN CNAME wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 59 IN A 18.209.243.220 wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 59 IN A 18.235.149.1 wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 59 IN A 18.233.189.178 amazonaws.com. 146943 IN NS u1.amazonaws.com. amazonaws.com. 146943 IN NS r1.amazonaws.com. amazonaws.com. 146943 IN NS u2.amazonaws.com. amazonaws.com. 146943 IN NS r2.amazonaws.com. r1.amazonaws.com. 146943 IN A 205.251.192.27 r2.amazonaws.com. 146943 IN A 205.251.195.199 u1.amazonaws.com. 146943 IN A 156.154.64.10 u2.amazonaws.com. 146943 IN A 156.154.65.10 r1.amazonaws.com. 146943 IN AAAA 2600:9000:5300:1b00::1 r2.amazonaws.com. 146943 IN AAAA 2600:9000:5303:c700::1 u1.amazonaws.com. 146943 IN AAAA 2001:502:f3ff::10 u2.amazonaws.com. 146943 IN AAAA 2610:a1:1014::10" UDP 63942 172.0.0.32 2.1.3 DNS Response IN A NOERROR InfobloxDNSView=2fa70211-f936-4bff-8810-56103877d7ad;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=4;InfobloxNsCount=4;InfobloxArCount=8 DNS csp.infoblox.com. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/11/2021, 11:55:16.616 PM Infoblox Data Connector DNS Response 1 172.0.0.253 "csp.infoblox.com. 19 IN CNAME wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 59 IN A 18.235.149.1 wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 59 IN A 18.233.189.178 wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 59 IN A 18.209.243.220 amazonaws.com. 147589 IN NS r1.amazonaws.com. amazonaws.com. 147589 IN NS u2.amazonaws.com. amazonaws.com. 147589 IN NS u1.amazonaws.com. amazonaws.com. 147589 IN NS r2.amazonaws.com. r1.amazonaws.com. 147589 IN A 205.251.192.27 r2.amazonaws.com. 147589 IN A 205.251.195.199 u1.amazonaws.com. 147589 IN A 156.154.64.10 u2.amazonaws.com. 147589 IN A 156.154.65.10 r1.amazonaws.com. 147589 IN AAAA 2600:9000:5300:1b00::1 r2.amazonaws.com. 147589 IN AAAA 2600:9000:5303:c700::1 u1.amazonaws.com. 147589 IN AAAA 2001:502:f3ff::10 u2.amazonaws.com. 147589 IN AAAA 2610:a1:1014::10" UDP 58478 172.0.0.33 2.1.3 DNS Response IN A NOERROR InfobloxDNSView=2fa70211-f936-4bff-8810-56103877d7ad;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=4;InfobloxNsCount=4;InfobloxArCount=8 DNS csp.infoblox.com. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/11/2021, 11:55:16.618 PM Infoblox Data Connector DNS Response 1 8.8.8.8 "csp.infoblox.com. 19 IN CNAME wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. csp.infoblox.com. 19 IN RRSIG CNAME 5 3 60 20210215080312 20210211072137 42390 infoblox.com. UDP 46821 172.0.0.253 2.1.3 DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;hmNp5KUN+Ve+rnbcXP4qK12Xy4UeoLsjop2V9t3DchBHtYvIQN1YA3E9X31zygaFcYyqCN7Pl+ee31lGJt1NacBHxQO9dlXHP0cwlbEgTpP1gLyBnUGxLS31vDP7NmObmLN4B223WvsvaiIBxf+OPTVFPjUR9GinDj2MjN2dWHs= wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 57 IN A 18.209.243.220 wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 57 IN A 18.235.149.1 wl-prd-1-CSP-NLB-264a749130f6d932.elb.us-east-1.amazonaws.com. 57 IN A 18.233.189.178 . 32768 512 OPT ";InfobloxAnCount=5;InfobloxNsCount=0;InfobloxArCount=1 DNS csp.infoblox.com. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/12/2021, 12:02:31.642 AM Infoblox Data Connector DNS Response 1 172.0.0.253 "clientservices.googleapis.com. 299 IN A 216.58.194.163 com. 147135 IN NS l.gtld-servers.net. com. 147135 IN NS g.gtld-servers.net. com. 147135 IN NS h.gtld-servers.net. com. 147135 IN NS k.gtld-servers.net. com. 147135 IN NS a.gtld-servers.net. com. 147135 IN NS c.gtld-servers.net. com. 147135 IN NS f.gtld-servers.net. com. 147135 IN NS i.gtld-servers.net. com. 147135 IN NS e.gtld-servers.net. com. 147135 IN NS j.gtld-servers.net. com. 147135 IN NS d.gtld-servers.net. com. 147135 IN NS b.gtld-servers.net. com. 147135 IN NS m.gtld-servers.net. a.gtld-servers.net. 147117 IN A 192.5.6.30 b.gtld-servers.net. 147117 IN A 192.33.14.30 c.gtld-servers.net. 147117 IN A 192.26.92.30 d.gtld-servers.net. 147117 IN A 192.31.80.30 e.gtld-servers.net. 147117 IN A 192.12.94.30 f.gtld-servers.net. 147117 IN A 192.35.51.30 g.gtld-servers.net. 147117 IN A 192.42.93.30 h.gtld-servers.net. 147117 IN A 192.54.112.30 i.gtld-servers.net. 147117 IN A 192.43.172.30 j.gtld-servers.net. 147117 IN A 192.48.79.30 k.gtld-servers.net. 147117 IN A 192.52.178.30 l.gtld-servers.net. 147117 IN A 192.41.162.30 m.gtld-servers.net. 147117 IN A 192.55.83.30" UDP 57944 172.0.0.110 2.1.3 DNS Response IN A NOERROR InfobloxDNSView=2fa70211-f936-4bff-8810-56103877d7ad;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=13;InfobloxArCount=13 DNS clientservices.googleapis.com. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/12/2021, 12:02:31.642 AM Infoblox Data Connector DNS Response 1 8.8.8.8 "clientservices.googleapis.com. 299 IN A 216.58.194.163 . 32768 512 OPT " UDP 51232 172.0.0.253 2.1.3 DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1 DNS clientservices.googleapis.com. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/12/2021, 12:05:16.647 AM Infoblox Data Connector DNS Response 1 172.0.0.253 "client.wns.windows.com. 896 IN CNAME wns.notify.trafficmanager.net. wns.notify.trafficmanager.net. 299 IN A 52.230.222.68 trafficmanager.net. 146966 IN NS tm2.dns-tm.com. trafficmanager.net. 146966 IN NS tm1.dns-tm.com. trafficmanager.net. 146966 IN NS tm2.edgedns-tm.info. trafficmanager.net. 146966 IN NS tm1.edgedns-tm.info." UDP 61689 172.0.0.110 2.1.3 DNS Response IN A NOERROR InfobloxDNSView=2fa70211-f936-4bff-8810-56103877d7ad;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=2;InfobloxNsCount=4;InfobloxArCount=0 DNS client.wns.windows.com. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/12/2021, 12:10:16.636 AM Infoblox Data Connector DNS Response 1 172.0.0.253 "client.wns.windows.com. 591 IN CNAME wns.notify.trafficmanager.net. wns.notify.trafficmanager.net. 257 IN CNAME vip2-dm3p.wns.notify.trafficmanager.net. vip2-dm3p.wns.notify.trafficmanager.net. 203 IN A 52.242.211.89 trafficmanager.net. 146661 IN NS tm1.dns-tm.com. trafficmanager.net. 146661 IN NS tm2.edgedns-tm.info. trafficmanager.net. 146661 IN NS tm1.edgedns-tm.info. trafficmanager.net. 146661 IN NS tm2.dns-tm.com." UDP 49526 172.0.0.110 2.1.3 DNS Response IN A NOERROR InfobloxDNSView=2fa70211-f936-4bff-8810-56103877d7ad;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=3;InfobloxNsCount=4;InfobloxArCount=0 DNS client.wns.windows.com. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/12/2021, 12:15:16.651 AM Infoblox Data Connector DNS Response 1 172.0.0.253 "client.wns.windows.com. 291 IN CNAME wns.notify.trafficmanager.net. wns.notify.trafficmanager.net. 134 IN CNAME vip2-dm3p.wns.notify.trafficmanager.net. vip2-dm3p.wns.notify.trafficmanager.net. 202 IN A 52.242.211.89 trafficmanager.net. 146361 IN NS tm1.edgedns-tm.info. trafficmanager.net. 146361 IN NS tm1.dns-tm.com. trafficmanager.net. 146361 IN NS tm2.dns-tm.com. trafficmanager.net. 146361 IN NS tm2.edgedns-tm.info." UDP 55406 172.0.0.110 2.1.3 DNS Response IN A NOERROR InfobloxDNSView=2fa70211-f936-4bff-8810-56103877d7ad;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=3;InfobloxNsCount=4;InfobloxArCount=0 DNS client.wns.windows.com. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/12/2021, 12:20:31.660 AM Infoblox Data Connector DNS Response 1 172.0.0.253 "client.wns.windows.com. 2295 IN CNAME wns.notify.trafficmanager.net. wns.notify.trafficmanager.net. 49 IN CNAME vip2-dm3p.wns.notify.trafficmanager.net. vip2-dm3p.wns.notify.trafficmanager.net. 114 IN A 52.242.211.89 trafficmanager.net. 146055 IN NS tm2.dns-tm.com. trafficmanager.net. 146055 IN NS tm2.edgedns-tm.info. trafficmanager.net. 146055 IN NS tm1.dns-tm.com. trafficmanager.net. 146055 IN NS tm1.edgedns-tm.info." UDP 65381 172.0.0.110 2.1.3 DNS Response IN A NOERROR InfobloxDNSView=2fa70211-f936-4bff-8810-56103877d7ad;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=3;InfobloxNsCount=4;InfobloxArCount=0 DNS client.wns.windows.com. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/12/2021, 12:20:31.659 AM Infoblox Data Connector DNS Response 1 8.8.8.8 "client.wns.windows.com. 2295 IN CNAME wns.notify.trafficmanager.net. wns.notify.trafficmanager.net. 151 IN CNAME vip1-dm3p.wns.notify.trafficmanager.net. vip1-dm3p.wns.notify.trafficmanager.net. 108 IN A 52.230.222.68 . 32768 512 OPT " UDP 44222 172.0.0.253 2.1.3 DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=3;InfobloxNsCount=0;InfobloxArCount=1 DNS client.wns.windows.com. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/12/2021, 12:25:46.644 AM Infoblox Data Connector DNS Response 1 172.0.0.253 "client.wns.windows.com. 1972 IN CNAME wns.notify.trafficmanager.net. wns.notify.trafficmanager.net. 5 IN CNAME vip2-dm3p.wns.notify.trafficmanager.net. vip2-dm3p.wns.notify.trafficmanager.net. 162 IN A 52.242.211.89 trafficmanager.net. 145732 IN NS tm2.edgedns-tm.info. trafficmanager.net. 145732 IN NS tm1.dns-tm.com. trafficmanager.net. 145732 IN NS tm2.dns-tm.com. trafficmanager.net. 145732 IN NS tm1.edgedns-tm.info." UDP 62917 172.0.0.110 2.1.3 DNS Response IN A NOERROR InfobloxDNSView=2fa70211-f936-4bff-8810-56103877d7ad;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=3;InfobloxNsCount=4;InfobloxArCount=0 DNS client.wns.windows.com. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/11/2021, 11:55:01.617 PM Infoblox Data Connector DNS Response 1 172.0.0.253 "client.wns.windows.com. 1506 IN CNAME wns.notify.trafficmanager.net. wns.notify.trafficmanager.net. 260 IN CNAME vip2-dm3p.wns.notify.trafficmanager.net. vip2-dm3p.wns.notify.trafficmanager.net. 108 IN A 52.242.211.89 trafficmanager.net. 147576 IN NS tm2.dns-tm.com. trafficmanager.net. 147576 IN NS tm1.edgedns-tm.info. trafficmanager.net. 147576 IN NS tm2.edgedns-tm.info. trafficmanager.net. 147576 IN NS tm1.dns-tm.com." UDP 54152 172.0.0.110 2.1.3 DNS Response IN A NOERROR InfobloxDNSView=2fa70211-f936-4bff-8810-56103877d7ad;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=3;InfobloxNsCount=4;InfobloxArCount=0 DNS client.wns.windows.com. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/12/2021, 12:00:16.638 AM Infoblox Data Connector DNS Response 1 172.0.0.253 "client.wns.windows.com. 1198 IN CNAME wns.notify.trafficmanager.net. wns.notify.trafficmanager.net. 58 IN CNAME vip2-dm3p.wns.notify.trafficmanager.net. vip2-dm3p.wns.notify.trafficmanager.net. 125 IN A 52.242.211.89 trafficmanager.net. 147268 IN NS tm1.edgedns-tm.info. trafficmanager.net. 147268 IN NS tm2.dns-tm.com. trafficmanager.net. 147268 IN NS tm1.dns-tm.com. trafficmanager.net. 147268 IN NS tm2.edgedns-tm.info." UDP 55940 172.0.0.110 2.1.3 DNS Response IN A NOERROR InfobloxDNSView=2fa70211-f936-4bff-8810-56103877d7ad;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=3;InfobloxNsCount=4;InfobloxArCount=0 DNS client.wns.windows.com. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/12/2021, 12:17:46.667 AM Infoblox Data Connector DNS Response 1 8.8.8.8 "cds.d2s7q6s2.hwcdn.net. 294 IN A 205.185.216.10 . 32768 512 OPT " UDP 46744 172.0.0.253 2.1.3 DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1 DNS cds.d2s7q6s2.hwcdn.net. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/12/2021, 12:01:46.671 AM Infoblox Data Connector DNS Response 1 8.8.8.8 "cdn.content.prod.cms.msn.com.edgekey.net. 785 IN CNAME e10663.dscg.akamaiedge.net. e10663.dscg.akamaiedge.net. 19 IN A 23.44.13.99 . 32768 512 OPT " UDP 57986 172.0.0.253 2.1.3 DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=2;InfobloxNsCount=0;InfobloxArCount=1 DNS cdn.content.prod.cms.msn.com.edgekey.net. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/12/2021, 12:01:46.671 AM Infoblox Data Connector DNS Response 1 172.0.0.253 "cdn.content.prod.cms.msn.com. 12758 IN CNAME cdn.content.prod.cms.msn.com.edgekey.net. cdn.content.prod.cms.msn.com.edgekey.net. 785 IN CNAME e10663.dscg.akamaiedge.net. e10663.dscg.akamaiedge.net. 19 IN A 23.44.13.99 net. 147173 IN NS f.gtld-servers.net. net. 147173 IN NS d.gtld-servers.net. net. 147173 IN NS i.gtld-servers.net. net. 147173 IN NS c.gtld-servers.net. net. 147173 IN NS b.gtld-servers.net. net. 147173 IN NS m.gtld-servers.net. net. 147173 IN NS j.gtld-servers.net. net. 147173 IN NS e.gtld-servers.net. net. 147173 IN NS a.gtld-servers.net. net. 147173 IN NS g.gtld-servers.net. net. 147173 IN NS l.gtld-servers.net. net. 147173 IN NS h.gtld-servers.net. net. 147173 IN NS k.gtld-servers.net. a.gtld-servers.net. 147173 IN A 192.5.6.30 b.gtld-servers.net. 147173 IN A 192.33.14.30 c.gtld-servers.net. 147173 IN A 192.26.92.30 d.gtld-servers.net. 147173 IN A 192.31.80.30 e.gtld-servers.net. 147173 IN A 192.12.94.30 f.gtld-servers.net. 147173 IN A 192.35.51.30 g.gtld-servers.net. 147173 IN A 192.42.93.30 h.gtld-servers.net. 147173 IN A 192.54.112.30" UDP 51957 172.0.0.110 2.1.3 DNS Response IN A NOERROR InfobloxDNSView=2fa70211-f936-4bff-8810-56103877d7ad;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=3;InfobloxNsCount=13;InfobloxArCount=8 DNS cdn.content.prod.cms.msn.com. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/12/2021, 12:01:46.670 AM Infoblox Data Connector DNS Response 1 8.8.8.8 "cdn.content.prod.cms.msn.com. 12758 IN CNAME cdn.content.prod.cms.msn.com.edgekey.net. cdn.content.prod.cms.msn.com.edgekey.net. 388 IN CNAME e10663.dscg.akamaiedge.net. e10663.dscg.akamaiedge.net. 4 IN A 104.84.227.92 . 32768 512 OPT " UDP 37752 172.0.0.253 2.1.3 DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=3;InfobloxNsCount=0;InfobloxArCount=1 DNS cdn.content.prod.cms.msn.com. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/12/2021, 12:17:46.667 AM Infoblox Data Connector DNS Response 1 8.8.8.8 "audownload.windowsupdate.nsatc.net. 412 IN CNAME au.download.windowsupdate.com.hwcdn.net. au.download.windowsupdate.com.hwcdn.net. 3412 IN CNAME cds.d2s7q6s2.hwcdn.net. cds.d2s7q6s2.hwcdn.net. 112 IN A 205.185.216.10 . 32768 512 OPT " UDP 52040 172.0.0.253 2.1.3 DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=3;InfobloxNsCount=0;InfobloxArCount=1 DNS audownload.windowsupdate.nsatc.net. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/12/2021, 12:17:46.667 AM Infoblox Data Connector DNS Response 1 8.8.8.8 "au.download.windowsupdate.com.hwcdn.net. 2629 IN CNAME cds.d2s7q6s2.hwcdn.net. cds.d2s7q6s2.hwcdn.net. 33 IN A 205.185.216.10 cds.d2s7q6s2.hwcdn.net. 33 IN A 205.185.216.42 . 32768 512 OPT " UDP 34400 172.0.0.253 2.1.3 DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=3;InfobloxNsCount=0;InfobloxArCount=1 DNS au.download.windowsupdate.com.hwcdn.net. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/12/2021, 12:17:46.667 AM Infoblox Data Connector DNS Response 1 8.8.8.8 "au-bg-shim.trafficmanager.net. 3339 IN CNAME audownload.windowsupdate.nsatc.net. audownload.windowsupdate.nsatc.net. 416 IN CNAME wu.azureedge.net. wu.azureedge.net. 1708 IN CNAME wu.ec.azureedge.net. wu.ec.azureedge.net. 299 IN CNAME wu.wpc.apr-52dd2.edgecastdns.net. wu.wpc.apr-52dd2.edgecastdns.net. 299 IN CNAME hlb.apr-52dd2-0.edgecastdns.net. hlb.apr-52dd2-0.edgecastdns.net. 299 IN CNAME cs11.wpc.v0cdn.net. cs11.wpc.v0cdn.net. 3599 IN A 72.21.81.240 . 32768 512 OPT " UDP 50524 172.0.0.253 2.1.3 DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=7;InfobloxNsCount=0;InfobloxArCount=1 DNS au-bg-shim.trafficmanager.net. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/12/2021, 12:01:46.672 AM Infoblox Data Connector DNS Response 1 8.8.8.8 "assets.msn.com.edgekey.net. 868 IN CNAME e28578.d.akamaiedge.net. e28578.d.akamaiedge.net. 19 IN A 23.66.115.88 e28578.d.akamaiedge.net. 19 IN A 23.66.115.65 . 32768 512 OPT " UDP 46937 172.0.0.253 2.1.3 DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=3;InfobloxNsCount=0;InfobloxArCount=1 DNS assets.msn.com.edgekey.net. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/12/2021, 12:01:46.672 AM Infoblox Data Connector DNS Response 1 172.0.0.253 "assets.msn.com. 7200 IN CNAME assets.msn.com.edgekey.net. assets.msn.com.edgekey.net. 868 IN CNAME e28578.d.akamaiedge.net. e28578.d.akamaiedge.net. 19 IN A 23.66.115.65 e28578.d.akamaiedge.net. 19 IN A 23.66.115.88 net. 147173 IN NS g.gtld-servers.net. net. 147173 IN NS k.gtld-servers.net. net. 147173 IN NS b.gtld-servers.net. net. 147173 IN NS h.gtld-servers.net. net. 147173 IN NS f.gtld-servers.net. net. 147173 IN NS l.gtld-servers.net. net. 147173 IN NS m.gtld-servers.net. net. 147173 IN NS e.gtld-servers.net. net. 147173 IN NS j.gtld-servers.net. net. 147173 IN NS i.gtld-servers.net. net. 147173 IN NS a.gtld-servers.net. net. 147173 IN NS c.gtld-servers.net. net. 147173 IN NS d.gtld-servers.net. a.gtld-servers.net. 147173 IN A 192.5.6.30 b.gtld-servers.net. 147173 IN A 192.33.14.30 c.gtld-servers.net. 147173 IN A 192.26.92.30 d.gtld-servers.net. 147173 IN A 192.31.80.30 e.gtld-servers.net. 147173 IN A 192.12.94.30 f.gtld-servers.net. 147173 IN A 192.35.51.30 g.gtld-servers.net. 147173 IN A 192.42.93.30 h.gtld-servers.net. 147173 IN A 192.54.112.30 i.gtld-servers.net. 147173 IN A 192.43.172.30" UDP 53603 172.0.0.110 2.1.3 DNS Response IN A NOERROR InfobloxDNSView=2fa70211-f936-4bff-8810-56103877d7ad;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=4;InfobloxNsCount=13;InfobloxArCount=9 DNS assets.msn.com. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/12/2021, 12:01:46.671 AM Infoblox Data Connector DNS Response 1 8.8.8.8 "assets.msn.com. 7200 IN CNAME assets.msn.com.edgekey.net. assets.msn.com.edgekey.net. 241 IN CNAME e28578.d.akamaiedge.net. e28578.d.akamaiedge.net. 19 IN A 23.11.231.178 . 32768 512 OPT " UDP 33198 172.0.0.253 2.1.3 DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=3;InfobloxNsCount=0;InfobloxArCount=1 DNS assets.msn.com. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/12/2021, 12:13:16.670 AM Infoblox Data Connector DNS Response 1 8.8.8.8 "CK0POJMG874LJREF7EFN8430QVIT8BSM.com. 21308 IN NSEC3 1 1 0 - CK0Q1GIN43N1ARRC9OSM6QPQR81H5M9A NS SOA RRSIG DNSKEY NSEC3PARAM CK0POJMG874LJREF7EFN8430QVIT8BSM.com. 21308 IN RRSIG NSEC3 8 2 86400 20210217054119 20210210043119 58540 com. UDP 39855 172.0.0.253 2.1.3 DNS Response IN DS NOERROR InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=DS;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;FD+n+fO9jI2LoVi9ULqvx6lIp8ZP5yC/0HzfnJqiqgTTubTJiVzoVT29xai2LSeepPqzS/+sehbGHpqOgj21uJoOLePqmaVx/f73ZGcP6Ud2tlkQQIE++OwDlcQK6P/BM96xdHmGEnG/RaMrFiHV919Xog+sFZddMpjVTtYRq9nST68IU2gLDcNTFeeM7P3CaUdaSRl3LIRz8iuWMrYNSg=;x0c9nZQaudzMH5fswE6GNzVS9W7s8JyBuv9BWS1IOC/i4RD47UqBk/lDuwuim6IOR0ZyziqErbJ19SZ8sSZIAMRB1TQXQJm+SdWslsQFWHtPFFZ5NHSVYHhPT3GeeOSlKsUv49Br4fcS+k6A9qiBrptVpg/7smGjYDayNmteBeFKi8Zl4mwBQWnK65mq4/SWj1z6j5oqNMog4nkmVUbx4g=;wy3o2Mbrzk0n7WOLVdjeIUKhf7UOLV6tjoVuL8Mvgk1ocSftelyWeV2urCSOxxaqdbBBNfUkM3g7hJ4GKLuleecAbm/u+hC8M9KjNEz+KYFOTcKFXWYvS/1nhiuTO4UgjCid0UWOQK2tZOE9GxGcoT8T0taPE81ED1oDXmT3oB75O2kuQURwpixRiLhwvoKyW8C1mzVhcCkeXUiVnIM1Tw=;InfobloxAnCount=0;InfobloxNsCount=6;InfobloxArCount=1 DNS googleapis.com. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/12/2021, 12:01:46.671 AM Infoblox Data Connector DNS Response 1 8.8.8.8 "CK0POJMG874LJREF7EFN8430QVIT8BSM.com. 21162 IN NSEC3 1 1 0 - CK0Q1GIN43N1ARRC9OSM6QPQR81H5M9A NS SOA RRSIG DNSKEY NSEC3PARAM CK0POJMG874LJREF7EFN8430QVIT8BSM.com. 21162 IN RRSIG NSEC3 8 2 86400 20210217054119 20210210043119 58540 com. UDP 56801 172.0.0.253 2.1.3 DNS Response IN DS NOERROR InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=DS;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;FD+n+fO9jI2LoVi9ULqvx6lIp8ZP5yC/0HzfnJqiqgTTubTJiVzoVT29xai2LSeepPqzS/+sehbGHpqOgj21uJoOLePqmaVx/f73ZGcP6Ud2tlkQQIE++OwDlcQK6P/BM96xdHmGEnG/RaMrFiHV919Xog+sFZddMpjVTtYRq9nST68IU2gLDcNTFeeM7P3CaUdaSRl3LIRz8iuWMrYNSg=;oJ48JfbbIbLoC4SQBs8Q9KFNZGY6XVS+ofjb2ZbBkfpSvQK5Kpi/l5AX5tSJu3zBYNAbWwM3CSA9C/Gh3PSFq+Qpf7Co7hS3rvFryA4XspS76uB2Y1LvgG+WQXXq4pqtAu5r46A1I6NRjyuF4NOJuJLbIh3ahi5+LG+3pMvsCp/2Mev7Ec24JuliV/6wjPxfA3Row/QjmSLIOT6wi7X7rw=;dawgopSM/x8vaajFRD55KgGPTpOzW+WPq45INVsBnWtd228GT5R2tK265JutaDO73umLqG5HWdUOPq2QBnBteKp4IlDm7/WqlOawA1Kfr73G34JfI7L9OJWz6ZGQDgS4+cvfn6FLI9fPfwWdy4FZhc7r8wGKG/SvbJh6dSq9HuOyAnYlVH6tq8D7E9Y9vDbtKp2v51ZJ1m6o3Z7/F/lO0A=;InfobloxAnCount=0;InfobloxNsCount=6;InfobloxArCount=1 DNS msn.com. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/12/2021, 12:20:31.659 AM Infoblox Data Connector DNS Response 1 8.8.8.8 "CK0POJMG874LJREF7EFN8430QVIT8BSM.com. 21160 IN NSEC3 1 1 0 - CK0Q1GIN43N1ARRC9OSM6QPQR81H5M9A NS SOA RRSIG DNSKEY NSEC3PARAM CK0POJMG874LJREF7EFN8430QVIT8BSM.com. 21160 IN RRSIG NSEC3 8 2 86400 20210217054119 20210210043119 58540 com. UDP 54481 172.0.0.253 2.1.3 DNS Response IN DS NOERROR InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=DS;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;FD+n+fO9jI2LoVi9ULqvx6lIp8ZP5yC/0HzfnJqiqgTTubTJiVzoVT29xai2LSeepPqzS/+sehbGHpqOgj21uJoOLePqmaVx/f73ZGcP6Ud2tlkQQIE++OwDlcQK6P/BM96xdHmGEnG/RaMrFiHV919Xog+sFZddMpjVTtYRq9nST68IU2gLDcNTFeeM7P3CaUdaSRl3LIRz8iuWMrYNSg=;xWOxyHcyTp7XW7rSu7644VBgJGtTp/A8aykILMJgT15p9YeMN2Wwvhpzxf8cPauDph5yj3/Vo9Sh/5VUcaJ1nu1I+CeaARHIdUKToLNQCJg5imX3wZcy9VU3X/eIoJ3ZFW7LJvNdRQIrNAZW+QXXAeh01uKeq2pvMkGnolrsfLs4ekizqT/Uz6Kn9MbCrt46sTsxnGfVx84O3ije1F7qsw=;MS+suyXsyBD7QEnSEpHUNI09q6G/b8IJI+JReaD4MjzOvMZSdmvlO63DLWIkuJmCG1LY+QUWL7Vv00j+pw3xmlRkgY46Db7Z9qbFm0bAaxmQ/jWbOabGSmcSSZTdt68XLCkwtp9yccWPgUxtmc4nWicMAw5SVuQEHsNj3X/hX34cQaKXScjWSDlk0HhQenbsVJM8V/mAe0NTNLBPnyvtZA=;InfobloxAnCount=0;InfobloxNsCount=6;InfobloxArCount=1 DNS windows.com. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/12/2021, 12:25:46.644 AM Infoblox Data Connector DNS Response 1 8.8.8.8 "CK0POJMG874LJREF7EFN8430QVIT8BSM.com. 21122 IN NSEC3 1 1 0 - CK0Q1GIN43N1ARRC9OSM6QPQR81H5M9A NS SOA RRSIG DNSKEY NSEC3PARAM CK0POJMG874LJREF7EFN8430QVIT8BSM.com. 21122 IN RRSIG NSEC3 8 2 86400 20210217054119 20210210043119 58540 com. UDP 37752 172.0.0.253 2.1.3 DNS Response IN DS NOERROR InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=DS;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;FD+n+fO9jI2LoVi9ULqvx6lIp8ZP5yC/0HzfnJqiqgTTubTJiVzoVT29xai2LSeepPqzS/+sehbGHpqOgj21uJoOLePqmaVx/f73ZGcP6Ud2tlkQQIE++OwDlcQK6P/BM96xdHmGEnG/RaMrFiHV919Xog+sFZddMpjVTtYRq9nST68IU2gLDcNTFeeM7P3CaUdaSRl3LIRz8iuWMrYNSg=;pbvi0wM+bG/B/dBpiXgTGyVh/crqdRn/5zbfEpoWX1OAB+Xr/s2+A7kT3U2aJABbtIBXnoXQvuUkrW6ZEDOZzRppyw3NTdSyHvstYdCGWvr8rAcXNCEf/S0tGEZf4IO6/9vBZuu9QG8KGnxWLEO00f40TyE/PTWk1Juw/1k8mzqVT7bxn69kuW3JqQc0Y72E7mC3EYApLfnIPvPd4QwI5A=;FGcGCo21Q7YylOEDVNXZArBunK8NQFL0KqEKhyBnY0AqYyxbZfEJR7XtTvHsmPbnXPNaBjBwDHxqjyWzZXGRDKshK7/rxxOnJt+cS8N4H382zzQor3jqu9dhT4SwlLfs18IYq8jWeOccgSyYFuj6HKQ9k20tagv1ASwo8EHXcHTIRjdOtM9DeHSsgBEsH5Jl+S68cbH9yr1un6D26l/kSg=;InfobloxAnCount=0;InfobloxNsCount=6;InfobloxArCount=1 DNS amazonaws.com. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/12/2021, 12:17:46.667 AM Infoblox Data Connector DNS Response 1 8.8.8.8 "CK0POJMG874LJREF7EFN8430QVIT8BSM.com. 21109 IN NSEC3 1 1 0 - CK0Q1GIN43N1ARRC9OSM6QPQR81H5M9A NS SOA RRSIG DNSKEY NSEC3PARAM CK0POJMG874LJREF7EFN8430QVIT8BSM.com. 21109 IN RRSIG NSEC3 8 2 86400 20210217054119 20210210043119 58540 com. UDP 42396 172.0.0.253 2.1.3 DNS Response IN DS NOERROR InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=DS;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;FD+n+fO9jI2LoVi9ULqvx6lIp8ZP5yC/0HzfnJqiqgTTubTJiVzoVT29xai2LSeepPqzS/+sehbGHpqOgj21uJoOLePqmaVx/f73ZGcP6Ud2tlkQQIE++OwDlcQK6P/BM96xdHmGEnG/RaMrFiHV919Xog+sFZddMpjVTtYRq9nST68IU2gLDcNTFeeM7P3CaUdaSRl3LIRz8iuWMrYNSg=;K2UJnIOuqvcKeXDI5ov7tb+pdRcWrQtuRqMPpvOgaxf0NmZZmuL4yqjoRqQooUwHtL0meIDWbbMgwrsgSf2wJPLZ3AkSak8JTiDYtitGhKvbWRU8ObWgFp0FXcbWcLX2392wmGMKhwPGR/ok3iddD7hwB/sT2h6u0/4rOc+ahiUwGbpPFb4RCWgOgda1EeglInhX4DF0akfmjIVFIRA8IQ=;RNVTwdvv9JmnrKTjiUKbgbx4omzp5bLLvvlUyCNzBntZsorF8OCVV0M7NOOz5WdLN9ah01BLKSh6Yt3nAAuPnYwEVJkc8zoeENAD9QS/ZnjSZVJqWjMzyBydsRFBOclxAE+qQmDcZZB6HP8+lGrPwPEBYb0sff+z6LHwnLIo2CjhocJy9fWqGd9G/x+vSzHIrnaFPkhgI13+pPYrGBCumw=;InfobloxAnCount=0;InfobloxNsCount=6;InfobloxArCount=1 DNS windowsupdate.com. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/12/2021, 12:02:31.642 AM Infoblox Data Connector DNS Response 1 8.8.8.8 "CK0POJMG874LJREF7EFN8430QVIT8BSM.com. 21030 IN NSEC3 1 1 0 - CK0Q1GIN43N1ARRC9OSM6QPQR81H5M9A NS SOA RRSIG DNSKEY NSEC3PARAM CK0POJMG874LJREF7EFN8430QVIT8BSM.com. 21030 IN RRSIG NSEC3 8 2 86400 20210217054119 20210210043119 58540 com. UDP 40632 172.0.0.253 2.1.3 DNS Response IN DS NOERROR InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=DS;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;FD+n+fO9jI2LoVi9ULqvx6lIp8ZP5yC/0HzfnJqiqgTTubTJiVzoVT29xai2LSeepPqzS/+sehbGHpqOgj21uJoOLePqmaVx/f73ZGcP6Ud2tlkQQIE++OwDlcQK6P/BM96xdHmGEnG/RaMrFiHV919Xog+sFZddMpjVTtYRq9nST68IU2gLDcNTFeeM7P3CaUdaSRl3LIRz8iuWMrYNSg=;jde8LbAIYqw7GtoE7ci9Jcm9gO92cM2gXyg2B/OfBDXMebgEGGtr+yN4YKzcTQEB9dJiHjerAljPM4nlz+jBVfxNfh7U2OnYmb9LcPkIpZaTgpGGxjkyo1dfPEj07bz9Ltdb/GhaA9nY3JY+LZSA0qlNq44tW6ygZbbLLEQCYwZAXc5WH6Uy1TxXd+9/UWIikbOas3+NJXHmXWjD99x0Yg=;wy3o2Mbrzk0n7WOLVdjeIUKhf7UOLV6tjoVuL8Mvgk1ocSftelyWeV2urCSOxxaqdbBBNfUkM3g7hJ4GKLuleecAbm/u+hC8M9KjNEz+KYFOTcKFXWYvS/1nhiuTO4UgjCid0UWOQK2tZOE9GxGcoT8T0taPE81ED1oDXmT3oB75O2kuQURwpixRiLhwvoKyW8C1mzVhcCkeXUiVnIM1Tw=;InfobloxAnCount=0;InfobloxNsCount=6;InfobloxArCount=1 DNS googleapis.com. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/12/2021, 12:05:31.639 AM Infoblox Data Connector DNS Response 1 8.8.8.8 "CK0POJMG874LJREF7EFN8430QVIT8BSM.com. 20862 IN NSEC3 1 1 0 - CK0Q1GIN43N1ARRC9OSM6QPQR81H5M9A NS SOA RRSIG DNSKEY NSEC3PARAM CK0POJMG874LJREF7EFN8430QVIT8BSM.com. 20862 IN RRSIG NSEC3 8 2 86400 20210217054119 20210210043119 58540 com. UDP 33168 172.0.0.253 2.1.3 DNS Response IN DS NOERROR InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=DS;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;FD+n+fO9jI2LoVi9ULqvx6lIp8ZP5yC/0HzfnJqiqgTTubTJiVzoVT29xai2LSeepPqzS/+sehbGHpqOgj21uJoOLePqmaVx/f73ZGcP6Ud2tlkQQIE++OwDlcQK6P/BM96xdHmGEnG/RaMrFiHV919Xog+sFZddMpjVTtYRq9nST68IU2gLDcNTFeeM7P3CaUdaSRl3LIRz8iuWMrYNSg=;tZu6LRECi8XkWdAi3MHvzLVqXF0rlTWFcKqoWChcf98bLrIO7iSrnih0c55c7qIBdiRElsNcPER14M6TibE1C3RitMFTvmOan6z8xMTzoL7ex3kl0iDceAALjlfOwQ4xT94zZdbfYy10MhHI975/NuUPt/zhvHTnG5Fdxq26zV77aBH5lYHqOoMySigSD1ITd/rxsOYnYbuQASfpSTFH/g=;FGcGCo21Q7YylOEDVNXZArBunK8NQFL0KqEKhyBnY0AqYyxbZfEJR7XtTvHsmPbnXPNaBjBwDHxqjyWzZXGRDKshK7/rxxOnJt+cS8N4H382zzQor3jqu9dhT4SwlLfs18IYq8jWeOccgSyYFuj6HKQ9k20tagv1ASwo8EHXcHTIRjdOtM9DeHSsgBEsH5Jl+S68cbH9yr1un6D26l/kSg=;InfobloxAnCount=0;InfobloxNsCount=6;InfobloxArCount=1 DNS amazonaws.com. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/12/2021, 12:15:46.640 AM Infoblox Data Connector DNS Response 1 8.8.8.8 "CK0POJMG874LJREF7EFN8430QVIT8BSM.com. 20794 IN NSEC3 1 1 0 - CK0Q1GIN43N1ARRC9OSM6QPQR81H5M9A NS SOA RRSIG DNSKEY NSEC3PARAM CK0POJMG874LJREF7EFN8430QVIT8BSM.com. 20794 IN RRSIG NSEC3 8 2 86400 20210217054119 20210210043119 58540 com. UDP 45685 172.0.0.253 2.1.3 DNS Response IN DS NOERROR InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=DS;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;FD+n+fO9jI2LoVi9ULqvx6lIp8ZP5yC/0HzfnJqiqgTTubTJiVzoVT29xai2LSeepPqzS/+sehbGHpqOgj21uJoOLePqmaVx/f73ZGcP6Ud2tlkQQIE++OwDlcQK6P/BM96xdHmGEnG/RaMrFiHV919Xog+sFZddMpjVTtYRq9nST68IU2gLDcNTFeeM7P3CaUdaSRl3LIRz8iuWMrYNSg=;C9Vcv4hdlFCwX6U5v3wlP1QK1jPVJHZps27+CTPZqQx/Ily6ItVsBbfRSr5hjET7e1HFJuBp+zNsEn63wQFDektY10paLwtQHl8KbnuBndN6R5Nu9QPWV1wbXVaGq7v1v/ra3ZX3z587X09Q6wuvOQXnyXXn4sLwzzZKgo7/bnKOwTazXfqHwOpTRJLWGnTl0ZHgzv1ENdyEJ1AypOqGQQ=;FGcGCo21Q7YylOEDVNXZArBunK8NQFL0KqEKhyBnY0AqYyxbZfEJR7XtTvHsmPbnXPNaBjBwDHxqjyWzZXGRDKshK7/rxxOnJt+cS8N4H382zzQor3jqu9dhT4SwlLfs18IYq8jWeOccgSyYFuj6HKQ9k20tagv1ASwo8EHXcHTIRjdOtM9DeHSsgBEsH5Jl+S68cbH9yr1un6D26l/kSg=;InfobloxAnCount=0;InfobloxNsCount=6;InfobloxArCount=1 DNS amazonaws.com. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/12/2021, 12:17:46.667 AM Infoblox Data Connector DNS Response 1 8.8.8.8 "A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 21591 IN NSEC3 1 1 0 - A1RUUFFJKCT2Q54P78F8EJGJ8JBK7I8B NS SOA RRSIG DNSKEY NSEC3PARAM A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 21591 IN RRSIG NSEC3 8 2 86400 20210217084924 20210210073924 30944 net. UDP 35140 172.0.0.253 2.1.3 DNS Response IN DS NOERROR InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=DS;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;nt7g1B8bCLrN7mkMa/FRIdlD+Ndq9jW7yNXKcZjWHTzvAmHjWw0IkF5JdUvlOurd4HOgiNaczhueq7Cr1DQBkMptz6LP3xc91kZ5UwGjKgr2Y6K27MsQT+pbjDY0JS5rhqAbfYI46xIySEiP6HcQBU1DAZlg09CQHlXQFEy/nTX8jErBvUl8aPLN1ETMjW7af0TbC4daW8RIPQ5XOVl1cA=;KGfpcbZ5+NMS2poFnvMuORoSCoARv3aAv/0g3k0C9OA6t8WuZIVCTL8iTKoaN1bdBObJt52jr9WUHlOr9N5Ox2yd8Tnq0WHUNSrLZcE4UGXocuWjJ5pugnjp03/Thtpzv/8Aa4Fsfj+uHbrjnyHzL9mzY/1zajJOJsprtRd5TFj1eyr6a/s5PMAjZX/YNpSFPr6X8FVtEZAe5qp/RW4N5g=;j4FGClSNtszyBtlByjBB6WLeEsMPC4Y2G12XgXWh2Pp2vk8vVewWJdA9WIWDZkzfE48+RiJPKU3bu5yTKXcW8tfzirNIOntW8mJ7vogfjZF4P7mMvjLwQ97D1yuMW32Q4r/qjEIvoITIYAxgufJzH6jUzRNyvDfb0S6bYYOmGwarVWMTuT9jzg2E5mKdfs1ak7NRF6rYUYGdCnXwrrYBAA=;InfobloxAnCount=0;InfobloxNsCount=6;InfobloxArCount=1 DNS nsatc.net. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/12/2021, 12:16:46.627 AM Infoblox Data Connector DNS Response 1 8.8.8.8 "A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 21538 IN NSEC3 1 1 0 - A1RUUFFJKCT2Q54P78F8EJGJ8JBK7I8B NS SOA RRSIG DNSKEY NSEC3PARAM A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 21538 IN RRSIG NSEC3 8 2 86400 20210217084924 20210210073924 30944 net. UDP 39511 172.0.0.253 2.1.3 DNS Response IN DS NOERROR InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=DS;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;nt7g1B8bCLrN7mkMa/FRIdlD+Ndq9jW7yNXKcZjWHTzvAmHjWw0IkF5JdUvlOurd4HOgiNaczhueq7Cr1DQBkMptz6LP3xc91kZ5UwGjKgr2Y6K27MsQT+pbjDY0JS5rhqAbfYI46xIySEiP6HcQBU1DAZlg09CQHlXQFEy/nTX8jErBvUl8aPLN1ETMjW7af0TbC4daW8RIPQ5XOVl1cA=;ggtNJJdd9uKyw7JrYh0ZyJs0B1pYM6Dt9FCWljQg/NcWBcYAdpkKn4DaWElrhCLN5gfz5G932Ksun9vX+nixzVpL1HRnLxRikJOK7lwWSsY/sS2heP/xJKPIqKxpuZL2YqFll1O7fRjcEc1TzItr1gMMaMM8AddMituVJDanJgQbCuWlRFBxMtBwSfEF4ZT619rO3tRQvUbu+ktWUi2Ugg=;oTxLz7B5W1X3R38+SlL0KcBE1x7vGuECFnwRdcAPoHIbqtRje/DYltkcV44+9QKDM8oYkdK54v3IZQoqJEiFAPsbzYOm9dPXOusYS6k2jVbEnWKEI612opFMjHGs7FTjjrOFd8kPghrkD8JZVuZAgiMCBwhZ66N3z87SOtgHbORA2W5j+aFI14NsMDdKh0MmNbueyM4O985MDt9+NVyFBQ=;InfobloxAnCount=0;InfobloxNsCount=6;InfobloxArCount=1 DNS cloudapp.net. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/12/2021, 12:17:46.667 AM Infoblox Data Connector DNS Response 1 8.8.8.8 "A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 21485 IN NSEC3 1 1 0 - A1RUUFFJKCT2Q54P78F8EJGJ8JBK7I8B NS SOA RRSIG DNSKEY NSEC3PARAM A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 21485 IN RRSIG NSEC3 8 2 86400 20210217084924 20210210073924 30944 net. UDP 32985 172.0.0.253 2.1.3 DNS Response IN DS NOERROR InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=DS;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;nt7g1B8bCLrN7mkMa/FRIdlD+Ndq9jW7yNXKcZjWHTzvAmHjWw0IkF5JdUvlOurd4HOgiNaczhueq7Cr1DQBkMptz6LP3xc91kZ5UwGjKgr2Y6K27MsQT+pbjDY0JS5rhqAbfYI46xIySEiP6HcQBU1DAZlg09CQHlXQFEy/nTX8jErBvUl8aPLN1ETMjW7af0TbC4daW8RIPQ5XOVl1cA=;ggtNJJdd9uKyw7JrYh0ZyJs0B1pYM6Dt9FCWljQg/NcWBcYAdpkKn4DaWElrhCLN5gfz5G932Ksun9vX+nixzVpL1HRnLxRikJOK7lwWSsY/sS2heP/xJKPIqKxpuZL2YqFll1O7fRjcEc1TzItr1gMMaMM8AddMituVJDanJgQbCuWlRFBxMtBwSfEF4ZT619rO3tRQvUbu+ktWUi2Ugg=;rkSoMXb48rv5X6GFB8CCvY0CWbWISgVsy581GMH0TVbkJGGBNM8f+sV4BNJ9J3LoHjAWiYDQIwnYd9GBRPNpbntMpqEDWW4TAkcN2SIVcPa+a2lNm6xpL1/KsHM/scLXJ+o7DCl80ue92PBlHEuMw4S1xsTUaYmvM6Vhjgtu9vtxJ/KBLWcctXvvsc+MS0P5Q18+1pVHITWxsD6eI7beHw=;InfobloxAnCount=0;InfobloxNsCount=6;InfobloxArCount=1 DNS hwcdn.net. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/12/2021, 12:15:16.650 AM Infoblox Data Connector DNS Response 1 8.8.8.8 "A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 21478 IN NSEC3 1 1 0 - A1RUUFFJKCT2Q54P78F8EJGJ8JBK7I8B NS SOA RRSIG DNSKEY NSEC3PARAM A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 21478 IN RRSIG NSEC3 8 2 86400 20210217084924 20210210073924 30944 net. UDP 35042 172.0.0.253 2.1.3 DNS Response IN DS NOERROR InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=DS;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;nt7g1B8bCLrN7mkMa/FRIdlD+Ndq9jW7yNXKcZjWHTzvAmHjWw0IkF5JdUvlOurd4HOgiNaczhueq7Cr1DQBkMptz6LP3xc91kZ5UwGjKgr2Y6K27MsQT+pbjDY0JS5rhqAbfYI46xIySEiP6HcQBU1DAZlg09CQHlXQFEy/nTX8jErBvUl8aPLN1ETMjW7af0TbC4daW8RIPQ5XOVl1cA=;neHEZCc7aSicDpTu+vGOI1LgS9dALhOEQen58Il+3g7Zgl3hKaA0FTatZmHQokzUUFY8yRup+hMXcmZl5EYZ9ZN82cM0r6NsDkgNZn4jR3qlw2Ph9PRrKBXau9cCZ2cjPNS2feL38tCtAUxcIE1HcMjcL9Iko6WFUOARsSzN/P+2Og0nD8qdr4ujkJjb2Nmq0eBuXD8aOz6LRfaTYles9Q=;tNeiuF8NGOTF9NmDyxx2Vzfsk1sMosf6XHNxX2CE1/+yRJEERVJ8zfKq+zjoXcdXL7xbBy/Zs2vAfWcFPdC78R43Jmb8IqH2g4VOEkbvCkJeBpt+Rky8aFWWghRvpOHIZyGAAkZ99b8gS2ootA1dOcfyK+ZViSvv33/MsbMIEKiTLJofeFJ23WppPBkXwy7GwNbHCHfuBuKHI3axHckypQ=;InfobloxAnCount=0;InfobloxNsCount=6;InfobloxArCount=1 DNS trafficmanager.net. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/12/2021, 12:01:46.671 AM Infoblox Data Connector DNS Response 1 8.8.8.8 "A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 21449 IN NSEC3 1 1 0 - A1RUUFFJKCT2Q54P78F8EJGJ8JBK7I8B NS SOA RRSIG DNSKEY NSEC3PARAM A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 21449 IN RRSIG NSEC3 8 2 86400 20210217084924 20210210073924 30944 net. UDP 35832 172.0.0.253 2.1.3 DNS Response IN DS NOERROR InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=DS;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;nt7g1B8bCLrN7mkMa/FRIdlD+Ndq9jW7yNXKcZjWHTzvAmHjWw0IkF5JdUvlOurd4HOgiNaczhueq7Cr1DQBkMptz6LP3xc91kZ5UwGjKgr2Y6K27MsQT+pbjDY0JS5rhqAbfYI46xIySEiP6HcQBU1DAZlg09CQHlXQFEy/nTX8jErBvUl8aPLN1ETMjW7af0TbC4daW8RIPQ5XOVl1cA=;CGBCcRfCoTaU0ycL/WVgf3kV8r1De5Xgi00s2dXW34V1+4ZsPh6zP5quie4F8JT88XdVEIzgy9nFjHihfIqtD8YgnhHEPW1zBUzWE7Rxzr5141bv062xv4YogtUOnxT3j14vIytXRbNtLpt+cVjFlgNSShprsCa/V+gmZKOZUSFsxU3GFszOcMr48Gl5AsgQNKvSxYKNlgNulC2LMmK2ug=;q561ysTDa51jrKQeom8iayySW8Qz9OI/+UEtW9VUxfiDebXteEuVBP+7R1MkwwvoQvHkoKA3AyJhgwlOq9DAQuII55UYWU4b04fhj6TpjK57bHzmrvgez/M3SRfQKOsh4qKd6xb+t5BoRGDiZR5Hh/Sc2ryZ8rMonlK0tBz/EQXOPjlQG7B8N6R7e3QhOI91VFeTyvPSNzJmS82xCnQ6fg=;InfobloxAnCount=0;InfobloxNsCount=6;InfobloxArCount=1 DNS akamaiedge.net. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/11/2021, 11:55:01.617 PM Infoblox Data Connector DNS Response 1 8.8.8.8 "A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 21134 IN NSEC3 1 1 0 - A1RUUFFJKCT2Q54P78F8EJGJ8JBK7I8B NS SOA RRSIG DNSKEY NSEC3PARAM A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 21134 IN RRSIG NSEC3 8 2 86400 20210217084924 20210210073924 30944 net. UDP 38583 172.0.0.253 2.1.3 DNS Response IN DS NOERROR InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=DS;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;nt7g1B8bCLrN7mkMa/FRIdlD+Ndq9jW7yNXKcZjWHTzvAmHjWw0IkF5JdUvlOurd4HOgiNaczhueq7Cr1DQBkMptz6LP3xc91kZ5UwGjKgr2Y6K27MsQT+pbjDY0JS5rhqAbfYI46xIySEiP6HcQBU1DAZlg09CQHlXQFEy/nTX8jErBvUl8aPLN1ETMjW7af0TbC4daW8RIPQ5XOVl1cA=;Mj2HMmnLlQ2wlq5e0BfkjIftiZaILCytFP2tiBIdTrBEMCaYL49f5huoxXNJMBZIMQweicDZMlcORodIgS/UmJmXRvyJTr+UG4J7u3l9qqDsUtzL8BveJYcJn8EuYZp/vxs7ccX/fpqeGfEP7e3Rxwfjf8GTHQQqHFeeasUQPRYo/OnKuM8cTpzTC386Xo+GMlB5VkiAbiFsfavBucNwpQ=;tNeiuF8NGOTF9NmDyxx2Vzfsk1sMosf6XHNxX2CE1/+yRJEERVJ8zfKq+zjoXcdXL7xbBy/Zs2vAfWcFPdC78R43Jmb8IqH2g4VOEkbvCkJeBpt+Rky8aFWWghRvpOHIZyGAAkZ99b8gS2ootA1dOcfyK+ZViSvv33/MsbMIEKiTLJofeFJ23WppPBkXwy7GwNbHCHfuBuKHI3axHckypQ=;InfobloxAnCount=0;InfobloxNsCount=6;InfobloxArCount=1 DNS trafficmanager.net. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/11/2021, 11:57:31.632 PM Infoblox Data Connector DNS Response 1 8.8.8.8 "A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 21030 IN NSEC3 1 1 0 - A1RUUFFJKCT2Q54P78F8EJGJ8JBK7I8B NS SOA RRSIG DNSKEY NSEC3PARAM A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 21030 IN RRSIG NSEC3 8 2 86400 20210217084924 20210210073924 30944 net. UDP 54375 172.0.0.253 2.1.3 DNS Response IN DS NOERROR InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=DS;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;nt7g1B8bCLrN7mkMa/FRIdlD+Ndq9jW7yNXKcZjWHTzvAmHjWw0IkF5JdUvlOurd4HOgiNaczhueq7Cr1DQBkMptz6LP3xc91kZ5UwGjKgr2Y6K27MsQT+pbjDY0JS5rhqAbfYI46xIySEiP6HcQBU1DAZlg09CQHlXQFEy/nTX8jErBvUl8aPLN1ETMjW7af0TbC4daW8RIPQ5XOVl1cA=;bfI3oIF4I9Lj5W+EE4mZ0oYpecOTHtq5QEfZBS5oaAmgX1QXg8M9HSX3HbbQZGvHnFPox83HgTXHK6hgHkBqS9dPFEsq18uHsnSJ6RZgs2EYWB1+UoPwS6ww5BHhYLtQz3pUCBGKStAx5/9+FUkcK+++8eXxm38aRRtwKGiZ1qIhYvOuu1CwFXPHIOtuPidRHXmBeL7FIju87JAPH3B9PA=;FnXhWPZhqcZMe8qsOmOBFkFv8+j/M5nRmVs8HOAHPTXkHBUi/I+1wUNTjrrSUBKpSJGoikibHrXvzoMVybU3akZlM2QHP7GlxHJKni0RvaYtDYdLK7YcUMwS3DKMoJ+jKe64kli2oUp7I+fOwvxCx/6lLLjSPZbUJbiz1MwARmAGYklo5oLxhPXE0uexpE6K8U4rc0RrsfqG5KWgPqzUhw=;InfobloxAnCount=0;InfobloxNsCount=6;InfobloxArCount=1 DNS edgekey.net. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/12/2021, 12:10:16.636 AM Infoblox Data Connector DNS Response 1 8.8.8.8 "A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 20790 IN NSEC3 1 1 0 - A1RUUFFJKCT2Q54P78F8EJGJ8JBK7I8B NS SOA RRSIG DNSKEY NSEC3PARAM A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 20790 IN RRSIG NSEC3 8 2 86400 20210217084924 20210210073924 30944 net. UDP 40497 172.0.0.253 2.1.3 DNS Response IN DS NOERROR InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=DS;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;nt7g1B8bCLrN7mkMa/FRIdlD+Ndq9jW7yNXKcZjWHTzvAmHjWw0IkF5JdUvlOurd4HOgiNaczhueq7Cr1DQBkMptz6LP3xc91kZ5UwGjKgr2Y6K27MsQT+pbjDY0JS5rhqAbfYI46xIySEiP6HcQBU1DAZlg09CQHlXQFEy/nTX8jErBvUl8aPLN1ETMjW7af0TbC4daW8RIPQ5XOVl1cA=;cJhML08IhhuDiLfndh6ZdtbkzEvnO5nEUHVPeeUj6flbIoqQpctE5tJgU3pz4Q4YbI3W8mv9UJFWb874U6SSe/vXXPrUQ2sy56eJQo8kRlgvW+rpKIKSV0W4kubdy3bdcRU2WLnaSmMBb8xATDLouquVhMXY4r8b6I8f/RLUnPdR82J8Nb1SyYp4cyp6yp18z6FADuuV4LxoefureSSRDw=;tNeiuF8NGOTF9NmDyxx2Vzfsk1sMosf6XHNxX2CE1/+yRJEERVJ8zfKq+zjoXcdXL7xbBy/Zs2vAfWcFPdC78R43Jmb8IqH2g4VOEkbvCkJeBpt+Rky8aFWWghRvpOHIZyGAAkZ99b8gS2ootA1dOcfyK+ZViSvv33/MsbMIEKiTLJofeFJ23WppPBkXwy7GwNbHCHfuBuKHI3axHckypQ=;InfobloxAnCount=0;InfobloxNsCount=6;InfobloxArCount=1 DNS trafficmanager.net. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/12/2021, 12:05:16.647 AM Infoblox Data Connector DNS Response 1 8.8.8.8 "A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 20774 IN NSEC3 1 1 0 - A1RUUFFJKCT2Q54P78F8EJGJ8JBK7I8B NS SOA RRSIG DNSKEY NSEC3PARAM A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 20774 IN RRSIG NSEC3 8 2 86400 20210217084924 20210210073924 30944 net. UDP 47100 172.0.0.253 2.1.3 DNS Response IN DS NOERROR InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=DS;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;nt7g1B8bCLrN7mkMa/FRIdlD+Ndq9jW7yNXKcZjWHTzvAmHjWw0IkF5JdUvlOurd4HOgiNaczhueq7Cr1DQBkMptz6LP3xc91kZ5UwGjKgr2Y6K27MsQT+pbjDY0JS5rhqAbfYI46xIySEiP6HcQBU1DAZlg09CQHlXQFEy/nTX8jErBvUl8aPLN1ETMjW7af0TbC4daW8RIPQ5XOVl1cA=;YyTMa0Wp16i/eWYLwXpktkpDa80n2FCd+X0nqs8S/8J1ObgcOJIets3K+Tp6oaK4b1mmV8aIHfHtp9Cj5M/WidukCGTcIyshhZJUgBrfRr/ulXH1cZa4bYq+a9nvSV+WaZ12FfFGV3Kr3ACAoTABT+IoYJoisHKxFZIw/wEYNxKOyfqVVX0DdCmQDLTlftrGGVj896pFiTQ9FkdZWwcvUw=;tNeiuF8NGOTF9NmDyxx2Vzfsk1sMosf6XHNxX2CE1/+yRJEERVJ8zfKq+zjoXcdXL7xbBy/Zs2vAfWcFPdC78R43Jmb8IqH2g4VOEkbvCkJeBpt+Rky8aFWWghRvpOHIZyGAAkZ99b8gS2ootA1dOcfyK+ZViSvv33/MsbMIEKiTLJofeFJ23WppPBkXwy7GwNbHCHfuBuKHI3axHckypQ=;InfobloxAnCount=0;InfobloxNsCount=6;InfobloxArCount=1 DNS trafficmanager.net. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/11/2021, 11:57:31.632 PM Infoblox Data Connector DNS Response 1 8.8.8.8 "A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 20771 IN NSEC3 1 1 0 - A1RUUFFJKCT2Q54P78F8EJGJ8JBK7I8B NS SOA RRSIG DNSKEY NSEC3PARAM A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 20771 IN RRSIG NSEC3 8 2 86400 20210217084924 20210210073924 30944 net. UDP 48713 172.0.0.253 2.1.3 DNS Response IN DS NOERROR InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=DS;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;nt7g1B8bCLrN7mkMa/FRIdlD+Ndq9jW7yNXKcZjWHTzvAmHjWw0IkF5JdUvlOurd4HOgiNaczhueq7Cr1DQBkMptz6LP3xc91kZ5UwGjKgr2Y6K27MsQT+pbjDY0JS5rhqAbfYI46xIySEiP6HcQBU1DAZlg09CQHlXQFEy/nTX8jErBvUl8aPLN1ETMjW7af0TbC4daW8RIPQ5XOVl1cA=;Mc5xo5vWOfGE6yXyRN8ExgTet4d8PC51JCe4Ard9XtXcaiRDj9taikVI2mBnfgv1X7//7eyZusZvVyqoKERftCNgt3olURkJxEkspijjdKDdAMo+1C87LpidArCXvE4KtaYZz17NANpUwB765JyAr5bMUWOIk1oZdL36VmorPLxTNAzNaffBSTh0v4NDEjPFKfvK3nFfL2h7eeA67G8QDA=;q561ysTDa51jrKQeom8iayySW8Qz9OI/+UEtW9VUxfiDebXteEuVBP+7R1MkwwvoQvHkoKA3AyJhgwlOq9DAQuII55UYWU4b04fhj6TpjK57bHzmrvgez/M3SRfQKOsh4qKd6xb+t5BoRGDiZR5Hh/Sc2ryZ8rMonlK0tBz/EQXOPjlQG7B8N6R7e3QhOI91VFeTyvPSNzJmS82xCnQ6fg=;InfobloxAnCount=0;InfobloxNsCount=6;InfobloxArCount=1 DNS akamaiedge.net. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/11/2021, 11:51:46.999 PM Infoblox Data Connector DNS Response 1 "" TCP 26823 208.50.179.13 2.1.3 DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=-EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1 DNS youtube.com. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/11/2021, 11:51:40.268 PM Infoblox Data Connector DNS Response 1 "" TCP 11091 208.50.179.13 2.1.3 DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=-EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1 DNS youtube.com. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/11/2021, 11:51:38.718 PM Infoblox Data Connector DNS Response 1 "" TCP 26823 208.50.179.13 2.1.3 DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=-EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1 DNS www.bing.com. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/11/2021, 11:51:40.268 PM Infoblox Data Connector DNS Response 1 "" TCP 11091 208.50.179.13 2.1.3 DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=-EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1 DNS www.bing.com. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/11/2021, 11:56:32.515 PM Infoblox Data Connector DNS Response 1 "" TCP 25989 208.50.179.13 2.1.3 DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=-EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1 DNS watson.telemetry.microsoft.com. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/11/2021, 11:56:52.995 PM Infoblox Data Connector DNS Response 1 "" TCP 49493 208.50.179.13 2.1.3 DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=-EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1 DNS watson.telemetry.microsoft.com. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/12/2021, 12:11:36.441 AM Infoblox Data Connector DNS Response 1 "" TCP 48906 208.50.179.13 2.1.3 DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=-EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1 DNS v10.events.data.microsoft.com. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/12/2021, 12:11:08.117 AM Infoblox Data Connector DNS Response 1 "" TCP 46798 208.50.179.13 2.1.3 DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=-EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1 DNS v10.events.data.microsoft.com. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/11/2021, 11:52:25.459 PM Infoblox Data Connector DNS Response 1 "" TCP 11500 208.50.179.13 2.1.3 DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=-EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1 DNS update.googleapis.com. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/11/2021, 11:52:29.933 PM Infoblox Data Connector DNS Response 1 "" TCP 4772 208.50.179.13 2.1.3 DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=-EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1 DNS update.googleapis.com. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/12/2021, 12:10:21.647 AM Infoblox Data Connector DNS Response 1 "" TCP 45027 208.50.179.13 2.1.3 DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=-EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1 DNS update.googleapis.com. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/11/2021, 11:52:44.067 PM Infoblox Data Connector DNS Response 1 "" TCP 2113 208.50.179.13 2.1.3 DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=-EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1 DNS update.googleapis.com. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/11/2021, 11:52:49.883 PM Infoblox Data Connector DNS Response 1 "" TCP 60222 208.50.179.13 2.1.3 DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=-EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1 DNS update.googleapis.com. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/12/2021, 12:10:22.143 AM Infoblox Data Connector DNS Response 1 "" TCP 52569 208.50.179.13 2.1.3 DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=-EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1 DNS update.googleapis.com. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/12/2021, 12:23:50.805 AM Infoblox Data Connector DNS Response 1 "" TCP 53238 208.50.179.13 2.1.3 DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=-EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1 DNS update.googleapis.com. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/12/2021, 12:23:51.036 AM Infoblox Data Connector DNS Response 1 "" TCP 13216 208.50.179.13 2.1.3 DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=-EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1 DNS update.googleapis.com. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/12/2021, 12:25:31.690 AM Infoblox Data Connector DNS Response 1 "" TCP 16301 208.50.179.13 2.1.3 DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=-EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1 DNS tile-service.weather.microsoft.com. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/12/2021, 12:25:33.065 AM Infoblox Data Connector DNS Response 1 "" TCP 41618 208.50.179.13 2.1.3 DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=-EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1 DNS tile-service.weather.microsoft.com. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/11/2021, 11:58:06.189 PM Infoblox Data Connector DNS Response 1 "" TCP 44892 208.50.179.13 2.1.3 DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=-EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1 DNS tile-service.weather.microsoft.com. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/11/2021, 11:58:11.113 PM Infoblox Data Connector DNS Response 1 "" TCP 40734 208.50.179.13 2.1.3 DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=-EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1 DNS tile-service.weather.microsoft.com. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/11/2021, 11:53:40.040 PM Infoblox Data Connector DNS Response 1 "" TCP 10691 208.50.179.13 2.1.3 DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=-EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1 DNS sls.update.microsoft.com. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/11/2021, 11:53:38.531 PM Infoblox Data Connector DNS Response 1 "" TCP 42264 208.50.179.13 2.1.3 DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=-EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1 DNS sls.update.microsoft.com. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/11/2021, 11:53:38.531 PM Infoblox Data Connector DNS Response 1 "" TCP 42264 208.50.179.13 2.1.3 DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=-EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1 DNS sls.update.microsoft.com. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/11/2021, 11:53:38.531 PM Infoblox Data Connector DNS Response 1 "" TCP 42264 208.50.179.13 2.1.3 DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=-EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1 DNS sls.update.microsoft.com. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/11/2021, 11:53:38.530 PM Infoblox Data Connector DNS Response 1 "" TCP 42264 208.50.179.13 2.1.3 DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=-EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1 DNS sls.update.microsoft.com. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/11/2021, 11:53:40.040 PM Infoblox Data Connector DNS Response 1 "" TCP 10691 208.50.179.13 2.1.3 DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=-EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1 DNS sls.update.microsoft.com. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/11/2021, 11:53:40.040 PM Infoblox Data Connector DNS Response 1 "" TCP 10691 208.50.179.13 2.1.3 DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=-EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1 DNS sls.update.microsoft.com. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/11/2021, 11:53:38.531 PM Infoblox Data Connector DNS Response 1 "" TCP 42264 208.50.179.13 2.1.3 DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=-EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1 DNS sls.update.microsoft.com. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/11/2021, 11:53:38.531 PM Infoblox Data Connector DNS Response 1 "" TCP 42264 208.50.179.13 2.1.3 DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=-EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1 DNS sls.update.microsoft.com. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/11/2021, 11:56:43.787 PM Infoblox Data Connector DNS Response 1 "" TCP 63440 208.50.179.13 2.1.3 DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=-EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1 DNS settings-win.data.microsoft.com. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/12/2021, 12:23:29.314 AM Infoblox Data Connector DNS Response 1 "" TCP 53354 208.50.179.13 2.1.3 DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=-EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1 DNS settings-win.data.microsoft.com. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/12/2021, 12:26:49.328 AM Infoblox Data Connector DNS Response 1 "" TCP 59942 208.50.179.13 2.1.3 DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=-EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1 DNS settings-win.data.microsoft.com. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/12/2021, 12:08:21.305 AM Infoblox Data Connector DNS Response 1 "" TCP 8899 208.50.179.13 2.1.3 DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=-EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1 DNS settings-win.data.microsoft.com. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/11/2021, 11:56:47.435 PM Infoblox Data Connector DNS Response 1 "" TCP 26052 208.50.179.13 2.1.3 DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=-EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1 DNS settings-win.data.microsoft.com. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/11/2021, 11:53:24.229 PM Infoblox Data Connector DNS Response 1 "" TCP 24396 208.50.179.13 2.1.3 DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=-EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1 DNS settings-win.data.microsoft.com. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/12/2021, 12:02:21.331 AM Infoblox Data Connector DNS Response 1 "" TCP 35514 208.50.179.13 2.1.3 DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=4;InfobloxNsCount=0;InfobloxArCount=1 DNS pool.ntp.org. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/12/2021, 12:02:21.331 AM Infoblox Data Connector DNS Response 1 "" TCP 49521 208.50.179.13 2.1.3 DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=4;InfobloxNsCount=0;InfobloxArCount=1 DNS pool.ntp.org. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/12/2021, 12:06:08.170 AM Infoblox Data Connector DNS Response 1 "" TCP 37415 208.50.179.13 2.1.3 DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=-EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1 DNS ocsp.digicert.com. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/12/2021, 12:05:34.981 AM Infoblox Data Connector DNS Response 1 "" TCP 14692 208.50.179.13 2.1.3 DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=-EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1 DNS ocsp.digicert.com. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/12/2021, 12:05:35.299 AM Infoblox Data Connector DNS Response 1 "" TCP 53484 208.50.179.13 2.1.3 DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=-EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1 DNS ocsp.digicert.com. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/12/2021, 12:06:10.063 AM Infoblox Data Connector DNS Response 1 "" TCP 60979 208.50.179.13 2.1.3 DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=-EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1 DNS ocsp.digicert.com. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/12/2021, 12:05:21.024 AM Infoblox Data Connector DNS Response 1 "" TCP 56387 208.50.179.13 2.1.3 DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=4;InfobloxNsCount=0;InfobloxArCount=1 DNS ntp.ubuntu.com. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/12/2021, 12:05:17.985 AM Infoblox Data Connector DNS Response 1 "" TCP 43314 208.50.179.13 2.1.3 DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=+EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=4;InfobloxNsCount=0;InfobloxArCount=1 DNS ntp.ubuntu.com. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/12/2021, 12:11:41.502 AM Infoblox Data Connector DNS Response 1 "" TCP 30717 208.50.179.13 2.1.3 DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=-EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1 DNS login.live.com. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/11/2021, 11:56:33.193 PM Infoblox Data Connector DNS Response 1 "" TCP 34276 208.50.179.13 2.1.3 DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=-EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1 DNS login.live.com. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/12/2021, 12:19:11.198 AM Infoblox Data Connector DNS Response 1 "" TCP 45395 208.50.179.13 2.1.3 DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=-EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1 DNS login.live.com. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/11/2021, 11:56:52.994 PM Infoblox Data Connector DNS Response 1 "" TCP 49493 208.50.179.13 2.1.3 DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=-EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1 DNS ctldl.windowsupdate.com. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/12/2021, 12:26:57.528 AM Infoblox Data Connector DNS Response 1 "" TCP 15022 208.50.179.13 2.1.3 DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=-EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1 DNS ctldl.windowsupdate.com. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/12/2021, 12:27:04.691 AM Infoblox Data Connector DNS Response 1 "" TCP 46404 208.50.179.13 2.1.3 DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=-EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1 DNS ctldl.windowsupdate.com. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/12/2021, 12:06:10.063 AM Infoblox Data Connector DNS Response 1 "" TCP 60979 208.50.179.13 2.1.3 DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=-EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1 DNS crl4.digicert.com. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/12/2021, 12:05:34.982 AM Infoblox Data Connector DNS Response 1 "" TCP 14692 208.50.179.13 2.1.3 DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=-EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1 DNS crl4.digicert.com. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/12/2021, 12:05:35.298 AM Infoblox Data Connector DNS Response 1 "" TCP 14692 208.50.179.13 2.1.3 DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=-EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1 DNS crl4.digicert.com. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/11/2021, 11:52:36.805 PM Infoblox Data Connector DNS Response 1 "" TCP 26804 208.50.179.13 2.1.3 DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=-EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1 DNS config.edge.skype.com. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/12/2021, 12:03:01.177 AM Infoblox Data Connector DNS Response 1 "" TCP 48173 208.50.179.13 2.1.3 DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=-EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1 DNS clientservices.googleapis.com. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/12/2021, 12:03:02.109 AM Infoblox Data Connector DNS Response 1 "" TCP 34924 208.50.179.13 2.1.3 DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=-EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1 DNS clientservices.googleapis.com. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/12/2021, 12:01:18.968 AM Infoblox Data Connector DNS Response 1 "" TCP 37715 208.50.179.13 2.1.3 DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=-EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1 DNS clientservices.googleapis.com. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/12/2021, 12:01:20.957 AM Infoblox Data Connector DNS Response 1 "" TCP 16924 208.50.179.13 2.1.3 DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=-EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1 DNS clientservices.googleapis.com. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/11/2021, 11:58:01.090 PM Infoblox Data Connector DNS Response 1 "" TCP 41258 208.50.179.13 2.1.3 DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=-EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1 DNS cdn.content.prod.cms.msn.com. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/12/2021, 12:25:29.138 AM Infoblox Data Connector DNS Response 1 "" TCP 21303 208.50.179.13 2.1.3 DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=-EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1 DNS cdn.content.prod.cms.msn.com. CommonSecurityLog
846a366e-408f-4648-9891-3a12dbbf65cc OpsManager 2/11/2021, 11:56:32.515 PM Infoblox Data Connector DNS Response 1 "" TCP 25989 208.50.179.13 2.1.3 DNS Response IN A NOERROR InfobloxDNSView=;InfobloxDNSQClass=IN;InfobloxDNSQType=A;InfobloxDNSQFlags=-EV;InfobloxDNSRCode=NOERROR;InfobloxAnCount=1;InfobloxNsCount=0;InfobloxArCount=1 DNS cdn.content.prod.cms.msn.com. CommonSecurityLog

42
Solutions/Infoblox Cloud Data Connector/Analytic Rules/HighNumberOfHighThreatLevelDetected.yaml
Просмотреть файл

@ -1,42 +0,0 @@
id: 975f3faf-dcdb-49ae-aafc-9cdf1b2647b8
name: High Number of High Threat Level Detected
description: |
'This creates an incident in the event a host generates a high number of high threat level queries.'
severity: Medium
requiredDataConnectors:
- connectorId: InfobloxCloudDataConnector
dataTypes:
- CommonSecurityLog
queryFrequency: 1h
queryPeriod: 1h
triggerOperator: gt
triggerThreshold: 0
tactics:
- Impact
relevantTechniques:
- T1498
- T1565
query: |
let threshold = 200;
CommonSecurityLog
| where DeviceVendor == "Infoblox" and DeviceProduct == "Data Connector"
| where DeviceEventClassID has "RPZ"
| extend ThreatLevel_Score = toint(extract("InfobloxThreatLevel=(.*)", 1, AdditionalExtensions))
| where ThreatLevel_Score >=80
| summarize count() by SourceIP, bin(TimeGenerated,15m)
| where count_ > threshold
| join kind=inner (CommonSecurityLog
| where DeviceVendor == "Infoblox" and DeviceProduct == "Data Connector"
| where DeviceEventClassID has "RPZ"
| extend ThreatLevel_Score = toint(extract("InfobloxThreatLevel=(.*)", 1, AdditionalExtensions))
| where ThreatLevel_Score >=80
) on SourceIP
| extend timestamp = TimeGenerated, IPCustomEntity = SourceIP
entityMappings:
- entityType: IP
fieldMappings:
- identifier: Address
columnName: IPCustomEntity
version: 1.0.0
kind: Scheduled

40
Solutions/Infoblox Cloud Data Connector/Analytic Rules/HighNumberofNXDOMAINDNSQueriesDetected.yaml
Просмотреть файл

@ -1,40 +0,0 @@
id: b49637ac-36cc-451c-a67d-bb08a66c0a22
name: High Number of NXDOMAIN DNS Queries Detected
description: |
'This creates an incident in the event a host generates a high number of DNS queries for non-existent domains.'
severity: Medium
requiredDataConnectors:
- connectorId: InfobloxCloudDataConnector
dataTypes:
- CommonSecurityLog
queryFrequency: 1h
queryPeriod: 1h
triggerOperator: gt
triggerThreshold: 0
tactics:
- Impact
relevantTechniques:
- T1498
- T1565
query: |
let threshold = 200;
CommonSecurityLog
| where DeviceVendor == "Infoblox" and DeviceProduct == "Data Connector"
| where DeviceEventClassID has "RPZ"
| where SimplifiedDeviceAction == "NXDOMAIN"
| summarize count() by SourceIP, bin(TimeGenerated,15m)
| where count_ > threshold
| join kind=inner (CommonSecurityLog
| where DeviceVendor == "Infoblox" and DeviceProduct == "Data Connector"
| where DeviceEventClassID has "RPZ"
| where SimplifiedDeviceAction == "NXDOMAIN"
) on SourceIP
| extend timestamp = TimeGenerated, IPCustomEntity = SourceIP
entityMappings:
- entityType: IP
fieldMappings:
- identifier: Address
columnName: IPCustomEntity
version: 1.0.0
kind: Scheduled

42
Solutions/Infoblox Cloud Data Connector/Analytic Rules/Infoblox-HighNumberOfHighThreatLevelQueriesDetected.yaml Normal file
Просмотреть файл

@ -0,0 +1,42 @@
id: 57113ad7-7dd6-4150-84d8-252e162aaf4a
name: Infoblox - High Number of High Threat Level Queries Detected
description: |
'This creates an incident in the event a single host generates at least 200 high threat level RPZ queries (Threat Defense security hits) in 1 hour. Query count threshold and scheduling is customizable. This rule depends on a parser based on a Kusto Function to work as expected called [**InfobloxCDC**](https://aka.ms/sentinel-InfobloxCloudDataConnector-parser).'
severity: Medium
requiredDataConnectors:
- connectorId: InfobloxCloudDataConnector
dataTypes:
- CommonSecurityLog (InfobloxCDC)
queryFrequency: 1h
queryPeriod: 1h
triggerOperator: gt
triggerThreshold: 0
tactics:
- Impact
relevantTechniques:
- T1498
- T1565
query: |
let threshold = 200;
InfobloxCDC
| where DeviceEventClassID has_cs "RPZ"
| where ThreatLevel_Score >=80
| summarize count() by SourceIP
| where count_ > threshold
| join kind=inner (InfobloxCDC
| where DeviceEventClassID has_cs "RPZ"
| where ThreatLevel_Score >=80
) on SourceIP
| extend timestamp = TimeGenerated, IPCustomEntity = SourceIP, HostCustomEntity = DeviceName
entityMappings:
- entityType: IP
fieldMappings:
- identifier: Address
columnName: IPCustomEntity
- entityType: Host
fieldMappings:
- identifier: HostName
columnName: HostCustomEntity
version: 1.0.0
kind: Scheduled

43
Solutions/Infoblox Cloud Data Connector/Analytic Rules/Infoblox-HighNumberOfNXDOMAINDNSResponsesDetected.yaml Normal file
Просмотреть файл

@ -0,0 +1,43 @@
id: 818eddaa-3806-43a2-8930-3defc5a06803
name: Infoblox - High Number of NXDOMAIN DNS Responses Detected
description: |
'This creates an incident in the event a single host generates at least 200 DNS responses for non-existent domains in 1 hour. Query count threshold and scheduling is customizable. This rule depends on a parser based on a Kusto Function to work as expected called [**InfobloxCDC**](https://aka.ms/sentinel-InfobloxCloudDataConnector-parser).'
severity: Medium
requiredDataConnectors:
- connectorId: InfobloxCloudDataConnector
dataTypes:
- CommonSecurityLog (InfobloxCDC)
queryFrequency: 1h
queryPeriod: 1h
triggerOperator: gt
triggerThreshold: 0
tactics:
- Impact
relevantTechniques:
- T1498
- T1565
query: |
let threshold = 200;
InfobloxCDC
| where DeviceEventClassID == "DNS Response"
| where InfobloxDNSRCode == "NXDOMAIN"
| summarize count() by SourceIP
| where count_ > threshold
| join kind=inner (InfobloxCDC
| where DeviceEventClassID == "DNS Response"
| where InfobloxDNSRCode == "NXDOMAIN"
) on SourceIP
| extend timestamp = TimeGenerated, IPCustomEntity = SourceIP, HostCustomEntity = DeviceName
entityMappings:
- entityType: IP
fieldMappings:
- identifier: Address
columnName: IPCustomEntity
- entityType: Host
fieldMappings:
- identifier: HostName
columnName: HostCustomEntity
version: 1.0.0
kind: Scheduled

44
Solutions/Infoblox Cloud Data Connector/Analytic Rules/Infoblox-HighThreatLevelQueryNotBlockedDetected.yaml Normal file
Просмотреть файл

@ -0,0 +1,44 @@
id: dc7af829-d716-4774-9d6f-03d9aa7c27a4
name: Infoblox - High Threat Level Query Not Blocked Detected
description: |
'This creates an incident in the event a single host generates at least 1 high threat level query (Threat Defense security hit) that is not blocked or redirected in 1 hour. Query count threshold and scheduling is customizable. This rule depends on a parser based on a Kusto Function to work as expected called [**InfobloxCDC**](https://aka.ms/sentinel-InfobloxCloudDataConnector-parser).'
severity: Medium
requiredDataConnectors:
- connectorId: InfobloxCloudDataConnector
dataTypes:
- CommonSecurityLog (InfobloxCDC)
queryFrequency: 1h
queryPeriod: 1h
triggerOperator: gt
triggerThreshold: 0
tactics:
- Impact
relevantTechniques:
- T1498
- T1565
query: |
let threshold = 1;
InfobloxCDC
| where DeviceEventClassID has_cs "RPZ"
| where ThreatLevel_Score >=80
| where InfobloxB1PolicyAction == "Log" or SimplifiedDeviceAction == "PASSTHRU"
| summarize count() by SourceIP
| where count_ > threshold
| join kind=inner (InfobloxCDC
| where DeviceEventClassID has_cs "RPZ"
| where ThreatLevel_Score >=80
| where InfobloxB1PolicyAction == "Log" or SimplifiedDeviceAction == "PASSTHRU"
) on SourceIP
| extend timestamp = TimeGenerated, IPCustomEntity = SourceIP, HostCustomEntity = DeviceName
entityMappings:
- entityType: IP
fieldMappings:
- identifier: Address
columnName: IPCustomEntity
- entityType: Host
fieldMappings:
- identifier: HostName
columnName: HostCustomEntity
version: 1.0.0
kind: Scheduled

43
Solutions/Infoblox Cloud Data Connector/Data Connectors/InfobloxCloudDataConnector.json
Просмотреть файл

@ -2,7 +2,8 @@
"id": "InfobloxCloudDataConnector",
"title": "Infoblox Cloud Data Connector",
"publisher": "Infoblox",
"descriptionMarkdown": "The Infoblox Cloud Data Connector allows you to easily connect your Infoblox BloxOne data with Azure Sentinel. By connecting your logs to Azure Sentinel, you can take advantage of search & correlation, alerting, and threat intelligence enrichment for each log.",
"descriptionMarkdown": "The Infoblox Cloud Data Connector allows you to easily connect your Infoblox BloxOne data with Azure Sentinel. By connecting your logs to Azure Sentinel, you can take advantage of search & correlation, alerting, and threat intelligence enrichment for each log.",
"additionalRequirementBanner": "This data connector depends on a parser based on a Kusto Function to work as expected called [**InfobloxCDC**](https://aka.ms/sentinel-InfobloxCloudDataConnector-parser) which is deployed with the Azure Sentinel Solution.",
"graphQueries": [
{
"metricName": "Total data received",
@ -12,37 +13,45 @@
],
"sampleQueries": [
{
"description" : "Return all BloxOne Threat Defense (TD) logs",
"query": "CommonSecurityLog\n| where DeviceVendor == \"Infoblox\" and DeviceProduct == \"Data Connector\"\n | where DeviceEventClassID has_cs \"RPZ\""
"description" : "Return all BloxOne Threat Defense (TD) security events logs",
"query": "InfobloxCDC\n| where DeviceEventClassID has_cs \"RPZ\""
},
{
"description" : "Return all BloxOne DDI logs",
"query": "CommonSecurityLog\n| where DeviceVendor == \"Infoblox\" and DeviceProduct == \"Data Connector\"\n | where DeviceEventClassID has_cs \"DNS Response\""
"description" : "Return all BloxOne Query/Response logs",
"query": "InfobloxCDC\n| where DeviceEventClassID has_cs \"DNS\""
},
{
"description" : "Return all Category Filters security events",
"query": "CommonSecurityLog\n| where DeviceVendor == \"Infoblox\" and DeviceProduct == \"Data Connector\"\n | where DeviceEventClassID has_cs \"RPZ\"\n | where AdditionalExtensions contains \"InfobloxRPZ=CAT_\""
"description" : "Return all Category Filters security events logs",
"query": "InfobloxCDC\n| where DeviceEventClassID has_cs \"RPZ\"\n | where AdditionalExtensions has_cs \"InfobloxRPZ=CAT_\""
},
{
"description" : "Return all Application Filters security events logs",
"query": "InfobloxCDC\n| where DeviceEventClassID has_cs \"RPZ\"\n | where AdditionalExtensions has_cs \"InfobloxRPZ=APP_\""
},
{
"description" : "Return Top 10 TD Domains Hit Count",
"query": "CommonSecurityLog\n| where DeviceVendor == \"Infoblox\" and DeviceProduct == \"Data Connector\"\n | where DeviceEventClassID has_cs \"RPZ\" \n| summarize count() by DestinationDnsDomain \n| top 10 by count_ desc"
"query": "InfobloxCDC\n| where DeviceEventClassID has_cs \"RPZ\" \n| summarize count() by DestinationDnsDomain \n| top 10 by count_ desc"
},
{
"description" : "Return Top 10 TD Source IPs Hit Count",
"query": "CommonSecurityLog\n| where DeviceVendor == \"Infoblox\" and DeviceProduct == \"Data Connector\"\n | where DeviceEventClassID has_cs \"RPZ\" \n| summarize count() by SourceIP \n| top 10 by count_ desc"
"query": "InfobloxCDC\n| where DeviceEventClassID has_cs \"RPZ\" \n| summarize count() by SourceIP \n| top 10 by count_ desc"
},
{
"description" : "Return Recently Created DHCP Leases",
"query": "InfobloxCDC\n| where DeviceEventClassID == \"DHCP-LEASE-CREATE\""
}
],
"dataTypes": [
{
"name": "CommonSecurityLog (InfobloxCDC)",
"lastDataReceivedQuery": "CommonSecurityLog\n| where DeviceVendor == \"Infoblox\" and DeviceProduct == \"Data Connector\"\n | summarize Time = max(TimeGenerated)\n| where isnotempty(Time)"
"lastDataReceivedQuery": "InfobloxCDC\n| summarize Time = max(TimeGenerated)\n| where isnotempty(Time)"
}
],
"connectivityCriterias": [
{
"type": "IsConnectedQuery",
"value": [
"CommonSecurityLog\n| where DeviceVendor == \"Infoblox\"\n| where DeviceProduct == \"Data Connector\"\n| summarize LastLogReceived = max(TimeGenerated)\n| project IsConnected = LastLogReceived > ago(30d)"
"InfobloxCDC\n| summarize LastLogReceived = max(TimeGenerated)\n| project IsConnected = LastLogReceived > ago(30d)"
]
}
],
@ -75,6 +84,16 @@
]
},
"instructionSteps": [
{
"title": "",
"description": ">**IMPORTANT:** This data connector depends on a parser based on a Kusto Function to work as expected called [**InfobloxCDC**](https://aka.ms/sentinel-InfobloxCloudDataConnector-parser) which is deployed with the Azure Sentinel Solution.",
"instructions": []
},
{
"title": "",
"description": ">**IMPORTANT:** This Sentinel data connector assumes an Infoblox Data Connector host has already been created and configured in the Infoblox Cloud Services Portal (CSP). As the [**Infoblox Data Connector**](https://docs.infoblox.com/display/BloxOneThreatDefense/Deploying+the+Data+Connector+Solution) is a feature of BloxOne Threat Defense, access to an appropriate BloxOne Threat Defense subscription is required. See this [**quick-start guide**](https://www.infoblox.com/wp-content/uploads/infoblox-deployment-guide-data-connector.pdf) for more information and licensing requirements.",
"instructions": []
},
{
"title": "1. Linux Syslog agent configuration",
"description": "Install and configure the Linux agent to collect your Common Event Format (CEF) Syslog messages and forward them to Azure Sentinel.\n\n> Notice that the data from all regions will be stored in the selected workspace",
@ -104,7 +123,7 @@
},
{
"title": "2. Configure Infoblox BloxOne to send Syslog data to the Infoblox Cloud Data Connector to forward to the Syslog agent",
"description": "Follow the steps below to configure the Infoblox CDC to send BloxOne data to Azure Sentinel via the Linux Syslog agent. This Sentinel data connector assumes an Infoblox Cloud Data Connector on-prem host has already been created and configured in the Infoblox Cloud Services Portal (CSP). \n\n1. Log into the Infoblox Cloud Services Portal (CSP).\n2. Navigate to **Manage > Data Connector**.\n3. Click the **Destination Configuration** tab at the top.\n4. Click **Create > Syslog**. \n - **Name**: Give the new Destination a meaningful **name**, such as **Azure-Sentinel-Destination**.\n - **Description**: Optionally give it a meaningful **description**.\n - **State**: Set the state to **Enabled**.\n - **Format**: Set the format to **CEF**.\n - **FQDN/IP**: Enter the IP address of the Linux device on which the Linux agent is installed.\n - **Port**: Leave the port number at **514**.\n - **Protocol**: Leave the protocol at **TCP**.\n - Click **Save & Close**.\n5. Click the **Traffic Flow Configuration** tab at the top.\n6. Click **Create**.\n - **Name**: Give the new Traffic Flow a meaningful **name**, such as **Azure-Sentinel-Flow**.\n - **Description**: Optionally give it a meaningful **description**. \n - **State**: Set the state to **Enabled**. \n - Expand the **CDC Enabled Host** section. \n - **On-Prem Host**: Select your desired on-prem host for which the Data Connector service is enabled. \n - Expand the **Source Configuration** section. \n - **Source**: Select **BloxOne Cloud Source**. \n - Select all desired **log types** you wish to collect. \n - Expand the **Destination Configuration** section. \n - Select the **Destination** you just created. \n - Click **Save & Close**. \n7. Allow the configuration some time to activate."
"description": "Follow the steps below to configure the Infoblox CDC to send BloxOne data to Azure Sentinel via the Linux Syslog agent.\n2. Navigate to **Manage > Data Connector**.\n3. Click the **Destination Configuration** tab at the top.\n4. Click **Create > Syslog**. \n - **Name**: Give the new Destination a meaningful **name**, such as **Azure-Sentinel-Destination**.\n - **Description**: Optionally give it a meaningful **description**.\n - **State**: Set the state to **Enabled**.\n - **Format**: Set the format to **CEF**.\n - **FQDN/IP**: Enter the IP address of the Linux device on which the Linux agent is installed.\n - **Port**: Leave the port number at **514**.\n - **Protocol**: Select desired protocol and CA certificate if applicable.\n - Click **Save & Close**.\n5. Click the **Traffic Flow Configuration** tab at the top.\n6. Click **Create**.\n - **Name**: Give the new Traffic Flow a meaningful **name**, such as **Azure-Sentinel-Flow**.\n - **Description**: Optionally give it a meaningful **description**. \n - **State**: Set the state to **Enabled**. \n - Expand the **CDC Enabled Host** section. \n - **On-Prem Host**: Select your desired on-prem host for which the Data Connector service is enabled. \n - Expand the **Source Configuration** section. \n - **Source**: Select **BloxOne Cloud Source**. \n - Select all desired **log types** you wish to collect. Currently supported log types are:\n - Threat Defense Query/Response Log\n - Threat Defense Threat Feeds Hits Log\n - DDI Query/Response Log\n - DDI DHCP Lease Log\n - Expand the **Destination Configuration** section. \n - Select the **Destination** you just created. \n - Click **Save & Close**. \n7. Allow the configuration some time to activate."
},
{
"title": "3. Validate connection",

9
Solutions/Infoblox Cloud Data Connector/Data/Solution_Infoblox.json
Просмотреть файл

@ -3,11 +3,12 @@
"Author": "Nikhil Tripathi - v-ntripathi@microsoft.com",
"Logo": "<img src=\"https://raw.githubusercontent.com/Azure/Azure-Sentinel/master/Logos/infoblox_logo.svg\" width=\"75px\" height=\"75px\">",
"Description": "The [Infoblox](https://www.infoblox.com/) cloud managed Data Connector (DC) is a utility designed to collect DNS query and response data and security logs and transfer the data to defined destinations such as the BloxOne Threat Defense Cloud, Infoblox NIOS reporting server, and syslog servers such as a SIEM (Security Information and Event Manager).",
"WorkbookDescription": "Get a closer look at your BloxOne Threat Defense security event data. This workbook is intended to help visualize BloxOne Threat Defense data as part of the Infoblox Cloud Data Connector. Drilldown your data and visualize events, trends, and anomalous changes over time.",
"WorkbookDescription": "Get a closer look at your BloxOne DNS Query/Response logs, DHCP logs and Threat Defense security event data. This workbook is intended to help visualize BloxOne query data as part of the Infoblox Cloud Data Connector. Drilldown your data and visualize events, trends, and anomalous changes over time.",
"Workbooks": ["Workbooks/InfobloxCDCB1TDWorkbook.json"],
"Analytic Rules": [
"Analytic Rules/HighNumberOfHighThreatLevelDetected.yaml",
"Analytic Rules/HighNumberofNXDOMAINDNSQueriesDetected.yaml"
"Analytic Rules/Infoblox-HighNumberOfHighThreatLevelQueriesDetected.yaml",
"Analytic Rules/Infoblox-HighNumberOfNXDOMAINDNSResponsesDetected.yaml",
"Analytic Rules/Infoblox-HighThreatLevelQueryNotBlockedDetected.yaml"
],
"Data Connectors": [
"Data Connectors/InfobloxCloudDataConnector.json"
@ -16,4 +17,4 @@
"BasePath": "C:\\GitHub\\azure\\Solutions\\Infoblox Cloud Data Connector",
"Version": "1.1.0"
}

50
Solutions/Infoblox Cloud Data Connector/Parsers/InfobloxCDC.txt Normal file
Просмотреть файл

@ -0,0 +1,50 @@
// Title: Infoblox Cloud Data Connector Parser
// Author: Infoblox
// Version: 1.0
// Last Updated: 12/2/2021
// Comment: Initial Release
//
// DESCRIPTION:
// This parser takes raw Infoblox Cloud Data Connector (CDC) logs from a Syslog (CEF) stream and parses the logs into a normalized schema.
//
// USAGE:
// 1. Open Log Analytics/Azure Sentinel Logs blade. Copy the query below and paste into the Logs query window.
// 2. Click the Save button above the query. A pane will appear on the right, select "as Function" from the drop down. Enter the Function Name as InfobloxCDC.
// 3. Kusto Functions can typically take up to 15 minutes to activate. You can then use Function Alias for other queries.
//
// REFERENCES:
// Using functions in Azure monitor log queries: https://docs.microsoft.com/azure/azure-monitor/log-query/functions
//
CommonSecurityLog
| where DeviceVendor == "Infoblox" and DeviceProduct == "Data Connector"
| extend AEcopy = AdditionalExtensions
| extend AEcopy = extract_all(@"(?P<key>[^=;]+)=(?P<value>[^=;]+)", dynamic(["key","value"]), AEcopy)
| mv-apply AEcopy on (
summarize AdditionalExtensionsParsedNested = make_bag(pack(tostring(AEcopy[0]), AEcopy[1]))
)
| extend AdditionalExtensionsParsed = AdditionalExtensionsParsedNested
| evaluate bag_unpack(AdditionalExtensionsParsed)
| extend ThreatLevel_Score = toint(column_ifexists("InfobloxThreatLevel", ""))
| extend ThreatLevel = case(ThreatLevel_Score>=80, "High",
ThreatLevel_Score>=30 and ThreatLevel_Score<80, "Medium",
ThreatLevel_Score<30 and ThreatLevel_Score>=1, "Low",
ThreatLevel_Score == 0,"Info",
"N/A" )
| extend ThreatClass = extract("(.*?)_", 1, tostring(column_ifexists("InfobloxThreatProperty", "")))
| extend ThreatProperty = extract("([^_]*$)", 1, tostring(column_ifexists("InfobloxThreatProperty", "")))
| extend InfobloxB1FeedName = column_ifexists("InfobloxB1FeedName", "")
| extend InfobloxRPZ = column_ifexists("InfobloxRPZ", "")
| extend InfobloxB1PolicyAction = column_ifexists("InfobloxB1PolicyAction", "")
| extend InfobloxB1PolicyName = column_ifexists("InfobloxB1PolicyName", "")
| extend InfobloxDomainCat = column_ifexists("InfobloxDomainCat", "")
| extend InfobloxB1ConnectionType = column_ifexists("InfobloxB1ConnectionType", "")
| extend InfobloxB1SrcOSVersion = column_ifexists("InfobloxB1SrcOSVersion", "")
| extend InfobloxB1Network = column_ifexists("InfobloxB1Network", "")
| extend DeviceName = column_ifexists("DeviceName", "")
| extend SourceMACAddress = column_ifexists("SourceMACAddress", "")
| extend InfobloxLeaseOp = column_ifexists("InfobloxLeaseOp", "")
| extend InfobloxLifetime = column_ifexists("InfobloxLifetime", "")
| extend InfobloxLeaseUUID = column_ifexists("InfobloxLeaseUUID", "")
| extend InfobloxDNSRCode = column_ifexists("InfobloxDNSRCode", "")
| extend InfobloxDNSQClass = column_ifexists("InfobloxDNSQClass", "")
| extend InfobloxDNSQType = column_ifexists("InfobloxDNSQType", "")

Двоичные данные
Solutions/Infoblox Cloud Data Connector/Workbooks/Images/Preview/InfobloxCDCB1TDBlack.png
Просмотреть файл

Двоичный файл не отображается.
Режим "рядом" Свайп Оверлей

До

Ширина:  |  Высота:  |  Размер: 111 KiB

После

Ширина:  |  Высота:  |  Размер: 250 KiB

Двоичные данные
Solutions/Infoblox Cloud Data Connector/Workbooks/Images/Preview/InfobloxCDCB1TDWhite.png
Просмотреть файл

Двоичный файл не отображается.
Режим "рядом" Свайп Оверлей

До

Ширина:  |  Высота:  |  Размер: 114 KiB

После

Ширина:  |  Высота:  |  Размер: 206 KiB

11019
Solutions/Infoblox Cloud Data Connector/Workbooks/InfobloxCDCB1TDWorkbook.json
Просмотреть файл

Разница между файлами не показана из-за своего большого размера Загрузить разницу