In your “Windows” event logs under system… it will say event ID 1014 DNS Clent Event