Viewing Queries by Source IP

1. Login to UltraDNS
2. Click Reports
3. Click Advanced Client IP
   1. Set the Date Range you want
   2. Set the Zone(s) you want. (You can type the zone but you need to add a trailing dot. Using domain.com as an example, don't type domain.com - type domain.com.)
   3. Click Apply. (Note that it defaults to ascending order instead of descending order.)
   4. Hover your mouse over the Responses column and then click the down arrow
   5. At this point the top result will usually be a blank cell under Client Class C which is every IPv6 address slammed together into one
   6. Click Client Class C
   7. Click Drill to Zones.

This gives you source IP's that queried for the zone only but if you want to view the Hostname(s) for the Zone, read below about Expanding Columns.

Expanding Columns

1. If you want to expand a column to view that data, press the column's header
   1. For example, let's say you want to view all Client IPs and the Hostname's queried by them
2. Click the column header Client Class C
3. Pressing it once will show the Client Subnet and add another column called Client IP which is the source IP making the query(ies)
4. Then, to view the hostname(s) of the zone(s) that were queried, press the Hostname header
5. Pressing it once or twice will show add another column called Zone for the domain, and now in the Hostname column you'll see the actual hostname of the domain that was queried

Exporting Results

1. At the bottom center of the screen, you'll see 4 different types of arrows and next to those it will say Rows 1-35
2. Below the arrows you'll see Refresh, Print and Export
3. Click Export and choose Data, then CSV Format

Investigating IPs

1. Just like you can WHOIS a domain using a Registrar's WHOIS lookup, or other 3rd party tools online, you can do a WHOIS on an IP address
2. For this example, we'll do a WHOIS from your location by finding your source IP and then doing a WHOIS check
3. Open a browser and go to google.com
4. In the search bar, type 'what is my IP' and this is your Public IP (aka source IP)
5. This data will tell you who the IP belongs to for further contact regarding the client IP, and report any abuse to them