If you see an address in your logging with a format similar to ".in-addr.arpa", this is a reverse dns lookup and is normal. Click here to see the Wikipedia definition. If you don't have pointer records set up properly in your zone, these look-ups may not succeed.
Microsoft explains how to do this in an article here.