Can anyone shed light on how I might find out what this query is that I am seeing in the pihole logs?

The device is a Dahua security camera, it does not make any other queries that I can see. I have run wireshark to check for any traffic, and there is nothing that correlates time wise. Wireshark only shows ARP, IGMP and SSDP traffic from the camera. I only have the one camera, so cannot compare devices. My Dahua NVR only shows ntp and smtp traffic on the pihole logs. 

I am aware of the security implications of allowing the camera access to the internet/network, and will shortly be putting it on its own vlan, but in the mean time would still like to know what it is doing.

Any insights would be appreciated.