How to get qname from bind log by specific ip

cat query-2020-12-* | grep "10.22.70.195" | awk '{print $11}' | sort | uniq -c | sort -r > analytic

then the result is :

head -n100 analytic
2504 flora.web.telegram.org
1736 ib.sin1.geoadnxs.com
1467 astro2.rastream.com
1188 dns.msftncsi.com
1079 d3k3v8arhuq5l2.cloudfront.net
1021 settingsfd-geo.trafficmanager.net
1013 cu.sni.jns.swiftserve.com
1004 global.vortex.data.trafficmanager.net
 979 v10-win.vortex.data.trafficmanager.net
 974 global.asimov.events.data.trafficmanager.net
 919 rtm.ced.jns.swiftserve.com
 894 prod.pinterest.global.map.fastly.net
 763 star-mini.c10r.facebook.com
 707 sippoolks00f02.koreasouth.cloudapp.azure.com
 705 e15275.g.akamaiedge.net
 625 web.telegram.org
 546 mmx-ds.cdn.whatsapp.net
 539 webpoolks00f02.koreasouth.cloudapp.azure.com
 534 webdir0f.online.lync.com
 528 sipfed0f.online.lync.com
 502 sjc-bid-bgp.contextweb.com
 490 webdir.online.lync.com
 456 sippoolKS00F02.infra.lync.com
 451 www.tm.a.prd.aadg.akadns.net
 445 excel.officeapps.live.com
 439 www.agoda.com
 427 play.google.com
 409 webpoolks00f02.infra.lync.com
 402 7.client-channel.google.com
 395 col-rrs-prod-pub.trafficmanager.net
 389 waws-prod-bay-023.cloudapp.net
 387 sy.eu.angsrvr.com
 367 26.client-channel.google.com
 366 www3.l.google.com
 361 e10663.dscg.akamaiedge.net
 351 www.cjwowshop.com.my
 345 www.addthis.com
 331 ssl.gstatic.com