DNS Version Scan

I took the Moz top 500 domains and did a NS lookup to find their DNS servers.

Taking only the first DNS server for each domain, I then did a DNS version query on each one.


From the 500 domains, I found 405 DNS servers (I assume my script was fooled by unusual responses sometimes).

From the 405 DNS servers, I found 91 actual Bind version responses and 17 Easter eggs.

Bind Versions

The chart below shows the results.

The pie slices colored green are currently supported versions of Bind.

The yellow slice is at end-of-life.

The red slices are out of date, deprecated versions, according to the Internet Systems Consortium BIND Software Status page.

Here are the servers using outdated versions:

ns.austin.ibm.com 9.7.5
ns2.ucsd.edu 9.7.4-P1
meeney.homestead.com 9.7.3-P1-RedHat-9.7.3-2.el6_1.P1.1
holmes.npr.org 9.7.3
houston2.chron.com 9.7.3
nic4.opera.com 9.7.3
ns1.devhub.com 9.7.3
ns3.skyrock.net 9.7.3
ns4.gnu.org 9.7.3
ns3.barbero.co.uk 9.7.0-P1
nmserv-psu.acns.msu.edu 9.6.1-P1
ns.phx1.nearlyfreespeech.net 9.6.-ESV-R5-P1
ns1.thdow.bbc.co.uk 9.6-ESV-R8
yns1.yahoo.com 9.4.3-P3
ns2.typhon.net 9.4.2-P2.1
ns.abc.net.au 9.3.6-P1-RedHat-9.3.6-20.P1.el5_8.6
ns1.blinkweb.com 9.3.6-P1-RedHat-9.3.6-20.P1.el5_8.6
ns1.viawest.net 9.3.6-P1-RedHat-9.3.6-20.P1.el5_8.6
ns2.idealab.com 9.3.6-P1-RedHat-9.3.6-20.P1.el5_8.6
ns3.altervista.org 9.3.6-P1-RedHat-9.3.6-20.P1.el5_8.6
ns2.artisteer.net 9.3.6-P1-RedHat-9.3.6-16.P1.el5
ns4.4shared.com 9.3.4-P1
dnsp3.dowjones.com 9.2.4
ns4.taobao.com 8.4.7
ns7.taobao.com 8.4.7

Easter Eggs

Here are the jokes or strange strings I found:
ns.sc.egov.usda.gov Your version query has been logged
a.iana-servers.net You shouldn't ask a lady about her age :)
ns3.bkngs.com You might very well think I am that version but I could not possibly comment
ns2.easydns.com Um, it's the latest one. sj2
dns1.easydns.com Um, it's the latest one. ash1
a.sec-ns.de Toaster connected to coffee cup
marianas.its.utexas.edu Not today, and not tomorrow either.
dns.sea1.nytimes.com IS YOUR MAMA A LLAMA?
dns2.peopledaily.com.cn I do not know!
sjc-dns1.ebaydns.com Ho! Ha ha! Guard! Turn! Parry! Dodge! Spin!
SUN1.csps.com Go away!
dnssm.samsung.com For the World Best Create Cyber World By Korea
ns16.xincache.com do it
mercury.house.gov Contact: nsadmin@mail.house.gov
ns2.savvis.net Contact Hostmaster@savvis.net
ns2.vocus.com BIND
ns2e.census.gov b66d7fafc70db837207c16054fb82e1520ddd017
Posted 6:20 pm 10-6-13 by Sam Bowne