"dig +short @[IP] dnsscan.shadowserver.org" from computer that does not use the IP listed in the command as it's authoritative DNS server. If the device does support open recursion, you should see the IP address of dnsscan.shadowserver.org returned as the result.