Public DNS servers: the full list

Cloudflare DNS

Cloudflare

The fastest major resolver on most connections, with a strong no-logging privacy stance and no default filtering.

Primary

1.1.1.1

Secondary

1.0.0.1

• No-log : yes
• DNSSEC : yes
• Malware blocking : no
• Ad blocking : no
• Family filter : no

Cloudflare for Families

Cloudflare

Cloudflare speed with built-in malware and adult-content blocking — a fast, simple family-safe option.

Primary

1.1.1.3

Secondary

1.0.0.3

• No-log : yes
• DNSSEC : yes
• Malware blocking : yes
• Ad blocking : no
• Family filter : yes

Google Public DNS

Google

A globally distributed, extremely reliable resolver. Uses EDNS Client Subnet, which helps CDN routing at a small privacy cost.

Primary

8.8.8.8

Secondary

8.8.4.4

• No-log : no
• DNSSEC : yes
• Malware blocking : no
• Ad blocking : no
• Family filter : no

Quad9

Quad9 Foundation

A security-first non-profit resolver that blocks known malicious domains and keeps no source-IP logs.

Primary

9.9.9.9

Secondary

149.112.112.112

• No-log : yes
• DNSSEC : yes
• Malware blocking : yes
• Ad blocking : no
• Family filter : no

OpenDNS

Cisco

A long-established resolver with phishing protection and optional content filtering, backed by Cisco's network.

Primary

208.67.222.222

Secondary

208.67.220.220

• No-log : no
• DNSSEC : yes
• Malware blocking : yes
• Ad blocking : no
• Family filter : yes

AdGuard DNS

AdGuard

Blocks ads, trackers, and malware for every device on your network without installing anything.

Primary

94.140.14.14

Secondary

94.140.15.15

• No-log : yes
• DNSSEC : yes
• Malware blocking : yes
• Ad blocking : yes
• Family filter : no

CleanBrowsing

CleanBrowsing

Tiered filtering (security, family, adult) that is popular for schools and family networks.

Primary

185.228.168.9

Secondary

185.228.169.9

• No-log : yes
• DNSSEC : yes
• Malware blocking : yes
• Ad blocking : no
• Family filter : yes

Control D

Windscribe

Highly customizable free resolvers — pick unfiltered, malware-blocking, ad-blocking, or family in one click.

Primary

76.76.2.0

Secondary

76.76.10.0

• No-log : yes
• DNSSEC : yes
• Malware blocking : yes
• Ad blocking : yes
• Family filter : yes

A simple ad-blocking resolver for people who want fewer ads without installing software.

Primary

76.76.19.19

Secondary

76.223.122.150

• No-log : yes
• DNSSEC : yes
• Malware blocking : no
• Ad blocking : yes
• Family filter : no

AliDNS

Alibaba Cloud

Alibaba Cloud's fast recursive resolver with wide coverage across Asia, supporting DoH, DoT, and DoQ.

Primary

223.5.5.5

Secondary

223.6.6.6

• No-log : no
• DNSSEC : yes
• Malware blocking : no
• Ad blocking : no
• Family filter : no

DNSPod Public DNS

Tencent

Tencent's BGP-anycast resolver optimized for Chinese ISP peering, with DoH and DoT support.

Primary

119.29.29.29

• No-log : no
• DNSSEC : no
• Malware blocking : no
• Ad blocking : no
• Family filter : no

DNS.SB

xTom

A free, privacy-first resolver on xTom's global anycast network with DoH and DoT.

Primary

185.222.222.222

Secondary

45.11.45.11

• No-log : yes
• DNSSEC : yes
• Malware blocking : no
• Ad blocking : no
• Family filter : no

Mullvad DNS

Mullvad VPN

Mullvad's free, encrypted-only public resolver (DoH/DoT). The default endpoint applies no filtering.

Primary

194.242.2.2

• No-log : yes
• DNSSEC : yes
• Malware blocking : no
• Ad blocking : no
• Family filter : no

360 Secure DNS

Qihoo 360

Qihoo 360's security-oriented resolver with threat and phishing protection, supporting DoH and DoT.

Primary

101.226.4.6

Secondary

218.30.118.6

• No-log : no
• DNSSEC : no
• Malware blocking : yes
• Ad blocking : no
• Family filter : no

Restena Public DNS

Fondation RESTENA

A neutral recursive resolver run by Luxembourg's national research and education network foundation.

Primary

158.64.1.29

• No-log : yes
• DNSSEC : yes
• Malware blocking : no
• Ad blocking : no
• Family filter : no

DNS4EU (Protective)

DNS4EU consortium

An EU-funded, GDPR-compliant resolver; the default Protective tier blocks malware and phishing domains.

Primary

86.54.11.1

Secondary

86.54.11.201

• No-log : no
• DNSSEC : yes
• Malware blocking : yes
• Ad blocking : no
• Family filter : no

UncensoredDNS

UncensoredDNS

A free, community-run uncensored resolver in Denmark, created in response to DNS censorship.

Primary

91.239.100.100

Secondary

89.233.43.71

• No-log : yes
• DNSSEC : yes
• Malware blocking : no
• Ad blocking : no
• Family filter : no

LibreDNS

LibreOps

A privacy-focused, no-logs resolver from LibreOps (Greece), with an optional ad and tracker blocking endpoint.

Primary

116.202.176.26

• No-log : yes
• DNSSEC : yes
• Malware blocking : no
• Ad blocking : yes
• Family filter : no

NextDNS

NextDNS Inc.

A configurable cloud resolver — the generic addresses give no-setup resolution, while custom ad, malware, and family filtering use a free account.

Primary

45.90.28.0

Secondary

45.90.30.0

• No-log : yes
• DNSSEC : yes
• Malware blocking : yes
• Ad blocking : yes
• Family filter : yes

A Swiss digital-rights NGO's privacy-first, unfiltered, encrypted-only public resolver.

Primary

185.95.218.42

Secondary

185.95.218.43

• No-log : yes
• DNSSEC : yes
• Malware blocking : no
• Ad blocking : no
• Family filter : no

SWITCH Public DNS

SWITCH

A free resolver from Switzerland's research-and-education network with a built-in DNS firewall that blocks malicious domains.

Primary

130.59.31.248

Secondary

130.59.31.251

• No-log : no
• DNSSEC : yes
• Malware blocking : yes
• Ad blocking : no
• Family filter : no

Comcast Xfinity DNS

Comcast

Comcast's default anycast resolvers for Xfinity customers in the United States.

Primary

75.75.75.75

Secondary

75.75.76.76

• No-log : no
• DNSSEC : yes
• Malware blocking : no
• Ad blocking : no
• Family filter : no

CIRA Canadian Shield

CIRA

A free Canadian DNS firewall from the .ca registry; the Protected tier blocks malware and phishing.

Primary

149.112.121.20

Secondary

149.112.122.20

• No-log : no
• DNSSEC : yes
• Malware blocking : yes
• Ad blocking : no
• Family filter : no

DNS for Family

DNS for Family

A free family-focused resolver that blocks adult content and enforces safe search, plus malware, ad, and gambling filtering.

Primary

94.130.180.225

Secondary

78.47.64.161

• No-log : no
• DNSSEC : yes
• Malware blocking : yes
• Ad blocking : yes
• Family filter : yes

Yandex DNS

Yandex

Public DNS from Yandex, offered in Basic, Safe (malware/phishing), and Family (adult-content) modes.

Primary

77.88.8.8

Secondary

77.88.8.1

• No-log : no
• DNSSEC : no
• Malware blocking : no
• Ad blocking : no
• Family filter : no

Long-standing anycast resolvers in Level 3 (now Lumen) address space, widely used as 4.2.2.1–4.2.2.6 but never an official product.

Primary

4.2.2.1

Secondary

4.2.2.2

• No-log : no
• DNSSEC : no
• Malware blocking : no
• Ad blocking : no
• Family filter : no

Vercara UltraDNS Public

Vercara (DigiCert)

Free recursive DNS formerly run as Verisign Public DNS (64.6.64.6), now operated by Vercara on the UltraDNS anycast network, in unfiltered, threat, and family tiers.

Primary

64.6.64.6

Secondary

64.6.65.6

• No-log : no
• DNSSEC : yes
• Malware blocking : no
• Ad blocking : no
• Family filter : no

Comodo Secure DNS

Comodo

A security-focused resolver that blocks known malware, phishing, and other malicious domains.

Primary

8.26.56.26

Secondary

8.20.247.20

• No-log : no
• DNSSEC : no
• Malware blocking : yes
• Ad blocking : no
• Family filter : no

Hurricane Electric DNS

Hurricane Electric

A free anycast resolver from IPv6 backbone operator Hurricane Electric, with strong native IPv6 support.

Primary

74.82.42.42

• No-log : no
• DNSSEC : no
• Malware blocking : no
• Ad blocking : no
• Family filter : no

A free, uncensored German resolver focused on privacy, with DNSSEC and no query logging.

Primary

84.200.69.80

Secondary

84.200.70.40

• No-log : yes
• DNSSEC : yes
• Malware blocking : no
• Ad blocking : no
• Family filter : no

Quad101

TWNIC

A free resolver run by Taiwan's domain registry TWNIC, with DNSSEC over plain DNS, DoT, and DoH.

Primary

101.101.101.101

Secondary

101.102.103.104

• No-log : yes
• DNSSEC : yes
• Malware blocking : no
• Ad blocking : no
• Family filter : no

DNSforge

adminForge

A donation-funded German resolver that blocks ads, tracking, and malware by default, with DNSSEC.

Primary

176.9.93.198

Secondary

176.9.1.117

• No-log : yes
• DNSSEC : yes
• Malware blocking : yes
• Ad blocking : yes
• Family filter : no

FDN (French Data Network)

French Data Network

An open, non-filtering resolver from France's oldest non-profit ISP association, with DNSSEC over plain DNS, DoT, and DoH.

Primary

80.67.169.12

Secondary

80.67.169.40

• No-log : yes
• DNSSEC : yes
• Malware blocking : no
• Ad blocking : no
• Family filter : no

BlahDNS

BlahDNS

A hobby-run ad-blocking resolver with servers in Germany and Singapore, offering DoH, DoT, DoQ, and DNSCrypt.

Primary

78.46.244.143

Secondary

46.250.226.242

• No-log : yes
• DNSSEC : yes
• Malware blocking : yes
• Ad blocking : yes
• Family filter : no

Tiarap

Tiarap

A privacy-first resolver that blocks ads, trackers, malware, and phishing, with DoH, DoT, DoQ, and DNSCrypt.

Primary

174.138.21.128

Secondary

188.166.206.224

• No-log : yes
• DNSSEC : yes
• Malware blocking : yes
• Ad blocking : yes
• Family filter : no

Freifunk München (ffmuc)

Freie Netze München e.V.

A non-profit, non-filtering privacy resolver from Freifunk München, with servers in Munich and Vienna.

Primary

5.1.66.255

Secondary

185.150.99.255

• No-log : yes
• DNSSEC : yes
• Malware blocking : no
• Ad blocking : no
• Family filter : no

An Indonesian family-safe resolver that blocks pornography, gambling, phishing, and malware.

Primary

180.131.144.144

Secondary

180.131.145.145

• No-log : no
• DNSSEC : no
• Malware blocking : yes
• Ad blocking : no
• Family filter : yes

SafeDNS

SafeDNS

A cloud DNS-filtering service whose free resolver blocks malicious domains, with configurable categories via an account.

Primary

195.46.39.39

Secondary

195.46.39.40

• No-log : no
• DNSSEC : no
• Malware blocking : yes
• Ad blocking : no
• Family filter : yes

Gcore Public DNS

Gcore

A free anycast resolver from Gcore focused on fast resolution across its global edge network.

Primary

95.85.95.85

Secondary

2.56.220.2

• No-log : yes
• DNSSEC : no
• Malware blocking : no
• Ad blocking : no
• Family filter : no

CZ.NIC ODVR

CZ.NIC

CZ.NIC's Open DNSSEC Validating Resolvers — a free resolver run by the Czech national registry with DNSSEC and encrypted transport.

Primary

193.17.47.1

Secondary

185.43.135.1

• No-log : no
• DNSSEC : yes
• Malware blocking : no
• Ad blocking : no
• Family filter : no

OpenBLD DNS

OpenBLD Project

A Kazakhstan-based DoH/DoT-only resolver that blocks ads, trackers, and malware using public threat feeds. Encrypted transport only — no plain-DNS IP.

DNS-over-HTTPS

https://ada.openbld.net/dns-query

DNS-over-TLS

ada.openbld.net

• No-log : no
• DNSSEC : yes
• Malware blocking : yes
• Ad blocking : yes
• Family filter : no

IIJ Public DNS

Internet Initiative Japan

A free DoH/DoT beta resolver from Japanese ISP IIJ (offered through March 2027). Encrypted transport only — no plain-DNS IP.

DNS-over-HTTPS

https://public.dns.iij.jp/dns-query

DNS-over-TLS

public.dns.iij.jp

• No-log : yes
• DNSSEC : yes
• Malware blocking : no
• Ad blocking : no
• Family filter : no

Applied Privacy

Foundation for Applied Privacy

A non-profit Austrian resolver offering DNS-over-HTTPS and DNS-over-TLS only — it deliberately does not run plain DNS.

DNS-over-HTTPS

https://doh.applied-privacy.net/query

DNS-over-TLS

dot1.applied-privacy.net

• No-log : yes
• DNSSEC : yes
• Malware blocking : no
• Ad blocking : no
• Family filter : no

RethinkDNS

RethinkDNS

An open-source, serverless DoH resolver on Cloudflare Workers. The bare endpoint resolves unfiltered; 190+ optional ad, malware, and family blocklists activate via a config. Encrypted transport only.

DNS-over-HTTPS

https://sky.rethinkdns.com/dns-query

• No-log : yes
• DNSSEC : no
• Malware blocking : no
• Ad blocking : no
• Family filter : no

Comss.one DNS

Comss.one

A free Russian ad- and malware-blocking resolver offering plain DNS, DoH, DoT, and DoQ.

Primary

83.220.169.155

Secondary

212.109.195.93

• No-log : no
• DNSSEC : yes
• Malware blocking : yes
• Ad blocking : yes
• Family filter : no

FlashStart

FlashStart Group

An Italian content-filtering resolver for malware and family/content control. It only answers normally for public IPs first registered (free) in its Cloud Panel.

Primary

185.236.104.104

Secondary

185.236.105.105

• No-log : no
• DNSSEC : no
• Malware blocking : yes
• Ad blocking : no
• Family filter : yes