Public DNS servers: the full list

The fastest major resolver on most connections, with a strong no-logging privacy stance and no default filtering.

Primary

1.1.1.1

Secondary

1.0.0.1

• No-log : yes
• DNSSEC : yes
• Malware blocking : no
• Ad blocking : no
• Family filter : no

Cloudflare speed with built-in malware and adult-content blocking — a fast, simple family-safe option.

Primary

1.1.1.3

Secondary

1.0.0.3

• No-log : yes
• DNSSEC : yes
• Malware blocking : yes
• Ad blocking : no
• Family filter : yes

A globally distributed, extremely reliable resolver. Uses EDNS Client Subnet, which helps CDN routing at a small privacy cost.

Primary

8.8.8.8

Secondary

8.8.4.4

• No-log : no
• DNSSEC : yes
• Malware blocking : no
• Ad blocking : no
• Family filter : no

A security-first non-profit resolver that blocks known malicious domains and keeps no source-IP logs.

Primary

9.9.9.9

Secondary

149.112.112.112

• No-log : yes
• DNSSEC : yes
• Malware blocking : yes
• Ad blocking : no
• Family filter : no

A long-established resolver with phishing protection and optional content filtering, backed by Cisco's network.

Primary

208.67.222.222

Secondary

208.67.220.220

• No-log : no
• DNSSEC : yes
• Malware blocking : yes
• Ad blocking : no
• Family filter : yes

Blocks ads, trackers, and malware for every device on your network without installing anything.

Primary

94.140.14.14

Secondary

94.140.15.15

• No-log : yes
• DNSSEC : yes
• Malware blocking : yes
• Ad blocking : yes
• Family filter : no

Tiered filtering (security, family, adult) that is popular for schools and family networks.

Primary

185.228.168.9

Secondary

185.228.169.9

• No-log : yes
• DNSSEC : yes
• Malware blocking : yes
• Ad blocking : no
• Family filter : yes

Highly customizable free resolvers — pick unfiltered, malware-blocking, ad-blocking, or family in one click.

Primary

76.76.2.0

Secondary

76.76.10.0

• No-log : yes
• DNSSEC : yes
• Malware blocking : yes
• Ad blocking : yes
• Family filter : yes

A simple ad-blocking resolver for people who want fewer ads without installing software.

Primary

76.76.19.19

Secondary

76.223.122.150

• No-log : yes
• DNSSEC : yes
• Malware blocking : no
• Ad blocking : yes
• Family filter : no

Alibaba Cloud's fast recursive resolver with wide coverage across Asia, supporting DoH, DoT, and DoQ.

Primary

223.5.5.5

Secondary

223.6.6.6

• No-log : no
• DNSSEC : yes
• Malware blocking : no
• Ad blocking : no
• Family filter : no

Tencent's BGP-anycast resolver optimized for Chinese ISP peering, with DoH and DoT support.

Primary

119.29.29.29

• No-log : no
• DNSSEC : no
• Malware blocking : no
• Ad blocking : no
• Family filter : no

A free, privacy-first resolver on xTom's global anycast network with DoH and DoT.

Primary

185.222.222.222

Secondary

45.11.45.11

• No-log : yes
• DNSSEC : yes
• Malware blocking : no
• Ad blocking : no
• Family filter : no

Mullvad's free, encrypted-only public resolver (DoH/DoT). The default endpoint applies no filtering.

Primary

194.242.2.2

• No-log : yes
• DNSSEC : yes
• Malware blocking : no
• Ad blocking : no
• Family filter : no

Qihoo 360's security-oriented resolver with threat and phishing protection, supporting DoH and DoT.

Primary

101.226.4.6

Secondary

218.30.118.6

• No-log : no
• DNSSEC : no
• Malware blocking : yes
• Ad blocking : no
• Family filter : no

A neutral recursive resolver run by Luxembourg's national research and education network foundation.

Primary

158.64.1.29

• No-log : yes
• DNSSEC : yes
• Malware blocking : no
• Ad blocking : no
• Family filter : no

An EU-funded, GDPR-compliant resolver; the default Protective tier blocks malware and phishing domains.

Primary

86.54.11.1

Secondary

86.54.11.201

• No-log : no
• DNSSEC : yes
• Malware blocking : yes
• Ad blocking : no
• Family filter : no

A free, community-run uncensored resolver in Denmark, created in response to DNS censorship.

Primary

91.239.100.100

Secondary

89.233.43.71

• No-log : yes
• DNSSEC : yes
• Malware blocking : no
• Ad blocking : no
• Family filter : no

A privacy-focused, no-logs resolver from LibreOps (Greece), with an optional ad and tracker blocking endpoint.

Primary

116.202.176.26

• No-log : yes
• DNSSEC : yes
• Malware blocking : no
• Ad blocking : yes
• Family filter : no

A configurable cloud resolver — the generic addresses give no-setup resolution, while custom ad, malware, and family filtering use a free account.

Primary

45.90.28.0

Secondary

45.90.30.0

• No-log : yes
• DNSSEC : yes
• Malware blocking : yes
• Ad blocking : yes
• Family filter : yes

A Swiss digital-rights NGO's privacy-first, unfiltered, encrypted-only public resolver.

Primary

185.95.218.42

Secondary

185.95.218.43

• No-log : yes
• DNSSEC : yes
• Malware blocking : no
• Ad blocking : no
• Family filter : no

A free resolver from Switzerland's research-and-education network with a built-in DNS firewall that blocks malicious domains.

Primary

130.59.31.248

Secondary

130.59.31.251

• No-log : no
• DNSSEC : yes
• Malware blocking : yes
• Ad blocking : no
• Family filter : no

Comcast's default anycast resolvers for Xfinity customers in the United States.

Primary

75.75.75.75

Secondary

75.75.76.76

• No-log : no
• DNSSEC : yes
• Malware blocking : no
• Ad blocking : no
• Family filter : no

A free Canadian DNS firewall from the .ca registry; the Protected tier blocks malware and phishing.

Primary

149.112.121.20

Secondary

149.112.122.20

• No-log : no
• DNSSEC : yes
• Malware blocking : yes
• Ad blocking : no
• Family filter : no

A free family-focused resolver that blocks adult content and enforces safe search, plus malware, ad, and gambling filtering.

Primary

94.130.180.225

Secondary

78.47.64.161

• No-log : no
• DNSSEC : yes
• Malware blocking : yes
• Ad blocking : yes
• Family filter : yes

Public DNS from Yandex, offered in Basic, Safe (malware/phishing), and Family (adult-content) modes.

Primary

77.88.8.8

Secondary

77.88.8.1

• No-log : no
• DNSSEC : no
• Malware blocking : no
• Ad blocking : no
• Family filter : no

Long-standing anycast resolvers in Level 3 (now Lumen) address space, widely used as 4.2.2.1–4.2.2.6 but never an official product.

Primary

4.2.2.1

Secondary

4.2.2.2

• No-log : no
• DNSSEC : no
• Malware blocking : no
• Ad blocking : no
• Family filter : no

Free recursive DNS formerly run as Verisign Public DNS (64.6.64.6), now operated by Vercara on the UltraDNS anycast network, in unfiltered, threat, and family tiers.

Primary

64.6.64.6

Secondary

64.6.65.6

• No-log : no
• DNSSEC : yes
• Malware blocking : no
• Ad blocking : no
• Family filter : no

A security-focused resolver that blocks known malware, phishing, and other malicious domains.

Primary

8.26.56.26

Secondary

8.20.247.20

• No-log : no
• DNSSEC : no
• Malware blocking : yes
• Ad blocking : no
• Family filter : no

A free anycast resolver from IPv6 backbone operator Hurricane Electric, with strong native IPv6 support.

Primary

74.82.42.42

• No-log : no
• DNSSEC : no
• Malware blocking : no
• Ad blocking : no
• Family filter : no

A free, uncensored German resolver focused on privacy, with DNSSEC and no query logging.

Primary

84.200.69.80

Secondary

84.200.70.40

• No-log : yes
• DNSSEC : yes
• Malware blocking : no
• Ad blocking : no
• Family filter : no

A free resolver run by Taiwan's domain registry TWNIC, with DNSSEC over plain DNS, DoT, and DoH.

Primary

101.101.101.101

Secondary

101.102.103.104

• No-log : yes
• DNSSEC : yes
• Malware blocking : no
• Ad blocking : no
• Family filter : no

A donation-funded German resolver that blocks ads, tracking, and malware by default, with DNSSEC.

Primary

176.9.93.198

Secondary

176.9.1.117

• No-log : yes
• DNSSEC : yes
• Malware blocking : yes
• Ad blocking : yes
• Family filter : no

An open, non-filtering resolver from France's oldest non-profit ISP association, with DNSSEC over plain DNS, DoT, and DoH.

Primary

80.67.169.12

Secondary

80.67.169.40

• No-log : yes
• DNSSEC : yes
• Malware blocking : no
• Ad blocking : no
• Family filter : no

A hobby-run ad-blocking resolver with servers in Germany and Singapore, offering DoH, DoT, DoQ, and DNSCrypt.

Primary

78.46.244.143

Secondary

46.250.226.242

• No-log : yes
• DNSSEC : yes
• Malware blocking : yes
• Ad blocking : yes
• Family filter : no

A privacy-first resolver that blocks ads, trackers, malware, and phishing, with DoH, DoT, DoQ, and DNSCrypt.

Primary

174.138.21.128

Secondary

188.166.206.224

• No-log : yes
• DNSSEC : yes
• Malware blocking : yes
• Ad blocking : yes
• Family filter : no

A non-profit, non-filtering privacy resolver from Freifunk München, with servers in Munich and Vienna.

Primary

5.1.66.255

Secondary

185.150.99.255

• No-log : yes
• DNSSEC : yes
• Malware blocking : no
• Ad blocking : no
• Family filter : no

An Indonesian family-safe resolver that blocks pornography, gambling, phishing, and malware.

Primary

180.131.144.144

Secondary

180.131.145.145

• No-log : no
• DNSSEC : no
• Malware blocking : yes
• Ad blocking : no
• Family filter : yes

A cloud DNS-filtering service whose free resolver blocks malicious domains, with configurable categories via an account.

Primary

195.46.39.39

Secondary

195.46.39.40

• No-log : no
• DNSSEC : no
• Malware blocking : yes
• Ad blocking : no
• Family filter : yes

A free anycast resolver from Gcore focused on fast resolution across its global edge network.

Primary

95.85.95.85

Secondary

2.56.220.2

• No-log : yes
• DNSSEC : no
• Malware blocking : no
• Ad blocking : no
• Family filter : no

CZ.NIC's Open DNSSEC Validating Resolvers — a free resolver run by the Czech national registry with DNSSEC and encrypted transport.

Primary

193.17.47.1

Secondary

185.43.135.1

• No-log : no
• DNSSEC : yes
• Malware blocking : no
• Ad blocking : no
• Family filter : no

A Kazakhstan-based DoH/DoT-only resolver that blocks ads, trackers, and malware using public threat feeds. Encrypted transport only — no plain-DNS IP.

DNS-over-HTTPS

https://ada.openbld.net/dns-query

DNS-over-TLS

ada.openbld.net

• No-log : no
• DNSSEC : yes
• Malware blocking : yes
• Ad blocking : yes
• Family filter : no

A free DoH/DoT beta resolver from Japanese ISP IIJ (offered through March 2027). Encrypted transport only — no plain-DNS IP.

DNS-over-HTTPS

https://public.dns.iij.jp/dns-query

DNS-over-TLS

public.dns.iij.jp

• No-log : yes
• DNSSEC : yes
• Malware blocking : no
• Ad blocking : no
• Family filter : no

A non-profit Austrian resolver offering DNS-over-HTTPS and DNS-over-TLS only — it deliberately does not run plain DNS.

DNS-over-HTTPS

https://doh.applied-privacy.net/query

DNS-over-TLS

dot1.applied-privacy.net

• No-log : yes
• DNSSEC : yes
• Malware blocking : no
• Ad blocking : no
• Family filter : no

An open-source, serverless DoH resolver on Cloudflare Workers. The bare endpoint resolves unfiltered; 190+ optional ad, malware, and family blocklists activate via a config. Encrypted transport only.

DNS-over-HTTPS

https://sky.rethinkdns.com/dns-query

• No-log : yes
• DNSSEC : no
• Malware blocking : no
• Ad blocking : no
• Family filter : no

A free Russian ad- and malware-blocking resolver offering plain DNS, DoH, DoT, and DoQ.

Primary

83.220.169.155

Secondary

212.109.195.93

• No-log : no
• DNSSEC : yes
• Malware blocking : yes
• Ad blocking : yes
• Family filter : no

An Italian content-filtering resolver for malware and family/content control. It only answers normally for public IPs first registered (free) in its Cloud Panel.

Primary

185.236.104.104

Secondary

185.236.105.105

• No-log : no
• DNSSEC : no
• Malware blocking : yes
• Ad blocking : no
• Family filter : yes