Public DNS resolvers

Public resolver from the AdGuard browser-extension team. Default endpoint blocks ads and trackers; the "Family Protection" variant adds adult-content filtering; an "Unfiltered" variant exists for the pure resolution case…

Primary 94.140.14.14 · Alt 94.140.15.15 · IPv6 2a10:50c0::ad1:ff

Alibaba Cloud's public resolver. The default high-performance resolver inside mainland China. Anycast within China; less well-distributed elsewhere. Supports DoH and DoT.…

Primary 223.5.5.5 · Alt 223.6.6.6 · IPv6 2400:3200::1

Cloudflare's flagship public resolver. Anycast across 300-plus PoPs. Audited by KPMG for the no-logging policy claim. The 1.1.1.2 / 1.1.1.3 variants add malware and adult-content blocking respectively.…

Primary 1.1.1.1 · Alt 1.0.0.1 · IPv6 2606:4700:4700::1111

Cloudflare's "1.1.1.2 for Families" variant. Same anycast network as 1.1.1.1 but with Cloudflare's malware threat list applied at the resolver. The 1.1.1.3 variant adds adult-content filtering on top.…

Primary 1.1.1.2 · Alt 1.0.0.2 · IPv6 2606:4700:4700::1112

Older malware-blocking resolver from Comodo. Anycast network; no DoH/DoT offered. The product has been deprioritised by Comodo over the years; suitable for legacy use rather than new deployments.…

Primary 8.26.56.26 · Alt 8.20.247.20

Built by the Windscribe VPN team. Profile-based filtering similar to NextDNS, with both free and paid tiers. Anycast PoPs in 100-plus locations. The "P1" through "P3" pre-configured profiles cover Ads, Ads+Malware, and A…

Primary 76.76.2.0 · Alt 76.76.10.0 · IPv6 2606:1a40::

Operated by xTom, a small German hosting / network provider. No-logging policy, DNSSEC validation, lightweight infrastructure across 14 PoPs. The right pick if you want a small, technically-correct, vendor-neutral resolv…

Primary 185.222.222.222 · Alt 45.11.45.11 · IPv6 2a09::

European-hosted, GDPR-aware public resolver. Three profiles (DNS0, Zero, Kids) for different filter levels. Backed by a non-profit; servers across European cities. The right pick when you want EU-jurisdiction infrastruct…

Primary 193.110.81.0 · Alt 185.253.5.0 · IPv6 2a0f:fc80::

The oldest large-scale public DNS resolver, launched in 2009. Anycast across Google's network. Logs queries for 24 to 48 hours (per the privacy notice); some metadata retained permanently. DNSSEC validation enabled by de…

Primary 8.8.8.8 · Alt 8.8.4.4 · IPv6 2001:4860:4860::8888

Community-run resolver operated by LibreOps, a small Greek non-profit. Ad-blocking by default. No anycast; single-location infrastructure with the trade-offs that brings. Useful when you want a non-commercial alternative…

Primary 116.202.176.26 · Alt 217.160.70.42

Public DNS from the Swedish VPN provider. Operated alongside the VPN service but available without a subscription. No logging by policy; their no-logging claim is supported by a published independent audit. Multiple them…

Primary 194.242.2.2 · Alt 194.242.2.3 · IPv6 2a07:e340::2

Configurable resolver where each user gets their own endpoint with personalised blocklists, allow-lists and logging policy. Free tier capped at 300K queries a month. Operated from France with anycast PoPs globally.…

Primary 45.90.28.0 · Alt 45.90.30.0

The oldest still-operating public DNS, launched in 2005. Acquired by Cisco in 2015 and now part of Cisco Umbrella. Family Shield variant (208.67.222.123) blocks adult content. The commercial Umbrella product layers categ…

Primary 208.67.222.222 · Alt 208.67.220.220 · IPv6 2620:119:35::35

Swiss non-profit operating a global anycast DNS resolver with threat intelligence from 18 partners (IBM, Abuse.ch, the Anti-Phishing Working Group, and others). DNSSEC validation by default; no logging of personal data p…

Primary 9.9.9.9 · Alt 149.112.112.112 · IPv6 2620:fe::fe

Verisign's public resolver. Backed by Verisign's commercial DNS infrastructure (the same operators run the .com and .net zones). No DoH or DoT support. DNSSEC validating. No logging beyond aggregate stats.…

Primary 64.6.64.6 · Alt 64.6.65.6 · IPv6 2620:74:1b::1:1

Russian search company's public resolver. Three tiers: Basic (no filtering), Safe (malware/phishing blocking), and Family (adult-content filtering). Anycast within Russia and CIS countries; performance outside that regio…

Primary 77.88.8.8 · Alt 77.88.8.1 · IPv6 2a02:6b8::feed:0ff