| Provider | Primary IPv4 | Secondary IPv4 | IPv6 (example) | Country (HQ ISO) | Primary Region | Coverage Notes (countries/anycast) | DoH Endpoint (https URL) | DoT Hostname (port 853) | Status | Filtering | Logging/Privacy | Notes | Last Verified (UTC ISO8601) |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Google Public DNS | 8.8.8.8 | 8.8.4.4 | 2001:4860:4860::8888, 2001:4860:4860::8844 | US | Global | Anycast; POPs on all continents | https://dns.google/dns-query | dns.google | Active | None | See Google Public DNS privacy docs | DNSSEC; high performance | |
| Cloudflare DNS (Standard) | 1.1.1.1 | 1.0.0.1 | 2606:4700:4700::1111, 2606:4700:4700::1001 | US | Global | Anycast; broad worldwide footprint | https://cloudflare-dns.com/dns-query | 1dot1dot1dot1.cloudflare-dns.com | Active | None | Privacy-focused; minimal logs per policy | DoH/DoT; optional DoQ via apps | |
| Cloudflare DNS (Malware) | 1.1.1.2 | 1.0.0.2 | 2606:4700:4700::1112, 2606:4700:4700::1002 | US | Global | Anycast | https://security.cloudflare-dns.com/dns-query | security.cloudflare-dns.com | Active | Malware | Per Cloudflare policy | Blocks known malicious domains | |
| Cloudflare DNS (Family) | 1.1.1.3 | 1.0.0.3 | 2606:4700:4700::1113, 2606:4700:4700::1003 | US | Global | Anycast | https://family.cloudflare-dns.com/dns-query | family.cloudflare-dns.com | Active | Malware+Adult | Per Cloudflare policy | Family filter | |
| Quad9 (Secure) | 9.9.9.9 | 149.112.112.112 | 2620:fe::fe | CH | Global | Anycast clusters in many countries | https://dns.quad9.net/dns-query | dns.quad9.net | Active | Malware/Phishing | Non-profit; privacy-focused | Swiss foundation; DNSSEC validation | |
| OpenDNS Home | 208.67.222.222 | 208.67.220.220 | 2620:119:35::35, 2620:119:53::53 | US | Global | Anycast via Cisco Umbrella network | Active | Optional (acct) | See OpenDNS/Umbrella privacy | Consumer OpenDNS; encrypted via Umbrella | |||
| OpenDNS FamilyShield | 208.67.222.123 | 208.67.220.123 | US | Global | Anycast via Cisco Umbrella network | Active | Adult | See OpenDNS/Umbrella privacy | Preconfigured adult-content blocking | ||||
| CleanBrowsing (Family) | 185.228.168.168 | 185.228.169.168 | US | Global | Anycast; multiple profiles | https://doh.cleanbrowsing.org/doh/family-filter | family-filter-dns.cleanbrowsing.org | Active | Adult+Some malware | Provider: no IP logs for DoH/DoT | Family filter | ||
| CleanBrowsing (Adult Filter) | 185.228.168.10 | 185.228.169.11 | US | Global | Anycast | https://doh.cleanbrowsing.org/doh/adult-filter | adult-filter-dns.cleanbrowsing.org | Active | Adult | Provider policy | Blocks adult domains | ||
| CleanBrowsing (Security) | 185.228.168.9 | 185.228.169.9 | US | Global | Anycast | https://doh.cleanbrowsing.org/doh/security-filter | security-filter-dns.cleanbrowsing.org | Active | Malware/Phishing | Provider policy | Security-focused blocking | ||
| AdGuard DNS (Default) | 94.140.14.14 | 94.140.15.15 | 2a10:50c0::ad1:ff, 2a10:50c0::ad2:ff | CY | Global | Anycast | https://dns.adguard-dns.com/dns-query | dns.adguard-dns.com | Active | Ads/Tracking/Malware | Per AdGuard policy | Also supports DoQ | |
| AdGuard DNS (Family) | 94.140.14.15 | 94.140.15.16 | 2a10:50c0::bad1:ff, 2a10:50c0::bad2:ff | CY | Global | Anycast | https://family.adguard-dns.com/dns-query | family.adguard-dns.com | Active | Adult + Ads/Tracking | Per AdGuard policy | Family filter | |
| AdGuard DNS (Non-filtering) | 94.140.14.140 | 94.140.14.141 | CY | Global | Anycast | https://unfiltered.adguard-dns.com/dns-query | unfiltered.adguard-dns.com | Active | None | Per AdGuard policy | Neutral resolver | ||
| ControlD (Free - Unfiltered) | 76.76.2.11 | 76.76.10.11 | 2606:1a40::11, 2606:1a40:1::11 | CA | Global | Anycast | https://freedns.controld.com/dns-query | dot.freedns.controld.com | Active | Configurable (paid) | Provider policy | Free unfiltered endpoints | |
| Vercara UltraDNS Public | 156.154.70.1 | 156.154.71.1 | 2610:a1:1018::1, 2610:a1:1019::1 | US | Global | Anycast on UltraDNS network | Active | None | Provider policy | Public resolvers from UltraDNS | |||
| Gcore Public DNS | 95.85.95.85 | 2.56.220.2 | 2a03:90c0:999d::1, 2a03:90c0:9992::1 | LU | Global | Anycast; strong EU/US coverage | Active | None | Provider policy | Edge network with many POPs | |||
| Hurricane Electric (ordns.he.net) | 74.82.42.42 | 2001:470:20::2 | US | Global | Anycast; strong IPv6 presence | Active | None | Unknown | General-purpose resolver | ||||
| Yandex.DNS (Standard) | 77.88.8.8 | 77.88.8.1 | 2a02:6b8::feed:0ff | RU | Russia/CIS | Anycast within region; some global POPs | Active | None | Subject to regional policy | Unfiltered | |||
| Yandex.DNS (Secure) | 77.88.8.88 | 77.88.8.2 | 2a02:6b8::feed:bad | RU | Russia/CIS | Anycast within region | Active | Malware | Subject to regional policy | Security filter | |||
| Yandex.DNS (Family) | 77.88.8.7 | 77.88.8.3 | 2a02:6b8:0:1::feed:bad | RU | Russia/CIS | Anycast within region | Active | Adult | Subject to regional policy | Family filter | |||
| AliDNS (Alibaba) | 223.5.5.5 | 223.6.6.6 | 2400:3200::1, 2400:3200:baba::1 | CN | Asia (Global Anycast) | China nationwide; global POPs | https://dns.alidns.com/dns-query | dns.alidns.com | Active | None | Provider policy | HTTPDNS also available | |
| 114DNS (China) | 114.114.114.114 | 114.114.115.115 | CN | China | Nationwide anycast | Active | Unknown | Unknown | Widely used in mainland China | ||||
| Baidu Public DNS | 180.76.76.76 | CN | China | Anycast within CN | Active | Unknown | Unknown | Operated by Baidu | |||||
| Quad101 (TWNIC/Taiwan) | 101.101.101.101 | 101.102.103.104 | 2001:de4::101, 2001:de4::102 | TW | Asia | Anycast with global presence | Active | None | Privacy-centric mission | Run by TWNIC | |||
| DNS.Watch | 84.200.69.80 | 84.200.70.40 | DE | Europe (Global) | Anycast; Germany-based | Active | None | No logging (per policy) | Neutral resolver | ||||
| UncensoredDNS (Censurfridns) | 91.239.100.100 | 89.233.43.71 | DK | Europe (Global) | Anycast/single-homed mix | https://unicast.censurfridns.dk/dns-query | Active | None | No logging (per policy) | Operated by Thomas R. | |||
| Digitale Gesellschaft (CH) | 185.95.218.42 | 185.95.218.43 | 2a05:fc84::42, 2a05:fc84::43 | CH | Europe | Switzerland; privacy NGO | https://dns.digitale-gesellschaft.ch/dns-query | dns.digitale-gesellschaft.ch | Active | None | Privacy-first | DNSSEC-validating resolvers | |
| Foundation for Applied Privacy (AT) | AT | Europe | Austria; privacy org | https://doh.applied-privacy.net/query | dot1.applied-privacy.net | Active | None | Privacy-first | DoH/DoT endpoints only | ||||
| FDN (French Data Network) | 80.67.169.40 | 80.67.169.12 | 2001:910:800::40, 2001:910:800::12 | FR | Europe | France; community ISP/NGO | Active | None | Per FDN policy | Neutral resolver | |||
| Mullvad DNS | 194.242.2.2 | 2a07:a8c0:: | SE | Global (EU-based) | Anycast and regional ingress | https://doh.mullvad.net/dns-query | dot.mullvad.net | Active | None | No activity logs (per policy) | Works best with Mullvad apps/WG | ||
| DNS.SB (public-a) | 185.222.222.222 | 2a09:: | SC | Global | Anycast | https://doh.dns.sb/dns-query | Active | None | No logging (per policy) | DNSSEC validation | |||
| DNS.SB (public-b) | 45.11.45.11 | 2a11:: | SC | Global | Anycast | https://doh.dns.sb/dns-query | Active | None | No logging (per policy) | DNSSEC validation | |||
| Comodo Secure DNS | 8.26.56.26 | 8.20.247.20 | US | Global | Anycast | Active | Security | Provider policy | Security-focused filtering | ||||
| CIRA Canadian Shield (Private) | 149.112.121.10 | 149.112.122.10 | 2620:10A:80BB::10, 2620:10A:80BC::10 | CA | Canada (Global Anycast) | Anycast with Canadian focus | https://private.canadianshield.cira.ca/dns-query | private.canadianshield.cira.ca | Active | None | Privacy-first | Also has Protected and Family profiles | |
| CIRA Canadian Shield (Protected) | 149.112.121.20 | 149.112.122.20 | 2620:10A:80BB::20, 2620:10A:80BC::20 | CA | Canada | Anycast with Canadian focus | https://protected.canadianshield.cira.ca/dns-query | protected.canadianshield.cira.ca | Active | Malware | Privacy-first | Malware blocking | |
| CIRA Canadian Shield (Family) | 149.112.121.30 | 149.112.122.30 | 2620:10A:80BB::30, 2620:10A:80BC::30 | CA | Canada | Anycast with Canadian focus | https://family.canadianshield.cira.ca/dns-query | family.canadianshield.cira.ca | Active | Malware+Adult | Privacy-first | Family filter | |
| DNSPod (Tencent) | 119.29.29.29 | CN | Asia | China nationwide; some global POPs | Active | None | Provider policy | Public recursive resolver | |||||
| Verisign Public DNS (retired) | 64.6.64.6 | 64.6.65.6 | 2620:74:1b::1:1, 2620:74:1c::2:2 | US | Global | Anycast (service retired) | Discontinued | None | Retired Oct 2025 | Historical reference only | |||
| Norton ConnectSafe (retired) | 199.85.126.10 | 199.85.127.10 | US | Global | Anycast (service retired) | Discontinued | Malware/Adult (legacy) | Retired | Historical reference only | ||||
| Level3/CenturyLink (legacy) | 4.2.2.1 | 4.2.2.2 | US | Global/US | Legacy public resolvers; may still answer | Legacy/Unmanaged | None | Unclear policy | Use with caution; not officially public now | ||||
| Freenom World (uncertain) | 80.80.80.80 | 80.80.81.81 | NL | Global/Europe | Service status uncertain | Uncertain | None | Unclear status | Verify before use |
This dataset is intended for educational, research, and network diagnostic use only.
It lists publicly accessible DNS resolvers gathered from verified sources, vendor documentation, and community-maintained lists. It is not a guarantee of performance, uptime, or privacy.
Many resolvers listed are anycast — a single IP served from multiple global points of presence.
The “region” and “country” columns reflect the provider’s headquarters or registered ASN, not the physical server location.
Actual response latency and jurisdiction may vary depending on your location and routing policy.
Encryption: Some resolvers support DNS over HTTPS (DoH), DNS over TLS (DoT), or DNS over QUIC (DoQ). Where these are listed, endpoints were verified from public documentation.
Privacy: Inclusion in this list does not mean a provider offers private or anonymous service. Review each provider’s published privacy policy before using in production or compliance-bound environments (HIPAA, PCI, CJIS, etc.).
Logging: Some providers log query metadata for debugging, analytics, or abuse prevention.
Verification: Always confirm endpoints directly from the official provider documentation or security whitepaper.
Filtered resolvers (e.g., Family, Security, or Malware variants) intentionally block certain domains.
This may break SaaS applications, update services, or authentication flows. Test critical systems before deployment.
Legacy or retired services (e.g., Verisign Public DNS, Norton ConnectSafe, Level3) are included for historical awareness only and should not be used in production.
ISP or national resolvers (e.g., 114DNS, AliDNS) may enforce regional filtering based on local law.
Each entry includes a Last Verified (UTC ISO8601) column.
To maintain your own copy:
Run automated reachability checks (dig @IP example.com +short) on UDP/53 and TCP/53.
For encrypted endpoints, test with curl (DoH) or openssl s_client (DoT).
Replace or flag any non-responsive resolvers.
Update timestamps after each verification run.
It’s recommended to revalidate at least once every 90 days or before major DNS changes.
This dataset is provided “as-is” without warranty of any kind, express or implied.
Neither the compiler nor hosting site is responsible for misuse, damage, or data interception resulting from using these endpoints.
Always comply with local regulations and network security policies before routing DNS through external resolvers.
If you’re building tutorials, lab guides, or plugin defaults:
Use Quad9 (9.9.9.9) or Cloudflare (1.1.1.1) for neutral, privacy-conscious global coverage.
For filtering: AdGuard Family or CleanBrowsing Family.
For privacy-first research setups: Mullvad DNS, Applied Privacy, or Digitale Gesellschaft.