Public DNS server

Discussion in 'malware problems & news' started by yohannn, Jun 6, 2013.

Thread Status:
Not open for further replies.
  1. yohannn

    yohannn Registered Member

    Joined:
    Jun 6, 2013
    Posts:
    1
    Location:
    moscow
    Hello Guys ,
    I am looking for list of Public DNS server which like powerful one and I find a list like that :
    (powerful means that I like to have DNS server which should be fast ,reliable ,high speed and always available)
    but I want more, anybody has idea how can I find more?


    4.2.2.4
    216.52.65.1
    216.83.236.227
    216.54.2.10
    216.250.190.144
    79.143.176.79
    216.215.19.4
    216.211.191.9
    8.8.8.8
    216.211.191.3
    64.136.173.5
    64.136.164.77
    64.135.2.250
    37.143.9.90
    68.87.85.102
    68.87.78.134
    85.38.28.86
    85.38.28.84
    91.218.228.249
    91.186.192.3
    91.185.6.10
    91.185.2.10


    I am looking forward to hearing from you guys

    Thank you so much

    Yohann
     
    Last edited: Jun 11, 2013
  2. subhrobhandari

    subhrobhandari Registered Member

    Joined:
    Nov 6, 2009
    Posts:
    708
  3. xxJackxx

    xxJackxx Registered Member

    Joined:
    Oct 23, 2008
    Posts:
    4,050
    Location:
    USA
    I was of the understanding that the 4.2.2.1-6 servers weren't meant to be public anymore. They certainly aren't reliable anymore if they are.
     
  4. TairikuOkami

    TairikuOkami Registered Member

    Joined:
    Oct 10, 2005
    Posts:
    2,509
    Location:
    Slovakia
    Try FoolDNS. To me, it is #1, actually it is #1 in DNS benchmark in my location (middle Europe), so it might work well for you. :)
     
    Last edited: Jun 11, 2013
  5. HAN

    HAN Registered Member

    Joined:
    Feb 24, 2005
    Posts:
    2,080
    Location:
    USA
    Here is a list I have of DNS servers to make use of. Some are "safer". By safer, they did some filtering to help malware from being spread.

    *********NOTE********
    This list is around 2 years old or so. Some of them may no longer be active/in use.

    ScrubIT
    67.138.54.100
    207.225.209.66

    DYN DNS
    216.146.35.35 resolver1.dyndnsinternetguide.com
    216.146.36.36 resolver2.dyndnsinternetguide.com

    Comodo Secure DNS
    8.26.56.26
    8.20.247.20

    Sunbelt Clear Cloud
    74.118.212.1

    Visizone:
    74.50.55.161
    74.50.55.162

    Norton DNS:
    198.153.192.1
    198.153.194.1

    Norton ConnectSafe
    Security
    198.153.192.40
    198.153.194.40

    Norton ConnectSafe
    Security + Pornography
    198.153.192.50
    198.153.194.50

    Norton ConnectSafe
    Security + Pornography + Non-Family Friendly
    198.153.192.60
    198.153.194.60

    If you think that something might be wrong with ConnectSafe, first check here:
    http://status.nortondns.com

    Google:
    8.8.8.8
    8.8.4.4
    Google Public DNS telephone support
    877-590-4367 in the U.S.
    770-200-1201 outside the U.S.

    SpeakEasy.net:
    dns.sfo1.speakeasy.net [64.81.79.2]
    dns.sea1.speakeasy.net [66.93.87.2]
    dns.nyc1.speakeasy.net [216.254.95.2]
    dns.wdc1.speakeasy.net [66.92.159.2]
    dns.atl1.speakeasy.net [216.27.175.2]
    dns.chi1.speakeasy.net [64.81.159.2]
    dns.lax1.speakeasy.net [64.81.45.2]

    Level3:
    4.2.2.1
    4.2.2.2
    4.2.2.3
    4.2.2.4
    4.2.2.5
    4.2.2.6

    AT&T:
    68.94.156.1
    68.94.157.1

    Sprint:
    ns1.sprintlink.net [204.117.214.10]
    ns2.sprintlink.net [199.2.252.10]
    ns3.sprintlink.net [204.97.212.10]

    OpenDNS:
    208.67.222.222
    208.67.220.220

    OpenDNS (Family Shield):
    208.67.222.123
    208.67.220.123

    ThePlanet:
    ns1.theplanet.com - 216.234.234.30
    ns2.theplanet.com - 12.96.160.115

    LayeredTech:
    ns1.layeredtech.com - 216.39.90.2
    ns2.layeredtech.com - 216.39.90.3
    ns3.layeredtech.com - 72.36.190.2
    ns4.layeredtech.com - 72.36.191.2

    DNS Advantage:
    156.154.70.1 rdns1.ultradns.net
    156.154.71.1 rdns2.ultradns.net
     
    Last edited: Jun 13, 2013
  6. HAN

    HAN Registered Member

    Joined:
    Feb 24, 2005
    Posts:
    2,080
    Location:
    USA
  7. agoretsky

    agoretsky Eset Staff Account

    Joined:
    Apr 4, 2006
    Posts:
    4,032
    Location:
    California
    Hello,

    From doing a search, I see that Yohann has posted his message to over 100 different forums.

    I decided to take a closer look at Yohann's list, and resolve the IP addresses he gave for the DNS servers to their hostnames.

    Here's what I found:

    • 10 of the IP addresses resolve to what do not appear to be nameservers operated by an ISP, are hosted in a country with a high degree of cybercrime, or in an embargoed country (colored in red),
    • 4 of the IP addresses resolve to name servers that appear to be for regional use by an ISP, or have very low bandwidth outside their country (colored in orange)
    • 8 of the IP addresses appear to be large providers (colored in green)
    Here are the specifics:

    Code:
    [/FONT][U][I][FONT=Courier New]IP address[/FONT][/I][/U][FONT=Courier New][FONT=Courier New]      [U][I]resolves to[/I][/U][/FONT][/FONT]
    [FONT=Courier New]216.211.191.3   [COLOR=Red]213.211.191.3.dyn.edpnet.net[/COLOR]
    216.211.191.9   [COLOR=Red]213.211.191.9.dyn.edpnet.net[/COLOR]
    216.215.19.4    [COLOR=Green]ns2.aspeedynet.net[/COLOR]
    216.250.190.144 [COLOR=Green]cachedns-1.iphouse.net[/COLOR]
    216.52.65.1     [COLOR=Green]ns1.phi.pnap.net[/COLOR]
    216.54.2.10     [COLOR=Green]ns1.coxfiber.net[/COLOR]
    216.83.236.227  [COLOR=Green]ns1.networktel.net[/COLOR]
    37.143.9.90     [COLOR=Red]hosted-by.ihc.ru[/COLOR]
    4.2.2.4         [COLOR=Green]d.resolvers.level3.net[/COLOR]
    64.135.2.250    [COLOR=Green]ns2.host.net[/COLOR]
    64.136.164.77   [COLOR=Red]node77.164.136.64.1dial.com[/COLOR]
    64.136.173.5    [COLOR=Red]node5.173.136.64.1dial.com[/COLOR]
    68.87.78.134    [COLOR=DarkOrange]cns.saltlakecity.ut.utah.comcast.net[/COLOR][/FONT] [FONT=Courier New][FONT=Courier New][COLOR=DarkOrange][FONT=Courier New][COLOR=Red][COLOR=Black][I](regional nameserver for national ISP)
    [/I][/COLOR][/COLOR][/FONT][/COLOR][/FONT]68.87.85.102    [COLOR=DarkOrange]cns.cmc.co.denver.comcast.net [/COLOR][/FONT][FONT=Courier New][FONT=Courier New][COLOR=DarkOrange][FONT=Courier New][COLOR=Red][COLOR=Black][I](regional nameserver for national ISP)
    [/I][/COLOR][/COLOR][/FONT][/COLOR][/FONT]79.143.176.79   [COLOR=Red]ip-79-176-143-79.static.contabo.net[/COLOR]
    8.8.8.8         [COLOR=Green]google-public-dns-a.google.com[/COLOR]
    85.38.28.84     [COLOR=Red]host84-28-static.38-85-b.business.telecomitalia.it[/COLOR]
    85.38.28.86     [COLOR=Red]host86-28-static.38-85-b.business.telecomitalia.it[/COLOR]
    91.185.2.10     [COLOR=DarkOrange]ns2.ttc.kz [/COLOR][/FONT][FONT=Courier New][COLOR=DarkOrange][FONT=Courier New][COLOR=Red][COLOR=Black][I](appears to be a nameserver in Kazakhstan)[/I][/COLOR][/COLOR][/FONT][/COLOR]
    91.185.6.10     [COLOR=DarkOrange]ns.ttc.kz [/COLOR][/FONT][FONT=Courier New][COLOR=DarkOrange][FONT=Courier New][COLOR=Red][COLOR=Black][I](appears to be a nameserver in [/I][/COLOR][/COLOR][/FONT][/COLOR][/FONT][FONT=Courier New][COLOR=DarkOrange][FONT=Courier New][COLOR=Red][COLOR=Black][I][FONT=Courier New][COLOR=DarkOrange][FONT=Courier New][COLOR=Red][COLOR=Black][I]Kazakhstan[/I][/COLOR][/COLOR][/FONT][/COLOR][/FONT])[/I][/COLOR][/COLOR][/FONT][/COLOR]
    91.186.192.3    [COLOR=Red]ns.oracle.ir[COLOR=Black] [I](appears to be a nameserver in Iran)[/I][/COLOR][/COLOR]
    91.218.228.249  [COLOR=Red]www.templois.com[/COLOR][/FONT]
    I would recommend avoiding the red and orange colored entries, and only making use of the green entries if you are having a problem with your current Internet provider's DNS servers.

    Regards,

    Aryeh Goretsky
     
  8. HAN

    HAN Registered Member

    Joined:
    Feb 24, 2005
    Posts:
    2,080
    Location:
    USA
    Interesting detective work! Nice job!

    Clearly something is odd. If nothing else, I guess the lesson here is to be careful when you choose a DNS server other than the one your ISP sets for you.
     
  9. Lordman

    Lordman Registered Member

    Joined:
    Mar 12, 2006
    Posts:
    67
    Location:
    Spain
    One doubt, are there any relation between Norton DNS and DynDNS?.

    I do Gibson spofability test (using norton dns servers) and i receive a report that include DynDNS servers.

    https://www.grc.com/dns/dns.htm
     
  10. HAN

    HAN Registered Member

    Joined:
    Feb 24, 2005
    Posts:
    2,080
    Location:
    USA
    I don't know if there is a relationship.

    I have Google and Level 3 set up for the servers at work and they all test as Level 3 for the link you posted from GRC.com. And the tested IP adresses are different than what I listed in our server. So I am not sure how Gibson's test is really being performed...
     
  11. MyBlackBox

    MyBlackBox Registered Member

    Joined:
    Jun 28, 2013
    Posts:
    35
    Location:
    Italy
    Find it interesting, their policy is very strict.
     
Loading...
Thread Status:
Not open for further replies.