8.8.8.8: Google Public DNS, owner and location

8.8.8.8 is Google Public DNS, a free resolver on Google's network AS15169. Its other addresses, encrypted DNS, logging and how to check you use it.

8.8.8.8 is one of the two IPv4 addresses of Google Public DNS, a free recursive DNS resolver that anyone can use instead of their internet provider's. Google runs it on its own network, AS15169, and its reverse DNS name is dns.google.

Addresses

Google says either address can be the primary or the secondary; set both, not the same one twice. All four come from Google's own address space and are announced by AS15169.

Encrypted DNS

• DNS over HTTPS: https://dns.google/dns-query (RFC 8484), and a JSON API at https://dns.google/resolve (Google's DoH page)
• DNS over TLS: the name dns.google on port 853 (Google's DoT page)

The JSON API answers a plain HTTPS request, which makes it a quick way to resolve a name without a DNS tool:

curl -s "https://dns.google/resolve?name=host.sh&type=A"

Where is 8.8.8.8?

Everywhere Google runs a DNS site. 8.8.8.8 is an anycast address: many Google servers around the world announce it, and anycast routing takes your query to what Google's FAQ calls the closest one. Closest in network terms, which is usually but not always near you. So "8.8.8.8 location" has no single answer: an IP location lookup gives one place for the address, but your queries are answered by a Google site that routing picks for your network.

You can see which site answers you. Google's troubleshooting page documents an NSID query whose answer names the site by an airport code, for example gpdns-mad, Madrid (host.sh's own test from Lisbon, 28 October 2026):

dig @8.8.8.8 +nsid test.dns.google.com TXT

The same query checks that you reach Google Public DNS at all: the TXT answer is "Thanks for using Google Public DNS." Google notes that the NSID value may change without notice.

What Google logs

From Google Public DNS privacy:

• Temporary logs keep the querying IP address with the query and are deleted within 24 to 48 hours. Google may keep information from them longer, but only to deal with security and abuse issues.
• Permanent logs are a sample in which the IP address is replaced by a city or region-level location.

Filtering and DNSSEC

Google Public DNS does not block or filter domains, except for rare security or legal cases, in which it gives no answer instead of a modified one (FAQ). It validates DNSSEC.

Look up 8.8.8.8 with the host.sh API

The API's lookup of 8.8.8.8, like that of any address, returns its network (connection.isp), reverse DNS (connection.hostname, with hostname=1) and location fields. Looking up an address other than your own needs a token:

curl -H "Authorization: Bearer YOUR_TOKEN" "https://api.host.sh/v2/lookup/8.8.8.8?hostname=1"

See Lookup and Response fields. For your own address, open the IP lookup or run curl host.sh.

FAQ

Who owns 8.8.8.8?

Google. 8.8.8.8 is Google Public DNS, announced by Google's network AS15169, with the reverse DNS name dns.google.

Is 8.8.8.8 safe to use as my DNS server?

It is a large public resolver run by Google that validates DNSSEC and keeps your IP address only in temporary logs, deleted within 24 to 48 hours unless needed longer for a security or abuse issue. It does not block malware or ads; for that, use a filtering resolver.

What is the difference between 8.8.8.8 and 8.8.4.4?

None for the user: both are Google Public DNS and either can be primary or secondary. Setting both gives a fallback if one does not answer.

Why does an IP lookup show one location for 8.8.8.8?

8.8.8.8 is anycast: the same address is announced from many places. A lookup can only give one location for the address, but your queries go to the Google site that routing picks for your network, which a dig query with +nsid names.

What is the IPv6 address of Google DNS?

2001:4860:4860::8888 and 2001:4860:4860::8844.

This page as Markdown: /ip/8.8.8.8/index.md