DNS Privacy in China
Server security and DNSSEC adoption overview for public DNS servers in China.
Updated March 26, 2026 · Based on live monitoring data
DNS Security Statistics for China
DNSSEC (Domain Name System Security Extensions) adds cryptographic signatures to DNS records, preventing attackers from redirecting your traffic through DNS spoofing. A higher adoption rate means better protection for users in China.
Low adoption. Most DNS servers in China do not validate DNSSEC. We strongly recommend using a DNSSEC-capable provider like Cloudflare, Google, or Quad9.
Check Your DNS Privacy
Are your DNS queries encrypted? Is your DNS provider validating DNSSEC? Run a free privacy audit from China.
Run DNS Privacy CheckDNS Servers in China — Security Overview
| IP Address | Provider | Reliability | DNSSEC | Status | |
|---|---|---|---|---|---|
154.86.156.61
|
Enjoyvc Cloud Group Limited. | 82% | Yes | OK | |
223.5.5.123
|
Hangzhou Alibaba Advertising Co.,Ltd. | 100% | No | OK | |
223.5.5.124
|
Hangzhou Alibaba Advertising Co.,Ltd. | 100% | No | OK | |
223.5.5.129
|
Hangzhou Alibaba Advertising Co.,Ltd. | 100% | No | OK | |
223.5.5.0
|
Hangzhou Alibaba Advertising Co.,Ltd. | 100% | No | OK | |
223.5.5.110
|
Hangzhou Alibaba Advertising Co.,Ltd. | 100% | No | OK | |
223.5.5.111
|
Hangzhou Alibaba Advertising Co.,Ltd. | 100% | No | OK | |
223.5.5.112
|
Hangzhou Alibaba Advertising Co.,Ltd. | 100% | No | OK | |
223.6.6.6
|
Hangzhou Alibaba Advertising Co.,Ltd. | 100% | No | OK | |
223.6.6.68
|
Hangzhou Alibaba Advertising Co.,Ltd. | 100% | No | OK |
Recommended Private DNS for China
These providers offer the strongest privacy protections and work well from China:
More for China
Frequently Asked Questions
How many DNS servers in China support DNSSEC?
Out of 115 monitored DNS servers in China, 1 (0.9%) validate DNSSEC. DNSSEC prevents DNS spoofing attacks by cryptographically signing DNS records.
Is my DNS private in China?
Standard DNS queries in China are unencrypted and visible to your ISP. To protect your DNS privacy, use a provider that supports DNS-over-HTTPS (DoH) or DNS-over-TLS (DoT), such as Cloudflare, Quad9, or Mullvad DNS.
Which private DNS should I use in China?
For maximum privacy in China, use Mullvad DNS (no logging), Quad9 (no personal data logged), or Cloudflare (logs purged within 24h). All three support encrypted DNS and have global anycast networks for low latency.
Can my ISP in China see my DNS queries?
Yes, if you use standard unencrypted DNS. Your ISP can see every domain you visit. Switching to encrypted DNS (DoH/DoT) prevents this. Configure it at the system or router level for full protection.