I have enabled google, openDNS, quad9 & cloudflare as list of upstream DNS servers. I noticed majority of requests are forwarded to quad9 (see below). The first column is the count of requests went to that DNS server.
cat /var/log/pihole.log |grep forwarded|awk '{print $8;}'|sort|uniq -c
74 1.0.0.1
220 1.1.1.1
3839 149.112.112.112
760 208.67.220.220
689 208.67.222.222
74 8.8.4.4
889 8.8.8.8
3868 9.9.9.9
As you can see, over 7000+ went to quad9 while the rest had very few in comparison. Is there any specific logic pi-hole uses to choose which upstream DNS to use? Just curious.