End-of-year DNSFilter Report: What We Learned From DNS Stats

As we ring in the new year, we wanted to take a look back at internet traffic over the last 365 days—along with all of the different discoveries we made.

Our DNS data helped us uncover a lot of interesting trends in 2021, and we spent the most time on crypto by far. Our CEO, Ken Carnesi, explored domains related to the Monero cryptocurrency and what that means for the future of crypto. We also did our best to declare a winner in the streaming wars, share every single need-to-know DNS stat, and explain why Facebook went down (and why it took so much of the internet with it).

We saw an unexplained rise in TikTok traffic, and we hypothesized that a new feature was responsible. Since our investigation, they’ve become the No. 1 most-trafficked site according to recent rankings.



That initial spike we saw in February is now nothing compared to the steady growth TikTok has seen on our network, particularly since September of this year. After traffic plummeted on Christmas Day, traffic skyrocketed to double its usual traffic between the 26th and 29th of December.

Could this be another influx in DNS queries related to an update? Or is that report correct, and this is the new normal. If we include the TikTok ecosystem domains associated with the app as a single domain, it would be the No. 1 domain on our network.

But doing that would be unfair to Microsoft, Apple, and the other top-placing sites that have an ecosystem all their own.

So what were the top sites on DNSFilter in 2021? And what did we block the most? Let’s find out.


The top domain of 2021 was Microsoft, followed closely by Apple, two different Akamai domains, and finally Amazon. It shouldn’t be too surprising that Microsoft is at the top of the list since it powers so much web infrastructure related to our working lives.

As for the most-blocked domains, the numbers aren’t all that different…


Microsoft is such a popular domain, plenty of our users block it. They also block ad-related domains like Doubleclick, social media sites like Facebook, government sites like Bldrdoc.gov, and shopping sites like Gv2.com.

These sites relate to our most-blocked categories (excluding threats):


IT, business, advertising, social networking, and media sharing topped the lists of categories our users wanted to block. Now as for threats…


It’s not that surprising that there are more proxy sites than there are phishing sites in 2021, so we wind up blocking more of them. Our users seem to be concerned with blocking the ability to bypass filtering (we can’t blame them) as well as privacy.

When you tall it all up from January through November 2021, this is how many threats we blocked:


In December alone, not included in the above numbers, we blocked nearly 50 million threats.

We expect more of the same in 2022. The threats will evolve, and we’ll be here to protect you from them.

Want a downloadable full threat report of 2021? Make sure to check it out the DNSFilter Domain Threat Report here!

Search
  • There are no suggestions because the search field is empty.
Latest posts
Smarter DNS Policies: What You Should Be Blocking (But Probably Aren’t) Smarter DNS Policies: What You Should Be Blocking (But Probably Aren’t)

DNS filtering is a foundational layer of defense and helps to fortify the strongest security stacks. Most organizations use DNSFilter to block the obvious: malware, phishing, and adult content. That’s a great start, but many are missing out on the broader potential of DNS policies.

Educating Your Clients on the Sophistication of Phishing Attacks Educating Your Clients on the Sophistication of Phishing Attacks

Imagine losing $31,583 every minute. That’s how much cybercrime cost American businesses in 2024, according to the FBI’s Internet Crime Complaint Center. Phishing was one of the top threats behind that number. If you're still thinking phishing is just about misspelled emails from a Nigerian prince, you're dangerously underestimating today’s threat.

IAM Userless: Streamline AWS Access & Reduce the Attack Surface IAM Userless: Streamline AWS Access & Reduce the Attack Surface

Security and scalability are paramount in modern cloud architectures. Amazon Web Services (AWS) Identity and Access Management is a critical tool that helps you manage users, permissions, and access control across AWS services. While Identity and Access Management (IAM) users have traditionally been the go-to approach for granting access to resources, there are significant advantages to moving to IAM roles.

Explore More Content

Ready to brush up on something new? We've got even more for you to discover.