End-of-year DNSFilter Report: What We Learned From DNS Stats

As we ring in the new year, we wanted to take a look back at internet traffic over the last 365 days—along with all of the different discoveries we made.

Our DNS data helped us uncover a lot of interesting trends in 2021, and we spent the most time on crypto by far. Our CEO, Ken Carnesi, explored domains related to the Monero cryptocurrency and what that means for the future of crypto. We also did our best to declare a winner in the streaming wars, share every single need-to-know DNS stat, and explain why Facebook went down (and why it took so much of the internet with it).

We saw an unexplained rise in TikTok traffic, and we hypothesized that a new feature was responsible. Since our investigation, they’ve become the No. 1 most-trafficked site according to recent rankings.



That initial spike we saw in February is now nothing compared to the steady growth TikTok has seen on our network, particularly since September of this year. After traffic plummeted on Christmas Day, traffic skyrocketed to double its usual traffic between the 26th and 29th of December.

Could this be another influx in DNS queries related to an update? Or is that report correct, and this is the new normal. If we include the TikTok ecosystem domains associated with the app as a single domain, it would be the No. 1 domain on our network.

But doing that would be unfair to Microsoft, Apple, and the other top-placing sites that have an ecosystem all their own.

So what were the top sites on DNSFilter in 2021? And what did we block the most? Let’s find out.


The top domain of 2021 was Microsoft, followed closely by Apple, two different Akamai domains, and finally Amazon. It shouldn’t be too surprising that Microsoft is at the top of the list since it powers so much web infrastructure related to our working lives.

As for the most-blocked domains, the numbers aren’t all that different…


Microsoft is such a popular domain, plenty of our users block it. They also block ad-related domains like Doubleclick, social media sites like Facebook, government sites like Bldrdoc.gov, and shopping sites like Gv2.com.

These sites relate to our most-blocked categories (excluding threats):


IT, business, advertising, social networking, and media sharing topped the lists of categories our users wanted to block. Now as for threats…


It’s not that surprising that there are more proxy sites than there are phishing sites in 2021, so we wind up blocking more of them. Our users seem to be concerned with blocking the ability to bypass filtering (we can’t blame them) as well as privacy.

When you tall it all up from January through November 2021, this is how many threats we blocked:


In December alone, not included in the above numbers, we blocked nearly 50 million threats.

We expect more of the same in 2022. The threats will evolve, and we’ll be here to protect you from them.

Want a downloadable full threat report of 2021? Make sure to check it out the DNSFilter Domain Threat Report here!

Search
  • There are no suggestions because the search field is empty.
Latest posts
Risky Apps for Business: Top Malware and Phishing Threats Risky Apps for Business: Top Malware and Phishing Threats

Not all apps are created equal. Some introduce serious risks for phishing, malware, or data breaches, especially when they’re adopted by employees without IT approval. And while blocking a website at the domain can prevent unauthorized access on your network, many applications have hundreds or thousands of domains—simply blocking the main domain might not be enough to prevent access.

What DNS Needs To Be When It Grows Up: Protective What DNS Needs To Be When It Grows Up: Protective

DNS—short for Domain Name System—has quietly operated behind the scenes as the backbone of how devices find one another on the Internet. But as threats evolve, DNS is no longer just the plumbing: It has to become your first line of defense. That’s the core message from our recent webinar, What DNS Needs to Be When It Grows Up.

From Just Monitoring to Actionable Insights with SIEM and SOC From Just Monitoring to Actionable Insights with SIEM and SOC

You're facing two critical issues. First, your clients feel insecure due to lack of comprehensive visibility into their network environments. Second, your pitches for cybersecurity services often fall flat because they lack compelling, data-driven insights. These challenges are roadblocks but can be turned into opportunities with SIEM and SOC solutions.

Explore More Content

Ready to brush up on something new? We've got even more for you to discover.