Nokia Deepfield global analysis shows most DDoS attacks originate from fewer than 50 hosting companies
Press Release
Nokia Deepfield global analysis shows most DDoS attacks originate from fewer than 50 hosting companies
In-depth analysis across large sample of networks globally fingerprints and traces origins of most DDoS attacks (by frequency and traffic volume); finds that majority of DDoS attacks originate from fewer than 50 hosting companies and regional providers
Nokia Deepfield shares strategies for fingerprinting and tracing primary DDoS sources; makes recommendations for addressing DDoS security with networking community
Analysis shows more than 100% increase in daily DDoS peak traffic between January 2020 and May 2021
Identifies the threat potential for possible DDoS attacks over 10 Tbps - four to five times the scale of largest attacks reported so far (just above 2 Tbps) - due to rapidly growing number of open and insecure internet services and IoT devices
Delivers Nokia Deepfield Defender, specifically designed to safely, securely and efficiently orchestrate DDoS mitigation across multiple vendors, including next-generation IP routers such as the Nokia FP-based Service Routers enabling low-latency, high-scale, deterministic protection
14 June 2021
Espoo, Finland - Nokia Deepfield today announced the results of its global DDoS traffic analysis, which examined service provider network traffic encompassing thousands of routers on the internet between January 2020 and May 2021. Among the findings, which were presented by Dr. Craig Labovitz, Nokia Deepfield CTO, at NANOG82: more than 100% increase in daily DDoS peak traffic in this time period; newly identified DDoS threat potential over 10 Tbps - four to five times higher than the largest current attacks reported - due to rapidly growing number of open and insecure internet services and IoT devices.
In an environment where attackers constantly leverage opportunistic resources to source their attacks, Nokia Deepfield found in the past 15 months accessibility of DDoS for hire services has increased the threat potential of the existing botnet, IoT and cloud-based attack models. The results trace the origins of most of the high-bandwidth, high-intensity (volumetric) attacks to a limited number of internet domains, finding that most global DDoS attacks (by frequency and traffic volume) originate in less than 50 hosting companies and regional providers.
As COVID lockdown measures were implemented in 2020, Nokia Deepfield noticed a 40-50% increase in DDoS traffic. The continued increases in intensity, frequency and sophistication of DDoS attacks have resulted in a 100% increase in the high watermark levels of DDoS daily peaks - from 1.5 Tbps (January 2020) to over 3 Tbps (May 2021).
With broadband connectivity becoming an essential service, the fight against DDoS is critical. These large-scale DDoS attacks can inflict major damage on individual and large-scale connectivity and service availability, resulting in damages costing hundreds of thousands or even millions of dollars in production and operational losses.
Accurate DDoS detection and cost-effective, automated mitigation are becoming paramount requirements for service providers, cloud builders and network operators to protect their network infrastructures, services and users.
The newly enhanced Nokia Deepfield Defender provides fast and accurate DDoS detection and facilitates agile mitigation of volumetric DDoS attacks at the network edge. With its ability to scale to petabyte-levels and advanced features such as multi-layer protection and auto-mitigation, Deepfield Defender delivers an intelligent and automated approach to thwart and minimize the security risks associated with a new generation of DDoS threats and attacks.
Drawing DDoS security expertise from its global network deployments and insights from Deepfield Security Genome , Nokia Deepfield Defender accurately and rapidly detects hosts, botnets and IoT devices involved in active attacks, and programs router-based mitigation with tens/hundreds of thousands of highly precise filters resulting in network-wide, cost-effective DDoS protection.
Nokia Deepfield Defender is a component of the Deepfield portfolio of IP network intelligence, analytics and security applications and uses network-based big data. The advanced analytics are combined with the embedded, multi-layer network security capabilities of Nokia 7750 Service Router and 7950 XRS routers to eliminate highly distributed, high-volume DDoS attacks from impacting service provider networks and customers.
Dr. Craig Labovitz, CTO, Nokia Deepfield, said: It is equally important for every participant in the network security ecosystem - end users, vendors, service providers, cloud builders, regulators and governments - to understand the dangers DDoS poses to the availability of internet content, applications and critical connectivity services. With this knowledge and a community commitment to solving the DDoS problem, we can go a long way towards making our networks, services and subscribers more secure.
Dr. Labovitz added: With the new Nokia Deepfield Defender solution, we take a unique approach in leveraging the combined power of high-performance IP networks and big data analytics to protect the network on all fronts from all volumetric DDoS attacks, at petabit scale, without lifting a hand. It will allow network operators to make a big leap towards improving overall security and availability of their networks and services for all their customers.
Nokia Deepfield's DDoS traffic analysis is based on a large global sample of service providers, ranging from companies which provide global transit and residential broadband services, to regional providers, Content Delivery Networks (CDNs), webscale and hosting companies. The analysis examined
Europe Stories
05/01/2027
Worlds first 802.15.4ab-UWB chip verified by Calterah and Rohde & Schwarz to be ...
04/08/2026
Dalet, a leading technology and service provider for media-rich organizations, t...
04/07/2026
April 7 2026, 19:00 (PDT) Detective Conan: Fallen Angel of the Highway Opens in...
01/06/2026
January 6 2026, 05:30 (PST) Dolby Sets the New Standard for Premium Entertainment at CES 2026
Throughout the week, Dolby brings to life the latest innovatio...
02/05/2026
Dalet, a leading technology and service provider for media-rich organizations, t...
01/05/2026
January 5 2026, 18:30 (PST) NBCUniversal's Peacock to Be First Streamer to ...
15/04/2026
From immersive storytelling to laugh-out-loud comedies, podcasts are booming in ...
15/04/2026
Books have always moved with us, whether tucked in our bags or humming in our he...
15/04/2026
For many artists, independent venues are where music careers begin and fan communities take shape. Independent venue operators work hard every day to keep local...
15/04/2026
From gripping thrillers to poignant memoirs, the 21st century has had no shortage of unforgettable books. To celebrate the standout storytelling of our modern e...
15/04/2026
Vintage broadcast experts release second plug-in
Telsie T is the second plug-in to be released by SonicWorld, a German audio company who specialise in servi...
15/04/2026
Includes eight free UAD plug-ins
Universal Audio's latest bundle brings together a selection of their renowned plug-ins and virtual instruments, and is ...
15/04/2026
Maximum uptime for broadcasters: Rohde & Schwarz launches R&S BroadcastShield at...
15/04/2026
aconnic AG (ISIN: DE000A0LBKW6), Munich, announces the market launch of the ACCE...
15/04/2026
Wednesday 15 April 2026
Introducing Smart Home from Sky, a simple way to stay c...
15/04/2026
Wednesday 15 April 2026
The Burbs confirmed to return to Sky and NOW for a second season
Mystery-comedy series, The Burbs, will continue its exclusive resid...
15/04/2026
With new broadcast standards evolving all over the world and OTT streaming striving for the pole position in media consumption, both next-gen video and audio co...
15/04/2026
Harmonic's XOS Media Processor Delivers Exceptional Video Quality to More th...
15/04/2026
Five Decades of Box Office Intelligence: Comscore Celebrates 50 Years of Movie M...
15/04/2026
Two Cities Television and Keeper Pictures to produce six-part series in association with Screen Ireland for RT and ITV Studios
RT has commissioned Two Citie...
15/04/2026
RT 100
RT unveils The Signal' a specially commissioned 60-second film
...
14/04/2026
ToolsOnAir and Omnistream Bring Mobile SRT Contribution into Professional 24/7 P...
14/04/2026
Captures a trio of renowned polysynths
The latest software to join AIR Music Tech's extensive catalogue captures the sound of three sought-after polysyn...
14/04/2026
Free offering includes 10 powerful plug-ins
United Plugins have announced the launch of a new bundle that brings together 10 of their pro-audio plug-ins, an...
14/04/2026
Julian Coryell joins virtual session player line-up
Announced at NAMM 2026, Celemony's Tonalic kits DAW users out with real performances by world-class ...
14/04/2026
X-Rite Pantone Color Academy Grand Opening in Shanghai
On March 27, 2026, X-Rite Pantone, the global authority in color standards and color science, held the...
14/04/2026
14 Apr 2026
VEON and JazzWorld Receive Competition Commission of Pakistan Appro...
14/04/2026
Tuesday 14 April 2026
Nicola Coughlan and Aimee Lou Wood to host next two episo...
14/04/2026
Lead writer and executive producer Jack Lothian joins alongside lead director Je...
14/04/2026
Wuppertal April 14, 2026
Thomas Riedel Acquires Premium Manufacturer ARRIStrategic Alignment With the Riedel Group for Innovation and Growth
Thomas Riedel, f...
14/04/2026
New Service Simplifies Integration of AI Applications with Exceptional Reliabili...
14/04/2026
Luxembourg, April 14, 2026 - SES, a leading space solutions company, today annou...
13/04/2026
ToolsOnAir Composition Builder 2026 Boilerplate
More Details: The Composition Builder 2026 application for macOS enables TV stations and Live Event broadcast...
13/04/2026
ToolsOnAr just:live pro 2026 Boilerplate
More Details: just:live pro 2026 is a Multi-Channel Live Production Playout solution for video and static or real-ti...
13/04/2026
ToolsOnAr just:play pro 2026 Boilerplate
More Details: just:play pro 2026 is a Multi-Channel automated 24/7 Master Control playout solution with SD, HD and U...
13/04/2026
ToolsOnAr live:cut 2026 Boilerplate
More Details: live:cut is an option to just:in mac pro 2025 and enables multicamera production workflows for up to 16 cam...
13/04/2026
ToolsOnAir Just In Mac Lite NDI 2026 Boilerplate
More Details: The Just In Mac Lite NDI application is a streamlined media capture solution designed specific...
13/04/2026
ToolsOnAir Just In Mac Lite 2026 Boilerplate
More Details: The Just In Mac Lite application is a streamlined media capture solution designed specifically for...
13/04/2026
ToolsOnAir just:in mac pro 2026 Boilerplate
More Details: just:in mac pro is a macOS-based client-server multichannel capture solution to record SDI, HDMI, N...
13/04/2026
Intuitive EQ plug-in gets an upgrade
Following its official launch back in February 2026, Musik Hack's intuitive EQ plug-in has been treated to its firs...
13/04/2026
Flagship soft synth collection expanded
The latest version of UVI's flagship vintage-inspired soft synth collection has just arrived, expanding the suit...
13/04/2026
Free version of innovative string library arrives
Released in October 2025, Lux Orchestral Strings was said to be Sonuscore's most ambitious library to ...
13/04/2026
The Girls' Research Camp is part of the Technology - Future in Bavaria edu...
13/04/2026
Rohde & Schwarz transforms submarine communications for real time underwater dom...
13/04/2026
Rohde & Schwarz enables Pulsar signal simulation to support next-generation navi...
13/04/2026
The search for Ireland's newest country music star is live on Friday 17 Apri...
13/04/2026
Monday 13 April 2026
Global environmental action NGO WRAP brings recycling to l...
13/04/2026
J nger Audio has joined the EBU ADM Implementers Group (ADM-IG) as a founding me...
13/04/2026
FOX Latin America Announces The Launch Of The FOX Channel In Central America And...
Nokia Deepfield global analysis shows most DDoS attacks originate from fewer than 50 hosting companies 
