
Nokia Deepfield global analysis shows most DDoS attacks originate from fewer than 50 hosting companies
Press Release
Nokia Deepfield global analysis shows most DDoS attacks originate from fewer than 50 hosting companies
In-depth analysis across large sample of networks globally fingerprints and traces origins of most DDoS attacks (by frequency and traffic volume); finds that majority of DDoS attacks originate from fewer than 50 hosting companies and regional providers
Nokia Deepfield shares strategies for fingerprinting and tracing primary DDoS sources; makes recommendations for addressing DDoS security with networking community
Analysis shows more than 100% increase in daily DDoS peak traffic between January 2020 and May 2021
Identifies the threat potential for possible DDoS attacks over 10 Tbps - four to five times the scale of largest attacks reported so far (just above 2 Tbps) - due to rapidly growing number of open and insecure internet services and IoT devices
Delivers Nokia Deepfield Defender, specifically designed to safely, securely and efficiently orchestrate DDoS mitigation across multiple vendors, including next-generation IP routers such as the Nokia FP-based Service Routers enabling low-latency, high-scale, deterministic protection
14 June 2021
Espoo, Finland - Nokia Deepfield today announced the results of its global DDoS traffic analysis, which examined service provider network traffic encompassing thousands of routers on the internet between January 2020 and May 2021. Among the findings, which were presented by Dr. Craig Labovitz, Nokia Deepfield CTO, at NANOG82: more than 100% increase in daily DDoS peak traffic in this time period; newly identified DDoS threat potential over 10 Tbps - four to five times higher than the largest current attacks reported - due to rapidly growing number of open and insecure internet services and IoT devices.
In an environment where attackers constantly leverage opportunistic resources to source their attacks, Nokia Deepfield found in the past 15 months accessibility of DDoS for hire services has increased the threat potential of the existing botnet, IoT and cloud-based attack models. The results trace the origins of most of the high-bandwidth, high-intensity (volumetric) attacks to a limited number of internet domains, finding that most global DDoS attacks (by frequency and traffic volume) originate in less than 50 hosting companies and regional providers.
As COVID lockdown measures were implemented in 2020, Nokia Deepfield noticed a 40-50% increase in DDoS traffic. The continued increases in intensity, frequency and sophistication of DDoS attacks have resulted in a 100% increase in the high watermark levels of DDoS daily peaks - from 1.5 Tbps (January 2020) to over 3 Tbps (May 2021).
With broadband connectivity becoming an essential service, the fight against DDoS is critical. These large-scale DDoS attacks can inflict major damage on individual and large-scale connectivity and service availability, resulting in damages costing hundreds of thousands or even millions of dollars in production and operational losses.
Accurate DDoS detection and cost-effective, automated mitigation are becoming paramount requirements for service providers, cloud builders and network operators to protect their network infrastructures, services and users.
The newly enhanced Nokia Deepfield Defender provides fast and accurate DDoS detection and facilitates agile mitigation of volumetric DDoS attacks at the network edge. With its ability to scale to petabyte-levels and advanced features such as multi-layer protection and auto-mitigation, Deepfield Defender delivers an intelligent and automated approach to thwart and minimize the security risks associated with a new generation of DDoS threats and attacks.
Drawing DDoS security expertise from its global network deployments and insights from Deepfield Security Genome , Nokia Deepfield Defender accurately and rapidly detects hosts, botnets and IoT devices involved in active attacks, and programs router-based mitigation with tens/hundreds of thousands of highly precise filters resulting in network-wide, cost-effective DDoS protection.
Nokia Deepfield Defender is a component of the Deepfield portfolio of IP network intelligence, analytics and security applications and uses network-based big data. The advanced analytics are combined with the embedded, multi-layer network security capabilities of Nokia 7750 Service Router and 7950 XRS routers to eliminate highly distributed, high-volume DDoS attacks from impacting service provider networks and customers.
Dr. Craig Labovitz, CTO, Nokia Deepfield, said: It is equally important for every participant in the network security ecosystem - end users, vendors, service providers, cloud builders, regulators and governments - to understand the dangers DDoS poses to the availability of internet content, applications and critical connectivity services. With this knowledge and a community commitment to solving the DDoS problem, we can go a long way towards making our networks, services and subscribers more secure.
Dr. Labovitz added: With the new Nokia Deepfield Defender solution, we take a unique approach in leveraging the combined power of high-performance IP networks and big data analytics to protect the network on all fronts from all volumetric DDoS attacks, at petabit scale, without lifting a hand. It will allow network operators to make a big leap towards improving overall security and availability of their networks and services for all their customers.
Nokia Deepfield's DDoS traffic analysis is based on a large global sample of service providers, ranging from companies which provide global transit and residential broadband services, to regional providers, Content Delivery Networks (CDNs), webscale and hosting companies. The analysis examined
Most recent headlines
05/01/2027
Worlds first 802.15.4ab-UWB chip verified by Calterah and Rohde & Schwarz to be ...
07/10/2026
Dalet, a leading technology and service provider for media-rich organizations, today announced the latest Long-Term Supported (LTS) release of Dalet Flex. Build...
06/09/2026
June 9 2026, 23:00 (PDT) Dolby and MagentaTV Bring Fans Closer to the FIFA Worl...
04/08/2026
Provided by POVORA, the new camera angle offers a dealer's-eye view of the c...
04/08/2026
Spiideo will provide the camera setup, with NEP handling broadcast integration and off-site video operations...
04/08/2026
Production team streamed more than 750 youth rugby matches using ATEM switchers,...
04/08/2026
Agreement gives KTC early access to NDI's Advanced SDK for integration across commercial displays, digital signage, and interactive panels...
04/08/2026
Twelve projects across four categories recognize collaborative work in productio...
04/08/2026
Multi-year agreement will introduce SkeleTRACK, semi-automated offside, automate...
04/08/2026
Three mc 56 consoles, dual A__UHD Core engines, RAVENNA networking, and HOME management supported live sound, monitoring, and international broadcast production...
04/08/2026
New contribution products support ultra-low-latency video transport across fixed, remote, and mobile production environments...
04/08/2026
Company will showcase updates across PRIME, Chyron LIVE, Paint, virtual production, newsroom workflows, and venue control...
04/08/2026
Exhibit will feature SilverBack, VersaBrix, VersaFrame, VF-9100, and FiberSaver-10G platforms...
04/08/2026
Platform updates target cloud-based production, high-density ST 2110 monitoring,...
04/08/2026
LMG will take control of Gravity Media's U.S. mobile-unit fleet as the compa...
04/08/2026
Amp-modelling rigs get major upgrade
HeadRush have recently released a major firmware update that brings some powerful new features to their Prime, Core and...
04/08/2026
Generate a choir from a single voice track
Following years of development, Am I Audio have just officially launched their debut plug-in. Created in collabor...
04/08/2026
Official EMT-endorsed reverbs now available to all
Two more of Universal Audio's renowned UAD plug-ins have just gained new native versions that can be ...
04/08/2026
SBS helps Australians understand why every Census counts
Media releases
As Australia prepares for the 2026 Census on Tuesday 11 August, SBS is helping ensur...
04/08/2026
Canada invests in the future of HF communications with Rohde & Schwarz solutions After selection by the Canadian Department of National Defence (DND) as the p...
04/08/2026
Blendkit Expands Beyond Blender
Brie Clayton August 4, 2026
0 Comments
Popular 3D Asset Library Launches Alpha Plugins for Maya, Godot, and Rhino
Blend...
04/08/2026
Share
Copy link
Facebook
X
Linkedin
Bluesky
Email...
04/08/2026
Share
Copy link
Facebook
X
Linkedin
Bluesky
Email...
04/08/2026
Share
Copy link
Facebook
X
Linkedin
Bluesky
Email...
04/08/2026
Ikegami has chosen the 11-14 September 2026 International Broadcasting Convention in Amsterdam as the European market launch venue for additions to its UNICAM p...
04/08/2026
Appear (IBC2026 booth 1.C61) will showcase new X & VX Platform capabilities that extend broadcast-grade performance from venue to cloud
Appear ASA (OSE: APR), ...
04/08/2026
LiveU, the global leader in live IP-video solutions, today highlighted the crucial role its EcoSystem played in Broadcast Management Group's (BMG) successfu...
04/08/2026
Share
Copy link
Facebook
X
Linkedin
Bluesky
Email...
04/08/2026
Share
Copy link
Facebook
X
Linkedin
Bluesky
Email...
04/08/2026
Share
Copy link
Facebook
X
Linkedin
Bluesky
Email...
04/08/2026
Share
Copy link
Facebook
X
Linkedin
Bluesky
Email...
04/08/2026
Share
Copy link
Facebook
X
Linkedin
Bluesky
Email...
04/08/2026
Share
Copy link
Facebook
X
Linkedin
Bluesky
Email...
04/08/2026
Share
Copy link
Facebook
X
Linkedin
Bluesky
Email...
04/08/2026
Homecoming Artist Spotlight: Dreion The singer, songwriter, and producer talks about finding his village at Berklee ahead of his Homecoming performance on Sep...
04/08/2026
Tuesday 4 August 2026
Sky Sports agrees deal with SANZAAR for international rugby rights 2026 - 2030
The deal means Sky will have exclusive rights to the inau...
04/08/2026
Kill Tony Launches on Supercast, Giving Fans Premium & Ad-Free Access to Comedy&...
04/08/2026
More details coming soon....
04/08/2026
More details coming soon....
04/08/2026
More details coming soon....
04/08/2026
Surging AI demands are driving the need for massive datasets and context windows that burst past the confines of system memory.
But rising needs aren't me...
04/08/2026
For robotaxis and other autonomous vehicles (AVs), the hardest problems aren'...
04/08/2026
Members of the Open Secure AI Alliance - now more than 120 organizations strong - are developing new guidelines to strengthen agentic AI cybersecurity as the an...
04/08/2026
Dalet, a leading technology and service provider for media-rich organizations, t...
03/08/2026
SVG's annual TranSPORT conference returns to New York City for a full day of sessions focused on the current state of live-sports-transmission technology. S...
03/08/2026
A five-time Emmy winner, this esports vet has built a production career on live storytelling, audience connection, and meeting viewers wherever they are
The sp...
03/08/2026
Live production in the cloud is a growing trend across the industry and Major Le...
03/08/2026
(L-R) Nyah B., Nala B., Shannon Elizabeth S., Celia K., Olive G., and Nikki B. attend the Q&A for Cookie Queens by Alysa Nahmias, an official selection of the...
03/08/2026
Recreates a 1977 Hohner Clavinet D6
After launching a software recreation of their own electric piano, Rhodes set about capturing another classic instrument...
03/08/2026
A modern solution for an old technique
Peak Tamer is a new standalone application that automatically applies gain automation to keep rogue peaks under cont...