Gcore Mitigates Record-Breaking 6 Tbps DDoS Attack

LUXEMBOURG, 14 October 2025 – Gcore, the global edge AI, cloud, network, and security solutions provider, has successfully mitigated one of the largest DDoS attacks recorded this year. The large-scale, multi-regional DDoS attack reached a peak bandwidth of 6 Tbps (terabits per second) and a packet rate of 5.3 Bpps (billion packets per second).

The attack targeted a hosting provider operating in the gaming sector, but the methodology and scale confirm a broader trend of intensifying DDoS campaigns aimed at a wide range of digital infrastructure. The attack was consistent with the AISURU botnet, which has been associated with several high-impact incidents in recent months worldwide.

“This incident underscores an ongoing escalation in both the scale and sophistication of DDoS attacks,” said Andrey Slastenov, Head of Security at Gcore. “While this event was a short-burst volumetric flood, across the industry we increasingly see campaigns used to probe resilience or coincide with other vectors. Without robust, adaptive protection, organizations across tech, hosting, and enterprise sectors remain at risk.”

Attack Highlights:

• Peak traffic: 6 Tbps
• Packet rate: 5.3 Bpps
• Main protocol: UDP, typical of volumetric floods
• Duration: 30-45 seconds
• Geographic concentration: 51% of sources originated in Brazil and 23.7% in the US, together accounting for nearly 75% of all traffic

This event mirrors insights from the recently published Gcore Radar report Q1-Q2 2025, which revealed that not only did the number of DDoS attacks increase by 41% in just one quarter, but attacks targeting tech companies also rose significantly, accounting for 30% of all recorded incidents.

In the context of this attack, the multi-regional origin and volumetric scale signal a concerning evolution of botnet capabilities, exploiting unsecured infrastructure in regions with high device density and weaker security controls. AISURU’s concentration in Brazil and the US reflects this dynamic.

Strategic Implications for Hosting and Enterprise Infrastructure

The attack’s characteristics align with a growing tactic observed in modern DDoS campaigns: short-burst, high-intensity attacks designed not only to cause downtime but to probe infrastructure resilience.

“For hosting providers, uptime is currency,” added Slastenov. “When a botnet can generate 6 Tbps of traffic, even a few seconds of disruption can translate to financial and reputational damage. This is why adaptive mitigation, edge-layer filtering, and Layer 7 behavioral analysis are no longer optional, they’re mission-critical.”

Gcore’s Response and Defense Capabilities

Gcore’s global DDoS Protection solution absorbed and neutralized the attack without service interruption, leveraging its globally distributed infrastructure across 210+ Points of Presence and a filtering capacity exceeding 200 Tbps.

The incident highlights the need for integrated, AI-driven DDoS defense strategies capable of real-time response and deep traffic inspection—especially as attacks continue to combine volumetric and application-layer exploits.

About Gcore

Gcore is a global edge AI, cloud, network, and security solutions provider. Headquartered in Luxembourg, with a staff of 600+ operating from ten offices worldwide, Gcore provides its solutions to global leaders in numerous industries. The company manages its own global IT infrastructure across six continents, with one of the best network performances in Europe, Africa, and LATAM, due to the average response time of 30 ms worldwide. Gcore’s network consists of 210 + points of presence around the world in reliable Tier IV and Tier III data centres, with a total capacity exceeding 200 Tbps. Learn more at gcore.com.

Gcore press contact

[email protected]

PR agency contact

[email protected]