Key Highlights
- Gcore successfully mitigated a 6 Tbps DDoS attack, the largest recorded to date.
- The attack was consistent with the AISURU botnet and targeted a gaming sector hosting provider.
- Gcore’s global DDoS Protection solution absorbed and neutralized the attack without service interruption.
- Short-burst high-intensity attacks are becoming a common tactic in modern DDoS campaigns, probing infrastructure resilience.
Record-Breaking DDoS Attack: Gcore’s Resilience Proven
The global edge AI, cloud, network, and security solutions provider, Gcore, has successfully defended against one of the largest Distributed Denial of Service (DDoS) attacks ever recorded. The attack, peaking at 6 terabits per second (Tbps), targeted a hosting provider operating in the gaming sector, illustrating the growing threat to digital infrastructure.
Understanding the Scale and Methodology
The incident is noteworthy for its unprecedented scale, with peak traffic reaching 6 Tbps. The attack also featured a packet rate of 5.3 billion packets per second (Bpps), primarily utilizing the User Datagram Protocol (UDP) – a common method in volumetric DDoS attacks designed to overwhelm network bandwidth.
According to Andrey Slastenov, Head of Security at Gcore, “This event underscores an ongoing escalation in both the scale and sophistication of DDoS attacks. While this event was a short-burst volumetric flood, across the industry we increasingly see campaigns used to probe resilience or coincide with other vectors.” This methodology aligns with trends highlighted in Gcore’s recent Q1-Q2 2025 Gcore Radar report, which revealed a 41% increase in DDoS attacks and a significant rise in attacks targeting tech companies.
Gcore’s Adaptive Mitigation Strategies
Gcore’s global DDoS Protection solution managed to absorb the attack without any service interruption, leveraging its distributed infrastructure across 210+ Points of Presence (PoPs) with filtering capacities exceeding 200 Tbps. The incident highlights the critical importance of adaptive mitigation strategies that combine edge-layer filtering and Layer 7 behavioral analysis.
“For hosting providers, uptime is currency,” Slastenov emphasized. “When a botnet can generate 6 Tbps of traffic, even a few seconds of disruption can translate to financial and reputational damage. This is why adaptive mitigation, edge-layer filtering, and Layer 7 behavioral analysis are no longer optional; they’re mission-critical.”
Industry-Wide Implications and Future Trends
The attack’s characteristics reflect a concerning evolution in botnet capabilities, exploiting unsecured infrastructure in regions with high device density and weaker security controls. The geographic concentration of the attack, with 51% of sources originating from Brazil and 23.7% from the US, underscores this dynamic.
Industry experts stress that as attacks continue to combine volumetric and application-layer exploits, integrated AI-driven DDoS defense strategies will become increasingly vital. These strategies must be capable of real-time response and deep traffic inspection to protect against the growing threat landscape.
“The attack’s characteristics align with a growing tactic observed in modern DDoS campaigns: short-burst, high-intensity attacks designed not only to cause downtime but to probe infrastructure resilience,” Slastenov concluded. “Organizations across tech, hosting, and enterprise sectors must prioritize robust, adaptive protection measures.”
Gcore’s response demonstrates its commitment to staying ahead of emerging threats through innovative technology and strategic planning. As the digital landscape continues to evolve, so too must the defenses that protect it.
