Report by Gcore
Gcore Radar Attack Trends Q3‑Q4 2025
Key Findings
DDoS attack volumes reached 12 Tbps in Q4, representing a sixfold increase.
Mexico, Brazil, and the United States accounted for 31%, 24%, and 20% of network-layer observed attack traffic, respectively.
64% of application-layer DDoS attacks exceed 10 minutes.
Total number of DDoS attacks increased to 1,300,000 in Q4 2025 from 512,000 in Q4 2024.
DDoS attack peak volume increased from 2.2 Tbps to 12 Tbps, a sixfold increase.
Network-layer attacks accounted for 82% of all observed DDoS incidents, a 20% increase from the previous report.
75% of network-layer DDoS attacks last less than one minute.
Only 2% of network-layer DDoS attacks extend beyond ten minutes.
The United States accounted for 23% of application-layer DDoS attack representation.
Technology, financial services, and gaming accounted for 34%, 20%, and 19% of DDoS attacks, respectively.
Mexico and Brazil together accounted for 55% of observed DDoS attack activity.