Mitigating 31.4 Tbps: Lessons from the Cloudflare 2025 Q4 DDoS Report for Drupal

The Cloudflare 2025 Q4 DDoS threat report has just been released, and the numbers are staggering. A record-breaking 31.4 Tbps attack was mitigated in November 2025, and hyper-volumetric attacks have grown by 700% . For Drupal site owners, these aren't just statistics—they represent a fundamental shift in the scale of threats our infrastructure must withstand. The Aisuru-Kimwolf Botnet Threat The report highlights the rise of the Aisuru-Kimwolf botnet , which leverages Android TVs to launch HTTP DDoS attacks exceeding 200 million requests per second (RPS) . When an attack of this magnitude hits a CMS like Drupal, even the most optimized database queries can become a bottleneck if the attack bypasses the edge cache. Key Findings for Infrastructure Short, Intense Bursts: Many record attacks lasted less than a minute but were intense enough to knock unprotected systems offline instantly. Cache-Busting Tactics: Attackers are increasingly using sophisticated patterns to bypass CDN caching, f