azureLayer-7 DDoS attacks disrupting Azure Portal and web service availability
Started
Jun 7, 2023, 10:00 AM UTC
Resolved
Jun 9, 2023, 8:00 PM UTC
Duration
2d 10h
Service
Microsoft Entra ID
azuredown.com independently monitors the public Azure status page. How we source data.
Impact
Layer-7 DDoS attacks (attributed by Microsoft to Storm-1359) intermittently disrupted the Azure Portal, Outlook on the web, and OneDrive over several days in early June 2023; authentication and portal access failed intermittently.
Affected service
Affected regions
Timeline
Updates newest first (times in UTC).
- Resolved
Attack traffic mitigated; portal and web service availability returned to normal. Microsoft later attributed the activity to Storm-1359.
- Mitigating
Traffic identified as layer-7 DDoS activity; hardening rate limits and rebalancing traffic through the web application firewall.
- Investigating
Investigating intermittent availability issues for the Azure Portal and web front ends.
Resolution
Attack traffic mitigated; portal and web service availability returned to normal. Microsoft later attributed the activity to Storm-1359.