Massive 15 Tbps DDoS Attack From 500K Devices Slams Azure Network

Microsoft Azure successfully defended against a record-breaking distributed denial-of-service (DDoS) attack that peaked at 15.72 terabits per second (Tbps), making it the most significant DDoS attack ever observed in the cloud.

On October 24, 2025, Azure’s DDoS Protection system automatically detected and mitigated a massive multi-vector attack targeting a single endpoint in Australia.

The assault generated nearly 3.64 billion packets per second. It originated from the Aisuru botnet, a Turbo Mirai-class IoT botnet known for launching record-breaking DDoS attacks.

The attack involved more than 500,000 compromised devices from various regions worldwide.

These devices, primarily consisting of home routers and cameras from residential ISPs in the United States and other countries, were exploited to generate extremely high-rate UDP floods directed at a specific public IP address.

The malicious traffic came in sudden UDP bursts targeting the victim’s network infrastructure. Attackers used random source ports and employed minimal source spoofing techniques.

While this approach generated massive traffic volumes, it also simplified traceback efforts. It made it easier for providers to enforce security measures against the attack.

Azure’s Defense Response

Microsoft’s globally distributed DDoS Protection infrastructure immediately detected the anomalous traffic patterns and initiated mitigation measures.

The system effectively filtered and redirected the malicious traffic, ensuring uninterrupted service availability for customer workloads throughout the attack.

The successful mitigation demonstrates Azure’s robust defense capabilities and underscores the importance of automated protection systems.

Without proper DDoS protection, such an attack could have caused significant service disruptions and financial losses for affected organizations.

Security experts warn that attackers are scaling their capabilities as internet infrastructure improves.

As fiber-to-the-home speeds increase and IoT devices become more powerful, the baseline for attack sizes continues to climb. This trend suggests that even larger attacks may emerge in the future.

The Aisuru botnet represents a significant threat due to its ability to compromise massive numbers of poorly secured IoT devices.

These devices often lack proper security configurations, making them easy targets for botnet recruitment.

With the holiday season approaching, Microsoft emphasizes the critical importance of ensuring all internet-facing applications and workloads have adequate DDoS protection.

Organizations should not wait for an actual attack to test their defensive capabilities.

Microsoft recommends conducting regular security simulations to identify potential vulnerabilities and address issues proactively.

These exercises help organizations understand their operational readiness and improve incident response procedures.

Businesses relying on cloud infrastructure should implement comprehensive DDoS protection solutions to safeguard against increasingly sophisticated attacks.

Azure DDoS Protection provides automated detection and mitigation to defend against large-scale attacks while maintaining service availability for critical business operations.

Follow us on Google News, LinkedIn, and X to Get Instant Updates and set GBH as a Preferred Source in Google.