Major incident

Sucuri: Degraded Performance on Paris, Frankfurt, and London Regions

Affected: Europe West, Europe Central

Current status of Sucuri: Operational — live Sucuri status

Timeline

1. Apr 2, 2026, 08:19 UTC
   investigating
   We are currently working on mitigating the impact of the DDoS attack in the Paris region. Will inform about updates
2. Apr 2, 2026, 09:03 UTC
   identified
   Mitigation has been applied to the IP address that was targeted by a high volume of traffic in the Paris region. The region is currently stable. We will provide further updates shortly.
3. Apr 2, 2026, 10:12 UTC
   identified
   The attack is still ongoing, and the affected IP is still under mitigation. The Paris region is currently stable. We’ll provide further updates shortly.
4. Apr 2, 2026, 11:23 UTC
   identified
   The attack is still ongoing, and the affected IP is still under mitigation. The Paris region is currently stable. We will keep you informed
5. Apr 2, 2026, 12:32 UTC
   identified
   We are continuing to mitigate an ongoing attack targeting an IP in the Paris region. The region is currently stable. We will share further updates as more information becomes available.
6. Apr 2, 2026, 17:57 UTC
   identified
   We’re still mitigating an ongoing attack aimed at infrastructure in the Paris and Frankfurt regions. Cluster 28 is impacted in these regions at this time. We’ll post another update when we have more to share.
7. Apr 2, 2026, 19:23 UTC
   identified
   We continue to respond to sustained malicious traffic targeting our footprint in Paris, Frankfurt, and London. Cluster 28 remains affected in those locations. We’ll follow up as soon as we have further information on this incident.
8. Apr 3, 2026, 00:26 UTC
   identified
   We remain engaged countering sustained malicious traffic affecting our Paris, Frankfurt, and London footprint. Cluster 28 is still impacted in those locations. We will post again when we have additional information on this incident.
9. Apr 3, 2026, 07:41 UTC
   identified
   We are continuing to respond to ongoing malicious traffic affecting our infrastructure in Paris, Frankfurt, and London. Cluster 28 remains impacted in these locations. We will provide an update as soon as more information about this incident becomes available.
10. Apr 3, 2026, 10:38 UTC
    identified
    We are still actively responding to ongoing malicious traffic impacting our infrastructure in Paris, Frankfurt, and London. Cluster 28 continues to be affected in these locations. We will share another update as soon as additional information on this incident is available.
11. Apr 3, 2026, 18:48 UTC
    identified
    We are continuing to work with our network team to mitigate the source of incoming attack traffic. At the moment, we still see packet loss and cluster 28 is still affected. We will provide further updates shortly.
12. Apr 3, 2026, 20:49 UTC
    monitoring
    We have completed a series of mitigations addressing elevated load on our network. These measures required more time than we initially expected to implement safely. We appreciate your patience and understand the impact this has had. We are now observing improved latency and overall performance, consistent with a substantial reduction in the traffic that was contributing to the issue. Engineering teams remain engaged and are actively monitoring systems and external checks to confirm stability. We will provide a further update if conditions change or once we are confident the incident is fully resolved. If you continue to see problems with a specific site or region, please contact support with details so we can investigate.
13. Apr 5, 2026, 15:48 UTC
    monitoring
    We are still monitoring closely after the applied mitigations. No new issues observed in our checks; we will update if that changes.
14. Apr 6, 2026, 16:51 UTC
    monitoring
    Increased traffic levels persist and are causing higher latency in certain regions. We are coordinating with our networking team and continuing to monitor. We will update again as conditions change.
15. Apr 6, 2026, 21:06 UTC
    resolved
    Additional mitigations have restored traffic and latency to normal levels in the affected regions. We will continue routine monitoring. This incident is resolved.

Updates as published by Sucuri (original).