FortiAppSec Cloud incident

[Service Outage Notice] Europe Regions – Azure EU West (Netherlands) Scrubbing Servers Down.

Critical Resolved View vendor source →

FortiAppSec Cloud experienced a critical incident on June 15, 2026 affecting WAF Scrubbing Region - Azure - EU West (Netherlands), lasting 2d 15h. The incident has been resolved; the full update timeline is below.

Started
Jun 15, 2026, 07:41 AM UTC
Resolved
Jun 17, 2026, 10:43 PM UTC
Duration
2d 15h
Detected by Pingoru
Jun 15, 2026, 07:41 AM UTC

Affected components

WAF Scrubbing Region - Azure - EU West (Netherlands)

Update timeline

  1. investigating Jun 15, 2026, 07:41 AM UTC

    We are currently investigating this issue.

  2. monitoring Jun 15, 2026, 09:19 AM UTC

    Previously 20.54.176.184 and 20.50.222.94 was down. Now they have recovered. Most applications have changed to serve by 20.107.95.65 and 20.107.95.95 since the previous incident. They are not affected by this incident.

  3. monitoring Jun 17, 2026, 11:33 AM UTC

    We have successfully mitigated the DDoS attack variant, and traffic has now stabilized. If you have changed your application's A records from 20.50.222.94 and/or 20.54.176.184 to 20.107.95.65 and/or 20.107.95.95, please change them back to 20.50.222.94 and 20.54.176.184. We'll arrange to bring down the dynamic nodes (20.107.95.65 and 20.107.95.95). If your application uses CNAME record, you don't need to change it.

  4. resolved Jun 17, 2026, 10:43 PM UTC

    The affected scrubbing servers have recovered and health checks have remained stable during the monitoring period. This incident is now resolved.