---
id: "INC-northflank-cmn651uh000a880hcl3ox9cxf"
page: "https://infrastack.ai/live/INC-northflank-cmn651uh000a880hcl3ox9cxf"
kind: "incident"
aliases: []
title: "Northflank: Active DDoS Attack in Europe - West - Netherlands"
severity: "unknown"
cvss: null
epss: null
exploited: false
status: "resolved"
category: "vendor"
products: [{"name": "Northflank", "fixed": [], "affected": "", "ecosystem": "vendor"}]
ecosystems: ["vendor"]
tags: ["europe-west-netherlands", "incident", "northflank", "security", "vendor"]
not_affected_if: ["other-regions"]
published_at: "2026-03-25T14:28:04+00:00"
first_seen_at: "2026-11-08T16:58:28+00:00"
updated_at: "2026-11-08T17:03:23+00:00"
sources: [{"source": "statuspage", "url": "https://status.northflank.com/incident/cmn651uh000a880hcl3ox9cxf", "first_seen_at": "2026-11-08T16:58:28+00:00"}]
exploit_sources: []
---

# Northflank: Active DDoS Attack in Europe - West - Netherlands

Link for people: https://infrastack.ai/live/INC-northflank-cmn651uh000a880hcl3ox9cxf (this .md is for agents)

Northflank reported a large DDoS attack on its Europe-West Netherlands region that affected public ingress into the cluster, while internal traffic was not affected. The incident was marked resolved after about 3 hours and 21 minutes, with addons, jobs and services affected.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:Northflank affected range not listed fixed no fixed version listed

## Timeline

- 2026-11-08T16:58:28+00:00 statuspage https://status.northflank.com/incident/cmn651uh000a880hcl3ox9cxf

## From the sources

Type: Incident
    Duration: 3 hours and 21 minutes

    Affected Components: Addons, Jobs, Services
    Mar 25, 17:48:48 GMT+0 - Resolved - The DDoS attack has stopped we will continue to monitor the affected region. Mar 25, 16:01:00 GMT+0 - Monitoring - The region is currently stable. We are still actively mitigating the ongoing attack. Mar 25, 14:28:04 GMT+0 - Identified - We are currently experiencing a large DDoS attack in the Europe - West - Netherlands region. This is affecting public ingress into the cluster. Internal traffic is not affected. The team is working on additional mitigations.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_