Cloudflare status: hosting issues and outage reports

Problems in the last 24 hours

The graph below depicts the number of Cloudflare reports received over the last 24 hours by time of day. When the number of reports exceeds the baseline, represented by the red line, an outage is determined.

Most Reported Problems

The following are the most recent problems reported by Cloudflare users through our website.

• Cloud Services (32%)
• Domains (32%)
• Web Tools (14%)
• Hosting (14%)
• E-mail (7%)

Live Outage Map

The most recent Cloudflare outage reports came from the following cities:

City	Problem Type	Report Time
Paris	Cloud Services	3 days ago
New York City	Hosting	5 days ago
Manchester	Domains	26 days ago
Angers	Cloud Services	1 month ago
London	Domains	1 month ago
Noida	Hosting	2 months ago

Full Outage Map

Community Discussion

Tips? Frustrations? Share them here. Useful comments include a description of the problem, city and postal code.

Beware of "support numbers" or "recovery" accounts that might be posted below. Make sure to report and downvote those comments. Avoid posting your personal information.

Cloudflare Issues Reports

Latest outage, problems and issue reports in social media:

• 
  Jay (@Cyberlane) reported 10 minutes ago

  @diegohaz Already did that a while ago. I really disliked namecheap, their support was poor and the inability to simply change a username was crazy to me. Everything is on Cloudflare now and couldn’t be happier!

• 
  Æ-Xx-05 (@chaimbellinsky) reported 10 minutes ago

  Stopping the bad guys with Cloudflare: 1,286 malicious requests blocked or challenged in the last month #Cloudflare

• 
  Harishaan (@hsuthan24) reported 11 minutes ago

  If your NAT type on multiplayer(bottom of screen) is strict, that’s why you can’t find lobbies. It needs to at least be moderate. Change the DNS in your ps5’s settings to CloudFlare or Google’s DNS rather than your internet service provider’s.

• 
  luna (@ImLunaHey) reported 14 minutes ago

  @mynameistito @Cloudflare that doesnt really help with client side only apps though.

• 
  Olay Bu İşte (@olaybuiste) reported 17 minutes ago

  @TheHackersNews After the 7.0.1 update, I encountered critical REST API errors and resolved the issue using Cloudflare’s whitelisting methods. I also installed the 7.0.2 update yesterday but didn’t change my Cloudflare settings. I’ll continue to monitor the situation for a while longer.+++

• 
  luna (@ImLunaHey) reported 17 minutes ago

  **** it.. building something self hostable on @Cloudflare using gpt 5.6 sol.

• 
  Anicet (@AniC_dev) reported 19 minutes ago

  lmao I just changed the logic for the snapshot restore on sandbox resume/fork, now most of our slow cases are 30x faster! so the bottleneck became the network ...and I've just benchmarked that if we ditch cloudflare and use Hetzner Object Storage it's 2x faster & 2.2x cheaper

• 
  Jure Ursic Cergol (@JureUrsic) reported 23 minutes ago

  @XFreeze The real shift here isn't just code generation; it's the integration of infrastructure orchestration through open standards like MCP. Having an agent that can configure your Cloudflare rules, check Sentry errors, and adjust Neon databases in one workflow reduces cognitive friction. The value moves from writing the syntax to designing the system.

• 
  abir (@abiryanii) reported 24 minutes ago

  @AjaySohmshetty @Cloudflare @andrewk17 ngl, not the worst for 174tb

• 
  Nicholas Preston (@Mike_Preston17) reported 30 minutes ago

  By top 1%, I mean the best parts of the web, the best parts of backend, the best testing environments (that one has to be rotated every couple years, like insurance), the and the best critical path to integrate them all. Oh, and the top 1% coders who understand, give a damn, can lead by example, deal with corporate and eject their own egos in a discussion. Basically half of Toptal/G2i. No leetcoders. I want to work with people who truly understand #DRY. I've met maybe 1 or 2 of the top 1%. Arrogant? Maybe. But I've diagnosed and fixed many codebases, learned the 10%-hype rule, the 80/20 rule, old-and-gone patterns like UOW and much, much, MUCH more. Oh, and I documented it all. In code experiments and raindrop(dot)io. The same problem exists: people don't understand their own systems and let it get away from them. St00pid easy to do. I'm looking for the rare few who understand that and want to do something about it, instead of hiring offshore slaves, replacing people with AI, burning millions of dollars in tokens, crashing Cloudflare out of language demagoguery (#Rust) and costing the world billions, and much, much more I could point to. If that offends you, so be it. The world has gone mad, and you'd act EXACTLY like me if you knew what I knew.

• 
  shams (@AMR_SHAMS07) reported 30 minutes ago

  @KhafraDev @Cloudflare They do have this, we had backups for R2 but the recovery path was not working at somepoint of failure, that we had to move into garage(self hosted they don’t have object locking yet) but will do the trick

• 
  AAZ HAZAR (@AazHazar) reported 31 minutes ago

  Stopping the bad guys with Cloudflare: 805 malicious requests blocked or challenged in the last month #cloudflare

• 
  abdul🪐 (@NerdyProgramme2) reported 31 minutes ago

  @jayhemz cloudflare - you're not their customer, big companies are opencode - partnerships (we list your model, you pay us)

• 
  Brett Clark (@smokedbaconai) reported 32 minutes ago

  I let a runaway agent loose on infrastructure I didn't fully control, then tried to kill it from the outside. That was the whole spike: a self-improving system is only safe if you can pull the plug when it's running on a box you don't own. A bash-loop agent, zero knowledge it was being watched, dropped into a Cloudflare Sandbox behind a Worker. A separate stub polled its telemetry every 750ms against a hard budget: two steps. The agent blew past. The stub caught the breach at 7.5s and fired a forced kill across the HTTPS boundary in 197ms. It stopped at exactly two steps and never took a third across a 29-second watch. The honest caveat matters more than the win: this is enforcement with bounded overshoot, not synchronous gating. There's a window between breach and kill. Which is why a real budget needs both — a wrapper inside the agent that refuses to overspend, and an external brake for when it ignores the wrapper or you don't own the box. One layer trusts the agent. The other assumes it fails. You need both.

• 
  David Rogers (@DavidRogers2001) reported 33 minutes ago

  @AetiusRF @XJosh That's what he is saying, there is nothing we can do. Unless you can complain enough to get cloudflare to reverse course then nothing will help.

• 
  Geo Chris (@GeoChrisN) reported 39 minutes ago

  @ThinkDe81910878 @Cloudflare i have the same issues on 200+ domains ... i try now and close the proxy's and i think it work ( it need to have ssl on server to work correct ! )

• 
  Jarrett (@JarrettLusso) reported 40 minutes ago

  @Cloudflare how do we get someone to fix image transformations randomly 404ing? Support is telling me it's our origin, but that is R2. Doesn't seem like anyone cares to actually fix it cause it's been broken for days.

• 
  Will Stewart (@NorthflankWill) reported 41 minutes ago

  @AjaySohmshetty @Cloudflare @andrewk17 always a poor experience with Cloudflare. dw they'll spend all the time tweeting in their echo chamber instead

• 
  Max K (@mostyoucanhave) reported 42 minutes ago

  @thatjohnG @XJosh Having dealt with this at CloudFlare before: They will just pull it down in another couple days and not give a reason.

• 
  Nandkishor (@nandkshorjadoun) reported 42 minutes ago

  i'm trying to switch from prisma to @DrizzleORM because of cloudflare workers incompatibility and ngl prisma spoiled me so bad that drizzle feels like writing raw sql 😭

• 
  Alex Prompter (@alex_prompter) reported 43 minutes ago

  One web page can steal everything Claude remembers about you. A researcher just proved it. Ayush Paul built a fake coffee shop website. When a user asked Claude to check it out, the site served a fake Cloudflare verification page. The page told Claude to "authenticate" by spelling out the user's name through URL paths, one letter at a time. Claude complied. It pulled the user's full name from memory, then their employer, then their hometown. The user saw nothing suspicious, only coffee shop details. Paul never told Claude where he grew up. But Claude had a memory of a hackathon he started in high school called "Queen City Hacks," and it reasoned that Queen City means Charlotte, NC. It gave that up too. Claude didn't just recall stored data. It deduced information it was never given, and leaked both to an attacker through invisible URL navigation. Anthropic has since patched this by disabling Claude's ability to follow links on external pages when browsing the web. But AI memory systems now hold more personal information than most password managers, and the security model hasn't caught up. If you use Claude with memory on, and it's on by default, your conversation history is building a detailed profile of you over time. That profile is only as safe as every tool the model can access.

• 
  Kumar Deepanshu (@kumard_3) reported 45 minutes ago

  one Cloudflare Worker eats 195M req/mo for $92. our webhook endpoint spiked 5x in a minute and dropped events. the Worker returns instant 200, forwards async, buffers to D1 on failure. zero drops since. what is the cheapest thing absorbing your worst spike?

• 
  TaylorGreen (@GreenSkyDragon) reported 46 minutes ago

  Can't post or reply on mobile (post kept crashing) but as soon as I test a different connection I get hit with a Cloudflare verification and warning about "following X rules" maybe fix your app huh?

• 
  𝚟𝚔𝚍 (@vkdatta27) reported 50 minutes ago

  Cloudflare DO and D1 experiencing issues

• 
  Eric Taylor (@bcs_erictaylor) reported 51 minutes ago

  7/16 - Kali365 Update I have, at least for the moment, completely disabled the Kali365 platform from all operations. Below is an update of the intel we have currently. Believed owner and creator of Kali365: Handle: Octopus King TG: @tentacle_network Completed 'Takedown Requests' submitted to Namesilo FQDN: updateteampanel[.]xyz Completed 'Takedown Requests' submitted to BL Network: IP Address: 199.21.221[.]21 IP Address: 162.33.178[.]105 IP Address: 72.5.43[.]195 Completed 'Sinkhole Requests' submitted to Cloudflare FQDN: servoquil[.]org FQDN: yalmorind[.]org FQDN: vuredonte[.]org FQDN: ondrevail[.]org FQDN: caldivore[.]org FQDN: vuredonte[.]org FQDN: privatetoken[.]app FQDN: mvpaffiliatecz[.]site #Kali365 #CTI #ThreatIntel

• 
  Hrishikesh Barua (@talonx) reported 51 minutes ago

  Outages today in both Google Cloud's and AWS's European datacenters (unrelated) caused many downstream services to blink out. We have been seeing this pattern of cascading service failures forever, but it only came under the spotlight after 2025's Cloudflare and AWS outages. The AWS outage in eu-central-1 was limited to a single AZ euc1-az2 in Germany, but it took out services like HENNGE One (a Japanese cloud security service), Confluent (managed Kafka), FusionAuth, among others. In addition, AWS Cloudfront suffered a global outage, leading to outages in downstream services like Frontegg, TigerData, Instructure (Canvas), Huggingface, Coda, Ubiquiti, Doxy, Blackboard. EdTech saw two outages with both Canvas and Blackboard being affected. And since FrontEgg is an identity and user management platform, its own downstream services led to more disruption. AWS's initial report says "the system responsible for distributing routing configuration to our network processors failed to load the updated configuration data correctly" - for the Cloudfront outage, which affected customers using VPC origins. The Google Cloud outage in europe-west4-a (Netherlands) was due to a cooling failure and affected VMWare Engine, NetApp volumes, and their bare metal servers. Both outages are resolved, but the same question remains - how do we prepare for cascading failures when the majority of your application's dependencies are ultimately dependent on a few providers?

• 
  William (@billmorgan92) reported 1 hour ago

  @CloudflareDev is cloudflare r2 down? I cannot download from my bucket my files and cannot create new buckets (both take forever stuck in loading state)

• 
  Anthony Thorne (@AnthonyThorneCG) reported 1 hour ago

  @RyLiberty Is your site down? Was going to order a poster, getting a cloudflare message.

• 
  Humoud Almunawer حمود المناور (@homoudalmonawer) reported 1 hour ago

  Cloudflare just shipped emergency firewall rules for two critical WordPress bugs. One is unauthenticated remote code execution: no login needed, an attacker can run code on your site. If you run WordPress, act today. The fix 🧵

• 
  Crypto Safe (@poptyedev) reported 1 hour ago

  @the_smart_ape Everything is correct except for the part about Cloudflare as far as I know, the Cloudflare account was completely blocked and he no longer had access. Second point: Amun would never have used GoDaddy as a registrar, that other domain was registered by someone else. Other than that, I agree with your version of events.