Cloudflare status: hosting issues and outage reports

Problems in the last 24 hours

The graph below depicts the number of Cloudflare reports received over the last 24 hours by time of day. When the number of reports exceeds the baseline, represented by the red line, an outage is determined.

Most Reported Problems

The following are the most recent problems reported by Cloudflare users through our website.

• Cloud Services (32%)
• Domains (32%)
• Web Tools (14%)
• Hosting (14%)
• E-mail (7%)

Live Outage Map

The most recent Cloudflare outage reports came from the following cities:

City	Problem Type	Report Time
Paris	Cloud Services	24 hours ago
New York City	Hosting	4 days ago
Manchester	Domains	24 days ago
Angers	Cloud Services	1 month ago
London	Domains	1 month ago
Noida	Hosting	2 months ago

Full Outage Map

Community Discussion

Tips? Frustrations? Share them here. Useful comments include a description of the problem, city and postal code.

Beware of "support numbers" or "recovery" accounts that might be posted below. Make sure to report and downvote those comments. Avoid posting your personal information.

Cloudflare Issues Reports

Latest outage, problems and issue reports in social media:

• 
  Unofficial Washington State Wildfire Aware (@Wa_fire_watch) reported 2 minutes ago

  @leeshomii That would be because Cloudflare hosting is down. Not on Canvas end.

• 
  SecureChap (@SecureChap) reported 2 minutes ago

  Proofpoint researcher Rachel Rabin published a technique that turns Microsoft Entra ID error codes into a credential oracle. An attacker posts to the /common/oauth2/token endpoint using the ROPC flow and a random UUIDv4 client_id that matches no registered application. Entra replies with AADSTS50034 for nonexistent usernames, AADSTS50126 for valid usernames with bad passwords, and AADSTS700016 when both username and password are correct. The sign-in log records only the GUID; the application name field stays empty and no successful sign-in event is created. Campaign UNK_pyreq2323 ran from January through March 2026 using python-requests/2.32.3 from AWS. It generated 700,000+ client_ids by mutating the last six digits of the Exchange Online first-party app ID and tested over one million accounts across roughly 4,000 tenants, locking out 28 percent of targets. A second campaign, UNK_OutFlareAZ, began in December 2025 via Cloudflare and enumerated alphabetically from wordlists using 3.7 million fully random UUIDv4 client_ids against two million users. Two unrelated actors reached the same client_id spoofing method independently. The same observable behavior that powers normal authentication also supplies the validation signal.

• 
  Aurum (@Aurum8880) reported 2 minutes ago

  HTTP has carried a payment error code since 1991. ethereum:0x4a220e6096b25eadb88358cb44068a3248254675 ripple:native stellar:native Status 402: Payment Required, written into the protocol as a placeholder and never implemented. x402 Foundation launched this week with 40 member organizations including Stripe, AWS, and Cloudflare. The protocol activates that dormant code using stablecoin settlement Turning any HTTP request into a payable endpoint — no setup, no intermediaries required. 75 million transactions processed in the last 30 days. In 1991 there was no settlement asset that could operate at the speed of a network request. Stablecoins provided that, and x402 is the infrastructure that follows.

• 
  U N C L E BIGBAY ✨ (@unclebigbay143) reported 3 minutes ago

  Today's Engineering Concept: '𝗥𝗮𝘁𝗲 𝗟𝗶𝗺𝗶𝘁𝗶𝗻𝗴' 𝗪𝗵𝗮𝘁 𝗶𝘀 𝗥𝗮𝘁𝗲 𝗟𝗶𝗺𝗶𝘁𝗶𝗻𝗴? Rate limiting is the practice of restricting how many requests a user or system can make within a specific period. 𝗪𝗵𝘆 𝗱𝗼𝗲𝘀 𝗶𝘁 𝗺𝗮𝘁𝘁𝗲𝗿? Without rate limiting, a single user or malicious bot could overwhelm your server, degrade performance, or abuse your APIs. 𝗥𝗲𝗮𝗹-𝘄𝗼𝗿𝗹𝗱 𝗲𝘅𝗮𝗺𝗽𝗹𝗲 Imagine a login endpoint with no rate limit. An attacker could attempt thousands of password combinations every minute. A simple rate limit can significantly reduce the effectiveness of brute-force attacks. 𝗛𝗼𝘄 𝗶𝘀 𝗶𝘁 𝗶𝗺𝗽𝗹𝗲𝗺𝗲𝗻𝘁𝗲𝗱? Most systems track requests by IP address, user account, or API key. Once a predefined limit is reached, the server temporarily rejects additional requests, often with an HTTP 429 (Too Many Requests) response. 𝗪𝗵𝗲𝗿𝗲 𝗶𝘀 𝗶𝘁 𝘂𝘀𝗲𝗱? • 𝗚𝗶𝘁𝗛𝘂𝗯: GitHub's REST API limits how many requests you can make per hour to prevent abuse and ensure fair usage for everyone. • 𝗦𝘁𝗿𝗶𝗽𝗲: Every payment request can include an Idempotency-Key, ensuring a customer isn't charged twice if the same payment request is retried. • 𝗢𝗽𝗲𝗻𝗔𝗜: The API enforces rate limits on requests and tokens per minute, helping maintain reliability and preventing a single application from overwhelming the service. • 𝗫 (𝗳𝗼𝗿𝗺𝗲𝗿𝗹𝘆 𝗧𝘄𝗶𝘁𝘁𝗲𝗿): X limits actions such as following many accounts, liking posts, posting, or sending DMs within a short period to reduce spam and bot activity. • 𝗖𝗹𝗼𝘂𝗱𝗳𝗹𝗮𝗿𝗲: Cloudflare lets website owners configure rules like "block or challenge any IP that makes more than 100 requests in a minute" to protect against abuse and DDoS attacks. ...and almost every public API uses rate limiting to protect its infrastructure, ensure fair usage, and maintain service availability. 𝗧𝗵𝗲 𝘁𝗮𝗸𝗲𝗮𝘄𝗮𝘆 A reliable system doesn't just answer requests. It also knows when to say "not now. It's too many from YOU."

• 
  Rahul K (@rknkhanna) reported 8 minutes ago

  you mean 3 people are trying to cancel cloudflare?

• 
  Hot Aisle (@HotAisle) reported 13 minutes ago

  @CherryJimbo @Cloudflare @CloudflareDev wish they'd move off salesforce for their support system...

• 
  Christopher Molin (@Chrimle) reported 14 minutes ago

  @KentonVarda No, no human would ever imagine writing the crazy bugs that AI hallucinates. There is no thought-pattern, and the feedback is a waste of time - because the "author" won't learn anything... The whole industry has code-review, did Cloudflare pick that up recently, or...? Would explain the recent issues...

• 
  Will Stewart (@NorthflankWill) reported 15 minutes ago

  @AjaySohmshetty @Cloudflare @andrewk17 always a poor experience with Cloudflare. dw they'll spend all the time tweeting in their echo chamber instead

• 
  大黑郭 (@brucewok88) reported 17 minutes ago

  I spent hours trying to fix a Cloudflare Worker routing and caching issue with Claude Code and kept going in circles. I switched to GPT-5.6 Sol in Codex, and it found the root cause, updated the right code, and got everything working in minutes. Fast, simple, and impressive.

• 
  Kimera Royal (@KimeraRoyal) reported 21 minutes ago

  @TodePond gen Z is trying to cancel cloudflare? sorry, gen Z is trying to *cancel* cloudflare?

• 
  Ethan Walker (@maria6186551590) reported 21 minutes ago

  Follow me and I’ll help you cut through market noise and focus on the stocks with real growth potential. $SNOW — Snowflake — Don’t buy $NET — Cloudflare — Don’t buy $ZS — Zscaler — Don’t buy $NOW — ServiceNow — Buy at $92-$99 $DDOG — Datadog — Buy at $242-$249 $VEEV — Veeva Systems — Buy at $183-$188 $SAP — SAP — Buy at $144-$154 $CRM — Salesforce — Buy at $156-$164

• 
  Nick Ocier (@NickOcier76812) reported 22 minutes ago

  @Reelviews hey james. long time reader. cloudflare blocked me from accessing your website when i opened reelviews in my browser. cloudflare ray id is: a1c781881c55585b. any help is appreciated. thank you.

• 
  W V R 👊🏼🦾 (@WVROfficial) reported 22 minutes ago

  I had to make some changes today and it costed me a MONTH of Codex Usage! I think it’s worth it for me to talk about it - make sure this doesn’t become you!!! So, I’m a startup founder, just like all of you guys!! We do websites as one of our many services - like a lot of the people here on TPOT where tech lives. Why wouldn’t we? It’s easy, we can outclass competition on speed, much more. Anyway - that’s not the point. The point is that i serve my sites with a wrapper that gets served over my host. That host uses ESBuild. To ship stuff that won’t compile on ES Build, and on occasion just for like more complex websites like 3D sites or heavy SEO sites with a lot of files and assets - i use a CDN. Works great, totally fine. But I realized today I had a client site’s files stored on an R2 bucket that was on the client’s domain. In this case the big issue with that is my own IP! We make the content for them, do their SEO, their communications, and more - and i very stupidly was serving everything from a CDN that was on domains I don’t own and control via my Cloudflare. In human terms that means my client could say “**** you” tomorrow and walk away with the extremely robust SEO machine I built them. So I had to spend almost a half a month worth of codex credits today to fix it ASAP. All I can say is that I won’t make that mistake again - even though it never hurt my business - it could have! And that matters.

• 
  nikshep (@nikshepsvn) reported 23 minutes ago

  paid dex for $yowl, feel free to fact check all the information on the site if you can't access it for some reason, likely cloudflare geoblocking so use a vpn while i fix it

• 
  Bold Fugu 🇮🇱 (@bold_fugu) reported 23 minutes ago

  @PanBall343548 There is a similar option with NetBird, but the setup would be a bit finicky. Basically, it is the same as Tailscale with your own control plane on Headscale. However, you will need to expose Headscale to the internet, and you might run into problems exposing it via Cloudflare.

• 
  Delali (@delali) reported 31 minutes ago

  @DanielSmidstrup Even Vercel, Cloudflare, et al have challenges. For us founders, it never ceases. But I get your point. Let's keep pushing…

• 
  Ice_Cre4m_Arteeeee (@Ice_Cre4m_Art) reported 34 minutes ago

  @V1kov_ I assume the problem is with the Internet service provider/router but not sure I have problems with ds too (vc didnt work and other) on my wifi at home but i use cloudflare WARP or any other VPN and that kinda help

• 
  BTC Live (@btcliveco) reported 34 minutes ago

  JUST IN: 🤖 Cloudflare adopts the x402 protocol, enabling websites to charge AI agents directly for data access via crypto payments. Bitcoin and Lightning Network are positioned as primary rails. Machine-to-machine payments just found their native money.

• 
  OnlyAWassie (@onlyawassie) reported 39 minutes ago

  @CryptoTomYT @vladtenev Lockin? builders getting Problems because of the copyrights from Rh cloudflare shutting them off if they get reported how you wanna Build something on this chain

• 
  The Don (@TheDon4242) reported 41 minutes ago

  @TeamViewer_help Thnx. This is not new to me. Problem /w reCAPTCHA is that if my environment is out of norm, it will keep me stuck in the loop for 10-15 tries before letting me go through. A pain for paid TeamViewer customer. Consider something sensible like hCaptcha or Cloudflare turnstile?

• 
  Масе Дон (@macedonovski) reported 42 minutes ago

  free dns choice not logging open source (for all devices settings network dns set private copy paste from site) #libredns 2 url adresses of 2 links of choice with or without ads - like adblock but cloudflare from an austrian security server.

• 
  Sachin Joshi (@Sachin_is_here) reported 44 minutes ago

  R2, Zero Trust and Cloudflare One followed the same playbook: Find an expensive or complex infrastructure category. Offer a simpler product on the existing network. Reduce setup friction. Then let customers adopt one service before expanding into others.

• 
  SAMARA (@thee_samara) reported 46 minutes ago

  It’s over for robinhood memes Noxa shutdown due to DDoS attack BEWARE! The main problem: website flagged by browsers its the biggest launchpad on Robinhood, responsible for 75% of memecoin launches. over $10 million in fees, the past week but Noxa dumped over 86%, from $11 to $1 Rumor is they might have intentionally done this, to buy at a lower price, and also their name servers aren’t set to cloudflare. The solution (kinda): here are alternatives @ >virtuals_io >ponsdotfamily >apedotstore >Launchhood >bowdotfun be safe out there and goodluck.

• 
  broisnees (@broisnees) reported 49 minutes ago

  Hey @Cloudflare we support d1!

• 
  Katewerk (@katewerk) reported 51 minutes ago

  Stay clear of @Cloudflare. Even their AI support bot cannot delete my credit card info from their database. It then provides a non-existent path to billing support that loops back to the start page. This is a purported tech company. JFC.

• 
  Duane Edwards (@duane_edwards) reported 52 minutes ago

  @Cloudflare @CloudflareHelp Is it entirely normal to get completely ghosted by Cloudflare's support for over a month after an issue with purchasing a domain through their registrar?

• 
  luna (@ImLunaHey) reported 52 minutes ago

  **** it.. building something self hostable on @Cloudflare using gpt 5.6 sol.

• 
  Rare Ledger (@rareledger) reported 53 minutes ago

  @Cloudflare Token theft is dangerous because it moves the attack past authentication: a stolen session cookie can replay an already-approved login, so a password change alone may not end the session. Revocation, short lifetimes and device checks help limit the window.

• 
  Ownership (@ownershipfm) reported 57 minutes ago

  "There was a campaign claiming I was some other individual arrested in Amsterdam, that this was a rug I was attempting, and the Polymarket odds started to collapse" Ranga, Co-founder of Solomon Labs, on the FUD campaign, the Cloudflare outage, and the wild final hours of the raise "Those three days leading up to the raise and conducting it were probably the most interesting days of my life. I didn't sleep for most of those days. Some of the previous projects had high amounts of commits, so I was expecting we'd get well over our target, but I didn't know to what degree. There was also this secondary market active during our raise, the Polymarket, betting on whether we'd raise anywhere from 10 million to 100 million" "The night before the raise closed, I got a DM from one of the Polymarket bettors saying they'd infiltrated the cabal orchestrating the FUD campaign, and that they'd be DDoS attacking and shutting down the site before the close. I brushed it off with a grain of salt, but messaged Kollan that someone's going to attempt this. Our target was 2 million and we had about 5 or 6 million in commits at that point" "The morning of, the largest Cloudflare outage occurred and the site went down. There were jokes about how the cabal took down the internet to take out the Solomon raise and win some Polymarket bets. It created a little FOMO, and then they started attacking the backup sites, which actually attracted more attention. Within a few hours prior to close, we jumped from about 15 million committed all the way to 100 million"

• 
  0xBunny (she/her 🏳️‍⚧️ ⚧️ ✝️) (@0xBunny) reported 59 minutes ago

  im migrating from my machine to cloudflare edge network. yes...im running a ******* mmorpg on cloudflares edge network for basically free