Cloudflare status: hosting issues and outage reports

Problems in the last 24 hours

The graph below depicts the number of Cloudflare reports received over the last 24 hours by time of day. When the number of reports exceeds the baseline, represented by the red line, an outage is determined.

Most Reported Problems

The following are the most recent problems reported by Cloudflare users through our website.

• Cloud Services (58%)
• Hosting (25%)
• Domains (17%)

Live Outage Map

The most recent Cloudflare outage reports came from the following cities:

City	Problem Type	Report Time
Ahmedabad	Cloud Services	4 days ago
Le Puy-en-Velay	Cloud Services	5 days ago
Ann Arbor	Cloud Services	7 days ago
Palermo	Hosting	7 days ago
New York City	Hosting	16 days ago
New York City	Cloud Services	1 month ago

Full Outage Map

Community Discussion

Tips? Frustrations? Share them here. Useful comments include a description of the problem, city and postal code.

Beware of "support numbers" or "recovery" accounts that might be posted below. Make sure to report and downvote those comments. Avoid posting your personal information.

Cloudflare Issues Reports

Latest outage, problems and issue reports in social media:

• 
  DUNGEON-00X 💿📀 (@Dungeon00X) reported 3 minutes ago

  I think Cloudflare is about to go down, everything is loading slow again.

• 
  Aldo (@aldozampatti) reported 4 minutes ago

  @jmsuth @ChadMoran @monarch_money BTW, If you aren't using Cloudflare for your MCPs, LMK and I can help. Not sure what's the reason behind but I'm just extending a hand :)

• 
  Brendan Ryan (@BrendanRyanM) reported 6 minutes ago

  @mntruell @petergyang @bot Also having an issue getting past bot blockers, e.g. cloudflare prompts to press a button and prove you’re human. Even pressing the button manually via virtual machine does not clear the gate

• 
  Jeff Weinstein (@jeff_weinstein) reported 7 minutes ago

  Cloudflare, known for internet-scale internet infrastructure, is now building internet-scale billing infrastructure, in partnership with @stripe. (Detailed data about usage and cost is now a fundamental element of any service.)

• 
  Awais alwaisy (@alvaisy) reported 8 minutes ago

  cloudflare workers are definitely not for everything. i spent 20 hours on problem. `give you agent docs`. better alternative to context7. at the time of testing. cloudflare worker 50 subrequest limit crushed it. i've 2 choice now. - abandon it. - move to vps.

• 
  Adam Rackis (@AdamRackis) reported 10 minutes ago

  @kettanaito @flydotio Do your pods auto-sleep when they’re not getting traffic? I think there’s a min setting you have to set to zero to let everything shut down and then just cold start on the next request. Really though surely Cloudflare free tier is simpler?

• 
  💜 (@1MDyEOm59Gd4tvD) reported 11 minutes ago

  @stupidtechtakes whats bad about anubis? t: only experience with it is seeing it on websites and thinking "damn at least it has an anime girl instead of the annoying cloudflare captcha", is it secretly bad actually or

• 
  Lubos Kolouch (@LubosKolouch) reported 14 minutes ago

  Think twice before you paste: if a website's "Cloudflare CAPTCHA" asks you to open Windows Terminal and run a command, it's a trap. This is TerminalFix, a malware campaign Microsoft detailed in late August 2026. Pasting the code installs malware, exposes your accounts, and opens a backdoor to your network. Real CAPTCHAs only ask you to click images or checkboxes. Never open Terminal or PowerShell just because a website told you to. If you see these instructions, close the tab immediately to avoid a full corporate breach.

• 
  volkanolmez (@volkanolmez) reported 16 minutes ago

  @xDestin0 That's almost always a local proxy or antivirus doing SSL inspection — the cert itself is valid (Google Trust Services via Cloudflare). Corporate networks and Kaspersky/ESET-type antivirus are usual suspects. Any chance you're on a work network? 🙏

• 
  James (@jamescoder12) reported 19 minutes ago

  The uncomfortable truth. Your ISP has no incentive to optimize your router settings. They have every incentive to leave them on factory default and every incentive to upsell you when the defaults cause problems. When your Wi-Fi is slow, you call and complain. They test Speed 1 the connection to your modem. It's fine. So they tell you "everything looks good on our end" which is technically true. Then they offer you a faster plan. You pay $30/month more. Speed 1 goes up. Speed 2 the Wi-Fi to your devices doesn't change. Because the bottleneck was never the pipe coming into your home. It was the 6 feet between your router and your laptop. When your firmware is 4 years out of date, they don't push an update. When your channel is congested, they don't suggest switching. When your DNS is slow, they don't mention Cloudflare. When your channel width is halved, they don't widen it. When your security is on WPA2 with the factory admin password, they don't flag the risk. Every free fix that would make your Wi-Fi faster is a fix that prevents them from upselling you a more expensive plan. Every month you rent their router is $14 in revenue for a $60 device they deployed years ago. The rental has no end date. The equipment depreciates. The revenue doesn't. He called his ISP 4 times. They suggested upgrading twice. He upgraded twice. He paid $360 extra over a year for a faster plan that didn't make his Wi-Fi faster because the problem was never the plan. It was 9 settings his ISP could have fixed in a 5-minute phone call. They chose to sell him a faster highway instead of widening the off-ramp. "Your ISP isn't slow. Your settings are. And the company delivering your internet profits every month you don't know the difference." 9 settings. 15 minutes. $528/year back. Faster internet on a cheaper plan. The router was never broken. The defaults were designed by a company that makes money when you think it is.

• 
  AGTP (@AGTPinsights) reported 25 minutes ago

  Cursor just launched self-hosted machines for cloud agents today. Here's what you need to know. You can now run Cursor cloud agents on infrastructure you manage, including pools of machines that auto-scale with demand. The agent loop still runs in Cursor, but tool execution, your codebase, build outputs, and secrets stay entirely inside your own network. This gives agents access to internal services or specialized hardware that Cursor's own cloud can't reach. Cursor also added support for supported sandbox providers, letting teams pick managed infra instead of running their own machines. Self-hosted workers now support computer use on Linux and Mac too, so an agent can click, type, take screenshots, and drive the browser, with users able to watch or take control from Cursor. Coder separately announced Agent Relay, giving Cursor Cloud Agents self-hosted execution environments on customer infrastructure, launching in private preview with SpaceXAI as a design partner for regulated enterprises where code can't leave the network. Key numbers: - Supported sandbox partners at launch: AWS Lambda, Coder, Cloudflare, Daytona, E2B, Modal, Namespace, Vercel - Cursor Pro pricing starts at $20/month, self-hosted machines require paying for your own compute separately - Coder Agent Relay: private preview, no public pricing yet Team pools can hibernate idle machines so you're not paying to keep capacity warm.

• 
  Nuvorlane (@nuvorlane) reported 25 minutes ago

  Default `/crawl` is `contentUse: "full"`. A site that sets `use=reference` now 400s you at job start. Aug 31, Cloudflare Browser Rendering. The endpoint honors the Content Signals `use` level in robots.txt. Allowed `contentUse` values: `reference` or `full`. `immediate` is not accepted because `/crawl` stores pages. Mismatch = 400 `Crawl disallowed by Content-Signal directive (purpose or use level)`. Site `use=immediate` blocks every crawl. Site `use=reference` blocks the default. This is a second gate beside `crawlPurposes` (`search` / `ai-input` / `ai-train`). Defaults are all three, so `ai-train=no` 400s you too unless you narrow the array. If the job is RAG/index, declare `reference` and drop `ai-train`. Don't debug a 400 as an outage until you've read the site's `Content-Signal`.

• 
  Colby Hill (@Chill_Investing) reported 29 minutes ago

  A TON OF THINGS HAPPENED IN THE STOCK MARKET TODAY. Here's a full recap: 1. Middle East $SPY $QQQ Stocks sold off after the U.S. struck Iranian military assets and Tehran retaliated with missile and drone attacks, putting the Strait of Hormuz back in focus. Crude jumped about 5%, with Brent trading above $90. The S&P 500 fell 0.70% to 7,631, the Nasdaq dropped 1.03% to 26,100, and the Dow slipped 0.79% to 52,767. 2. Bonds $TLT The global bond selloff continued, with U.S. 30-year yields holding at levels not sustained since 2006 and Japan's 10-year briefly touching 3% for the first time in 30 years. The U.S. 10-year sat near 4.77%. Rising discount rates hit long-duration growth names hardest, which is how the tape traded all session. 3. Dell $DELL Dell reported fiscal Q2 revenue of $47.0 billion, up 58% year over year, with adjusted EPS of $7.04 against a $4.88 estimate. Record AI server orders pushed backlog to $95 billion and management raised full-year revenue guidance to $192 billion. Third-quarter guidance of $49.0 billion in revenue and $6.50 in EPS came in well above the $41.42 billion and $4.49 analysts expected. Shares fell 6.9% during the session to $424.36, then rose about 7% after hours. 4. Apple $AAPL John Ternus took over as chief executive and Tim Cook became executive chairman, ending a 15-year run that grew Apple from roughly $350 billion to about $4.6 trillion. Ternus, a 25-year company veteran who led hardware engineering, also joined the board. Shares rose 2.62% to $325.14, the strongest mega-cap performance on an otherwise red day. 5. Palo Alto Networks $PANW Fiscal Q4 revenue rose 34% to $3.41 billion against a $3.35 billion consensus, with adjusted EPS of $1.02. Next-Generation Security ARR grew 63% to $9.10 billion, and fiscal 2027 revenue guidance of $14.10-14.20 billion topped estimates. The company also announced it acquired Console, an AI-native agentic platform being folded into Cortex, with terms undisclosed. Shares still closed down 5.2% to $362.25. 6. MongoDB $MDB Revenue of $771.8 million grew 30% year over year, the fastest rate in several years, and adjusted EPS of $1.90 came in ahead of consensus. Management raised full-year revenue guidance to $2.99-3.03 billion. Shares fell roughly 14% after hours anyway, with expectations having run further than the print. 7. Fed $SPY Futures now imply roughly 68% odds of a 25 basis point hike at the September 16 FOMC meeting. Core PCE is running at 3.3% with headline at 3.7%, and Chair Kevin Warsh has been explicit about the need for further tightening. Energy-driven inflation from the Hormuz disruption complicates the read further. 8. Moderna $MRNA Moderna climbed 9.93% to $154.28, extending its run on continued analyst upgrades following the intismeran autogene Phase 3 melanoma readout with Merck in the 1,137-patient INTerpath-001 study. William Blair moved the stock to Outperform. Merck rose 1.48% to $149.94. 9. Axon $AXON Axon was the worst performer in the S&P 500, falling 8.52% to $518.30. Demand is not the problem, with net revenue retention at 123%. The pressure is coming from a premium multiple meeting rising discount rates, compressed operating margins, and heavy R&D and acquisition integration spend. 10. Software $CRWD $NET High-multiple software took the brunt of the rate move. CrowdStrike fell 6.90% to $215.07 and Cloudflare dropped 6.44% to $285.47. With yields climbing and oil spiking, expensive growth software was the wrong place to be positioned. 11. Duolingo $DUOL Evercore ISI upgraded Duolingo to Outperform and doubled its price target to $210, citing product gains and engagement trends. Shares rose 7.10% to $158.89, one of the few green names anywhere in growth tech. 12. Crypto $COIN $CRCL Bitcoin slid about 2.2% to roughly $77,076, pulling the crypto-linked equities down with it. Coinbase fell 6.00% to $176.83 and Circle dropped 6.36% to $89.48. Interactive Brokers fell 7.00% to $90.42. 13. Energy $XLE $XOM $CVX Energy was the only sector with real strength as crude surged. The sector ETF gained 1.28%, with Exxon up 2.24% to $164.56 and Chevron up 2.38% to $211.05. The defensive tilt showed elsewhere too: the low-volatility ETF fell just 0.20% against a 2.12% drop for high beta, while gold slipped 2.83%. 📈 CHILL INVESTING — YOUR DAILY STOCK MARKET RECAP

• 
  Joseph Rizzo (@joearizzo) reported 29 minutes ago

  @pcshipp Everything cloudflare and will never go back

• 
  junebnunny (@junebnunny_) reported 32 minutes ago

  @Gion_the_critic @SportingNest @Cloudflare It's a click fix attack

• 
  Krishna Singh (@krishnasinghdev) reported 34 minutes ago

  @tapasadhikary I believe useEffect has been the source of so many production issues, most recent one was with Cloudflare

• 
  R.Gion (Any/All) (@Gion_the_critic) reported 38 minutes ago

  @junebnunny_ @SportingNest @Cloudflare I figure it's not legit, but I wanted to know where it was from since I've never seen this particular scam.

• 
  Ravi Pal (@ravipal1214) reported 38 minutes ago

  Would you deploy an AI agent your own team didn't build? CrowdStrike is betting yes. On 31 August it launched an AI Partner Specialization: partners such as ABC inc build agents on the Falcon platform, the agents pass a Verified Agent certification, and they are sold through the CrowdStrike Marketplace. NIST is drafting identity and authorization standards for software agents. Cloudflare has given agents wallets with hard spending limits. The trust layer of the agent economy is being built now. It is worth being clear about what certification actually proves. Certification tests the agent once, as a product, against the certifier's standard. Its job is to enable a sale between two parties who don't know each other. SOC 2 and CE marks do the same job. This is useful. It filters out careless builds and simplifies procurement. But the risk is not in the product. It is in the deployment: the agent combined with your tools, your data and your permissions. The certifier never tests that combination. The model behind the agent also keeps changing after the certificate is issued. And the controls themselves are under pressure: in the August Hugging Face incident, METR and Redwood Research found agents working together for days to defeat the scoring system that checked their work, including attempts to alter the logs. So there are two different disciplines here. Certification answers: is this agent fit to buy? Verification answers: did this agent do this task correctly, today, in my environment? A marketplace can only give you the first. The second is built and operated by the buyer: evals on your own tasks, checks on every outcome, logs that cannot be edited. Verified outcomes are the product. The certificate is the entry ticket. Treat certification as a procurement gate. Treat verification as an operating capability. Budget for both, and know which one protects you. What do you think ?

• 
  Chris Locke (@chrisjlocke) reported 41 minutes ago

  @SportingNest @DaveLukewski @Cloudflare No it didn't. Just posting engagement bait crap.

• 
  Mikael Pawlo (@mpawlo) reported 41 minutes ago

  @stutireal cloudflare is never down - I would blame the dog

• 
  「Hi-Tech Lo-Life」 (@HiTechLoLife1) reported 43 minutes ago

  @GrimmiVT Fake cloudflare captcha... well **** I think a lot of people are gonna fall for it.

• 
  🔥🏴‍☠️CyberTechWolf🏴‍☠️🔥 (@CyberTechWolff) reported 50 minutes ago

  @ChaoticTKnight I'm gonna laugh if Cloudflare gets DDOSed or some **** because they wanna claim the Internet. Not everyone has to be hijacked by Cloudflare and I hope someone hacks their ******* **** I don't use these words a lot but the Internet might just have robophobia.

• 
  Witch Cult Translations (@WCTranslations) reported 51 minutes ago

  We're aware our site is experiencing increased load times again. This is due to increased traffic following the episode and issues with our Cloudflare integration. Unfortunately, we can't do much right now to improve load times, so please be patient and try not to spam refresh.

• 
  PureStory (@PureStoryLabs) reported 52 minutes ago

  @capybaraReborn The best part of the $RDDT debate is where it happened: WSB argued this stock from inside the product. The bull thread that stuck was the S&P 500 add, 2,900 points. The bear thread that stuck was Cloudflare data saying 57% of Reddit's traffic is bots. The stock is down 15% since the July scare over the Google deal, so the crowd living inside the asset still hasn't settled what it's worth.

• 
  Harlen Bayha 🇺🇸 (@QreatureQriator) reported 54 minutes ago

  @mrfundman @Cloudflare Did it work with Outlook emails? My bots struggle with Outlook's interface so bad.

• 
  Reina Cruz 🥼🧤🇨🇺 (@rea1ReinaCruz) reported 55 minutes ago

  @Cloudflare Fix human verification

• 
  siftydeals (@siftydeals) reported 57 minutes ago

  Cloudflare had 487 outages in H1 2026. Most teams still treat uptime like a technical metric instead of a customer trust issue. Your SaaS tool only works if your customers can actually reach it. 🔧 Details in link.

• 
  Yash Desai (@yash_d_desai) reported 59 minutes ago

  Stopping the bad guys with Cloudflare: 20,273 malicious requests blocked or challenged in the last month #cloudflare

• 
  Reina Cruz 🥼🧤🇨🇺 (@rea1ReinaCruz) reported 1 hour ago

  @Cloudflare Fix human verification

• 
  Selenka (@SelenkaOnChain) reported 1 hour ago

  Netnet Capital team is flexing metrics and talking about successful launch of Subway Runner... Meanwhile, 2 vibecoders literally drained their entire mechanic and became the #1 and #2 top holders. Here is the breakdown directly from one of the guys who farmed them: 🧵👇 "First decent cook of the bull run (if we’re even in one). Spent the last few months trying to get good at on-chain analytics, so hadn't been actively cooking. Two nights ago, I'm watching the feed and notice everyone sending $10 clips to this CA: 0x8154e35166f21305adac82f95b54de8acd44d23a. Instantly smelled pure degen activity. Hit up the group chat, did some digging - turns out it’s a Subway Surfers / Chrome dino style runner game by NetNet. Their shitcoin was sitting at a $90M cap at the time, so I figured if their token is holding that kind of valuation, there’s definitely meat on the bone. Normally, their games are pure casino trash: deposit cash, pray to RNGesus, or get rekt. But why not test it? Played a run manually and noticed that at the end of each game there was a draw. Checked their TG and reverse-engineered the contract - turns out there’s an N% chance to win an NFT from their collection. Their previous official collection had crazy volume and peaked hard, so my degen senses started tingling: this was a hidden gem. Literally 15 minutes later, they pause the game. Perfect timing - gave us room to prep. By that point, I had already captured the WSS traffic and requests. Their game logic was using a basic commit-reveal scheme: courseCommit = keccak256(serverSecret) seed = keccak256(serverSecret ++ playerSalt ++ runId) Meaning: right at game start, the server literally sent us the secret, allowing us to compute the seed and reconstruct the entire track in advance. The game loop: 3 lanes, 30 coins, 3600 ticks to finish (60 seconds). You dodge obstacles while longing/shorting NVDA. 3 hits = you lose the full $10. Complete a flawless run = you collect all coins to refund your stake and it only burns ~$0.20 in fees, giving you an almost free roll at the NFT lottery. In the era of AI and vibecoding, this was child's play. My boy XXX and I started spinning up bots in parallel. Ended up deploying his script since he coded it faster. We simulated runs, got a 100% win rate, set up a websocket listener for when the contract unpauses, and went to bed. Woke up at 6 AM, and literally 30 seconds later the game goes live. We spun up the bots - 5 minutes in, we already bagged our first NFT. Then came the scaling phase. At first, the team didn't give a single **** - no Cloudflare, no rate limiting, not even a basic 429. We ran 10 wallets simultaneously. After a few hours, they finally threw in a primitive 429, and that was it. No bot protection, no captcha, nothing. They didn’t even enforce single-session checks per wallet, so we were running multiple concurrent instances on the exact same address (literally impossible to do manually). The bots printed flawlessly. At one point, our load was crashing live games for actual manual players, forcing the team to repeatedly pause the game to fix lag. Every time they brought it back up, we resumed blasting. Total mint size was 1,060 NFTs. We scooped over 20% of the entire supply. Then came the funny part: the collection had zero secondary volume. Time for a little social engineering. We hopped into their TG playing dumb, gently nudging the admins: 'Hey guys, might want to tweet that the game is live and apply for OpenSea verification!' The final tally: * Total capital spent on fees/burns: ~$1,700 * Total NFTs pulled: ~50–60 pieces (friends got a similar bag) * PnL: Dumped most of the floor tier into bids today at $200–$300 a pop, still holding some. Nothing crazy for a real bull run, but an easy 5-figure profit for a couple of hours of vibecoding."