Cloudflare status: hosting issues and outage reports
No problems detected
If you are having issues, please submit a report below.
Cloudflare is a company that provides DDoS mitigation, content delivery network (CDN) services, security and distributed DNS services. Cloudflare's services sit between the visitor and the Cloudflare user's hosting provider, acting as a reverse proxy for websites.
Problems in the last 24 hours
The graph below depicts the number of Cloudflare reports received over the last 24 hours by time of day. When the number of reports exceeds the baseline, represented by the red line, an outage is determined.
At the moment, we haven't detected any problems at Cloudflare. Are you experiencing issues or an outage? Leave a message in the comments section!
Most Reported Problems
The following are the most recent problems reported by Cloudflare users through our website.
- Cloud Services (46%)
- Domains (23%)
- Hosting (15%)
- E-mail (8%)
- Web Tools (8%)
Live Outage Map
The most recent Cloudflare outage reports came from the following cities:
| City | Problem Type | Report Time |
|---|---|---|
|
|
Cloud Services | 19 days ago |
|
|
Cloud Services | 20 days ago |
|
|
Cloud Services | 1 month ago |
|
|
Hosting | 1 month ago |
|
|
Domains | 2 months ago |
|
|
Cloud Services | 2 months ago |
Community Discussion
Tips? Frustrations? Share them here. Useful comments include a description of the problem, city and postal code.
Beware of "support numbers" or "recovery" accounts that might be posted below. Make sure to report and downvote those comments. Avoid posting your personal information.
Cloudflare Issues Reports
Latest outage, problems and issue reports in social media:
-
Joseph Miclaus (@josephmiclaus) reported@Cyberlane That's what I was thinking. One VPS, optionally some Cloudflare services in front of it. Are you using the $4/mo droplet for your experiment server? Do you feel that's enough to run a few small projects with no issues?
-
Bob Tong (@bob80924) reported@Cloudflare @awscloud genuinely curious how tax/vat treatment works when your buyer is an anonymous agent wallet with no jurisdiction attached to it, feels like the accounting problem is way behind the payment rail problem right now
-
Dusyant kumar (@Dusyantkmr) reportedDay 5: Building in Public 🙌🏻 If you want to start a startup in 2026, the cost of building has never been lower. Claude = coding ($20/mo) GPT API = AI features (~$20/mo) Supabase = backend (Free) Vercel = deployment (Free) Namecheap = domain (~$12/yr) Stripe/Dodopayments = payments (2.9%/transaction) GitHub = version control (Free) Resend = emails (Free) ProductBridge = feedback (Free) Clerk = auth (Free) Cloudflare = DNS (Free) PostHog = analytics (Free) Sentry = error tracking (Free) Upstash = Redis (Free) Pinecone = vector DB (Free) You can get surprisingly far with ~$40/month.
-
Utsav Patel 🇮🇳 (@mr_utsav_patel) reported@Cloudflare Same card is working with stripe link for anthropic and I tried with 2 different bank cards and both are getting declined, if possible please add support for UPI for your Indian customers until this issue is resolved
-
*yo (blue tick) (@roramora0) reported@Cloudflare does a neat trick to make its AI chat much harder to abuse. Too bad GLM 5.3 is much smarter.
-
ctoxyz (@_ctoxyz) reported@cloudflare literally just PREVENTED that company from getting a SALE from me. nice work **** HEADS
-
Simon Høiberg (@SimonHoiberg) reported@infomiho Exactly. Though worth noting that Hetzner has its own DDoS protection in place as well, just not as sophisticated as Cloudflare. But yes, if you expect recurring, frequent heavy DDoS attacks on your servers, go with Cloudflare, I agree. Most products won't really have this issue though.
-
edwin 🐸 (@pescatios) reportedthe honest starting point i see with all this is that scraping can’t structurally be blocked right now. robots.txt and no-ai tags are basically just requests, not walls, and thus they only bind crawlers that choose to listen. glaze/nightshade only work against the specific architectures they were built for. and even if your own site is a fortress it doesn’t matter much when your work is sitting mirrored on instagram, pinterest, and aggregators you don’t control. so “blocking” at internet scale really just means three achievable things: raising the cost, changing defaults, and creating consequences the defaults part is actually shifting right now: cloudflare, via their monetization gateway, is going to start blocking ai training bots by default this september + charging crawlers per fetch, with machine-payment rails behind it (x402). free scraping is genuinely ending for the compliant majority of crawlers. the catch, however, is that those payments go to whoever owns the domain, not the artist whose work sits on it. and rogue scrapers like the ones that hit cara will just continue to ignore the whole system anyways. there’s also an emerging class of encrypted-by-default hosting where crawling is literally impossible and every view is keyed to an identity. doesn’t beat the screenshot problem, but it flips theft from free and anonymous to expensive and traceable, which is its own kind of consequence so the way i see it is that the effort is twofold. the legal one you’re pushing people towards (actual consequences), and building the economic layer alongside it, where consent, credit, and payment travel with the work itself so that paying artists becomes cheaper and easier than stealing from them. so not about accepting the theft, but making the legit path the most profitable one
-
Reina Cruz 🥼🧤🇨🇺 (@rea1ReinaCruz) reported@Cloudflare Please, fix human verification
-
Attick (@Attickk) reported@imagesaicouldnt blame her for cloudflare being down
-
Ragnawr.btc 🌍☮️ (@findingragnawr) reportedIf you’re building with AI and you use all the best free services, you may have been noticing a trend of late, or I have enough that I’ll tweet about it to the ether. Agent consumption outscales human interest. That’s basically the issue. Your free versions won’t remain free much longer. Supabase? Pro version. Cloudflare? X402 paywall on hosted pages. Maybe I’m wrong but I can say that the era of services of services that make other services easier to use is upon us. Convenience era. Pay for it.
-
Uncomfortable Brain (@uncomfybrain) reported@R1bYamnayaW @arctotherium42 Too bad they control captcha and through that cloudflare and through that accessibility to anything they want on the internet. Their business is not search engines. If you want to break them, ban selling data without specific consent and tax advertising revenue into the ground.
-
The Problem Solving Designer (@JohannuDesign) reported@juiceboy_of_abj This almost drove me nuts till I tried a different network and I was like WTF... Funny thing is it's not only cloudflare
-
JamesP (@jamesapyrich) reported@ric_rac Rumble Studio is down for us as well (freedomain) and our community page on Locals is also down (gateway error reported by CloudFlare).
-
PangeaVPN (@PangeaVPN) reported@HorluwarhArmani @SirAlexanderrr if it's the ISP breaking that page rather than Cloudflare, you need something the network can't pick out. Pangea tries five stealth transports in order, VLESS+Reality first, so one being blocked isn't the end of it. windows/mac, ios via shadowrocket. five days free.
-
WhiskyBone🌻🍅 (@Whisky_Bone) reported@DocStrangelove2 And yet Reddit is still up and backed by @Cloudflare but Kiwifarms isn’t despite not having anything close to as bad, just because a group of wealthy rapists told them not to.
-
Suede Labs (@AISUEDE) reported@Cloudflare We ran 38 buyer prompts across three engines against our own products and published the losses. Crawler access was the cheap fix. The expensive lesson: answers named entities with deep third-party records, not the best pages. Measurement first is the right call.
-
FLINT (@FLINTKYA) reportedSo the firewall blocked the attacker, and then an AI agent finished the attack for them? That is the security problem behind Ghostjacking, an AI agent hijacking technique demonstrated by Tenet Security across Cloudflare, Datadog, and Sentry. Ghostjacking is an attack in which adversaries poison the logs, alerts, telemetry, or other operational data AI agents consume. Instead of compromising the agent directly, the attacker manipulates information the agent already trusts, then relies on the agent’s legitimate permissions to complete the attack. In @tenetsecurity's Cloudflare demonstration, the malicious request was actually blocked. The attacker received a 403, exactly what you would expect from a functioning security control. But attacker-controlled data from that request entered telemetry that an AI coding agent later reviewed. The agent interpreted the poisoned data as trustworthy context and used its own authorized access to modify DNS records. Tenet reported the technique succeeded 9 out of 10 times against Claude Code in its tested configuration. In other words, the firewall worked. The trust model, not so much. How Ghostjacking works: 1. An attacker submits malicious input. 2. A security system blocks or records it. 3. The attacker-controlled content enters logs, alerts, or telemetry. 4. An AI agent consumes that data during a legitimate workflow. 5. The agent acts on the poisoned context using its real permissions. The Datadog and Sentry demonstrations push the idea further. Poisoned telemetry can lead agents toward code execution, credential exposure, infrastructure changes, and even agent-to-agent lateral movement, where one compromised decision influences another agent downstream. That creates a problem traditional IAM was never designed to solve. An AI agent can be properly authenticated, use valid credentials, operate within its authorized permissions, and still execute an attacker’s intent. That distinction matters to us as AI agents gain authority over payments, infrastructure, purchasing, customer accounts, and other real-world actions.
-
Splamei Ch.【 SplameiPlay 】 (@splamei) reportedYes I am reading the full Terms of Service and Privacy Policy to Cloudflare. Why do you ask? I'm not weird
-
Elijah 🌊 (@juiceboy_of_abj) reported@Ms_Ada6 Nahh is not network and cloudflare is not even the only one
-
Cyris (@sudo_overflow) reported@tadejk @Cloudflare That’s the plan, I want to really work on the monitoring side to identify spikes, problems etc
-
njoii.eth (@DanSFV) reportedBlackwell build update: Today I restored the watchdog layer and got production back to a fully healthy state. The watchdog now continuously checks: • Bridge • Runner A • Runner B • Cloudflare • duplicate processes / port conflicts And the important part: it already caught a real Runner B health failure, restarted it automatically, and returned the system to healthy without me touching anything. That’s exactly why I’m building this layer. A trading system shouldn’t depend on me noticing a service died. The infrastructure should detect the failure, recover, verify the state, and keep the rest of the system isolated. Current state: Bridge healthy Runner A healthy + flat Runner B healthy + flat Public webhook reachable Single listeners only Watchdog active Production is frozen now and I’m waiting for the next natural Volume Profile signal to validate the full entry + exit path. The goal is getting closer to what I want Blackwell to become: not just automated trading. Automated recovery too.
-
Ton (@ton_anywhere) reported@thunkoid @Cloudflare This! And I’m not even counting their open-source tools and support 👏
-
Anshu (@101xanshu) reportedDear @Cloudflare, hire me. I have a growing list of Wrangler issues on Windows/WSL that I'd very much like to fight professionally 😭
-
R𝐞𝐦𝐢 | C𝐲𝐛𝐞𝐫ɢʟᴛ (@cyber39glt) reportedMost likely an IP routing/peering or Cloudflare security issue. It doesn’t necessarily mean Airtel is blocking Cloudflare. The specific IP range Airtel assigns (sometimes through CGNAT/shared IPs) could be having issues reaching Cloudflare.
-
Wyatt Johnson (@wyattjoh) reported@rough__sea Have a private fork of celld adding support for durable Cloudflare Agents SDK and AI chat with isolated Code Mode execution. Think it's too big to merge into celld, but it's been fun experimenting with it!
-
Gneaus (@legibitiquas) reported@juiceboy_of_abj Not just cloudflare. There was a time Outlook looses connection when I switch to Airtel, but other sites work. I had to switch back to MTN, they have fixed that now. Airtel have serious DNS issues, I noticed I can't open some sites, gives me DNS error
-
Jonathan (@jonniefive) reportedI'm getting so much AI / bot traffic on my Shopify store that I have no idea what the conversion rate is anymore. I tried using @Cloudflare with O2O and AI Labyrinth, bot blocking and a bunch of WAF rules but the AI bots keep coming and inflating my session data. Anyone at @liam_at_shopify can help? Screenshot shows sessions today so far - I don't have a Chinese locale and don't ship to China.
-
Bukumzzy (@Bukumzzy001) reported@juiceboy_of_abj No lies bro Couldn't access my cloudflare while connected to this Airtel 5g till I switched back to my Normal phone network(Glo).. Didn't know it's an Airtel thing till It happened again while connected to my Airtel mifi 😭😭😭
-
Reina Cruz 🥼🧤🇨🇺 (@rea1ReinaCruz) reported@Cloudflare Please, fix human verification