Cloudflare Error 1006, 1007, 1008 and 1009: Access denied (IP or country banned)
“Access denied: The owner of this website has banned your IP address.” It sounds personal. Usually it is a rule written for someone else that happens to match the network you are on.
The four codes
| Code | Page says | What matched |
|---|---|---|
| 1006, 1007, 1008 | Access denied: your IP address has been banned | An owner rule blocking your IP or the range it is in |
| 1009 | Access denied: country or region banned | An owner rule blocking the country Cloudflare maps your IP to |
| 1020 | Access denied | A WAF or custom firewall rule (any field, not just IP) |
| 1010 | Banned based on your browser’s signature | Browser Integrity Check disliked the request headers |
Why it can hit innocent visitors
- Shared addresses. Mobile networks, offices, schools and hotels put many people behind one public IP. If someone else on it misbehaved and the owner blocked the address, you are blocked too.
- VPNs and proxies. Owners often block whole hosting or VPN ranges, because that is where automated abuse comes from.
- Wrong country. IP location databases are imperfect. A VPN exit, a travel SIM or a corporate network that routes through another country can trip a 1009 even when you are at home.
What a visitor can try
- Switch networks: mobile data instead of Wi-Fi, or the other way round. If the page loads, the block is on the address, not on you.
- Turn a VPN, proxy or “privacy relay” off, or choose an exit in the site’s own country.
- If you still need the site, contact the owner and give them the Ray ID and the time from the bottom of the error page. Only they can lift it.
Clearing cookies or changing browser does not help with these codes: the decision is based on the address, not the browser.
For site owners
- Paste the Ray ID into the dashboard’s Security Events (or filter by the visitor’s IP and time) to see which rule matched.
- Check IP Access rules and any custom rule that blocks by IP list, ASN or country.
- Prefer a managed challenge over a hard block for broad ranges such as a whole country or a large ISP. Real people get through; most scripts do not.
- Remember that a block on a mobile carrier’s address may cut off many unrelated people.
Related
All Cloudflare error codes · Cloudflare Error 1020 · Cloudflare Error 1010 · Cloudflare Error 1015 · 401 vs 403 · 429 Too Many Requests
Questions
What does Cloudflare error 1006 mean?
The site owner has a rule blocking the IP address your request came from. 1007 and 1008 mean the same thing.
What is Cloudflare error 1009?
The owner blocks visitors from the country or region Cloudflare thinks your IP address is in.
Why am I banned when I did nothing?
You may share a public IP with many others (mobile networks, offices, hotels), or be using a VPN range the owner blocks.
Will clearing cookies fix error 1006?
No. The block is on your IP address. Try another network, or switch a VPN off, and contact the owner with the Ray ID if you still need access.
How does an owner find out why someone was blocked?
Search the Ray ID from the error page in Security Events. It shows which IP Access rule or custom rule matched.
Published .