Cloudflare Errors 1006, 1007, 1008: Your IP Address Has Been Banned

Errors 1006, 1007, 1008 and 1106 share one Cloudflare documentation page titled "Your IP address has been banned." The message on the page reads along the lines of "Access denied. The owner of this website (example.com) has banned your IP address," followed by your IP and a Ray ID.

Cloudflare says these errors mean a Cloudflare customer, the website owner, blocked traffic from your client or browser. Its page does not explain how 1006, 1007, 1008 and 1106 differ, so do not assume a different cause for each number. Treat them the same way.

Visitor versus owner

Cloudflare cannot lift the block. Its documentation states support cannot override a customer's security settings, because the website owner set them. Only the owner can change the rule.

If you are a visitor

Your IP address is on a deny list or inside a blocked range. Work through these:

1. Note the details. Copy the Ray ID, the time, and the IP shown on the page. The What Is My IP tool confirms the address you present.
2. Change networks. Try mobile data, or turn off a VPN or proxy. Shared addresses are blocked more often because someone else's behavior can taint them.
3. Check for malware. Infected machines send junk traffic that gets IPs banned. Run a full antivirus scan.
4. Look up your IP's reputation. The Blacklist Checker shows public blocklist listings, and the ASN Lookup shows which network you appear to be on. A hosting-provider ASN is a common reason for blocks.
5. Contact the owner. Cloudflare advises asking the owner to check their security settings or allow your client IP. Send the Ray ID and time; a WHOIS search (WHOIS Lookup) may reveal a contact.

If your address changes often (many ISPs and mobile carriers), the ban may already be gone after you reconnect.

If you are the site owner

You will usually be investigating a report from a user. The goal is to find which rule matched and decide if it was right.

Step 1: get the Ray ID and IP

Ask the user for both. A Ray ID lets you locate the exact event; the IP lets you search all rules.

Step 2: search the firewall event log

In the Cloudflare dashboard, open Security Events (labelled Security analytics or Events in some views) and filter by Ray ID or client IP. The event shows the action, the source (IP Access Rule, firewall or WAF custom rule, rate limiting, Zone Lockdown) and the rule ID. Dashboard names move around; use the search in the dashboard if you cannot find it.

Step 3: check these sources of IP blocks

• IP Access Rules at account or zone level, including range and ASN entries.
• WAF custom rules with an IP, ASN or country expression and a Block action.
• Zone Lockdown restrictions to a list of allowed addresses.
• Automated protection such as rate limiting or a managed rule that banned the address after abuse.
• Rules inherited from account level, easy to forget on multi-site accounts.

Step 4: decide and adjust

If the block is a mistake, delete or narrow the rule, or add the visitor's IP to an allow rule that sits above the block. Prefer narrow entries (a single IP) to wide ranges. Keep a note of why an IP was blocked so cleanup is safe later.

Step 5: the Workers Preview special case

Cloudflare's page notes that error 1006 can appear in the Workers Preview tab when Zone Lockdown or another security feature blocks the Google Cloud Platform IP addresses that the Preview uses. If you only see 1006 while previewing a Worker, review those rules, or test through your real route instead.

Verify

After editing a rule, have the visitor retry from the same network, and watch for a new event. The Cloudflare Error Checker and HTTP Header Checker show what an outsider currently receives. Learn more about the broader family in error 1020 and rate limiting in error 1015.

Next steps

• Check your IP with What Is My IP.
• Test reputation with the Blacklist Checker.
• Read country bans if the page names a country instead.
• Read browser signature bans.

FAQ

What is the difference between 1006, 1007 and 1008?

Cloudflare's documentation covers them together and does not describe a difference. Treat all of them as an IP ban set by the site owner.

Can I fix it myself?

Not directly. You can change networks or fix an infection, but only the owner can remove the rule.

Does Cloudflare support unblock me?

No. Cloudflare states it cannot override a customer's security settings.

Why did my home IP get banned?

Common reasons are earlier abuse from a shared address, a compromised device, or a broad rule covering your ISP's range. The Security Events entry shows the real reason to the owner.

This page is general information written by our editorial team and updated when documentation changes. Servers and providers differ, so test changes safely first. See our editorial policy and disclaimer.