Cloudflare Error 1009: Country or Region Banned (Fix)

Error 1009 is a geographic block. The page title is "Access denied: Country or region banned," and the text states that the website owner has banned the country or region your IP address is in. Cloudflare decides this from its geolocation of your IP address and the site's rules, not from your language or browser settings.

It is deliberate. The owner configured it, and Cloudflare cannot change it for you.

Who is affected

Visitors whose IP address geolocates to a blocked country or region. Travelers, people on VPNs, and users on mobile carriers or satellite networks whose addresses geolocate unexpectedly are the usual surprises.

If you are a visitor

Cloudflare's documentation says to contact the site owner and ask them to allow your IP address. Other practical points:

• Check your apparent location. The What Is My IP and IP Lookup tools show what country an IP maps to. If it is wrong, tell the owner, because geolocation databases occasionally misplace addresses.
• VPN or proxy. If you are on one, your exit country is what counts. Disconnecting may help, or may make it worse if your real country is blocked.
• Do not bypass deliberately. Using tools to dodge a region block may breach the site's terms or local rules. A polite request to the owner is the safe route.
• Send details. Give the owner the Ray ID, the time, your IP and the error text.

If you are the site owner

Cloudflare's page for owners says to check that the reported IP address is allowed under the IP Access Rules security feature. In practice, geo blocks can come from more than one place, so audit all of them.

Step 1: find the event

In Security Events (name varies by dashboard version), filter by the visitor's IP or Ray ID. The event shows the action and which feature blocked the request.

Step 2: review the possible sources

• IP Access Rules with a country action, at zone or account level.
• WAF custom rules with an expression like ip.geoip.country eq "XX" (the field names in the current rules language may differ slightly; see the dashboard's expression builder).
• Account-level rules that apply to all your zones.
• Managed or template rules you enabled earlier.

Step 3: decide what you actually need

Ask why the block exists. Common reasons: licensing and content rights, sanctions compliance, fraud history, or traffic you do not serve. If it is compliance, do not loosen it casually. If it was a blanket rule against spam, consider replacing it with something finer:

• Challenge instead of block for risky regions.
• Block only sensitive paths such as /wp-login.php or /checkout.
• Allow known IPs (partners, payment webhooks, offices) above the geo block.

Step 4: allow a specific IP safely

Add an allow rule for the single address with a clear note, and make sure its order puts it ahead of the block. Remove it when no longer needed. Avoid allowing whole ISPs because of one complaint.

Step 5: check for collateral damage

Geo rules can block legitimate services:

• Payment gateway and API webhooks coming from servers in a blocked country.
• Search engine crawlers. Googlebot crawls mainly from the United States, and blocking that country can hurt indexing. See robots.txt and sitemap guide and downtime and SEO for related effects.
• Uptime monitors checking from several countries. If you monitor with the Uptime Monitor, make sure its probe locations are not caught by your block.

Verify

Retest from a network in the affected region if you can, or ask the visitor to retry. The Cloudflare Error Checker and HTTP Header Checker show what an outside client sees. Confirm the rule order in the dashboard so allow rules fire before the geo block.

Related errors

• 1006-1008 IP banned: an IP-level block.
• 1020 Access denied: firewall rule block.
• 1010 browser signature: client fingerprint block.

Next steps

• Check your location with IP Lookup.
• See the family overview in Cloudflare 520-526 errors explained.
• Make sure monitoring still works with the Uptime Monitor.
• Detect the code via the Cloudflare Error Checker.

FAQ

Can Cloudflare unblock my country?

No. The site owner set the rule, and Cloudflare support does not override customer settings.

Why am I blocked in a country I am not in?

Geolocation is based on IP address data and can be wrong, or a VPN exit may be elsewhere. Show the owner your IP so they can check.

Will a country block affect search engines?

It can, if crawlers come from the blocked country. Test with the tools and Search Console data before applying broad geo rules.

Is a geo block the same as a firewall block?

It is a type of one. Error 1009 is the specific message for a country or region rule.

This page is general information written by our editorial team and updated when documentation changes. Servers and providers differ, so test changes safely first. See our editorial policy and disclaimer.