1009: Access Denied: Country or Region BannedError 1009 indicates that the site owner has configured Cloudflare to block traffic from the visitor's country or geographic region. This is done through Cloudflare's IP Access Rules or WAF custom rules using country-based filtering. Some site owners block countries to comply with sanctions, reduce spam, or limit access to regions where they do not operate. The visitor's country is determined by the geolocation of their IP address.
Error 1009: Access Denied: Country or Region BannedGET /services HTTP/1.1
Host: www.example.com
User-Agent: Mozilla/5.0
Accept: text/htmlHTTP/1.1 403 Forbidden
Server: cloudflare
CF-RAY: 7a5b6c7d8e9f0123-KUL
Content-Type: text/html
<!doctype html>
<html>
<head>
<title>www.example.com | Error 1009</title>
</head>
<body>
<h1>Error 1009: Access denied: Country or region banned</h1>
<p>Access from your country or region has been restricted by the site owner. If you are using a VPN, try a different server location.</p>
</body>
</html>If using a VPN, disconnect it or switch to a server in a different country. Your VPN exit node may be in a blocked region.
Verify which country your IP address is geolocated to — this may differ from your physical location if using a proxy or VPN.
IP GeolocationIf you believe you should have access, contact the site through an alternative channel and explain your situation.
Check Security > WAF > Tools > IP Access Rules and custom firewall rules for country-based blocking. Consider using Challenge instead of Block for entire countries.
The site owner created a Cloudflare firewall rule that blocks all traffic from specific countries or regions.
The site restricts access from certain countries to comply with trade sanctions (OFAC, EU regulations) or data protection laws.
The visitor is using a VPN whose exit server is located in a country that the site owner has blocked, even though the visitor is physically elsewhere.
The site owner has blocked the visitor's IP address using Cloudflare's firewall tools.
The visitor's ASN (network provider) has been blocked by the site owner or by Cloudflare.
Same as 1006/1007 — the visitor's IP has been blocked by the site owner's Cloudflare firewall.
The request was blocked by a Cloudflare WAF or firewall rule configured by the site owner.
This reference was compiled from official RFCs, protocol specifications, and hands-on troubleshooting experience. AI tools were used primarily for formatting and organizing the content on the page.