Error 1009 indicates that the site owner has configured Cloudflare to block traffic from the visitor's country or geographic region. This is done through Cloudflare's IP Access Rules or WAF custom rules using country-based filtering. Some site owners block countries to comply with sanctions, reduce spam, or limit access to regions where they do not operate. The visitor's country is determined by the geolocation of their IP address.
The site owner created a Cloudflare firewall rule that blocks all traffic from specific countries or regions.
The site restricts access from certain countries to comply with trade sanctions (OFAC, EU regulations) or data protection laws.
The visitor is using a VPN whose exit server is located in a country that the site owner has blocked, even though the visitor is physically elsewhere.
If using a VPN, disconnect it or switch to a server in a different country. Your VPN exit node may be in a blocked region.
Verify which country your IP address is geolocated to — this may differ from your physical location if using a proxy or VPN.
IP GeolocationIf you believe you should have access, contact the site through an alternative channel and explain your situation.
Check Security > WAF > Tools > IP Access Rules and custom firewall rules for country-based blocking. Consider using Challenge instead of Block for entire countries.
The site owner has blocked the visitor's IP address using Cloudflare's firewall tools.
The visitor's ASN (network provider) has been blocked by the site owner or by Cloudflare.
Same as 1006/1007 — the visitor's IP has been blocked by the site owner's Cloudflare firewall.
The request was blocked by a Cloudflare WAF or firewall rule configured by the site owner.