Quick wins for a faster PC:
Clear out junk files and repair common Windows errorsFree Scan →Scan for outdated or missing drivers - takes under a minuteDriver Scan →Repair Windows errors before they cause bigger problemsFix Now →Start by recording the exact Cloudflare code, HTTP status, Ray ID, URL and time shown on the block page. Then match the code to the control that denied you. Error 1015 is a rate-limit block: stop retrying and wait. Error 1020 is a firewall-rule denial: send the page details to the website owner. Codes 1006–1008 and 1106 indicate an IP ban, 1009 a country or region restriction, and 1010 a browser-signature block. These decisions belong to the site owner, not Cloudflare support.
First, preserve the evidence
Do not refresh repeatedly or immediately change networks. The diagnostic details can disappear when a challenge page is replaced.
- Read the entire page and copy the numeric Cloudflare code, message and HTTP status (commonly 403 or 429).
- Take a screenshot that includes the Ray ID, requested URL and displayed time.
- Record whether you were on home broadband, an office network, mobile data or a VPN. Note the browser and device too.
- Write down the time in UTC as well as your local time. Site owners use the UTC value when searching Cloudflare Security Events.
Cloudflare 1xxx codes are normally printed in the HTML body. A plain 403 or 429 can have several causes, so the status alone is not enough.
Identify what blocked the request
| Code or status | What made the decision | What a visitor should do | What the owner should inspect |
|---|---|---|---|
| 1015 (usually 429) | Rate-limit rule | Stop refreshing and wait; contact the owner if it persists. | Threshold, counting period and whether a longer window is appropriate. |
| 1020 (usually 403) | Firewall or WAF rule | Send the screenshot, Ray ID, URL and time to the owner. | Security > Analytics > Events; search by Ray ID or client IP and review the matched rule. |
| 1006, 1007, 1008 or 1106 | IP ban | Ask the website owner to investigate and allow the address if legitimate. | IP access controls and the denied client address. |
| 1009 | Country or region restriction | Contact the owner with your location and evidence. | Country or region IP rules and any justified exception. |
| 1010 | Browser-signature rule | Send the Ray ID and browser details to the owner. | Browser Integrity Check and browser-signature conditions. |
| 1000 | DNS or origin configuration | Report the exact page and time; this is an owner-side configuration issue. | Prohibited Cloudflare IPs, reverse-proxy loops, forwarding headers and SaaS custom-hostname configuration. |
| 403 without a 1xxx code | Could be WAF, IP/country controls or a managed challenge | Capture the complete response and ask the owner which rule matched. | Security Events and the product that generated the response. |
Visitor fixes, in the right order
Error 1015: wait instead of retrying
Error 1015 means the site is rate limiting requests. Repeated attempts in a short period can extend the block. Close automated tabs, stop scripts and do not keep pressing reload. Wait for the site’s counting period to expire. If a normal visit remains blocked, send the owner the Ray ID, time and your network context so they can check the rule.
Recommended Free Tools
Error 1020: provide the rule-matching details
Error 1020 means a Cloudflare firewall rule denied the request. A browser reinstall or a new cable connection does not remove the owner’s rule. Email the site’s support address with your screenshot, Ray ID, exact URL, UTC time and client network. Ask the owner to verify the event rather than asking Cloudflare to bypass it.
IP, country and browser-signature blocks
Codes 1006, 1007, 1008 and 1106 are IP bans; 1009 is a country or region ban; 1010 is a browser-signature ban. These are intentional site-owner controls. A VPN might change the signal, but it is not a documented general remedy and may trigger another rule. Report the block and wait for the owner to approve an exception.
When the response is only “403” or “429”
A 429 strongly suggests rate limiting, while a 403 can represent a WAF rule, IP or country control, or a managed challenge. Save the response body and headers if you can, then ask the owner to correlate the request in Security Events using the Ray ID, IP and UTC time.
What the website owner should do
Investigate a 1020 event
- Open the Cloudflare dashboard and go to Security > Analytics > Events.
- Search by the visitor’s Ray ID or client IP. Convert the visitor’s local time to UTC before searching.
- Open the event to see the rule that matched and the fields it evaluated.
- If the visitor is legitimate, narrow or edit the rule, or allow the address using the appropriate control. Re-test without asking the visitor to generate repeated traffic.
Adjust a 1015 rate limit
Review the threshold and counting period. A short window can block bursts from real users. Cloudflare’s example is changing a one-second period to ten seconds when that window causes unintended denials. Validate the change against abuse risk before widening it.
Review IP, country and browser controls
- 1006/1007/1008/1106: inspect IP-ban controls and allow the client address when its activity is legitimate.
- 1009: review IP Access rules for the restricted country or region and add a justified exception.
- 1010: inspect Browser Integrity Check and browser-signature conditions; ensure normal browsers are not being classified as automation.
Correct a 1000 configuration error
Check that DNS does not point to a prohibited Cloudflare address, remove any reverse-proxy loop, correct malformed forwarding headers and configure a SaaS custom hostname when that is the deployment model. This is an origin and DNS repair, not a visitor-browser fix.
Rank #2
How to contact the site owner effectively
Use the website’s published support form or email and include one incident per message. A useful report looks like this:
- “Cloudflare error 1020 (HTTP 403)” or the exact code shown
- Ray ID
- Full URL, including path
- UTC timestamp and local time
- Home, office, mobile or VPN network
- Browser and device
- Screenshot of the complete page
- Whether another page on the same site works
Do not send passwords, payment data or unrelated personal information. The owner can correlate the Ray ID and time; Cloudflare support cannot override another customer’s security settings.
Testing without making the block worse
After the owner changes a rule, perform one normal navigation in a regular browser. Avoid parallel tabs, aggressive uptime checks and repeated scripted retries while diagnosing a rate limit. If you operate the site, test from a controlled address that is explicitly allowed, then verify that the production rule still protects untrusted traffic. Keep the original Ray ID and event record with the change note so a recurrence can be compared.
The Tool Desk
Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →Or skip the browser setup
For a diagnostic copy of a block page or any public URL, ScreenshotNeo can return an image or PDF from one request. Its cleanup step accepts consent banners and removes more than 60 known consent platforms, newsletter popups and chat widgets before capture; each cleanup step can be disabled. Bot checks, blank pages, timeouts, failed loads and cache hits are not billed, and response headers identify the page verdict and billing result. An MCP server provides take_screenshot, get_page_info and capture_pdf tools for Claude, Cursor and other MCP clients.
See the parameter reference in the ScreenshotNeo documentation. cURL:
curl -G "https://api.screenshotneo.com/v1/shot" -d access_key=YOUR_API_KEY --data-urlencode url=https://stripe.com -o shot.webpPython:
import requests
r = requests.get("https://api.screenshotneo.com/v1/shot", params={"access_key": "YOUR_API_KEY", "url": "https://stripe.com"}, timeout=90)
open("shot.webp", "wb").write(r.content)Node.js:
const q = new URLSearchParams({ access_key: 'YOUR_API_KEY', url: 'https://stripe.com' });
const res = await fetch(`https://api.screenshotneo.com/v1/shot?${q}`);The Free plan includes 1,000 screenshots a month with no card; paid plans start at $5 for 3,000. Create a free ScreenshotNeo account.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Troubleshooting branches
The owner says no event appears
Confirm the Ray ID and UTC conversion, then check that the request reached the expected zone and hostname. A stale URL, a different subdomain or a response generated by an upstream proxy can place the event elsewhere.
The block returns after an allow rule
Look for a second rule, an IP change caused by a proxy or mobile carrier, and a browser-signature condition. Compare the new Ray ID with the original rather than assuming the first exception failed.
Only one office or ISP is affected
Provide both the public client IP and the network type. The owner can distinguish an IP reputation or access-list issue from a country rule; changing devices inside the same network will not change the public IP.
A script receives 429 while a browser works
Reduce concurrency and request frequency, honor the site’s published limits and stop retries when 1015 appears. Ask the owner for an approved integration path instead of attempting to evade the limit.
When to escalate
Escalate to the website owner whenever the code is 1020, 1006–1010 or 1106, or when a persistent 403 has no clear explanation. Escalate a 1015 only after waiting and stopping retries. Cloudflare support is not the party that can override another customer’s firewall, IP, country or browser settings; the zone owner must investigate and request provider help when the configuration itself is faulty.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Frequently Asked Questions
Can clearing cookies fix a Cloudflare block?
It can remove a damaged session, but it does not override firewall, rate-limit, IP, country or browser-signature rules. Preserve the error details before trying it.
Should I use a VPN to get around a country or IP block?
A VPN is not a documented general remedy and may produce a different signal that is also blocked. Ask the website owner for an authorized exception.
What is the difference between Cloudflare 1015 and 1020?
1015 is rate limiting and calls for waiting; 1020 is a firewall-rule denial that requires the owner to inspect the matched rule.
Why does Cloudflare support tell me to contact the website?
The website owner controls its Cloudflare security settings. Provider support cannot override another customer’s blocking decision.
Outdated Drivers Are Slowing You Down
One free scan finds every outdated or missing driver and matches the right update for your exact hardware.Free scan · exact hardware matchPC Slower Than It Used to Be?
A free scan shows the junk files, broken settings and background clutter dragging Windows down - then fixes them in one click.Free scan · Windows 10 & 11The Bottom Line
Capture the code, status, Ray ID, URL and time first. Wait for 1015, and send complete evidence to the site owner for 1020, IP, country or browser blocks. Only the owner can change those rules or repair a 1000 DNS/origin fault.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
