Cloudflare Error 1020: Access Denied

What the error means

Error 1020 is shown by Cloudflare when a request breaks a rule of the site's firewall. The rules are written by the owner: who to let in and who not.

Unlike 1015, this is not about the rate. The rule triggers on the first request and is not lifted by a pause until the thing it reacts to changes.

Causes

• The site is closed to your country. The owner only lets in visitors from certain countries.
• The site does not accept addresses of this network type. For example, datacenter addresses.
• The request does not look like a browser request. An unusual User-Agent, missing standard headers, cookies or JavaScript turned off.
• The address or subnet is on the site's deny list. Unwanted activity came from them earlier.
• A particular section of the site is closed. The control panel, service URLs and the like.

How to fix it

1. Choose a country the site is intended for.
2. Try another address: turn on rotation or change the session.
3. Try another address type — residential or mobile — on a small volume.
4. Check the request headers: they should match a regular browser, with cookies enabled.
5. Check that the browser does not reveal your real address: WebRTC leak test.
6. If you need access for work, write to the site owner: the error contains a Ray ID that lets them find the cause.

How to check that it works

Open the site in a regular browser through the proxy. If it opens in the browser but not in the program, the cause is how the program builds the request.