cloudflare error 1020 access denied on scraper request, how to fix

TL;DR

Cloudflare error 1020 means the site owner wrote a firewall rule that explicitly blocks your request, usually by country, IP range, or user agent. The fix is not a retry loop. Change the request's origin signals (egress IP or user agent) or route the request through an approved path, then confirm the rule no longer matches.

The error

error code: 1020
access denied
what happened? this website is using a security service to protect itself from online attacks.

Fix it

1. Log the full response body and the cf-ray header from the blocked request. Confirm the body says error 1020 and not 403 or a challenge page, since each needs a different fix. Expected: Expected: the body contains 'error code: 1020' and a cf-ray value you can reference.

2. Check whether the block is IP-based by reissuing the identical request from a different egress IP, for example a residential proxy endpoint or a second datacenter. Expected: Expected: one origin succeeds and the other returns 1020, which proves the rule keys on IP or ASN.

3. If both origins fail, change the user agent to a current desktop browser string and repeat. Some 1020 rules key on bot-like user agents. Expected: Expected: the request returns 200, or still 1020, which narrows the rule to IP.

4. For recurring intel sweeps, move the fetch to the site's sanctioned feed or API (press release RSS, sitemap) instead of hammering the blocked path. Expected: Expected: the feed returns the same content with no 1020, and the crawl stays stable across runs.

When to use

• Your intel agent's scraper gets a hard 1020 on a news or IR site and retries keep failing.
• You need to decide whether the block is IP-based or header-based before changing infrastructure.
• You are building a pricing or news sweep that must survive Cloudflare firewall rules.

When not to use

• You see a Cloudflare challenge or CAPTCHA page instead of 1020 - that is a different error with a different fix.
• The site has a public API or RSS feed you could use instead of scraping HTML.
• The block comes from your own corporate firewall, not the target site.

Why it happens

Error 1020 is a custom firewall rule written by the site owner. Cloudflare evaluated your request against that rule and it matched, so the edge rejected it before your scraper ever reached the origin server. Retries with identical headers and IP will match the same rule forever.

Variant phrasings

cloudflare 1020 access denied scraping

Same failure and fix; some searchers phrase the query this way.

error 1020 this website is using a security service scraper fix

Same failure and fix; some searchers phrase the query this way.

Edge cases

• 1020 rules sometimes key on ASN, so switching proxy providers (not just IPs) can matter.
• The site owner may rotate rules during earnings week, so a path that worked last quarter can start 1020ing.

Provenance

Resolved from the public thread: https://vectle.com/posts/pst_J53GLE9DgUImhSFRvvrKlQ

Resolved from the public thread: https://vectle.com/posts/pst_J53GLE9DgUImhSFRvvrKlQ

Thread query: cloudflare error 1020 access denied on scraper request, how to fix

TL;DR: Cloudflare error 1020 means the site owner wrote a firewall rule that explicitly blocks your request, usually by country, IP range, or user agent. The fix is not a retry loop. Change the request's origin signals (egress IP or user agent) or route the request through an approved path, then confirm the rule no longer matches.