You likely face an IP-specific firewall block when your site shows HTTP 403 while it loads fine on mobile data or another network. A website firewall is a security filter that blocks suspicious requests before they reach the site, often by visitor IP address. Confirm the pattern with a second network, note any block code and Ray ID on the page, then check your current public IP. That evidence tells you whether to request unblocking or fix a wider outage.
Table of Contents
- What does a firewall block look like?
- Is it only your connection?
- How do you confirm your current IP?
- What should you send for faster unblocking?
- When will a block stay in place?
What does a firewall block look like?
A Cloudflare firewall block typically shows HTTP 403 with code 1020 "Access denied" and a Ray ID in the footer. According to Cloudflare, that code means a site-owner security feature blocked the request, as explained in Cloudflare's Error 1020 guide.
Save the full page, Ray ID, time, time zone, and what you clicked or submitted. Do not rely on repeated retries alone. That packet lets the site owner trace the exact rule.
Is it only your connection?
Load the same page from mobile data with Wi-Fi off, another device or network, and an uptime checker such as downfor.io. According to Web Hosting Canada, access from elsewhere while your network still fails points to an IP-specific block, as described in Web Hosting Canada's firewall check.
Clear browser cache first or try incognito to rule out a login or cookie issue. If every network fails with the same error, suspect site downtime, DNS, SSL, maintenance, or a global rule.
How do you confirm your current IP?
Many hosts show a Client Area "blocked" notice with an "Unblock Me" button once your current IP matches. Use that button only from the blocked network, then retest the site immediately.
- Search "what is my IP" and copy the public IPv4 or IPv6 address.
- Compare it with the IP shown in the block page, host notice, or error email.
- Repeat the check on the affected network because home and mobile IPs change.
What should you send for faster unblocking?
Send the site owner or host a screenshot, Ray ID, visitor IP, timestamp, page URL, and action that triggered it. According to Cloudflare, those details help the owner find the event faster than a general "I'm blocked" message, as noted in the Cloudflare WAF FAQ.
Site owners can paste that Ray ID or visitor IP into Security Analytics or Events to identify which rule fired. For WordPress, Drupal, or client sites, include user role, maintenance task, ad preview, or form submission involved.
When will a block stay in place?
Check IP reputation in AbuseIPDB, GreyNoise, or MXToolbox blacklist tools. According to Hostinger, low-risk scores may qualify for automatic unblocking while higher-abuse IPs may stay blocked, with ISP or VPN alternatives suggested, as explained in the Hostinger blocked-IP guide.
Cloudflare also warns that Security Events may use sampled logs and Ray IDs are not guaranteed unique, so narrow the timeframe and corroborate IP and time, as documented in Cloudflare's Ray ID reference. If reputation is poor, change networks, request a fresh IP from your ISP, scan devices for malware, and stop bulk logins or aggressive scans.
