Skip to content
Get Started
G2G2
4.7/5
Excellent
Trustpilot

What Is the 403 Forbidden Error?

403 Forbidden is the HTTP status code a server returns when it understood the request but refuses to fulfil it. Unlike a 401, logging in will not help: the server has decided this client, IP or request is not allowed.

  • Session Control
  • High Speed
  • Privacy First
Best fit for 403 ForbiddenRotating Residential Proxiesfrom$0.63/GB
how it works

How a 403 differs from other errors

RFC 9110 defines 403 as a refusal that new credentials won't fix. Servers use it for real permission rules, such as a private folder, and anti-bot and firewall systems use it to block traffic they don't trust. Many return a 404 instead, to avoid revealing that a page exists.

  • 1

    401 Unauthorized

    Means
    Log in first
    Usually comes from
    The website
  • 403 Forbidden

    This term
    Means
    You may not have this, whoever you are
    Usually comes from
    The website, its CDN or WAF, or the proxy
  • 407 Proxy Authentication Required

    Means
    The proxy wants credentials
    Usually comes from
    The proxy
  • 4

    429 Too Many Requests

    Means
    Slow down
    Usually comes from
    The website's rate limiter
why it matters

Why you get a 403 through a proxy

When a request works without the proxy but returns 403 through it, the site is reacting to something about the proxied request. Find out which.

403 Forbidden: what it means for you
  • The IP or its network: hosting ASNs, ranges on blocklists or an IP with poor reputation.
  • Location: the site serves only some countries, a form of geo-blocking.
  • The client: missing or inconsistent headers, a library's default User-Agent, or a non-browser TLS fingerprint.
  • Behaviour: too many requests, or a pattern that matches automation.
  • The proxy itself: some providers return 403 when your IP is not allowlisted or a destination is restricted. Errors during CONNECT come from the proxy, not the site.
try it

Check who sent the 403

Look at the response, not just the code. A body that names a CDN or security vendor, or headers such as server: cloudflare with a cf-ray ID, mean the site's edge blocked you. A failure while opening the tunnel means the proxy refused.

If the site blocks hosting ranges, consumer IPs help: CleanProxies rotating residential proxies in 190+ countries and static ISP proxies on US carrier networks. Respect sites that refuse automated access, and read the proxy errors guide for the other codes.

Headers and tunnel status with curlShell
curl -sv -o /dev/null \
  -x http://USERNAME:PASSWORD@HOST:PORT \
  https://example.com 2>&1 \
  | grep -Ei '^< (HTTP|server|cf-ray)|CONNECT'

Rotating residential proxies from $0.63/GB

The CleanProxies proxy that fits best here, with a $4.99 trial to test it first.

Guides from the blog

Setup guides and best practices from the CleanProxies blog.

Get the latest insightsAll Blogs

Related terms

Terms that come up alongside 403 Forbidden.

All glossary terms

403 Forbidden FAQs

Straight answers about 403 Forbidden.

The server understood your request and refuses to serve it. It is a permission or policy decision, not a technical failure.

Got more questions?All FAQs