Error map

Idle connections silently dropped by firewall/NAT Networking: Connection works, then fails after being idle — firewall/NAT idle timeout dropped the TCP session (use keepalive)

Networking · layer 2, Network

Open the full error page →

Centre: this error. First ring: errors it is linked with (12). Outer ring: what those are linked with. Colours show the layer of a request each error belongs to. Click any dot to re-centre the map on it; hover to follow its connections. The centre dot opens the error page.

Idle connections silently dropped by firewall/NAT — Networking: Connection works, then fails after being idle — firewall/NAT idle timeout dropped the TCP session (use keepalive) (Networking)Idle connec…1005 — Cloudflare Error 1005: Access denied — The owner of this website has banned the autonomous system number (ASN) your IP address is in (Cloudflare)10051006 — Cloudflare Error 1006 / 1007 / 1008: Access denied — Your IP address has been banned (Cloudflare)10061020 — Cloudflare Error 1020: Access Denied (Cloudflare)1020client_loop: send disconnect: Broken pipe — client_loop: send disconnect: Broken pipe (SSH session drops when idle) (Linux)client_loop: send d…1012 — Cloudflare Error 1012: Access denied (Cloudflare)1012iptables: No chain/target/match — driver failed programming external connectivity on endpoint: iptables: No chain/target/match by that name (Docker)iptables: No chain/…No route to host — connect: No route to host (EHOSTUNREACH) (Linux)No route to host40615 — Azure SQL: Cannot open server 'x' requested by the login. Client with IP address 'y' is not allowed to access the server (Error 40615) (Azure)40615ssh port 22 Connection timed out — ssh: connect to host x port 22: Connection timed out (Linux)ssh port 22 Connect…ECONNRESET / Connection reset by peer on idle Redis connection — Redis: Error: read ECONNRESET / redis.exceptions.ConnectionError: Connection reset by peer after idle time (Redis)ECONNRESET / Connec…Ping: Request timed out — Networking: ping — Request timed out / 100% packet loss (host drops or filters ICMP) (Networking)Ping: Request timed…Port forwarding not working (CGNAT / double NAT) — Networking: Port forwarding configured but the port stays closed — carrier-grade NAT (CGNAT) or double NAT (Networking)Port forwarding not…webhook signature — Webhook signature verification failed (Stripe, Razorpay, GitHub…) (API)webhook signatureviolates PodSecurity — Error creating: pods is forbidden: violates PodSecurity "restricted:latest": allowPrivilegeEscalation != false ... (Kubernetes)violates PodSecurityREMOTE HOST IDENTIFICATION HAS CHANGED — WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED! (ssh host key changed) (Linux)REMOTE HOST IDENTIF…NO_PUBKEY — The following signatures couldn't be verified because the public key is not available: NO_PUBKEY (Linux)NO_PUBKEY1009 — Cloudflare Error 1009: Access denied — The owner of this website has banned the country or region your IP address is in (Cloudflare)10091010 — Cloudflare Error 1010: The owner of this website has banned your access based on your browser's signature (Cloudflare)1010403 — HTTP 403 Forbidden (HTTP)403429 — HTTP 429 Too Many Requests (HTTP)429520 — Cloudflare Error 520: Web Server Returned an Unknown Error (Cloudflare)520ECONNRESET — Error: socket hang up / read ECONNRESET (API)ECONNRESETport 22 timed out — ssh: connect to host github.com port 22: Connection timed out (Git)port 22 timed outkex_exchange_identification — kex_exchange_identification: Connection closed by remote host (Git)kex_exchange_identi…1011 — Cloudflare Error 1011: Access denied (Hotlinking denied) (Cloudflare)10111015 — Cloudflare Error 1015: You are being rate limited (Cloudflare)1015SecurityException: Permission Denial — java.lang.SecurityException: Permission Denial ... requires android.permission.X (Android)SecurityException: …EADDRINUSE — Error: listen EADDRINUSE: address already in use :::3000 (Node.js)EADDRINUSEport is already allocated — Docker: Bind for 0.0.0.0:80 failed: port is already allocated (Docker)port is already all…Port 8080 in use — Web server failed to start. Port 8080 was already in use. (Java)Port 8080 in useECONNREFUSED — Error: connect ECONNREFUSED 127.0.0.1:5432 (Node.js)ECONNREFUSEDssh port 22 Connection refused — ssh: connect to host x port 22: Connection refused (Linux)ssh port 22 Connect…Temporary failure in name resolution — ping: google.com: Temporary failure in name resolution (Linux)Temporary failure i…18456 — SQL Server: Login failed for user 'x'. (Error 18456) (SQL)18456Login failed for user '<token-identified principal>' — Azure SQL: Login failed for user '<token-identified principal>' (Microsoft Entra / managed identity) (Azure)Login failed for us…nc/telnet hangs: firewall DROP vs REJECT — Networking: nc -vz hangs then times out — firewall silently DROPs packets (REJECT would answer "Connection refused") (Networking)nc/telnet hangs: fi…Network is unreachable — connect: Network is unreachable (ENETUNREACH) (Linux)Network is unreacha…Setting locale failed — perl: warning: Setting locale failed / bash: warning: setlocale: LC_ALL: cannot change locale (Linux)Setting locale fail…CDN: trunk URL couldn't be downloaded — [!] CDN: trunk URL couldn't be downloaded: https://cdn.cocoapods.org/... (iOS)CDN: trunk URL coul…SQLSTATE[HY000] [2002] Connection refused — Laravel: SQLSTATE[HY000] [2002] Connection refused (SQL: select * from sessions) / php_network_getaddresses: getaddrinfo failed (Laravel)SQLSTATE[HY000] [20…Redis connection refused (Laravel) — Laravel: Predis\Connection\ConnectionException: Connection refused [tcp://127.0.0.1:6379] / RedisException: Connection refused (Laravel)Redis connection re…Error: connect ECONNREFUSED 127.0.0.1:6379 — Redis: Error: connect ECONNREFUSED 127.0.0.1:6379 / Could not connect to Redis at 127.0.0.1:6379: Connection refused (Redis)Error: connect ECON…Outbound port 25 blocked — SMTP: telnet smtp.example.com 25 — Connection timed out (cloud provider blocks port 25) (Email / SMTP)Outbound port 25 bl…Reply from 192.168.1.1: Destination host unreachable — Networking: ping — Destination Host Unreachable / Destination net unreachable (ICMP type 3) (Networking)Reply from 192.168.…Reply from x: TTL expired in transit — Networking: TTL expired in transit — routing loop between routers (Networking)Reply from x: TTL e…Wi-Fi keeps disconnecting (weak signal, -80 dBm) — Networking: Wi-Fi keeps disconnecting / signal -80 dBm / wlan0: deauthenticating by local choice (reason=3) (Networking)Wi-Fi keeps disconn…SFP link down / Loss of Signal (LOS) — Networking: Interface down — SFP transceiver Loss of Signal / no receive light (Networking)SFP link down / Los…arp -a shows (incomplete) — Networking: `arp -n` shows (incomplete) / Destination Host Unreachable — no ARP reply from the next hop (Networking)arp -a shows (incom…

Directly related (12)

1005Cloudflare

Cloudflare Error 1005: Access denied — The owner of this website has banned the autonomous system number (ASN) your IP address is in

The site owner blocked your network provider (ASN) — common for VPNs, cloud/data-center IPs and some mobile carriers.

1006Cloudflare

Cloudflare Error 1006 / 1007 / 1008: Access denied — Your IP address has been banned

The site owner (or a Cloudflare security setting) blocked your IP address.

1020Cloudflare

Cloudflare Error 1020: Access Denied

A Cloudflare firewall/WAF custom rule blocked the request — the visitor’s IP, country, user agent or request pattern matched a bl…

client_loop: send disconnect: Broken pipeLinux

client_loop: send disconnect: Broken pipe (SSH session drops when idle)

The SSH connection was cut — usually an idle timeout on a NAT router, firewall or the server, sometimes a network change.

1012Cloudflare

Cloudflare Error 1012: Access denied

The site owner blocked access with a rule that matched your request (often due to malicious activity detected from your IP).

iptables: No chain/target/matchDocker

driver failed programming external connectivity on endpoint: iptables: No chain/target/match by that name

Docker’s iptables rules were wiped (firewalld/ufw reload, iptables flush) while Docker was running, so it can’t publish ports.

No route to hostLinux

connect: No route to host (EHOSTUNREACH)

The destination host isn’t reachable — it’s down, on another subnet without routing, or a firewall rejects with “host unreachable…

40615Azure

Azure SQL: Cannot open server 'x' requested by the login. Client with IP address 'y' is not allowed to access the server (Error 40615)

The Azure SQL server firewall doesn’t allow your client’s IP address.

ssh port 22 Connection timed outLinux

ssh: connect to host x port 22: Connection timed out

SSH packets get no reply — a firewall/security group drops them, the server is off, or the IP is wrong.

ECONNRESET / Connection reset by peer on idle Redis connectionRedis

Redis: Error: read ECONNRESET / redis.exceptions.ConnectionError: Connection reset by peer after idle time

A middlebox or Redis closed an idle connection, and the pooled client reused it.

Ping: Request timed outNetworking

Networking: ping — Request timed out / 100% packet loss (host drops or filters ICMP)

No echo reply arrived in time: the host is down, unreachable, or simply ignores ping.

Port forwarding not working (CGNAT / double NAT)Networking

Networking: Port forwarding configured but the port stays closed — carrier-grade NAT (CGNAT) or double NAT

Your router forwards the port correctly, but another NAT in front of it (your ISP or a second router) blocks inbound connections.

Two steps away (36)

webhook signatureAPI

Webhook signature verification failed (Stripe, Razorpay, GitHub…)

Your endpoint computed a different HMAC signature than the one the provider sent, so the webhook is rejected.

violates PodSecurityKubernetes

Error creating: pods is forbidden: violates PodSecurity "restricted:latest": allowPrivilegeEscalation != false ...

The namespace enforces a Pod Security Standard (baseline/restricted) and the pod spec breaks one of its rules.

REMOTE HOST IDENTIFICATION HAS CHANGEDLinux

WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED! (ssh host key changed)

The server’s SSH host key differs from the one saved in ~/.ssh/known_hosts — usually because the server was rebuilt or the IP was…

NO_PUBKEYLinux

The following signatures couldn't be verified because the public key is not available: NO_PUBKEY

apt can’t verify a repository’s signature because the repo’s signing key isn’t installed (or has expired/rotated).

1009Cloudflare

Cloudflare Error 1009: Access denied — The owner of this website has banned the country or region your IP address is in

The site blocks visitors from your country/region.

1010Cloudflare

Cloudflare Error 1010: The owner of this website has banned your access based on your browser's signature

Cloudflare’s bot detection blocked the request because its browser fingerprint looks automated.

403HTTP

HTTP 403 Forbidden

The server understood the request but refuses to authorize it — you (or the server process) are not allowed to access this resour…

429HTTP

HTTP 429 Too Many Requests

You’ve hit a rate limit — too many requests in a given time window. Slow down and retry later.

520Cloudflare

Cloudflare Error 520: Web Server Returned an Unknown Error

Cloudflare connected to your origin, but the origin returned an empty, unknown or invalid response.

ECONNRESETAPI

Error: socket hang up / read ECONNRESET

The other side closed the TCP connection abruptly while your client was still using it.

port 22 timed outGit

ssh: connect to host github.com port 22: Connection timed out

Outbound SSH on port 22 is blocked (firewall, corporate or public Wi-Fi).

kex_exchange_identificationGit

kex_exchange_identification: Connection closed by remote host

The SSH connection was closed before the handshake — server overload, rate limiting, or a proxy/firewall interfering.

1011Cloudflare

Cloudflare Error 1011: Access denied (Hotlinking denied)

An image or file is being loaded from another site, and Cloudflare Hotlink Protection blocked it.

1015Cloudflare

Cloudflare Error 1015: You are being rate limited

The site’s Cloudflare rate-limiting rule blocked you for sending too many requests in a short time.

SecurityException: Permission DenialAndroid

java.lang.SecurityException: Permission Denial ... requires android.permission.X

The app called an API that needs a permission it hasn’t declared or the user hasn’t granted at runtime.

EADDRINUSENode.js

Error: listen EADDRINUSE: address already in use :::3000

Another process is already listening on that port.

port is already allocatedDocker

Docker: Bind for 0.0.0.0:80 failed: port is already allocated

Another container or host process already publishes that host port.

Port 8080 in useJava

Web server failed to start. Port 8080 was already in use.

Spring Boot couldn’t bind its embedded server port because another process uses it.

ECONNREFUSEDNode.js

Error: connect ECONNREFUSED 127.0.0.1:5432

Nothing is listening at that host:port — the target service is down or you’re connecting to the wrong address.

ssh port 22 Connection refusedLinux

ssh: connect to host x port 22: Connection refused

The server answered, but nothing is listening on the SSH port — sshd isn’t running, it uses another port, or a firewall actively…

Temporary failure in name resolutionLinux

ping: google.com: Temporary failure in name resolution

The Linux host can’t resolve domain names — no working DNS server is configured or reachable.

18456SQL

SQL Server: Login failed for user 'x'. (Error 18456)

SQL Server rejected the login — wrong password, wrong authentication mode, or a disabled/missing login.

Login failed for user '<token-identified principal>'Azure

Azure SQL: Login failed for user '<token-identified principal>' (Microsoft Entra / managed identity)

Entra ID authentication succeeded, but there’s no database user for that identity (or it lacks permission to the database).

nc/telnet hangs: firewall DROP vs REJECTNetworking

Networking: nc -vz hangs then times out — firewall silently DROPs packets (REJECT would answer "Connection refused")

A connection attempt gets no answer at all, which points to a firewall dropping the packets rather than a closed port.

Network is unreachableLinux

connect: Network is unreachable (ENETUNREACH)

The host has no route to the destination network — no default gateway, interface down, or trying IPv6 without IPv6 connectivity.

Setting locale failedLinux

perl: warning: Setting locale failed / bash: warning: setlocale: LC_ALL: cannot change locale

Your session asks for a locale (often forwarded by SSH from your Mac/PC) that isn’t generated on the server.

CDN: trunk URL couldn't be downloadediOS

[!] CDN: trunk URL couldn't be downloaded: https://cdn.cocoapods.org/...

CocoaPods couldn’t reach its CDN spec repo — network/proxy issues, rate limiting, or an outdated CocoaPods.

SQLSTATE[HY000] [2002] Connection refusedLaravel

Laravel: SQLSTATE[HY000] [2002] Connection refused (SQL: select * from sessions) / php_network_getaddresses: getaddrinfo failed

Laravel can't open a network connection to the database host and port from `.env`.

Redis connection refused (Laravel)Laravel

Laravel: Predis\Connection\ConnectionException: Connection refused [tcp://127.0.0.1:6379] / RedisException: Connection refused

Laravel can't connect to Redis, which it uses for cache, sessions or queues.

Error: connect ECONNREFUSED 127.0.0.1:6379Redis

Redis: Error: connect ECONNREFUSED 127.0.0.1:6379 / Could not connect to Redis at 127.0.0.1:6379: Connection refused

Nothing is listening on the Redis host/port your client uses.

Outbound port 25 blockedEmail / SMTP

SMTP: telnet smtp.example.com 25 — Connection timed out (cloud provider blocks port 25)

Connections from your server to other mail servers on port 25 time out because your cloud host or ISP blocks outbound SMTP to fig…

Reply from 192.168.1.1: Destination host unreachableNetworking

Networking: ping — Destination Host Unreachable / Destination net unreachable (ICMP type 3)

A router (or your own PC) tells you it has no way to deliver the packet to that address.

Reply from x: TTL expired in transitNetworking

Networking: TTL expired in transit — routing loop between routers

A packet ran out of hops before arriving, which usually means two routers keep sending it back and forth.

Wi-Fi keeps disconnecting (weak signal, -80 dBm)Networking

Networking: Wi-Fi keeps disconnecting / signal -80 dBm / wlan0: deauthenticating by local choice (reason=3)

The wireless link is too weak or too noisy to hold, so the client drops and rejoins repeatedly.

SFP link down / Loss of Signal (LOS)Networking

Networking: Interface down — SFP transceiver Loss of Signal / no receive light

A fibre or SFP link is down because the transceiver receives no light.

arp -a shows (incomplete)Networking

Networking: `arp -n` shows (incomplete) / Destination Host Unreachable — no ARP reply from the next hop

The machine asked "who has this IP?" and nobody on the local network answered.