The subscriber isn't allowed to use the network in the way this request implies (illegalSubscriber) -- typically an authentication/authorization mismatch.
In a returnError component of a MAP dialogue over TCAP/SCCP (roaming, SMS, call routing).
Got a trace with MAP error 9 illegalSubscriber? Drop it in the analyzer: it finds the step that really failed first, which node sent the code and what to ask the other side. Captures, test-system PDFs and vendor exports. 5 free analyses a month, no sign-up.
Analyze a trace free