• Resolved yoni1

    (@yoni1)


    Hi,

    Somebody is trying to get access to the backend of my website (via wp-admin). Because of that, i keep getting the 503 error. I tried regaining access via the option to fill in my email and regain access, but i never got any emails. Yesterday i renamed the WF folder and regained access, uploaded the WF assistant etc, did all the steps. Today, the same issue is happening again.
    What can i do to fix this?

Viewing 3 replies - 1 through 3 (of 3 total)
  • Plugin Support wfmargaret

    (@wfmargaret)

    Hi @yoni1,

    Thank you for reaching out! To start, I recommend double-checking your IP detection.  You can double-check the settings at Wordfence > All Options > General Wordfence Options > How does Wordfence get IPs.  Reference the area under that section that says Detected IPs and Your IP with this setting. See if any of the options there, when picked, accurately reflect your IP (you can find your IP by visiting https://www.whatsmyip.org).  If one does, don’t forget to hit the SAVE CHANGES button in the top-right after you’re done.

    If IP detection was already configured correctly, please let me know what block message you see when you receive the 503 error.

    Regarding the unlock emails, they come from your website, not our servers, and are sent using default WordPress mail send functions. Therefore, they should behave the same way as any other email that you receive from your site. If you aren’t getting emails, there are a few things it usually boils down to:

    • The emails (they come from wordpress@yoursitename.com) are getting sent to your junk mail folder by your email client or provider.  Make sure to allowlist or add your website to the list of safe domains so you get emails consistently.  
    • Your web server is having a problem with the email software on it. Usually, a restart of postfix or sendmail (whichever is installed) can fix it.  Your hosting provider may need to help with this.
    • Your hosting provider has disabled SMTP from the server for some reason.
    • You have a third party plugin for sending emails with another service, like Gmail, which isn’t working.  Reaching out to the plugin author for support can help.

    Please let me know how it goes!

    Thanks,
    Margaret

    Thread Starter yoni1

    (@yoni1)

    This is the message i’m getting. i am the site owner, and receiving emails from my website is normally no problem. When somebody fills in a form, i receive the filled in form in my mailbox.
    I don’t have a static IP, but this was never a problem. I do got a lot of mails lately that somebody is trying to log in, but i checked the box that they’re immidately banned when filling in a username that doesnt exist.


    Je toegang tot deze site is tijdelijk beperkt door de site beheerder

    Je toegang tot deze dienst is tijdelijk beperkt. Probeer nogmaals over een paar minuten. (HTTP reactie code 503)

    Als je denkt dat je ten onrechte bent geblokkeerd, neem dan voor hulp contact op met de eigenaar van deze site.

    If you are a WordPress user with administrative privileges on this site, please enter your email address in the box below and click “Send”. You will then receive an email that helps you regain access.  Blokkeer technische gegevensBlokkeer reden:Je bent tijdelijk uitgesloten van dit systeem. Dat betekend dat je een poos niet kunt inloggen.Tijd:Sun, 25 Jan 2026 18:41:04 GMTOver Wordfence

    Wordfence is een beveiligings plugin die op meer dan 5 miljoen WordPress sites is geïnstalleerd. De eigenaar van deze site gebruikt Wordfence om de toegang tot hun site te beheren.

    Je kan ook de documentatie lezen om meer te weten te komen over de gereedschappen voor blokkeren van Wordfence, of ga naar wordfence.com voor meer informatie over Wordfence.

    Click here to learn more: Documentatie

    Generated by Wordfence at Sun, 25 Jan 2026 18:41:04 GMT.
    Tijd van je computer: Sun, 25 Jan 2026 18:40:59 GMT.

    • This reply was modified 2 months, 2 weeks ago by yoni1.
    Plugin Support wfmargaret

    (@wfmargaret)

    Hi @yoni1,

    Thank you for the details. The block message confirms this is a Brute Force lockout.

    You mentioned you enabled “immediately lock out invalid usernames.” That setting is quite strict, and I’d recommend disabling it if you have multiple users on the site, such as customers, who need to log in.

    Did you get a chance to check the IP detection settings I mentioned? Go to Wordfence > All Options > General Wordfence Options > How does Wordfence get IPs, and see if “Your IP with this setting” matches your actual IP. If not, try a different option and save.

    Once you’ve verified that, I’d also recommend reviewing your Brute Force Protection settings at Wordfence > All Options > Brute Force Protection and comparing them to our recommended settings here: https://www.wordfence.com/help/firewall/brute-force/

    Let me know what you find!

    Thanks,
    Margaret

Viewing 3 replies - 1 through 3 (of 3 total)

You must be logged in to reply to this topic.