wp-admin suddenly redirects to 127.0.0.1

Is your server behind a reverse proxy?

I have no solution, but seem to have a related issue. I am trying to run WordPress on Apache, which is configured to listen to 127.0.0.1:8002. In front of this, I have nginx listening to https://www.mydomain.com:80 and passing requests to Apache.

Have you tried setting WP_HOME and WP_SITEURL as constants in wp-config.php? (See https://codex.www.ads-software.com/Changing_The_Site_URL for more info.)

In my case, I have both settings in wp-config.php and still get some links in the admin panel pointing to 127.0.0.1:8002. Example: In the posts list, when I click on one of the table headers to change the sort order.

So I put these 2 lines into wp-config.php

define('WP_HOME','https://mysiteurl.com');
define('WP_SITEURL','https://mysiteurl.com');

And it didn’t change anything. I still can’t access admin panel, it simply redirects to https://127.0.0.1. I don’t have my own hosting server, my website is hosted on one of hosting providers.

What should I do?

The host may be blocking brute force attacks and making the wp-admin inaccessible (thus preventing attackers from breaking in as they can’t even reach it) and redirecting people back to localhost. Try contacting your host.

Another possibility is that you’re using a WordPress security plugin that after so many failed attempts to login redirects the attacker (based on IP address) to “localhost”. If this is so, disable the plugin via FTP/SFTP by renaming its folder and see if that let’s you get in.

I have contacted my host and they said that everything should be fine.

I’ve also tried to rename “plugins” folder but it didn’t make any difference.

Got it, it was WP All In One Security who modified .htaccess in a way that completely broken wp-admin. It works fine now.

Thanks for help guys.

Hi, I am having the same problem with WP All in One Security.

But now I have deleted the plugin folder via filezilla, but still don’t have an access to my panel.

Any suggestions what to do next?

@krneki10 – mi pove? kontakt od wp all in one security memberjev oz. kodo ?

@ideep13: Please post in https://www.ads-software.com/support/plugin/all-in-one-wp-security-and-firewall

This is currently happening on *all* 1&1 websites FYI – in case anyone is Googling this error…

@andersonenvy is right. I am having all sorts of difficulties with 1and1

Yep happening to mine and I’m on 1and1. So is it the DDOS thing rather than a plugin? Don’t think that any of my plugins are changing htaccess.

I am having the same problem. I am hosted on 1and1. Is there any official info from 1and1 on this?

Just found this awesome work around! And it worked!!!

https://www.ads-software.com/support/topic/wp-loginphp-redirects-to-http127001?replies=17#post-5051085

Found some info: https://status-1and1.com/#Incident

Start:12/30/2013 2:41 PM
Estimated end:Unknown
Last update:12/30/2013 2:41 PM
Type:Incident
Affected services:Websites
Description:
We’re experiencing an issue affecting less than 0.5% of the 1&1 customer base.
The affected users are unable to access their WordPress Admin-Login.

Yeah. having the same issue too – spent ages trying to get to the bottom of it.

I’m using the workaround for the time being which works, but a bit of a pain.

I would consult 1&1 before using any work around – they may have a logical reason to be blocking admin logins on a server….