Use timing, logs and recent changes to narrow down a server error.
Find out why access is refused without opening up your entire website.