Scan Failed

  • Resolved carworldnow

    (@carworldnow)


    5 years, 5 months ago

    Scan Failed
    The scan has failed to start. This is often because the site either cannot make outbound requests or is blocked from connecting to itself.

    Getting this message in the log

    [Dec 22 11:40:30:1608617430.505444:1:info] Scan stop request received.

    The page I need help with: [log in to see the link]

Viewing 7 replies - 1 through 7 (of 7 total)
  • Plugin Support wfpeter

    (@wfpeter)

    5 years, 5 months ago

    Hi @carworldnow, thanks for getting in touch with us over this issue.

    Can you do the following so I can get the log information I need to help you?

    • Kill the existing scan if it is still running (The “Start New Scan” button turns in to a “Stop” button while the scan is running)
    • Go to your Scan > Scan Options and Scheduling page and locate the “Performance Options”
      Set “Maximum execution time for each scan stage” to 20 on the options page
    • Click to “Save Changes”
    • Go to the Tools > Diagnostics page
    • In the “Debugging Options” section check the circle “Enable debugging mode”
    • Click to “Save Changes”.
    • Start a new scan
    • Copy the last 20 lines from the Log (click the “Show Log” link) or so of the activity log once the scan finishes and paste them in the post.

    On occasion, this fixes it straight away. That’s because adding 20 for the “Maximum execution time for each scan stage” tells the scan to pause every 20 seconds and start again where it left off. If this fixes the issue and scans run again, you can leave all the settings above except for “Enable Debugging Mode”.

    Thanks,

    Peter.

    Thread Starter carworldnow

    (@carworldnow)

    5 years, 5 months ago

    Hi,

    Please find the scan log I’m getting same issue. Also please note Connecting back to this site: also shows below message.

    
wp_remote_post() test back to this server failed! Response was: cURL error 28: Operation timed out after 10001 milliseconds with 0 bytes received

[Dec 23 15:27:28:1608717448.782047:4:info] Scan process ended after forking.
[Dec 23 15:27:28:1608717448.496902:4:info] Starting cron via proxy at URL https://noc1.wordfence.com/scanp/alseller.com/wp-admin/admin-ajax.php?action=wordfence_doScan&isFork=0&scanMode=limited&cronKey=3fb06167ffc09243e5edb20c71e2c4ca&k=39e66be76d71ef69e77f7460209c2cdf2f71bfb6bda1d24e53753442323362d285191736095f6d1259c87956a5621f726994c67078874ec5746a4b80f6ca1286&ssl=1&signature=62d7a088d8b9e758ad0959a4db18d7150341b557369d821f521fc2a70ec33f5f
[Dec 23 15:27:28:1608717448.496286:4:info] getMaxExecutionTime() returning config value: 20
[Dec 23 15:27:28:1608717448.496127:4:info] Got value from wf config maxExecutionTime: 20
[Dec 23 15:27:28:1608717448.495733:4:info] Entering start scan routine
[Dec 23 15:27:28:1608717448.495203:4:info] Ajax request received to start scan.
[Dec 23 15:27:25:1608717445.608996:10:info] SUM_KILLED:A request was received to stop the previous scan.
[Dec 23 15:27:25:1608717445.608612:1:info] Scan stop request received.
[Dec 23 15:27:18:1608717438.873097:10:info] SUM_KILLED:A request was received to stop the previous scan.
[Dec 23 15:27:18:1608717438.872785:1:info] Scan stop request received.
[Dec 23 15:22:50:1608717170.131299:4:info] Calling Wordfence API v2.26:https://noc1.wordfence.com/v2.26/?k=39e66be76d71ef69e77f7460209c2cdf2f71bfb6bda1d24e53753442323362d285191736095f6d1259c87956a5621f726994c67078874ec5746a4b80f6ca1286&s=eyJ3cCI6IjUuNiIsIndmIjoiNy40LjE0IiwibXMiOmZhbHNlLCJoIjoiaHR0cHM6XC9cL2Fsc2VsbGVyLmNvbSIsInNzbHYiOjI2OTQ4ODI3MSwicHYiOiI3LjIuMzQiLCJwdCI6ImZwbS1mY2dpIiwiY3YiOiI3LjcyLjAiLCJjcyI6Ik9wZW5TU0xcLzEuMS4xaCIsInN2IjoiQXBhY2hlIiwiZHYiOiIxMC4yLjM2LU1hcmlhREItbG9nIn0&betaFeed=0&action=timestamp
[Dec 23 15:22:11:1608717131.686950:4:info] Calling Wordfence API v2.26:https://noc1.wordfence.com/v2.26/?k=39e66be76d71ef69e77f7460209c2cdf2f71bfb6bda1d24e53753442323362d285191736095f6d1259c87956a5621f726994c67078874ec5746a4b80f6ca1286&s=eyJ3cCI6IjUuNiIsIndmIjoiNy40LjE0IiwibXMiOmZhbHNlLCJoIjoiaHR0cHM6XC9cL2Fsc2VsbGVyLmNvbSIsInNzbHYiOjI2OTQ4ODI3MSwicHYiOiI3LjIuMzQiLCJwdCI6ImZwbS1mY2dpIiwiY3YiOiI3LjcyLjAiLCJjcyI6Ik9wZW5TU0xcLzEuMS4xaCIsInN2IjoiQXBhY2hlIiwiZHYiOiIxMC4yLjM2LU1hcmlhREItbG9nIn0&betaFeed=0&action=timestamp
[Dec 23 15:21:39:1608717099.646263:4:info] Calling Wordfence API v2.26:https://noc1.wordfence.com/v2.26/?k=39e66be76d71ef69e77f7460209c2cdf2f71bfb6bda1d24e53753442323362d285191736095f6d1259c87956a5621f726994c67078874ec5746a4b80f6ca1286&s=eyJ3cCI6IjUuNiIsIndmIjoiNy40LjE0IiwibXMiOmZhbHNlLCJoIjoiaHR0cHM6XC9cL2Fsc2VsbGVyLmNvbSIsInNzbHYiOjI2OTQ4ODI3MSwicHYiOiI3LjIuMzQiLCJwdCI6ImZwbS1mY2dpIiwiY3YiOiI3LjcyLjAiLCJjcyI6Ik9wZW5TU0xcLzEuMS4xaCIsInN2IjoiQXBhY2hlIiwiZHYiOiIxMC4yLjM2LU1hcmlhREItbG9nIn0&betaFeed=0&action=timestamp
[Dec 23 15:21:10:1608717070.004908:4:info] Calling Wordfence API v2.26:https://noc1.wordfence.com/v2.26/?k=39e66be76d71ef69e77f7460209c2cdf2f71bfb6bda1d24e53753442323362d285191736095f6d1259c87956a5621f726994c67078874ec5746a4b80f6ca1286&s=eyJ3cCI6IjUuNiIsIndmIjoiNy40LjE0IiwibXMiOmZhbHNlLCJoIjoiaHR0cHM6XC9cL2Fsc2VsbGVyLmNvbSIsInNzbHYiOjI2OTQ4ODI3MSwicHYiOiI3LjIuMzQiLCJwdCI6ImZwbS1mY2dpIiwiY3YiOiI3LjcyLjAiLCJjcyI6Ik9wZW5TU0xcLzEuMS4xaCIsInN2IjoiQXBhY2hlIiwiZHYiOiIxMC4yLjM2LU1hcmlhREItbG9nIn0&betaFeed=0&action=timestamp
[Dec 23 15:12:46:1608716566.885201:4:info] Calling Wordfence API v2.26:https://noc1.wordfence.com/v2.26/?k=39e66be76d71ef69e77f7460209c2cdf2f71bfb6bda1d24e53753442323362d285191736095f6d1259c87956a5621f726994c67078874ec5746a4b80f6ca1286&s=eyJ3cCI6IjUuNiIsIndmIjoiNy40LjE0IiwibXMiOmZhbHNlLCJoIjoiaHR0cHM6XC9cL2Fsc2VsbGVyLmNvbSIsInNzbHYiOjI2OTQ4ODI3MSwicHYiOiI3LjIuMzQiLCJwdCI6ImZwbS1mY2dpIiwiY3YiOiI3LjcyLjAiLCJjcyI6Ik9wZW5TU0xcLzEuMS4xaCIsInN2IjoiQXBhY2hlIiwiZHYiOiIxMC4yLjM2LU1hcmlhREItbG9nIn0&betaFeed=0&action=resolve_ips
[Dec 23 15:12:46:1608716566.594121:4:info] Calling Wordfence API v2.26:https://noc1.wordfence.com/stats.json
[Dec 23 12:10:53:1608705653.197091:4:info] Calling Wordfence API v2.26:https://noc1.wordfence.com/v2.26/?k=39e66be76d71ef69e77f7460209c2cdf2f71bfb6bda1d24e53753442323362d285191736095f6d1259c87956a5621f726994c67078874ec5746a4b80f6ca1286&s=eyJ3cCI6IjUuNiIsIndmIjoiNy40LjE0IiwibXMiOmZhbHNlLCJoIjoiaHR0cHM6XC9cL2Fsc2VsbGVyLmNvbSIsInNzbHYiOjI2OTQ4ODI3MSwicHYiOiI3LjIuMzQiLCJwdCI6ImZwbS1mY2dpIiwiY3YiOiI3LjcyLjAiLCJjcyI6Ik9wZW5TU0xcLzEuMS4xaCIsInN2IjoiQXBhY2hlIiwiZHYiOiIxMC4yLjM2LU1hcmlhREItbG9nIn0&betaFeed=0&action=aggregate_stats
[Dec 23 00:50:37:1608664837.314222:4:info] Scan process ended after forking.
[Dec 23 00:50:37:1608664837.024157:4:info] Starting cron via proxy at URL https://noc1.wordfence.com/scanp/alseller.com/wp-admin/admin-ajax.php?action=wordfence_doScan&isFork=0&scanMode=limited&cronKey=979e278a3c1302601100edbb67b71732&k=39e66be76d71ef69e77f7460209c2cdf2f71bfb6bda1d24e53753442323362d285191736095f6d1259c87956a5621f726994c67078874ec5746a4b80f6ca1286&ssl=1&signature=c0a795fe7a3dc1819594dfe8f4151f0757b88c783e1e48a0c4266d435f70ed4b
[Dec 23 00:50:37:1608664837.023502:4:info] getMaxExecutionTime() returning config value: 15
[Dec 23 00:50:37:1608664837.023406:4:info] Got value from wf config maxExecutionTime: 15
[Dec 23 00:50:37:1608664837.023165:4:info] Entering start scan routine
[Dec 23 00:50:36:1608664836.991864:1:info] Scheduled Wordfence scan starting at Wednesday 23rd of December 2020 12:50:36 AM
[Dec 22 14:43:56:1608628436.849444:10:info] SUM_KILLED:A request was received to stop the previous scan.
    • This reply was modified 5 years, 5 months ago by Yui.
    • This reply was modified 5 years, 5 months ago by Yui. Reason: please use CODE button for proper formatting
    Plugin Support wfpeter

    (@wfpeter)

    5 years, 5 months ago

    Hi @carworldnow, thanks for the log information.

    I have seen SUM_KILLED come up recently, but as you say, the solution may depend on your server configuration and why the connections to our servers and back to your site are not functioning properly. If I can see all of the available information I can hopefully get to the bottom of this for you.

    Can you send a diagnostic report to wftest @ wordfence . com? You can find the link to do so at the top of the Wordfence Tools > Diagnostics page. Then click on “Send Report by Email”. Please add your forum username where indicated and respond here after you have sent it.

    Note: For the fastest response time, please make sure and add any information or questions directly to this topic and not the email address above unless asked.

    Thanks again,

    Peter.

    Thread Starter carworldnow

    (@carworldnow)

    5 years, 5 months ago

    Report send now.
    but now Connecting back to this site shows green.
    OK – 2606:4700:3031::681b:9c28, 2606:4700:3033::ac43:d6d3, 2606:4700:3030::681b:9d28, 104.27.156.40, 172.67.214.211, 104.27.157.40

    but still not able to scan.

    Plugin Support wfpeter

    (@wfpeter)

    5 years, 5 months ago

    Hi @carworldnow,

    Your diagnostic looks all clear in terms of connections in/out and scan errors, which is unusual when seeing the scans being stopped like this despite extending the timeout. It appears that Litespeed is present on your server, but the server itself is reporting back as FPM/FastCGI. Your error seems to tally with a Litespeed site where the hosting provider uses the LiteSpeed external application abort, so it’s worth attempting an override on that.

    # BEGIN litespeed noabort
<IfModule rewrite_module>
RewriteEngine On
RewriteRule .* - [E=noabort:1]
</IfModule>
# END litespeed noabort

    If this is in place, disable Start scan remotely and then try to run a scan as you would normally with debugging mode on.

    There is further information here: https://www.wordfence.com/help/advanced/system-requirements/litespeed/

    Let me know how that goes for you.

    Thanks again,

    Peter.

    Thread Starter carworldnow

    (@carworldnow)

    5 years, 5 months ago

    Hi,
    I have checked with hosting support team. There’s no Litespeed, it’s on NGINX.
    Please note I’m using Cloudflare also.
    I have disabled Start scan remotely, then it start scanning but after few time the scan got stopped.

    I have enabled debug mode and send log. Please check.

    Plugin Support wfpeter

    (@wfpeter)

    5 years, 5 months ago

    Hi @carworldnow, my apologies, have you already whitelisted your site’s IP with Cloudflare? Just in case you haven’t, I’ll include the details on how to do this below so you don’t have to wait. Visit your Cloudflare control panel:

    • Login to Cloudflare
    • Go to “Firewall”
    • Click the “Firewall Rules” tab
    • Click “Create a Firewall rule”
    • Name the rule under “Rule Name”
    • Set the “Field” under “When incoming requests match…” to “IP Address”
    • Enter your site’s IP address under “Value”
    • At the bottom, under “Then…Choose an action” change “Block” to “Allow”
    • Click “Deploy

    Once you have added your site to the Cloudflare Whitelist, head back over to your site and attempt another Wordfence scan.

    Let me know if this helps, or has already been configured and I’ll take a deeper look into your site diagnostics to see what might be happening.

    Thanks,

    Peter.

Viewing 7 replies - 1 through 7 (of 7 total)

The topic ‘Scan Failed’ is closed to new replies.