Scan Failed

Yes, looks like something is still being blocked.

Flushed all plugins related cache, still the same.
Pasting logs.

[Sep 21 16:38:53:1600695533.880352:4:info] Calling Wordfence API v2.26:https://noc1.wordfence.com/v2.26/?k=9de5eece238972859872312d041ddc78b5e57d245cf431843c74ad330791c0b4760b857b7106517b6cdf30952b563c7677c541d4e1fa721b00857b10e029434c611a422241a05d1cdf93d4b4a4bf08e0&s=eyJ3cCI6IjUuNS4xIiwid2YiOiI3LjQuMTEiLCJtcyI6ZmFsc2UsImgiOiJodHRwczpcL1wva2FjbWF6Y29yYXAuY29tIiwic3NsdiI6MjY4NDQzODM5LCJwdiI6IjcuMi4zMyIsInB0IjoibGl0ZXNwZWVkIiwiY3YiOiI3LjYyLjAiLCJjcyI6Ik9wZW5TU0xcLzEuMC4yayIsInN2IjoiTGl0ZVNwZWVkIiwiZHYiOiIxMC4yLjMzLU1hcmlhREIifQ&betaFeed=0&action=timestamp
[Sep 21 16:37:24:1600695444.191314:4:info] Scan process ended after forking.
[Sep 21 16:37:23:1600695443.389802:4:info] Starting cron via proxy at URL https://noc1.wordfence.com/scanp/kacmazcorap.com/wp-admin/admin-ajax.php?action=wordfence_doScan&isFork=0&scanMode=standard&cronKey=f313be3b32e91c73ca3be237831f24b9&k=9de5eece238972859872312d041ddc78b5e57d245cf431843c74ad330791c0b4760b857b7106517b6cdf30952b563c7677c541d4e1fa721b00857b10e029434c611a422241a05d1cdf93d4b4a4bf08e0&ssl=1&signature=c63ea8aa2cb6fe9f2e5ec1e791aace752d162e7a3fa3aca567e34af4d57efecd
[Sep 21 16:37:23:1600695443.389035:4:info] getMaxExecutionTime() returning config value: 20
[Sep 21 16:37:23:1600695443.388828:4:info] Got value from wf config maxExecutionTime: 20
[Sep 21 16:37:23:1600695443.388383:4:info] Entering start scan routine
[Sep 21 16:37:23:1600695443.387343:4:info] Ajax request received to start scan.
[Sep 21 16:37:21:1600695441.977631:10:info] SUM_KILLED:A request was received to stop the previous scan.
[Sep 21 16:37:21:1600695441.977329:1:info] Scan stop request received.
[Sep 21 16:37:19:1600695439.251091:10:info] SUM_KILLED:A request was received to stop the previous scan.
[Sep 21 16:37:19:1600695439.250656:1:info] Scan stop request received.
[Sep 21 16:37:04:1600695424.050709:4:info] Calling Wordfence API v2.26:https://noc1.wordfence.com/stats.json
[Sep 21 15:48:41:1600692521.869184:4:info] Scan process ended after forking.
[Sep 21 15:48:41:1600692521.075328:4:info] Starting cron via proxy at URL https://noc1.wordfence.com/scanp/kacmazcorap.com/wp-admin/admin-ajax.php?action=wordfence_doScan&isFork=0&scanMode=standard&cronKey=256774a28ee394f882c36577ba97a306&k=9de5eece238972859872312d041ddc78b5e57d245cf431843c74ad330791c0b4760b857b7106517b6cdf30952b563c7677c541d4e1fa721b00857b10e029434c611a422241a05d1cdf93d4b4a4bf08e0&ssl=1&signature=5646628403569537bc6cedb1195a40e7b286418fcf7dab9f1dbefbea5a86a99b
[Sep 21 15:48:41:1600692521.074388:4:info] getMaxExecutionTime() returning config value: 20
[Sep 21 15:48:41:1600692521.074119:4:info] Got value from wf config maxExecutionTime: 20
[Sep 21 15:48:41:1600692521.073547:4:info] Entering start scan routine
[Sep 21 15:48:41:1600692521.072340:4:info] Ajax request received to start scan.

Thanks for attempting that @qumbalar

I am wondering if this block is being caused by Cloudflare. Can you attempt to disable Cloudflare and also within your site, whitelist your site’s IP address in All Options > Firewall Options > Advanced Firewall Options > Whitelisted IP addresses that bypass all rules.

Let’s see what this does. We need to find out exactly what is blocking the request to noc1. It could be Cloudflare or it could possibly be an issue with the host as well.

Let me know what you find!

Thanks!

Cloudflare disabled,
site IP is whitelisted.
Still the same.

Meanwhile, I am contacting hosting company to ask if there is something on their side blocking.

Still expecting your help and comments as well.
I will inform when i get something from hosting company.

Sorry for bothering so much.

@qumbalar

I forgot to mention, now that we have repaired your tables, have you tried toggling the Start all scans remotely option in Tools > Diagnostics > Debugging Options. If it’s enabled, disable it and try another scan, or vise versa.

Just something to try while we wait on your host.

Thanks!

Changed Start all scans remotely and Debugging options and tried.
It says something different now: [Sep 21 17:44:38] Scan Engine Error: The signature on the request to start a scan is invalid. Please try again.

Could you send your PHP error log over to wftest @ wordfence . com. I don’t think this is a resource issue but I want to check to be sure.

– Email sent.
– Hosting co. is looking for what can block plugin.
– Also asking what plugin system requirements and fuctions are. They say that i need to pinpoint what i want them to do/check.

Check to see if anything is blocking the URL noc1.wordfence.com. Also, check to see if anything would be blocking access to admin-ajax.php. Check to see if your site’s IP is being blocked from connecting back to itself for any reason.

These seem to be the common issues associated with a scan forking.

I still haven’t got the email yet containing your PHP error logs.

Thanks again!

Hosting co. replied:

Check to see if anything is blocking the URL noc1.wordfence.com.
NO BLOCK

Also, check to see if anything would be blocking access to admin-ajax.php.
NO BLOCK

Check to see if your site’s IP is being blocked from connecting back to itself for any reason.
NO BLOCK

At this point, we might want to try and reinstall Wordfence. After you reinstall, send me another diagnostic and test the scan to see if we are getting the same result.

You can backup your Wordfence settings via the Export option. Navigate to Wordfence > Tools > Import/Export Options and click Export. You can also take note of the current Whitelisted URLs you have in Wordfence > Firewall > All Firewall Options > Whitelisted URLs as these are NOT included in the Import/Export, and will be lost during the re-install.
Here is what is exported: https://www.wordfence.com/help/tools/import-export/
During the export, you will be given a long string of text. Keep this safe, you’ll need it in a few minutes.

After that, enable the option to Delete Wordfence tables and data on deactivation in All Options > General Wordfence Options. You will want to remember to disable this after you reinstall Wordfence again.

After you enable that option, you can deactivate Wordfence from the Plugins area of your site, then delete it. Next, from the plugins area, search for and re-install Wordfence like normal.

It will be like setting Wordfence up for the first time. You will need to enter an email address, and then go into Tools > Import/Export Options and paste that string of text into the Import Wordfence Options field and click the button there.

The firewall will be in Learning Mode by default for 7 days. I would recommend switching this to Enabled and Protected as soon as possible.

Thanks again!

after reinstall and scan, here is the log:

[Sep 22 17:43:30:1600785810.502632:1:info] Quick Scan Complete. Scanned in less than 1 second.
[Sep 22 17:43:30:1600785810.502407:2:info] Wordfence used 0 B of memory for scan. Server peak memory usage was: 24 MB
[Sep 22 17:43:30:1600785810.501630:1:info] ——————-
[Sep 22 17:43:30:1600785810.439953:1:info] Initiating quick scan

Thanks for that @qumbalar

I was just going back over your diagnostics again and I noticed this is a Litespeed server.

https://www.wordfence.com/help/advanced/system-requirements/litespeed/ can walk you through some steps to resolve this issue.

Let me know if this works!

Thanks!

I will get back to you asap.

waiting for the hosting company to take necessary action.

• This reply was modified 4 years, 2 months ago by qumbalar.

While youre waiting for them, have you tried the All Options > General Wordfence Options > Bypass the LiteSpeed “noabort” check?

Let me know if that helps!

Thanks!