Wordfence is scanning forever

  • Resolved MCosmin

    (@mcosmin)


    10 years, 9 months ago

    Hi,

    I installed wordfence I and I started a scan, but it didn’t stop. After six hours, it was still scanning. I disable the plugin and I reactivated it again, I restarted the scan, same thing. I killed the running scan and I started it again, same problem – the scan doesn’t stop.

    On Scan Summary I have:
    Preparing a new scan.Done.
    Remote scan of public facing site only available to paid membersPaid Members Only
    Fetching core, theme and plugin file signatures from WordfenceSuccess.
    Fetching list of known malware files from WordfenceSuccess.
    Comparing core WordPress files against originals in repositorySecure.
    Skipping theme scanDisabled [Visit Options to Enable]
    Skipping plugin scanDisabled [Visit Options to Enable]
    Scanning for known malware filesSecure.
    Scanning file contents for infections and vulnerabilities
    Scanning files for URLs in Google’s Safe Browsing List

    On the last two items the scan doesn’t stop.

    On Scan Detailed Activity I have:
    …
    Starting scan of file contents

    What should I do to make the scan working?

    https://www.ads-software.com/plugins/wordfence/

Viewing 15 replies - 1 through 15 (of 31 total)
  • Plugin Author Wordfence Security

    (@mmaunder)

    You might be running out of memory. Check the system information link at the bottom of the options page. Let me know what memory_limit is set to.

    Regards,

    Mark.

    Thread Starter MCosmin

    (@mcosmin)

    Hi,

    This is my test result:

    Current maximum memory configured in php.ini: 128M
    Current memory usage: 44.25M
    Setting max memory to 90M.
    Starting memory benchmark. Seeing an error after this line is not unusual. Read the error carefully to determine how much memory your host allows. We have requested 90 megabytes.
    Completing test after benchmarking up to 80.25 megabytes.
    –Test complete.–

    Congratulations, your web host allows you to use at least 80.25 megabytes of memory for each PHP process hosting your WordPress site.

    I have installed Wordfence on another site, with same configuration, and it worked perfect. But on the first website, still nothing, the scan didn’t finished. I have same version of WordPress and almost same plugins on both websites. I can’t realize why on my first website wordfence scan can’t be completed.

    On Scan Detailed Activity, sometimes the text show

    Starting scan of file contents

    another time show

    Starting scan of file contents
    Scanned contents of 96 additional files at 86.08 per second
    Scanned contents of 140 additional files at 95.07 per second
    Asking Wordfence to check URL’s against malware list.
    Checking 87 host keys against Wordfence scanning servers.

    and then nothing happen.

    Regards,
    Cosmin

    Plugin Author Wordfence Security

    (@mmaunder)

    Hi Cosmin,

    Please click the system information link and then do a text search for ‘memory_limit’ without quotes and tell me what that’s set to.

    Regards,

    Mark.

    Thread Starter MCosmin

    (@mcosmin)

    Hi Mark,

    Directive Local Value Master Value
    memory_limit 128M 128M

    Plugin Author Wordfence Security

    (@mmaunder)

    OK that should be enough. Can you tell me if you have access to your web server error log? I need to take a look at that and see what errors are appearing.

    Regards,

    Mark.

    Thread Starter MCosmin

    (@mcosmin)

    I have access to only Error Logs from CPanel, but it is nothing there. I will try to ask my host providers for these logs.

    M

    (@infolegal)

    I also have this problem. Memory limit on my server is set to 276M (so more than enough i presume). No errors on the last 300 err list. Feedback is appreciated.

    One small note – I have the premium account and in progress status is shown for these:

    Feb 20 07:45:01]
    Comparing core WordPress files against originals in repository
    [Feb 20 07:45:01]
    Comparing open source themes against www.ads-software.com originals
    [Feb 20 07:45:01]
    Comparing plugins against www.ads-software.com originals
    [Feb 20 07:45:01]
    Scanning for known malware files

    Thread Starter MCosmin

    (@mcosmin)

    Hi Mark,

    I put the logs on cpf.ro/tmp/lslog.txt. I put the logs on another website, for security reasons.

    There is aprox. 15 minutes of logs, in this time I killed the process and then I started again the scan. I hope these logs can help you finding the issue.

    Thanks for helping me resolving this issue.

    Plugin Author Wordfence Security

    (@mmaunder)

    Sorry, but this is the access log. I need the error log.

    Regards,

    Mark.

    Thread Starter MCosmin

    (@mcosmin)

    Nothing in the error logs.

    I think that something is wrong with mod_security. I tried this plugin on three websites: same configuration, same plugins. On the first website the scan doesn’t work. On two other websites from another provider this plugin works perfect. So I think some rules from mod_security don’t let wordfence scan to work.

    Do you have some old reports regarding some issues of this plugin with some rules from mod_security?
    Anyway, I’ll ask my host providers to check this issue also.

    Regards,
    Cosmin

    Plugin Author Wordfence Security

    (@mmaunder)

    Hi Cosmin,

    Yes actually I have had reports of mod_security conflicting with Wordfence but I don’t have specific examples. If you can confirm this and let me know it would help other users.

    Regards,

    Mark.

    M

    (@infolegal)

    Hi Mark,

    I just learnt from my provider that on the server my site is hosted mod_security is not installed. Yet, the scanning never finishes.

    Thanks,
    M

    Thread Starter MCosmin

    (@mcosmin)

    My host providers deactivated mod_security. I repeated the scan but still no results. I couldn’t figure out why on two almost identical websites, on one domain wordfence is working without any problems, on another one scan doesn’t finish.
    But I will investigate more.

    Thread Starter MCosmin

    (@mcosmin)

    Some news from providers:
    The website where wordfence can’t scan is posted on LiteSpeed server.
    The website where wordfence works is posted on Apache server.

    These are for the moment the differences. Still investigate.

    M

    (@infolegal)

    LiteSpeed server here too.

Viewing 15 replies - 1 through 15 (of 31 total)
  • The topic ‘Wordfence is scanning forever’ is closed to new replies.