How to Increase THRESHOLD

Hi @faarukh, thanks for reaching out to us.

The setting you need may actually be related to the maximum execution time from the looks of things.

• Cancel the existing scan if it still appears like the screenshot.
• Go to your Scan > Scan Options and Scheduling page and locate the “Performance Options”
  Set “Maximum execution time for each scan stage” to 20 on the options page
• Click to “Save Changes”

This may work immediately, however if you continue to experience problems, you can also take the following steps so that I can grab some information to help you:

• Go to the Tools > Diagnostics page
• In the “Debugging Options” section check the circle “Enable debugging mode”
• Click to “Save Changes”.
• Start a new scan
• Copy the last 20 lines from the activity log (click the “Show Log” link) once the scan finishes and paste them here.

Thanks,

Peter.

First can you please tell me that Cloudflare affects the Wordfence scanning process?

I am using Cloudflare on my website and I thought that Cloudflare causing the issue and after removing the Cloudflare and scanning the Wordfence, I got the scanning failed error agian.

Please clarify this thing.

Hi @faarukh,

Cloudflare may require allowing of your site’s IP address in the firewall. If the issue is a different one, the scan debug information should point us in the correct direction.

Thanks again,

Peter.

After increasing the “Maximum execution time for each scan stage” to 20 it didn’t work because the scan was failed.

I started the new scan after enabling the debugging mode. Here are the last 20 lines from the activity log.

[Apr 21 13:40:13] Scanning: /home/thewoodv/public_html/wp-content/uploads/2015/05/my-account-header-1-350×350.jpg (Mem:36.0M)
[Apr 21 13:40:13] Scanning: /home/thewoodv/public_html/wp-content/uploads/2015/05/my-account-header-1-380×203.jpg (Mem:36.0M)
[Apr 21 13:40:13] Scanning: /home/thewoodv/public_html/wp-content/uploads/2015/05/my-account-header-1-400×113.jpg (Mem:36.0M)
[Apr 21 13:40:13] Scanning: /home/thewoodv/public_html/wp-content/uploads/2015/05/my-account-header-1-460×295.jpg (Mem:36.0M)
[Apr 21 13:40:13] Analyzed 10200 files containing 132.69 MB of data so far
[Apr 21 13:40:13] Scanning: /home/thewoodv/public_html/wp-content/uploads/2015/05/my-account-header-1-500×141.jpg (Mem:36.0M)
[Apr 21 13:40:13] Scanning: /home/thewoodv/public_html/wp-content/uploads/2015/05/my-account-header-1-540×272.jpg (Mem:36.0M)
[Apr 21 13:40:13] Scanning: /home/thewoodv/public_html/wp-content/uploads/2015/05/my-account-header-1-600×169.jpg (Mem:36.0M)
[Apr 21 13:40:13] Scanning: /home/thewoodv/public_html/wp-content/uploads/2015/05/my-account-header-1-640×181.jpg (Mem:36.0M)
[Apr 21 13:40:13] Scanning: /home/thewoodv/public_html/wp-content/uploads/2015/05/my-account-header-1-669×272.jpg (Mem:36.0M)
[Apr 21 13:40:13] Scanning: /home/thewoodv/public_html/wp-content/uploads/2015/05/my-account-header-1-66×66.jpg (Mem:36.0M)
[Apr 21 13:40:13] Scanning: /home/thewoodv/public_html/wp-content/uploads/2015/05/my-account-header-1-700×197.jpg (Mem:36.0M)
[Apr 21 13:40:13] Scanning: /home/thewoodv/public_html/wp-content/uploads/2015/05/my-account-header-1-700×441.jpg (Mem:36.0M)
[Apr 21 13:40:13] Scanning: /home/thewoodv/public_html/wp-content/uploads/2015/05/my-account-header-1-768×217.jpg (Mem:36.0M)
[Apr 21 13:40:13] Scanning: /home/thewoodv/public_html/wp-content/uploads/2015/05/my-account-header-1-800×226.jpg (Mem:36.0M)
[Apr 21 13:40:15] Scan engine received request.
[Apr 21 13:40:15] Verifying start request signature.
[Apr 21 13:40:15] Fetching stored cronkey for comparison.
[Apr 21 13:40:15] Checking cronkey: 474feb34130f0c6a83f3b8aa87c1ca6e (expecting [none])
[Apr 21 13:40:15] Wordfence could not find a saved cron key to start the scan so assuming it started and exiting.`

Hi @faarukh, thanks for providing that detail.

In some instances with load balanced databases and web sites, the scan will stop with this exact error. In Wordfence > Scan > Scan Options > General Options, this has been known to be fixed by disabling the “Scan file contents for malicious URLs” option.

Let me know how you get on.

Thanks,

Peter.

Hello

After disabling the “Scan file contents for malicious URLs” option.

I got the scan to fail error again.
Screenshot: https://ibb.co/C6jZZ0H

Here are the last 20 lines:

[Apr 23 11:56:46] Analyzed 700 files containing 14.05 MB of data so far
[Apr 23 11:56:46] Analyzed 800 files containing 18.73 MB of data so far
[Apr 23 11:56:47] Analyzed 900 files containing 23.98 MB of data so far
[Apr 23 11:56:47] Analyzed 1000 files containing 26.49 MB of data so far
[Apr 23 11:56:48] Analyzed 1100 files containing 28.29 MB of data so far
[Apr 23 11:56:49] Analyzed 1200 files containing 31.14 MB of data so far
[Apr 23 11:56:49] Analyzed 1300 files containing 34.46 MB of data so far
[Apr 23 11:56:50] Analyzed 1400 files containing 37.04 MB of data so far
[Apr 23 11:56:50] Analyzed 1500 files containing 37.64 MB of data so far
[Apr 23 11:56:51] Analyzed 1600 files containing 37.87 MB of data so far
[Apr 23 11:56:51] Analyzed 1700 files containing 38.17 MB of data so far
[Apr 23 11:56:52] Analyzed 1800 files containing 38.41 MB of data so far
[Apr 23 11:56:53] Analyzed 1900 files containing 38.64 MB of data so far
[Apr 23 11:56:53] Analyzed 2000 files containing 38.98 MB of data so far
[Apr 23 11:56:53] Analyzed 2100 files containing 39.38 MB of data so far
[Apr 23 11:56:54] Analyzed 2200 files containing 39.78 MB of data so far
[Apr 23 11:56:55] Analyzed 2300 files containing 40.12 MB of data so far
[Apr 23 11:56:55] Analyzed 2400 files containing 41.95 MB of data so far
[Apr 23 11:56:56] Analyzed 2500 files containing 42.74 MB of data so far
[Apr 23 11:56:56] Analyzed 2600 files containing 47.19 MB of data so far

Hi @faarukh,

Sorry to see that didn’t work for you. So I can see your server configuration a bit more closely, can you send a diagnostic report to wftest @ wordfence . com? You can find the link to do so at the top of the Wordfence Tools > Diagnostics page. Then click on “Send Report by Email”. Please add your forum username where indicated and respond here after you have sent it.

Note: For the fastest response time, please make sure and add any information or questions directly to this topic and not the email address above unless asked.

Thanks,

Peter.

Hi

I have sent the Diagnostic report.

Hi @faarukh,

I have received your diagnostic and taken a look through. On the face of things, there don’t seem to be any connectivity issues between your site and our servers which is good.

I notice you have Litespeed Cache installed so I would certainly try flushing the cache before starting a scan to see if that might be the culprit. Let me know if that has the desired effect, if not I will discuss the issue further with our development team.

Thanks,

Peter.

I have run the new scan and got the scan failed message after 11 minutes.

Please note that Wordfence is installed on three websites and the issue is the same “scan failed”.

All three websites are on Litespeed Cache.

Hi @faarukh,

We think it’s best to try exporting settings, removing tables & data, and reinstalling Wordfence. You can then import your settings to the new installation. There could be something wrong with the wfconfig table that’s causing your specific error here.

• Wordfence > Tools > Import/Export Options will let you export the settings (and import again later.)
• Wordfence > All Options > General Wordfence Options > Delete Wordfence tables and data on deactivation will completely remove Wordfence data when you disable the plugin.
• You can then uninstall Wordfence and obtain it again from WordPress > Plugins > Add New

If you’re familiar with running database operations, you could try repairing the wfconfig table first but this is not essential.

You may also find the Wordfence Assistant and the Remove/Reset instructions in our help documentation useful if anything is unclear.

Thanks,

Peter.

Hi

After applying your above method, still scan failed.

Hello

Any update?

Hi @faarukh,

I have been in conversation with our development team and checking the error logs would be a good next logical step. Your Wordfence > Tools > Diagnostics page has a “Log Files” section which shows error log files in both the site root and wp-admin. Try downloading those and sending them over to us.

If you also have server access logs, you could send those to us covering the timeframe of an attempted scan so that we could see if the hit seems to be logged normally. Trigger a new scan and make note of the time if you need to in order to get the information we need.

Those can again be sent to wftest @ wordfence . com. If you like, the diagnostics from the other sites experiencing this issue could also be sent over to see if there’s any common ground. As before, in any emails make sure to include your forum username (@faarukh) in the subject line so I can find them easily.

Thanks,

Peter.

Hello

I have sent you the log files of my three websites via email.

The subject is: @faarukh

Regards
Farrukh