Scan Failed

Hello @qumbalar and thanks for opening a new topic! Thank you for also reaching out to us!

Can you send a diagnostic report to wftest @ wordfence . com? You can find the link to do so at the top of the Wordfence Tools > Diagnostics page. Then click on “Send Report by Email”. Please add your forum username where indicated and respond here after you have sent it.

I can review your tables to make sure they look ok.

Thanks!

I have tried several times but it says “There was an error while sending the email.”
I couldnt send it to my personal mail as well.

Thanks,

Then their might be something wrong with your sites smtp. Wordfence just uses your default smtp for your host. Do you use a plugin for smtp mail?

Navigate to Tools > Diagnostics > Other Tests and from here you can send yourself a test email. Is this failing as well? If so, check with your host about your smtp mail issues.

Let me know what you find!

Thanks!

Hi @qumbalar, if SMTP isn’t the problem as mentioned above in the replies by @wfadam, maybe you could try the approach that worked for me. Install WP Rollback plugin and downgrade WordFence to a previous version and run the scan again. That should work. This problem ate a lot of my brain until it occurred to me to use a previous version. ??

What was your issue @aniruddhapathak ? I don’t recommend rolling back a plugin to a previous version, as it might come with security flaws.

If you decide to update the plugin and you are having issues still, please post a new topic and I would be more than happy to assist you!

Thanks!

Hi @wfadam, I understand the security issues that may arise with it. I am always apprehensive about downgrading. However, in this case, it did help me run the scan and repair the files affected in the recent File Manager plugin zero-day vulnerability. I upgraded WordFence once that was done and it’s back to normal. Otherwise, the scan just didn’t run, no matter how many fixes I tried.

@wfadam There is a problem with the hosting company/sending emails.
I will get back to you when i can send an email.

@aniruddhapathak thanks for the comment. i will try Adam’s solution first.

@wfadam mail sent.

Thanks for sending those reports @qumbalar and also glad to see that issue resolved for you.

You are definitely having issues with your tables as some of them are missing completely. I recommend reinstalling them.

You can backup your Wordfence settings via the Export option. Navigate to Wordfence > Tools > Import/Export Options and click Export. You can also take note of the current Whitelisted URLs you have in Wordfence > Firewall > All Firewall Options > Whitelisted URLs as these are NOT included in the Import/Export, and will be lost during the re-install.
Here is what is exported: https://www.wordfence.com/help/tools/import-export/
During the export, you will be given a long string of text. Keep this safe, you’ll need it in a few minutes.

After that, enable the option to Delete Wordfence tables and data on deactivation in All Options > General Wordfence Options. You will want to remember to disable this after you reinstall Wordfence again.

After you enable that option, you can deactivate Wordfence from the Plugins area of your site, then delete it. Next, from the plugins area, search for and re-install Wordfence like normal.

It will be like setting Wordfence up for the first time. You will need to enter an email address, and then go into Tools > Import/Export Options and paste that string of text into the Import Wordfence Options field and click the button there.

The firewall will be in Learning Mode by default for 7 days. I would recommend switching this to Enabled and Protected as soon as possible.

This should help resolve the issue for you.

Let me know how this goes!

Thanks!

Hi again,

Well, thank you for your kind approach as well as help.

I have performed all steps 1 by 1 as per your walkthrough.
After new installation, tables are fixed but scan still fails.
So, i have sent a new diagnostic mail for you to investigate.

Thanks,

Thanks for sending another report @qumbalar

The tables look perfect now! The next thing we need to do, since I see your use Cloudflare, is to make sure Cloudflare is not blocking requests to your site for the scan.

Make sure you haven’t blocked Wordfence’s scanning server’s IP address range from accessing your site. Our servers are from 69.46.36.0 to 69.46.36.32. If your site is unable to connect to itself to start a scan, we get our scanning servers to connect to you to kick the scan off. If you’ve blocked our servers, your scans won’t start. Add this IP range into your Whitelists in Cloudflare.

After you complete this, try another scan with debugging mode on. If it fails, post here the last 20 lines.

Hope this helps!

Thanks!

Checked Firewall / Cloudflare, I haven’t seen any block status for WordFence
Anyway, i wanted to add your IPs and marked them as allowed, but CloudFlare doesn’t accept IP range format as 69.46.36.0/32
It says: Only an IPv4 range (CIDR) value of /16 or /24 is allowed for IP Access Rules

I have also tried ASN ( 19528) but it didn’t recognized as a valid ASN.
I don’t know what to at this point, because;
– There is no blockage
– I cannot add/allow your IPs.

– Added your IPs 1 by 1 and allowed them.
– Scanned in debugging mode.
– Pasting logs below.

[Sep 20 17:21:32:1600611692.919275:4:info] Calling Wordfence API v2.26:https://noc1.wordfence.com/v2.26/?k=9de5eece238972859872312d041ddc78b5e57d245cf431843c74ad330791c0b4760b857b7106517b6cdf30952b563c7677c541d4e1fa721b00857b10e029434c611a422241a05d1cdf93d4b4a4bf08e0&s=eyJ3cCI6IjUuNS4xIiwid2YiOiI3LjQuMTEiLCJtcyI6ZmFsc2UsImgiOiJodHRwczpcL1wva2FjbWF6Y29yYXAuY29tIiwic3NsdiI6MjY4NDQzODM5LCJwdiI6IjcuMi4zMyIsInB0IjoibGl0ZXNwZWVkIiwiY3YiOiI3LjYyLjAiLCJjcyI6Ik9wZW5TU0xcLzEuMC4yayIsInN2IjoiTGl0ZVNwZWVkIiwiZHYiOiIxMC4yLjMzLU1hcmlhREIifQ&betaFeed=0&action=timestamp
[Sep 20 17:21:05:1600611665.216615:4:info] Calling Wordfence API v2.26:https://noc1.wordfence.com/v2.26/?k=9de5eece238972859872312d041ddc78b5e57d245cf431843c74ad330791c0b4760b857b7106517b6cdf30952b563c7677c541d4e1fa721b00857b10e029434c611a422241a05d1cdf93d4b4a4bf08e0&s=eyJ3cCI6IjUuNS4xIiwid2YiOiI3LjQuMTEiLCJtcyI6ZmFsc2UsImgiOiJodHRwczpcL1wva2FjbWF6Y29yYXAuY29tIiwic3NsdiI6MjY4NDQzODM5LCJwdiI6IjcuMi4zMyIsInB0IjoibGl0ZXNwZWVkIiwiY3YiOiI3LjYyLjAiLCJjcyI6Ik9wZW5TU0xcLzEuMC4yayIsInN2IjoiTGl0ZVNwZWVkIiwiZHYiOiIxMC4yLjMzLU1hcmlhREIifQ&betaFeed=0&action=timestamp
[Sep 20 17:20:34:1600611634.705032:4:info] Scan process ended after forking.
[Sep 20 17:20:33:1600611633.904509:4:info] Starting cron via proxy at URL https://noc1.wordfence.com/scanp/kacmazcorap.com/wp-admin/admin-ajax.php?action=wordfence_doScan&isFork=0&scanMode=standard&cronKey=6ed69bcb0592785f67c8de0173ded597&k=9de5eece238972859872312d041ddc78b5e57d245cf431843c74ad330791c0b4760b857b7106517b6cdf30952b563c7677c541d4e1fa721b00857b10e029434c611a422241a05d1cdf93d4b4a4bf08e0&ssl=1&signature=0c2b61c14dd0a76a93eb822f4e4cf17435648de99b7cf9cceb793c4ffa35cae4
[Sep 20 17:20:33:1600611633.903703:4:info] getMaxExecutionTime() returning config value: 20
[Sep 20 17:20:33:1600611633.903501:4:info] Got value from wf config maxExecutionTime: 20
[Sep 20 17:20:33:1600611633.903040:4:info] Entering start scan routine
[Sep 20 17:20:33:1600611633.902165:4:info] Ajax request received to start scan.
[Sep 20 17:20:30:1600611630.389207:10:info] SUM_KILLED:A request was received to stop the previous scan.
[Sep 20 17:20:30:1600611630.388882:1:info] Scan stop request received.
[Sep 20 17:20:13:1600611613.958418:4:info] Calling Wordfence API v2.26:https://noc1.wordfence.com/v2.26/?k=9de5eece238972859872312d041ddc78b5e57d245cf431843c74ad330791c0b4760b857b7106517b6cdf30952b563c7677c541d4e1fa721b00857b10e029434c611a422241a05d1cdf93d4b4a4bf08e0&s=eyJ3cCI6IjUuNS4xIiwid2YiOiI3LjQuMTEiLCJtcyI6ZmFsc2UsImgiOiJodHRwczpcL1wva2FjbWF6Y29yYXAuY29tIiwic3NsdiI6MjY4NDQzODM5LCJwdiI6IjcuMi4zMyIsInB0IjoibGl0ZXNwZWVkIiwiY3YiOiI3LjYyLjAiLCJjcyI6Ik9wZW5TU0xcLzEuMC4yayIsInN2IjoiTGl0ZVNwZWVkIiwiZHYiOiIxMC4yLjMzLU1hcmlhREIifQ&betaFeed=0&action=timestamp
[Sep 20 17:19:02:1600611542.979552:4:info] Calling Wordfence API v2.26:https://noc1.wordfence.com/v2.26/?k=9de5eece238972859872312d041ddc78b5e57d245cf431843c74ad330791c0b4760b857b7106517b6cdf30952b563c7677c541d4e1fa721b00857b10e029434c611a422241a05d1cdf93d4b4a4bf08e0&s=eyJ3cCI6IjUuNS4xIiwid2YiOiI3LjQuMTEiLCJtcyI6ZmFsc2UsImgiOiJodHRwczpcL1wva2FjbWF6Y29yYXAuY29tIiwic3NsdiI6MjY4NDQzODM5LCJwdiI6IjcuMi4zMyIsInB0IjoibGl0ZXNwZWVkIiwiY3YiOiI3LjYyLjAiLCJjcyI6Ik9wZW5TU0xcLzEuMC4yayIsInN2IjoiTGl0ZVNwZWVkIiwiZHYiOiIxMC4yLjMzLU1hcmlhREIifQ&betaFeed=0&action=timestamp
[Sep 20 17:17:45:1600611465.595866:10:info] SUM_KILLED:A request was received to stop the previous scan.
[Sep 20 17:17:45:1600611465.595372:1:info] Scan stop request received.
[Sep 20 17:17:24:1600611444.545692:4:info] Scan process ended after forking.
[Sep 20 17:17:23:1600611443.693309:4:info] Starting cron via proxy at URL https://noc1.wordfence.com/scanp/kacmazcorap.com/wp-admin/admin-ajax.php?action=wordfence_doScan&isFork=0&scanMode=standard&cronKey=2949f29c0cf429eb9c1925708d807054&k=9de5eece238972859872312d041ddc78b5e57d245cf431843c74ad330791c0b4760b857b7106517b6cdf30952b563c7677c541d4e1fa721b00857b10e029434c611a422241a05d1cdf93d4b4a4bf08e0&ssl=1&signature=839152abfb92d3667366293587e5741873b335a224147eceda8fd226b078dc3d
[Sep 20 17:17:23:1600611443.692493:4:info] getMaxExecutionTime() returning config value: 20
[Sep 20 17:17:23:1600611443.692287:4:info] Got value from wf config maxExecutionTime: 20
[Sep 20 17:17:23:1600611443.691809:4:info] Entering start scan routine
[Sep 20 17:17:23:1600611443.690831:4:info] Ajax request received to start scan.
[Sep 20 17:17:21:1600611441.121477:10:info] SUM_KILLED:A request was received to stop the previous scan.
[Sep 20 17:17:21:1600611441.121173:1:info] Scan stop request received.
[Sep 20 17:17:18:1600611438.079326:10:info] SUM_KILLED:A request was received to stop the previous scan.
[Sep 20 17:17:18:1600611438.078658:1:info] Scan stop request received.
[Sep 20 17:17:09:1600611429.407620:4:info] Calling Wordfence API v2.26:https://noc1.wordfence.com/stats.json

My post has been held, please help.

Looks like something is still being blocked. It looks like its forking when trying to access the admin-ajax.php for your site. I tested your admin-ajax.php access, it looks like it should be fine.

I see you have a few cache plugins. Lets try to flush these cache plugins. Just for testing purposes, can you flush them, then disable them and run another scan for me. Post the last few lines of the debug here again.

Thanks!