Wordfence scans stucks on analyze

  • Hello,

    On one of my sites Wordfence Scan doesn’t work anymore. It just stops analyze approx after 18mb of scanned files. I’ve tried to reinstall it with deletion of tables in DB, applied litespeed noabort check, raised Wordfence PHP memory up to 500mb and execution time of each scan was changed up to 200. Still the same.

    I aswell tried to make low-resource scan but if fails approximately on analyze of 1,3mb of files

    Any ideas how to fix it? I’m using last version of WP and Wordfence.

Viewing 5 replies - 1 through 5 (of 5 total)

  • Hi @theredeclipse,

    In order to help us identify the cause of this behavior could you please enable the debug mode which will provide more information in the “Scan Detailed Activity“.

    1. Kill any scan currently running

    2. Go to your Wordfence Options page
    – Set “Maximum execution time for each scan stage” to 20
    – Save the Options page

    3. Go to the Wordfence Tools page, click the Diagnostics tab

    4. At the bottom of the page, in the Debugging Options section
    – Check the box to “Enable debugging mode”
    – Save the Diagnostics page.

    5. Start a new scan

    6. Copy and paste here the last 20 lines of the activity log so we can further investigate.

    Also, in case it is enabled, can you try disabling the scan option “Scan images, binary, and other files as if they were executable” which is located on the Wordfence “Options” page?

    This scan option is mainly intended for using on known infected sites. It requires a lot of resources and is not necessary to use for normal scans. The reason for this is that non-executables such as images can not execute themselves. If there is malware in an image, there will be malware in other files on your server as well and those will be detected even with this scan option off.

    Lastly, can you please confirm which hosting provider you’re using?

    Thread Starter theredeclipse

    (@theredeclipse)

    I’m using hosting “Fozzy” with Litespeed server. I went though your instructions and did the scan, the result here(path was changed):

    [Nov 03 10:09:34:1509692974.001669:4:info] Scanning: /home/path/to/site/wp-content/plugins/advanced-custom-fields/images/sprite.png (Mem:47.5M)
[Nov 03 10:09:34:1509692974.000326:4:info] Scanning: /home/path/to/site/wp-content/plugins/advanced-custom-fields/images/[email protected] (Mem:47.5M)
[Nov 03 10:09:33:1509692973.998881:4:info] Scanning: /home/path/to/site/wp-content/plugins/advanced-custom-fields/images/arrows.png (Mem:47.5M)
[Nov 03 10:09:33:1509692973.996356:4:info] Scanning: /home/path/to/site/wp-content/plugins/advanced-custom-fields/images/add-ons/repeater-field-thumb.jpg (Mem:47.5M)
[Nov 03 10:09:33:1509692973.994619:4:info] Scanning: /home/path/to/site/wp-content/plugins/advanced-custom-fields/images/add-ons/options-page-thumb.jpg (Mem:47.5M)
[Nov 03 10:09:33:1509692973.993084:4:info] Scanning: /home/path/to/site/wp-content/plugins/advanced-custom-fields/images/add-ons/gravity-forms-field-thumb.jpg (Mem:47.5M)
[Nov 03 10:09:33:1509692973.991005:4:info] Scanning: /home/path/to/site/wp-content/plugins/advanced-custom-fields/images/add-ons/google-maps-field-thumb.jpg (Mem:47.5M)
[Nov 03 10:09:33:1509692973.987526:4:info] Scanning: /home/path/to/site/wp-content/plugins/advanced-custom-fields/images/add-ons/gallery-field-thumb.jpg (Mem:47.5M)
[Nov 03 10:09:33:1509692973.985866:4:info] Scanning: /home/path/to/site/wp-content/plugins/advanced-custom-fields/images/add-ons/flexible-content-field-thumb.jpg (Mem:47.5M)
[Nov 03 10:09:33:1509692973.981465:4:info] Scanning: /home/path/to/site/wp-content/plugins/advanced-custom-fields/images/add-ons/date-time-field-thumb.jpg (Mem:47.5M)
[Nov 03 10:09:33:1509692973.978320:4:info] Scanning: /home/path/to/site/wp-content/plugins/advanced-custom-fields/images/add-ons/cf7-field-thumb.jpg (Mem:47.5M)
[Nov 03 10:09:33:1509692973.974845:4:info] Scanning: /home/path/to/site/wp-content/plugins/advanced-custom-fields/css/input.css (Mem:47.5M)
[Nov 03 10:09:33:1509692973.973124:4:info] Scanning: /home/path/to/site/wp-content/plugins/advanced-custom-fields/css/global.css (Mem:47.5M)
[Nov 03 10:09:33:1509692973.971398:4:info] Scanning: /home/path/to/site/wp-content/plugins/advanced-custom-fields/css/field-group.css (Mem:47.5M)
[Nov 03 10:09:33:1509692973.969839:4:info] Scanning: /home/path/to/site/wp-content/plugins/advanced-custom-fields/css/acf.css (Mem:47.5M)
[Nov 03 10:09:33:1509692973.968379:4:info] Scanning: /home/path/to/site/wp-content/plugins/advanced-custom-fields/core/views/meta_box_options.php (Mem:47.5M)
[Nov 03 10:09:33:1509692973.966846:4:info] Scanning: /home/path/to/site/wp-content/plugins/advanced-custom-fields/core/views/meta_box_location.php (Mem:47.5M)
[Nov 03 10:09:33:1509692973.965179:4:info] Scanning: /home/path/to/site/wp-content/plugins/advanced-custom-fields/core/views/meta_box_fields.php (Mem:47.5M)
[Nov 03 10:09:33:1509692973.963736:4:info] Scanning: /home/path/to/site/wp-content/plugins/advanced-custom-fields/core/fields/wysiwyg.php (Mem:47.5M)
[Nov 03 10:09:33:1509692973.962318:4:info] Scanning: /home/path/to/site/wp-content/plugins/advanced-custom-fields/core/fields/user.php (Mem:47.5M)
[Nov 03 10:09:33:1509692973.961033:4:info] Scanning: /home/path/to/site/wp-content/plugins/advanced-custom-fields/core/fields/true_false.php (Mem:47.5M)
[Nov 03 10:09:33:1509692973.959700:4:info] Scanning: /home/path/to/site/wp-content/plugins/advanced-custom-fields/core/fields/textarea.php (Mem:47.5M)
[Nov 03 10:09:33:1509692973.958355:4:info] Scanning: /home/path/to/site/wp-content/plugins/advanced-custom-fields/core/fields/text.php (Mem:47.5M)
[Nov 03 10:09:33:1509692973.956844:4:info] Scanning: /home/path/to/site/wp-content/plugins/advanced-custom-fields/core/fields/taxonomy.php (Mem:47.5M)
[Nov 03 10:09:33:1509692973.955582:4:info] Scanning: /home/path/to/site/wp-content/plugins/advanced-custom-fields/core/fields/tab.php (Mem:47.5M)
[Nov 03 10:09:33:1509692973.954188:4:info] Scanning: /home/path/to/site/wp-content/plugins/advanced-custom-fields/core/fields/select.php (Mem:47.5M)
[Nov 03 10:09:33:1509692973.951569:4:info] Scanning: /home/path/to/site/wp-content/plugins/advanced-custom-fields/core/fields/relationship.php (Mem:47.5M)
[Nov 03 10:09:33:1509692973.950199:4:info] Scanning: /home/path/to/site/wp-content/plugins/advanced-custom-fields/core/fields/radio.php (Mem:47.5M)
[Nov 03 10:09:33:1509692973.948707:4:info] Scanning: /home/path/to/site/wp-content/plugins/advanced-custom-fields/core/fields/post_object.php (Mem:47.5M)
[Nov 03 10:09:33:1509692973.947407:4:info] Scanning: /home/path/to/site/wp-content/plugins/advanced-custom-fields/core/fields/password.php (Mem:47.5M)
[Nov 03 10:09:33:1509692973.946091:4:info] Scanning: /home/path/to/site/wp-content/plugins/advanced-custom-fields/core/fields/page_link.php (Mem:47.5M)
[Nov 03 10:09:33:1509692973.944750:4:info] Scanning: /home/path/to/site/wp-content/plugins/advanced-custom-fields/core/fields/number.php (Mem:47.5M)
[Nov 03 10:09:33:1509692973.943485:4:info] Scanning: /home/path/to/site/wp-content/plugins/advanced-custom-fields/core/fields/message.php (Mem:47.5M)
[Nov 03 10:09:33:1509692973.942037:4:info] Scanning: /home/path/to/site/wp-content/plugins/advanced-custom-fields/core/fields/image.php (Mem:47.5M)
[Nov 03 10:09:33:1509692973.940553:4:info] Scanning: /home/path/to/site/wp-content/plugins/advanced-custom-fields/core/fields/google-map.php (Mem:47.5M)
[Nov 03 10:09:33:1509692973.939145:4:info] Scanning: /home/path/to/site/wp-content/plugins/advanced-custom-fields/core/fields/file.php (Mem:47.5M)
[Nov 03 10:09:33:1509692973.937839:4:info] Scanning: /home/path/to/site/wp-content/plugins/advanced-custom-fields/core/fields/email.php (Mem:47.5M)
[Nov 03 10:09:33:1509692973.936275:4:info] Scanning: /home/path/to/site/wp-content/plugins/advanced-custom-fields/core/fields/dummy.php (Mem:47.5M)
[Nov 03 10:09:33:1509692973.935699:2:info] Analyzed 600 files containing 7.09 MB of data so far

    This time it got stucked right here, sometimes go further sometimes not.

    • This reply was modified 7 years, 4 months ago by theredeclipse.
    Thread Starter theredeclipse

    (@theredeclipse)

    Any suggestions how to fix it would be appreciated..

    Hi @theredeclipse,

    Looking at these few lines I don’t have much information to help troubleshooting.

    Would you mind emailing the “Scan Detailed Activity” log to yann[at]wordfence[dot]com.

    Please make sure to include your forum username in the subject.

    Thank you.

    Thread Starter theredeclipse

    (@theredeclipse)

    Hi,

    I thought new version would change something. But problem remains. Message with log was sent.

Viewing 5 replies - 1 through 5 (of 5 total)
  • The topic ‘Wordfence scans stucks on analyze’ is closed to new replies.