is Cloudflare blocking Wordfence?
-
Hi,
I’ve been following the troubleshooting steps, I added the IPs to the whitelist but this message is still showing up: Scan Failed
The scan has failed to start. This is often because the site either cannot make outbound requests or is blocked from connecting to itself.
Am I missing something? please help 🙁The page I need help with: [log in to see the link]
-
Hi @dianaccarranza,
I would firstly check whether our IPs, or your own server IP are blocked on the Wordfence > Firewall > Blocking page. Our IPs can be obtained here: https://www.wordfence.com/help/advanced/#servers-and-ip-range
Secondly, find your public facing IP address at https://www.whatsmyip.org/, then look at Wordfence > Dashboard > Global Options > General Wordfence Options > How does Wordfence get IPs and cycle through the options there until it displays your IP address. You will most likely need to select “Use the Cloudflare “CF-Connecting-IP” HTTP header to get a visitor IP. Only use if you’re using Cloudflare.”. That will be the setting you need to use going forward, so click the SAVE button once you’re done.
When whitelisting IPs in Cloudflare, you may need to add our IPs from the above link AND your own site’s IP. Add these under Cloudflare’s “rules” and “tools” sections if you haven’t already. Your site’s IP can be found at Wordfence > Tools > Diagnostics > Connectivity > IP(s) used by this server.
If the above has already been tried or didn’t work for you, can you send a diagnostic report to wftest @ wordfence . com? You can find the link to do so at the top of the Wordfence > Tools > Diagnostics page. Then click on “Send Report by Email”. Please add your forum username where indicated and respond here after you have sent it.
NOTE: It should look as follows – Screenshot of Tools > Diagnostic > Send by Email
Thanks,
Peter.
Hi @wfpeter
I followed the steps and the scan still fails, so I’ve just sent a report.
Thank you!Hi @dianaccarranza, thanks for sending that over.
I expected to see connectivity problems or blocking of our IP or certain permissions but your diagnostic actually shows everything appears to be set up correctly. Perhaps a copy of your scan log to see exactly what Wordfence is trying to do when it fails would help:
- Stop the existing scan if it is still running (The “Start New Scan” button turns in to a “Stop” button while the scan is running).
- Go to Wordfence > Scan > Manage Scan and locate the “Performance Options” section. Set “Maximum execution time for each scan stage” to 20.
- Click to “Save Changes”.
- Go to the Tools > Diagnostics page.
- In the “Debugging Options” section check the circle “Enable debugging mode”.
- Click to “Save Changes”.
- Start a new scan on the Scan page.
- If the scan fails again, copy the last 20 lines or so from the Log (click the “Show Log” link) once the scan finishes and paste them in the post.
Thanks again,
Peter.
Hi @wfpeter
The scan failed, so this is the copy from the log:[Apr 01 18:02:41:1648836161.006352:4:info] Calling Wordfence API v2.26:https://noc1.wordfence.com/v2.26/?k=8a9e44ec9b5e9cf6bda3c621de2a6bb3773cb19e9ee426820495a80798e2a79a7726032e30f09fb0cf8401aab32456cf10b74f2bad9ba55df7bbc7a3ee57594551048ef2a572bc44c07b575e5cbfbbb2&s=eyJ3cCI6IjUuOS4yIiwid2YiOiI3LjUuOSIsIm1zIjpmYWxzZSwiaCI6Imh0dHBzOlwvXC9iYW5nZXJ0ZXJsYXdmaXJtLmNvbSIsInNzbHYiOjI2ODQ0MzgzOSwicHYiOiI3LjQuMjciLCJwdCI6ImxpdGVzcGVlZCIsImN2IjoiNy4yOS4wIiwiY3MiOiJOU1NcLzMuNTMuMSIsInN2IjoiTGl0ZVNwZWVkIiwiZHYiOiIxMC40LjI0LU1hcmlhREIiLCJsYW5nIjoiIn0&betaFeed=0&action=plugin_vulnerability_check [Apr 01 18:02:40:1648836160.588851:4:info] Calling Wordfence API v2.26:https://noc1.wordfence.com/v2.26/?k=8a9e44ec9b5e9cf6bda3c621de2a6bb3773cb19e9ee426820495a80798e2a79a7726032e30f09fb0cf8401aab32456cf10b74f2bad9ba55df7bbc7a3ee57594551048ef2a572bc44c07b575e5cbfbbb2&s=eyJ3cCI6IjUuOS4yIiwid2YiOiI3LjUuOSIsIm1zIjpmYWxzZSwiaCI6Imh0dHBzOlwvXC9iYW5nZXJ0ZXJsYXdmaXJtLmNvbSIsInNzbHYiOjI2ODQ0MzgzOSwicHYiOiI3LjQuMjciLCJwdCI6ImxpdGVzcGVlZCIsImN2IjoiNy4yOS4wIiwiY3MiOiJOU1NcLzMuNTMuMSIsInN2IjoiTGl0ZVNwZWVkIiwiZHYiOiIxMC40LjI0LU1hcmlhREIiLCJsYW5nIjoiIn0&betaFeed=0&action=aggregate_stats [Apr 01 18:02:40:1648836160.164636:4:info] Calling Wordfence API v2.26:https://noc1.wordfence.com/v2.26/?k=8a9e44ec9b5e9cf6bda3c621de2a6bb3773cb19e9ee426820495a80798e2a79a7726032e30f09fb0cf8401aab32456cf10b74f2bad9ba55df7bbc7a3ee57594551048ef2a572bc44c07b575e5cbfbbb2&s=eyJ3cCI6IjUuOS4yIiwid2YiOiI3LjUuOSIsIm1zIjpmYWxzZSwiaCI6Imh0dHBzOlwvXC9iYW5nZXJ0ZXJsYXdmaXJtLmNvbSIsInNzbHYiOjI2ODQ0MzgzOSwicHYiOiI3LjQuMjciLCJwdCI6ImxpdGVzcGVlZCIsImN2IjoiNy4yOS4wIiwiY3MiOiJOU1NcLzMuNTMuMSIsInN2IjoiTGl0ZVNwZWVkIiwiZHYiOiIxMC40LjI0LU1hcmlhREIiLCJsYW5nIjoiIn0&betaFeed=0&action=ping_api_key [Apr 01 14:40:35:1648824035.046612:4:info] Calling Wordfence API v2.26:https://noc1.wordfence.com/stats.json [Apr 01 14:12:42:1648822362.340578:4:info] Calling Wordfence API v2.26:https://noc1.wordfence.com/v2.26/?k=8a9e44ec9b5e9cf6bda3c621de2a6bb3773cb19e9ee426820495a80798e2a79a7726032e30f09fb0cf8401aab32456cf10b74f2bad9ba55df7bbc7a3ee57594551048ef2a572bc44c07b575e5cbfbbb2&s=eyJ3cCI6IjUuOS4yIiwid2YiOiI3LjUuOSIsIm1zIjpmYWxzZSwiaCI6Imh0dHBzOlwvXC9iYW5nZXJ0ZXJsYXdmaXJtLmNvbSIsInNzbHYiOjI2ODQ0MzgzOSwicHYiOiI3LjQuMjciLCJwdCI6ImxpdGVzcGVlZCIsImN2IjoiNy4yOS4wIiwiY3MiOiJOU1NcLzMuNTMuMSIsInN2IjoiTGl0ZVNwZWVkIiwiZHYiOiIxMC40LjI0LU1hcmlhREIiLCJsYW5nIjoiIn0&betaFeed=0&action=verify_googlebot&ip=35.187.132.214 [Apr 01 02:59:51:1648781991.098937:4:info] Scan process ended after forking. [Apr 01 02:59:50:1648781990.665900:4:info] Starting cron via proxy at URL https://noc1.wordfence.com/scanp/bangerterlawfirm.com/wp-admin/admin-ajax.php?action=wordfence_doScan&isFork=0&scanMode=highsensitivity&cronKey=144d20958bc168ac309a436b28c25593&k=8a9e44ec9b5e9cf6bda3c621de2a6bb3773cb19e9ee426820495a80798e2a79a7726032e30f09fb0cf8401aab32456cf10b74f2bad9ba55df7bbc7a3ee57594551048ef2a572bc44c07b575e5cbfbbb2&ssl=1&signature=7cff4422c1c99c64d6c79a5c90ae1785cefa1750694b9eb50726530849bb4ca5 [Apr 01 02:59:50:1648781990.665318:4:info] getMaxExecutionTime() returning half ini value: 30 [Apr 01 02:59:50:1648781990.665086:4:info] Got max_execution_time value from ini: 60 [Apr 01 02:59:50:1648781990.664801:4:info] Got value from wf config maxExecutionTime: 0 [Apr 01 02:59:50:1648781990.663592:4:info] Entering start scan routine [Apr 01 02:59:50:1648781990.654988:1:info] Scheduled Wordfence scan starting at Friday 1st of April 2022 02:59:50 AM [Mar 31 22:46:28:1648766788.323985:4:info] Calling Wordfence API v2.26:https://noc1.wordfence.com/stats.json [Mar 31 22:12:07:1648764727.536253:4:info] Calling Wordfence API v2.26:https://noc1.wordfence.com/v2.26/?k=8a9e44ec9b5e9cf6bda3c621de2a6bb3773cb19e9ee426820495a80798e2a79a7726032e30f09fb0cf8401aab32456cf10b74f2bad9ba55df7bbc7a3ee57594551048ef2a572bc44c07b575e5cbfbbb2&s=eyJ3cCI6IjUuOS4yIiwid2YiOiI3LjUuOSIsIm1zIjpmYWxzZSwiaCI6Imh0dHBzOlwvXC9iYW5nZXJ0ZXJsYXdmaXJtLmNvbSIsInNzbHYiOjI2ODQ0MzgzOSwicHYiOiI3LjQuMjciLCJwdCI6ImxpdGVzcGVlZCIsImN2IjoiNy4yOS4wIiwiY3MiOiJOU1NcLzMuNTMuMSIsInN2IjoiTGl0ZVNwZWVkIiwiZHYiOiIxMC40LjI0LU1hcmlhREIiLCJsYW5nIjoiIn0&betaFeed=0&action=timestampThank you!
Hi @dianaccarranza,
I recommend following the instructions here as it reflects the message in your scan log: https://www.wordfence.com/help/scan/troubleshooting/#scan-process-ended-after-forking
Often starting scans remotely as highlighted in the above documentation is a good place to start.
Let me know how you get on!
Thanks,
Peter.
The topic ‘is Cloudflare blocking Wordfence?’ is closed to new replies.