Scan Stage Failed

Resolved

(@steinrr99)

When trying to start a scan manually from the scan dashbord, I get the following error:

Scan Stage Failed A scan stage has failed to start. This is often because the site either cannot make outbound requests or is blocked from connecting to itself. Wordfence will make up to 2 attempts to resume each failed scan stage. This scan may recover if one of these attempts is successful.

The scan starts fine if I select “Start scans remotely”, but I would like to figure out why it does not start when I have this option off. I did enable debug, and got the output below (I have masked domain name and keys etc). What is strange, is that it says Apache, but I am not running Apache on this server. I have moved my site (copied DB and files) from another server (which ran Apache) – can it be that there are some issues there?

[Nov 19 07:13:25:1763532805.655134:4:info] Scan process ended after forking.
[Nov 19 07:13:25:1763532805.497372:4:info] Starting cron with normal ajax at URL https://www.MASKED.no/wp-admin/admin-ajax.php?action=wordfence_doScan&isFork=0&scanMode=standard&cronKey=a75a3***MASKED***c191&signature=8d92344119832b***MASKED***953d8b90c71a03b8
[Nov 19 07:13:25:1763532805.493886:4:info] Test result of scan start URL fetch: array ( 'headers' => \WpOrg\Requests\Utility\CaseInsensitiveDictionary::__set_state(array( 'data' => array ( 'date' => 'Wed, 19 Nov 2025 06:13:25 GMT', 'server' => 'Apache/2.4.52 (Ubuntu)', 'x-robots-tag' => 'noindex', 'x-content-type-options' => 'nosniff', 'expires' => 'Wed, 11 Jan 1984 05:00:00 GMT', 'cache-control' => 'no-cache, must-revalidate, max-age=0, no-store, private', 'referrer-policy' => 'strict-origin-when-cross-origin', 'x-frame-options' => 'SAMEORIGIN', 'content-length' => '12', 'content-type' => 'text/html; charset=UTF-8', ), )), 'body' => 'WFSCANTESTOK', 'response' => array ( 'code' => 200, 'message' => 'OK', ), 'cookies' => array ( ), 'filename' => NULL, 'http_response' => \WP_HTTP_Requests_Response::__set_state(array( 'data' => NULL, 'headers' => NULL, 'status' => NULL, 'response' => \WpOrg\Reque
[Nov 19 07:13:25:1763532805.344748:4:info] getMaxExecutionTime() returning config value: 20
[Nov 19 07:13:25:1763532805.343507:4:info] Got value from wf config maxExecutionTime: 20
[Nov 19 07:13:25:1763532805.336524:4:info] Entering start scan routine
[Nov 19 07:13:25:1763532805.332481:4:info] Ajax request received to start scan.

Viewing 1 replies (of 1 total)

Plugin Support wfpeter
(@wfpeter)

4 months, 2 weeks ago

Hi @steinrr99, thanks for providing your scan log.

Firstly I would see if you’re able to solve the forking issue using the following documentation: https://www.wordfence.com/help/scan/troubleshooting/#scan-process-ended-after-forking

If not, when migrating the site did you follow our instructions to remove the firewall’s extended protection first and take a settings export to re-import after a fresh installation? https://www.wordfence.com/help/advanced/remove-or-reset/#migrate-with-wordfence

If you didn’t, make sure you didn’t also transfer the wp-content/wflogs folder (as the plugin generates this itself when missing). The files inside the wflogs folder can simply be cleared manually now if you did. Wordfence should repopulate the folder within 30 minutes – usually sooner.

Extended protection is also specific to the server environment as Wordfence detects it during the firewall optimization process. That might be the reason Apache is still being shown. You can click the “REMOVE EXTENDED PROTECTION” button on Wordfence > Firewall > All Firewall Options page and then set it up again with the appropriate server environment detected using the wizard: https://www.wordfence.com/help/firewall/optimizing-the-firewall/#firewall-optimization-setup

“How does Wordfence get IPs” may also be incorrect in Wordfence > All Options > General Wordfence Options if your new server has a CDN or is behind a server firewall/load balancer: https://www.wordfence.com/help/dashboard/options/#get-ips

I hope that helps you out,
Peter.

Viewing 1 replies (of 1 total)

You must be logged in to reply to this topic.