The rest api encountered an unexpected result (v2)

Hi @chefpanda123,

Is this a connectivity problem with Wordfence Central, or are you receiving it in another context such as a scan? I think considering your API endpoint seems fine, it’ll be worth seeing whether your site can connect to our servers.

Can you send a diagnostic report to wftest @ wordfence . com? You can find the link to do so at the top of the Wordfence > Tools > Diagnostics page. Then click on “Send Report by Email”. Please add your forum username where indicated and respond here after you have sent it.

NOTE: It should look as follows – Screenshot of Tools > Diagnostic > Send by Email

Thanks,

Peter.

Hi @chefpanda123,

I see in your diagnostics that we’re getting a wp_remote_post() fail on connecting back to the site with an entire Wordfence blocking page as the returned value.

I would firstly check whether our IPs, or your own server IP are blocked on the Wordfence > Firewall > Blocking page. Our IPs can be obtained here: https://www.wordfence.com/help/advanced/#servers-and-ip-range

I also see you appear to be running Cloudflare, which does require some extra configuration with Wordfence usually. You’re not currently using CF-Connecting-IP which is required for IP detection to your site. Find your public facing IP address at https://www.whatsmyip.org/, then look at Wordfence > Dashboard > Global Options > General Wordfence Options > How does Wordfence get IPs and cycle through the options there until it displays your IP address. You will most likely need to select “Use the Cloudflare “CF-Connecting-IP” HTTP header to get a visitor IP. Only use if you’re using Cloudflare.”. That will be the setting you need to use going forward, so click the SAVE button once you’re done.

You will also need to allow your own site’s IP and possibly our IPs (from above) in Cloudflare itself:

• Login to Cloudflare
• Go to “Firewall”
• Click the “Firewall Rules” tab
• Click “Create a Firewall rule”
• Name the rule under “Rule Name”
• Set the “Field” under “When incoming requests match…” to “IP Address”
• Enter your site’s IP address under “Value”
• At the bottom, under “Then…Choose an action” change “Block” to “Allow”
• Click “Deploy

Return to your scan page and CANCEL the current scan and then start a NEW scan.

Let me know how you get on!

Peter.