Scan stopped

  • Resolved sibichan

    (@sibichan)


    1 week, 5 days ago

    Scan Stage Failed
    A scan stage has failed to start. This is often because the site either cannot make outbound requests or is blocked from connecting to itself. Wordfence will make up to 2 attempts to resume each failed scan stage. This scan may recover if one of these attempts is successful. Click here for steps you can try. (opens in new tab)

    Tried Start A New scan but that also stopped suddenly

    Changed Maximum execution time for each scan stage 15 to 20. But not working. Here is the log

    [Mar 30 04:02:57:1774843377.795556:4:info] Scan process ended after forking.
    [Mar 30 04:02:57:1774843377.679540:4:info] Starting cron via proxy at URL https://noc1.wordfence.com/scanp/mydomain.com/wp-admin/admin-ajax.php?action=wordfence_doScan&isFork=0&scanMode=standard&cronKey=b4ebeb20082f4cb0d233afe467a57d7f&k=a4be8fe48f958fbef596ed3706238d9bb0b98c0333d6f6f93e0fe8adfb8918fb46850c888cadde5249416e933d580249ba66aa4457c10c317f50f5553a79293c4ed19d4dc96398d0ef99b0ed16d92bec&ssl=1&signature=ea2a007b5e026330694d8ca5d33446abe1a1585324bc0356a50dd091474af424
    [Mar 30 04:02:57:1774843377.677097:4:info] getMaxExecutionTime() returning config value: 20
    [Mar 30 04:02:57:1774843377.676597:4:info] Got value from wf config maxExecutionTime: 20
    [Mar 30 04:02:57:1774843377.662099:4:info] Entering start scan routine
    [Mar 30 04:02:57:1774843377.659846:4:info] Ajax request received to start scan.
    [Mar 30 04:02:52:1774843372.548421:10:info] SUM_KILLED:A request was received to stop the previous scan.
    [Mar 30 04:02:52:1774843372.547481:1:info] Scan stop request received.
    [Mar 30 04:02:45:1774843365.350952:4:info] Calling Wordfence API v2.27:https://noc1.wordfence.com/v2.27/?k=a4be8fe48f958fbef596ed3706238d9bb0b98c0333d6f6f93e0fe8adfb8918fb46850c888cadde5249416e933d580249ba66aa4457c10c317f50f5553a79293c4ed19d4dc96398d0ef99b0ed16d92bec&s=eyJ3cCI6IjYuOS40Iiwid2YiOiI4LjEuNCIsIm1zIjpmYWxzZSwiaCI6Imh0dHBzOlwvXC9yb2lkenNob3AuY29tIiwic3NsdiI6ODA1MzA2NTc2LCJwdiI6IjguMS4yOSIsInB0IjoiZnBtLWZjZ2kiLCJjdiI6IjguNS4wIiwiY3MiOiJPcGVuU1NMXC8zLjAuMTMiLCJzdiI6Im5naW54XC8xLjI0LjAiLCJkdiI6bnVsbCwibGFuZyI6IiJ9&action=resolve_ips
    [Mar 30 04:02:45:1774843365.090512:4:info] Calling Wordfence API v2.27:https://noc1.wordfence.com/stats.json
    [Mar 30 04:02:36:1774843356.284729:4:info] Calling Wordfence API v2.27:https://noc1.wordfence.com/v2.27/?k=a4be8fe48f958fbef596ed3706238d9bb0b98c0333d6f6f93e0fe8adfb8918fb46850c888cadde5249416e933d580249ba66aa4457c10c317f50f5553a79293c4ed19d4dc96398d0ef99b0ed16d92bec&s=eyJ3cCI6IjYuOS40Iiwid2YiOiI4LjEuNCIsIm1zIjpmYWxzZSwiaCI6Imh0dHBzOlwvXC9yb2lkenNob3AuY29tIiwic3NsdiI6ODA1MzA2NTc2LCJwdiI6IjguMS4yOSIsInB0IjoiZnBtLWZjZ2kiLCJjdiI6IjguNS4wIiwiY3MiOiJPcGVuU1NMXC8zLjAuMTMiLCJzdiI6Im5naW54XC8xLjI0LjAiLCJkdiI6bnVsbCwibGFuZyI6IiJ9&action=plugin_vulnerability_check
    [Mar 29 09:48:36:1774777716.101369:4:info] Calling Wordfence API v2.27:https://noc1.wordfence.com/v2.27/?k=a4be8fe48f958fbef596ed3706238d9bb0b98c0333d6f6f93e0fe8adfb8918fb46850c888cadde5249416e933d580249ba66aa4457c10c317f50f5553a79293c4ed19d4dc96398d0ef99b0ed16d92bec&s=eyJ3cCI6IjYuOS40Iiwid2YiOiI4LjEuNCIsIm1zIjpmYWxzZSwiaCI6Imh0dHBzOlwvXC9yb2lkenNob3AuY29tIiwic3NsdiI6ODA1MzA2NTc2LCJwdiI6IjguMS4yOSIsInB0IjoiZnBtLWZjZ2kiLCJjdiI6IjguNS4wIiwiY3MiOiJPcGVuU1NMXC8zLjAuMTMiLCJzdiI6Im5naW54XC8xLjI0LjAiLCJkdiI6bnVsbCwibGFuZyI6IiJ9&action=verify_googlebot&ip=101.99.88.90
    [Mar 28 10:30:31:1774693831.135840:4:info] Calling Wordfence API v2.27:https://noc1.wordfence.com/v2.27/?k=a4be8fe48f958fbef596ed3706238d9bb0b98c0333d6f6f93e0fe8adfb8918fb46850c888cadde5249416e933d580249ba66aa4457c10c317f50f5553a79293c4ed19d4dc96398d0ef99b0ed16d92bec&s=eyJ3cCI6IjYuOS40Iiwid2YiOiI4LjEuNCIsIm1zIjpmYWxzZSwiaCI6Imh0dHBzOlwvXC9yb2lkenNob3AuY29tIiwic3NsdiI6ODA1MzA2NTc2LCJwdiI6IjguMS4yOSIsInB0IjoiZnBtLWZjZ2kiLCJjdiI6IjguNS4wIiwiY3MiOiJPcGVuU1NMXC8zLjAuMTMiLCJzdiI6Im5naW54XC8xLjI0LjAiLCJkdiI6bnVsbCwibGFuZyI6IiJ9&action=timestamp
    [Mar 28 10:30:21:1774693821.943250:4:info] Calling Wordfence API v2.27:https://noc1.wordfence.com/v2.27/?k=a4be8fe48f958fbef596ed3706238d9bb0b98c0333d6f6f93e0fe8adfb8918fb46850c888cadde5249416e933d580249ba66aa4457c10c317f50f5553a79293c4ed19d4dc96398d0ef99b0ed16d92bec&s=eyJ3cCI6IjYuOS40Iiwid2YiOiI4LjEuNCIsIm1zIjpmYWxzZSwiaCI6Imh0dHBzOlwvXC9yb2lkenNob3AuY29tIiwic3NsdiI6ODA1MzA2NTc2LCJwdiI6IjguMS4yOSIsInB0IjoiZnBtLWZjZ2kiLCJjdiI6IjguNS4wIiwiY3MiOiJPcGVuU1NMXC8zLjAuMTMiLCJzdiI6Im5naW54XC8xLjI0LjAiLCJkdiI6bnVsbCwibGFuZyI6IiJ9&action=timestamp
    [Mar 28 10:28:21:1774693701.385477:4:info] Scan process ended after forking.
    [Mar 28 10:28:21:1774693701.271462:4:info] Starting cron via proxy at URL https://noc1.wordfence.com/scanp/mydomain.com/wp-admin/admin-ajax.php?action=wordfence_doScan&isFork=0&scanMode=standard&cronKey=8cee1889718efe806231697308370c94&k=a4be8fe48f958fbef596ed3706238d9bb0b98c0333d6f6f93e0fe8adfb8918fb46850c888cadde5249416e933d580249ba66aa4457c10c317f50f5553a79293c4ed19d4dc96398d0ef99b0ed16d92bec&ssl=1&signature=9c48c7f6b0d729e393a2ad794c234f84eac16eb0e1c79ecfc1422551fe0457c2
    [Mar 28 10:28:21:1774693701.269886:4:info] Test result of scan start URL fetch: WP_Error::__set_state(array( 'errors' => array ( 'http_request_failed' => array ( 0 => 'stream_socket_client(): SSL operation failed with code 1. OpenSSL Error messages: error:0A000410:SSL routines::sslv3 alert handshake failure stream_socket_client(): Failed to enable crypto stream_socket_client(): Unable to connect to ssl://mydomain.com:443 (Unknown error)', ), ), 'error_data' => array ( ), 'additional_data' => array ( ), ))
    [Mar 28 10:28:21:1774693701.259851:4:info] getMaxExecutionTime() returning config value: 20
    [Mar 28 10:28:21:1774693701.259190:4:info] Got value from wf config maxExecutionTime: 20
    [Mar 28 10:28:21:1774693701.243733:4:info] Entering start scan routine
    [Mar 28 10:28:21:1774693701.241559:4:info] Ajax request received to start scan.
    [Mar 28 10:28:17:1774693697.340300:10:info] SUM_KILLED:A request was received to stop the previous scan.
    [Mar 28 10:28:17:1774693697.339534:1:info] Scan stop request received.
    [Mar 28 10:27:12:1774693632.987475:4:info] Calling Wordfence API v2.27:https://noc1.wordfence.com/v2.27/?k=a4be8fe48f958fbef596ed3706238d9bb0b98c0333d6f6f93e0fe8adfb8918fb46850c888cadde5249416e933d580249ba66aa4457c10c317f50f5553a79293c4ed19d4dc96398d0ef99b0ed16d92bec&s=eyJ3cCI6IjYuOS40Iiwid2YiOiI4LjEuNCIsIm1zIjpmYWxzZSwiaCI6Imh0dHBzOlwvXC9yb2lkenNob3AuY29tIiwic3NsdiI6ODA1MzA2NTc2LCJwdiI6IjguMS4yOSIsInB0IjoiZnBtLWZjZ2kiLCJjdiI6IjguNS4wIiwiY3MiOiJPcGVuU1NMXC8zLjAuMTMiLCJzdiI6Im5naW54XC8xLjI0LjAiLCJkdiI6bnVsbCwibGFuZyI6IiJ9&action=timestamp
    [Mar 28 10:23:57:1774693437.269735:10:info] SUM_KILLED:A request was received to stop the previous scan.
    [Mar 28 10:23:57:1774693437.268889:1:info] Scan stop request received.

Viewing 3 replies - 1 through 3 (of 3 total)
  • Plugin Support wfmargaret

    (@wfmargaret)

    1 week, 4 days ago

    Hi @sibichan,

    Thank you for reaching out! Per your scan log, when Wordfence tries to connect back to your site to run the scan, it’s hitting an SSL handshake failure:

    error:0A000410:SSL routines::sslv3 alert handshake failure

    First, make sure your SSL certificate is valid and not expired. You can check this by visiting your site in a browser and clicking the padlock icon in the address bar to view the certificate details. If the certificate is expired or invalid, you’ll need to renew it through your hosting provider.

    If the certificate looks fine, please ask your hosting provider to investigate why the server can’t make an SSL connection back to itself.

    Let me know how it goes!

    Thanks,
    Margaret

    Thread Starter sibichan

    (@sibichan)

    1 week, 4 days ago

    SSL working

    Issued On Saturday, 28 February 2026 at 14:40:23
    Expires On Friday, 29 May 2026 at 14:40:22

    Plugin Support wfmargaret

    (@wfmargaret)

    1 week, 4 days ago

    Hi @sibichan,

    Can you send a diagnostic report to wftest @ wordfence . com? You can find the link to do so at the top of the Wordfence > Tools > Diagnostics page. Then click on “Send Report by Email”. Please add your forum username where indicated and respond here after you have sent it.

    NOTE: It should look as follows – Screenshot of Tools > Diagnostic > Send by Email

    Thanks,
    Margaret

Viewing 3 replies - 1 through 3 (of 3 total)

You must be logged in to reply to this topic.