Nextcloud security scan not working

I have a problem with the security scan, it only succeeded once, months ago, since then it simply doesn’t start.

I made a search on the site and I think I ran into this kind of issue:

Probably the IP of the scanner has been blocked.

I don’t have shell access to my installation, I only have cPanel and according to “IP blocker” I don’t have any IP blocked a the moment.

Are there other places where an IP can be blocked?

Ciao,

Max

Rescan should happen within 5 minutes after hitting “re-scan” button. If it still doesn’t update get in touch with your hosting provider

The Basics

  • Nextcloud Server version (e.g., 29.x.x):
    • 32.0.3
  • Operating system and version (e.g., Ubuntu 24.04):
    • Unraid 7.2.3 (Linux 6.12.54-Unraid)
  • Web server and version (e.g, Apache 2.4.25):
    • Apache/2.4.66 (Unix) (fpm-fcgi)
  • Reverse proxy and version _(e.g. nginx 1.27.2)
    • Nginx Proxy Manager Plus 2026-01-17-r3-6053d73-2.13.6
  • PHP version (e.g, 8.3):
    • 8.3.29
  • Is this the first time you’ve seen this error? (Yes / No):
    • Yes
  • When did this problem seem to first start?
    • 02-12-2025
  • Installation method (e.g. AlO, NCP, Bare Metal/Archive, etc.)
    • AIO
  • Are you using CloudfIare, mod_security, or similar? (Yes / No)
    • Crowdsec

Summary of the issue you are facing:

Since the 2nd of december the scan of my Nextcloud is not updating for my domain. I have tried to disable Crowdsec to check if it’s perhaps related but that did not solve the problem.

Steps to replicate it (hint: details matter!):

  1. Press ‘Trigger re-scan’.

Hello @Bishop8472,

welcome to the Nextcloud community! :handshake:

It works for me :man_shrugging:

I hit re-scan for my instance and within seconds the data and scan details changed → Scanned at 2026-01-20 06:44:55

So, am I correct in assuming that even if I press re-scan the details should update? Even if it cannot scan said site?

if it can not access the site how it should update details? in this case the scan fails.. and AFAIK old status remains

It could display a timestamp of the attempt. Or an error log.

At the moment I am seeing nothing.

1 Like