Sucuri SiteCheck与iThemes安全Pro插件在域上失败

Question

我有插件iThemes安全Pro安装在我的两个网站。最近，我注意到我的Sucuri SiteCheck扫描(包括自动扫描和非自动扫描)都失败了，但我不知道为什么会这样。日志也很模糊，告诉我：Unable to properly scan your site. Timeout reached。

下面是插件给我的原始日志。如果有人能告诉我问题出在哪里，我很感激。我没有启用防火墙，无论是在插件上还是在Apache级别上，尽管我已经启用了ModSecurity。

不过，每当我尝试一个SiteCheck时，ModSecurity的日志都不会给我任何错误，所以看起来请求甚至没有到达Apache。

id               => 15729
module           => malware
type             => warning
code             => sucuri-system-error
timestamp        => 2019-07-13 09:06:55
init_timestamp   => 2019-07-13 09:06:48
remote_ip        => 10.20.30.40
user_id          => 1
url              => https://domain.com/wp-admin/admin-ajax.php
memory_current   => 21832592
memory_peak      => 21915880
data             => Array
    results   => Array
        BLACKLIST   => Array
            INFO   => Array
                0   => Array
                    0   => Domain clean by Google Safe Browsing: www.domain.com
                    1   => https://transparencyreport.google.com/safe-browsing/search?url=domain.com
                1   => Array
                    0   => Domain clean by Norton Safe Web: www.domain.com
                    1   => https://safeweb.norton.com/report/show?url=domain.com
                2   => Array
                    0   => Domain clean by McAfee: www.domain.com
                    1   => https://www.siteadvisor.com/sitereport.html?url=domain.com
                3   => Array
                    0   => Domain clean by Sucuri Labs: www.domain.com
                    1   => https://labs.sucuri.net/?blacklist=domain.com
                4   => Array
                    0   => Domain clean by ESET: www.domain.com
                    1   => https://labs.sucuri.net/?eset
                5   => Array
                    0   => Domain clean by PhishTank: www.domain.com
                    1   => https://www.phishtank.com
                6   => Array
                    0   => Domain clean by Yandex: www.domain.com
                    1   => https://www.yandex.com/infected?url=domain.com
                7   => Array
                    0   => Domain clean by Opera: www.domain.com
                    1   => https://www.opera.com
                8   => Array
                    0   => Domain clean by Spamhaus: www.domain.com
                    1   => http://www.spamhaus.org/query/domain/domain.com
        SCAN        => Array
            DOMAIN   => Array
                0   => www.domain.com
            INPUT    => Array
                0   => http://www.domain.com/
            IP       => Array
                0   => 10.20.30.40
            SITE     => Array
                0   => http://www.domain.com/
        SYSTEM      => Array
            ERROR   => Array
                0   => Unable to properly scan your site. Timeout reached
        VERSION     => Array
            DBDATE    => Array
                0   => 03 Jul 2019 15:05 UTC
            VERSION   => Array
                0   => 2.6
        cached      => [boolean] false

Answer 1

我发现了问题。我的PHP被更新了，max_execution_time设置被重置为30秒，这还不足以让SiteCheck完全扫描站点。当我将执行时间增加到120秒以上时，问题就解决了。

Answer 2

扫描未能正确扫描站点问题修复程序.

我在使用ithemes安全插件。如果你也看到这样的错误，给出截图。点击“显示详细信息”复制IP地址。和

whitelist IP in cloudflare setting.

如果你在使用cloudflare。

以下步骤: cloudflare account>>security>>WAF>>Tools和粘贴IP地址，动作-允许，区域-这个网站，然后点击“添加”按钮。

现在再次检查我的安全扫描，它将工作。