Failed scan = thousands of changed file alert

  • Prior to today iThemes reported no changed files except those due to plugin updates. This reflected that of another security plugin.
    Today though I got the following error:
    id => 21107
    module => file_change
    type => fatal
    code => file-scan-aborted
    timestamp => 2019-01-29 01:40:32
    init_timestamp => 2019-01-29 01:40:31
    remote_ip => x.x.x.x.
    user_id => [empty string]
    url => https://www.sitename_here.com/
    memory_current => 48702456
    memory_peak => 48848352
    data => Array
    id => file-change
    step => get-files
    chunk => plugins

    {NOTE: I have removed the site name and IP address from above]
    The next attempted scan resulted in
    0 Added, 2123 Removed, 2 Changed

    The files that iThemes said are removed are still on the site. In otherwords this is a totally bogus report.

    Prior to today the scan showed
    0 Added, 0 Removed, 2 Changed

    • This topic was modified 5 years, 10 months ago by frustrated999.
    • This topic was modified 5 years, 10 months ago by frustrated999.
Viewing 4 replies - 16 through 19 (of 19 total)

  • I had the same problem where I had a notice of 1,548 files were deleted and less then 24 hours later a second notice of 1,548 files added. Notice looked the same as shown by frustrated999 in first posted. I just updated to the the lates release of 7.3.1 and hope the problem is fixed. I was at release 7.3 at time of error. In the notice that I received the remote_ip => x.x.x.x. was that of my service provider. I understand why frustrated999 would X out his IP address. When I say my providers IP address, I thought they had run Cron Job. There was nothing to indicated that the job was requested my iThemes which adds to the confusion.

    Thread Starter frustrated999

    (@frustrated999)

    I followed nlpro recommendations about moving the running of the job over to another scheduling method but only time will tell if that solves the issue.

    Thanks, I will post if I get any errors with version 7.3.1.

    Thread Starter frustrated999

    (@frustrated999)

    Well this issue again showed up reporting that

    Scan Summary
    Added 610 Removed 208 Modified 1525

    Then the next day

    Added 18922 Removed 1 Modified 19

    This is with Version 7.4.0

    I have serious doubts regarding this plugin when one can not trust the results of its reports due to a bug in it. That leads to becoming complacent when we see a report saying that a large number of files are changed and just chalk it up to the bug. We are trusting this plugin to give us reports that we can use as a basis for security issues. This has been a long festering issue with this plugin and sure does not act as incentive to purchase their Pro version of the plugin.

    Sigh

Viewing 4 replies - 16 through 19 (of 19 total)
  • The topic ‘Failed scan = thousands of changed file alert’ is closed to new replies.

Tags