A scan stage has failed to start.
-
Hello Wordfence Support Team,
I’m encountering an issue with the Wordfence plugin on my WordPress site, where scans fail to start with the error: “A scan stage has failed to start.” I’ve already tried enabling the “Start all scans remotely” option under the plugin settings, but the problem persists.
Below are the relevant logs for your reference:
[Jul 04 00:29:58:1751560198.245966:4:info] Scan process ended after forking.
[Jul 04 00:29:58:1751560198.126388:4:info] Starting cron with normal ajax at URL https://www.joyfamily.top/wp-admin/admin-ajax.php?action=wordfence_doScan&isFork=0&scanMode=custom&cronKey=5203222d9c08c598342327a315b447a8&signature=115a5b33849f08a9b3590e6a0c4f19faa34ab3497b71d471c18ed05ac0939d30
[Jul 04 00:29:58:1751560198.119437:4:info] Test result of scan start URL fetch: array ( 'headers' => WpOrg\Requests\Utility\CaseInsensitiveDictionary::__set_state(array( 'data' => array ( 'cache-control' => 'no-cache, must-revalidate, max-age=0, no-store, private', 'content-encoding' => 'gzip', 'content-type' => 'text/html; charset=UTF-8', 'date' => 'Thu, 03 Jul 2025 16:29:58 GMT', 'expires' => 'Wed, 11 Jan 1984 05:00:00 GMT', 'referrer-policy' => 'strict-origin-when-cross-origin', 'server' => 'nginx', 'strict-transport-security' => 'max-age=31536000', 'vary' => 'Accept-Encoding', 'x-cache' => 'BYPASS', 'x-content-type-options' => 'nosniff', 'x-frame-options' => 'SAMEORIGIN', 'x-robots-tag' => 'noindex', 'content-length' => '32', ), )), 'body' => 'WFSCANTESTOK', 'response' => array ( 'code' => 200, 'message' => 'OK', ), 'cookies' => array ( ), 'filename' => NULL, 'http_response' => WP_HTTP_Requ
[Jul 04 00:29:57:1751560197.293019:4:info] getMaxExecutionTime() returning config value: 20
[Jul 04 00:29:57:1751560197.291620:4:info] Got value from wf config maxExecutionTime: 20
[Jul 04 00:29:57:1751560197.286823:4:info] Entering start scan routine
[Jul 04 00:29:57:1751560197.283107:2:info] Attempting to resume scan stage (1 attempt(s) remaining)...
[Jul 04 00:28:03:1751560083.750072:4:info] Scan process ended after forking.
[Jul 04 00:28:03:1751560083.135950:4:info] Starting cron with normal ajax at URL https://www.joyfamily.top/wp-admin/admin-ajax.php?action=wordfence_doScan&isFork=0&scanMode=custom&cronKey=9ca708123982eef41f09b43b1847c664&signature=96cb3734f7876c15b0781350686ea212eafcdff6e2d747999817cde6fe62ebb3
[Jul 04 00:28:03:1751560083.128748:4:info] Test result of scan start URL fetch: array ( 'headers' => WpOrg\Requests\Utility\CaseInsensitiveDictionary::__set_state(array( 'data' => array ( 'cache-control' => 'no-cache, must-revalidate, max-age=0, no-store, private', 'content-encoding' => 'gzip', 'content-type' => 'text/html; charset=UTF-8', 'date' => 'Thu, 03 Jul 2025 16:28:03 GMT', 'expires' => 'Wed, 11 Jan 1984 05:00:00 GMT', 'referrer-policy' => 'strict-origin-when-cross-origin', 'server' => 'nginx', 'strict-transport-security' => 'max-age=31536000', 'vary' => 'Accept-Encoding', 'x-cache' => 'BYPASS', 'x-content-type-options' => 'nosniff', 'x-frame-options' => 'SAMEORIGIN', 'x-robots-tag' => 'noindex', 'content-length' => '32', ), )), 'body' => 'WFSCANTESTOK', 'response' => array ( 'code' => 200, 'message' => 'OK', ), 'cookies' => array ( ), 'filename' => NULL, 'http_response' => WP_HTTP_Requ
[Jul 04 00:28:02:1751560082.898794:4:info] getMaxExecutionTime() returning config value: 20
[Jul 04 00:28:02:1751560082.897645:4:info] Got value from wf config maxExecutionTime: 20
[Jul 04 00:28:02:1751560082.892940:4:info] Entering start scan routine
[Jul 04 00:28:02:1751560082.889357:2:info] Attempting to resume scan stage (2 attempt(s) remaining)...
[Jul 04 00:27:06:1751560026.873239:4:info] Scan process ended after forking.
[Jul 04 00:27:06:1751560026.737395:4:info] Starting cron with normal ajax at URL https://www.joyfamily.top/wp-admin/admin-ajax.php?action=wordfence_doScan&isFork=0&scanMode=custom&cronKey=5fb72576ca65574f558206ac03b35ce2&signature=48609c523058c23271899840de53bd88d6d7a8b730c48bd3abea7cac3e416c4f
[Jul 04 00:27:06:1751560026.731586:4:info] Test result of scan start URL fetch: array ( 'headers' => WpOrg\Requests\Utility\CaseInsensitiveDictionary::__set_state(array( 'data' => array ( 'cache-control' => 'no-cache, must-revalidate, max-age=0, no-store, private', 'content-encoding' => 'gzip', 'content-type' => 'text/html; charset=UTF-8', 'date' => 'Thu, 03 Jul 2025 16:27:06 GMT', 'expires' => 'Wed, 11 Jan 1984 05:00:00 GMT', 'referrer-policy' => 'strict-origin-when-cross-origin', 'server' => 'nginx', 'strict-transport-security' => 'max-age=31536000', 'vary' => 'Accept-Encoding', 'x-cache' => 'BYPASS', 'x-content-type-options' => 'nosniff', 'x-frame-options' => 'SAMEORIGIN', 'x-robots-tag' => 'noindex', 'content-length' => '32', ), )), 'body' => 'WFSCANTESTOK', 'response' => array ( 'code' => 200, 'message' => 'OK', ), 'cookies' => array ( ), 'filename' => NULL, 'http_response' => WP_HTTP_Requ
[Jul 04 00:27:06:1751560026.290538:4:info] getMaxExecutionTime() returning config value: 20
[Jul 04 00:27:06:1751560026.289526:4:info] Got value from wf config maxExecutionTime: 20
[Jul 04 00:27:06:1751560026.279835:4:info] Entering start scan routine
[Jul 04 00:27:06:1751560026.275326:4:info] Ajax request received to start scan.
[Jul 04 00:27:03:1751560023.811122:4:info] Scan process ended after forking.
[Jul 04 00:27:03:1751560023.651120:4:info] Starting cron with normal ajax at URL https://www.joyfamily.top/wp-admin/admin-ajax.php?action=wordfence_doScan&isFork=0&scanMode=custom&cronKey=4262ad1ebd23a71f2cafe29ab0c14778&signature=eae958955dfef0acfe53bc12ae238501931dc5fba035bb562b28628d53f4f8e4
[Jul 04 00:27:03:1751560023.641843:4:info] Test result of scan start URL fetch: array ( 'headers' => WpOrg\Requests\Utility\CaseInsensitiveDictionary::__set_state(array( 'data' => array ( 'cache-control' => 'no-cache, must-revalidate, max-age=0, no-store, private', 'content-encoding' => 'gzip', 'content-type' => 'text/html; charset=UTF-8', 'date' => 'Thu, 03 Jul 2025 16:27:03 GMT', 'expires' => 'Wed, 11 Jan 1984 05:00:00 GMT', 'referrer-policy' => 'strict-origin-when-cross-origin', 'server' => 'nginx', 'strict-transport-security' => 'max-age=31536000', 'vary' => 'Accept-Encoding', 'x-cache' => 'BYPASS', 'x-content-type-options' => 'nosniff', 'x-frame-options' => 'SAMEORIGIN', 'x-robots-tag' => 'noindex', 'content-length' => '32', ), )), 'body' => 'WFSCANTESTOK', 'response' => array ( 'code' => 200, 'message' => 'OK', ), 'cookies' => array ( ), 'filename' => NULL, 'http_response' => WP_HTTP_Requ
[Jul 04 00:27:03:1751560023.347820:4:info] Scan process ended after forking.
[Jul 04 00:27:03:1751560023.227750:4:info] Starting cron with normal ajax at URL https://www.joyfamily.top/wp-admin/admin-ajax.php?action=wordfence_doScan&isFork=0&scanMode=custom&cronKey=9e9c5b23243c93a81e9168786efb25a2&signature=6b59cb581b1c6b2ac01b465e706b2ac2a551e25d8069a758e3aff735f677998a
[Jul 04 00:27:03:1751560023.221650:4:info] Test result of scan start URL fetch: array ( 'headers' => WpOrg\Requests\Utility\CaseInsensitiveDictionary::__set_state(array( 'data' => array ( 'cache-control' => 'no-cache, must-revalidate, max-age=0, no-store, private', 'content-encoding' => 'gzip', 'content-type' => 'text/html; charset=UTF-8', 'date' => 'Thu, 03 Jul 2025 16:27:03 GMT', 'expires' => 'Wed, 11 Jan 1984 05:00:00 GMT', 'referrer-policy' => 'strict-origin-when-cross-origin', 'server' => 'nginx', 'strict-transport-security' => 'max-age=31536000', 'vary' => 'Accept-Encoding', 'x-cache' => 'BYPASS', 'x-content-type-options' => 'nosniff', 'x-frame-options' => 'SAMEORIGIN', 'x-robots-tag' => 'noindex', 'content-length' => '32', ), )), 'body' => 'WFSCANTESTOK', 'response' => array ( 'code' => 200, 'message' => 'OK', ), 'cookies' => array ( ), 'filename' => NULL, 'http_response' => WP_HTTP_Requ
[Jul 04 00:27:02:1751560022.785839:4:info] getMaxExecutionTime() returning config value: 20
[Jul 04 00:27:02:1751560022.783582:4:info] Got value from wf config maxExecutionTime: 20
[Jul 04 00:27:02:1751560022.775899:4:info] Entering start scan routine
[Jul 04 00:27:02:1751560022.770207:4:info] Ajax request received to start scan.
[Jul 04 00:27:02:1751560022.666857:4:info] getMaxExecutionTime() returning config value: 20
[Jul 04 00:27:02:1751560022.664933:4:info] Got value from wf config maxExecutionTime: 20
[Jul 04 00:27:02:1751560022.656909:4:info] Entering start scan routine
Could you kindly advise on how to resolve this? Any guidance on troubleshooting steps or configuration adjustments would be greatly appreciated.
-
Hi @cottboy,
Thanks for reaching out and sending over the debug log. Can you please send a diagnostic report to wftest @ wordfence . com? You can find the link to do so at the top of the Wordfence > Tools > Diagnostics page. Then click on “Send Report by Email”. Please add your forum username where indicated and respond here after you have sent it.
NOTE: It should look as follows – Screenshot of Tools > Diagnostic > Send by Email
Thanks,
MargaretThank you for your reply. I have sent the report via email. Could you please let me know what to do next?
Hey @cottboy,
Thanks for sending that over! Please set
max_execution_time = 60in php.ini and yourmemory_limitto256Mor higher. Many plugins recommend a 256M minimum, and while yourWP_MAX_MEMORY_LIMITis set to256M, yourmemory_limitis only set to128M. With a lower limit, if you also have many hits on the site at once during a Wordfence scan, a lower limit here could be reached fairly easily, and WordPress won’t be able to request the amount of memory it should have access to. You may also want to increase the limit ofWP_MEMORY_LIMITin wp-config.php to a value equal to or lower thanmemory_limit.Once that’s done, please run a Standard scan with debugging enabled. If it fails, please send me the updated activity log.
Thanks,
MargaretThank you for your response. I have made the following adjustments:
max_execution_time , It is already set to 300 (no adjustment needed).
Adjusted the memory_limit to 256M.
Added the following code to the wp-config.php file:
define( 'WP_MEMORY_LIMIT', '256M' );
define( 'WP_MAX_MEMORY_LIMIT', '256M' );The scan still failed. Below is the scan log:
[Jul 04 05:27:57:1751578077.333379:4:info] Scan process ended after forking.
[Jul 04 05:27:57:1751578077.205381:4:info] Starting cron with normal ajax at URL https://www.joyfamily.top/wp-admin/admin-ajax.php?action=wordfence_doScan&isFork=0&scanMode=custom&cronKey=ea1c2163d6a79f53bc896ee03b7fc5d8&signature=006eec3d7adfd98cd2982f1e732989bf9d905a69b4324ca31aea53769d87fb50
[Jul 04 05:27:57:1751578077.197255:4:info] Test result of scan start URL fetch: array ( 'headers' => WpOrg\Requests\Utility\CaseInsensitiveDictionary::__set_state(array( 'data' => array ( 'cache-control' => 'no-cache, must-revalidate, max-age=0, no-store, private', 'content-encoding' => 'gzip', 'content-type' => 'text/html; charset=UTF-8', 'date' => 'Thu, 03 Jul 2025 21:27:57 GMT', 'expires' => 'Wed, 11 Jan 1984 05:00:00 GMT', 'referrer-policy' => 'strict-origin-when-cross-origin', 'server' => 'nginx', 'strict-transport-security' => 'max-age=31536000', 'vary' => 'Accept-Encoding', 'x-cache' => 'BYPASS', 'x-content-type-options' => 'nosniff', 'x-frame-options' => 'SAMEORIGIN', 'x-robots-tag' => 'noindex', 'content-length' => '32', ), )), 'body' => 'WFSCANTESTOK', 'response' => array ( 'code' => 200, 'message' => 'OK', ), 'cookies' => array ( ), 'filename' => NULL, 'http_response' => WP_HTTP_Requ
[Jul 04 05:27:56:1751578076.747025:4:info] getMaxExecutionTime() returning config value: 20
[Jul 04 05:27:56:1751578076.746003:4:info] Got value from wf config maxExecutionTime: 20
[Jul 04 05:27:56:1751578076.739276:4:info] Entering start scan routine
[Jul 04 05:27:56:1751578076.732827:2:info] Attempting to resume scan stage (0 attempt(s) remaining)...
[Jul 04 05:26:44:1751578004.705487:4:info] Scan process ended after forking.
[Jul 04 05:26:44:1751578004.680169:4:info] Starting cron with normal ajax at URL https://www.joyfamily.top/wp-admin/admin-ajax.php?action=wordfence_doScan&isFork=0&scanMode=custom&cronKey=816a082f0528711af5270b5731fa2a5b&signature=cf9415218166efd3d9da483fda455309e50578c2cabcec7b02e1ff0a3e1715f4
[Jul 04 05:26:44:1751578004.672778:4:info] Test result of scan start URL fetch: array ( 'headers' => WpOrg\Requests\Utility\CaseInsensitiveDictionary::__set_state(array( 'data' => array ( 'cache-control' => 'no-cache, must-revalidate, max-age=0, no-store, private', 'content-encoding' => 'gzip', 'content-type' => 'text/html; charset=UTF-8', 'date' => 'Thu, 03 Jul 2025 21:26:44 GMT', 'expires' => 'Wed, 11 Jan 1984 05:00:00 GMT', 'referrer-policy' => 'strict-origin-when-cross-origin', 'server' => 'nginx', 'strict-transport-security' => 'max-age=31536000', 'vary' => 'Accept-Encoding', 'x-cache' => 'BYPASS', 'x-content-type-options' => 'nosniff', 'x-frame-options' => 'SAMEORIGIN', 'x-robots-tag' => 'noindex', 'content-length' => '32', ), )), 'body' => 'WFSCANTESTOK', 'response' => array ( 'code' => 200, 'message' => 'OK', ), 'cookies' => array ( ), 'filename' => NULL, 'http_response' => WP_HTTP_Requ
[Jul 04 05:26:44:1751578004.271852:4:info] getMaxExecutionTime() returning config value: 20
[Jul 04 05:26:44:1751578004.270675:4:info] Got value from wf config maxExecutionTime: 20
[Jul 04 05:26:44:1751578004.264042:4:info] Entering start scan routine
[Jul 04 05:26:44:1751578004.259681:2:info] Attempting to resume scan stage (1 attempt(s) remaining)...
[Jul 04 05:25:44:1751577944.393376:4:info] Scan process ended after forking.
[Jul 04 05:25:44:1751577944.275578:4:info] Starting cron with normal ajax at URL https://www.joyfamily.top/wp-admin/admin-ajax.php?action=wordfence_doScan&isFork=0&scanMode=custom&cronKey=f1df9bf1b229fed901d2fd4caabaaff0&signature=11a6a5677ebca35161f41898c01752e386c14da19aefffdd6ca97cde0048097b
[Jul 04 05:25:44:1751577944.268930:4:info] Test result of scan start URL fetch: array ( 'headers' => WpOrg\Requests\Utility\CaseInsensitiveDictionary::__set_state(array( 'data' => array ( 'cache-control' => 'no-cache, must-revalidate, max-age=0, no-store, private', 'content-encoding' => 'gzip', 'content-type' => 'text/html; charset=UTF-8', 'date' => 'Thu, 03 Jul 2025 21:25:44 GMT', 'expires' => 'Wed, 11 Jan 1984 05:00:00 GMT', 'referrer-policy' => 'strict-origin-when-cross-origin', 'server' => 'nginx', 'strict-transport-security' => 'max-age=31536000', 'vary' => 'Accept-Encoding', 'x-cache' => 'BYPASS', 'x-content-type-options' => 'nosniff', 'x-frame-options' => 'SAMEORIGIN', 'x-robots-tag' => 'noindex', 'content-length' => '32', ), )), 'body' => 'WFSCANTESTOK', 'response' => array ( 'code' => 200, 'message' => 'OK', ), 'cookies' => array ( ), 'filename' => NULL, 'http_response' => WP_HTTP_Requ
[Jul 04 05:25:44:1751577944.034584:4:info] getMaxExecutionTime() returning config value: 20
[Jul 04 05:25:44:1751577944.032492:4:info] Got value from wf config maxExecutionTime: 20
[Jul 04 05:25:44:1751577944.026511:4:info] Entering start scan routine
[Jul 04 05:25:44:1751577944.022694:2:info] Attempting to resume scan stage (2 attempt(s) remaining)...
[Jul 04 05:24:56:1751577896.171020:4:info] Scan process ended after forking.
[Jul 04 05:24:56:1751577896.050410:4:info] Starting cron with normal ajax at URL https://www.joyfamily.top/wp-admin/admin-ajax.php?action=wordfence_doScan&isFork=0&scanMode=custom&cronKey=c223db54795f9b4879a814255af83fdb&signature=abfededbf31b010b3893f7701385581655e6cc62b986992afb383479b12b845e
[Jul 04 05:24:56:1751577896.043253:4:info] Test result of scan start URL fetch: array ( 'headers' => WpOrg\Requests\Utility\CaseInsensitiveDictionary::__set_state(array( 'data' => array ( 'cache-control' => 'no-cache, must-revalidate, max-age=0, no-store, private', 'content-encoding' => 'gzip', 'content-type' => 'text/html; charset=UTF-8', 'date' => 'Thu, 03 Jul 2025 21:24:56 GMT', 'expires' => 'Wed, 11 Jan 1984 05:00:00 GMT', 'referrer-policy' => 'strict-origin-when-cross-origin', 'server' => 'nginx', 'strict-transport-security' => 'max-age=31536000', 'vary' => 'Accept-Encoding', 'x-cache' => 'BYPASS', 'x-content-type-options' => 'nosniff', 'x-frame-options' => 'SAMEORIGIN', 'x-robots-tag' => 'noindex', 'content-length' => '32', ), )), 'body' => 'WFSCANTESTOK', 'response' => array ( 'code' => 200, 'message' => 'OK', ), 'cookies' => array ( ), 'filename' => NULL, 'http_response' => WP_HTTP_Requ
[Jul 04 05:24:55:1751577895.821374:4:info] getMaxExecutionTime() returning config value: 20
[Jul 04 05:24:55:1751577895.819747:4:info] Got value from wf config maxExecutionTime: 20
[Jul 04 05:24:55:1751577895.810892:4:info] Entering start scan routine
[Jul 04 05:24:55:1751577895.803782:4:info] Ajax request received to start scan.What should I do next?
Oh, sorry, do you mean setting max_execution_time to 60, instead of setting it to 60 or higher?
I have already adjusted max_execution_time to 60. The scan now seems to shift from failing to start at all to getting stuck at the first step. Below is the scan log:[Jul 05 00:03:44:1751645024.966220:4:info] Calling Wordfence API v2.26:https://noc1.wordfence.com/v2.26/?k=b0f70517bc7866584f4d04d6053f431e84c4e486d12e1a5cdf7c03064d133dfe6e53f4841491c3cb9fbabb9a683e1a682600ae20b05d8a5d849ec48f69245a1c&s=eyJ3cCI6IjYuOC4xIiwid2YiOiI4LjAuNSIsIm1zIjpmYWxzZSwiaCI6Imh0dHBzOlwvXC93d3cuam95ZmFtaWx5LnRvcCIsInNzbHYiOjI2OTQ4ODM4MywicHYiOiI4LjAuMjYiLCJwdCI6ImZwbS1mY2dpIiwiY3YiOiI3Ljc0LjAiLCJjcyI6Ik9wZW5TU0xcLzEuMS4xbyIsInN2IjoibmdpbnhcLzEuMjQuMCIsImR2IjoiNS43LjQzLWxvZyIsImxhbmciOiIifQ&action=resolve_ips
[Jul 04 23:49:46:1751644186.147083:4:info] Calling Wordfence API v2.26:https://noc1.wordfence.com/v2.26/?k=b0f70517bc7866584f4d04d6053f431e84c4e486d12e1a5cdf7c03064d133dfe6e53f4841491c3cb9fbabb9a683e1a682600ae20b05d8a5d849ec48f69245a1c&s=eyJ3cCI6IjYuOC4xIiwid2YiOiI4LjAuNSIsIm1zIjpmYWxzZSwiaCI6Imh0dHBzOlwvXC93d3cuam95ZmFtaWx5LnRvcCIsInNzbHYiOjI2OTQ4ODM4MywicHYiOiI4LjAuMjYiLCJwdCI6ImZwbS1mY2dpIiwiY3YiOiI3Ljc0LjAiLCJjcyI6Ik9wZW5TU0xcLzEuMS4xbyIsInN2IjoibmdpbnhcLzEuMjQuMCIsImR2IjoiNS43LjQzLWxvZyIsImxhbmciOiIifQ&action=timestamp
[Jul 04 23:44:58:1751643898.012883:4:info] Scan process ended after forking.
[Jul 04 23:44:57:1751643897.881707:4:info] Starting cron with normal ajax at URL https://www.joyfamily.top/wp-admin/admin-ajax.php?action=wordfence_doScan&isFork=0&scanMode=custom&cronKey=c02eb1acb10572b33db71568785df3b5&signature=601888ac7ee7cecfc2ad05e77f4c220d692d34bc2f1e59464c79387c7d60b664
[Jul 04 23:44:57:1751643897.874670:4:info] Test result of scan start URL fetch: array ( 'headers' => WpOrg\Requests\Utility\CaseInsensitiveDictionary::__set_state(array( 'data' => array ( 'cache-control' => 'no-cache, must-revalidate, max-age=0, no-store, private', 'content-encoding' => 'gzip', 'content-type' => 'text/html; charset=UTF-8', 'date' => 'Fri, 04 Jul 2025 15:44:57 GMT', 'expires' => 'Wed, 11 Jan 1984 05:00:00 GMT', 'referrer-policy' => 'strict-origin-when-cross-origin', 'server' => 'nginx', 'strict-transport-security' => 'max-age=31536000', 'vary' => 'Accept-Encoding', 'x-cache' => 'BYPASS', 'x-content-type-options' => 'nosniff', 'x-frame-options' => 'SAMEORIGIN', 'x-robots-tag' => 'noindex', 'content-length' => '32', ), )), 'body' => 'WFSCANTESTOK', 'response' => array ( 'code' => 200, 'message' => 'OK', ), 'cookies' => array ( ), 'filename' => NULL, 'http_response' => WP_HTTP_Requ
[Jul 04 23:44:57:1751643897.038536:4:info] getMaxExecutionTime() returning config value: 20
[Jul 04 23:44:57:1751643897.035890:4:info] Got value from wf config maxExecutionTime: 20
[Jul 04 23:44:57:1751643897.028060:4:info] Entering start scan routine
[Jul 04 23:44:57:1751643897.022469:2:info] Attempting to resume scan stage (0 attempt(s) remaining)...
[Jul 04 23:43:55:1751643835.985087:4:info] Scan process ended after forking.
[Jul 04 23:43:55:1751643835.958521:4:info] Starting cron with normal ajax at URL https://www.joyfamily.top/wp-admin/admin-ajax.php?action=wordfence_doScan&isFork=0&scanMode=custom&cronKey=9335fa2a4e24cd71e5eb3d7145e6ad23&signature=bb825fb4ffd9d8876561dcc5d2feb3ec11838c42508225bcf4507de1324fabe7
[Jul 04 23:43:55:1751643835.951502:4:info] Test result of scan start URL fetch: array ( 'headers' => WpOrg\Requests\Utility\CaseInsensitiveDictionary::__set_state(array( 'data' => array ( 'cache-control' => 'no-cache, must-revalidate, max-age=0, no-store, private', 'content-encoding' => 'gzip', 'content-type' => 'text/html; charset=UTF-8', 'date' => 'Fri, 04 Jul 2025 15:43:55 GMT', 'expires' => 'Wed, 11 Jan 1984 05:00:00 GMT', 'referrer-policy' => 'strict-origin-when-cross-origin', 'server' => 'nginx', 'strict-transport-security' => 'max-age=31536000', 'vary' => 'Accept-Encoding', 'x-cache' => 'BYPASS', 'x-content-type-options' => 'nosniff', 'x-frame-options' => 'SAMEORIGIN', 'x-robots-tag' => 'noindex', 'content-length' => '32', ), )), 'body' => 'WFSCANTESTOK', 'response' => array ( 'code' => 200, 'message' => 'OK', ), 'cookies' => array ( ), 'filename' => NULL, 'http_response' => WP_HTTP_Requ
[Jul 04 23:43:55:1751643835.722577:4:info] getMaxExecutionTime() returning config value: 20
[Jul 04 23:43:55:1751643835.720264:4:info] Got value from wf config maxExecutionTime: 20
[Jul 04 23:43:55:1751643835.715467:4:info] Entering start scan routine
[Jul 04 23:43:55:1751643835.709761:2:info] Attempting to resume scan stage (1 attempt(s) remaining)...
[Jul 04 23:42:27:1751643747.634977:4:info] Scan process ended after forking.
[Jul 04 23:42:27:1751643747.504536:4:info] Starting cron with normal ajax at URL https://www.joyfamily.top/wp-admin/admin-ajax.php?action=wordfence_doScan&isFork=0&scanMode=custom&cronKey=0982ed41da73ba2de41a7b4cd21d697b&signature=a4b38790d9606bd831c7c7f8fdb4230c7e51773a7d0dca231c84849e557dfead
[Jul 04 23:42:27:1751643747.496024:4:info] Test result of scan start URL fetch: array ( 'headers' => WpOrg\Requests\Utility\CaseInsensitiveDictionary::__set_state(array( 'data' => array ( 'cache-control' => 'no-cache, must-revalidate, max-age=0, no-store, private', 'content-encoding' => 'gzip', 'content-type' => 'text/html; charset=UTF-8', 'date' => 'Fri, 04 Jul 2025 15:42:27 GMT', 'expires' => 'Wed, 11 Jan 1984 05:00:00 GMT', 'referrer-policy' => 'strict-origin-when-cross-origin', 'server' => 'nginx', 'strict-transport-security' => 'max-age=31536000', 'vary' => 'Accept-Encoding', 'x-cache' => 'BYPASS', 'x-content-type-options' => 'nosniff', 'x-frame-options' => 'SAMEORIGIN', 'x-robots-tag' => 'noindex', 'content-length' => '32', ), )), 'body' => 'WFSCANTESTOK', 'response' => array ( 'code' => 200, 'message' => 'OK', ), 'cookies' => array ( ), 'filename' => NULL, 'http_response' => WP_HTTP_Requ
[Jul 04 23:42:26:1751643746.774961:4:info] getMaxExecutionTime() returning config value: 20
[Jul 04 23:42:26:1751643746.774010:4:info] Got value from wf config maxExecutionTime: 20
[Jul 04 23:42:26:1751643746.768868:4:info] Entering start scan routine
[Jul 04 23:42:26:1751643746.764327:2:info] Attempting to resume scan stage (2 attempt(s) remaining)...
[Jul 04 23:40:48:1751643648.533290:4:info] Scan process ended after forking.
[Jul 04 23:40:48:1751643648.502335:4:info] Starting cron with normal ajax at URL https://www.joyfamily.top/wp-admin/admin-ajax.php?action=wordfence_doScan&isFork=0&scanMode=custom&cronKey=37e4213a8986ac56a118e07d0efc642e&signature=d2e0f8b2125720c45e42031479706cb6e11d6244b63a2fb21a6462f2ea34de81
[Jul 04 23:40:48:1751643648.493615:4:info] Test result of scan start URL fetch: array ( 'headers' => WpOrg\Requests\Utility\CaseInsensitiveDictionary::__set_state(array( 'data' => array ( 'cache-control' => 'no-cache, must-revalidate, max-age=0, no-store, private', 'content-encoding' => 'gzip', 'content-type' => 'text/html; charset=UTF-8', 'date' => 'Fri, 04 Jul 2025 15:40:48 GMT', 'expires' => 'Wed, 11 Jan 1984 05:00:00 GMT', 'referrer-policy' => 'strict-origin-when-cross-origin', 'server' => 'nginx', 'strict-transport-security' => 'max-age=31536000', 'vary' => 'Accept-Encoding', 'x-cache' => 'BYPASS', 'x-content-type-options' => 'nosniff', 'x-frame-options' => 'SAMEORIGIN', 'x-robots-tag' => 'noindex', 'content-length' => '32', ), )), 'body' => 'WFSCANTESTOK', 'response' => array ( 'code' => 200, 'message' => 'OK', ), 'cookies' => array ( ), 'filename' => NULL, 'http_response' => WP_HTTP_Requ
[Jul 04 23:40:47:1751643647.676669:4:info] getMaxExecutionTime() returning config value: 20
[Jul 04 23:40:47:1751643647.674634:4:info] Got value from wf config maxExecutionTime: 20
[Jul 04 23:40:47:1751643647.659437:4:info] Entering start scan routine
[Jul 04 23:40:47:1751643647.652377:4:info] Ajax request received to start scan.The method I currently use for Wordfence to retrieve IPs is the X-Forwarded-For header. Everything works normally with the X-Forwarded-For header, but Wordfence keeps alerting me to use the X-Real-IP header instead.


Hi there,
I wanted to check in and ask if there’s any update on resolving the scanning cannot start issue? It’s been a few days since my last message, and I’d really appreciate any guidance or next steps you might suggest.
Thank you for your time and support!
Hi @cottboy,
Thanks for your patience over the long weekend. Wordfence is detecting that your proxy uses X-Real-IP rather than X-Forwarded-For to pass the IP address. Because of this, you should configure IP detection to use X-Real-IP. If you notice any specific issues with that setting, please let me know.
Regarding the scan, we have seen issues on some hosts if max_execution_time is set too high, so I’m glad to hear that reducing that has helped somewhat. Currently, I see a maintenance page on the entire site, including on a test page such as https://www.joyfamily.top/wp-admin/admin-ajax.php?action=wordfence_testAjax. This could potentially prevent the scan from running.
Please temporarily deactivate any maintenance plugins and run a new scan. If it fails, please send me an updated scan log and a copy of your web server access log at the time of the scan. You can email those to wftest @ wordfence . com. Please put your forum username as the subject and let me know here once you’ve sent it.
Thanks,
MargaretThank you for your reply,
I am not using any plugin that displays a maintenance page. The maintenance page is displayed through CDN and does not affect the scan operation. The reason for showing the maintenance page is that I wanted to reinstall the VPS system.
It is worth noting that after reinstalling the system, the first scan failed at step two. When I tried scanning again, it returned to the state where the scan could not start.
If you would like to access the debugging parameters by visiting the page https://www.joyfamily.top/wp-admin/admin-ajax.php?action=wordfence_testAjax, you can now access it. The page only displays “WFSCANTESTOK”.
I have sent the scan logs and web logs via email. I look forward to your reply.
Hi @cottboy,
Thanks for the detailed explanation. When you first reinstalled and started the scan, was the CDN active, or are you using a load balancer? Near the beginning of the firewall access log, I see the following, which looks like a scan that started successfully:
7********* - - [09/Jul/2025:10:28:08 +0800] "GET /wp-admin/admin-ajax.php?action=wordfence_doScan&isFork=1&scanMode=custom&cronKey=***&signature=*** HTTP/1.1" 499 0 "-" "WordPress/6.8.1; https://www.joyfamily.top" "-"The origin access logs unfortunately don’t go back quite that far, but the IP here doesn’t match what was reported in your diagnostics. Later, I see accesses from the normal server IP, but I don’t see any attempts to start the scan that line up with the time from your scan log. This could point to something blocking the outbound connection before it reaches the firewall. Was anything changed in the server configuration or DNS between the two scan attempts?
I’d also like to know if you’re seeing any intermittent errors in connectivity. In your initial diagnostics, the site had no issue connecting back to itself or to our servers. If you check Connectivity in Wordfence > Tools > Diagnostics and refresh after starting a scan, do you see any errors there?
Please let me know what you find!
Thanks,
MargaretThank you for your reply.
I only used CDN, and did not use a load balancer.
There may have been changes between the two scans, as I was reinstalling the system. When I first opened Wordfence after completing the configuration, it showed that the scan was stuck at step two. However, when I tried scanning again, it returned to the previous state where the scan could not start.
Connectivity seems to have some issues. “Connecting back to this site” shows the CDN’s IP, and it is unable to reconnect to the website via IPv6 (my server does not have IPv6 at all, and I also checked the option to scan using IPv4 only) . “IP(s) used by this site” displays two IPs: one is the server’s real IP, and the other is 127.0.0.1.
Since I usually do not set WordPress to English, every time I capture the scan log, I first switch WordPress to English, perform a new scan, and then send you the log. Because of this, the logs might not be complete. Therefore, this time I will paste the full log below:[Jul 10 11:06:54:1752116814.789878:4:info] Calling Wordfence API v2.26:https://noc1.wordfence.com/v2.26/?k=b0f70517bc7866584f4d04d6053f431e84c4e486d12e1a5cdf7c03064d133dfe6e53f4841491c3cb9fbabb9a683e1a682600ae20b05d8a5d849ec48f69245a1c&s=eyJ3cCI6IjYuOC4xIiwid2YiOiI4LjAuNSIsIm1zIjpmYWxzZSwiaCI6Imh0dHBzOlwvXC93d3cuam95ZmFtaWx5LnRvcCIsInNzbHYiOjI2OTQ4ODM4MywicHYiOiI4LjIuMjgiLCJwdCI6ImZwbS1mY2dpIiwiY3YiOiI3Ljc0LjAiLCJjcyI6Ik9wZW5TU0xcLzEuMS4xbyIsInN2IjoibmdpbnhcLzEuMjguMCIsImR2IjoiNS43LjQ0LWxvZyIsImxhbmciOiIifQ&action=timestamp
[Jul 10 11:00:11:1752116411.945938:4:info] Calling Wordfence API v2.26:https://noc1.wordfence.com/v2.26/?k=b0f70517bc7866584f4d04d6053f431e84c4e486d12e1a5cdf7c03064d133dfe6e53f4841491c3cb9fbabb9a683e1a682600ae20b05d8a5d849ec48f69245a1c&s=eyJ3cCI6IjYuOC4xIiwid2YiOiI4LjAuNSIsIm1zIjpmYWxzZSwiaCI6Imh0dHBzOlwvXC93d3cuam95ZmFtaWx5LnRvcCIsInNzbHYiOjI2OTQ4ODM4MywicHYiOiI4LjIuMjgiLCJwdCI6ImZwbS1mY2dpIiwiY3YiOiI3Ljc0LjAiLCJjcyI6Ik9wZW5TU0xcLzEuMS4xbyIsInN2IjoibmdpbnhcLzEuMjguMCIsImR2IjoiNS43LjQ0LWxvZyIsImxhbmciOiIifQ&action=timestamp
[Jul 10 10:52:04:1752115924.839011:10:info] SUM_KILLED:收到停止前一次扫描的要求。
[Jul 10 10:52:04:1752115924.833024:1:info] 收到扫描停止要求。
[Jul 10 10:51:35:1752115895.752908:4:info] 扫描进程在分叉后结束。
[Jul 10 10:51:35:1752115895.331972:4:info] 在 URL https://www.joyfamily.top/wp-admin/admin-ajax.php?action=wordfence_doScan&isFork=0&scanMode=custom&cronKey=149b0403c56dc63edc3fad10864d9ed5&signature=1d69ee85b209d7f453b5b459e06d77554fb61b7f0f5b10a9bb6751422ffc31f4 处使用普通 Ajax 启动 cron
[Jul 10 10:51:35:1752115895.320810:4:info] 扫描开始时获取 URL 的测试结果:array ( 'headers' => \WpOrg\Requests\Utility\CaseInsensitiveDictionary::__set_state(array( 'data' => array ( 'alt-svc' => 'quic=":443"; h3=":443"; h3-29=":443"; h3-27=":443";h3-25=":443"; h3-T050=":443"; h3-Q050=":443";h3-Q049=":443";h3-Q048=":443"; h3-Q046=":443"; h3-Q043=":443"', 'cache-control' => 'no-cache, must-revalidate, max-age=0, no-store, private', 'content-encoding' => 'gzip', 'content-type' => 'text/html; charset=UTF-8', 'date' => 'Thu, 10 Jul 2025 02:51:35 GMT', 'expires' => 'Wed, 11 Jan 1984 05:00:00 GMT', 'referrer-policy' => 'strict-origin-when-cross-origin', 'set-cookie' => 'sl-session=JkFcDDd8cGjnZPR6kkIFDw==; SameSite=None; Secure; Path=/; Max-Age=86400; HttpOnly', 'strict-transport-security' => 'max-age=31536000', 'vary' => 'Accept-Encoding', 'x-cache' => 'BYPASS', 'x-content-type-options' => 'nosniff', 'x-frame-options' => 'SAMEORIGIN', 'x-robots-tag
[Jul 10 10:51:32:1752115892.621343:4:info] getMaxExecutionTime() 返回配置值:20
[Jul 10 10:51:32:1752115892.618975:4:info] 从 wf 配置获取 maxExecutionTime 值:20
[Jul 10 10:51:32:1752115892.603793:4:info] 进入开始扫描例程
[Jul 10 10:51:32:1752115892.593677:4:info] 收到 Ajax 要求开始扫描。
[Jul 10 10:51:24:1752115884.504099:10:info] SUM_KILLED:收到停止前一次扫描的要求。
[Jul 10 10:51:24:1752115884.499079:1:info] 收到扫描停止要求。
[Jul 10 10:50:22:1752115822.186620:4:info] 调用 Wordfence API v2.26:https://noc1.wordfence.com/stats.json
[Jul 10 10:48:27:1752115707.420515:4:info] 调用 Wordfence API v2.26:https://noc1.wordfence.com/v2.26/?k=b0f70517bc7866584f4d04d6053f431e84c4e486d12e1a5cdf7c03064d133dfe6e53f4841491c3cb9fbabb9a683e1a682600ae20b05d8a5d849ec48f69245a1c&s=eyJ3cCI6IjYuOC4xIiwid2YiOiI4LjAuNSIsIm1zIjpmYWxzZSwiaCI6Imh0dHBzOlwvXC93d3cuam95ZmFtaWx5LnRvcCIsInNzbHYiOjI2OTQ4ODM4MywicHYiOiI4LjIuMjgiLCJwdCI6ImZwbS1mY2dpIiwiY3YiOiI3Ljc0LjAiLCJjcyI6Ik9wZW5TU0xcLzEuMS4xbyIsInN2IjoibmdpbnhcLzEuMjguMCIsImR2IjoiNS43LjQ0LWxvZyIsImxhbmciOiJ6aF9DTiJ9&action=timestamp
[Jul 10 10:37:12:1752115032.470295:4:info] 扫描进程在分叉后结束。
[Jul 10 10:37:12:1752115032.340313:4:info] 在 URL https://www.joyfamily.top/wp-admin/admin-ajax.php?action=wordfence_doScan&isFork=0&scanMode=custom&cronKey=bc6546d22450b94568d32f09649b7d51&signature=c6de1417d033124f26cc3ed861b880a04fd78b81a998ee6351023537aa03c2bb 处使用普通 Ajax 启动 cron
[Jul 10 10:37:12:1752115032.328331:4:info] 扫描开始时获取 URL 的测试结果:array ( 'headers' => \WpOrg\Requests\Utility\CaseInsensitiveDictionary::__set_state(array( 'data' => array ( 'alt-svc' => 'quic=":443"; h3=":443"; h3-29=":443"; h3-27=":443";h3-25=":443"; h3-T050=":443"; h3-Q050=":443";h3-Q049=":443";h3-Q048=":443"; h3-Q046=":443"; h3-Q043=":443"', 'cache-control' => 'no-cache, must-revalidate, max-age=0, no-store, private', 'content-encoding' => 'gzip', 'content-type' => 'text/html; charset=UTF-8', 'date' => 'Thu, 10 Jul 2025 02:37:12 GMT', 'expires' => 'Wed, 11 Jan 1984 05:00:00 GMT', 'referrer-policy' => 'strict-origin-when-cross-origin', 'set-cookie' => 'sl-session=g/8FY9h4cGhghttocq88AQ==; SameSite=None; Secure; Path=/; Max-Age=86400; HttpOnly', 'strict-transport-security' => 'max-age=31536000', 'vary' => 'Accept-Encoding', 'x-cache' => 'BYPASS', 'x-content-type-options' => 'nosniff', 'x-frame-options' => 'SAMEORIGIN', 'x-robots-tag
[Jul 10 10:37:10:1752115030.272330:4:info] getMaxExecutionTime() 返回配置值:20
[Jul 10 10:37:10:1752115030.270407:4:info] 从 wf 配置获取 maxExecutionTime 值:20
[Jul 10 10:37:10:1752115030.263072:4:info] 进入开始扫描例程
[Jul 10 10:37:10:1752115030.253989:2:info] 尝试恢复扫描阶段(剩余 0 次尝试)...
[Jul 10 10:36:11:1752114971.337224:4:info] 扫描进程在分叉后结束。
[Jul 10 10:36:10:1752114970.883322:4:info] 在 URL https://www.joyfamily.top/wp-admin/admin-ajax.php?action=wordfence_doScan&isFork=0&scanMode=custom&cronKey=d6ac79bf6ebfc10817b65854486acf1d&signature=9dc0e758d36f1791fd5e804dcb23e0b8e3823acf5c428b8a64da9a32c016b136 处使用普通 Ajax 启动 cron
[Jul 10 10:36:10:1752114970.875150:4:info] 扫描开始时获取 URL 的测试结果:array ( 'headers' => \WpOrg\Requests\Utility\CaseInsensitiveDictionary::__set_state(array( 'data' => array ( 'alt-svc' => 'quic=":443"; h3=":443"; h3-29=":443"; h3-27=":443";h3-25=":443"; h3-T050=":443"; h3-Q050=":443";h3-Q049=":443";h3-Q048=":443"; h3-Q046=":443"; h3-Q043=":443"', 'cache-control' => 'no-cache, must-revalidate, max-age=0, no-store, private', 'content-encoding' => 'gzip', 'content-type' => 'text/html; charset=UTF-8', 'date' => 'Thu, 10 Jul 2025 02:36:10 GMT', 'expires' => 'Wed, 11 Jan 1984 05:00:00 GMT', 'referrer-policy' => 'strict-origin-when-cross-origin', 'set-cookie' => 'sl-session=GqfNbJp4cGiJI6KWNub1DA==; SameSite=None; Secure; Path=/; Max-Age=86400; HttpOnly', 'strict-transport-security' => 'max-age=31536000', 'vary' => 'Accept-Encoding', 'x-cache' => 'BYPASS', 'x-content-type-options' => 'nosniff', 'x-frame-options' => 'SAMEORIGIN', 'x-robots-tag
[Jul 10 10:36:08:1752114968.349622:4:info] getMaxExecutionTime() 返回配置值:20
[Jul 10 10:36:08:1752114968.347731:4:info] 从 wf 配置获取 maxExecutionTime 值:20
[Jul 10 10:36:08:1752114968.339920:4:info] 进入开始扫描例程
[Jul 10 10:36:08:1752114968.332479:2:info] 尝试恢复扫描阶段(剩余 1 次尝试)...
[Jul 10 10:35:12:1752114912.325052:4:info] 扫描进程在分叉后结束。
[Jul 10 10:35:12:1752114912.297457:4:info] 在 URL https://www.joyfamily.top/wp-admin/admin-ajax.php?action=wordfence_doScan&isFork=0&scanMode=custom&cronKey=20be618410f6463be3d2c21520b80e18&signature=d28677a298710aaeadc158af9ed0644b6208510a2adf9143e62941606d57dc0c 处使用普通 Ajax 启动 cron
[Jul 10 10:35:12:1752114912.286698:4:info] 扫描开始时获取 URL 的测试结果:array ( 'headers' => \WpOrg\Requests\Utility\CaseInsensitiveDictionary::__set_state(array( 'data' => array ( 'alt-svc' => 'quic=":443"; h3=":443"; h3-29=":443"; h3-27=":443";h3-25=":443"; h3-T050=":443"; h3-Q050=":443";h3-Q049=":443";h3-Q048=":443"; h3-Q046=":443"; h3-Q043=":443"', 'cache-control' => 'no-cache, must-revalidate, max-age=0, no-store, private', 'content-encoding' => 'gzip', 'content-type' => 'text/html; charset=UTF-8', 'date' => 'Thu, 10 Jul 2025 02:35:12 GMT', 'expires' => 'Wed, 11 Jan 1984 05:00:00 GMT', 'referrer-policy' => 'strict-origin-when-cross-origin', 'set-cookie' => 'sl-session=QHAWNmB4cGhfMRHtScsMDw==; SameSite=None; Secure; Path=/; Max-Age=86400; HttpOnly', 'strict-transport-security' => 'max-age=31536000', 'vary' => 'Accept-Encoding', 'x-cache' => 'BYPASS', 'x-content-type-options' => 'nosniff', 'x-frame-options' => 'SAMEORIGIN', 'x-robots-tag
[Jul 10 10:35:08:1752114908.511201:4:info] getMaxExecutionTime() 返回配置值:20
[Jul 10 10:35:08:1752114908.509889:4:info] 从 wf 配置获取 maxExecutionTime 值:20
[Jul 10 10:35:08:1752114908.503858:4:info] 进入开始扫描例程
[Jul 10 10:35:08:1752114908.491909:2:info] 尝试恢复扫描阶段(剩余 2 次尝试)...
[Jul 10 10:34:10:1752114850.046002:4:info] 扫描进程在分叉后结束。
[Jul 10 10:34:09:1752114849.998068:4:info] 在 URL https://www.joyfamily.top/wp-admin/admin-ajax.php?action=wordfence_doScan&isFork=0&scanMode=custom&cronKey=69548246b4c8c23fee48ab6efca2dee4&signature=d4a47d97213aa960d47a4bc027fd091d83bffa863d0fae723ecac2ef6b68860f 处使用普通 Ajax 启动 cron
[Jul 10 10:34:09:1752114849.988358:4:info] 扫描开始时获取 URL 的测试结果:array ( 'headers' => \WpOrg\Requests\Utility\CaseInsensitiveDictionary::__set_state(array( 'data' => array ( 'alt-svc' => 'quic=":443"; h3=":443"; h3-29=":443"; h3-27=":443";h3-25=":443"; h3-T050=":443"; h3-Q050=":443";h3-Q049=":443";h3-Q048=":443"; h3-Q046=":443"; h3-Q043=":443"', 'cache-control' => 'no-cache, must-revalidate, max-age=0, no-store, private', 'content-encoding' => 'gzip', 'content-type' => 'text/html; charset=UTF-8', 'date' => 'Thu, 10 Jul 2025 02:34:09 GMT', 'expires' => 'Wed, 11 Jan 1984 05:00:00 GMT', 'referrer-policy' => 'strict-origin-when-cross-origin', 'set-cookie' => 'sl-session=vBlqfCF4cGgIwuWNpNPxig==; SameSite=None; Secure; Path=/; Max-Age=86400; HttpOnly', 'strict-transport-security' => 'max-age=31536000', 'vary' => 'Accept-Encoding', 'x-cache' => 'BYPASS', 'x-content-type-options' => 'nosniff', 'x-frame-options' => 'SAMEORIGIN', 'x-robots-tag
[Jul 10 10:34:08:1752114848.858988:4:info] 调用 Wordfence API v2.26:https://noc1.wordfence.com/v2.26/?k=b0f70517bc7866584f4d04d6053f431e84c4e486d12e1a5cdf7c03064d133dfe6e53f4841491c3cb9fbabb9a683e1a682600ae20b05d8a5d849ec48f69245a1c&s=eyJ3cCI6IjYuOC4xIiwid2YiOiI4LjAuNSIsIm1zIjpmYWxzZSwiaCI6Imh0dHBzOlwvXC93d3cuam95ZmFtaWx5LnRvcCIsInNzbHYiOjI2OTQ4ODM4MywicHYiOiI4LjIuMjgiLCJwdCI6ImZwbS1mY2dpIiwiY3YiOiI3Ljc0LjAiLCJjcyI6Ik9wZW5TU0xcLzEuMS4xbyIsInN2IjoibmdpbnhcLzEuMjguMCIsImR2IjoiNS43LjQ0LWxvZyIsImxhbmciOiJ6aF9DTiJ9&action=timestamp
[Jul 10 10:34:05:1752114845.897013:4:info] getMaxExecutionTime() 返回配置值:20
[Jul 10 10:34:05:1752114845.895576:4:info] 从 wf 配置获取 maxExecutionTime 值:20
[Jul 10 10:34:05:1752114845.881040:4:info] 进入开始扫描例程
[Jul 10 10:34:05:1752114845.872572:4:info] 收到 Ajax 要求开始扫描。
[Jul 10 10:29:03:1752114543.978717:4:info] 调用 Wordfence API v2.26:https://noc1.wordfence.com/v2.26/?k=b0f70517bc7866584f4d04d6053f431e84c4e486d12e1a5cdf7c03064d133dfe6e53f4841491c3cb9fbabb9a683e1a682600ae20b05d8a5d849ec48f69245a1c&s=eyJ3cCI6IjYuOC4xIiwid2YiOiI4LjAuNSIsIm1zIjpmYWxzZSwiaCI6Imh0dHBzOlwvXC93d3cuam95ZmFtaWx5LnRvcCIsInNzbHYiOjI2OTQ4ODM4MywicHYiOiI4LjIuMjgiLCJwdCI6ImZwbS1mY2dpIiwiY3YiOiI3Ljc0LjAiLCJjcyI6Ik9wZW5TU0xcLzEuMS4xbyIsInN2IjoibmdpbnhcLzEuMjguMCIsImR2IjoiNS43LjQ0LWxvZyIsImxhbmciOiJ6aF9DTiJ9&action=timestamp
[Jul 10 10:16:53:1752113813.700263:10:info] SUM_KILLED:收到停止前一次扫描的要求。
[Jul 10 10:16:53:1752113813.694794:1:info] 收到扫描停止要求。
[Jul 10 09:41:55:1752111715.109489:4:info] 调用 Wordfence API v2.26:https://noc1.wordfence.com/v2.26/?k=b0f70517bc7866584f4d04d6053f431e84c4e486d12e1a5cdf7c03064d133dfe6e53f4841491c3cb9fbabb9a683e1a682600ae20b05d8a5d849ec48f69245a1c&s=eyJ3cCI6IjYuOC4xIiwid2YiOiI4LjAuNSIsIm1zIjpmYWxzZSwiaCI6Imh0dHBzOlwvXC93d3cuam95ZmFtaWx5LnRvcCIsInNzbHYiOjI2OTQ4ODM4MywicHYiOiI4LjIuMjgiLCJwdCI6ImZwbS1mY2dpIiwiY3YiOiI3Ljc0LjAiLCJjcyI6Ik9wZW5TU0xcLzEuMS4xbyIsInN2IjoibmdpbnhcLzEuMjguMCIsImR2IjoiNS43LjQ0LWxvZyIsImxhbmciOiJ6aF9DTiJ9&action=timestamp
[Jul 10 09:38:49:1752111529.513061:4:info] 调用 Wordfence API v2.26:https://noc1.wordfence.com/v2.26/?k=b0f70517bc7866584f4d04d6053f431e84c4e486d12e1a5cdf7c03064d133dfe6e53f4841491c3cb9fbabb9a683e1a682600ae20b05d8a5d849ec48f69245a1c&s=eyJ3cCI6IjYuOC4xIiwid2YiOiI4LjAuNSIsIm1zIjpmYWxzZSwiaCI6Imh0dHBzOlwvXC93d3cuam95ZmFtaWx5LnRvcCIsInNzbHYiOjI2OTQ4ODM4MywicHYiOiI4LjIuMjgiLCJwdCI6ImZwbS1mY2dpIiwiY3YiOiI3Ljc0LjAiLCJjcyI6Ik9wZW5TU0xcLzEuMS4xbyIsInN2IjoibmdpbnhcLzEuMjguMCIsImR2IjoiNS43LjQ0LWxvZyIsImxhbmciOiJ6aF9DTiJ9&action=timestamp
[Jul 10 09:32:06:1752111126.899933:4:info] 调用 Wordfence API v2.26:https://noc1.wordfence.com/stats.json
[Jul 10 07:09:19:1752102559.155180:4:info] 调用 Wordfence API v2.26:https://noc1.wordfence.com/v2.26/?k=b0f70517bc7866584f4d04d6053f431e84c4e486d12e1a5cdf7c03064d133dfe6e53f4841491c3cb9fbabb9a683e1a682600ae20b05d8a5d849ec48f69245a1c&s=eyJ3cCI6IjYuOC4xIiwid2YiOiI4LjAuNSIsIm1zIjpmYWxzZSwiaCI6Imh0dHBzOlwvXC93d3cuam95ZmFtaWx5LnRvcCIsInNzbHYiOjI2OTQ4ODM4MywicHYiOiI4LjIuMjgiLCJwdCI6ImZwbS1mY2dpIiwiY3YiOiI3Ljc0LjAiLCJjcyI6Ik9wZW5TU0xcLzEuMS4xbyIsInN2IjoibmdpbnhcLzEuMjguMCIsImR2IjoiNS43LjQ0LWxvZyIsImxhbmciOiJ6aF9DTiJ9&action=ping_api_key
[Jul 10 00:05:04:1752077104.291618:1:error] 扫描引擎错误: Wordfence 无法启动扫描,因为 cron 密钥与已保存的密钥不匹配。已保存:8d777d884a14d16af7b74e7624d1f1ed 已发送:dc2ebf0ec097171527591a43f8b03db5 当前未展开:1752074404,8d777d884a14d16af7b74e7624d1f1ed
[Jul 10 00:05:04:1752077104.289857:4:info] 根据 cronkey 参数检查已保存的 cronkey
[Jul 10 00:05:04:1752077104.287554:4:info] 检查 cronkey:dc2ebf0ec097171527591a43f8b03db5(预期 8d777d884a14d16af7b74e7624d1f1ed)
[Jul 10 00:05:04:1752077104.284318:4:info] 获取已存储的 cronkey 以进行比较。
[Jul 10 00:05:04:1752077104.281620:4:info] 验证启动要求签名。
[Jul 10 00:05:04:1752077104.276586:4:info] 扫描引擎收到要求。
[Jul 09 23:20:04:1752074404.855079:4:info] 扫描进程在分叉后结束。
[Jul 09 23:20:04:1752074404.439752:4:info] 在 URL https://www.joyfamily.top/wp-admin/admin-ajax.php?action=wordfence_doScan&isFork=0&scanMode=quick&cronKey=8d777d884a14d16af7b74e7624d1f1ed&signature=c835dafbf397d067d8dd09af3ca539784e7700840d1d5fb1a41024aa0f3095e9 处使用普通 Ajax 启动 cron
[Jul 09 23:20:04:1752074404.428707:4:info] 扫描开始时获取 URL 的测试结果:array ( 'headers' => \WpOrg\Requests\Utility\CaseInsensitiveDictionary::__set_state(array( 'data' => array ( 'alt-svc' => 'quic=":443"; h3=":443"; h3-29=":443"; h3-27=":443";h3-25=":443"; h3-T050=":443"; h3-Q050=":443";h3-Q049=":443";h3-Q048=":443"; h3-Q046=":443"; h3-Q043=":443"', 'cache-control' => 'no-cache, must-revalidate, max-age=0, no-store, private', 'content-encoding' => 'gzip', 'content-type' => 'text/html; charset=UTF-8', 'date' => 'Wed, 09 Jul 2025 15:20:04 GMT', 'expires' => 'Wed, 11 Jan 1984 05:00:00 GMT', 'referrer-policy' => 'strict-origin-when-cross-origin', 'set-cookie' => 'sl-session=bBsRZyTab2jmnspyXHQXsw==; SameSite=None; Secure; Path=/; Max-Age=86400; HttpOnly', 'strict-transport-security' => 'max-age=31536000', 'vary' => 'Accept-Encoding', 'x-cache' => 'BYPASS', 'x-content-type-options' => 'nosniff', 'x-frame-options' => 'SAMEORIGIN', 'x-robots-tag
[Jul 09 23:20:02:1752074402.461295:4:info] getMaxExecutionTime() 返回配置值:20
[Jul 09 23:20:02:1752074402.459142:4:info] 从 wf 配置获取 maxExecutionTime 值:20
[Jul 09 23:20:02:1752074402.450605:4:info] 进入开始扫描例程
[Jul 09 23:20:02:1752074402.443727:2:info] 尝试恢复扫描阶段(剩余 0 次尝试)...
[Jul 09 23:16:58:1752074218.498878:4:info] 扫描进程在分叉后结束。
[Jul 09 23:16:58:1752074218.249782:4:info] 在 URL https://www.joyfamily.top/wp-admin/admin-ajax.php?action=wordfence_doScan&isFork=0&scanMode=quick&cronKey=71a12465c71c7e76e378d9d696a5174b&signature=1ad0800218c81b797b4f463756b6f7089edd0918af366f477b2fc0a54831214d 处使用普通 Ajax 启动 cron
[Jul 09 23:16:58:1752074218.239558:4:info] 扫描开始时获取 URL 的测试结果:array ( 'headers' => \WpOrg\Requests\Utility\CaseInsensitiveDictionary::__set_state(array( 'data' => array ( 'alt-svc' => 'quic=":443"; h3=":443"; h3-29=":443"; h3-27=":443";h3-25=":443"; h3-T050=":443"; h3-Q050=":443";h3-Q049=":443";h3-Q048=":443"; h3-Q046=":443"; h3-Q043=":443"', 'cache-control' => 'no-cache, must-revalidate, max-age=0, no-store, private', 'content-encoding' => 'gzip', 'content-type' => 'text/html; charset=UTF-8', 'date' => 'Wed, 09 Jul 2025 15:16:58 GMT', 'expires' => 'Wed, 11 Jan 1984 05:00:00 GMT', 'referrer-policy' => 'strict-origin-when-cross-origin', 'set-cookie' => 'sl-session=O+HLFWrZb2jPPqiJX9ubew==; SameSite=None; Secure; Path=/; Max-Age=86400; HttpOnly', 'strict-transport-security' => 'max-age=31536000', 'vary' => 'Accept-Encoding', 'x-cache' => 'BYPASS', 'x-content-type-options' => 'nosniff', 'x-frame-options' => 'SAMEORIGIN', 'x-robots-tag
[Jul 09 23:16:55:1752074215.707560:4:info] getMaxExecutionTime() 返回配置值:20
[Jul 09 23:16:55:1752074215.705556:4:info] 从 wf 配置获取 maxExecutionTime 值:20
[Jul 09 23:16:55:1752074215.696902:4:info] 进入开始扫描例程
[Jul 09 23:16:55:1752074215.688871:2:info] 尝试恢复扫描阶段(剩余 1 次尝试)...
[Jul 09 21:05:46:1752066346.401309:4:info] 扫描进程在分叉后结束。
[Jul 09 21:05:46:1752066346.373470:4:info] 在 URL https://www.joyfamily.top/wp-admin/admin-ajax.php?action=wordfence_doScan&isFork=0&scanMode=quick&cronKey=77f0a891f600726a87a3ea301f7fea98&signature=27292966b64af7d9cfcc9c2bab5d53a43fa3c914e820466fe39d5c2fa31bafc1 处使用普通 Ajax 启动 cron
[Jul 09 21:05:46:1752066346.365393:4:info] 扫描开始时获取 URL 的测试结果:array ( 'headers' => \WpOrg\Requests\Utility\CaseInsensitiveDictionary::__set_state(array( 'data' => array ( 'alt-svc' => 'quic=":443"; h3=":443"; h3-29=":443"; h3-27=":443";h3-25=":443"; h3-T050=":443"; h3-Q050=":443";h3-Q049=":443";h3-Q048=":443"; h3-Q046=":443"; h3-Q043=":443"', 'cache-control' => 'no-cache, must-revalidate, max-age=0, no-store, private', 'content-encoding' => 'gzip', 'content-type' => 'text/html; charset=UTF-8', 'date' => 'Wed, 09 Jul 2025 13:05:46 GMT', 'expires' => 'Wed, 11 Jan 1984 05:00:00 GMT', 'referrer-policy' => 'strict-origin-when-cross-origin', 'set-cookie' => 'sl-session=UYtfLqq6b2hU2vkozEdEOA==; SameSite=None; Secure; Path=/; Max-Age=86400; HttpOnly', 'strict-transport-security' => 'max-age=31536000', 'vary' => 'Accept-Encoding', 'x-cache' => 'BYPASS', 'x-content-type-options' => 'nosniff', 'x-frame-options' => 'SAMEORIGIN', 'x-robots-tag
[Jul 09 21:05:44:1752066344.186345:4:info] getMaxExecutionTime() 返回配置值:20
[Jul 09 21:05:44:1752066344.184597:4:info] 从 wf 配置获取 maxExecutionTime 值:20
[Jul 09 21:05:44:1752066344.178198:4:info] 进入开始扫描例程
[Jul 09 21:05:44:1752066344.171137:2:info] 尝试恢复扫描阶段(剩余 2 次尝试)...
[Jul 09 20:11:31:1752063091.819561:4:info] 扫描进程在分叉后结束。
[Jul 09 20:11:31:1752063091.601919:4:info] 在 URL https://www.joyfamily.top/wp-admin/admin-ajax.php?action=wordfence_doScan&isFork=0&scanMode=quick&cronKey=27f8311fa7a5b248fdad086142c36d44&signature=6ae5f29ffa7fd82d5c439e4816ce456036d80d36c79d9db3f874580feb79f5d4 处使用普通 Ajax 启动 cron
[Jul 09 20:11:31:1752063091.593734:4:info] 扫描开始时获取 URL 的测试结果:array ( 'headers' => \WpOrg\Requests\Utility\CaseInsensitiveDictionary::__set_state(array( 'data' => array ( 'alt-svc' => 'quic=":443"; h3=":443"; h3-29=":443"; h3-27=":443";h3-25=":443"; h3-T050=":443"; h3-Q050=":443";h3-Q049=":443";h3-Q048=":443"; h3-Q046=":443"; h3-Q043=":443"', 'cache-control' => 'no-cache, must-revalidate, max-age=0, no-store, private', 'content-encoding' => 'gzip', 'content-type' => 'text/html; charset=UTF-8', 'date' => 'Wed, 09 Jul 2025 12:11:31 GMT', 'expires' => 'Wed, 11 Jan 1984 05:00:00 GMT', 'referrer-policy' => 'strict-origin-when-cross-origin', 'set-cookie' => 'sl-session=IVv+I/Otb2huc90KfkYXIw==; SameSite=None; Secure; Path=/; Max-Age=86400; HttpOnly', 'strict-transport-security' => 'max-age=31536000', 'vary' => 'Accept-Encoding', 'x-cache' => 'BYPASS', 'x-content-type-options' => 'nosniff', 'x-frame-options' => 'SAMEORIGIN', 'x-robots-tag
[Jul 09 20:11:29:1752063089.080532:4:info] getMaxExecutionTime() 返回配置值:20
[Jul 09 20:11:29:1752063089.077698:4:info] 从 wf 配置获取 maxExecutionTime 值:20
[Jul 09 20:11:29:1752063089.059959:4:info] 进入开始扫描例程
[Jul 09 19:04:14:1752059054.423630:4:info] 调用 Wordfence API v2.26:https://noc1.wordfence.com/stats.json
[Jul 09 15:24:01:1752045841.943220:4:info] Scan process ended after forking.
[Jul 09 15:24:01:1752045841.271165:4:info] Starting cron with normal ajax at URL https://www.joyfamily.top/wp-admin/admin-ajax.php?action=wordfence_doScan&isFork=0&scanMode=custom&cronKey=563d66f11e442567937f18d6b806bb9f&signature=fa16cdd153accb2637f1febf20f21b82c9eb5a85b9e54bcef5f50897b55c24a8
[Jul 09 15:24:01:1752045841.250559:4:info] Test result of scan start URL fetch: array ( 'headers' => \WpOrg\Requests\Utility\CaseInsensitiveDictionary::__set_state(array( 'data' => array ( 'alt-svc' => 'quic=":443"; h3=":443"; h3-29=":443"; h3-27=":443";h3-25=":443"; h3-T050=":443"; h3-Q050=":443";h3-Q049=":443";h3-Q048=":443"; h3-Q046=":443"; h3-Q043=":443"', 'cache-control' => 'no-cache, must-revalidate, max-age=0, no-store, private', 'content-encoding' => 'gzip', 'content-type' => 'text/html; charset=UTF-8', 'date' => 'Wed, 09 Jul 2025 07:24:01 GMT', 'expires' => 'Wed, 11 Jan 1984 05:00:00 GMT', 'referrer-policy' => 'strict-origin-when-cross-origin', 'set-cookie' => 'sl-session=TXoOf5Fqb2i4DFah4mHeoA==; SameSite=None; Secure; Path=/; Max-Age=86400; HttpOnly', 'strict-transport-security' => 'max-age=31536000', 'vary' => 'Accept-Encoding', 'x-cache' => 'BYPASS', 'x-content-type-options' => 'nosniff', 'x-frame-options' => 'SAMEORIGIN',
[Jul 09 15:23:59:1752045839.009083:4:info] getMaxExecutionTime() returning config value: 20
[Jul 09 15:23:59:1752045839.007674:4:info] Got value from wf config maxExecutionTime: 20
[Jul 09 15:23:59:1752045839.001753:4:info] Entering start scan routine
[Jul 09 15:23:58:1752045838.997874:2:info] Attempting to resume scan stage (0 attempt(s) remaining)...
[Jul 09 15:23:02:1752045782.760030:4:info] Scan process ended after forking.
[Jul 09 15:23:02:1752045782.411580:4:info] Starting cron with normal ajax at URL https://www.joyfamily.top/wp-admin/admin-ajax.php?action=wordfence_doScan&isFork=0&scanMode=custom&cronKey=2f3f94287023ad3af61a9ffdea98f676&signature=0e109580379f678756daf5af3a6f6e1fa0bf2e9bb466460016997eeb1aec828a
[Jul 09 15:23:02:1752045782.404373:4:info] Test result of scan start URL fetch: array ( 'headers' => \WpOrg\Requests\Utility\CaseInsensitiveDictionary::__set_state(array( 'data' => array ( 'alt-svc' => 'quic=":443"; h3=":443"; h3-29=":443"; h3-27=":443";h3-25=":443"; h3-T050=":443"; h3-Q050=":443";h3-Q049=":443";h3-Q048=":443"; h3-Q046=":443"; h3-Q043=":443"', 'cache-control' => 'no-cache, must-revalidate, max-age=0, no-store, private', 'content-encoding' => 'gzip', 'content-type' => 'text/html; charset=UTF-8', 'date' => 'Wed, 09 Jul 2025 07:23:02 GMT', 'expires' => 'Wed, 11 Jan 1984 05:00:00 GMT', 'referrer-policy' => 'strict-origin-when-cross-origin', 'set-cookie' => 'sl-session=wJzmfVZqb2hKeRgAFov9jg==; SameSite=None; Secure; Path=/; Max-Age=86400; HttpOnly', 'strict-transport-security' => 'max-age=31536000', 'vary' => 'Accept-Encoding', 'x-cache' => 'BYPASS', 'x-content-type-options' => 'nosniff', 'x-frame-options' => 'SAMEORIGIN',
[Jul 09 15:23:00:1752045780.349389:4:info] getMaxExecutionTime() returning config value: 20
[Jul 09 15:23:00:1752045780.347706:4:info] Got value from wf config maxExecutionTime: 20
[Jul 09 15:23:00:1752045780.341085:4:info] Entering start scan routine
[Jul 09 15:23:00:1752045780.335041:2:info] Attempting to resume scan stage (1 attempt(s) remaining)...
[Jul 09 15:20:11:1752045611.740731:4:info] Scan process ended after forking.
[Jul 09 15:20:11:1752045611.349159:4:info] Starting cron with normal ajax at URL https://www.joyfamily.top/wp-admin/admin-ajax.php?action=wordfence_doScan&isFork=0&scanMode=custom&cronKey=62c4877ff20bb45ce1bf4e13b70fe448&signature=2cd63b7c65f2d3a10b3c8bd5c9461abf107ae83dec8ca83ae361ddd9482b5a6e
[Jul 09 15:20:11:1752045611.342351:4:info] Test result of scan start URL fetch: array ( 'headers' => \WpOrg\Requests\Utility\CaseInsensitiveDictionary::__set_state(array( 'data' => array ( 'alt-svc' => 'quic=":443"; h3=":443"; h3-29=":443"; h3-27=":443";h3-25=":443"; h3-T050=":443"; h3-Q050=":443";h3-Q049=":443";h3-Q048=":443"; h3-Q046=":443"; h3-Q043=":443"', 'cache-control' => 'no-cache, must-revalidate, max-age=0, no-store, private', 'content-encoding' => 'gzip', 'content-type' => 'text/html; charset=UTF-8', 'date' => 'Wed, 09 Jul 2025 07:20:11 GMT', 'expires' => 'Wed, 11 Jan 1984 05:00:00 GMT', 'referrer-policy' => 'strict-origin-when-cross-origin', 'set-cookie' => 'sl-session=Ggaqaqtpb2gK11cyV4XCiQ==; SameSite=None; Secure; Path=/; Max-Age=86400; HttpOnly', 'strict-transport-security' => 'max-age=31536000', 'vary' => 'Accept-Encoding', 'x-cache' => 'BYPASS', 'x-content-type-options' => 'nosniff', 'x-frame-options' => 'SAMEORIGIN',
[Jul 09 15:20:09:1752045609.175310:4:info] getMaxExecutionTime() returning config value: 20
[Jul 09 15:20:09:1752045609.173686:4:info] Got value from wf config maxExecutionTime: 20
[Jul 09 15:20:09:1752045609.166124:4:info] Entering start scan routine
[Jul 09 15:20:09:1752045609.162213:2:info] Attempting to resume scan stage (2 attempt(s) remaining)...
[Jul 09 15:19:05:1752045545.444465:4:info] Scan process ended after forking.
[Jul 09 15:19:05:1752045545.415795:4:info] Starting cron with normal ajax at URL https://www.joyfamily.top/wp-admin/admin-ajax.php?action=wordfence_doScan&isFork=0&scanMode=custom&cronKey=fd977cd733490360af27bcdb9bf03520&signature=aff9e7d34af3c96a7d236d0082b22acb38a0176393a354984f5573c6227c742d
[Jul 09 15:19:05:1752045545.403884:4:info] Test result of scan start URL fetch: array ( 'headers' => \WpOrg\Requests\Utility\CaseInsensitiveDictionary::__set_state(array( 'data' => array ( 'alt-svc' => 'quic=":443"; h3=":443"; h3-29=":443"; h3-27=":443";h3-25=":443"; h3-T050=":443"; h3-Q050=":443";h3-Q049=":443";h3-Q048=":443"; h3-Q046=":443"; h3-Q043=":443"', 'cache-control' => 'no-cache, must-revalidate, max-age=0, no-store, private', 'content-encoding' => 'gzip', 'content-type' => 'text/html; charset=UTF-8', 'date' => 'Wed, 09 Jul 2025 07:19:05 GMT', 'expires' => 'Wed, 11 Jan 1984 05:00:00 GMT', 'referrer-policy' => 'strict-origin-when-cross-origin', 'set-cookie' => 'sl-session=zo6ER2lpb2iWFOz5Lm6LIQ==; SameSite=None; Secure; Path=/; Max-Age=86400; HttpOnly', 'strict-transport-security' => 'max-age=31536000', 'vary' => 'Accept-Encoding', 'x-cache' => 'BYPASS', 'x-content-type-options' => 'nosniff', 'x-frame-options' => 'SAMEORIGIN',
[Jul 09 15:19:02:1752045542.929008:4:info] getMaxExecutionTime() returning config value: 20
[Jul 09 15:19:02:1752045542.927241:4:info] Got value from wf config maxExecutionTime: 20
[Jul 09 15:19:02:1752045542.907655:4:info] Entering start scan routine
[Jul 09 15:19:02:1752045542.901131:4:info] Ajax request received to start scan.
[Jul 09 15:18:51:1752045531.131019:10:info] SUM_KILLED:A request was received to stop the previous scan.
[Jul 09 15:18:51:1752045531.127582:1:info] Scan stop request received.
[Jul 09 15:18:21:1752045501.455077:4:info] Calling Wordfence API v2.26:https://noc1.wordfence.com/v2.26/?k=b0f70517bc7866584f4d04d6053f431e84c4e486d12e1a5cdf7c03064d133dfe6e53f4841491c3cb9fbabb9a683e1a682600ae20b05d8a5d849ec48f69245a1c&s=eyJ3cCI6IjYuOC4xIiwid2YiOiI4LjAuNSIsIm1zIjpmYWxzZSwiaCI6Imh0dHBzOlwvXC93d3cuam95ZmFtaWx5LnRvcCIsInNzbHYiOjI2OTQ4ODM4MywicHYiOiI4LjIuMjgiLCJwdCI6ImZwbS1mY2dpIiwiY3YiOiI3Ljc0LjAiLCJjcyI6Ik9wZW5TU0xcLzEuMS4xbyIsInN2IjoibmdpbnhcLzEuMjguMCIsImR2IjoiNS43LjQ0LWxvZyIsImxhbmciOiIifQ&action=timestamp
[Jul 09 15:16:23:1752045383.131147:10:info] SUM_KILLED:A request was received to stop the previous scan.
[Jul 09 15:16:23:1752045383.124154:1:info] Scan stop request received.
[Jul 09 14:40:21:1752043221.451500:2:info] 尝试恢复扫描阶段(剩余 0 次尝试)...
[Jul 09 14:39:16:1752043156.698948:2:info] 尝试恢复扫描阶段(剩余 1 次尝试)...
[Jul 09 14:38:34:1752043114.798514:2:info] 尝试恢复扫描阶段(剩余 2 次尝试)...
[Jul 09 14:36:52:1752043012.146642:10:info] SUM_KILLED:收到停止前一次扫描的要求。
[Jul 09 14:36:52:1752043012.129489:1:info] 收到扫描停止要求。
[Jul 09 14:36:35:1752042995.900132:10:info] SUM_KILLED:收到停止前一次扫描的要求。
[Jul 09 14:36:35:1752042995.862238:1:info] 收到扫描停止要求。
[Jul 09 14:36:01:1752042961.004070:2:info] 尝试恢复扫描阶段(剩余 2 次尝试)...
[Jul 09 14:19:17:1752041957.169092:10:info] SUM_KILLED:收到停止前一次扫描的要求。
[Jul 09 14:19:17:1752041957.145685:1:info] 收到扫描停止要求。
[Jul 09 12:56:25:1752036985.616118:2:info] 尝试恢复扫描阶段(剩余 0 次尝试)...
[Jul 09 12:55:40:1752036940.587147:4:info] 扫描进程在分叉后结束。
[Jul 09 12:55:40:1752036940.454017:4:info] 在 URL https://www.joyfamily.top/wp-admin/admin-ajax.php?action=wordfence_doScan&isFork=0&scanMode=custom&cronKey=e0e7d389a917ca2c4030b317ef0a0b11&signature=8ef8f44ee72de8d98f7e1d2f815fdc37b5089b67b86fd69087090ea8f34bf1f6 处使用普通 Ajax 启动 cron
[Jul 09 12:55:40:1752036940.438359:4:info] 扫描开始时获取 URL 的测试结果:array ( 'headers' => \WpOrg\Requests\Utility\CaseInsensitiveDictionary::__set_state(array( 'data' => array ( 'alt-svc' => 'quic=":443"; h3=":443"; h3-29=":443"; h3-27=":443";h3-25=":443"; h3-T050=":443"; h3-Q050=":443";h3-Q049=":443";h3-Q048=":443"; h3-Q046=":443"; h3-Q043=":443"', 'cache-control' => 'no-cache, must-revalidate, max-age=0, no-store, private', 'content-encoding' => 'gzip', 'content-type' => 'text/html; charset=UTF-8', 'date' => 'Wed, 09 Jul 2025 04:55:40 GMT', 'expires' => 'Wed, 11 Jan 1984 05:00:00 GMT', 'referrer-policy' => 'strict-origin-when-cross-origin', 'set-cookie' => 'sl-session=FPWsK8xHb2gsVGKdY5z8Gw==; SameSite=None; Secure; Path=/; Max-Age=86400; HttpOnly', 'strict-transport-security' => 'max-age=31536000', 'vary' => 'Accept-Encoding', 'x-cache' => 'BYPASS', 'x-content-type-options' => 'nosniff', 'x-frame-options' => 'SAMEORIGIN', 'x-robots-tag
[Jul 09 12:55:39:1752036939.948092:4:info] 调用 Wordfence API v2.26:https://noc1.wordfence.com/v2.26/?k=b0f70517bc7866584f4d04d6053f431e84c4e486d12e1a5cdf7c03064d133dfe6e53f4841491c3cb9fbabb9a683e1a682600ae20b05d8a5d849ec48f69245a1c&s=eyJ3cCI6IjYuOC4xIiwid2YiOiI4LjAuNSIsIm1zIjpmYWxzZSwiaCI6Imh0dHBzOlwvXC93d3cuam95ZmFtaWx5LnRvcCIsInNzbHYiOjI2OTQ4ODM4MywicHYiOiI4LjIuMjgiLCJwdCI6ImZwbS1mY2dpIiwiY3YiOiI3Ljc0LjAiLCJjcyI6Ik9wZW5TU0xcLzEuMS4xbyIsInN2IjoibmdpbnhcLzEuMjguMCIsImR2IjoiNS43LjQ0LWxvZyIsImxhbmciOiJ6aF9DTiJ9&action=timestamp
[Jul 09 12:55:37:1752036937.488700:4:info] getMaxExecutionTime() 返回配置值:20
[Jul 09 12:55:37:1752036937.487033:4:info] 从 wf 配置获取 maxExecutionTime 值:20
[Jul 09 12:55:37:1752036937.481890:4:info] 进入开始扫描例程
[Jul 09 12:55:37:1752036937.475661:2:info] 尝试恢复扫描阶段(剩余 1 次尝试)...
[Jul 09 12:54:46:1752036886.485326:4:info] 调用 Wordfence API v2.26:https://noc1.wordfence.com/v2.26/?k=b0f70517bc7866584f4d04d6053f431e84c4e486d12e1a5cdf7c03064d133dfe6e53f4841491c3cb9fbabb9a683e1a682600ae20b05d8a5d849ec48f69245a1c&s=eyJ3cCI6IjYuOC4xIiwid2YiOiI4LjAuNSIsIm1zIjpmYWxzZSwiaCI6Imh0dHBzOlwvXC93d3cuam95ZmFtaWx5LnRvcCIsInNzbHYiOjI2OTQ4ODM4MywicHYiOiI4LjIuMjgiLCJwdCI6ImZwbS1mY2dpIiwiY3YiOiI3Ljc0LjAiLCJjcyI6Ik9wZW5TU0xcLzEuMS4xbyIsInN2IjoibmdpbnhcLzEuMjguMCIsImR2IjoiNS43LjQ0LWxvZyIsImxhbmciOiJ6aF9DTiJ9&action=timestamp
[Jul 09 12:54:16:1752036856.831844:4:info] 调用 Wordfence API v2.26:https://noc1.wordfence.com/v2.26/?k=b0f70517bc7866584f4d04d6053f431e84c4e486d12e1a5cdf7c03064d133dfe6e53f4841491c3cb9fbabb9a683e1a682600ae20b05d8a5d849ec48f69245a1c&s=eyJ3cCI6IjYuOC4xIiwid2YiOiI4LjAuNSIsIm1zIjpmYWxzZSwiaCI6Imh0dHBzOlwvXC93d3cuam95ZmFtaWx5LnRvcCIsInNzbHYiOjI2OTQ4ODM4MywicHYiOiI4LjIuMjgiLCJwdCI6ImZwbS1mY2dpIiwiY3YiOiI3Ljc0LjAiLCJjcyI6Ik9wZW5TU0xcLzEuMS4xbyIsInN2IjoibmdpbnhcLzEuMjguMCIsImR2IjoiNS43LjQ0LWxvZyIsImxhbmciOiJ6aF9DTiJ9&action=resolve_ips
[Jul 09 12:54:16:1752036856.825735:4:info] 调用 Wordfence API v2.26:https://noc1.wordfence.com/v2.26/?k=b0f70517bc7866584f4d04d6053f431e84c4e486d12e1a5cdf7c03064d133dfe6e53f4841491c3cb9fbabb9a683e1a682600ae20b05d8a5d849ec48f69245a1c&s=eyJ3cCI6IjYuOC4xIiwid2YiOiI4LjAuNSIsIm1zIjpmYWxzZSwiaCI6Imh0dHBzOlwvXC93d3cuam95ZmFtaWx5LnRvcCIsInNzbHYiOjI2OTQ4ODM4MywicHYiOiI4LjIuMjgiLCJwdCI6ImZwbS1mY2dpIiwiY3YiOiI3Ljc0LjAiLCJjcyI6Ik9wZW5TU0xcLzEuMS4xbyIsInN2IjoibmdpbnhcLzEuMjguMCIsImR2IjoiNS43LjQ0LWxvZyIsImxhbmciOiJ6aF9DTiJ9&action=resolve_ips
[Jul 09 12:54:14:1752036854.398884:4:info] 扫描进程在分叉后结束。
[Jul 09 12:54:13:1752036853.208941:4:info] 在 URL https://www.joyfamily.top/wp-admin/admin-ajax.php?action=wordfence_doScan&isFork=0&scanMode=custom&cronKey=7d5f27c9f6809dd93a120e00fd26a3a0&signature=19a144bd83dd9bb34ef98f5c0e6be41d797675eb93d7c5ae1218aba5daff2978 处使用普通 Ajax 启动 cron
[Jul 09 12:54:13:1752036853.069003:4:info] 扫描开始时获取 URL 的测试结果:array ( 'headers' => \WpOrg\Requests\Utility\CaseInsensitiveDictionary::__set_state(array( 'data' => array ( 'alt-svc' => 'quic=":443"; h3=":443"; h3-29=":443"; h3-27=":443";h3-25=":443"; h3-T050=":443"; h3-Q050=":443";h3-Q049=":443";h3-Q048=":443"; h3-Q046=":443"; h3-Q043=":443"', 'cache-control' => 'no-cache, must-revalidate, max-age=0, no-store, private', 'content-encoding' => 'gzip', 'content-type' => 'text/html; charset=UTF-8', 'date' => 'Wed, 09 Jul 2025 04:54:12 GMT', 'expires' => 'Wed, 11 Jan 1984 05:00:00 GMT', 'referrer-policy' => 'strict-origin-when-cross-origin', 'set-cookie' => 'sl-session=IZ6MXnRHb2jwCVPfn4Cn3w==; SameSite=None; Secure; Path=/; Max-Age=86400; HttpOnly', 'strict-transport-security' => 'max-age=31536000', 'vary' => 'Accept-Encoding', 'x-cache' => 'BYPASS', 'x-content-type-options' => 'nosniff', 'x-frame-options' => 'SAMEORIGIN', 'x-robots-tag
[Jul 09 12:53:58:1752036838.075458:4:info] getMaxExecutionTime() 返回配置值:20
[Jul 09 12:53:58:1752036838.074128:4:info] 从 wf 配置获取 maxExecutionTime 值:20
[Jul 09 12:53:58:1752036838.068228:4:info] 进入开始扫描例程
[Jul 09 12:53:58:1752036838.061510:2:info] 尝试恢复扫描阶段(剩余 2 次尝试)...
[Jul 09 12:52:25:1752036745.609411:4:info] 扫描进程在分叉后结束。
[Jul 09 12:52:25:1752036745.262039:4:info] 在 URL https://www.joyfamily.top/wp-admin/admin-ajax.php?action=wordfence_doScan&isFork=0&scanMode=custom&cronKey=efe7ac842058fa7a943b5b42c2321b03&signature=b7992a16d247acfde1273300126d9630930c204c1cd9629a590b219a06e87caa 处使用普通 Ajax 启动 cron
[Jul 09 12:52:25:1752036745.248963:4:info] 扫描开始时获取 URL 的测试结果:array ( 'headers' => \WpOrg\Requests\Utility\CaseInsensitiveDictionary::__set_state(array( 'data' => array ( 'alt-svc' => 'quic=":443"; h3=":443"; h3-29=":443"; h3-27=":443";h3-25=":443"; h3-T050=":443"; h3-Q050=":443";h3-Q049=":443";h3-Q048=":443"; h3-Q046=":443"; h3-Q043=":443"', 'cache-control' => 'no-cache, must-revalidate, max-age=0, no-store, private', 'content-encoding' => 'gzip', 'content-type' => 'text/html; charset=UTF-8', 'date' => 'Wed, 09 Jul 2025 04:52:25 GMT', 'expires' => 'Wed, 11 Jan 1984 05:00:00 GMT', 'referrer-policy' => 'strict-origin-when-cross-origin', 'set-cookie' => 'sl-session=HBLmYAlHb2j1YCg9Sygaqg==; SameSite=None; Secure; Path=/; Max-Age=86400; HttpOnly', 'strict-transport-security' => 'max-age=31536000', 'vary' => 'Accept-Encoding', 'x-cache' => 'BYPASS', 'x-content-type-options' => 'nosniff', 'x-frame-options' => 'SAMEORIGIN', 'x-robots-tag
[Jul 09 12:52:22:1752036742.420007:4:info] getMaxExecutionTime() 返回配置值:20
[Jul 09 12:52:22:1752036742.418267:4:info] 从 wf 配置获取 maxExecutionTime 值:20
[Jul 09 12:52:22:1752036742.396977:4:info] 进入开始扫描例程
[Jul 09 12:52:22:1752036742.387706:4:info] 收到 Ajax 要求开始扫描。
[Jul 09 12:52:13:1752036733.232849:10:info] SUM_KILLED:收到停止前一次扫描的要求。
[Jul 09 12:52:13:1752036733.220494:1:info] 收到扫描停止要求。
[Jul 09 12:49:27:1752036567.135083:4:info] 调用 Wordfence API v2.26:https://noc1.wordfence.com/v2.26/?k=b0f70517bc7866584f4d04d6053f431e84c4e486d12e1a5cdf7c03064d133dfe6e53f4841491c3cb9fbabb9a683e1a682600ae20b05d8a5d849ec48f69245a1c&s=eyJ3cCI6IjYuOC4xIiwid2YiOiI4LjAuNSIsIm1zIjpmYWxzZSwiaCI6Imh0dHBzOlwvXC93d3cuam95ZmFtaWx5LnRvcCIsInNzbHYiOjI2OTQ4ODM4MywicHYiOiI4LjIuMjgiLCJwdCI6ImZwbS1mY2dpIiwiY3YiOiI3Ljc0LjAiLCJjcyI6Ik9wZW5TU0xcLzEuMS4xbyIsInN2IjoibmdpbnhcLzEuMjguMCIsImR2IjoiNS43LjQ0LWxvZyIsImxhbmciOiJ6aF9DTiJ9&action=resolve_ips
[Jul 09 12:49:26:1752036566.626999:4:info] 调用 Wordfence API v2.26:https://noc1.wordfence.com/stats.json
[Jul 09 12:47:20:1752036440.950425:4:info] 调用 Wordfence API v2.26:https://noc1.wordfence.com/v2.26/?k=b0f70517bc7866584f4d04d6053f431e84c4e486d12e1a5cdf7c03064d133dfe6e53f4841491c3cb9fbabb9a683e1a682600ae20b05d8a5d849ec48f69245a1c&s=eyJ3cCI6IjYuOC4xIiwid2YiOiI4LjAuNSIsIm1zIjpmYWxzZSwiaCI6Imh0dHBzOlwvXC93d3cuam95ZmFtaWx5LnRvcCIsInNzbHYiOjI2OTQ4ODM4MywicHYiOiI4LjIuMjgiLCJwdCI6ImZwbS1mY2dpIiwiY3YiOiI3Ljc0LjAiLCJjcyI6Ik9wZW5TU0xcLzEuMS4xbyIsInN2IjoibmdpbnhcLzEuMjguMCIsImR2IjoiNS43LjQ0LWxvZyIsImxhbmciOiJ6aF9DTiJ9&action=resolve_ips
[Jul 09 10:46:51:1752029211.562213:4:info] 扫描进程在分叉后结束。
[Jul 09 10:46:50:1752029210.936853:4:info] 在 URL https://www.joyfamily.top/wp-admin/admin-ajax.php?action=wordfence_doScan&isFork=1&scanMode=custom&cronKey=137e42ee6fcb86f517cc5a7bf0e19589&signature=793b4d8f4defb971f58ac1ce35f5eadd95aa2c486f958040fe4f3cab0cd7dfdf 处使用普通 Ajax 启动 cron
[Jul 09 10:46:50:1752029210.932857:4:info] 扫描开始测试的缓存结果:true
[Jul 09 10:46:50:1752029210.931195:4:info] getMaxExecutionTime() 返回配置值:20
[Jul 09 10:46:50:1752029210.929141:4:info] 从 wf 配置获取 maxExecutionTime 值:20
[Jul 09 10:46:50:1752029210.921799:2:info] 尝试恢复扫描阶段(剩余 0 次尝试)...
[Jul 09 10:45:03:1752029103.998875:4:info] 扫描进程在分叉后结束。
[Jul 09 10:45:03:1752029103.515091:4:info] 在 URL https://www.joyfamily.top/wp-admin/admin-ajax.php?action=wordfence_doScan&isFork=1&scanMode=custom&cronKey=341ac5617adfbdbc4ea5640768dfe72a&signature=8b59e052cf2c6d6f6b7f1d77246440abcddf04991d31c76b6cf178d57b004b2e 处使用普通 Ajax 启动 cron
[Jul 09 10:45:03:1752029103.512396:4:info] 扫描开始测试的缓存结果:true
[Jul 09 10:45:03:1752029103.508458:4:info] getMaxExecutionTime() 返回配置值:20
[Jul 09 10:45:03:1752029103.506903:4:info] 从 wf 配置获取 maxExecutionTime 值:20
[Jul 09 10:45:03:1752029103.499954:2:info] 尝试恢复扫描阶段(剩余 1 次尝试)...
[Jul 09 10:35:07:1752028507.158724:4:info] 扫描进程在分叉后结束。
[Jul 09 10:35:06:1752028506.607545:4:info] 在 URL https://www.joyfamily.top/wp-admin/admin-ajax.php?action=wordfence_doScan&isFork=1&scanMode=custom&cronKey=583a49ee52fcacf17bdc74fe573a13d0&signature=10a44578c1b30a4128d12d61b40467f2471e367d98dc19a2b96e2e1cc50971e4 处使用普通 Ajax 启动 cron
[Jul 09 10:35:06:1752028506.603930:4:info] 扫描开始测试的缓存结果:true
[Jul 09 10:35:06:1752028506.602110:4:info] getMaxExecutionTime() 返回配置值:20
[Jul 09 10:35:06:1752028506.600737:4:info] 从 wf 配置获取 maxExecutionTime 值:20
[Jul 09 10:35:06:1752028506.593794:2:info] 尝试恢复扫描阶段(剩余 2 次尝试)...
[Jul 09 10:30:36:1752028236.443490:4:info] 扫描进程在分叉后结束。
[Jul 09 10:30:35:1752028235.931147:4:info] 在 URL https://www.joyfamily.top/wp-admin/admin-ajax.php?action=wordfence_doScan&isFork=1&scanMode=custom&cronKey=c05b5459f297a9dbd52a1b09e63f56b2&signature=18a3ca5fdd701c6842621bd52510817bfa24cfb98b905cd2f6d609fff2c5d201 处使用普通 Ajax 启动 cron
[Jul 09 10:30:35:1752028235.924502:4:info] 扫描开始测试的缓存结果:true
[Jul 09 10:30:35:1752028235.921974:4:info] getMaxExecutionTime() 返回配置值:20
[Jul 09 10:30:35:1752028235.919966:4:info] 从 wf 配置获取 maxExecutionTime 值:20
[Jul 09 10:30:35:1752028235.913625:4:info] 调用 startScan(true)
[Jul 09 10:30:35:1752028235.418895:4:info] 进入 fork()
[Jul 09 10:30:25:1752028225.409294:4:info] 从类型为 object 的「wfsd_engine」获取了一个真实的反序列化值
[Jul 09 10:30:25:1752028225.248577:4:info] 设置 scanRunning 并开始扫描
[Jul 09 10:30:25:1752028225.247215:4:info] 设置错误处理环境
[Jul 09 10:30:25:1752028225.245295:4:info] 请求最大内存
[Jul 09 10:30:25:1752028225.237433:4:info] 根据 cronkey 参数检查已保存的 cronkey
[Jul 09 10:30:25:1752028225.235924:4:info] 检查 cronkey:fea49b18799b24fc349efb4a4e13b390(预期 fea49b18799b24fc349efb4a4e13b390)
[Jul 09 10:30:25:1752028225.233927:4:info] 获取已存储的 cronkey 以进行比较。
[Jul 09 10:30:25:1752028225.232594:4:info] 验证启动要求签名。
[Jul 09 10:30:25:1752028225.229933:4:info] 扫描引擎收到要求。
[Jul 09 10:30:23:1752028223.452452:4:info] 扫描进程在分叉后结束。
[Jul 09 10:30:22:1752028222.427631:4:info] 在 URL https://www.joyfamily.top/wp-admin/admin-ajax.php?action=wordfence_doScan&isFork=1&scanMode=custom&cronKey=fea49b18799b24fc349efb4a4e13b390&signature=f871bc403f71c885962a62d0dcc941a8f583376f1b03323ebe9376aac087f414 处使用普通 Ajax 启动 cron
[Jul 09 10:30:22:1752028222.423172:4:info] 扫描开始测试的缓存结果:true
[Jul 09 10:30:22:1752028222.420882:4:info] getMaxExecutionTime() 返回配置值:20
[Jul 09 10:30:22:1752028222.419449:4:info] 从 wf 配置获取 maxExecutionTime 值:20
[Jul 09 10:30:22:1752028222.414995:4:info] 调用 startScan(true)
[Jul 09 10:30:22:1752028222.013064:4:info] 进入 fork()
[Jul 09 10:30:22:1752028222.010466:4:info] 在恶意软件扫描期间分叉(13473)以确保连续性。
[Jul 09 10:30:21:1752028221.751752:4:info] 扫描内容:wp-content/languages/admin-network-zh_CN.l10n.php(大小:37.01 KB 内存:103 MB)
[Jul 09 10:30:21:1752028221.701302:4:info] 扫描内容:wp-content/plugins/fluent-smtp/assets/admin/index.php(大小:26 B 内存:103 MB)
[Jul 09 10:30:21:1752028221.437488:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/google/apiclient-services/src/Gmail/AutoForwarding.php(大小:1.81 KB 内存:103 MB)
[Jul 09 10:30:21:1752028221.434495:2:info] 以每秒 2.20 的速度扫描额外 287 文件的内容
[Jul 09 10:30:20:1752028220.932900:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/phpseclib/phpseclib/phpseclib/Crypt/DSA/PublicKey.php(大小:2.48 KB 内存:103 MB)
[Jul 09 10:30:20:1752028220.546867:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/phpseclib/phpseclib/phpseclib/Crypt/EC/Formats/Keys/PuTTY.php(大小:5.28 KB 内存:103 MB)
[Jul 09 10:30:20:1752028220.387067:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/phpseclib/phpseclib/phpseclib/Exception/NoSupportedAlgorithmsException.php(大小:486 B 内存:103 MB)
[Jul 09 10:30:20:1752028220.341598:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/phpseclib/phpseclib/phpseclib/File/ASN1/Maps/Validity.php(大小:677 B 内存:103 MB)
[Jul 09 10:30:20:1752028220.338422:2:info] 以每秒 2.19 的速度扫描额外 283 文件的内容
[Jul 09 10:30:19:1752028219.831628:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/google/auth/src/Credentials/InsecureCredentials.php(大小:1.83 KB 内存:103 MB)
[Jul 09 10:30:19:1752028219.157322:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/phpseclib/phpseclib/phpseclib/Net/SFTP.php(大小:123.05 KB 内存:103 MB)
[Jul 09 10:30:18:1752028218.949298:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/phpseclib/phpseclib/phpseclib/File/ASN1/Maps/GeneralSubtree.php(大小:919 B 内存:103 MB)
[Jul 09 10:30:18:1752028218.947098:2:info] 以每秒 2.19 的速度扫描额外 280 文件的内容
[Jul 09 10:30:18:1752028218.623065:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/brainpoolP512r1.php(大小:1.77 KB 内存:103 MB)
[Jul 09 10:30:18:1752028218.374648:4:info] 扫描内容:wp-content/plugins/fluent-smtp/app/Services/Mailer/Providers/Smtp2Go/Handler.php(大小:5.16 KB 内存:103 MB)
[Jul 09 10:30:18:1752028218.119072:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/composer/autoload_classmap.php(大小:97.27 KB 内存:103 MB)
[Jul 09 10:30:17:1752028217.900083:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/Core/BindingResolutionException.php(大小:99 B 内存:103 MB)
[Jul 09 10:30:17:1752028217.898002:2:info] 以每秒 2.17 的速度扫描额外 276 文件的内容
[Jul 09 10:30:17:1752028217.705923:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/phpseclib/phpseclib/phpseclib/File/ASN1/Maps/CertificateSerialNumber.php(大小:572 B 内存:103 MB)
[Jul 09 10:30:17:1752028217.310477:4:info] 扫描内容:wp-content/languages/plugins/wp-optimize-zh_CN.l10n.php(大小:55.56 KB 内存:103 MB)
[Jul 09 10:30:17:1752028217.232852:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/monolog/monolog/src/Monolog/Handler/NoopHandler.php(大小:928 B 内存:103 MB)
[Jul 09 10:30:17:1752028217.007713:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/monolog/monolog/src/Monolog/Attribute/AsMonologProcessor.php(大小:1.48 KB 内存:103 MB)
[Jul 09 10:30:16:1752028216.738054:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/google/apiclient/src/AuthHandler/Guzzle6AuthHandler.php(大小:3.51 KB 内存:103 MB)
[Jul 09 10:30:16:1752028216.735809:2:info] 以每秒 2.15 的速度扫描额外 271 文件的内容
[Jul 09 10:30:16:1752028216.406225:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/phpseclib/phpseclib/phpseclib/File/ANSI.php(大小:21.53 KB 内存:103 MB)
[Jul 09 10:30:16:1752028216.072336:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/monolog/monolog/src/Monolog/Handler/ProcessHandler.php(大小:5.12 KB 内存:103 MB)
[Jul 09 10:30:15:1752028215.790036:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/phpseclib/phpseclib/phpseclib/Math/Common/FiniteField/Integer.php(大小:1.01 KB 内存:103 MB)
[Jul 09 10:30:15:1752028215.677858:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/nistk409.php(大小:413 B 内存:103 MB)
[Jul 09 10:30:15:1752028215.675828:2:info] 以每秒 2.14 的速度扫描额外 267 文件的内容
[Jul 09 10:30:15:1752028215.420968:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/phpseclib/phpseclib/phpseclib/File/ASN1/Maps/AlgorithmIdentifier.php(大小:761 B 内存:103 MB)
[Jul 09 10:30:15:1752028215.213976:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/phpseclib/phpseclib/phpseclib/File/ASN1/Maps/PublicKeyInfo.php(大小:886 B 内存:103 MB)
[Jul 09 10:30:14:1752028214.813416:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect131r1.php(大小:929 B 内存:103 MB)
[Jul 09 10:30:14:1752028214.582616:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/google/apiclient-services/src/Gmail/CseIdentity.php(大小:2.13 KB 内存:103 MB)
[Jul 09 10:30:14:1752028214.577338:2:info] 以每秒 2.13 的速度扫描额外 263 文件的内容
[Jul 09 10:30:14:1752028214.313615:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/monolog/monolog/src/Monolog/Handler/MailHandler.php(大小:2.42 KB 内存:103 MB)
[Jul 09 10:30:14:1752028214.131174:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/phpseclib/phpseclib/phpseclib/Exception/TimeoutException.php(大小:163 B 内存:103 MB)
[Jul 09 10:30:13:1752028213.933406:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/phpseclib/phpseclib/phpseclib/File/ASN1/Maps/PBMAC1params.php(大小:796 B 内存:103 MB)
[Jul 09 10:30:13:1752028213.582297:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/google/auth/autoload.php(大小:1.12 KB 内存:103 MB)
[Jul 09 10:30:13:1752028213.359313:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/phpseclib/phpseclib/phpseclib/File/ASN1/Maps/IssuingDistributionPoint.php(大小:1.52 KB 内存:103 MB)
[Jul 09 10:30:13:1752028213.354367:2:info] 以每秒 2.11 的速度扫描额外 258 文件的内容
[Jul 09 10:30:12:1752028212.944554:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/composer/ClassLoader.php(大小:15.99 KB 内存:103 MB)
[Jul 09 10:30:12:1752028212.734216:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/google/apiclient-services/src/Gmail/ListCseKeyPairsResponse.php(大小:1.7 KB 内存:103 MB)
[Jul 09 10:30:12:1752028212.508499:4:info] 扫描内容:wp-content/plugins/fluent-smtp/assets/libs/chartjs/Chart.BarFunnel.min.js(大小:3.45 KB 内存:103 MB)
[Jul 09 10:30:12:1752028212.247448:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/phpseclib/phpseclib/phpseclib/Net/SFTP/Stream.php(大小:21.35 KB 内存:103 MB)
[Jul 09 10:30:12:1752028212.242270:2:info] 以每秒 2.09 的速度扫描额外 254 文件的内容
[Jul 09 10:30:11:1752028211.768997:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/google/apiclient-services/src/Gmail/ImapSettings.php(大小:2.14 KB 内存:103 MB)
[Jul 09 10:30:11:1752028211.235234:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/phpseclib/phpseclib/phpseclib/System/SSH/Agent.php(大小:9.17 KB 内存:103 MB)
[Jul 09 10:30:11:1752028211.052916:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/google/apiclient-services/src/Gmail/Resource/UsersMessagesAttachments.php(大小:2.05 KB 内存:103 MB)
[Jul 09 10:30:11:1752028211.049633:2:info] 以每秒 2.09 的速度扫描额外 251 文件的内容
[Jul 09 10:30:10:1752028210.662857:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/composer/autoload_files.php(大小:737 B 内存:103 MB)
[Jul 09 10:30:10:1752028210.493873:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/phpseclib/phpseclib/phpseclib/File/ASN1/Maps/Prime_p.php(大小:524 B 内存:103 MB)
[Jul 09 10:30:10:1752028210.116288:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/Core/ContainerContract.php(大小:3.4 KB 内存:103 MB)
[Jul 09 10:30:09:1752028209.952517:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/google/apiclient-services/src/Gmail/ListForwardingAddressesResponse.php(大小:1.48 KB 内存:103 MB)
[Jul 09 10:30:09:1752028209.950504:2:info] 以每秒 2.07 的速度扫描额外 247 文件的内容
[Jul 09 10:30:09:1752028209.557651:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/phpseclib/phpseclib/phpseclib/Math/BigInteger/Engines/PHP/Montgomery.php(大小:2.65 KB 内存:103 MB)
[Jul 09 10:30:09:1752028209.389552:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/google/apiclient-services/src/Gmail/Filter.php(大小:1.96 KB 内存:103 MB)
[Jul 09 10:30:09:1752028209.053861:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/guzzlehttp/psr7/src/Request.php(大小:4.07 KB 内存:103 MB)
[Jul 09 10:30:08:1752028208.823117:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/phpseclib/phpseclib/phpseclib/Common/Functions/Strings.php(大小:16.13 KB 内存:103 MB)
[Jul 09 10:30:08:1752028208.820197:2:info] 以每秒 2.06 的速度扫描额外 243 文件的内容
[Jul 09 10:30:08:1752028208.449673:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/monolog/monolog/src/Monolog/Handler/ProcessableHandlerTrait.php(大小:1.79 KB 内存:103 MB)
[Jul 09 10:30:08:1752028208.165987:4:info] 扫描内容:wp-content/plugins/wpjam-basic/includes/class-wpjam-setting.php(大小:27.96 KB 内存:103 MB)
[Jul 09 10:30:07:1752028207.812858:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/Support/Collection.php(大小:15.85 KB 内存:103 MB)
[Jul 09 10:30:07:1752028207.609619:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/phpseclib/phpseclib/phpseclib/File/ASN1/Maps/Extension.php(大小:1.06 KB 内存:103 MB)
[Jul 09 10:30:07:1752028207.607076:2:info] 以每秒 2.05 的速度扫描额外 239 文件的内容
[Jul 09 10:30:07:1752028207.272798:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/guzzlehttp/promises/src/RejectionException.php(大小:1.21 KB 内存:103 MB)
[Jul 09 10:30:07:1752028207.051223:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/google/auth/src/Cache/TypedItem.php(大小:3.96 KB 内存:103 MB)
[Jul 09 10:30:06:1752028206.751442:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/Activator.php(大小:876 B 内存:103 MB)
[Jul 09 10:30:06:1752028206.723275:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/psr/cache/src/CacheException.php(大小:157 B 内存:103 MB)
[Jul 09 10:30:06:1752028206.628731:4:info] 扫描内容:wp-content/plugins/fluent-smtp/app/Services/DB/QueryBuilder/Raw.php(大小:548 B 内存:103 MB)
[Jul 09 10:30:06:1752028206.435260:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/guzzlehttp/guzzle/src/RedirectMiddleware.php(大小:8.29 KB 内存:103 MB)
[Jul 09 10:30:06:1752028206.429268:2:info] 以每秒 2.02 的速度扫描额外 233 文件的内容
[Jul 09 10:30:06:1752028206.074017:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/monolog/monolog/src/Monolog/Handler/RollbarHandler.php(大小:3.48 KB 内存:103 MB)
[Jul 09 10:30:05:1752028205.880145:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/phpseclib/phpseclib/phpseclib/Crypt/DSA/Formats/Keys/Raw.php(大小:2.8 KB 内存:103 MB)
[Jul 09 10:30:05:1752028205.792061:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/phpseclib/phpseclib/phpseclib/Crypt/RSA/Formats/Keys/Raw.php(大小:5.55 KB 内存:103 MB)
[Jul 09 10:30:05:1752028205.439742:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/phpseclib/phpseclib/phpseclib/File/ASN1/Maps/CertificatePolicies.php(大小:665 B 内存:103 MB)
[Jul 09 10:30:05:1752028205.217053:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/phpseclib/phpseclib/phpseclib/File/ASN1/Maps/NetworkAddress.php(大小:552 B 内存:103 MB)
[Jul 09 10:30:05:1752028205.213425:2:info] 以每秒 1.99 的速度扫描额外 228 文件的内容
[Jul 09 10:30:04:1752028204.803497:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/google/apiclient-services/src/Gmail/Resource/UsersThreads.php(大小:6.61 KB 内存:103 MB)
[Jul 09 10:30:04:1752028204.592312:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/phpseclib/phpseclib/phpseclib/File/ASN1/Maps/OrganizationalUnitNames.php(大小:757 B 内存:103 MB)
[Jul 09 10:30:04:1752028204.147362:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/google/auth/src/Credentials/AppIdentityCredentials.php(大小:7.09 KB 内存:103 MB)
[Jul 09 10:30:03:1752028203.937762:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/phpseclib/phpseclib/phpseclib/Crypt/EC/Parameters.php(大小:827 B 内存:103 MB)
[Jul 09 10:30:03:1752028203.934556:2:info] 以每秒 1.98 的速度扫描额外 224 文件的内容
[Jul 09 10:30:03:1752028203.617633:4:info] 扫描内容:wp-content/plugins/fluent-smtp/app/Services/DB/QueryBuilder/Adapters/BaseAdapter.php(大小:16.11 KB 内存:103 MB)
[Jul 09 10:30:03:1752028203.440235:4:info] 扫描内容:wp-content/plugins/fluent-smtp/app/Services/index.php(大小:26 B 内存:103 MB)
[Jul 09 10:30:03:1752028203.070651:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/monolog/monolog/src/Monolog/Handler/CouchDBHandler.php(大小:2.06 KB 内存:103 MB)
[Jul 09 10:30:02:1752028202.999390:4:info] 扫描内容:wp-content/plugins/fluent-smtp/assets/images/provider-netcore.svg(大小:4 KB 内存:103 MB)
[Jul 09 10:30:02:1752028202.809220:4:info] 扫描内容:wp-content/plugins/fluent-smtp/app/Hooks/index.php(大小:26 B 内存:103 MB)
[Jul 09 10:30:02:1752028202.806046:2:info] 以每秒 1.96 的速度扫描额外 219 文件的内容
[Jul 09 10:30:02:1752028202.510637:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/psr/http-message/src/RequestInterface.php(大小:5.01 KB 内存:103 MB)
[Jul 09 10:30:02:1752028202.436420:4:info] 扫描内容:wp-content/plugins/fluent-smtp/assets/images/provider-gmail-google-workspace.svg(大小:5.17 KB 内存:103 MB)
[Jul 09 10:30:02:1752028202.178117:4:info] 扫描内容:wp-content/plugins/fluent-smtp/database/FluentMailDBMigrator.php(大小:1.15 KB 内存:103 MB)
[Jul 09 10:30:01:1752028201.804995:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/phpseclib/phpseclib/phpseclib/Crypt/Common/Formats/Keys/PuTTY.php(大小:14.42 KB 内存:103 MB)
[Jul 09 10:30:01:1752028201.802303:2:info] 以每秒 1.94 的速度扫描额外 215 文件的内容
[Jul 09 10:30:01:1752028201.568028:4:info] 在规则 9777 恢复恶意软件扫描。
[Jul 09 10:30:01:1752028201.561444:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/phpseclib/phpseclib/phpseclib/File/ASN1/Maps/PersonalName.php(大小:1.12 KB 内存:103 MB)
[Jul 09 10:30:01:1752028201.477105:4:info] 从类型为 object 的「wfsd_engine」获取了一个真实的反序列化值
[Jul 09 10:30:01:1752028201.334999:4:info] 设置 scanRunning 并开始扫描
[Jul 09 10:30:01:1752028201.333276:4:info] 设置错误处理环境
[Jul 09 10:30:01:1752028201.331172:4:info] 请求最大内存
[Jul 09 10:30:01:1752028201.321988:4:info] 根据 cronkey 参数检查已保存的 cronkey
[Jul 09 10:30:01:1752028201.320781:4:info] 检查 cronkey:29faa52805f7a614a723ba8c85398ea0(预期 29faa52805f7a614a723ba8c85398ea0)
[Jul 09 10:30:01:1752028201.319362:4:info] 获取已存储的 cronkey 以进行比较。
[Jul 09 10:30:01:1752028201.317384:4:info] 验证启动要求签名。
[Jul 09 10:30:01:1752028201.313475:4:info] 扫描引擎收到要求。
[Jul 09 10:29:59:1752028199.647765:4:info] 扫描进程在分叉后结束。
[Jul 09 10:29:58:1752028198.619276:4:info] 在 URL https://www.joyfamily.top/wp-admin/admin-ajax.php?action=wordfence_doScan&isFork=1&scanMode=custom&cronKey=29faa52805f7a614a723ba8c85398ea0&signature=df28af54fd667b7c953a20c38b310302044cf4eb8da4cd8fc972cc9815c62804 处使用普通 Ajax 启动 cron
[Jul 09 10:29:58:1752028198.616547:4:info] 扫描开始测试的缓存结果:true
[Jul 09 10:29:58:1752028198.615042:4:info] getMaxExecutionTime() 返回配置值:20
[Jul 09 10:29:58:1752028198.612797:4:info] 从 wf 配置获取 maxExecutionTime 值:20
[Jul 09 10:29:58:1752028198.606603:4:info] 调用 startScan(true)
[Jul 09 10:29:58:1752028198.179594:4:info] 进入 fork()
[Jul 09 10:29:48:1752028188.167040:4:info] 从类型为 object 的「wfsd_engine」获取了一个真实的反序列化值
[Jul 09 10:29:48:1752028188.028200:4:info] 设置 scanRunning 并开始扫描
[Jul 09 10:29:48:1752028188.026070:4:info] 设置错误处理环境
[Jul 09 10:29:48:1752028188.024281:4:info] 请求最大内存
[Jul 09 10:29:48:1752028188.012616:4:info] 根据 cronkey 参数检查已保存的 cronkey
[Jul 09 10:29:48:1752028188.011254:4:info] 检查 cronkey:429e8813e1c6c55959598e4ad463f69b(预期 429e8813e1c6c55959598e4ad463f69b)
[Jul 09 10:29:48:1752028188.009244:4:info] 获取已存储的 cronkey 以进行比较。
[Jul 09 10:29:48:1752028188.007033:4:info] 验证启动要求签名。
[Jul 09 10:29:48:1752028188.003169:4:info] 扫描引擎收到要求。
[Jul 09 10:29:46:1752028186.472829:4:info] 扫描进程在分叉后结束。
[Jul 09 10:29:45:1752028185.430131:4:info] 在 URL https://www.joyfamily.top/wp-admin/admin-ajax.php?action=wordfence_doScan&isFork=1&scanMode=custom&cronKey=429e8813e1c6c55959598e4ad463f69b&signature=77b50930fc1b37a416b4d501f559bdb3f60f3ef3def1922afe6c0161d62aca2c 处使用普通 Ajax 启动 cron
[Jul 09 10:29:45:1752028185.425046:4:info] 扫描开始测试的缓存结果:true
[Jul 09 10:29:45:1752028185.422414:4:info] getMaxExecutionTime() 返回配置值:20
[Jul 09 10:29:45:1752028185.418554:4:info] 从 wf 配置获取 maxExecutionTime 值:20
[Jul 09 10:29:45:1752028185.412326:4:info] 调用 startScan(true)
[Jul 09 10:29:45:1752028185.012489:4:info] 进入 fork()
[Jul 09 10:29:45:1752028185.010920:4:info] 在恶意软件扫描期间分叉(9777)以确保连续性。
[Jul 09 10:29:44:1752028184.796182:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/phpseclib/phpseclib/phpseclib/File/ASN1/Maps/PersonalName.php(大小:1.12 KB 内存:103 MB)
[Jul 09 10:29:44:1752028184.640967:4:info] 扫描内容:wp-content/wflogs/config-synced.php(大小:14.17 KB 内存:103 MB)
[Jul 09 10:29:44:1752028184.274746:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/guzzlehttp/guzzle/src/ClientTrait.php(大小:9.31 KB 内存:103 MB)
[Jul 09 10:29:44:1752028184.272494:2:info] 以每秒 2.27 的速度扫描额外 212 文件的内容
[Jul 09 10:29:43:1752028183.710676:4:info] 扫描内容:wp-content/plugins/fluent-smtp/app/Services/Mailer/Providers/SendGrid/Handler.php(大小:5.96 KB 内存:103 MB)
[Jul 09 10:29:43:1752028183.248037:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/google/apiclient-services/src/Gmail/WatchRequest.php(大小:2.26 KB 内存:103 MB)
[Jul 09 10:29:43:1752028183.245304:2:info] 以每秒 2.27 的速度扫描额外 210 文件的内容
[Jul 09 10:29:42:1752028182.658262:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/phpseclib/phpseclib/phpseclib/Crypt/DSA.php(大小:9.48 KB 内存:103 MB)
[Jul 09 10:29:42:1752028182.199223:4:info] 扫描内容:wp-content/plugins/fluent-smtp/app/Services/Mailer/Providers/AmazonSes/SimpleEmailServiceRequest.php(大小:10.6 KB 内存:103 MB)
[Jul 09 10:29:42:1752028182.096551:4:info] 扫描内容:wp-content/wflogs/config-livewaf.php(大小:891 B 内存:103 MB)
[Jul 09 10:29:42:1752028182.065451:4:info] 扫描内容:wp-includes/version.php(大小:1.09 KB 内存:103 MB)
[Jul 09 10:29:42:1752028182.026489:4:info] 扫描内容:wp-content/plugins/fluent-smtp/assets/admin/js/index.php(大小:26 B 内存:103 MB)
[Jul 09 10:29:42:1752028182.023387:2:info] 以每秒 2.25 的速度扫描额外 205 文件的内容
[Jul 09 10:29:41:1752028181.919486:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/guzzlehttp/psr7/src/UriComparator.php(大小:1.24 KB 内存:103 MB)
[Jul 09 10:29:41:1752028181.450395:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/google/auth/src/HttpHandler/HttpHandlerFactory.php(大小:2.56 KB 内存:103 MB)
[Jul 09 10:29:40:1752028180.957612:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/phpseclib/phpseclib/phpseclib/Crypt/Common/Traits/PasswordProtected.php(大小:1.05 KB 内存:103 MB)
[Jul 09 10:29:40:1752028180.949778:2:info] 以每秒 2.24 的速度扫描额外 202 文件的内容
[Jul 09 10:29:40:1752028180.516366:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/phpseclib/phpseclib/phpseclib/Math/BigInteger/Engines/PHP/DefaultEngine.php(大小:675 B 内存:103 MB)
[Jul 09 10:29:40:1752028180.423433:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/guzzlehttp/guzzle/src/Exception/ConnectException.php(大小:1.51 KB 内存:103 MB)
[Jul 09 10:29:40:1752028180.318039:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/google/apiclient-services/src/Gmail/ObliterateCseKeyPairRequest.php(大小:954 B 内存:103 MB)
[Jul 09 10:29:39:1752028179.899501:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/phpseclib/phpseclib/phpseclib/Crypt/EC/Formats/Keys/PKCS8.php(大小:9.11 KB 内存:103 MB)
[Jul 09 10:29:39:1752028179.717883:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/monolog/monolog/src/Monolog/Handler/SyslogUdp/UdpSocket.php(大小:2.18 KB 内存:103 MB)
[Jul 09 10:29:39:1752028179.712682:2:info] 以每秒 2.22 的速度扫描额外 197 文件的内容
[Jul 09 10:29:39:1752028179.256015:4:info] 扫描内容:wordfence-waf.php(大小:325 B 内存:103 MB)
[Jul 09 10:29:39:1752028179.050437:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/phpseclib/phpseclib/phpseclib/Crypt/Common/Formats/Keys/PKCS.php(大小:1.35 KB 内存:103 MB)
[Jul 09 10:29:38:1752028178.969874:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/guzzlehttp/guzzle/src/Exception/TooManyRedirectsException.php(大小:151 B 内存:103 MB)
[Jul 09 10:29:38:1752028178.654952:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/Request/Cleaner.php(大小:1.14 KB 内存:103 MB)
[Jul 09 10:29:38:1752028178.652579:2:info] 以每秒 2.20 的速度扫描额外 193 文件的内容
[Jul 09 10:29:38:1752028178.601580:4:info] 扫描内容:wp-content/plugins/fluent-smtp/assets/libs/chartjs/vue-chartjs.js(大小:12.95 KB 内存:103 MB)
[Jul 09 10:29:38:1752028178.112467:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/secp521r1.php(大小:1.81 KB 内存:103 MB)
[Jul 09 10:29:37:1752028177.631656:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/monolog/monolog/src/Monolog/Handler/FingersCrossedHandler.php(大小:8.94 KB 内存:103 MB)
[Jul 09 10:29:37:1752028177.629269:2:info] 以每秒 2.19 的速度扫描额外 190 文件的内容
[Jul 09 10:29:37:1752028177.117275:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/guzzlehttp/guzzle/src/Handler/StreamHandler.php(大小:21.71 KB 内存:103 MB)
[Jul 09 10:29:37:1752028177.047032:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/guzzlehttp/promises/src/Each.php(大小:2.59 KB 内存:103 MB)
[Jul 09 10:29:36:1752028176.570413:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/autoload.php(大小:771 B 内存:103 MB)
[Jul 09 10:29:36:1752028176.566632:2:info] 以每秒 2.18 的速度扫描额外 187 文件的内容
[Jul 09 10:29:36:1752028176.331242:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/google/auth/src/Credentials/GCECredentials.php(大小:18.48 KB 内存:103 MB)
[Jul 09 10:29:35:1752028175.964358:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/guzzlehttp/psr7/src/Header.php(大小:3.86 KB 内存:103 MB)
[Jul 09 10:29:35:1752028175.818508:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/monolog/monolog/src/Monolog/Processor/PsrLogMessageProcessor.php(大小:3.1 KB 内存:103 MB)
[Jul 09 10:29:35:1752028175.427377:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/phpseclib/phpseclib/phpseclib/File/ASN1/Maps/DSAPrivateKey.php(大小:985 B 内存:103 MB)
[Jul 09 10:29:35:1752028175.424661:2:info] 以每秒 2.16 的速度扫描额外 183 文件的内容
[Jul 09 10:29:34:1752028174.910793:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/monolog/monolog/src/Monolog/Handler/DynamoDbHandler.php(大小:2.68 KB 内存:103 MB)
[Jul 09 10:29:34:1752028174.519102:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/Core/Application.php(大小:5.46 KB 内存:103 MB)
[Jul 09 10:29:34:1752028174.243408:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/phpseclib/phpseclib/phpseclib/Math/BigInteger/Engines/PHP.php(大小:37.96 KB 内存:103 MB)
[Jul 09 10:29:34:1752028174.238609:2:info] 以每秒 2.16 的速度扫描额外 180 文件的内容
[Jul 09 10:29:33:1752028173.908882:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/monolog/monolog/src/Monolog/Processor/TagProcessor.php(大小:1.14 KB 内存:103 MB)
[Jul 09 10:29:33:1752028173.643742:4:info] 扫描内容:wp-content/plugins/wpjam-basic/includes/class-wpjam-user.php(大小:27.87 KB 内存:103 MB)
[Jul 09 10:29:33:1752028173.104237:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/phpseclib/phpseclib/phpseclib/Crypt/DSA/Parameters.php(大小:848 B 内存:103 MB)
[Jul 09 10:29:33:1752028173.101083:2:info] 以每秒 2.15 的速度扫描额外 177 文件的内容
[Jul 09 10:29:32:1752028172.714473:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/phpseclib/phpseclib/phpseclib/Math/BigInteger/Engines/Engine.php(大小:40.62 KB 内存:103 MB)
[Jul 09 10:29:32:1752028172.557779:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/phpseclib/phpseclib/phpseclib/File/ASN1/Maps/RevokedCertificate.php(大小:844 B 内存:103 MB)
[Jul 09 10:29:32:1752028172.397545:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/google/auth/src/UpdateMetadataTrait.php(大小:2.03 KB 内存:103 MB)
[Jul 09 10:29:31:1752028171.978463:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/phpseclib/phpseclib/phpseclib/bootstrap.php(大小:737 B 内存:103 MB)
[Jul 09 10:29:31:1752028171.835310:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/monolog/monolog/src/Monolog/Registry.php(大小:4.01 KB 内存:103 MB)
[Jul 09 10:29:31:1752028171.831860:2:info] 以每秒 2.12 的速度扫描额外 172 文件的内容
[Jul 09 10:29:31:1752028171.268997:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/phpseclib/phpseclib/phpseclib/Math/BinaryField/Integer.php(大小:13.74 KB 内存:103 MB)
[Jul 09 10:29:30:1752028170.635030:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/google/auth/src/CredentialSource/FileSource.php(大小:2.42 KB 内存:103 MB)
[Jul 09 10:29:30:1752028170.632027:2:info] 以每秒 2.13 的速度扫描额外 170 文件的内容
[Jul 09 10:29:29:1752028169.777314:4:info] 扫描内容:wp-content/languages/plugins/wordfence-zh_CN.l10n.php(大小:364.44 KB 内存:103 MB)
[Jul 09 10:29:29:1752028169.614639:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/Support/Str.php(大小:19.06 KB 内存:103 MB)
[Jul 09 10:29:29:1752028169.112707:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/nistp521.php(大小:413 B 内存:103 MB)
[Jul 09 10:29:29:1752028169.110279:2:info] 以每秒 2.13 的速度扫描额外 167 文件的内容
[Jul 09 10:29:28:1752028168.559535:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/google/apiclient/src/Client.php(大小:42.87 KB 内存:103 MB)
[Jul 09 10:29:28:1752028168.448232:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571k1.php(大小:1.47 KB 内存:103 MB)
[Jul 09 10:29:28:1752028168.349309:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/phpseclib/phpseclib/phpseclib/File/ASN1/Maps/DSAParams.php(大小:757 B 内存:103 MB)
[Jul 09 10:29:27:1752028167.953006:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/google/apiclient-services/src/Gmail/Draft.php(大小:1.51 KB 内存:103 MB)
[Jul 09 10:29:27:1752028167.658989:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/guzzlehttp/psr7/src/Uri.php(大小:21.68 KB 内存:103 MB)
[Jul 09 10:29:27:1752028167.655536:2:info] 以每秒 2.11 的速度扫描额外 162 文件的内容
[Jul 09 10:29:27:1752028167.266643:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/monolog/monolog/src/Monolog/Processor/MemoryUsageProcessor.php(大小:863 B 内存:103 MB)
[Jul 09 10:29:27:1752028167.142072:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/symfony/deprecation-contracts/function.php(大小:1.03 KB 内存:103 MB)
[Jul 09 10:29:26:1752028166.747246:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/phpseclib/phpseclib/phpseclib/File/ASN1/Maps/PrivateKey.php(大小:538 B 内存:103 MB)
[Jul 09 10:29:26:1752028166.635272:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/monolog/monolog/src/Monolog/Handler/FingersCrossed/ErrorLevelActivationStrategy.php(大小:1.18 KB 内存:103 MB)
[Jul 09 10:29:26:1752028166.632491:2:info] 以每秒 2.09 的速度扫描额外 158 文件的内容
[Jul 09 10:29:26:1752028166.155984:4:info] 扫描内容:wp-content/plugins/wpjam-basic/includes/class-wpjam-field.php(大小:44.36 KB 内存:103 MB)
[Jul 09 10:29:25:1752028165.974355:4:info] 扫描内容:wp-content/plugins/wpjam-basic/includes/class-wpjam-term.php(大小:26.81 KB 内存:103 MB)
[Jul 09 10:29:25:1752028165.528730:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/google/auth/src/GetUniverseDomainInterface.php(大小:1.07 KB 内存:103 MB)
[Jul 09 10:29:25:1752028165.524729:2:info] 以每秒 2.08 的速度扫描额外 155 文件的内容
[Jul 09 10:29:25:1752028165.372430:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/monolog/monolog/src/Monolog/Handler/LogmaticHandler.php(大小:2.66 KB 内存:103 MB)
[Jul 09 10:29:24:1752028164.970256:4:info] 扫描内容:wp-content/plugins/fluent-smtp/app/Hooks/Handlers/InitializeSiteHandler.php(大小:507 B 内存:103 MB)
[Jul 09 10:29:24:1752028164.794599:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/phpseclib/phpseclib/phpseclib/File/ASN1/Maps/CRLNumber.php(大小:530 B 内存:103 MB)
[Jul 09 10:29:24:1752028164.399755:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/monolog/monolog/src/Monolog/Handler/RedisHandler.php(大小:3.08 KB 内存:103 MB)
[Jul 09 10:29:24:1752028164.395647:2:info] 以每秒 2.05 的速度扫描额外 151 文件的内容
[Jul 09 10:29:24:1752028164.235995:4:info] 在规则 11734 恢复恶意软件扫描。
[Jul 09 10:29:24:1752028164.228028:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/phpseclib/phpseclib/phpseclib/Exception/ConnectionClosedException.php(大小:471 B 内存:103 MB)
[Jul 09 10:29:24:1752028164.178994:4:info] 从类型为 object 的「wfsd_engine」获取了一个真实的反序列化值
[Jul 09 10:29:24:1752028164.032983:4:info] 设置 scanRunning 并开始扫描
[Jul 09 10:29:24:1752028164.030324:4:info] 设置错误处理环境
[Jul 09 10:29:24:1752028164.028395:4:info] 请求最大内存
[Jul 09 10:29:24:1752028164.016904:4:info] 根据 cronkey 参数检查已保存的 cronkey
[Jul 09 10:29:24:1752028164.015282:4:info] 检查 cronkey:a4162bb4ca13291aba89dd616565b848(预期 a4162bb4ca13291aba89dd616565b848)
[Jul 09 10:29:24:1752028164.013178:4:info] 获取已存储的 cronkey 以进行比较。
[Jul 09 10:29:24:1752028164.010143:4:info] 验证启动要求签名。
[Jul 09 10:29:24:1752028164.006593:4:info] 扫描引擎收到要求。
[Jul 09 10:29:23:1752028163.056956:4:info] 扫描进程在分叉后结束。
[Jul 09 10:29:22:1752028162.039510:4:info] 在 URL https://www.joyfamily.top/wp-admin/admin-ajax.php?action=wordfence_doScan&isFork=1&scanMode=custom&cronKey=a4162bb4ca13291aba89dd616565b848&signature=67acc91bab564469a5992d43b772049683372043dc14dc7edac85a1a996729a5 处使用普通 Ajax 启动 cron
[Jul 09 10:29:22:1752028162.035400:4:info] 扫描开始测试的缓存结果:true
[Jul 09 10:29:22:1752028162.033378:4:info] getMaxExecutionTime() 返回配置值:20
[Jul 09 10:29:22:1752028162.032127:4:info] 从 wf 配置获取 maxExecutionTime 值:20
[Jul 09 10:29:22:1752028162.026114:4:info] 调用 startScan(true)
[Jul 09 10:29:21:1752028161.590364:4:info] 进入 fork()
[Jul 09 10:29:11:1752028151.573683:4:info] 从类型为 object 的「wfsd_engine」获取了一个真实的反序列化值
[Jul 09 10:29:11:1752028151.414987:4:info] 设置 scanRunning 并开始扫描
[Jul 09 10:29:11:1752028151.413624:4:info] 设置错误处理环境
[Jul 09 10:29:11:1752028151.412550:4:info] 请求最大内存
[Jul 09 10:29:11:1752028151.406756:4:info] 根据 cronkey 参数检查已保存的 cronkey
[Jul 09 10:29:11:1752028151.404888:4:info] 检查 cronkey:d1825a23c81da5f2fdadfbe3a5edaa2b(预期 d1825a23c81da5f2fdadfbe3a5edaa2b)
[Jul 09 10:29:11:1752028151.403677:4:info] 获取已存储的 cronkey 以进行比较。
[Jul 09 10:29:11:1752028151.401942:4:info] 验证启动要求签名。
[Jul 09 10:29:11:1752028151.399018:4:info] 扫描引擎收到要求。
[Jul 09 10:29:09:1752028149.479964:4:info] 扫描进程在分叉后结束。
[Jul 09 10:29:08:1752028148.452625:4:info] 在 URL https://www.joyfamily.top/wp-admin/admin-ajax.php?action=wordfence_doScan&isFork=1&scanMode=custom&cronKey=d1825a23c81da5f2fdadfbe3a5edaa2b&signature=a873ada71550e6a2bacfc42d4fea27886c23a5d155c1f45626c4e6c6c47aadb1 处使用普通 Ajax 启动 cron
[Jul 09 10:29:08:1752028148.446541:4:info] 扫描开始测试的缓存结果:true
[Jul 09 10:29:08:1752028148.444320:4:info] getMaxExecutionTime() 返回配置值:20
[Jul 09 10:29:08:1752028148.443004:4:info] 从 wf 配置获取 maxExecutionTime 值:20
[Jul 09 10:29:08:1752028148.437580:4:info] 调用 startScan(true)
[Jul 09 10:29:08:1752028148.016124:4:info] 进入 fork()
[Jul 09 10:29:08:1752028148.014358:4:info] 在恶意软件扫描期间分叉(11734)以确保连续性。
[Jul 09 10:29:07:1752028147.952741:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/phpseclib/phpseclib/phpseclib/Exception/ConnectionClosedException.php(大小:471 B 内存:103 MB)
[Jul 09 10:29:07:1752028147.949459:2:info] 以每秒 2.63 的速度扫描额外 150 文件的内容
[Jul 09 10:29:07:1752028147.704331:4:info] 扫描内容:wp-content/wflogs/attack-data.php(大小:39.14 KB 内存:103 MB)
[Jul 09 10:29:07:1752028147.483872:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/monolog/monolog/src/Monolog/ErrorHandler.php(大小:10.86 KB 内存:103 MB)
[Jul 09 10:29:07:1752028147.079657:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/monolog/monolog/src/Monolog/Test/TestCase.php(大小:2.47 KB 内存:103 MB)
[Jul 09 10:29:06:1752028146.939353:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/secp224k1.php(大小:1.92 KB 内存:103 MB)
[Jul 09 10:29:06:1752028146.825645:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/google/apiclient-services/src/Gmail/LanguageSettings.php(大小:1.24 KB 内存:103 MB)
[Jul 09 10:29:06:1752028146.822262:2:info] 以每秒 2.59 的速度扫描额外 145 文件的内容
[Jul 09 10:29:06:1752028146.430707:4:info] 扫描内容:wp-content/languages/plugins/simple-local-avatars-zh_CN.l10n.php(大小:4.23 KB 内存:103 MB)
[Jul 09 10:29:06:1752028146.272746:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/guzzlehttp/guzzle/src/PrepareBodyMiddleware.php(大小:3.21 KB 内存:103 MB)
[Jul 09 10:29:05:1752028145.795195:4:info] 扫描内容:wp-content/plugins/fluent-smtp/app/Services/Mailer/Providers/SparkPost/ValidatorTrait.php(大小:969 B 内存:103 MB)
[Jul 09 10:29:05:1752028145.791308:2:info] 以每秒 2.59 的速度扫描额外 142 文件的内容
[Jul 09 10:29:05:1752028145.390383:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/guzzlehttp/psr7/src/MimeType.php(大小:44.16 KB 内存:103 MB)
[Jul 09 10:29:05:1752028145.222019:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/google/apiclient-services/src/Gmail/SmimeInfo.php(大小:2.95 KB 内存:103 MB)
[Jul 09 10:29:05:1752028145.103185:4:info] 扫描内容:wp-content/plugins/fluent-smtp/app/Services/DB/QueryBuilder/JoinBuilder.php(大小:1.02 KB 内存:103 MB)
[Jul 09 10:29:04:1752028144.768556:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/phpseclib/phpseclib/phpseclib/File/ASN1/Maps/IssuerAltName.php(大小:499 B 内存:103 MB)
[Jul 09 10:29:04:1752028144.555231:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/guzzlehttp/psr7/src/Rfc7230.php(大小:664 B 内存:103 MB)
[Jul 09 10:29:04:1752028144.464075:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/monolog/monolog/src/Monolog/Handler/FormattableHandlerInterface.php(大小:970 B 内存:103 MB)
[Jul 09 10:29:04:1752028144.461138:2:info] 以每秒 2.54 的速度扫描额外 136 文件的内容
[Jul 09 10:29:04:1752028144.075023:4:info] 扫描内容:wp-content/languages/plugins/comment-reply-email-notification-zh_CN.l10n.php(大小:1.83 KB 内存:103 MB)
[Jul 09 10:29:03:1752028143.903787:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/monolog/monolog/src/Monolog/Formatter/LogmaticFormatter.php(大小:1.49 KB 内存:103 MB)
[Jul 09 10:29:03:1752028143.818215:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/phpseclib/phpseclib/phpseclib/Crypt/Common/PublicKey.php(大小:603 B 内存:103 MB)
[Jul 09 10:29:03:1752028143.448266:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/phpseclib/phpseclib/phpseclib/File/ASN1/Maps/CertPolicyId.php(大小:549 B 内存:103 MB)
[Jul 09 10:29:03:1752028143.340671:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/monolog/monolog/src/Monolog/Handler/FallbackGroupHandler.php(大小:1.76 KB 内存:103 MB)
[Jul 09 10:29:03:1752028143.270860:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/guzzlehttp/promises/src/RejectedPromise.php(大小:2.41 KB 内存:103 MB)
[Jul 09 10:29:03:1752028143.189922:4:info] 扫描内容:wp-content/plugins/fluent-smtp/assets/libs/chartjs/vue-chartjs.min.js(大小:4.24 KB 内存:103 MB)
[Jul 09 10:29:03:1752028143.185145:2:info] 以每秒 2.47 的速度扫描额外 129 文件的内容
[Jul 09 10:29:02:1752028142.787279:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/google/apiclient-services/src/Gmail/Resource/UsersSettingsForwardingAddresses.php(大小:4.7 KB 内存:103 MB)
[Jul 09 10:29:02:1752028142.583438:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/monolog/monolog/src/Monolog/Formatter/LineFormatter.php(大小:7.67 KB 内存:103 MB)
[Jul 09 10:29:02:1752028142.185727:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/google/apiclient-services/src/Gmail/SmtpMsa.php(大小:2.31 KB 内存:103 MB)
[Jul 09 10:29:02:1752028142.037387:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/guzzlehttp/psr7/src/StreamDecoratorTrait.php(大小:3.35 KB 内存:103 MB)
[Jul 09 10:29:02:1752028142.034498:2:info] 以每秒 2.44 的速度扫描额外 125 文件的内容
[Jul 09 10:29:01:1752028141.918796:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/google/apiclient/src/aliases.php(大小:3.83 KB 内存:103 MB)
[Jul 09 10:29:01:1752028141.603259:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/psr/log/Psr/Log/InvalidArgumentException.php(大小:110 B 内存:103 MB)
[Jul 09 10:29:01:1752028141.082003:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/phpseclib/phpseclib/phpseclib/Crypt/AES.php(大小:3.69 KB 内存:103 MB)
[Jul 09 10:29:00:1752028140.976768:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/monolog/monolog/src/Monolog/DateTimeImmutable.php(大小:1.25 KB 内存:103 MB)
[Jul 09 10:29:00:1752028140.973336:2:info] 以每秒 2.42 的速度扫描额外 121 文件的内容
[Jul 09 10:29:00:1752028140.720392:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/monolog/monolog/src/Monolog/Handler/LogEntriesHandler.php(大小:1.81 KB 内存:103 MB)
[Jul 09 10:29:00:1752028140.478124:4:info] 扫描内容:wp-content/plugins/fluent-smtp/app/Http/index.php(大小:26 B 内存:103 MB)
[Jul 09 10:29:00:1752028140.390072:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/phpseclib/phpseclib/phpseclib/File/ASN1/Maps/CountryName.php(大小:1.01 KB 内存:103 MB)
[Jul 09 10:28:59:1752028139.848298:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/google/apiclient-services/src/Gmail/ModifyMessageRequest.php(大小:1.63 KB 内存:103 MB)
[Jul 09 10:28:59:1752028139.845945:2:info] 以每秒 2.39 的速度扫描额外 117 文件的内容
[Jul 09 10:28:59:1752028139.268226:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/firebase/php-jwt/src/JWT.php(大小:23.39 KB 内存:103 MB)
[Jul 09 10:28:59:1752028139.216472:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/phpseclib/phpseclib/phpseclib/File/ASN1/Maps/EncryptedData.php(大小:547 B 内存:103 MB)
[Jul 09 10:28:58:1752028138.750231:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/google/apiclient-services/src/Gmail/ListSmimeInfoResponse.php(大小:1.34 KB 内存:103 MB)
[Jul 09 10:28:58:1752028138.747518:2:info] 以每秒 2.38 的速度扫描额外 114 文件的内容
[Jul 09 10:28:58:1752028138.327666:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/psr/http-message/src/ResponseInterface.php(大小:2.65 KB 内存:103 MB)
[Jul 09 10:28:58:1752028138.193058:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/phpseclib/phpseclib/phpseclib/File/ASN1/Maps/Name.php(大小:606 B 内存:103 MB)
[Jul 09 10:28:57:1752028137.781872:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/guzzlehttp/promises/src/PromisorInterface.php(大小:298 B 内存:103 MB)
[Jul 09 10:28:57:1752028137.712195:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/monolog/monolog/src/Monolog/Handler/ElasticaHandler.php(大小:3.52 KB 内存:103 MB)
[Jul 09 10:28:57:1752028137.661325:4:info] 扫描内容:wp-content/themes/index.php(大小:28 B 内存:103 MB)
[Jul 09 10:28:57:1752028137.657155:2:info] 以每秒 2.33 的速度扫描额外 109 文件的内容
[Jul 09 10:28:57:1752028137.181185:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/google/apiclient-services/src/Gmail/PivKeyMetadata.php(大小:1.21 KB 内存:103 MB)
[Jul 09 10:28:56:1752028136.626850:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/monolog/monolog/src/Monolog/Handler/SocketHandler.php(大小:12.03 KB 内存:103 MB)
[Jul 09 10:28:56:1752028136.616494:2:info] 以每秒 2.34 的速度扫描额外 107 文件的内容
[Jul 09 10:28:56:1752028136.185705:4:info] 扫描内容:wp-content/plugins/fluent-smtp/app/Services/Mailer/Providers/AmazonSes/ValidatorTrait.php(大小:1.94 KB 内存:103 MB)
[Jul 09 10:28:56:1752028136.072565:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/phpseclib/phpseclib/phpseclib/File/ASN1/Maps/Time.php(大小:696 B 内存:103 MB)
[Jul 09 10:28:55:1752028135.991468:4:info] 扫描内容:wp-content/plugins/fluent-smtp/app/Services/Mailer/Providers/config.php(大小:12.48 KB 内存:103 MB)
[Jul 09 10:28:55:1752028135.580985:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/google/auth/src/UpdateMetadataInterface.php(大小:1.2 KB 内存:103 MB)
[Jul 09 10:28:55:1752028135.505366:4:info] 扫描内容:wp-content/plugins/fluent-smtp/app/views/admin/menu.php(大小:33 B 内存:103 MB)
[Jul 09 10:28:55:1752028135.498455:2:info] 以每秒 2.29 的速度扫描额外 102 文件的内容
[Jul 09 10:28:55:1752028135.154509:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/guzzlehttp/guzzle/src/Handler/EasyHandle.php(大小:2.92 KB 内存:103 MB)
[Jul 09 10:28:54:1752028134.914149:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/psr/log/Psr/Log/Test/TestLogger.php(大小:4.43 KB 内存:103 MB)
[Jul 09 10:28:54:1752028134.523748:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/phpseclib/phpseclib/phpseclib/Crypt/EC/Formats/Keys/OpenSSH.php(大小:7.43 KB 内存:103 MB)
[Jul 09 10:28:54:1752028134.392839:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/guzzlehttp/psr7/src/CachingStream.php(大小:4.67 KB 内存:103 MB)
[Jul 09 10:28:54:1752028134.303403:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/guzzlehttp/psr7/src/ServerRequest.php(大小:9.61 KB 内存:103 MB)
[Jul 09 10:28:54:1752028134.300981:4:info] 扫描内容:wp-content/cache/index.html(大小:0 B 内存:103 MB)
[Jul 09 10:28:54:1752028134.265699:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/phpseclib/phpseclib/phpseclib/File/ASN1/Maps/UserNotice.php(大小:795 B 内存:103 MB)
[Jul 09 10:28:54:1752028134.264381:2:info] 以每秒 2.19 的速度扫描额外 95 文件的内容
[Jul 09 10:28:53:1752028133.826486:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/phpseclib/phpseclib/phpseclib/Crypt/DH/PrivateKey.php(大小:1.77 KB 内存:103 MB)
[Jul 09 10:28:53:1752028133.690745:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/monolog/monolog/src/Monolog/Handler/AbstractHandler.php(大小:2.76 KB 内存:103 MB)
[Jul 09 10:28:53:1752028133.295140:4:info] 扫描内容:wp-content/advanced-cache.php(大小:1.26 KB 内存:103 MB)
[Jul 09 10:28:53:1752028133.036997:4:info] 扫描内容:wp-content/plugins/fluent-smtp/app/Http/Controllers/SettingsController.php(大小:22.93 KB 内存:103 MB)
[Jul 09 10:28:52:1752028132.992326:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/guzzlehttp/guzzle/src/Pool.php(大小:4.9 KB 内存:103 MB)
[Jul 09 10:28:52:1752028132.988277:2:info] 以每秒 2.14 的速度扫描额外 90 文件的内容
[Jul 09 10:28:52:1752028132.590482:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/psr/log/Psr/Log/NullLogger.php(大小:744 B 内存:103 MB)
[Jul 09 10:28:52:1752028132.384952:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/psr/http-message/src/UriInterface.php(大小:12.76 KB 内存:103 MB)
[Jul 09 10:28:51:1752028131.971961:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/guzzlehttp/promises/src/AggregateException.php(大小:429 B 内存:103 MB)
[Jul 09 10:28:51:1752028131.963496:2:info] 以每秒 2.12 的速度扫描额外 87 文件的内容
[Jul 09 10:28:51:1752028131.351305:4:info] 扫描内容:wp-content/plugins/fluent-smtp/app/Services/NotificationHelper.php(大小:12 KB 内存:103 MB)
[Jul 09 10:28:50:1752028130.815766:4:info] 扫描内容:wp-content/plugins/fluent-smtp/app/Services/Mailer/Providers/AmazonSes/SimpleEmailServiceMessage.php(大小:18.56 KB 内存:103 MB)
[Jul 09 10:28:50:1752028130.695854:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/phpseclib/phpseclib/phpseclib/File/ASN1/Maps/HoldInstructionCode.php(大小:570 B 内存:103 MB)
[Jul 09 10:28:50:1752028130.693500:2:info] 以每秒 2.11 的速度扫描额外 84 文件的内容
[Jul 09 10:28:50:1752028130.273802:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/google/apiclient-services/src/Gmail/SignAndEncryptKeyPairs.php(大小:1.64 KB 内存:103 MB)
[Jul 09 10:28:49:1752028129.846638:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/monolog/monolog/src/Monolog/Formatter/GelfMessageFormatter.php(大小:5.75 KB 内存:103 MB)
[Jul 09 10:28:49:1752028129.731899:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/index.php(大小:113 B 内存:103 MB)
[Jul 09 10:28:49:1752028129.492308:4:info] 扫描内容:wp-content/plugins/fluent-smtp/app/Models/Settings.php(大小:6.87 KB 内存:103 MB)
[Jul 09 10:28:49:1752028129.489082:2:info] 以每秒 2.07 的速度扫描额外 80 文件的内容
[Jul 09 10:28:49:1752028129.122468:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/google/apiclient-services/src/Gmail/ListHistoryResponse.php(大小:1.95 KB 内存:103 MB)
[Jul 09 10:28:48:1752028128.860569:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/firebase/php-jwt/src/BeforeValidException.php(大小:399 B 内存:103 MB)
[Jul 09 10:28:48:1752028128.703062:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/Support/Contracts/ArrayableInterface.php(大小:186 B 内存:103 MB)
[Jul 09 10:28:48:1752028128.610644:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/guzzlehttp/guzzle/src/BodySummarizer.php(大小:720 B 内存:103 MB)
[Jul 09 10:28:48:1752028128.570433:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/phpseclib/phpseclib/phpseclib/Crypt/DSA/Formats/Signature/Raw.php(大小:598 B 内存:103 MB)
[Jul 09 10:28:48:1752028128.426854:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/phpseclib/phpseclib/phpseclib/File/ASN1/Maps/DistributionPointName.php(大小:881 B 内存:103 MB)
[Jul 09 10:28:48:1752028128.423593:2:info] 以每秒 1.97 的速度扫描额外 74 文件的内容
[Jul 09 10:28:47:1752028127.937331:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/phpseclib/phpseclib/phpseclib/Crypt/DH/PublicKey.php(大小:1.09 KB 内存:103 MB)
[Jul 09 10:28:47:1752028127.370876:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/google/apiclient/src/AccessToken/Verify.php(大小:8.4 KB 内存:103 MB)
[Jul 09 10:28:47:1752028127.368033:2:info] 以每秒 1.97 的速度扫描额外 72 文件的内容
[Jul 09 10:28:47:1752028127.137689:4:info] 在规则 11673 恢复恶意软件扫描。
[Jul 09 10:28:47:1752028127.129541:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/phpseclib/phpseclib/phpseclib/Crypt/RSA/Formats/Keys/XML.php(大小:6.45 KB 内存:103 MB)
[Jul 09 10:28:47:1752028127.053377:4:info] 从类型为 object 的「wfsd_engine」获取了一个真实的反序列化值
[Jul 09 10:28:46:1752028126.928393:4:info] 设置 scanRunning 并开始扫描
[Jul 09 10:28:46:1752028126.926996:4:info] 设置错误处理环境
[Jul 09 10:28:46:1752028126.925320:4:info] 请求最大内存
[Jul 09 10:28:46:1752028126.915712:4:info] 根据 cronkey 参数检查已保存的 cronkey
[Jul 09 10:28:46:1752028126.914673:4:info] 检查 cronkey:da6465be8a9ae9ed652a687280b2a3df(预期 da6465be8a9ae9ed652a687280b2a3df)
[Jul 09 10:28:46:1752028126.913239:4:info] 获取已存储的 cronkey 以进行比较。
[Jul 09 10:28:46:1752028126.911718:4:info] 验证启动要求签名。
[Jul 09 10:28:46:1752028126.908320:4:info] 扫描引擎收到要求。
[Jul 09 10:28:45:1752028125.574065:4:info] 扫描进程在分叉后结束。
[Jul 09 10:28:44:1752028124.548040:4:info] 在 URL https://www.joyfamily.top/wp-admin/admin-ajax.php?action=wordfence_doScan&isFork=1&scanMode=custom&cronKey=da6465be8a9ae9ed652a687280b2a3df&signature=5521013c6191896f10c97f44b88218fa903d07896438dc6a77d2690dc6b375bb 处使用普通 Ajax 启动 cron
[Jul 09 10:28:44:1752028124.544798:4:info] 扫描开始测试的缓存结果:true
[Jul 09 10:28:44:1752028124.542951:4:info] getMaxExecutionTime() 返回配置值:20
[Jul 09 10:28:44:1752028124.541154:4:info] 从 wf 配置获取 maxExecutionTime 值:20
[Jul 09 10:28:44:1752028124.535164:4:info] 调用 startScan(true)
[Jul 09 10:28:44:1752028124.102786:4:info] 进入 fork()
[Jul 09 10:28:34:1752028114.093012:4:info] 从类型为 object 的「wfsd_engine」获取了一个真实的反序列化值
[Jul 09 10:28:33:1752028113.952930:4:info] 设置 scanRunning 并开始扫描
[Jul 09 10:28:33:1752028113.951161:4:info] 设置错误处理环境
[Jul 09 10:28:33:1752028113.949807:4:info] 请求最大内存
[Jul 09 10:28:33:1752028113.943379:4:info] 根据 cronkey 参数检查已保存的 cronkey
[Jul 09 10:28:33:1752028113.941879:4:info] 检查 cronkey:90d078f330b61c74b217946876101e45(预期 90d078f330b61c74b217946876101e45)
[Jul 09 10:28:33:1752028113.940625:4:info] 获取已存储的 cronkey 以进行比较。
[Jul 09 10:28:33:1752028113.937691:4:info] 验证启动要求签名。
[Jul 09 10:28:33:1752028113.934106:4:info] 扫描引擎收到要求。
[Jul 09 10:28:32:1752028112.455962:4:info] 扫描进程在分叉后结束。
[Jul 09 10:28:31:1752028111.444486:4:info] 在 URL https://www.joyfamily.top/wp-admin/admin-ajax.php?action=wordfence_doScan&isFork=1&scanMode=custom&cronKey=90d078f330b61c74b217946876101e45&signature=66cda7dce2e6d9a931a3e5eb7df53185d3825529bb8597e01bea410c7c1f29d2 处使用普通 Ajax 启动 cron
[Jul 09 10:28:31:1752028111.441565:4:info] 扫描开始测试的缓存结果:true
[Jul 09 10:28:31:1752028111.440109:4:info] getMaxExecutionTime() 返回配置值:20
[Jul 09 10:28:31:1752028111.438714:4:info] 从 wf 配置获取 maxExecutionTime 值:20
[Jul 09 10:28:31:1752028111.434836:4:info] 调用 startScan(true)
[Jul 09 10:28:31:1752028111.012425:4:info] 进入 fork()
[Jul 09 10:28:31:1752028111.010351:4:info] 在恶意软件扫描期间分叉(11673)以确保连续性。
[Jul 09 10:28:30:1752028110.832462:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/phpseclib/phpseclib/phpseclib/Crypt/RSA/Formats/Keys/XML.php(大小:6.45 KB 内存:105 MB)
[Jul 09 10:28:30:1752028110.584981:4:info] 扫描内容:wp-content/wflogs/ips.php(大小:51 B 内存:105 MB)
[Jul 09 10:28:30:1752028110.582137:2:info] 以每秒 3.55 的速度扫描额外 70 文件的内容
[Jul 09 10:28:30:1752028110.267245:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/guzzlehttp/guzzle/src/RequestOptions.php(大小:10.69 KB 内存:105 MB)
[Jul 09 10:28:29:1752028109.964266:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/phpseclib/phpseclib/phpseclib/Crypt/Salsa20.php(大小:14.45 KB 内存:105 MB)
[Jul 09 10:28:29:1752028109.705245:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/google/auth/src/CredentialSource/UrlSource.php(大小:3.18 KB 内存:105 MB)
[Jul 09 10:28:29:1752028109.421220:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/monolog/monolog/src/Monolog/LogRecord.php(大小:997 B 内存:105 MB)
[Jul 09 10:28:29:1752028109.337396:4:info] 扫描内容:wp-content/plugins/wp-seopress/readme.txt(大小:21.7 KB 内存:105 MB)
[Jul 09 10:28:29:1752028109.334626:2:info] 以每秒 3.52 的速度扫描额外 65 文件的内容
[Jul 09 10:28:28:1752028108.915863:4:info] 扫描内容:wp-content/cache/page_enhanced/www.joyfamily.top/category/family-stories/_index_slash_ssl.html(大小:70.73 KB 内存:105 MB)
[Jul 09 10:28:28:1752028108.625066:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/phpseclib/phpseclib/phpseclib/Math/BigInteger/Engines/BCMath.php(大小:18.63 KB 内存:105 MB)
[Jul 09 10:28:28:1752028108.502552:4:info] 扫描内容:wp-content/plugins/fluent-smtp/app/Hooks/Handlers/ExceptionHandler.php(大小:869 B 内存:105 MB)
[Jul 09 10:28:28:1752028108.352390:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/monolog/monolog/src/Monolog/Handler/Handler.php(大小:1.26 KB 内存:105 MB)
[Jul 09 10:28:28:1752028108.172654:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/guzzlehttp/guzzle/src/Handler/CurlFactoryInterface.php(大小:785 B 内存:105 MB)
[Jul 09 10:28:28:1752028108.015782:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/monolog/monolog/src/Monolog/ResettableInterface.php(大小:1018 B 内存:105 MB)
[Jul 09 10:28:27:1752028107.931324:4:info] 扫描内容:wp-content/plugins/fluent-smtp/assets/libs/chartjs/Chart.BarFunnel.js(大小:6.4 KB 内存:105 MB)
[Jul 09 10:28:27:1752028107.928439:2:info] 以每秒 3.40 的速度扫描额外 58 文件的内容
[Jul 09 10:28:27:1752028107.571015:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/phpseclib/phpseclib/phpseclib/Math/BigInteger/Engines/BCMath/BuiltIn.php(大小:1.19 KB 内存:105 MB)
[Jul 09 10:28:27:1752028107.459798:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/secp160k1.php(大小:1.81 KB 内存:105 MB)
[Jul 09 10:28:27:1752028107.318410:4:info] 扫描内容:wp-content/plugins/fluent-smtp/app/Services/DB/Viocon/VioconException.php(大小:99 B 内存:105 MB)
[Jul 09 10:28:26:1752028106.990765:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/phpseclib/phpseclib/phpseclib/File/ASN1/Maps/OrganizationName.php(大小:560 B 内存:105 MB)
[Jul 09 10:28:26:1752028106.932277:4:info] 扫描内容:wp-content/plugins/fluent-smtp/assets/images/logo.svg(大小:8.32 KB 内存:105 MB)
[Jul 09 10:28:26:1752028106.730303:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/brainpoolP320r1.php(大小:1.49 KB 内存:105 MB)
[Jul 09 10:28:26:1752028106.727597:2:info] 以每秒 3.28 的速度扫描额外 52 文件的内容
[Jul 09 10:28:26:1752028106.430785:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/phpseclib/phpseclib/phpseclib/File/ASN1/Maps/PublicKey.php(大小:533 B 内存:105 MB)
[Jul 09 10:28:26:1752028106.237935:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/Core/CoreTrait.php(大小:4.45 KB 内存:105 MB)
[Jul 09 10:28:25:1752028105.872420:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/phpseclib/phpseclib/phpseclib/Math/BigInteger/Engines/BCMath/Reductions/EvalBarrett.php(大小:2.96 KB 内存:105 MB)
[Jul 09 10:28:25:1752028105.664262:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/Curve25519.php(大小:2.58 KB 内存:105 MB)
[Jul 09 10:28:25:1752028105.513141:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/guzzlehttp/guzzle/src/TransferStats.php(大小:3.27 KB 内存:105 MB)
[Jul 09 10:28:25:1752028105.508434:2:info] 以每秒 3.21 的速度扫描额外 47 文件的内容
[Jul 09 10:28:25:1752028105.188549:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/Support/Contracts/FileInterface.php(大小:616 B 内存:105 MB)
[Jul 09 10:28:24:1752028104.974236:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/google/apiclient-services/src/Gmail/Resource/UsersSettingsCseIdentities.php(大小:6.18 KB 内存:105 MB)
[Jul 09 10:28:24:1752028104.641108:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/guzzlehttp/guzzle/src/Handler/HeaderProcessor.php(大小:1.08 KB 内存:105 MB)
[Jul 09 10:28:24:1752028104.435221:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/phpseclib/phpseclib/phpseclib/File/ASN1/Maps/SubjectPublicKeyInfo.php(大小:750 B 内存:105 MB)
[Jul 09 10:28:24:1752028104.432517:2:info] 以每秒 3.17 的速度扫描额外 43 文件的内容
[Jul 09 10:28:24:1752028104.097694:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/phpseclib/phpseclib/phpseclib/Math/BigInteger/Engines/BCMath/Base.php(大小:2.57 KB 内存:105 MB)
[Jul 09 10:28:23:1752028103.809290:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/phpseclib/phpseclib/phpseclib/Crypt/RSA/PrivateKey.php(大小:15.9 KB 内存:105 MB)
[Jul 09 10:28:23:1752028103.448902:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/firebase/php-jwt/src/JWK.php(大小:11.1 KB 内存:105 MB)
[Jul 09 10:28:23:1752028103.257925:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect571r1.php(大小:1.47 KB 内存:105 MB)
[Jul 09 10:28:23:1752028103.254415:2:info] 以每秒 3.15 的速度扫描额外 39 文件的内容
[Jul 09 10:28:22:1752028102.902698:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/brainpoolP320t1.php(大小:1.54 KB 内存:105 MB)
[Jul 09 10:28:22:1752028102.679785:4:info] 扫描内容:wp-content/languages/plugins/fluent-smtp-zh_CN.l10n.php(大小:45.03 KB 内存:105 MB)
[Jul 09 10:28:22:1752028102.224611:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/phpseclib/phpseclib/phpseclib/Crypt/Common/Formats/Keys/OpenSSH.php(大小:8.67 KB 内存:105 MB)
[Jul 09 10:28:22:1752028102.222454:2:info] 以每秒 3.17 的速度扫描额外 36 文件的内容
[Jul 09 10:28:22:1752028102.028764:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/google/apiclient-services/src/Gmail/ListThreadsResponse.php(大小:2 KB 内存:105 MB)
[Jul 09 10:28:21:1752028101.918816:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/phpseclib/phpseclib/phpseclib/Crypt/RSA/Formats/Keys/PuTTY.php(大小:4 KB 内存:105 MB)
[Jul 09 10:28:21:1752028101.625665:4:info] 扫描内容:wp-content/plugins/fluent-smtp/app/Services/DB/QueryBuilder/NestedCriteria.php(大小:529 B 内存:105 MB)
[Jul 09 10:28:21:1752028101.421749:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/phpseclib/phpseclib/phpseclib/File/ASN1/Maps/AdministrationDomainName.php(大小:1.03 KB 内存:105 MB)
[Jul 09 10:28:21:1752028101.060749:4:info] 扫描内容:wp-content/w3tc-config/master.php(大小:31.48 KB 内存:105 MB)
[Jul 09 10:28:21:1752028101.059052:2:info] 以每秒 3.04 的速度扫描额外 31 文件的内容
[Jul 09 10:28:21:1752028101.018835:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/google/apiclient-services/src/Gmail/ListLabelsResponse.php(大小:1.3 KB 内存:105 MB)
[Jul 09 10:28:20:1752028100.958391:4:info] 扫描内容:wp-content/plugins/fluent-smtp/database/index.php(大小:26 B 内存:105 MB)
[Jul 09 10:28:20:1752028100.767254:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/google/apiclient-services/src/Gmail/BatchDeleteMessagesRequest.php(大小:1.24 KB 内存:105 MB)
[Jul 09 10:28:20:1752028100.447765:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/phpseclib/phpseclib/phpseclib/File/ASN1/Maps/EDIPartyName.php(大小:1.03 KB 内存:105 MB)
[Jul 09 10:28:20:1752028100.026590:4:info] 扫描内容:wp-content/cache/page_enhanced/www.joyfamily.top/_index_slash_ssl.html(大小:90.07 KB 内存:105 MB)
[Jul 09 10:28:20:1752028100.022570:2:info] 以每秒 2.84 的速度扫描额外 26 文件的内容
[Jul 09 10:28:19:1752028099.650221:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/phpseclib/phpseclib/phpseclib/Crypt/PublicKeyLoader.php(大小:3.24 KB 内存:105 MB)
[Jul 09 10:28:19:1752028099.485423:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/prime239v2.php(大小:1.33 KB 内存:105 MB)
[Jul 09 10:28:19:1752028099.048386:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/phpseclib/phpseclib/phpseclib/System/SSH/Agent/Identity.php(大小:9.75 KB 内存:105 MB)
[Jul 09 10:28:18:1752028098.917669:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/prime192v2.php(大小:1.26 KB 内存:105 MB)
[Jul 09 10:28:18:1752028098.879615:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/phpseclib/phpseclib/phpseclib/File/ASN1/Maps/RC2CBCParameter.php(大小:811 B 内存:105 MB)
[Jul 09 10:28:18:1752028098.836794:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/phpseclib/phpseclib/phpseclib/File/ASN1/Maps/ExtensionAttributes.php(大小:736 B 内存:105 MB)
[Jul 09 10:28:18:1752028098.832368:2:info] 以每秒 2.51 的速度扫描额外 20 文件的内容
[Jul 09 10:28:18:1752028098.662357:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/phpseclib/phpseclib/phpseclib/File/ASN1/Maps/KeyIdentifier.php(大小:547 B 内存:105 MB)
[Jul 09 10:28:18:1752028098.248972:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/firebase/php-jwt/src/Key.php(大小:1.52 KB 内存:105 MB)
[Jul 09 10:28:17:1752028097.689619:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/google/apiclient/src/AccessToken/Revoke.php(大小:2.4 KB 内存:105 MB)
[Jul 09 10:28:17:1752028097.685739:2:info] 以每秒 2.50 的速度扫描额外 17 文件的内容
[Jul 09 10:28:17:1752028097.020300:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/phpseclib/phpseclib/phpseclib/File/ASN1.php(大小:59.9 KB 内存:105 MB)
[Jul 09 10:28:16:1752028096.515195:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/monolog/monolog/src/Monolog/Handler/SlackHandler.php(大小:6.87 KB 内存:105 MB)
[Jul 09 10:28:16:1752028096.510923:2:info] 以每秒 2.66 的速度扫描额外 15 文件的内容
[Jul 09 10:28:16:1752028096.365339:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/monolog/monolog/src/Monolog/Handler/SamplingHandler.php(大小:4.61 KB 内存:105 MB)
[Jul 09 10:28:16:1752028096.000387:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/guzzlehttp/guzzle/src/Exception/ServerException.php(大小:213 B 内存:105 MB)
[Jul 09 10:28:15:1752028095.846343:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/monolog/monolog/src/Monolog/Handler/NewRelicHandler.php(大小:6.26 KB 内存:105 MB)
[Jul 09 10:28:15:1752028095.447769:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/phpseclib/phpseclib/phpseclib/File/ASN1/Maps/PKCS9String.php(大小:716 B 内存:105 MB)
[Jul 09 10:28:15:1752028095.444920:2:info] 以每秒 2.41 的速度扫描额外 11 文件的内容
[Jul 09 10:28:15:1752028095.285375:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/phpseclib/phpseclib/phpseclib/Crypt/EC/Formats/Keys/JWK.php(大小:7.21 KB 内存:105 MB)
[Jul 09 10:28:14:1752028094.904087:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/phpseclib/phpseclib/phpseclib/File/ASN1/Maps/SubjectDirectoryAttributes.php(大小:678 B 内存:105 MB)
[Jul 09 10:28:14:1752028094.378153:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/phpseclib/phpseclib/phpseclib/Crypt/Common/Formats/Keys/PKCS1.php(大小:7.91 KB 内存:105 MB)
[Jul 09 10:28:14:1752028094.374797:2:info] 以每秒 2.29 的速度扫描额外 8 文件的内容
[Jul 09 10:28:14:1752028094.111322:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/guzzlehttp/guzzle/src/Cookie/CookieJar.php(大小:9.4 KB 内存:105 MB)
[Jul 09 10:28:13:1752028093.767133:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/phpseclib/phpseclib/phpseclib/File/ASN1/Maps/netscape_comment.php(大小:554 B 内存:103 MB)
[Jul 09 10:28:13:1752028093.254769:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/google/auth/src/Credentials/IAMCredentials.php(大小:2.37 KB 内存:103 MB)
[Jul 09 10:28:13:1752028093.250775:4:info] 扫描内容:wp-content/uploads/wpcode/index.html(大小:0 B 内存:105 MB)
[Jul 09 10:28:13:1752028093.244282:2:info] 以每秒 1.69 的速度扫描额外 4 文件的内容
[Jul 09 10:28:12:1752028092.616066:4:info] 扫描内容:wp-content/plugins/wpjam-basic/public/wpjam-route.php(大小:22.47 KB 内存:103 MB)
[Jul 09 10:28:12:1752028092.090399:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/phpseclib/phpseclib/phpseclib/Crypt/EC/Curves/sect113r2.php(大小:903 B 内存:103 MB)
[Jul 09 10:28:12:1752028092.087249:2:info] 以每秒 1.65 的速度扫描额外 2 文件的内容
[Jul 09 10:28:11:1752028091.488677:4:info] 扫描内容:wp-content/plugins/fluent-smtp/includes/libs/google-api-client/build/vendor/phpseclib/phpseclib/phpseclib/Crypt/EC/Formats/Keys/MontgomeryPublic.php(大小:2 KB 内存:103 MB)
[Jul 09 10:28:10:1752028090.916642:4:info] 扫描内容:wp-content/plugins/fluent-smtp/app/Services/Mailer/Providers/ElasticMail/ValidatorTrait.php(大小:980 B 内存:103 MB)
[Jul 09 10:28:10:1752028090.866508:4:info] 从类型为 object 的「wfsd_engine」获取了一个真实的反序列化值
[Jul 09 10:28:10:1752028090.686076:4:info] 设置 scanRunning 并开始扫描
[Jul 09 10:28:10:1752028090.684744:4:info] 设置错误处理环境
[Jul 09 10:28:10:1752028090.683605:4:info] 请求最大内存
[Jul 09 10:28:10:1752028090.668605:4:info] 根据 cronkey 参数检查已保存的 cronkey
[Jul 09 10:28:10:1752028090.666845:4:info] 检查 cronkey:dc2ebf0ec097171527591a43f8b03db5(预期 dc2ebf0ec097171527591a43f8b03db5)
[Jul 09 10:28:10:1752028090.665535:4:info] 获取已存储的 cronkey 以进行比较。
[Jul 09 10:28:10:1752028090.664279:4:info] 验证启动要求签名。
[Jul 09 10:28:10:1752028090.661779:4:info] 扫描引擎收到要求。
[Jul 09 10:28:08:1752028088.952088:4:info] 扫描进程在分叉后结束。
[Jul 09 10:28:07:1752028087.910814:4:info] 在 URL https://www.joyfamily.top/wp-admin/admin-ajax.php?action=wordfence_doScan&isFork=1&scanMode=custom&cronKey=dc2ebf0ec097171527591a43f8b03db5&signature=8a452e6fcd12a0daaca1687464be2c5459e8d3f163875bb1a2db793d7c1a3427 处使用普通 Ajax 启动 cron
[Jul 09 10:28:07:1752028087.905467:4:info] 扫描开始测试的缓存结果:true
[Jul 09 10:28:07:1752028087.903683:4:info] getMaxExecutionTime() 返回配置值:20
[Jul 09 10:28:07:1752028087.901775:4:info] 从 wf 配置获取 maxExecutionTime 值:20
[Jul 09 10:28:07:1752028087.896591:4:info] 调用 startScan(true)
[Jul 09 10:28:07:1752028087.398426:4:info] 进入 fork()
[Jul 09 10:27:57:1752028077.389773:4:info] 从类型为 object 的「wfsd_engine」获取了一个真实的反序列化值
[Jul 09 10:27:57:1752028077.261110:4:info] 设置 scanRunning 并开始扫描
[Jul 09 10:27:57:1752028077.259572:4:info] 设置错误处理环境
[Jul 09 10:27:57:1752028077.258440:4:info] 请求最大内存
[Jul 09 10:27:57:1752028077.249306:4:info] 根据 cronkey 参数检查已保存的 cronkey
[Jul 09 10:27:57:1752028077.247188:4:info] 检查 cronkey:78cea1b4ec86582284bba8f08e68a800(预期 78cea1b4ec86582284bba8f08e68a800)
[Jul 09 10:27:57:1752028077.245140:4:info] 获取已存储的 cronkey 以进行比较。
[Jul 09 10:27:57:1752028077.243921:4:info] 验证启动要求签名。
[Jul 09 10:27:57:1752028077.240566:4:info] 扫描引擎收到要求。
[Jul 09 10:27:55:1752028075.868982:4:info] 扫描进程在分叉后结束。
[Jul 09 10:27:54:1752028074.854171:4:info] 在 URL https://www.joyfamily.top/wp-admin/admin-ajax.php?action=wordfence_doScan&isFork=1&scanMode=custom&cronKey=78cea1b4ec86582284bba8f08e68a800&signature=0706cc31d30d3f5eb274e61b6512e12bf86c9005b9b793b63be71689c4f1be4a 处使用普通 Ajax 启动 cron
[Jul 09 10:27:54:1752028074.848451:4:info] 扫描开始测试的缓存结果:true
[Jul 09 10:27:54:1752028074.845769:4:info] getMaxExecutionTime() 返回配置值:20
[Jul 09 10:27:54:1752028074.844004:4:info] 从 wf 配置获取 maxExecutionTime 值:20
[Jul 09 10:27:54:1752028074.836965:4:info] 调用 startScan(true)
[Jul 09 10:27:54:1752028074.443450:4:info] 进入 fork()
[Jul 09 10:27:54:1752028074.441496:4:info] 在恶意软件扫描期间分叉,以确保连续性。
[Jul 09 10:27:54:1752028074.435991:2:info] 开始扫描文件内容
[Jul 09 10:27:52:1752028072.066724:4:info] 调用 Wordfence API v2.26:https://noc1.wordfence.com/v2.26/?k=b0f70517bc7866584f4d04d6053f431e84c4e486d12e1a5cdf7c03064d133dfe6e53f4841491c3cb9fbabb9a683e1a682600ae20b05d8a5d849ec48f69245a1c&s=eyJ3cCI6IjYuOC4xIiwid2YiOiI4LjAuNSIsIm1zIjpmYWxzZSwiaCI6Imh0dHBzOlwvXC93d3cuam95ZmFtaWx5LnRvcCIsInNzbHYiOjI2OTQ4ODM4MywicHYiOiI4LjIuMjgiLCJwdCI6ImZwbS1mY2dpIiwiY3YiOiI3Ljc0LjAiLCJjcyI6Ik9wZW5TU0xcLzEuMS4xbyIsInN2IjoibmdpbnhcLzEuMjguMCIsImR2IjoiNS43LjQ0LWxvZyIsImxhbmciOiJ6aF9DTiJ9&action=get_patterns
[Jul 09 10:27:52:1752028072.046477:10:info] SUM_START:扫描文件内容,查找域名拦截列表上的 URL
[Jul 09 10:27:52:1752028072.038136:10:info] SUM_START:扫描文件内容以查找感染和漏洞
[Jul 09 10:27:52:1752028072.021995:10:info] SUM_ENDOK:检查是否有可公开访问的配置文件、备份文件和日志
[Jul 09 10:27:52:1752028072.020435:4:info] Testing wp-content/debug.log
[Jul 09 10:27:52:1752028072.019138:4:info] Testing wp-config.orig
[Jul 09 10:27:52:1752028072.017513:4:info] Testing wp-config.original
[Jul 09 10:27:52:1752028072.016298:4:info] Testing wp-config.txt
[Jul 09 10:27:52:1752028072.015061:4:info] Testing wp-config.php.orig
[Jul 09 10:27:52:1752028072.013372:4:info] Testing wp-config.php.original
[Jul 09 10:27:52:1752028072.011993:4:info] Testing wp-config.php.old
[Jul 09 10:27:52:1752028072.010159:4:info] Testing wp-config.php.swp
[Jul 09 10:27:52:1752028072.008242:4:info] Testing wp-config.php_bak
[Jul 09 10:27:52:1752028072.006836:4:info] Testing wp-config.save
[Jul 09 10:27:52:1752028072.005137:4:info] Testing wp-config.bak
[Jul 09 10:27:52:1752028072.003965:4:info] Testing .wp-config.php.swp
[Jul 09 10:27:52:1752028072.002841:4:info] Testing wp-config.old
[Jul 09 10:27:52:1752028072.001356:4:info] Testing wp-config.php~
[Jul 09 10:27:51:1752028071.999801:4:info] Testing #wp-config.php#
[Jul 09 10:27:51:1752028071.998651:4:info] Testing wp-config.php.save
[Jul 09 10:27:51:1752028071.996965:4:info] Testing wp-config.php.swo
[Jul 09 10:27:51:1752028071.994778:4:info] Testing wp-config.php.bak.a2
[Jul 09 10:27:51:1752028071.992712:4:info] Testing wp-config.php.bak
[Jul 09 10:27:51:1752028071.937625:4:info] Testing .user.ini
[Jul 09 10:27:51:1752028071.935377:4:info] Testing .env
[Jul 09 10:27:51:1752028071.890114:10:info] SUM_START:检查是否有可公开访问的配置文件、备份文件和日志
[Jul 09 10:27:51:1752028071.846407:10:info] SUM_ENDOK:扫描已知恶意软件文件
[Jul 09 10:27:51:1752028071.363182:4:info] 调用 Wordfence API v2.26:https://noc1.wordfence.com/v2.26/?k=b0f70517bc7866584f4d04d6053f431e84c4e486d12e1a5cdf7c03064d133dfe6e53f4841491c3cb9fbabb9a683e1a682600ae20b05d8a5d849ec48f69245a1c&s=eyJ3cCI6IjYuOC4xIiwid2YiOiI4LjAuNSIsIm1zIjpmYWxzZSwiaCI6Imh0dHBzOlwvXC93d3cuam95ZmFtaWx5LnRvcCIsInNzbHYiOjI2OTQ4ODM4MywicHYiOiI4LjIuMjgiLCJwdCI6ImZwbS1mY2dpIiwiY3YiOiI3Ljc0LjAiLCJjcyI6Ik9wZW5TU0xcLzEuMS4xbyIsInN2IjoibmdpbnhcLzEuMjguMCIsImR2IjoiNS43LjQ0LWxvZyIsImxhbmciOiJ6aF9DTiJ9&action=check_possible_malware
[Jul 09 10:27:51:1752028071.346564:10:info] SUM_ENDOK:扫描 wp-admin 和 wp-includes 中的未知文件
[Jul 09 10:27:51:1752028071.334158:10:info] SUM_ENDOK:将 WordPress 文件核心与存储库中的原件进行比较
[Jul 09 10:27:51:1752028071.332306:2:info] 分析了 13343 文件,其中包含 219.52 MB 数据。
[Jul 09 10:27:51:1752028071.328349:4:info] 处理待处理问题
[Jul 09 10:27:51:1752028071.284720:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-trackback.php (Mem:105.0M)
[Jul 09 10:27:51:1752028071.269429:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-signup.php (Mem:105.0M)
[Jul 09 10:27:51:1752028071.255393:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-settings.php (Mem:105.0M)
[Jul 09 10:27:51:1752028071.241543:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-mail.php (Mem:105.0M)
[Jul 09 10:27:51:1752028071.225982:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-login.php (Mem:105.0M)
[Jul 09 10:27:51:1752028071.212861:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-load.php (Mem:105.0M)
[Jul 09 10:27:51:1752028071.199560:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-links-opml.php (Mem:105.0M)
[Jul 09 10:27:51:1752028071.186151:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/wp-diff.php (Mem:105.0M)
[Jul 09 10:27:51:1752028071.173071:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/wp-db.php (Mem:105.0M)
[Jul 09 10:27:51:1752028071.156384:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/widgets.php (Mem:105.0M)
[Jul 09 10:27:51:1752028071.142584:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/widgets/class-wp-widget-text.php (Mem:105.0M)
[Jul 09 10:27:51:1752028071.128534:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/widgets/class-wp-widget-tag-cloud.php (Mem:105.0M)
[Jul 09 10:27:51:1752028071.115413:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/widgets/class-wp-widget-search.php (Mem:105.0M)
[Jul 09 10:27:51:1752028071.102308:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/widgets/class-wp-widget-rss.php (Mem:105.0M)
[Jul 09 10:27:51:1752028071.089082:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/widgets/class-wp-widget-recent-posts.php (Mem:105.0M)
[Jul 09 10:27:51:1752028071.075193:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/widgets/class-wp-widget-recent-comments.php (Mem:105.0M)
[Jul 09 10:27:51:1752028071.062209:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/widgets/class-wp-widget-pages.php (Mem:105.0M)
[Jul 09 10:27:51:1752028071.048837:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/widgets/class-wp-widget-meta.php (Mem:105.0M)
[Jul 09 10:27:51:1752028071.035404:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/widgets/class-wp-widget-media.php (Mem:105.0M)
[Jul 09 10:27:51:1752028071.022401:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/widgets/class-wp-widget-media-video.php (Mem:105.0M)
[Jul 09 10:27:51:1752028071.008917:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/widgets/class-wp-widget-media-image.php (Mem:105.0M)
[Jul 09 10:27:50:1752028070.995180:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/widgets/class-wp-widget-media-gallery.php (Mem:105.0M)
[Jul 09 10:27:50:1752028070.981994:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/widgets/class-wp-widget-media-audio.php (Mem:105.0M)
[Jul 09 10:27:50:1752028070.968936:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/widgets/class-wp-widget-links.php (Mem:105.0M)
[Jul 09 10:27:50:1752028070.955925:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/widgets/class-wp-widget-custom-html.php (Mem:105.0M)
[Jul 09 10:27:50:1752028070.943072:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/widgets/class-wp-widget-categories.php (Mem:105.0M)
[Jul 09 10:27:50:1752028070.930327:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/widgets/class-wp-widget-calendar.php (Mem:105.0M)
[Jul 09 10:27:50:1752028070.917503:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/widgets/class-wp-widget-block.php (Mem:105.0M)
[Jul 09 10:27:50:1752028070.904285:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/widgets/class-wp-widget-archives.php (Mem:105.0M)
[Jul 09 10:27:50:1752028070.891226:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/widgets/class-wp-nav-menu-widget.php (Mem:105.0M)
[Jul 09 10:27:50:1752028070.876997:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/version.php (Mem:105.0M)
[Jul 09 10:27:50:1752028070.863599:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/vars.php (Mem:105.0M)
[Jul 09 10:27:50:1752028070.843700:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/user.php (Mem:105.0M)
[Jul 09 10:27:50:1752028070.828894:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/update.php (Mem:105.0M)
[Jul 09 10:27:50:1752028070.810611:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/theme.php (Mem:105.0M)
[Jul 09 10:27:50:1752028070.797028:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/theme.json (Mem:105.0M)
[Jul 09 10:27:50:1752028070.783471:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/theme-templates.php (Mem:105.0M)
[Jul 09 10:27:50:1752028070.769469:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/theme-previews.php (Mem:105.0M)
[Jul 09 10:27:50:1752028070.756040:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/theme-i18n.json (Mem:105.0M)
[Jul 09 10:27:50:1752028070.742480:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/theme-compat/sidebar.php (Mem:105.0M)
[Jul 09 10:27:50:1752028070.728774:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/theme-compat/header.php (Mem:105.0M)
[Jul 09 10:27:50:1752028070.715458:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/theme-compat/header-embed.php (Mem:105.0M)
[Jul 09 10:27:50:1752028070.702077:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/theme-compat/footer.php (Mem:105.0M)
[Jul 09 10:27:50:1752028070.689476:2:info] 分析了 13300 文件,其中包含 218.8 MB 的数据。
[Jul 09 10:27:50:1752028070.686531:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/theme-compat/footer-embed.php (Mem:105.0M)
[Jul 09 10:27:50:1752028070.672474:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/theme-compat/embed.php (Mem:105.0M)
[Jul 09 10:27:50:1752028070.659352:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/theme-compat/embed-content.php (Mem:105.0M)
[Jul 09 10:27:50:1752028070.646027:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/theme-compat/embed-404.php (Mem:105.0M)
[Jul 09 10:27:50:1752028070.633507:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/theme-compat/comments.php (Mem:105.0M)
[Jul 09 10:27:50:1752028070.618649:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/template.php (Mem:105.0M)
[Jul 09 10:27:50:1752028070.605973:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/template-loader.php (Mem:105.0M)
[Jul 09 10:27:50:1752028070.593308:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/template-canvas.php (Mem:105.0M)
[Jul 09 10:27:50:1752028070.572442:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/taxonomy.php (Mem:105.0M)
[Jul 09 10:27:50:1752028070.558707:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/style-engine.php (Mem:105.0M)
[Jul 09 10:27:50:1752028070.543789:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/style-engine/class-wp-style-engine.php (Mem:105.0M)
[Jul 09 10:27:50:1752028070.530424:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/style-engine/class-wp-style-engine-processor.php (Mem:105.0M)
[Jul 09 10:27:50:1752028070.517352:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/style-engine/class-wp-style-engine-css-rules-store.php (Mem:105.0M)
[Jul 09 10:27:50:1752028070.503734:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/style-engine/class-wp-style-engine-css-rule.php (Mem:105.0M)
[Jul 09 10:27:50:1752028070.490431:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/style-engine/class-wp-style-engine-css-declarations.php (Mem:105.0M)
[Jul 09 10:27:50:1752028070.476539:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/spl-autoload-compat.php (Mem:105.0M)
[Jul 09 10:27:50:1752028070.462618:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/speculative-loading.php (Mem:105.0M)
[Jul 09 10:27:50:1752028070.450007:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/sodium_compat/src/SodiumException.php (Mem:105.0M)
[Jul 09 10:27:50:1752028070.437216:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/sodium_compat/src/PHP52/SplFixedArray.php (Mem:105.0M)
[Jul 09 10:27:50:1752028070.420933:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/sodium_compat/src/File.php (Mem:105.0M)
[Jul 09 10:27:50:1752028070.404554:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/sodium_compat/src/Crypto32.php (Mem:105.0M)
[Jul 09 10:27:50:1752028070.388749:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/sodium_compat/src/Crypto.php (Mem:105.0M)
[Jul 09 10:27:50:1752028070.374311:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/sodium_compat/src/Core32/XSalsa20.php (Mem:105.0M)
[Jul 09 10:27:50:1752028070.361694:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/sodium_compat/src/Core32/XChaCha20.php (Mem:105.0M)
[Jul 09 10:27:50:1752028070.347881:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/sodium_compat/src/Core32/X25519.php (Mem:105.0M)
[Jul 09 10:27:50:1752028070.329029:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/sodium_compat/src/Core32/Util.php (Mem:105.0M)
[Jul 09 10:27:50:1752028070.315548:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/sodium_compat/src/Core32/SipHash.php (Mem:105.0M)
[Jul 09 10:27:50:1752028070.301946:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/sodium_compat/src/Core32/SecretStream/State.php (Mem:105.0M)
[Jul 09 10:27:50:1752028070.288082:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/sodium_compat/src/Core32/Salsa20.php (Mem:105.0M)
[Jul 09 10:27:50:1752028070.273348:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/sodium_compat/src/Core32/Poly1305.php (Mem:105.0M)
[Jul 09 10:27:50:1752028070.259240:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/sodium_compat/src/Core32/Poly1305/State.php (Mem:105.0M)
[Jul 09 10:27:50:1752028070.243608:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/sodium_compat/src/Core32/Int64.php (Mem:105.0M)
[Jul 09 10:27:50:1752028070.228708:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/sodium_compat/src/Core32/Int32.php (Mem:105.0M)
[Jul 09 10:27:50:1752028070.214627:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/sodium_compat/src/Core32/HSalsa20.php (Mem:105.0M)
[Jul 09 10:27:50:1752028070.201424:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/sodium_compat/src/Core32/HChaCha20.php (Mem:105.0M)
[Jul 09 10:27:50:1752028070.187950:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/sodium_compat/src/Core32/Ed25519.php (Mem:105.0M)
[Jul 09 10:27:50:1752028070.166153:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/sodium_compat/src/Core32/Curve25519.php (Mem:105.0M)
[Jul 09 10:27:50:1752028070.153405:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/sodium_compat/src/Core32/Curve25519/README.md (Mem:105.0M)
[Jul 09 10:27:50:1752028070.135623:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/sodium_compat/src/Core32/Curve25519/H.php (Mem:105.0M)
[Jul 09 10:27:50:1752028070.122411:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/sodium_compat/src/Core32/Curve25519/Ge/Precomp.php (Mem:105.0M)
[Jul 09 10:27:50:1752028070.109093:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/sodium_compat/src/Core32/Curve25519/Ge/P3.php (Mem:105.0M)
[Jul 09 10:27:50:1752028070.095639:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/sodium_compat/src/Core32/Curve25519/Ge/P2.php (Mem:105.0M)
[Jul 09 10:27:50:1752028070.082060:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/sodium_compat/src/Core32/Curve25519/Ge/P1p1.php (Mem:105.0M)
[Jul 09 10:27:50:1752028070.068437:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/sodium_compat/src/Core32/Curve25519/Ge/Cached.php (Mem:105.0M)
[Jul 09 10:27:50:1752028070.055006:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/sodium_compat/src/Core32/Curve25519/Fe.php (Mem:105.0M)
[Jul 09 10:27:50:1752028070.041341:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/sodium_compat/src/Core32/ChaCha20.php (Mem:105.0M)
[Jul 09 10:27:50:1752028070.028293:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/sodium_compat/src/Core32/ChaCha20/IetfCtx.php (Mem:105.0M)
[Jul 09 10:27:50:1752028070.008480:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/sodium_compat/src/Core32/ChaCha20/Ctx.php (Mem:105.0M)
[Jul 09 10:27:49:1752028069.994367:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/sodium_compat/src/Core32/BLAKE2b.php (Mem:105.0M)
[Jul 09 10:27:49:1752028069.981138:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/sodium_compat/src/Core/XSalsa20.php (Mem:105.0M)
[Jul 09 10:27:49:1752028069.968016:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/sodium_compat/src/Core/XChaCha20.php (Mem:105.0M)
[Jul 09 10:27:49:1752028069.954549:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/sodium_compat/src/Core/X25519.php (Mem:105.0M)
[Jul 09 10:27:49:1752028069.940362:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/sodium_compat/src/Core/Util.php (Mem:105.0M)
[Jul 09 10:27:49:1752028069.926726:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/sodium_compat/src/Core/SipHash.php (Mem:105.0M)
[Jul 09 10:27:49:1752028069.913422:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/sodium_compat/src/Core/SecretStream/State.php (Mem:105.0M)
[Jul 09 10:27:49:1752028069.899426:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/sodium_compat/src/Core/Salsa20.php (Mem:105.0M)
[Jul 09 10:27:49:1752028069.884624:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/sodium_compat/src/Core/Ristretto255.php (Mem:105.0M)
[Jul 09 10:27:49:1752028069.869975:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/sodium_compat/src/Core/Poly1305.php (Mem:105.0M)
[Jul 09 10:27:49:1752028069.855747:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/sodium_compat/src/Core/Poly1305/State.php (Mem:105.0M)
[Jul 09 10:27:49:1752028069.841904:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/sodium_compat/src/Core/HSalsa20.php (Mem:105.0M)
[Jul 09 10:27:49:1752028069.828447:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/sodium_compat/src/Core/HChaCha20.php (Mem:105.0M)
[Jul 09 10:27:49:1752028069.814337:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/sodium_compat/src/Core/Ed25519.php (Mem:105.0M)
[Jul 09 10:27:49:1752028069.793840:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/sodium_compat/src/Core/Curve25519.php (Mem:105.0M)
[Jul 09 10:27:49:1752028069.780088:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/sodium_compat/src/Core/Curve25519/README.md (Mem:105.0M)
[Jul 09 10:27:49:1752028069.762755:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/sodium_compat/src/Core/Curve25519/H.php (Mem:105.0M)
[Jul 09 10:27:49:1752028069.750021:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/sodium_compat/src/Core/Curve25519/Ge/Precomp.php (Mem:105.0M)
[Jul 09 10:27:49:1752028069.737269:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/sodium_compat/src/Core/Curve25519/Ge/P3.php (Mem:105.0M)
[Jul 09 10:27:49:1752028069.724508:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/sodium_compat/src/Core/Curve25519/Ge/P2.php (Mem:105.0M)
[Jul 09 10:27:49:1752028069.711633:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/sodium_compat/src/Core/Curve25519/Ge/P1p1.php (Mem:105.0M)
[Jul 09 10:27:49:1752028069.698431:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/sodium_compat/src/Core/Curve25519/Ge/Cached.php (Mem:105.0M)
[Jul 09 10:27:49:1752028069.684330:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/sodium_compat/src/Core/Curve25519/Fe.php (Mem:105.0M)
[Jul 09 10:27:49:1752028069.669230:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/sodium_compat/src/Core/ChaCha20.php (Mem:105.0M)
[Jul 09 10:27:49:1752028069.655571:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/sodium_compat/src/Core/ChaCha20/IetfCtx.php (Mem:105.0M)
[Jul 09 10:27:49:1752028069.642779:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/sodium_compat/src/Core/ChaCha20/Ctx.php (Mem:105.0M)
[Jul 09 10:27:49:1752028069.628901:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/sodium_compat/src/Core/Base64/UrlSafe.php (Mem:105.0M)
[Jul 09 10:27:49:1752028069.615802:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/sodium_compat/src/Core/Base64/Original.php (Mem:105.0M)
[Jul 09 10:27:49:1752028069.599305:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/sodium_compat/src/Core/BLAKE2b.php (Mem:105.0M)
[Jul 09 10:27:49:1752028069.585384:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/sodium_compat/src/Core/AES.php (Mem:105.0M)
[Jul 09 10:27:49:1752028069.571423:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/sodium_compat/src/Core/AES/KeySchedule.php (Mem:105.0M)
[Jul 09 10:27:49:1752028069.558438:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/sodium_compat/src/Core/AES/Expanded.php (Mem:105.0M)
[Jul 09 10:27:49:1752028069.545293:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/sodium_compat/src/Core/AES/Block.php (Mem:105.0M)
[Jul 09 10:27:49:1752028069.532172:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/sodium_compat/src/Core/AEGIS256.php (Mem:105.0M)
[Jul 09 10:27:49:1752028069.518996:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/sodium_compat/src/Core/AEGIS128L.php (Mem:105.0M)
[Jul 09 10:27:49:1752028069.505484:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/sodium_compat/src/Core/AEGIS/State256.php (Mem:105.0M)
[Jul 09 10:27:49:1752028069.491974:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/sodium_compat/src/Core/AEGIS/State128L.php (Mem:105.0M)
[Jul 09 10:27:49:1752028069.470255:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/sodium_compat/src/Compat.php (Mem:105.0M)
[Jul 09 10:27:49:1752028069.456085:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/sodium_compat/namespaced/File.php (Mem:105.0M)
[Jul 09 10:27:49:1752028069.442978:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/sodium_compat/namespaced/Crypto.php (Mem:105.0M)
[Jul 09 10:27:49:1752028069.430207:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/sodium_compat/namespaced/Core/Xsalsa20.php (Mem:105.0M)
[Jul 09 10:27:49:1752028069.417247:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/sodium_compat/namespaced/Core/XChaCha20.php (Mem:105.0M)
[Jul 09 10:27:49:1752028069.403540:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/sodium_compat/namespaced/Core/X25519.php (Mem:105.0M)
[Jul 09 10:27:49:1752028069.390532:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/sodium_compat/namespaced/Core/Util.php (Mem:105.0M)
[Jul 09 10:27:49:1752028069.376416:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/sodium_compat/namespaced/Core/SipHash.php (Mem:105.0M)
[Jul 09 10:27:49:1752028069.362580:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/sodium_compat/namespaced/Core/Salsa20.php (Mem:105.0M)
[Jul 09 10:27:49:1752028069.349008:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/sodium_compat/namespaced/Core/Poly1305.php (Mem:105.0M)
[Jul 09 10:27:49:1752028069.336140:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/sodium_compat/namespaced/Core/Poly1305/State.php (Mem:105.0M)
[Jul 09 10:27:49:1752028069.322925:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/sodium_compat/namespaced/Core/HSalsa20.php (Mem:105.0M)
[Jul 09 10:27:49:1752028069.309877:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/sodium_compat/namespaced/Core/HChaCha20.php (Mem:105.0M)
[Jul 09 10:27:49:1752028069.296728:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/sodium_compat/namespaced/Core/Ed25519.php (Mem:105.0M)
[Jul 09 10:27:49:1752028069.283597:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/sodium_compat/namespaced/Core/Curve25519.php (Mem:105.0M)
[Jul 09 10:27:49:1752028069.270833:2:info] 分析了 13200 文件,其中包含 217.33 MB 的数据。
[Jul 09 10:27:49:1752028069.267769:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/sodium_compat/namespaced/Core/Curve25519/H.php (Mem:105.0M)
[Jul 09 10:27:49:1752028069.254317:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/sodium_compat/namespaced/Core/Curve25519/Ge/Precomp.php (Mem:105.0M)
[Jul 09 10:27:49:1752028069.241162:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/sodium_compat/namespaced/Core/Curve25519/Ge/P3.php (Mem:105.0M)
[Jul 09 10:27:49:1752028069.227835:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/sodium_compat/namespaced/Core/Curve25519/Ge/P2.php (Mem:105.0M)
[Jul 09 10:27:49:1752028069.214861:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/sodium_compat/namespaced/Core/Curve25519/Ge/P1p1.php (Mem:105.0M)
[Jul 09 10:27:49:1752028069.201902:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/sodium_compat/namespaced/Core/Curve25519/Ge/Cached.php (Mem:105.0M)
[Jul 09 10:27:49:1752028069.188804:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/sodium_compat/namespaced/Core/Curve25519/Fe.php (Mem:105.0M)
[Jul 09 10:27:49:1752028069.175158:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/sodium_compat/namespaced/Core/ChaCha20.php (Mem:105.0M)
[Jul 09 10:27:49:1752028069.161616:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/sodium_compat/namespaced/Core/ChaCha20/IetfCtx.php (Mem:105.0M)
[Jul 09 10:27:49:1752028069.148065:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/sodium_compat/namespaced/Core/ChaCha20/Ctx.php (Mem:105.0M)
[Jul 09 10:27:49:1752028069.134047:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/sodium_compat/namespaced/Core/BLAKE2b.php (Mem:105.0M)
[Jul 09 10:27:49:1752028069.118548:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/sodium_compat/namespaced/Compat.php (Mem:105.0M)
[Jul 09 10:27:49:1752028069.104451:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/sodium_compat/lib/stream-xchacha20.php (Mem:105.0M)
[Jul 09 10:27:49:1752028069.090332:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/sodium_compat/lib/sodium_compat.php (Mem:105.0M)
[Jul 09 10:27:49:1752028069.077244:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/sodium_compat/lib/ristretto255.php (Mem:105.0M)
[Jul 09 10:27:49:1752028069.063441:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/sodium_compat/lib/php84compat_const.php (Mem:105.0M)
[Jul 09 10:27:49:1752028069.046539:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/sodium_compat/lib/php84compat.php (Mem:105.0M)
[Jul 09 10:27:49:1752028069.033788:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/sodium_compat/lib/php72compat_const.php (Mem:105.0M)
[Jul 09 10:27:49:1752028069.018474:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/sodium_compat/lib/php72compat.php (Mem:105.0M)
[Jul 09 10:27:49:1752028069.005282:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/sodium_compat/lib/namespaced.php (Mem:105.0M)
[Jul 09 10:27:48:1752028068.992186:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/sodium_compat/lib/constants.php (Mem:105.0M)
[Jul 09 10:27:48:1752028068.977286:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/sodium_compat/composer.json (Mem:105.0M)
[Jul 09 10:27:48:1752028068.964243:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/sodium_compat/autoload.php (Mem:105.0M)
[Jul 09 10:27:48:1752028068.950039:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/sodium_compat/autoload-php7.php (Mem:105.0M)
[Jul 09 10:27:48:1752028068.936731:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/sodium_compat/LICENSE (Mem:105.0M)
[Jul 09 10:27:48:1752028068.923028:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/sitemaps.php (Mem:105.0M)
[Jul 09 10:27:48:1752028068.910108:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/sitemaps/providers/class-wp-sitemaps-users.php (Mem:105.0M)
[Jul 09 10:27:48:1752028068.896811:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/sitemaps/providers/class-wp-sitemaps-taxonomies.php (Mem:105.0M)
[Jul 09 10:27:48:1752028068.883505:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/sitemaps/providers/class-wp-sitemaps-posts.php (Mem:105.0M)
[Jul 09 10:27:48:1752028068.869788:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/sitemaps/class-wp-sitemaps.php (Mem:105.0M)
[Jul 09 10:27:48:1752028068.855797:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/sitemaps/class-wp-sitemaps-stylesheet.php (Mem:105.0M)
[Jul 09 10:27:48:1752028068.841661:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/sitemaps/class-wp-sitemaps-renderer.php (Mem:105.0M)
[Jul 09 10:27:48:1752028068.828845:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/sitemaps/class-wp-sitemaps-registry.php (Mem:105.0M)
[Jul 09 10:27:48:1752028068.815723:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/sitemaps/class-wp-sitemaps-provider.php (Mem:105.0M)
[Jul 09 10:27:48:1752028068.802728:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/sitemaps/class-wp-sitemaps-index.php (Mem:105.0M)
[Jul 09 10:27:48:1752028068.788268:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/shortcodes.php (Mem:105.0M)
[Jul 09 10:27:48:1752028068.774612:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/session.php (Mem:105.0M)
[Jul 09 10:27:48:1752028068.755323:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/script-modules.php (Mem:105.0M)
[Jul 09 10:27:48:1752028068.736013:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/script-loader.php (Mem:105.0M)
[Jul 09 10:27:48:1752028068.721650:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/rss.php (Mem:105.0M)
[Jul 09 10:27:48:1752028068.708558:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/rss-functions.php (Mem:105.0M)
[Jul 09 10:27:48:1752028068.694521:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/robots-template.php (Mem:105.0M)
[Jul 09 10:27:48:1752028068.680288:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/rewrite.php (Mem:105.0M)
[Jul 09 10:27:48:1752028068.664710:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/revision.php (Mem:105.0M)
[Jul 09 10:27:48:1752028068.647074:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/rest-api.php (Mem:105.0M)
[Jul 09 10:27:48:1752028068.633529:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/rest-api/search/class-wp-rest-term-search-handler.php (Mem:105.0M)
[Jul 09 10:27:48:1752028068.620455:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/rest-api/search/class-wp-rest-search-handler.php (Mem:105.0M)
[Jul 09 10:27:48:1752028068.606497:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/rest-api/search/class-wp-rest-post-search-handler.php (Mem:105.0M)
[Jul 09 10:27:48:1752028068.593274:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/rest-api/search/class-wp-rest-post-format-search-handler.php (Mem:105.0M)
[Jul 09 10:27:48:1752028068.579526:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/rest-api/fields/class-wp-rest-user-meta-fields.php (Mem:105.0M)
[Jul 09 10:27:48:1752028068.566513:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/rest-api/fields/class-wp-rest-term-meta-fields.php (Mem:105.0M)
[Jul 09 10:27:48:1752028068.553568:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/rest-api/fields/class-wp-rest-post-meta-fields.php (Mem:105.0M)
[Jul 09 10:27:48:1752028068.539880:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/rest-api/fields/class-wp-rest-meta-fields.php (Mem:105.0M)
[Jul 09 10:27:48:1752028068.527113:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/rest-api/fields/class-wp-rest-comment-meta-fields.php (Mem:105.0M)
[Jul 09 10:27:48:1752028068.511700:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/rest-api/endpoints/class-wp-rest-widgets-controller.php (Mem:105.0M)
[Jul 09 10:27:48:1752028068.492931:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/rest-api/endpoints/class-wp-rest-widget-types-controller.php (Mem:105.0M)
[Jul 09 10:27:48:1752028068.477444:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/rest-api/endpoints/class-wp-rest-users-controller.php (Mem:105.0M)
[Jul 09 10:27:48:1752028068.462729:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/rest-api/endpoints/class-wp-rest-url-details-controller.php (Mem:105.0M)
[Jul 09 10:27:48:1752028068.448503:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/rest-api/endpoints/class-wp-rest-themes-controller.php (Mem:105.0M)
[Jul 09 10:27:48:1752028068.434095:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/rest-api/endpoints/class-wp-rest-terms-controller.php (Mem:105.0M)
[Jul 09 10:27:48:1752028068.419453:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/rest-api/endpoints/class-wp-rest-templates-controller.php (Mem:105.0M)
[Jul 09 10:27:48:1752028068.406365:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/rest-api/endpoints/class-wp-rest-template-revisions-controller.php (Mem:105.0M)
[Jul 09 10:27:48:1752028068.392372:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/rest-api/endpoints/class-wp-rest-template-autosaves-controller.php (Mem:105.0M)
[Jul 09 10:27:48:1752028068.378777:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/rest-api/endpoints/class-wp-rest-taxonomies-controller.php (Mem:105.0M)
[Jul 09 10:27:48:1752028068.365237:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/rest-api/endpoints/class-wp-rest-site-health-controller.php (Mem:105.0M)
[Jul 09 10:27:48:1752028068.351824:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/rest-api/endpoints/class-wp-rest-sidebars-controller.php (Mem:105.0M)
[Jul 09 10:27:48:1752028068.337822:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/rest-api/endpoints/class-wp-rest-settings-controller.php (Mem:105.0M)
[Jul 09 10:27:48:1752028068.323577:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/rest-api/endpoints/class-wp-rest-search-controller.php (Mem:105.0M)
[Jul 09 10:27:48:1752028068.309481:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/rest-api/endpoints/class-wp-rest-revisions-controller.php (Mem:105.0M)
[Jul 09 10:27:48:1752028068.292342:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/rest-api/endpoints/class-wp-rest-posts-controller.php (Mem:105.0M)
[Jul 09 10:27:48:1752028068.278340:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/rest-api/endpoints/class-wp-rest-post-types-controller.php (Mem:105.0M)
[Jul 09 10:27:48:1752028068.264934:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/rest-api/endpoints/class-wp-rest-post-statuses-controller.php (Mem:105.0M)
[Jul 09 10:27:48:1752028068.249851:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/rest-api/endpoints/class-wp-rest-plugins-controller.php (Mem:105.0M)
[Jul 09 10:27:48:1752028068.236545:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/rest-api/endpoints/class-wp-rest-pattern-directory-controller.php (Mem:107.0M)
[Jul 09 10:27:48:1752028068.148144:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/rest-api/endpoints/class-wp-rest-navigation-fallback-controller.php (Mem:105.0M)
[Jul 09 10:27:48:1752028068.134465:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/rest-api/endpoints/class-wp-rest-menus-controller.php (Mem:105.0M)
[Jul 09 10:27:48:1752028068.118655:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/rest-api/endpoints/class-wp-rest-menu-locations-controller.php (Mem:105.0M)
[Jul 09 10:27:48:1752028068.104089:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/rest-api/endpoints/class-wp-rest-menu-items-controller.php (Mem:105.0M)
[Jul 09 10:27:48:1752028068.090519:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/rest-api/endpoints/class-wp-rest-global-styles-revisions-controller.php (Mem:105.0M)
[Jul 09 10:27:48:1752028068.076277:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/rest-api/endpoints/class-wp-rest-global-styles-controller.php (Mem:105.0M)
[Jul 09 10:27:48:1752028068.062739:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/rest-api/endpoints/class-wp-rest-font-families-controller.php (Mem:105.0M)
[Jul 09 10:27:48:1752028068.046960:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/rest-api/endpoints/class-wp-rest-font-faces-controller.php (Mem:105.0M)
[Jul 09 10:27:48:1752028068.032526:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/rest-api/endpoints/class-wp-rest-font-collections-controller.php (Mem:105.0M)
[Jul 09 10:27:48:1752028068.019038:4:info] 扫描: /www/wwwroot/www.joyfamily.top/wp-includes/rest-api/endpoints/class-wp-rest-edit-site-export-controller.php (Mem:105.0M)
[Jul 09 10:22:20:1752027740.519088:10:info] SUM_START:扫描 wp-admin 和 wp-includes 中的未知文件
[Jul 09 10:22:20:1752027740.508233:10:info] SUM_START:扫描已知恶意软件文件
[Jul 09 10:22:20:1752027740.501811:10:info] SUM_DISABLED:跳过插件扫描
[Jul 09 10:22:20:1752027740.500645:10:info] SUM_DISABLED:跳过主题扫描
[Jul 09 10:22:20:1752027740.494878:10:info] SUM_START:将 WordPress 文件核心与存储库中的原件进行比较
[Jul 09 10:22:20:1752027740.485481:10:info] SUM_ENDSUCCESS:从 Wordfence 抓取已知核心文件列表
[Jul 09 10:22:20:1752027740.481964:10:info] SUM_START:从 Wordfence 抓取已知核心文件列表
[Jul 09 10:22:20:1752027740.470931:10:info] SUM_ENDSUCCESS:从 Wordfence 获取已知恶意软件文件列表
[Jul 09 10:22:20:1752027740.462413:10:info] SUM_START:从 Wordfence 获取已知恶意软件文件列表
[Jul 09 10:22:20:1752027740.446338:10:info] SUM_ENDSUCCESS:从 Wordfence 抓取核心、主题和插件文件签名
[Jul 09 10:22:18:1752027738.766176:10:info] SUM_START:从 Wordfence 抓取核心、主题和插件文件签名
[Jul 09 10:22:18:1752027738.483508:10:info] SUM_ENDOK:由于扫描设置而跳过的路径检查
[Jul 09 10:22:18:1752027738.473059:10:info] SUM_START:由于扫描设置而跳过的路径检查
[Jul 09 10:22:18:1752027738.454967:10:info] SUM_ENDOK:检查未来的 GeoIP 支持
[Jul 09 10:22:18:1752027738.438633:10:info] SUM_START:检查未来的 GeoIP 支持
[Jul 09 10:22:18:1752027738.424046:10:info] SUM_ENDOK:检查网络应用防火墙状态
[Jul 09 10:22:18:1752027738.417142:10:info] SUM_START:检查网络应用防火墙状态
[Jul 09 10:22:18:1752027738.401035:10:info] SUM_ENDOK:扫描检查可用的磁盘空间
[Jul 09 10:22:18:1752027738.389080:10:info] SUM_START:扫描检查可用的磁盘空间
[Jul 09 10:22:18:1752027738.369763:10:info] SUM_ENDBAD:检查获取 IP 的最安全方法
[Jul 09 10:22:18:1752027738.355338:10:info] SUM_START:检查获取 IP 的最安全方法
[Jul 09 10:22:16:1752027736.331661:10:info] SUM_PAIDONLY:检查您的网站是否在付费会员才能访问的域名 blocklist 上
[Jul 09 10:22:14:1752027734.326528:10:info] SUM_PAIDONLY:检查您的 IP 是否产生垃圾邮件,仅限付费会员使用
[Jul 09 10:22:12:1752027732.321164:10:info] SUM_PAIDONLY:检查您的网站是否被垃圾邮件 vertized 仅限付费会员使用
[Jul 09 10:22:11:1752027731.631533:10:info] SUM_PREP:Preparing a new scan.
[Jul 04 23:40:21:1751643621.328170:10:info] SUM_KILLED:A request was received to stop the previous scan.
[Jul 04 23:38:06:1751643486.391082:10:info] SUM_KILLED:A request was received to stop the previous scan.
[Jul 04 23:36:13:1751643373.777241:10:info] SUM_KILLED:A request was received to stop the previous scan.
[Jul 04 09:01:44:1751590904.311612:10:info] SUM_START:扫描 wp-admin 和 wp-includes 中的未知文件
[Jul 04 09:01:44:1751590904.299974:10:info] SUM_START:扫描已知恶意软件文件
[Jul 04 09:01:44:1751590904.293604:10:info] SUM_DISABLED:跳过插件扫描
[Jul 04 09:01:44:1751590904.291945:10:info] SUM_DISABLED:跳过主题扫描
[Jul 04 09:01:44:1751590904.283918:10:info] SUM_START:将 WordPress 文件核心与存储库中的原件进行比较
[Jul 04 09:01:44:1751590904.271732:10:info] SUM_ENDSUCCESS:从 Wordfence 抓取已知核心文件列表
[Jul 04 09:01:43:1751590903.256937:10:info] SUM_START:从 Wordfence 抓取已知核心文件列表
[Jul 04 09:01:43:1751590903.242538:10:info] SUM_ENDSUCCESS:从 Wordfence 获取已知恶意软件文件列表
[Jul 04 09:01:42:1751590902.056849:10:info] SUM_START:从 Wordfence 获取已知恶意软件文件列表
[Jul 04 09:01:42:1751590902.043684:10:info] SUM_ENDSUCCESS:从 Wordfence 抓取核心、主题和插件文件签名
[Jul 04 09:01:40:1751590900.406915:10:info] SUM_START:从 Wordfence 抓取核心、主题和插件文件签名
[Jul 04 09:01:40:1751590900.258788:10:info] SUM_ENDOK:由于扫描设置而跳过的路径检查
[Jul 04 09:01:40:1751590900.250114:10:info] SUM_START:由于扫描设置而跳过的路径检查
[Jul 04 09:01:40:1751590900.233680:10:info] SUM_ENDOK:检查未来的 GeoIP 支持
[Jul 04 09:01:40:1751590900.227559:10:info] SUM_START:检查未来的 GeoIP 支持
[Jul 04 09:01:40:1751590900.212480:10:info] SUM_ENDOK:检查网络应用防火墙状态
[Jul 04 09:01:40:1751590900.206061:10:info] SUM_START:检查网络应用防火墙状态
[Jul 04 09:01:40:1751590900.189865:10:info] SUM_ENDOK:扫描检查可用的磁盘空间
[Jul 04 09:01:40:1751590900.178009:10:info] SUM_START:扫描检查可用的磁盘空间
[Jul 04 09:01:40:1751590900.159902:10:info] SUM_ENDBAD:检查获取 IP 的最安全方法
[Jul 04 09:01:38:1751590898.221994:10:info] SUM_START:检查获取 IP 的最安全方法
[Jul 04 09:01:36:1751590896.213938:10:info] SUM_PAIDONLY:检查您的网站是否在付费会员才能访问的域名 blocklist 上
[Jul 04 09:01:34:1751590894.211279:10:info] SUM_PAIDONLY:检查您的 IP 是否产生垃圾邮件,仅限付费会员使用
[Jul 04 09:01:32:1751590892.208682:10:info] SUM_PAIDONLY:检查您的网站是否被垃圾邮件 vertized 仅限付费会员使用
[Jul 04 09:01:31:1751590891.394628:10:info] SUM_PREP:Preparing a new scan.
[Jul 04 05:22:40:1751577760.990102:10:info] SUM_KILLED:A request was received to stop the previous scan.
[Jul 04 05:14:27:1751577267.551323:10:info] SUM_KILLED:A request was received to stop the previous scan.
[Jul 04 05:04:47:1751576687.255044:10:info] SUM_KILLED:收到停止前一次扫描的要求。
[Jul 04 04:50:23:1751575823.060861:10:info] SUM_KILLED:收到停止前一次扫描的要求。
[Jul 04 03:32:55:1751571175.514925:10:info] SUM_KILLED:A request was received to stop the previous scan.
[Jul 04 03:28:12:1751570892.485518:10:info] SUM_KILLED:A request was received to stop the previous scan.
[Jul 04 00:21:37:1751559697.260516:10:info] SUM_KILLED:A request was received to stop the previous scan.
[Jul 04 00:05:20:1751558720.037779:10:info] SUM_KILLED:A request was received to stop the previous scan.
[Jul 03 23:57:59:1751558279.890744:10:info] SUM_KILLED:收到停止前一次扫描的要求。
[Jul 01 20:16:40:1751372200.466244:10:info] SUM_FINAL:扫描完成。恭喜,未发现新问题。
[Jul 01 20:16:40:1751372200.447316:10:info] SUM_ENDOK:扫描旧主题、插件和核心文件
[Jul 01 20:16:39:1751372199.343701:10:info] SUM_START:扫描旧主题、插件和核心文件
[Jul 01 20:16:39:1751372199.333778:10:info] SUM_ENDOK:检查网络应用防火墙状态
[Jul 01 20:16:39:1751372199.332065:10:info] SUM_START:检查网络应用防火墙状态
[Jul 01 20:16:39:1751372199.312291:10:info] SUM_PREP:Preparing a new scan.
[Jun 25 20:07:39:1750853259.080597:10:info] SUM_FINAL:扫描完成。恭喜,未发现新问题。
[Jun 25 20:07:39:1750853259.061542:10:info] SUM_ENDOK:扫描旧主题、插件和核心文件
[Jun 25 20:07:37:1750853257.868318:10:info] SUM_START:扫描旧主题、插件和核心文件
[Jun 25 20:07:37:1750853257.857463:10:info] SUM_ENDOK:检查网络应用防火墙状态
[Jun 25 20:07:37:1750853257.855923:10:info] SUM_START:检查网络应用防火墙状态
[Jun 25 20:07:37:1750853257.839537:10:info] SUM_PREP:Preparing a new scan.
[May 26 23:29:05:1748273345.768388:10:info] SUM_KILLED:收到停止前一次扫描的要求。
[May 26 23:28:10:1748273290.763509:10:info] SUM_KILLED:收到停止前一次扫描的要求。
[May 24 20:42:27:1748090547.131281:10:info] SUM_KILLED:收到停止前一次扫描的要求。
[May 06 00:14:49:1746461689.143299:10:info] SUM_KILLED:收到停止前一次扫描的要求。
[Apr 30 16:10:24:1746000624.206484:10:info] SUM_KILLED:收到停止前一次扫描的要求。
[Apr 24 17:26:42:1745486802.562774:10:info] SUM_KILLED:收到停止前一次扫描的要求。
[Apr 24 17:19:17:1745486357.816918:10:info] SUM_KILLED:收到停止前一次扫描的要求。
[Apr 24 17:05:18:1745485518.967531:10:info] SUM_KILLED:收到停止前一次扫描的要求。
[Apr 24 16:58:51:1745485131.394535:10:info] SUM_KILLED:收到停止前一次扫描的要求。
[Apr 24 16:49:22:1745484562.992274:10:info] SUM_KILLED:收到停止前一次扫描的要求。
[Apr 24 16:35:49:1745483749.408087:10:info] SUM_KILLED:收到停止前一次扫描的要求。
[Apr 15 05:05:58:1744664758.727718:10:info] SUM_KILLED:收到停止前一次扫描的要求。
[Apr 13 05:37:41:1744493861.342346:10:info] SUM_KILLED:收到停止前一次扫描的要求。
-
This reply was modified 9 months, 1 week ago by
cottboy.
Hi @cottboy,
Thanks for sending that over. If you’re concerned about any information loss, it’s completely fine to send the untranslated scan logs.
Matching the full scan log up with the access log, the scan logs from July 9th at 10:30 do line up with the successfully started scan from the 7*** IP address:
[Jul 09 10:30:22:1752028222.414995:4:info] 调用 startScan(true)
[Jul 09 10:30:22:1752028222.013064:4:info] 进入 fork()
[Jul 09 10:30:22:1752028222.010466:4:info] 在恶意软件扫描期间分叉(13473)以确保连续性。
[Jul 09 10:30:21:1752028221.751752:4:info] 扫描内容:wp-content/languages/admin-network-zh_CN.l10n.php(大小:37.01 KB 内存:103 MB)Please take a look at the WAF access logs you sent to see the full IP address.
Since 139.*** is the IP address for your CDN, can you please temporarily disable the CDN and run a new scan to see if it makes it further? In the access logs you sent, the scan that went past the first step didn’t come from the CDN IP, so the CDN may be preventing the scan from starting. You or your host can then check the access logs to see if the scan attempt is reaching the server.
Once we have the scan starting, we can troubleshoot the next steps.
Thanks,
MargaretGreat! When I turned off the CDN’s CC attack protection, Wordfence was able to scan successfully!
In addition, I would like to ask another question: since I have enabled debug mode, it has caused my database to become very large. How can I delete the Wordfence logs?
Lastly, thank you very much for solving this problem for me. This issue has been bothering me for several months, and I am truly grateful!Hi @cottboy,
Excellent, I’m so glad to hear that, and thank you for the kind words! To keep the CC attack protection enabled, if you’re able to allowlist IPs in your CDN, you could try allowlisting the server IP and Wordfence’s IP addresses. A full list of our IPs can be found here: https://www.wordfence.com/help/advanced/#servers-and-ip-addresses
As for the scan logs,
wfstatusis the table where the messages from the scan are stored in the database. It’s safe to clear and/or repair if something has gone wrong and it keeps getting bigger, although the table is usually pruned daily.Cheers,
Margaret -
This reply was modified 9 months, 1 week ago by
The topic ‘A scan stage has failed to start.’ is closed to new replies.