Cloudflare and Sucuri Plugin

Hello,

To anyone using Cloudflare and having issues with the malware scanner provided by the Sucuri plugin which utilizes Sucuri’s Site Check (https://sitecheck.sucuri.net/)., when getting ‘Unable to scan the page. 503 Service Unavailable.’, it’s because Cloudflare has a feature to challenge and/or block requests matching patterns of known bots before they can access your site. This disrupts the communication between Sucuri and your website. The only work around I can find in order to scan my website is to disable ‘Bot Fight Mode’ in the Cloudflare dashboard. It’s located under the Firewall App in ‘Tools’.

Once disabled, the Sucuri plugin’s malware scanner (Site Check) works again. Anyway, disabling it and re-enabling it every time to scan my site is annoying. If anyone has a solution to whitelist Site Check scans via Cloudflare or at server level via .htaccess, please let me know.

Thanks,
Carm