Sucuri Firewall – Plugin URI 403 errors

[Terry]

I have a site that is ran through Sucuri that is generating a 400 error when I try running a Rank Math Analysis. It list several entries for BPS and Rank Math as shown below. Any suggestions

[403 GET Request: February 5, 2024 - 3:02 pm]
BPS Pro: 17.4
WP: 6.4.3
Event Code: PFWR-PSBR-HPRA
Solution: https://forum.ait-pro.com/forums/topic/security-log-event-codes/
REMOTE_ADDR: 192.88.135.2
Host Name: cloudproxy12002.sucuri.net
SERVER_PROTOCOL: HTTP/1.1
HTTP_CLIENT_IP:
HTTP_FORWARDED:
HTTP_X_FORWARDED_FOR: 172.127.70.3
HTTP_X_CLUSTER_CLIENT_IP:
REQUEST_METHOD: GET
HTTP_REFERER: https://naturalhormonereplacementclinicsofcolorado.com/wp-admin/admin.php?page=rank-math-seo-analysis
REQUEST_URI: /wp-content/plugins/seo-by-rank-math-pro/includes/modules/seo-analysis/assets/js/seo-analysis-pro.js?ver=3.0.55
QUERY_STRING: ver=3.0.55
HTTP_USER_AGENT: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:122.0) Gecko/20100101 Firefox/122.0

[403 GET Request: February 5, 2024 - 3:02 pm]
BPS Pro: 17.4
WP: 6.4.3
Event Code: PFWR-PSBR-HPRA
Solution: https://forum.ait-pro.com/forums/topic/security-log-event-codes/
REMOTE_ADDR: 192.88.135.2
Host Name: cloudproxy12002.sucuri.net
SERVER_PROTOCOL: HTTP/1.1
HTTP_CLIENT_IP:
HTTP_FORWARDED:
HTTP_X_FORWARDED_FOR: 172.127.70.3
HTTP_X_CLUSTER_CLIENT_IP:
REQUEST_METHOD: GET
HTTP_REFERER: https://naturalhormonereplacementclinicsofcolorado.com/wp-admin/admin.php?page=rank-math-seo-analysis
REQUEST_URI: /wp-content/plugins/bulletproof-security/admin/js/bps-arq-ajax.js?ver=17.4
QUERY_STRING: ver=17.4
HTTP_USER_AGENT: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:122.0) Gecko/20100101 Firefox/122.0

[AITpro Admin]

Create a whitelist rule for the Sucuri domain and IP addresses in the Plugin Firewall > Plugin Firewall Additional Whitelist tools > Whitelist by Hostname (domain name) and IP Address text box > https://forum.ait-pro.com/forums/topic/sucuri-firewall-sucuri-cloudproxy-whitelist-ip-addresses/

[Terry]

Unfortunately that didn’t work completely.  I now get the following message. This site was setup using Sucuri before BPS Pro was installed. Any reason I shouldn’t disconnect from Sucuri and just use BPS Pro?

[403 GET Request: February 6, 2024 - 2:27 pm]
BPS Pro: 17.4
WP: 6.4.3
Event Code: PFWR-PSBR-HPRA
Solution: https://forum.ait-pro.com/forums/topic/security-log-event-codes/
REMOTE_ADDR: 192.88.135.2
Host Name: cloudproxy12002.sucuri.net
SERVER_PROTOCOL: HTTP/1.1
HTTP_CLIENT_IP:
HTTP_FORWARDED:
HTTP_X_FORWARDED_FOR: 172.127.70.3
HTTP_X_CLUSTER_CLIENT_IP:
REQUEST_METHOD: GET
HTTP_REFERER: https://naturalhormonereplacementclinicsofcolorado.com/wp-admin/admin.php?page=bulletproof-security%2Fadmin%2Fsecurity-log%2Fsecurity-log.php
REQUEST_URI: /wp-content/plugins/bulletproof-security/admin/js/crypto-js/crypto-js.js?ver=17.4
QUERY_STRING: ver=17.4
HTTP_USER_AGENT: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:122.0) Gecko/20100101 Firefox/122.0

[AITpro Admin]

Looks like the BPS Plugin Firewall is still being broken by the Sucuri firewall.  I recommend that you turn off/deactivate the BPS Plugin Firewall feature since you are using the Sucuri firewall.

[Author]

Posts