I disagree with both of those.
Secretly scanning ship fits with modules that are designed to let you do so secretly shouldn’t incur a suspect timer, as it no longer would be secret.
Also there’s nothing hostile yet about a closer inspection of another ship: you don’t affect their ship negatively in any way. Yet.
I do realize it’s part of gathering intelligence for a possible later hostile action, but using a ship scanner itself is as hostile as running a locator agent or searching their past fits in zkillboard. None of those actions are suspect.
Next, suspect flagged players should be able to dock. Stealing is allowed and the only repercussion is that other players can freely fight back at thieves through this suspect timer.
By locking out suspect timers from docking you severely limit their gameplay options for the entire 15 minute duration of the timer. And for what?
If the goal is to let players shoot suspect ships before they dock up their loot so that they cannot steal at the undock and immeditately dock up a much shorter ‘no dock’ time would be sufficient after looting.
Make it 10 seconds, not 15 minutes.