-<) d dl Z d dlZd dlZd dlmZmZmZmZ d dlm Z m
Z
ej e Z
G d de
ZdS ) N) CharField
FloatField IntegerField TextField)instanceModelc e Zd ZdZ ed Z ed Z ed Z ed Z e
Z e d Z
G d d Zed
d
Zed Zd S )InfectedDomainListzDDomains with bad reputation, used for Reputation Management feature.T) primary_key)nullFc e Zd Zej ZdZdS )InfectedDomainList.Metainfected_domain_listN)__name__
__module__ __qualname__r dbdatabasedb_table Z/opt/imunify360/venv/lib/python3.11/site-packages/defence360agent/model/infected_domain.pyMetar ! s ;)r r r 2 c | | j | j | j }fd| D }t j |d }d}g }t | D ]P\ } }
|dz
}t | |k r3| |k r-|
\ } } | \ }
}| |
|d | D d Q||fS )Nc 3 0 K | ]}|d v |V dS )usernameNr ).0rowexisting_userss r z1InfectedDomainList.get_by_user.., s:
C
O~,M,MC,M,M,M,M
r c " | d | d fS )Nr namer )r s r z0InfectedDomainList.get_by_user..0 s s:F .L r )keyr c > g | ]}|d |d |d dS ) threat_typevendor timestamp)typer) r* r )r ts r
z2InfectedDomainList.get_by_user..> sG $ $ $ !" )*-(8*+H+-.{^ $ $ $r )r domainthreats) selectorder_byr r# r* descdicts itertoolsgroupby enumeratelenappend)clsr offsetlimitqueryfiltered_by_usergrouped max_countresultivaluegroupr/ r r# s ` r get_by_userz InfectedDomainList.get_by_user% s;
%% L#(CM$6$6$8$8
;;==
# "L"L
!'** HAu NIF e##!v++!&w!&$
$,"&$ $ &-
$ $ $
y r c
d | D }t j 5 | t j }|D ]}|d }||vr t d| *|| D ]h}|d }|dv r|d d } n|dk r |d } n |d v rd
} nd } |
|| |f| }
| ||| ||
i d
d
d
d
S # 1 swxY w Y d
S )a
Update domain reputatuion info. If threat info already exists, do not
update timestamp
:param domains: reputation data from server
:param domains_to_users: domain -> users mapping from hosting panel
:return:
c J i | ] }|d |d |d f|d !S )r# r( r) r* r )r rs r
z6InfectedDomainList.refresh_domains..T sB
vY-(!H+ 6+
r r< z Users for domain %s not found.r) )zgoogle-safe-browsingzyandex-safe-browsingdetailsr( spamhaus) phishtank openphishz spam domainTHREAT_TYPE_UNSPECIFIED)r r# r( r) r* N) r0 r3 r r atomicdeleteexecutetimeloggerwarninggetcreate) r9 domainsdomains_to_usersexistingnow domain_infor. userr) r( r* s r refresh_domainsz"InfectedDomainList.refresh_domainsJ s
ZZ\\''))
[
!
! JJLL " " ")++C &
$W-!111NN#CVLLL ,V 4 D ( 2F " '2)&<]&K :--&1)&< #===&3 &? ( f5s! !I JJ!% #$/ %"+ #
s CD55D9<D9N)r r )r r r __doc__r idr r r# r( r r* r r) r classmethodrD r\ r r r r
r
s NN $ ' ' 'Byd###H 9% D )'''K
I
YD
!
!
!F* * * * * * * * "! "! "! ["!H , , [, , ,r r
)r4 loggingrQ peeweer r r r defence360agent.modelr r getLoggerr rR r
r r r rd s 2 1 1 1 1 1 1 1 8 $ $f f f f f f f f f fr