ї whT=╟QАЦС≈ddlZddlZddlZddlmZddlmZddlmZm Z m Z mZddlm Z ddlmZddlmZmZmZddlmZdd lmZmZmZdd lmZmZddlmZddlm Z dd l!m"Z"ddlm#Z#ddl$m%Z%ddl&m'Z'm(Z(m)Z)ddl*m+Z+m,Z,ddl!m-Z-m.Z.m/Z/ddl0m1Z1ddl2m3Z3ej4e5і╚Z6edej7і╚Z8edej7і╚Z9edі╚Z:edі╚Z;e:dzZde?fd└Z@Gd└deeі╚ZAdS) ИN)зPath)з Coroutine)зANTIVIRUS_MODEзConfigValidationErrorзSystemConfigз UserConfig)з HookEvent)зMessageType)зMessageSinkз MessageSourceзexpect)з hosting_panel)з load_stateзregister_lock_fileз save_state)зScopeзrecurring_check)з check_lock)зDAY)зplugin)з Wordpress╘зWPSite)зget_sites_by_pathзget_sites_for_userзget_installed_sites)зis_secret_expiredз rotate_secret)зChangelogProcessorзIncidentCollectorзIncidentSender)зupdate_disabled_rules_on_sites)зdelete_old_wordpress_incidentszwp-gen-authzwp-site-processz-/etc/sysconfig/imunify360/imunify360.config.dzF/opt/imunify360/venv/share/imunify360/11_on_first_install_wp_av.configz 11_on_first_install_wp_av.configz.11_on_first_install_wp_av.flagзstarted_timestampзreturncС▓≈ ddlm}|═|і╚S#t$rt═dі╚gcYSwxYw)z■ Get malware hits cleaned since the given timestamp with lazy import fallback. Returns empty list if imav.malwarelib is not available. r)з MalwareHitz;imav.malwarelib not available, returning empty cleaned hits)зimav.malwarelib.modelr'з cleaned_sinceзImportErrorзloggerзdebug)r$r's ЗV/opt/imunify360/venv/lib/python3.11/site-packages/defence360agent/plugins/wordpress.pyз_get_cleaned_malware_hitsr.Fsm─Пь4п4п4п4п4п4Юв'р'п(9я:т:п:ЬщПППщ▐┼ьIЯ Т П П┬ ┬ ┬ П ЬЬЬs┌²&AаAcС ≈eZdZejZd└Zd└Zd└Zd└Z d└Z d└Zd└Zd└Z d ejfd └Zd defd └Zd└Zeedee╛і╚d└і╚Zeedde╛і╚d└і╚Zd└Zd└Zd└Zd└Zd└Ze e!j"і╚d└і╚Z#e e!j$і╚d└і╚Z%e e!j$і╚d└і╚Z&e e!j$і╚d└і╚Z'e e(j)і╚d└і╚Z*e e(j+і╚d└і╚Z,dS)!зImunifySecurityPlugincСZ≈d|_d|_tdі╚}|═dі╚|_|═dі╚}|│|nt j|_ t j|_ n#t$r d|_ YnwxYwi|_tj і╚|_tjі╚|_d|_d|_d|_t)і╚|_t-і╚|_t1і╚|_t5і╚|_d|_dS)Nr0з installedзenabledT)з_loopз_sinkrзgetзinstallation_completedrзSECURITY_PLUGIN_ENABLEDзlast_config_valueзWAF_ENABLEDз_last_waf_enabledзKeyErrorз_last_user_waf_enabledrз_get_global_ai_bot_protectionз_last_ai_bot_protectionз$_get_global_ai_bot_protection_presetз_last_ai_bot_protection_presetзinstallation_taskз deleting_taskзinstall_and_update_taskзsetзfreshly_installed_sitesr зincident_collectorr!зincident_senderrзchangelog_processorз_site_processing_task)зselfзstateзpersisted_enableds r-з__init__zImunifySecurityPlugin.__init__Zs/─ь┬▄ ь┬▄ щп2я3т3┬ь&+їi╒i╟я&<т&<┬т#П"÷I I═iя0т0пП!п,П пЕт2П тП *щ%.т%:┬Dт"п"ЬщП *П *П *ь%)┬Dт"п"п"П *ЬЬЬЮ>@┬т#У(.т'Kя'Mт'M┬т$Ет7я9т9П т+П7;┬ть26┬ть<@┬т$щ47╠EЄE┬т$У#4я"5т"5┬тщ-я/т/┬тщ#5я#7т#7┬т ь:>┬т"п"п"sа#A5а5B бB c┐С K≈dS╘N╘)rKзloops r-зcreate_sinkz!ImunifySecurityPlugin.create_sink}sХХ─ь┬Сc┐С≤K≈||_||_|j═|═і╚і╚|_|j═|═і╚і╚|_tr|═і╚┐d{V≈├nt═ d╛і╚|═і╚┐d{V≈├dS)NT)з missing_ok)r4r5зcreate_taskзrefresh_auth_filesз_update_auth_taskзprocess_wordpress_sitesrJrз_apply_first_install_configзFIRST_INSTALL_FLAGзunlinkз _recover_installation_on_startup)rKrRзsinks r-з create_sourcez#ImunifySecurityPlugin.create_source─sзХХ─ь┬▄ ь┬▄ ь!%єв!7р!7ьв#р#я%т%Я" Т" ┬тП&*єZв%;р%;ьв(р(я*т*Я& Т& ┬т"УП 7ьв2р2я4т4п4п4п4п4п4п4п4п4Ев%р%╟п%я6т6п6Юв3р3я5т5п5п5п5п5п5п5п5п5п5rTc┐С,K≈|jstjsdSt═dі╚d|_|═tj|j ╛і╚і╚┐d{V≈├|j │!|j ═|jі╚dSdS)a╒ Self-heal when the installation state was lost. If the feature is enabled but installation_completed is falsy (state file missing, earlier install interrupted, etc.), manage_plugin_installation can never recover: its True == True guard always returns early. Trigger install_everywhere once per restart to repopulate the wordpress_site table and flip the flag. NzXInstallation state is missing while feature is enabled; triggering startup self-recoveryT╘r_) r7rr8r+зinfor9зprocess_installationrзinstall_everywherer5rBзadd_done_callbackз_mark_installation_done╘rKs r-r^z6ImunifySecurityPlugin._recover_installation_on_startup▓sяХХ─П т'П Ет4П П ┬Fщ▐┼П /Я Т П П"&┬тьв'р'щт%╗4╛:п6я6т6Я Т П П П П П П П Пт!п-ьт"в4р4ьт,Я Т П П П П.п-rTc┐СfK≈t═і╚sdStjі╚═і╚┐d{V≈├dkrKt ═t═і╚і╚}t ═ dі╚t═ і╚dS)NИi─)r\зexistsrзHostingPanelзusers_countзFIRST_INSTALL_CONFIG_PATHз write_textзFIRST_INSTALL_CONFIG_FILEз read_textзchmodr])rKз_s r-r[z1ImunifySecurityPlugin._apply_first_install_config╡sёХХ─щ!в(р(я*т*П ь┬Fщт+я-т-в9р9я;т;п;п;п;п;п;п;╦qр@п@щ)в4р4щ)в3р3я5т5ЯТ┬AУ &в+р+╗Eя2т2п2щв!р!я#т#п#п#п#rTc┐СЄK≈|j═і╚|j┐d{V≈├|jr(|j═і╚|j┐d{V≈├dSdSrP)rYзcancelrJrhs r-зshutdownzImunifySecurityPlugin.shutdown╪s┐ХХ─ьтв%р%я'т'п'Ют$п$п$п$п$п$п$п$Пт%П -ьт&в-р-я/т/п/ьт,п,п,п,п,п,п,п,п,п,П -П -rTcСь≈t||і╚st═d|і╚dSt||і╚}|duo)|═і╚o|═і╚S)NzUnknown task '%s'F)зhasattrr+зerrorзgetattrзdoneз cancelled)rKзtask_attr_nameзtasks r-з_task_in_progressz'ImunifySecurityPlugin._task_in_progressфsi─щ░t≤^я,т,П щ▐L┼Lп,╗nя=т=п=ь░5щ░t≤^я,т,┬Ю≤4ппL╗╞ ╙ ╘╛═OпL╦D©N╨NяFeature was disabled during installation, skipping flag updateT)r|r+rcз exceptionryr9r7r│)rKr~зexcs r-rgz-ImunifySecurityPlugin._mark_installation_doneвsї─ь▐>┼>ятП щ▐K┼Kп9я:т:п:ь┬FЮ▐n┼nят┬ь┬?щ▐L┼Lп7╦я=т=п=ь┬FЮт%П щ▐K┼KП'Я Т П П ┬FЮ&*┬т#ьв%р%я'т'п'п'п'rTFзcoroc┐С╗K≈|═dі╚r\|r|═і╚dS|jr=|j═і╚ |j┐d{V≈├n#tj$rYnwxYw|═dі╚r0t═dі╚|═і╚dSt j|і╚|_ dS)NrCrBzInstallation is already running) rзcloserCruзasyncioзCancelledErrorr+зwarningrWrB)rKr┘з for_new_sitess r-rdz*ImunifySecurityPlugin.process_installationКsСХХ─ьв!р!═/я2т2П ьП ь≈ ▓ ▒■░ь░Ют!П ьт"в)р)я+т+п+Пьт,п,п,п,п,п,п,п,п,Ьщт-ПППь░DПЬЬЬПв!р!п"5я6т6П щ▐N┼Nп<я=т=п=ь▐J┼J┴L▄L┬Lь┬FЕ!(т!4╟Tя!:т!:┬тппsа AаA1а0A1c┐СPK≈|═dі╚rD|jr=|j═і╚ |j┐d{V≈├n#tj$rYnwxYw|═dі╚rt ═dі╚dStj|і╚|_dS)NrBrCzDeleting is already running) rrBrur┬r┴r+r┼rWrC)rKr┘s r-зprocess_deletingz&ImunifySecurityPlugin.process_deletingЪsлХХ─ьв!р!п"5я6т6П ьт%П ьт&в-р-я/т/п/Пьт0п0п0п0п0п0п0п0п0Ьщт-ПППь░DПЬЬЬПв!р!═/я2т2П щ▐N┼Nп8я9т9п9ь┬FЕ$т0╟я6т6┬тппs╧ AаAаAT)зcheck_period_firstзcheck_lock_periodз lock_filec┐С▌K≈tі╚rtі╚┐d{V≈├tj|j╛і╚┐d{V≈├dS╘Nrb)rrrзupdate_auth_everywherer5rhs r-rXz(ImunifySecurityPlugin.refresh_auth_filess`ХХ─УятП "щ▒/■/п!п!п!п!п!п!п!щт+╟Єп<я<т<п<п<п<п<п<п<п<п<пzAImunifySecurityPlugin.process_wordpress_sites..;s─п>п>п>╗!≤Q°Xп>п>п>rT)зdomainsr_T)зdelete_after_processingИ)зdaysz*Error in WordPress periodic processing: %s)r+r,rrIзprocess_changelogs_for_sitesr5r"rGзcollect_incidents_for_sitesrHзsend_incidentsr#з Exceptionry)rKзsitesзaffected_sitesз incidentsзes r-rZz-ImunifySecurityPlugin.process_wordpress_sitessкХХ─У ▐┼П AЯ Т П П! Jщ'я)т)┬EьП щ≈▓ьFЯТПП░Пт.вKрKь≤4°:ЯТППППППП П П щ4ь>п>╗~п>я>т>ь°ПЯТППППППППт-вIрIьь,0ПJЯТППППППП Пт&в5р5╟dЄjю)яLтLпLпLпLпLпLпLпLЕ*╟п3я3т3п3п3п3ЬЕП JП JП Jщ▐L┼LпEюqяIтIпIпIпIпIпIпIпIЬЬЬЬП JЬЬЬs·*C2а B&C2ц2 D"ц<DдD"c┐С▓┤K≈┴j═і╚┬fd└}┴═|і╚d╛і╚┐d{V≈├dS)z&Install plugin on new WordPress sites.c⌠С└∙K≈tj┴j╛і╚┐d{V≈├}|r┴j═|і╚|Sr▓)rrer5rFзupdate)зinstalled_sitesrKs ─r-зinstall_and_trackzFImunifySecurityPlugin._install_on_new_sites..install_and_trackSsTЬХХ─щ$*т$=ю4д:п$Nя$Nт$NпNпNпNпNпNпN┬OьП Eьт,в3р3╟OяDтDпDь"п"rTT)r▀N)rFзclearrd)rKr╚s` r-з_install_on_new_sitesz+ImunifySecurityPlugin._install_on_new_sitesNs█ЬХХ─П т$в*р*я,т,п,П #П #П #П #П #Пв'р'ьпятьП(Я Т П П П П П П П П П rTc┐С\K≈tj|j|j╛і╚┐d{V≈├tj|j╛і╚┐d{V≈├t jsW|═tj|j╛і╚і╚┐d{V≈├d|_ d|_ |═і╚dSdS)zCTidy up sites from which the WordPress plugin was deleted manually.)r_rFNrbF)rзtidy_up_manually_deletedr5rFз$fix_data_file_permissions_everywhererr8r█зremove_all_installedr7r9r│rhs r-з_tidy_upzImunifySecurityPlugin._tidy_up^sШХХ─Ет-ь■ь$(т$@П Я Т П П П П П П П Ут9╦t╪zпJяJтJпJпJпJпJпJпJпJЕт0П ,ьв'р'щт+╟Єп<я<т<ЯТП П П П П П П П+0┬Dт'ь%*┬Dт"ьв)р)я+т+п+п+п+П ,П ,rTc┐С├K≈tj|j╛і╚┐d{V≈├}|r|j═|і╚dSdS)zFAdopt sites where plugin is installed but not tracked in our database.rbN)rзadopt_found_sitesr5rFr╘)rKз adopted_sitess r-з_adopt_found_sitesz(ImunifySecurityPlugin._adopt_found_sitesns^ХХ─Е$т6╦D╪JпGяGтGпGпGпGпGпGпG┬ ПП ?ьт(в/р/╟ я>т>п>п>п>П ?П ?rTc┐СJK≈tj|j╛і╚┐d{V≈├dS)z1Update plugin on all sites where it is installed.rbN)rзupdate_everywherer5rhs r-з_update_existingz&ImunifySecurityPlugin._update_existingvs4ХХ─Ет&╗D╛Jп7я7т7п7п7п7п7п7п7п7п7п7rTc┐СK≈|═і╚┐d{V≈├|jr |j┐d{V≈├|═і╚┐d{V≈├|═і╚┐d{V≈├|═і╚┐d{V≈├dS)zд Combined operation: install on new sites, adopt found sites, tidy up, and update existing plugins. This runs all operations sequentially to avoid race conditions. N)rґrBrІr╡r╧rhs r-з_run_install_and_updatez-ImunifySecurityPlugin._run_install_and_updatezsдХХ─Пв(р(я*т*п*п*п*п*п*п*п*Ют!П )ьт(п(п(п(п(п(п(п(Пв%р%я'т'п'п'п'п'п'п'п'П▐m┼m┴o▄oпппппппьв#р#я%т%п%п%п%п%п%п%п%п%п%rTc┐СRK≈t═d|j|jі╚|═dі╚r"t═d|jі╚dS|jdkr%|jsdS|═і╚┐d{V≈├dS|═dі╚r"t═d|jі╚dS|═dі╚r"t═d|jі╚dS|jd kr|═і╚┐d{V≈├dS|jd kr|═ і╚┐d{V≈├dS|jdkrP|jst═dі╚dStj|═і╚і╚|_ dSdS) NzInstallation is not completed yet, skipping install_and_update)r+rcзactionзmethodrr┼r7rґr╧r╡r┬rWr╩rD)rKзmessages r-зmanage_plugin_actionz*ImunifySecurityPlugin.manage_plugin_action█sЩХХ─Е▐┼ьJь▄Nь▄NЯ Т П Пв!р!п";я<т<П щ▐N┼NьIь■Я Т П П ┬FЮ▄>п3р3п3ьт.П Ю░Юв,р,я.т.п.п.п.п.п.п.п.ь┬FЮв!р!п"5я6т6П щ▐N┼NьCь■Я Т П П ┬FЮв!р!═/я2т2П щ▐N┼NьGь■Я Т П П ┬FЮ▄>п.р.п.ьв'р'я)т)п)п)п)п)п)п)п)ь┬FЮ▄>≤Yр&п&ь≈-▓-▒/■/п!п!п!п!п!п!п!ь┬FЮ▄>п1р1п1ьт.П Е≈▓П*ЯТПП░У ,3т+>ьв,р,я.т.Я,Т,┬Dт(п(п(П2п1rTc┐СдK≈t|dtі╚sdStj}||jkrdS||_|░r-|j░s% tі╚═dddiiі╚d|_n*#t$rt═ dі╚YnwxYw tі╚═dddiiі╚d|_tj і╚|_n*#t$rt═ dі╚YnwxYw|═tj|j╛ і╚і╚┐d{V≈├|j│!|j═|jі╚dSdS|sl|js|═d і╚rR|═tj|j╛ і╚і╚┐d{V≈├d|_|═і╚dSdSdS)Nзconfз WORDPRESSзwaf_enabledTz9waf_enabled config reset skipped, field not in schema yetзai_bot_protectionFz?ai_bot_protection config reset skipped, field not in schema yetrbrB)з isinstancerrr8r9r7зdict_to_configr;rr+r,r?rr@rArdrer5rBrfrgrr█r╠r│)rKrцзcurrent_config_values r-зmanage_plugin_installationz0ImunifySecurityPlugin.manage_plugin_installationкs ХХ─Е≤'═&°/ґ<я8т8П ь┬FЕ(т@пь═4т#9р9п9ь┬FП"6┬тЮЯ, ,╗т(CЯ, ,П щ▒■в-р-ь ═=╟$п"7п8ЯТПП*.░т&п&Ьщ(П П П щ≈▓ьOЯТПППП ЬЬЬП щ▒■в-р-ь п#6╦п">п?ЯТПП05░т,Ет?яAтAПт3п3ЬУ)П П П щ≈▓П/ЯТПППП ЬЬЬП в+р+щт)╗t╛zп:я:т:ЯТП П П П П П П Пт%п1ьт&в8р8ьт0ЯТПППП2п1П &П ,ьт'П ,Юв%р%п&9я:т:П ,Пв'р'щт+╟Єп<я<т<ЯТП П П П П П П П+0┬Dт'ьв)р)я+т+п+п+п+П ,П ,П ,П ,s%а,A9а9$B бB б$AC)ц)$DдDc┐СьK≈t|dtі╚sdStjsdS|jsdStjі╚}tjі╚}||jkr ||j krdS|j ═dtі╚┐d{V≈├}|s||_||_ dStj |і╚┐d{V≈├}|t|і╚kr||_||_ dSdS)aе Propagate admin toggles of WORDPRESS.ai_bot_protection and WORDPRESS.ai_bot_protection_preset to every managed WP install's plugin_config.php immediately, so the WP plugin picks up the change at the next request rather than waiting for a scan cycle. Phase 2 per-account support extends *this* handler with a UserConfig branch (mirroring manage_waf_config); do not add a sibling handler. rфN)rйrrr8r7rr>r@r?rAr4зrun_in_executorrзupdate_plugin_config_on_sitesзlen)rKrцзcurrent_enabledзcurrent_presetrёзwrittens r-зmanage_ai_bot_protection_configz5ImunifySecurityPlugin.manage_ai_bot_protection_configsХХ─У≤'═&°/ґ<я8т8П ь┬Fщт0П П ┬Fьт*П П ┬Fщ т>я@т@┬щтDяFтF┬Ю≤tт;р;п;ь═$т"EрEпEЮ┬FЮ■jв0р0╟у7JяKтKпKпKпKпKпKпK┬ьП ь+:┬Dт(ь2@┬Dт/ь┬Fщт<╦UяCтCпCпCпCпCпCпC┬ь∙c≤%▒j■jр п ь+:┬Dт(ь2@┬Dт/п/п/П!п rTc┐С╛K≈tjsdS|d}|═і╚}|═diі╚═dі╚}t |t і╚rЕ|─X|j═|jdі╚}|dur2tj і╚rtj|jі╚┐d{V≈├dS||j═|jі╚krdS||j|j<|rtj і╚s!tj|jі╚┐d{V≈├dStj|jі╚┐d{V≈├dSt |tі╚ro|─dS tj}n#t$rYdSwxYw||jkrdS||_|stjі╚┐d{V≈├dStjі╚┐d{V≈├dSdS)NrфrгrхF)rr8зconfig_to_dictr6rйrr=зpopзusernamerз_get_global_waf_enabledзredeploy_wp_rules_for_userзremove_waf_rules_for_userrr:r<r;зremove_waf_rules_for_all_sitesзredeploy_wp_rules)rKrцrфзconfig_dictз waf_valueзprevзcurrents r-зmanage_waf_configz'ImunifySecurityPlugin.manage_waf_config1s0ХХ─Ет0П ь┬Fь░v▄┬ьв)р)я+т+┬ь≈O▓O═K╟я4т4в8р8╦яGтG┬ щ░d²Jя'т'П 1ьп Пт2в6р6╟tЄ}юdяKтK░ь≤5░=░=╔Vт%Cя%Eт%E░=щ т;╦D╪MяJтJпJпJпJпJпJпJпJь░ь≤Dт7в;р;╦D╪MяJтJрJпJь░ь9B┬Dт'╗╛ я6ьП G╔Fт$Bя$Dт$DП Gщт6╟tЄ}яEтEпEпEпEпEпEпEпEпEпEЕт7╦╪ яFтFпFпFпFпFпFпFпFпFпFщ ≤²lя +т +П 1ьп ь░П щ#т/░░ЬщП П П ь░░П ЬЬЬЮ≤$т0р0п0ь░ь%,┬Dт"ьП 1щт;я=т=п=п=п=п=п=п=п=п=п=Ет.я0т0п0п0п0п0п0п0п0п0п0П 1П 1sе*E7е7 FфFc┐СK≈|jsdS|═dі╚dks|═dі╚sdSt|dі╚}tі╚}|D]┼}|jdkr} tj|jі╚}t|і╚}|r|j nd}|D]5}|j ═|і╚r|═||fі╚n▄6▄z#t$rY▄├wxYw▄▀|st═dі╚dSt═dt#|і╚і╚d└|Dі╚} t%j|j| і╚┐d{V≈├t═d t#| і╚і╚dS) a╘ INFO [2025-02-24 12:00:20,384] imav.plugins.wordpress: Malware cleanup finished: HookEvent.MalwareCleanupFinished( { 'cleanup_id': 'fa4fe7e48dbf45588f53b24366cd8893', 'started': 1740398411.786418, 'error': None, 'total_files': 3, 'total_cleaned': 3, 'status': 'ok' } ) Nзstatusзokзstartedзfilez3Cleanup finished => no sites found for cleaned hitsz1Cleanup finished => %s site(s) need to be updatedcС8≈g|]\}}t|d|╛і╚▒▄S)з)зdocrootr≈зuidr)r≤з site_pathrЛs r-r zIImunifySecurityPlugin.handle_malware_cleanup_finished..▌s;─П П П А░ ≤3У ≤9╗R╟Sп9я9т9П П П rTz"%s site(s) updated after a cleanup)r9r6r.rEз resource_typeзpwdзgetpwnamзuserrзpw_uidз orig_fileз startswithзaddr<r+r,rcrяrзupdate_data_on_sitesr5) rKrцзhitsз site_pathsзhitз user_infoз user_sitesrЛrМзwordpress_sitess r-зhandle_malware_cleanup_finishedz5ImunifySecurityPlugin.handle_malware_cleanup_finishedVsшХХ─П т%П ь┬FП▐;┼;░xя т ═Dр(п(╟Ї╡╦Iя0Fт0Fп(ь┬FУ)╗╟т);я<т<┬Е▒U■U┬ ПП П ┬Cьт ═Fр*п*Пщ #є╗S╛Xя 6т 6░Iщ!3╟Iя!>т!>░JЮ,5п?≤ т(п(╦4ПП&0П"П"≤ ь°=в3р3╟Iя>т>П"ь&÷N N╗I╟sп+;я<т<п<ь!≤EП"ЬЬУ ПППь░DПЬЬЬП+ПП щ▐L┼LпNяOтOпOь┬FЕ▐┼ь?щ░ ┴O▄OЯ Т П П П Ю",П Я Т ┬У т)╗$╛*╟oяFтFпFпFпFпFпFпFпFЕ▐┼п8Ґ#╦oя:Nт:NяOтOпOпOпOsа/A+Cц C(ц'C(c┐СРK≈|jsdS|═dі╚dks*|═dі╚r|═dі╚sdS|d}t|і╚}|st═d|і╚dSt═dt |і╚і╚tj|j |і╚┐d{V≈├t═dt |і╚і╚dS) aТ INFO [2025-02-24 11:57:17,968] imav.plugins.wordpress: Malware scan finished: HookEvent.MalwareScanningFinished( { 'scan_id': 'b9bd136aff0a4d87a248c859cfe41c47', 'scan_type': 'user', 'path': '/home/user1' } ) INFO [2025-02-24 12:00:10,740] imav.plugins.wordpress: Malware scan finished: HookEvent.MalwareScanningFinished( { 'scan_id': 'a74271d2cdd04e0c9bd49ef6de23e0d8', 'scan_type': 'user', 'path': '/home/user4', 'started': 1740398383, 'total_files': 39229, 'total_malicious': 3, 'error': None, 'status': 'ok', 'scan_params': {'intensity_cpu': 2, 'intensity_io': 2, 'intensity_ram': 2048, 'initiator': None, 'file_patterns': None, 'exclude_patterns': None, 'follow_symlinks': False, 'detect_elf': True}, 'stats': {'scan_time': 27, 'mem_peak': 28217344, 'smart_time_hs': 0.004, 'scan_time_hs': 1.1751, 'smart_time_preg': 0, 'scan_time_preg': 2.7391, 'finder_time': 13.5896, 'cas_time': 0.7562, 'deobfuscate_time': 0.8998, 'total_files': 39229} } ) NrЕrФзpathзstatsz+Scan finished => no sites found for path=%sz.Scan finished => %s site(s) need to be updatedz%s site(s) updated after a scan) r9r6rr+r,rcrяrrЖr5)rKrцrЪrёs r-зhandle_malware_scan_finishedz2ImunifySecurityPlugin.handle_malware_scan_finished≈sХХ─П8т%П ь┬FП ▐K┼K≤я!т!═Tр)п)ь≈;▓;≤vя&т&П *Ю≈;▓;≤wя'т'П *П ┬FП░v▄┬щ!═$я'т'┬ьП щ▐L┼LпFхяMтMпMь┬FУ ▐┼ь<Ґcю%╧j╪jЯ Т П Ут)╗$╛*╟eя<т<п<п<п<п<п<п<п<Е▐┼п5╣s╦5╠zЄzяBтBпBпBпBrTN)F)-з__name__з __module__з__qualname__rзAV_IM360зSCOPErNrSr`r^r[rvrr│r┬зTaskrgrrdr█rrrз LOCK_FILErXзSITE_PROCESSING_LOCK_FILErZrґr╡rІr╧r╩r r зWordpressPluginActionrдзConfigUpdaterмrуrЦr зMalwareCleanupFinishedrЩзMalwareScanningFinishedrrQrTr-r0r0Ws╞─────ь▄N─EП!?П!?П!?ПF П П П6П6П6П$ППП@$П$П$П-П-П-ПMПMПMП П П П(╗G╛LП(П(П(П(П(;П;╗yП;П;П;П;П( 7П 7П 7П─_ььььП ЯТП=П=Я ТП=П ─_ььь ь+П ЯТП-JП-JЯ ТП-JП^ П П П ,П,П,П ?П?П?П8П8П8П&П&П&П&─V┬Kт-я.т.П;П;Я/т.П;Пz─V┬Kт$я%т%П7,П7,Я&т%П7,Пr─V┬Kт$я%т%П)AП)AЯ&т%П)AПV─V┬Kт$я%т%П"1П"1Я&т%П"1ПH─V┬Iт,я-т-П>PП>PЯ.т-П>PП@─V┬Iт-я.т.П4CП4CЯ/т.П4CП4CП4CrTr0)Br┬зloggingrОзpathlibrзtypingrз defence360agent.contracts.configrrrrз%defence360agent.contracts.hook_eventsr з"defence360agent.contracts.messagesr з!defence360agent.contracts.pluginsrrr зdefence360agent.subsys.panelsrз'defence360agent.subsys.persistent_staterrrзdefence360agent.utilsrrз defence360agent.utils.check_lockrзdefence360agent.utils.commonrзdefence360agent.wordpressrrзdefence360agent.model.wordpressrз)defence360agent.wordpress.site_repositoryrrrз$defence360agent.wordpress.proxy_authrrrr r!з defence360agent.wordpress.pluginr"з(defence360agent.model.wordpress_incidentr#з getLoggerrr+rrr з CONFIG_DIRrprnr\зfloatзlistr.r0rQrTr-Зr$s@Пь───ь───ь ─ ─ ─ ьпппппьпппппППППППППППППП<п;п;п;п;п;ь:п:п:п:п:п:ППППППППППП 8п7п7п7п7п7ППППППППППП 9п8п8п8п8п8п8п8ь7п7п7п7п7п7ь,п,п,п,п,п,Ю,п,п,п,п,п,ь6п6п6п6п6п6ь2п2п2п2п2п2ППППППППППП ПППППППППППППППППП LпKпKпKпKпKППППППП ┬т ≤8я $т $─Юп≤}╗e╛nя=т=─ ь.п.ь░u■~ЯТпП┬TпAя Bт B─ Ю ≤DьLЯТпП'п)KяKпЮп"CяCпП╟П╦4ППППП"u CПu CПu CПu CПu C≤K╗Яu CТu CПu CПu CПu CrT