s){R% d dl Z d dlZd dlZd dlmZmZmZmZmZm Z m
Z
m Z m Z d dl
mZ d dlmZmZ d dlmZ d dlmZ d dlmZmZ G d d e Z G d
d e Z G d d
e Z G d de Z dS ) N) CompositeKey DoesNotExistForeignKeyField IntegerFieldJOINPrimaryKeyField TextField CharFieldSQL)reduce)instanceModel)apply_order_by)Country)IPList
IPListPurposec e Zd ZdZ G d d Z e Z ed Z e d Z
ed Z ed Z e
d Z e d Z e d Z e d Z e d Z e d Z ed Z ed Z ed Z ed Z e d Zed Ze d d Zed
Z dS ) Proactivez$Proactive defense php plugin events.c $ e Zd Zej ZdZdZdS )Proactive.Meta proactiveN)__name__
__module__ __qualname__r
dbdatabasedb_tableschema J/opt/imunify360/venv/lib/python3.11/site-packages/im360/model/proactive.pyMetar s ; r r" FnullTc V t j | j k t j z S N)r ip
is_expired)clss r! _iplist_joinzProactive._iplist_join@ s" SV#):)<)<(<==r Nc
| | j | j | j | j | j | j | j | j | j t j
t t j | } g } |dk r | | j |k | | | j |k | | | j |k |~| | j | | j | z | j | z | j | z | rr| | j fd| D }
|
rrg }g }|
D ]/}| d | | d 0d | }| t) d| d| | r/t+ t, j | }| | } |t3 || | } || | } || | } g }| D ]D}|d rt; j |d n|d |d
< | | E|S ) Nonr c ~ g | ]9}t | t k "| 7|:S r )len
startswith).0p site_searchs r!
z#Proactive.fetch..y sM q66C , ,,, k1J1J, ,,,r zpath NOT LIKE ?%z AND ()listnamepurpose) selectid timestampr' actionhostpathcountrule_id rule_namer r8 joinr
LEFT_OUTERr* appenduidcontainsr0 r r operatorand_wherer limitoffsetdictsr listname2purpose)r) rF sincetorK rL searchorder_byr3
user_siteskwargsqwhere_conditions longer_paths
sql_chunks
sql_paramsr? combined_sql_string final_clauseresultitems ` r! fetchzProactive.fetchD s*
JJ F M F J H H I K M O
$vt3+;+;+=+=$
>
>
" !88 # #CGsN 3 3 3 # #CMU$: ; ; ;
> # #CMR$7 8 8 8 # #!!&))(##F++,-((001 &//&))*
+ # #CH$7$7 $D$D E E E # L
( 2 2D %%&7888 %%jjj1111&-ll:&>&># ''2 /222J??
&!(-1ABBL %%A xa00A A AGGII D
#&
.tJ/?@@@*%
O
MM$
r c f | | j | j | j | j | j | j | j | j | j | j
t j t j d t t" j | t t" j | j t j k | j |k }|dk r | | j |k }| }| dk rt2 t5 t7 | }t8 t8 j t8 j t8 j |d k }tC | |d< |d rtE j# |d n|d |d< |S ) Ncountryr, r r; envr8 r9 )$r: r; r< r' descriptionurlr= r? r@ rA rB r r8 r codealiasrC r rD r* switch
ip_country_idrJ rF rM r nextiter ProactiveEnvnamevalueevent_idtuplesdictr rN )r) r; rF rU events r! detailszProactive.details s
JJ
""9--
T&$/c.>.>.@.@T
A
A
VXX
T c.?7:.M U36R<
)
, !883''A
GGII 7799q== T!WW
1<3E F F
U<(E$K7
8
8
VXX
Awwe Z
#M *5+< = = =z" i
r )NNNNNNNN) r r r __doc__r" r r; r r< r r' ip_int
ip_versionr
rh rc r= r> r? rd r@ rF gidrA rB classmethodr* r^ rr r r r! r r s ..
B %(((I B
\t
$
$
$F 4(((J I4(((M)&&&K
YE
"
"
"F 9$ D 9% D
)
C Le $ $ $E
,E
"
"
"C
,E
"
"
"C l%%%G u%%%I> > [> ^ ^ ^ [^@ ( ( [( ( (r r c t e Zd ZdZ ed Z ed Z ed Z G d d Z dS )rk z3Proactive defence php plugin environment variables.Fr# Tc > e Zd Zej ZdZdZ eddd Z dS )ProactiveEnv.Meta
proactive_envr rn rl rm N)
r r r r
r r r r r primary_keyr r r! r" rz s2 ;" "l:vw?? r r" N)
r r r rs r rn r rl rm r" r r r! rk rk s == |'''H 9% D I4 E@ @ @ @ @ @ @ @ @ @r rk c e Zd ZdZ edd Z edej Z G d d Z e
d
d Z e
dd Z dS )ProactiveIgnoredPathz"Ignore list for proactive defence.FT)r$ r| )r$ defaultc e Zd Zej ZdZdS )ProactiveIgnoredPath.Metaproactive_ignored_pathN)r r r r
r r r r r r! r" r s ;+r r" Nc t |g }g }| j j }d |D }|D ]C\ }}t | |d }|+| |r| n| D|D ])}||vr#| t | | *| t
j |j | S )z
To be able to use itertools.groupby, we need result
to be sorted by both path and timestamp, so in this method
we add this fields to order_by if they was not passed by
caller
Nc g | ]\ }}|S r r )r1 f_s r! r4 z5ProactiveIgnoredPath._apply_order.. s 222A1222r )_metasorted_field_namesgetattrrE descProactiveIgnoredRulerB rR ) r) rU rR orderfieldsorder_by_fields
field_namer fields r! _apply_orderz!ProactiveIgnoredPath._apply_order s H-22222 ( > > JCT22E T z,ProactiveIgnoredPath.fetch..) s ai; %@ r )keyc @ g | ]}|d
|d |d d S )rA NrB )r; rl r )r1 rows r! r4 z.ProactiveIgnoredPath.fetch..1 s= " " " # "9~ 9 $'y>3{;K L L 9 9 9r )r? r< rulesra )r: r? r< r rA rB rC r rD rJ r0 strrG r itertoolsgroupbyrM r/ rE )r)
limit_homedirrO rP rQ rR rK rL rU r\ max_countr2 gr? r< s r! r^ zProactiveIgnoredPath.fetch s
JJ H M ( *
$#T_
5
5
$ ++C
,>,>??@@A ))&1122A
.//A
>
+,,A Q ) ) %
GGII@@
DAq V###f++*=*="#i
$%." "'(" " "
NII& r r& )NNNNNr r )
r r r rs r r? r timer< r" rw r r^ r r r! r~ r~ s ,, 9%T 2 2 2D %;;;I, , , , , , , , " " " ["0 2! 2! 2! [2! 2! 2!r r~ c z e Zd ZdZ eeddd Z ed Z e d Z
G d d Z d S )
r zSpecific rules ignored.FCASCADEr )r$ on_delete related_namer# c $ e Zd Zej ZdZdZdS )ProactiveIgnoredRule.Metaproactive_ignored_rule)))r? rA TN)r r r r
r r r indexesr r r! r" r M s ;+0r r" N) r r r rs r r~ r? r rA r rB r" r r r! r r = s !! ?
D l&&&G u%%%I1 1 1 1 1 1 1 1 1 1r r ) r r rH peeweer r r r r r r r
r functoolsr defence360agent.modelr
r $defence360agent.model.simplificationr im360.model.countryr im360.model.firewallr r r rk r~ r r r r! r s
1 1 1 1 1 1 1 1 ? ? ? ? ? ? ' ' ' ' ' ' 6 6 6 6 6 6 6 6w w w w w w w wt@ @ @ @ @5 @ @ @"X! X! X! X! X!5 X! X! X!v1 1 1 1 15 1 1 1 1 1r