관리-도구
편집 파일: infected_domain.cpython-311.pyc
� IMg� � � � d dl Z d dlZd dlZd dlmZmZmZmZ d dlm Z m Z ej e � � Z G d� de � � ZdS )� N)� CharField� FloatField� IntegerField� TextField)�instance�Modelc �� � e Zd ZdZ ed�� � Z ed�� � Z ed�� � Z ed�� � Z e � � Z e d�� � Z G d� d� � Zed d �� � Zed � � � Zd S )�InfectedDomainListzDDomains with bad reputation, used for Reputation Management feature.T)� primary_key)�nullFc � � e Zd Zej ZdZdS )�InfectedDomainList.Meta�infected_domain_listN)�__name__� __module__� __qualname__r �db�database�db_table� � �Z/opt/imunify360/venv/lib/python3.11/site-packages/defence360agent/model/infected_domain.py�Metar ! s � � � � � ��;��)���r r r �2 c �� �� | � � � � | j | j | j � � � � � }�fd�|� � � D � � }t j |d� �� � }d}g }t |� � D ]P\ } } |dz }t |� � |k r3| |k r-| \ } } | \ } }|� | |d� | D � � d�� � �Q||fS )Nc 3 �0 �K � | ]}|d �v � |V � �dS )�usernameNr )�.0�row�existing_userss �r � <genexpr>z1InfectedDomainList.get_by_user.<locals>.<genexpr>, s: �� � � � � ��C� �O�~�,M�,M�C�,M�,M�,M�,M� � r c �" � | d | d fS )Nr �namer )r s r �<lambda>z0InfectedDomainList.get_by_user.<locals>.<lambda>0 s � �s�:���F� �.L� r )�keyr � c �> � g | ]}|d |d |d d���S )� threat_type�vendor� timestamp)�typer) r* r )r �ts r � <listcomp>z2InfectedDomainList.get_by_user.<locals>.<listcomp>> sG � � $� $� $� !"� )*�-�(8�*+�H�+�-.�{�^� � �$� $� $r )r �domain�threats) �select�order_byr r# r* �desc�dicts� itertools�groupby� enumerate�len�append)�clsr �offset�limit�query�filtered_by_user�grouped� max_count�result�i�value�groupr/ r r# s ` r � get_by_userz InfectedDomainList.get_by_user% s; �� � � � � � �%�%� �L�#�(�C�M�$6�$6�$8�$8� � �� � � � � �;�;�=�=� � � �� �#� �"L�"L� � � �� � ���!�'�*�*� � �H�A�u� ��N�I��F� � �e�#�#�!�v�+�+�!&���w�!&���$�� � �$,�"&�$� $� &-� $� $� $� � � � � �� �y� � r c � � d� | � � � � � � D � � }t j � � � 5 | � � � � � � t j � � }|D ]�}|d }||vr t � d|� � �*|| D ]h}|d }|dv r|d d } n|dk r |d } n |d v rd } nd } |� || |f|� � } | � ||| || � � � �i�� d d d � � d S # 1 swxY w Y d S )a Update domain reputatuion info. If threat info already exists, do not update timestamp :param domains: reputation data from server :param domains_to_users: domain -> users mapping from hosting panel :return: c �J � i | ] }|d |d |d f|d ��!S )r# r( r) r* r )r �rs r � <dictcomp>z6InfectedDomainList.refresh_domains.<locals>.<dictcomp>T sB � � � � �� �v�Y��-�(�!�H�+� 6��+�� � � r r< z Users for domain %s not found.r) )zgoogle-safe-browsingzyandex-safe-browsing�detailsr( �spamhaus)� phishtank� openphishz spam domain�THREAT_TYPE_UNSPECIFIED)r r# r( r) r* N) r0 r3 r r �atomic�delete�execute�time�logger�warning�get�create) r9 �domains�domains_to_users�existing�now� domain_infor. �userr) r( r* s r �refresh_domainsz"InfectedDomainList.refresh_domainsJ s� � � � ��Z�Z�\�\�'�'�)�)� � � �� �[� � � !� !� � � �J�J�L�L� � � "� "� "��)�+�+�C� &� � � �$�W�-���!1�1�1��N�N�#C�V�L�L�L� � ,�V� 4� � �D� (�� 2�F� � "� � � '2�)�&<�]�&K� � � �:�-�-�&1�)�&<� � � �#=�=�=�&3� � �&?� � (� � � ��f�5�s�!� !�I� �J�J�!%� #�$/� %�"+� � � � � �#� � � � � � � � � � � � � ���� � � � � � s �CD5�5D9�<D9N)r r )r r r �__doc__r �idr r r# r( r r* r r) r � classmethodrD r\ r r r r r s� � � � � � �N�N� � �$� '� '� '�B��y�d�#�#�#�H� �9�%� � � �D� �)��'�'�'�K�� � � �I� �Y�D� !� !� !�F�*� *� *� *� *� *� *� *� �"!� "!� "!� �[�"!�H �,� ,� �[�,� ,� ,r r )r4 �loggingrQ �peeweer r r r �defence360agent.modelr r � getLoggerr rR r r r r �<module>rd s� �� � � � � ���� � � � �� � � � � � � � � � � � 2� 1� 1� 1� 1� 1� 1� 1� �� �8� $� $��f� f� f� f� f�� f� f� f� f� fr