Imunify is not displaying the admin panel on whm

Raul Orue

• August 29, 2024 05:38
• Edited

Imunify is not displaying the admin panel, it only shows the gif icon that it is trying to display the panel and the tabs. Checking the logs (/var/log/imunify360/console.log) the following was found:

INFO    [2024-08-29 01:15:45,681] defence360agent.api.server: Performed request for url=https://api.imunify360.com/api/v2/send-message/COMMAND_INVOKE method=POST body size=455 status=200
INFO    [2024-08-29 01:15:45,682] defence360agent.api.server: Response=b'{"status":"ok","msg":"Message was sent to correlat' ...
INFO    [2024-08-29 01:15:45,683] defence360agent.plugins.client: message sent {'method': 'COMMAND_INVOKE', 'message_id': '0b9645a2c5b44a6eb3e99331817e5ec9'}
INFO    [2024-08-29 01:15:45,767] defence360agent.api.server: Performed request for url=https://api.imunify360.com/api/v2/send-message/COMMAND_INVOKE method=POST body size=428 status=200
INFO    [2024-08-29 01:15:45,768] defence360agent.api.server: Response=b'{"status":"ok","msg":"Message was sent to correlat' ...
INFO    [2024-08-29 01:15:45,769] defence360agent.plugins.client: message sent {'method': 'COMMAND_INVOKE', 'message_id': '8600b037ae08400780a5efa5512a1234'}
INFO    [2024-08-29 01:15:45,770] defence360agent.plugins.client: Unsuccessful to send 1 messages
INFO    [2024-08-29 01:15:45,770] defence360agent.plugins.client: SendToServer._send lock released

Recently there was an intrusion, specific directories were being scanned successfully identifying malware, but it remained like this after having left it scanning /home*/* which is generally done 1 or 2 times a week

• 

  ANZEEQ

  • August 29, 2024 13:44
  • Edited

  Hi Raul Orue,

  You may want to try the following in the stated seq:

  systemctl stop imunify360
  systemctl daemon-reload
  systemctl reset-failed imunify360
  systemctl start imunify360
  systemctl start imunify360-php-daemon

  Re-confirm if its all good by 

  systemctl status imunify360
  systemctl status imunify360-php-daemon

  Hope it helps.

  0
• 

  cPRex Jurassic Moderator

  • August 29, 2024 14:00

  Hey there!  Do you see any additional errors inside /usr/local/cpanel/logs/error_log about that issue?  That's always the first place I check when there is an interface issue, even if it's with a plugin.

  0
• 

  Raul Orue

  • August 29, 2024 17:58
  • Edited

  Thanks for the options, I have tried to run the suggested commands, but in my case they do not apply:

  [root@host ~]# systemctl stop imunify360
  Failed to stop imunify360.service: Unit imunify360.service not loaded.

  This worked for me, to continue with the other commands, but without satisfactory results:

  [root@host ~]# systemctl stop imunify-antivirus

   

  The error.log record is:

  WARNING [2024-08-29 01:15:43,600] defence360agent.rpc_tools.validate: Validation error with command ('ip-list', 'local', 'list'), params {'limit': 1 }, errors ["field: '('ip-list', 'local', 'list')', value: '{'limit': 1}', error: unknown field"] WARNING [2024-08-29 03:45:43,669] defence360agent.plugins.idle_time_out: Shutting down due to inactivity.
  WARNING [2024-08-29 04:22:34,660] defense360agent.plugins.idle_time_out: Shutting down due to inactivity.
  WARNING [2024-08-29 04:31:59,884] defense360agent.plugins.idle_time_out: Shutting down due to inactivity.
  WARNING [2024-08-29 07:57:14,227] defense360agent.rpc_tools.validate: Validation error with command ('ip-list', 'local', 'list'), params {'limit': 1}, errors ["field: '('ip-list', 'local', 'list')', value: '{'limit': 1}', error: unknown field"] ARNING [2024-08-29 08:03:47,259] defense360agent.plugins.idle_time_out: Shutting down due to inactivity.
  WARNING [2024-08-29 13:25:44,184] defence360agent.rpc_tools.validate: Validation error with command ('ip-list', 'local', 'list'), params {'limit': 1}, errors ["field: '('ip-list', 'local', 'list')', value: '{'limit': 1}', error: unknown field"]
  WARNING [2024-08-29 13:31:06,668] defence360agent.rpc_tools.validate: Validation error with command ('ip-list', 'local', 'list'), params {'limit': 1}, errors ["field: '('ip-list', 'local', 'list')', value: '{'limit': 1}', error: unknown field"]
  WARNING [2024-08-29 13:31:16,738] defense360agent.rpc_tools.validate: Validation error with command ('ip-list', 'local', 'list'), params {'limit': 1}, errors ["field: '('ip-list', 'local', 'list')', value: '{'limit': 1}', error: unknown field"] WARNING [ 2024-08-29 13:50:16,695] defense360agent.rpc_tools.validate: Validation error with command ('ip-list', 'local', 'list'), params {'limit': 1}, errors ["field: '('ip-list', 'local', 'list')', value: '{'limit': 1}', error: unknown field"]

  0
• 

  cPRex Jurassic Moderator

  • August 29, 2024 18:00

  I'm not finding much on my end related to this.  Could you create a ticket so this can be investigated on the machine?

  0
• 

  Raul Orue

  • August 31, 2024 05:19

  Thanks for the suggestion, I contacted the VPS provider and they confirmed that the problem is with the service and it is being reviewed... just to wait.

  0

Please sign in to leave a comment.