Imunify Aborts automatically for all accounts
I dont know why, i see aborted for all account during scan, same with scanning for a single user.
In /var/log/imunify360/error_log i got:
WARNING [2025-12-25 01:57:33,973] imav.malwarelib.scan.mds.detached: Cannot find the mds process to kill (d24da9679ea94d9c91dab8217512421b): FileNotFoundError(2, 'No such file or directory'). Assuming it's already dead.
WARNING [2025-12-25 01:57:33,975] imav.malwarelib.scan.mds.detached: Scan d24da9679ea94d9c91dab8217512421b was aborted: , /opt/alt/php-internal/usr/bin/php: symbol lookup error: /opt/alt/curlssl30/usr/lib64/libcurl.so.4: undefined symbol: libssh2_session_callback_set2
/opt/alt/php-internal/usr/bin/php: symbol lookup error: /opt/alt/curlssl30/usr/lib64/libcurl.so.4: undefined symbol: libssh2_session_callback_set2
/opt/alt/php-internal/usr/bin/php: symbol lookup error: /opt/alt/curlssl30/usr/lib64/libcurl.so.4: undefined symbol: libssh2_session_callback_set2
WARNING [2025-12-25 02:05:55,796] defence360agent.defence360: Pid file wasn't created or pid file is empty: /var/imunify360/aibolit/run/07d2e093aa3b41b7bbd877ed69adac40/pid, error: [Errno 2] No such file or directory: '/var/imunify360/aibolit/run/07d2e093aa3b41b7bbd877ed69adac40/pid'
WARNING [2025-12-25 02:05:57,127] imav.malwarelib.scan.ai_bolit.detached: Cannot find the aibolit process to kill (07d2e093aa3b41b7bbd877ed69adac40): FileNotFoundError(2, 'No such file or directory'). Assuming it's already dead.
WARNING [2025-12-25 02:05:57,128] imav.malwarelib.scan.ai_bolit.detached: Scan was aborted: /opt/alt/php-internal/usr/bin/php: symbol lookup error: /opt/alt/curlssl30/usr/lib64/libcurl.so.4: undefined symbol: libssh2_session_callback_set2
Child process finished with 127 exit code
,
WARNING [2025-12-25 02:16:50,651] defence360agent.files: Fixing wrong permission to file/dir /var/imunify360/files/wp-rules [0o777] expected [0o770] (not symlink)
WARNING [2025-12-25 02:16:50,848] defence360agent.files: Fixing wrong permission to file/dir /var/imunify360/files/email-rules [0o777] expected [0o770] (not symlink)
WARNING [2025-12-25 02:16:50,989] defence360agent.files: Fixing wrong permission to file/dir /var/imunify360/files/auditd-log-reader [0o777] expected [0o770] (not symlink)
WARNING [2025-12-25 02:16:51,116] defence360agent.files: Fixing wrong permission to file/dir /var/imunify360/files/ip-record [0o777] expected [0o770] (not symlink)
WARNING [2025-12-25 02:16:51,119] im360.subsys.panels.update_hooks: Can't update ip-record.db, reason: [Errno 2] No such file or directory: '/etc/apache2/conf.d/modsec_vendor_configs/imunify360-full-litespeed/ip-record.db'
WARNING [2025-12-25 02:16:52,066] defence360agent.files: Fixing wrong permission to file/dir /var/imunify360/files/php-immunity [0o777] expected [0o700] (not symlink)
WARNING [2025-12-25 02:16:53,057] defence360agent.files: Fixing wrong permission to file/dir /var/imunify360/files/realtime-av-conf [0o777] expected [0o770] (not symlink)
WARNING [2025-12-25 02:16:53,869] defence360agent.files: Fixing wrong permission to file/dir /var/imunify360/files/modsec [0o777] expected [0o770] (not symlink)
WARNING [2025-12-25 02:16:57,436] im360.subsys.panels.update_hooks: Can't update ip-record.db, reason: [Errno 2] No such file or directory: '/etc/apache2/conf.d/modsec_vendor_configs/imunify360-full-litespeed/ip-record.db'
WARNING [2025-12-25 02:16:57,444] im360.subsys.panels.update_hooks: Invalid content in /etc/apache2/conf.d/modsec_vendor_configs/imunify360-full-litespeed/018_Disable_WP_Redirect.conf: # ------------------------------------------------------
# Imunify360 ModSecurity Rules
# Copyright (C) 2025 CloudLinux Inc All right reserved
# The Imunify360 ModSecurity Rules is distributed under
# IMUNIFY360 LICENSE AGREEMENT
# ------------------------------------------------------
# Imunify360 ModSecurity Base Ruleset
SecRuleRemoveById 33355
WARNING [2025-12-25 02:16:57,471] im360.subsys.panels.update_hooks: App based rules not updated: WAF rules configurator supports only apache webserver with version >= 2.4 or apache2nginx and ModSecurity 2
WARNING [2025-12-25 02:16:57,766] defence360agent.files: Fixing wrong permission to file/dir /var/imunify360/files/whitelist [0o777] expected [0o770] (not symlink)
WARNING [2025-12-25 02:16:58,232] defence360agent.files: Fixing wrong permission to file/dir /var/imunify360/files/proactive-config [0o777] expected [0o770] (not symlink)
WARNING [2025-12-25 02:16:59,007] defence360agent.files: Fixing wrong permission to file/dir /var/imunify360/files/eula [0o777] expected [0o770] (not symlink)
WARNING [2025-12-25 02:17:00,762] defence360agent.files: Fixing wrong permission to file/dir /var/imunify360/files/geo [0o777] expected [0o770] (not symlink)
WARNING [2025-12-25 02:17:05,076] defence360agent.files: Fixing wrong permission to file/dir /var/imunify360/files/sigs [0o777] expected [0o775] (not symlink)
WARNING [2025-12-25 02:17:05,385] defence360agent.files: Fixing wrong permission to file/dir /var/imunify360/files/ossec [0o777] expected [0o770] (not symlink)
WARNING [2025-12-25 02:17:45,865] defence360agent.files: Fixing wrong permission to file/dir /var/imunify360/files/proactive [0o777] expected [0o770] (not symlink)
-
Hey there! Unfortunately I'm not finding much on my end for this issue so it would likely be best to create a ticket so this can be investigated directly on your server.
0
Please sign in to leave a comment.
Comments
1 comment