tinyfilemanager文件管理器被爬虫攻击

Viewed 2

通过对源码的熟悉,来控制未开启登录tinyfilemanager文件的操作。
导致服务器CPU占用异常。
解决方案最简单的就是开启登录,$use_auth = true;
访客无操作权限。
127.0.0.1 - - [15/Jan/2026:10:00:48 +0800] "GET /index.php?copy=net-20260114103818-20260114133512-20260114133703-20260114134206-20260114134332-20260114135130-20260114140645-20260114140918-20260114182253-20260114182848-20260114183451.sh&finish=1&move=1&p= HTTP/1.1" 200 3893 "https://files.mblue.ltd/index.php?copy=net-20260114103818-20260114133512-20260114133703-20260114134206-20260114134332-20260114135130-20260114140645-20260114140918-20260114182253-20260114182848-20260114183451.sh&p=" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)"
127.0.0.1 - - [15/Jan/2026:10:00:49 +0800] "GET /index.php?copy=net-20260114103831-20260114133506-20260114133719-20260114134646-20260114134806-20260114143920-20260114144159-20260114174424-20260114174828-20260114175510-20260114175727.sh&finish=1&move=1&p= HTTP/1.1" 200 3893 "https://files.mblue.ltd/index.php?copy=net-20260114103831-20260114133506-20260114133719-20260114134646-20260114134806-20260114143920-20260114144159-20260114174424-20260114174828-20260114175510-20260114175727.sh&p=" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)"
127.0.0.1 - - [15/Jan/2026:10:00:23 +0800] "GET /index.php?del=net-20260114103818-20260114133512-20260114134205-20260114134509-20260114134649-20260114140039-20260114141908-20260114142222-20260114145017-20260114145156-20260114145437-20260115011834.sh&p= HTTP/1.1" 200 3893 "https://files.mblue.ltd/index.php?copy=net-20260114103818-20260114133512-20260114134205-20260114134509-20260114134649-20260114140039-20260114141908-20260114142222-20260114145017-20260114145156-20260114145437.sh&finish=1&p=" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)"
127.0.0.1 - - [15/Jan/2026:10:00:23 +0800] "GET /index.php?del=net-20260114103831-20260114133506-20260114133719-20260114134646-20260114134806-20260114143920-20260114144144-20260114170130-20260114175913-20260114180117-20260114180602-20260114222350.sh&p= HTTP/1.1" 200 3893 "https://files.mblue.ltd/index.php?copy=net-20260114103831-20260114133506-20260114133719-20260114134646-20260114134806-20260114143920-20260114144144-20260114170130-20260114175913-20260114180117-20260114180602.sh&finish=1&p=" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)"

0 Answers
Related