AlistGo / alist

🗂️A file list/WebDAV program that supports multiple storages, powered by Gin and Solidjs. / 一个支持多存储的文件列表/WebDAV程序,使用 Gin 和 Solidjs。
https://alist.nn.ci
GNU Affero General Public License v3.0
43.26k stars 5.61k forks source link

最近这段时间 115疯狂报 安全威胁,您的访问被阻断 #7384

Open KleinerSource opened 2 days ago

KleinerSource commented 2 days ago

Please make sure of the following things

AList Version / AList 版本

v3.38.0

Driver used / 使用的存储驱动

115

Describe the bug / 问题描述

最近这段时间 115疯狂报 安全威胁,您的访问被阻断 每次换了token没多久又这样了 分页大小都设置成20了 限制速率 为2 依旧是频繁阻断 image

image

Reproduction / 复现链接

/

Config / 配置

{ "force": false, "site_url": "**", "cdn": "", "jwt_secret": "***", "token_expires_in": 72, "database": { "type": "sqlite3", "host": "", "port": 0, "user": "", "password": "", "name": "", "db_file": "data/data.db", "tableprefix": "x", "ssl_mode": "", "dsn": "" }, "meilisearch": { "host": "http://localhost:7700", "api_key": "", "index_prefix": "" }, "scheme": { "address": "0.0.0.0", "http_port": 5244, "https_port": -1, "force_https": false, "cert_file": "", "key_file": "", "unix_file": "", "unix_file_perm": "" }, "temp_dir": "data/temp", "bleve_dir": "data/bleve", "dist_dir": "", "log": { "enable": true, "name": "log/log.log", "max_size": 10, "max_backups": 5, "max_age": 28, "compress": false }, "delayed_start": 0, "max_connections": 0, "tls_insecure_skip_verify": false, "tasks": { "download": { "workers": 5, "max_retry": 1, "task_persistant": true }, "transfer": { "workers": 5, "max_retry": 2, "task_persistant": true }, "upload": { "workers": 5, "max_retry": 0, "task_persistant": false }, "copy": { "workers": 5, "max_retry": 2, "task_persistant": true } }, "cors": { "allow_origins": [ "" ], "allow_methods": [ "" ], "allow_headers": [ "*" ] }, "s3": { "enable": false, "port": 5246, "ssl": false } }

Logs / 日志

INFO[2024-10-24 08:13:17] using aria2 version: 1.36.0
WARN[2024-10-24 08:13:18] [115] get app version failed: {"state":true,"err_code":0,"error":"","data":{"win":{"version_code":"27.0.6.3","created_time":1728742124,"version_url":"https:\/\/down.115.com\/client\/win\/115br_v27.0.6.3.exe"},"android":{"version_code":"16.5.0","created_time":1725501161,"version_url":"https:\/\/down.115.com\/client\/tv\/115TV_16.5.0.apk"},"mac":{"version_code":"27.0.6.3","created_time":1728742166,"version_url":"https:\/\/down.115.com\/client\/mac\/115br_v27.0.6.3_x64.dmg"},"window_115":{"version_code":"1.0.0.0","created_time":1721290208,"version_url":"https:\/\/down.115.com\/client\/win\/115br_v26.0.7.2.exe"},"mac_115":{"version_code":"1.0.0.0","created_time":1721290089,"version_url":"https:\/\/down.115.com\/client\/mac\/115br_v26.0.7.2_x64.dmg"},"linux_115":{"version_code":"1.0.0.0","created_time":1721290337,"version_url":"http:\/\/127.0.0.1:8000\/115_2.0.0.16.deb"},"win64":{"version_code":"27.0.6.3","created_time":1728742079,"version_url":"https:\/\/down.115.com\/client\/win\/115br_v27.0.6.3_x64.exe"},"mac_arm":{"version_code":"27.0.6.3","created_time":1728742222,"version_url":"https:\/\/down.115.com\/client\/mac\/115br_v27.0.6.3_arm64.dmg"}}}: unexpected error [GIN] 2024/10/24 - 08:14:11 | 200 | 232.5µs | 10.0.0.1 | GET "/" [GIN] 2024/10/24 - 08:14:11 | 200 | 843.866µs | 10.0.0.1 | GET "/api/me" [GIN] 2024/10/24 - 08:14:12 | 200 | 632.126µs | 10.0.0.1 | GET "/api/public/settings" [GIN] 2024/10/24 - 08:14:12 | 200 | 151.569µs | 10.0.0.1 | GET "/api/me" [GIN] 2024/10/24 - 08:14:14 | 200 | 631.676µs | 10.0.0.1 | POST "/api/auth/login/hash" [GIN] 2024/10/24 - 08:14:14 | 200 | 193.91µs | 10.0.0.1 | GET "/api/me" [GIN] 2024/10/24 - 08:14:14 | 200 | 68.298µs | 10.0.0.1 | GET "/api/public/offline_download_tools" [GIN] 2024/10/24 - 08:14:14 | 200 | 830.45µs | 10.0.0.1 | POST "/api/fs/get" [GIN] 2024/10/24 - 08:14:14 | 200 | 477.194µs | 10.0.0.1 | POST "/api/fs/list" [GIN] 2024/10/24 - 08:14:15 | 200 | 401.766µs | 10.0.0.1 | POST "/api/fs/list" ERRO[2024-10-24 08:14:16] fs/list: unexpected error github.com/SheltonZhu/115driver/pkg/driver.init

:1 runtime.doInit1 /opt/hostedtoolcache/go/1.23.2/x64/src/runtime/proc.go:7290 runtime.doInit /opt/hostedtoolcache/go/1.23.2/x64/src/runtime/proc.go:7257 runtime.main /opt/hostedtoolcache/go/1.23.2/x64/src/runtime/proc.go:254 runtime.goexit /opt/hostedtoolcache/go/1.23.2/x64/src/runtime/asm_amd64.s:1700 405
github.com/SheltonZhu/115driver/pkg/driver.GetErr /home/runner/go/pkg/mod/github.com/!shelton!zhu/115driver@v1.0.29/pkg/driver/error.go:143 github.com/SheltonZhu/115driver/pkg/driver.(*BasicResp).Err /home/runner/go/pkg/mod/github.com/!shelton!zhu/115driver@v1.0.29/pkg/driver/response.go:48 github.com/SheltonZhu/115driver/pkg/driver.CheckErr /home/runner/go/pkg/mod/github.com/!shelton!zhu/115driver@v1.0.29/pkg/driver/error.go:154 github.com/SheltonZhu/115driver/pkg/driver.GetFiles /home/runner/go/pkg/mod/github.com/!shelton!zhu/115driver@v1.0.29/pkg/driver/dir.go:96 github.com/SheltonZhu/115driver/pkg/driver.(*Pan115Client).ListWithLimit /home/runner/go/pkg/mod/github.com/!shelton!zhu/115driver@v1.0.29/pkg/driver/dir.go:39 github.com/alist-org/alist/v3/drivers/115.(*Pan115).getFiles /home/runner/work/alist/alist/drivers/115/util.go:68 github.com/alist-org/alist/v3/drivers/115.(*Pan115).List /home/runner/work/alist/alist/drivers/115/driver.go:56 github.com/alist-org/alist/v3/internal/op.List.func1 /home/runner/work/alist/alist/internal/op/fs.go:125 github.com/alist-org/alist/v3/pkg/singleflight.(*Group[...]).doCall.func2 /home/runner/work/alist/alist/pkg/singleflight/singleflight.go:193 github.com/alist-org/alist/v3/pkg/singleflight.(*Group[...]).doCall /home/runner/work/alist/alist/pkg/singleflight/singleflight.go:195 github.com/alist-org/alist/v3/pkg/singleflight.(*Group[...]).Do /home/runner/work/alist/alist/pkg/singleflight/singleflight.go:108 github.com/alist-org/alist/v3/internal/op.List /home/runner/work/alist/alist/internal/op/fs.go:124 github.com/alist-org/alist/v3/internal/fs.list /home/runner/work/alist/alist/internal/fs/list.go:25 github.com/alist-org/alist/v3/internal/fs.List /home/runner/work/alist/alist/internal/fs/fs.go:22 github.com/alist-org/alist/v3/server/handles.FsList /home/runner/work/alist/alist/server/handles/fsread.go:86 github.com/gin-gonic/gin.(*Context).Next /home/runner/go/pkg/mod/github.com/gin-gonic/gin@v1.10.0/context.go:185 github.com/alist-org/alist/v3/server/middlewares.Auth /home/runner/work/alist/alist/server/middlewares/auth.go:73 github.com/gin-gonic/gin.(*Context).Next /home/runner/go/pkg/mod/github.com/gin-gonic/gin@v1.10.0/context.go:185 github.com/alist-org/alist/v3/server/middlewares.StoragesLoaded /home/runner/work/alist/alist/server/middlewares/check.go:14 github.com/gin-gonic/gin.(*Context).Next /home/runner/go/pkg/mod/github.com/gin-gonic/gin@v1.10.0/context.go:185 github.com/gin-gonic/gin.CustomRecoveryWithWriter.func1 /home/runner/go/pkg/mod/github.com/gin-gonic/gin@v1.10.0/recovery.go:102 github.com/gin-gonic/gin.(*Context).Next /home/runner/go/pkg/mod/github.com/gin-gonic/gin@v1.10.0/context.go:185 github.com/gin-gonic/gin.LoggerWithConfig.func1 /home/runner/go/pkg/mod/github.com/gin-gonic/gin@v1.10.0/logger.go:249 github.com/gin-gonic/gin.(*Context).Next /home/runner/go/pkg/mod/github.com/gin-gonic/gin@v1.10.0/context.go:185 github.com/gin-gonic/gin.(*Engine).handleHTTPRequest /home/runner/go/pkg/mod/github.com/gin-gonic/gin@v1.10.0/gin.go:633 github.com/gin-gonic/gin.(*Engine).ServeHTTP /home/runner/go/pkg/mod/github.com/gin-gonic/gin@v1.10.0/gin.go:589 net/http.serverHandler.ServeHTTP /opt/hostedtoolcache/go/1.23.2/x64/src/net/http/server.go:3210 net/http.(*conn).serve /opt/hostedtoolcache/go/1.23.2/x64/src/net/http/server.go:2092 runtime.goexit /opt/hostedtoolcache/go/1.23.2/x64/src/runtime/asm_amd64.s:1700 failed to list objs github.com/alist-org/alist/v3/internal/op.List.func1 /home/runner/work/alist/alist/internal/op/fs.go:127 github.com/alist-org/alist/v3/pkg/singleflight.(*Group[...]).doCall.func2 /home/runner/work/alist/alist/pkg/singleflight/singleflight.go:193 github.com/alist-org/alist/v3/pkg/singleflight.(*Group[...]).doCall /home/runner/work/alist/alist/pkg/singleflight/singleflight.go:195 github.com/alist-org/alist/v3/pkg/singleflight.(*Group[...]).Do /home/runner/work/alist/alist/pkg/singleflight/singleflight.go:108 github.com/alist-org/alist/v3/internal/op.List /home/runner/work/alist/alist/internal/op/fs.go:124 github.com/alist-org/alist/v3/internal/fs.list /home/runner/work/alist/alist/internal/fs/list.go:25 github.com/alist-org/alist/v3/internal/fs.List /home/runner/work/alist/alist/internal/fs/fs.go:22 github.com/alist-org/alist/v3/server/handles.FsList /home/runner/work/alist/alist/server/handles/fsread.go:86 github.com/gin-gonic/gin.(*Context).Next /home/runner/go/pkg/mod/github.com/gin-gonic/gin@v1.10.0/context.go:185 github.com/alist-org/alist/v3/server/middlewares.Auth /home/runner/work/alist/alist/server/middlewares/auth.go:73 github.com/gin-gonic/gin.(*Context).Next /home/runner/go/pkg/mod/github.com/gin-gonic/gin@v1.10.0/context.go:185 github.com/alist-org/alist/v3/server/middlewares.StoragesLoaded /home/runner/work/alist/alist/server/middlewares/check.go:14 github.com/gin-gonic/gin.(*Context).Next /home/runner/go/pkg/mod/github.com/gin-gonic/gin@v1.10.0/context.go:185 github.com/gin-gonic/gin.CustomRecoveryWithWriter.func1 /home/runner/go/pkg/mod/github.com/gin-gonic/gin@v1.10.0/recovery.go:102 github.com/gin-gonic/gin.(*Context).Next /home/runner/go/pkg/mod/github.com/gin-gonic/gin@v1.10.0/context.go:185 github.com/gin-gonic/gin.LoggerWithConfig.func1 /home/runner/go/pkg/mod/github.com/gin-gonic/gin@v1.10.0/logger.go:249 github.com/gin-gonic/gin.(*Context).Next /home/runner/go/pkg/mod/github.com/gin-gonic/gin@v1.10.0/context.go:185 github.com/gin-gonic/gin.(*Engine).handleHTTPRequest /home/runner/go/pkg/mod/github.com/gin-gonic/gin@v1.10.0/gin.go:633 github.com/gin-gonic/gin.(*Engine).ServeHTTP /home/runner/go/pkg/mod/github.com/gin-gonic/gin@v1.10.0/gin.go:589 net/http.serverHandler.ServeHTTP /opt/hostedtoolcache/go/1.23.2/x64/src/net/http/server.go:3210 net/http.(*conn).serve /opt/hostedtoolcache/go/1.23.2/x64/src/net/http/server.go:2092 runtime.goexit /opt/hostedtoolcache/go/1.23.2/x64/src/runtime/asm_amd64.s:1700 ERRO[2024-10-24 08:14:16] failed list /rw/115: unexpected error github.com/SheltonZhu/115driver/pkg/driver.init :1 runtime.doInit1 /opt/hostedtoolcache/go/1.23.2/x64/src/runtime/proc.go:7290 runtime.doInit /opt/hostedtoolcache/go/1.23.2/x64/src/runtime/proc.go:7257 runtime.main /opt/hostedtoolcache/go/1.23.2/x64/src/runtime/proc.go:254 runtime.goexit /opt/hostedtoolcache/go/1.23.2/x64/src/runtime/asm_amd64.s:1700 405
github.com/SheltonZhu/115driver/pkg/driver.GetErr /home/runner/go/pkg/mod/github.com/!shelton!zhu/115driver@v1.0.29/pkg/driver/error.go:143 github.com/SheltonZhu/115driver/pkg/driver.(*BasicResp).Err /home/runner/go/pkg/mod/github.com/!shelton!zhu/115driver@v1.0.29/pkg/driver/response.go:48 github.com/SheltonZhu/115driver/pkg/driver.CheckErr /home/runner/go/pkg/mod/github.com/!shelton!zhu/115driver@v1.0.29/pkg/driver/error.go:154 github.com/SheltonZhu/115driver/pkg/driver.GetFiles /home/runner/go/pkg/mod/github.com/!shelton!zhu/115driver@v1.0.29/pkg/driver/dir.go:96 github.com/SheltonZhu/115driver/pkg/driver.(*Pan115Client).ListWithLimit /home/runner/go/pkg/mod/github.com/!shelton!zhu/115driver@v1.0.29/pkg/driver/dir.go:39 github.com/alist-org/alist/v3/drivers/115.(*Pan115).getFiles /home/runner/work/alist/alist/drivers/115/util.go:68 github.com/alist-org/alist/v3/drivers/115.(*Pan115).List /home/runner/work/alist/alist/drivers/115/driver.go:56 github.com/alist-org/alist/v3/internal/op.List.func1 /home/runner/work/alist/alist/internal/op/fs.go:125 github.com/alist-org/alist/v3/pkg/singleflight.(*Group[...]).doCall.func2 /home/runner/work/alist/alist/pkg/singleflight/singleflight.go:193 github.com/alist-org/alist/v3/pkg/singleflight.(*Group[...]).doCall /home/runner/work/alist/alist/pkg/singleflight/singleflight.go:195 github.com/alist-org/alist/v3/pkg/singleflight.(*Group[...]).Do /home/runner/work/alist/alist/pkg/singleflight/singleflight.go:108 github.com/alist-org/alist/v3/internal/op.List /home/runner/work/alist/alist/internal/op/fs.go:124 github.com/alist-org/alist/v3/internal/fs.list /home/runner/work/alist/alist/internal/fs/list.go:25 github.com/alist-org/alist/v3/internal/fs.List /home/runner/work/alist/alist/internal/fs/fs.go:22 github.com/alist-org/alist/v3/server/handles.FsList /home/runner/work/alist/alist/server/handles/fsread.go:86 github.com/gin-gonic/gin.(*Context).Next /home/runner/go/pkg/mod/github.com/gin-gonic/gin@v1.10.0/context.go:185 github.com/alist-org/alist/v3/server/middlewares.Auth /home/runner/work/alist/alist/server/middlewares/auth.go:73 github.com/gin-gonic/gin.(*Context).Next /home/runner/go/pkg/mod/github.com/gin-gonic/gin@v1.10.0/context.go:185 github.com/alist-org/alist/v3/server/middlewares.StoragesLoaded /home/runner/work/alist/alist/server/middlewares/check.go:14 github.com/gin-gonic/gin.(*Context).Next /home/runner/go/pkg/mod/github.com/gin-gonic/gin@v1.10.0/context.go:185 github.com/gin-gonic/gin.CustomRecoveryWithWriter.func1 /home/runner/go/pkg/mod/github.com/gin-gonic/gin@v1.10.0/recovery.go:102 github.com/gin-gonic/gin.(*Context).Next /home/runner/go/pkg/mod/github.com/gin-gonic/gin@v1.10.0/context.go:185 github.com/gin-gonic/gin.LoggerWithConfig.func1 /home/runner/go/pkg/mod/github.com/gin-gonic/gin@v1.10.0/logger.go:249 github.com/gin-gonic/gin.(*Context).Next /home/runner/go/pkg/mod/github.com/gin-gonic/gin@v1.10.0/context.go:185 github.com/gin-gonic/gin.(*Engine).handleHTTPRequest /home/runner/go/pkg/mod/github.com/gin-gonic/gin@v1.10.0/gin.go:633 github.com/gin-gonic/gin.(*Engine).ServeHTTP /home/runner/go/pkg/mod/github.com/gin-gonic/gin@v1.10.0/gin.go:589 net/http.serverHandler.ServeHTTP /opt/hostedtoolcache/go/1.23.2/x64/src/net/http/server.go:3210 net/http.(*conn).serve /opt/hostedtoolcache/go/1.23.2/x64/src/net/http/server.go:2092 runtime.goexit /opt/hostedtoolcache/go/1.23.2/x64/src/runtime/asm_amd64.s:1700 failed to list objs github.com/alist-org/alist/v3/internal/op.List.func1 /home/runner/work/alist/alist/internal/op/fs.go:127 github.com/alist-org/alist/v3/pkg/singleflight.(*Group[...]).doCall.func2 /home/runner/work/alist/alist/pkg/singleflight/singleflight.go:193 github.com/alist-org/alist/v3/pkg/singleflight.(*Group[...]).doCall /home/runner/work/alist/alist/pkg/singleflight/singleflight.go:195 github.com/alist-org/alist/v3/pkg/singleflight.(*Group[...]).Do /home/runner/work/alist/alist/pkg/singleflight/singleflight.go:108 github.com/alist-org/alist/v3/internal/op.List /home/runner/work/alist/alist/internal/op/fs.go:124 github.com/alist-org/alist/v3/internal/fs.list /home/runner/work/alist/alist/internal/fs/list.go:25 github.com/alist-org/alist/v3/internal/fs.List /home/runner/work/alist/alist/internal/fs/fs.go:22 github.com/alist-org/alist/v3/server/handles.FsList /home/runner/work/alist/alist/server/handles/fsread.go:86 github.com/gin-gonic/gin.(*Context).Next /home/runner/go/pkg/mod/github.com/gin-gonic/gin@v1.10.0/context.go:185 github.com/alist-org/alist/v3/server/middlewares.Auth /home/runner/work/alist/alist/server/middlewares/auth.go:73 github.com/gin-gonic/gin.(*Context).Next /home/runner/go/pkg/mod/github.com/gin-gonic/gin@v1.10.0/context.go:185 github.com/alist-org/alist/v3/server/middlewares.StoragesLoaded /home/runner/work/alist/alist/server/middlewares/check.go:14 github.com/gin-gonic/gin.(*Context).Next /home/runner/go/pkg/mod/github.com/gin-gonic/gin@v1.10.0/context.go:185 github.com/gin-gonic/gin.CustomRecoveryWithWriter.func1 /home/runner/go/pkg/mod/github.com/gin-gonic/gin@v1.10.0/recovery.go:102 github.com/gin-gonic/gin.(*Context).Next /home/runner/go/pkg/mod/github.com/gin-gonic/gin@v1.10.0/context.go:185 github.com/gin-gonic/gin.LoggerWithConfig.func1 /home/runner/go/pkg/mod/github.com/gin-gonic/gin@v1.10.0/logger.go:249 github.com/gin-gonic/gin.(*Context).Next /home/runner/go/pkg/mod/github.com/gin-gonic/gin@v1.10.0/context.go:185 github.com/gin-gonic/gin.(*Engine).handleHTTPRequest /home/runner/go/pkg/mod/github.com/gin-gonic/gin@v1.10.0/gin.go:633 github.com/gin-gonic/gin.(*Engine).ServeHTTP /home/runner/go/pkg/mod/github.com/gin-gonic/gin@v1.10.0/gin.go:589 net/http.serverHandler.ServeHTTP /opt/hostedtoolcache/go/1.23.2/x64/src/net/http/server.go:3210 net/http.(*conn).serve /opt/hostedtoolcache/go/1.23.2/x64/src/net/http/server.go:2092 runtime.goexit /opt/hostedtoolcache/go/1.23.2/x64/src/runtime/asm_amd64.s:1700 failed get objs [GIN] 2024/10/24 - 08:14:16 | 200 | 114.573245ms | 10.0.0.1 | POST "/api/fs/list"
pengs361 commented 2 days ago

是啊,我这边也是,直接没法用了

li-peifeng commented 23 hours ago

分页大小设1000,20太小了,文件一多就风控