openlist被黑了

[PHCSJC]

用caddy做的反代，昨天加上日志才发现被黑好久了（访问的目录结构是对的），至少也有半年了，IP一直在变，117.136.106.141，116.252.28.245，111.58.246.50，117.141.144.195，61.137.178.68，39.187.79.111，112.43.80.138，42.242.221.252，171.107.118.47，112.43.80.138，全国各地都有，这是被当作资源站了吗？

只有一个admin用户，密码12位数字字母特殊符号组合，怎么破解的？数据字典暴力破解？

openlist重启后sign=这个失效了吧？

其实目录结构4个月前变了，加了二级目录#1818，但现在一直还在扫旧目录，为什么还一直扫？以为服务挂了等恢复？

{"level":"info","ts":"2026/04/29 08:21:47.084","logger":"http.log.access.log0","msg":"handled request","request":{"remote_ip":"117.136.106.141","remote_port":"54793","client_ip":"117.136.106.141","proto":"HTTP/1.1","method":"GET","host":"******:444","uri":"/d/share/189panclient/电视剧/凡人修仙传.2020/凡人修仙传.S01E171.2020.2160p.WEB-DL.H264.AAC.mp4?sign=s46UuUTRVzd03f3i3EgS047VzGDn7Z4dOsx91N-KsVE=:0","headers":{"User-Agent":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/67.0.3396.99 Safari/537.36"],"Accept-Encoding":["identity"],"Cache-Control":["no-cache"],"Connection":["keep-alive"],"Range":["bytes=29556736-30474239"],"Referer":["https://******:444/d/share/189panclient/%E7%94%B5%E8%A7%86%E5%89%A7/%E5%87%A1%E4%BA%BA%E4%BF%AE%E4%BB%99%E4%BC%A0.2020/"]},"tls":{"resumed":false,"version":772,"cipher_suite":4865,"proto":"","server_name":"*******"}},"bytes_read":0,"user_id":"","duration":0,"size":0,"status":0,"resp_headers":{"Server":["Caddy"],"Alt-Svc":["h3=\":444\"; ma=2592000"]}}

[PHCSJC]

知道了，是被加到资源站了，各种不同的客户端在访问，就是不知道是怎么被黑的😂😂😂
'"headers":{"User-Agent":["AndroidDownloadManager/9 (Linux; U; Android 9; FLA-AL10 Build/HUAWEIFLA-AL10)"]'

[jianboy]

应该没有关闭openlist分享功能吧，这样其他 openlist 就不可以挂载