I noticed in my apache log files attempts to load .php files from my main peertube instance.

20.1.169.243 - - [16/Aug/2026:14:55:28 +0200] « GET /wp-admin/css/colors/blue/xmrlpc.php HTTP/1.1 » 200 21540
20.1.169.243 - - [16/Aug/2026:14:55:28 +0200] « GET /wp-content/themes/wp-pridmag/layout.php HTTP/1.1 » 200 21548
20.1.169.243 - - [16/Aug/2026:14:55:28 +0200] « GET /wp-includes/ID3/post.php HTTP/1.1 » 200 21518
20.1.169.243 - - [16/Aug/2026:14:55:28 +0200] « GET /logins.php HTTP/1.1 » 200 21490
20.1.169.243 - - [16/Aug/2026:14:55:28 +0200] « GET /wp-includes/js/tinymce/flower.php HTTP/1.1 » 200 21536
20.1.169.243 - - [16/Aug/2026:14:55:28 +0200] « GET /wp-includes/Text/Diff/Renderer/install.php HTTP/1.1 » 200 21554
20.1.169.243 - - [16/Aug/2026:14:55:28 +0200] « GET /wp-error.php HTTP/1.1 » 200 21494
20.1.169.243 - - [16/Aug/2026:14:55:28 +0200] « GET /change_password.php HTTP/1.1 » 200 21508
20.1.169.243 - - [16/Aug/2026:14:55:28 +0200] « GET /colors/light/about.php HTTP/1.1 » 200 21514
…

Looking at the IPs: from everywhere in the world, but organization is always « Microsoft Corporation ».

So I added ProxyPassMatch « ^/(.*\.php)$ » ! to reduce cpu work and lighten the 404 response (21KB to 236B) in the apache2 proxy in front of the virtual machine hosting this peertube instance:

ProxyPass /.well-known/acme-challenge !
ProxyPassMatch "^/(.*\.php)$" !
ProxyPass / https://<local-IP-peertube-VM>:443/ timeout=1200 KeepAlive=On
ProxyPassReverse / https://<local-IP-peertube-VM>:443/

I just hope PeerTube will never host files with .php extension. Just in case.

1 message - 1 participant(e)

Lire le sujet en entier