Relay sec. flaw

One of relays under ip 54.38.134.38 exposes it’s php file for download, when accessed in browser directly: http://54.38.134.38

webserver misconfig?

how is this related to Syncthing?

maybe it’s just the owner using another port for another application hosting not related to syncthing.