21:07 有个 IP 103.46.186.148（UA libredtail-http，典型扫描器）来打了一整套 PHP 漏洞：
/apps/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php → 404
/index.php?s=/index/\think\app/invokefunction... → 404 (ThinkPHP RCE)
/public/index.php?s=/index/\think\app/invokefunction... → 404
/index.php?lang=../../../../../../usr/local/lib/php/pearcmd... → 404 (PEAR 写 webshell)
/containers/json → 404 (Docker API 探测)
还好我关服务保平安
PHP世界第一！
