He pointed to the live traffic capture. Server 04 was a standard e-commerce node, supposed to be serving static assets—JPEGs, CSS files, some JavaScript. But the incoming request wasn't a GET request for an image.
Tengine is a powerful web server, but it's important to be aware of the potential for vulnerabilities and exploits. By following security best practices and keeping your server up to date, you can help protect your website and data from attackers. tengine exploit
A few community/security blog posts worth reading: He pointed to the live traffic capture