Today I learned InfoSec's acronym for "did this exploit actually hit me while I was asleep?" is IoC (Indicators of Compromise) and I'm currently searching for those on the #PHP2Shell case. Because it turns out it might have been actively exploited all the way since JUNE!