Amazon Web Services logged attempts to leverage the internet-melting PHP2Shell bugs four days ago. They’re now being “broadly exploited” across the internet.
Source: https://www.wired.com/story/hackers-exploited-the-php-vulnerabilities-days-before-they-were-patched/
