Has anyone noticed an increase in traffic from AS47528 PITERIX-AS, RU since Friday the 23rd? I am suspecting this is exploitation of CVE-2026-109618 and CVE-2026-109619, these vulnerabilities are also known as "php2shell" and allows for unauthenticated remote code execution in PHP. https://www.cisa.gov/news-events/alerts/2026/10/21/critical-vulnerabilities-... Thank you, Kevin McCormick