Follow how the internet is patching the PHP vuln, more or less in realtime. 7 million out of 41 million (that could be identified) are fixed. 4 are mine, I guess. https://php2shell.censys.com/