If you've got an internet-facing PHP server you can't afford to turn off for the whole day, putting this in every VirtualHost might help:

https://github.com/syhunt/php2shell-protection/blob/main/https/.htaccess

(It will disable most file uploads. Small price to pay if that saves your server from the phpocalypse.)