Public proofs-of-concept of web shell exploits coincide with major spikes in attacks.