Indicator of compromise (IoC)
Japanese IoC（侵害の痕跡を示す目印）
A visible sign that lets you say "this trace means we were broken into", such as a suspicious connecting address or file. For PHP2Shell no decisive IoC has appeared yet, so you have to judge from unusual activity.