So, a large customer of mine is seeing some serious attempts to exploit the vulnerability (they're patched of course so it is failing). I say this to say if you have not patched yet, you are likely compromised.