Apache Log4j RCE vulnerability (CVE-2021-44228): Attack trials detected

created
( modified )
@scqrinc

Today, our company detected attack trials on Apache Log4j RCE vulnerability (CVE-2021-44228) due to its JNDI (“Java Naming and Directory Interface”) features to one of our servers in Swiss:

access log

As to those in Japan, not yet.

(Besides, based on OpenBSD and maintained to be free from JRE, they are safe on the issue.)


This post is based on the tweet by my company.


Comments or feedbacks are welcomed and appreciated.