Log4Shell CVE-2021-44228 JNDI Injection Attempt Detection

Ankit Mehta@Secvyn

•updated Jun 30, 2026•0•0•0

Detects network exploitation attempts related to the Log4j vulnerability (CVE-2021-44228), where an adversary sends an HTTP request containing a JNDI lookup string (e.g., ldap://, rmi://, dns://) designed to trigger a remote code execution via vulnerable Log4j libraries.