Log4Shell JNDI Injection Exploitation Attempt (CVE-2021-44228)

Arnold Chan@slaz

•updated Sep 5, 2026•0•0•5

Detects attempts to exploit the Log4j vulnerability (CVE-2021-44228) by identifying JNDI lookups (ldap, rmi, http, ldaps, dns) in inbound HTTP traffic. These lookups are a hallmark of the Log4Shell attack vector, allowing for remote code execution.