Útoky přes Log4Shell se objevily již počátkem prosince.

Earliest evidence we’ve found so far of #Log4J exploit is 2021-12-01 04:36:50 UTC. That suggests it was in the wild at least 9 days before publicly disclosed. However, don’t see evidence of mass exploitation until after public disclosure.

— Matthew Prince ???? (@eastdakota) December 11, 2021

Kryptos Logic's log4j (CVE-2021-44228) scanner discovered more than 10,000 vulnerable host using simple HTTP header probing. As always, you can register for free vulnerability notification on https://t.co/kiZvKnnMXv. https://t.co/QnkGnp9SCx pic.twitter.com/g18eF2JsGm

— Marcus Hutchins (@MalwareTechBlog) December 12, 2021