Computer Help and Support

From above (and other sources too):

Well, no. I don't think that's quite correct. I'm running a web server with Apache, which by default it does *not* include Log4j (or Java). So to assert that every web server has the Log4j vulnerability is just not true.

Log4j is widely used as a logging too, but it is not installed by default when you run an Apache web server.

What is true is that my server's logs are full of hackers testing to see if I've got Log4j installed.

It bugs me that there's no infrastructure to block IP addresses that are being used by attackers. They can attack endlessly without consequence. I can add their addresses to my own black-list, but I'd sure like to see traffic from them blocked by their ISP (and if their ISP doesn't cooperate, drop the ISP from the Internet).