Open question, maybe for @joshbressers .

We know vulnerable Log4j version to log4shell are still downloaded to this day.

How many actual breach have used it?

I ask because it is a useful way to analyse the whole "apocalypse of vulnerability". If even multiple years non patched one that attackers knows about are not used....