AWS Guard Duty: Ec2 with Recon:EC2/PortProbeUnprotectedPort
GuardDuty finding was triggered for ec2 instance.
Blog
AWS Guard Duty: Ec2 with UnauthorizedAccess:EC2/SSHBruteForce
GuardDuty finding was triggered for ec2 instance.
AWS Guard Duty: EC2 with suspicious traffic from an instance with malware
Suspicious traffic was found by AWS GuardDuty service on EC2 instance {AwsEc2Instance} ({AwsEc2Instance.InstanceId}) detected with malware by Orca. AWS GuardDuty...
Security group allows inbound access to TCP port 5432 (PostgreSQL Database)
An AWS Security Group acts as a virtual firewall for your instances to control inbound and outbound traffic. We identified...
Azure virtual machine with Windows distribution allows direct public RDP access
Remote Desktop Protocol (RDP) allows a user to connect to another computer ,with Windows operating systems, over a network connection....
Security group allows inbound access to TCP port 135 (RPC)
An AWS Security Group acts as a virtual firewall for your instances to control inbound and outbound traffic. We identified...
Security group allows inbound access to TCP port 3389 (RDP)
An AWS Security Group acts as a virtual firewall for your instances to control inbound and outbound traffic. We identified...
Azure Key vault is publicly accessible
By default, when you create a new key vault, the Azure Key Vault firewall is disabled. It's possible to enable...
Security group allows inbound access to Hadoop HDFS service ports
An AWS Security Group acts as a virtual firewall for your instances to control inbound and outbound traffic. We identified...