Blog
AWS Guard Duty: Ec2 with Trojan:EC2/DGADomainRequest.B
GuardDuty finding was triggered for ec2 instance.
AWS Guard Duty: Ec2 with Recon:EC2/PortProbeUnprotectedPort
GuardDuty finding was triggered for ec2 instance.
AWS Guard Duty: Ec2 with UnauthorizedAccess:EC2/SSHBruteForce
GuardDuty finding was triggered for ec2 instance.
AWS Guard Duty: EC2 with suspicious traffic from an instance with malware
Suspicious traffic was found by AWS GuardDuty service on EC2 instance {AwsEc2Instance} ({AwsEc2Instance.InstanceId}) detected with malware by Orca. AWS GuardDuty...
Security group allows inbound access to TCP port 5432 (PostgreSQL Database)
An AWS Security Group acts as a virtual firewall for your instances to control inbound and outbound traffic. We identified...
Azure virtual machine with Windows distribution allows direct public RDP access
Remote Desktop Protocol (RDP) allows a user to connect to another computer ,with Windows operating systems, over a network connection....
Security group allows inbound access to TCP port 135 (RPC)
An AWS Security Group acts as a virtual firewall for your instances to control inbound and outbound traffic. We identified...
Security group allows inbound access to TCP port 3389 (RDP)
An AWS Security Group acts as a virtual firewall for your instances to control inbound and outbound traffic. We identified...