Sort by
Activity Summary - Week Ending on 16 May 2025:
- Red Sky identified 16,345 connections from ‘new’ and unique, compromised IP addresses
- Proton[.]me in France hit 1,164x
- RedSky Malicious E-mail Data Collection – last 7 Days
- CISA Alert – Hitachi Energy
Activity Summary - Week Ending on 9 May 2025:
- Red Sky identified 18,203 connections from ‘new’ and unique, compromised IP addresses
- Netutils[.]io in France hit 15x
- RedSky Malicious E-mail Data Collection – last 30 Days
- CISA Alert – BrightSign
- CVE-2
Activity Summary - Week Ending on 2 May 2025:
- Red Sky identified 18,203 connections from ‘new’ and unique, compromised IP addresses
- Netutils[.]io in France hit 15x
- RedSky Source Code Secrets Data Collection – last 90 Days
- CISA Alert – Delta Electro
Activity Summary - Week Ending on 25 April 2025:
- Red Sky identified 13,055 connections from ‘new’ and unique, compromised IP addresses
- HostBaltic in Lithuania hit 171x
- RedSky ThreatRecon – last 365 Days
- CISA Alert – Yokogawa
- CVE-2025-1863
- APT29/
Activity Summary - Week Ending on 18 April 2025:
- Red Sky identified 20,392 connections from ‘new’ and unique, compromised IP addresses
- Netiface in France hit 1,051x
- RedSky Store & Share Data Collection – last 90 Days
- CISA Alert – Mitsubishi Electri
Activity Summary - Week Ending on 11 April 2025:
- Red Sky identified 19,848 connections from ‘new’ and unique, compromised IP addresses
- BullRDP in Germany hit 118x
- RedSky Malicious Email Data Collection – last 30 Days
- CISA Alert – Fast Flux
- PDNS pro
Activity Summary - Week Ending on 4 April 2025:
- Red Sky identified 12,395 connections from ‘new’ and unique, compromised IP addresses
- Layerstack Cloud in Hong Kong hit 24x 2nd week
- RedSky Sinkhole Traffic – 1 Year
- CISA Alert – Supply Chain Integrity
Activity Summary - Week Ending on 28 March 2025:
- Red Sky identified 16,964 connections from ‘new’ and unique, compromised IP addresses
- Layerstack Cloud in Hong Kong hit 19x
- CISA Alert – CVE’s: 2025-24472 & 2025-30066
- RansomHub Affiliates
- Custom
Activity Summary - Week Ending on 21 March 2025:
- Red Sky identified 13,150 connections from ‘new’ and unique, compromised IP addresses
- RouterHosting LLC in Netherlands hit 200x
- CISA Alert – RaaS Medusa Ransomware
- Rclone
- TinyShell Back Door
- Junipe
Activity Summary - Week Ending on 14 March 2025:
- Red Sky identified 18,920 connections from ‘new’ and unique, compromised IP addresses
- PureVPN in Netherlands hit 206x
- CISA Alert - BACnet Capture Tool
- Impersonation of Official Emails
- Taiwan's Nation
Activity Summary - Week Ending on 7 March 2025:
- Red Sky identified 20,803 connections from ‘new’ and unique, compromised IP addresses
- TechOff Services LTD in Netherlands hit 3,081x
- CISA Alert - Edimax IC-7100 IP Camera: All versions
- Lynx Ransomware
Activity Summary - Week Ending on 28 February 2025:
- Red Sky identified 11,954 connections from ‘new’ and unique, compromised IP addresses
- 1337 Services GmbH in Poland hit 27x
- Red Sky Alliance Dark Web Keywords Data Collection (last 365 days)
- CISA A
Activity Summary - Week Ending on 21 February 2025:
- Red Sky identified 16,544 connections from ‘new’ and unique, compromised IP addresses
- Ekabi LLC in Netherlands hit 203x 2nd week
- Red Sky Alliance Threat Recon Data Collection (last 90 days)
- CISA Al
Activity Summary - Week Ending on 14 February 2025:
- Red Sky identified 19,619 connections from ‘new’ and unique, compromised IP addresses
- Ekabi LLC in Netherlands hit 198x
- Red Sky Alliance Dark Web – Ransomware Data Collection (last 365 days)
- CISA
Activity Summary - Week Ending on 7 February 2025:
- Red Sky identified 12,120 connections from ‘new’ and unique, compromised IP addresses
- Asia Pacific Network Information Center in Thailand 95x
- Red Sky Alliance Keylogger Data Collection (last 365 da
Activity Summary - Week Ending on 31 January 2025:
- Red Sky identified 12,783 connections from ‘new’ and unique, compromised IP addresses
- Data Center in Germany hit 197x 2nd week
- Red Sky Alliance Source Code Secrets Data Collection (last 90 days)
- CIS
Activity Summary - Week Ending on 24 January 2025:
- Red Sky identified 14,513 connections from ‘new’ and unique, compromised IP addresses
- Data Center in Germany hit 375x
- Red Sky Alliance Sinkhole Traffic Data Collection (last 90 days)
- CISA Report 01
Activity Summary - Week Ending on 17 January 2025:
- Red Sky identified 20,017 connections from ‘new’ and unique, compromised IP addresses
- DataCamp in Switzerland hit 212x 2nd week
- Red Sky Alliance Malicious Botnet Tracker Data Collection (last 365 da
Activity Summary - Week Ending on 10 January 2025:
- Red Sky identified 19,240 connections from ‘new’ and unique, compromised IP addresses
- DataCamp in Switzerland hit 210x
- Red Sky Alliance Malicious E-Mail Data Collection (last 90 days)
- CISA Report 01
Activity Summary - Week Ending on 3 January 2025:
- Red Sky identified 14,149 connections from ‘new’ and unique, compromised IP addresses
- rpd[.]sh in the Netherlands hit 108x
- Red Sky Alliance Dark Web Data Collection (last 365 days)
- CISA Report 12 30
