Activity Summary - Week Ending on 29 May 2026
- Red Sky identified 7,993 connections from ‘new’ and unique, compromised IP addresses
- Cogent Communications in Singapore hit 415x
- CISA Alert: CVE-2026-48172 (LiteSpeed)
- FBI FLASH-20260526-01 / SRG Warnin
russia (16)
Activity Summary - Week Ending on 24 April 2026
- Red Sky identified 5,778 connections from ‘new’ and unique, compromised IP addresses
- Meowcore Softworks LLC in Germany hit 140x
- CISA Warning: Apache ActiveMQ Improper Input Validation & Microsoft Vuln
Activity Summary - Week Ending on 13 March 2026
- Red Sky identified 8,947 connections from ‘new’ and unique, compromised IP addresses
- FlokiNET ehf in Romania hit 52x
- CISA Warning: Omnissa, SolarWinds, & EPM
- 79 Microsoft CVEs
- OpenClaw
- ClawdBot and
Activity Summary - Week Ending on 30 January 2026
- Red Sky identified 8,740 connections from ‘new’ and unique, compromised IP addresses
- Oracle Svenska AB in Singapore hit 299x
- CISA Warning: Five KEV Catalog Up-Dates
- Hijacks in Claude Code
- Under
Activity Summary - Week Ending on 21 February 2025:
- Red Sky identified 16,544 connections from ‘new’ and unique, compromised IP addresses
- Ekabi LLC in Netherlands hit 203x 2nd week
- Red Sky Alliance Threat Recon Data Collection (last 90 days)
- CISA Al
Activity Summary - Week Ending on 20 December 2024:
- Red Sky identified 17,881 connections from ‘new’ and unique, compromised IP addresses
- M247 LTD Frankfurt Infrastructure in Germany hit 388x (2nd week)
- Red Sky Alliance Breach Data Collection (last
Activity Summary - Week Ending on 6 December 2024:
- Red Sky identified 19,804 connections from ‘new’ and unique, compromised IP addresses
- HostRoyale Technologies in Portugal hit 271x
- Malicious E-Mail Data Collection (last 30 days)
- Mozilla Vulnerabili
Activity Summary - Week Ending on 27 September 2024:
- Red Sky identified 11,361 connections from ‘new’ and unique, compromised IP addresses
- Hostglobal[.]plus in N. Ireland hit 3,971x
- 6 ‘new’ Botnets hits
- macOS Sequoia
- 1Password
- Sequoia, iCloud se
Activity Summary - Week Ending on 2 August 2024:
- Red Sky identified 11,275 connections from ‘new’ and unique, compromised IP addresses
- Ace Data Centers in Los Angeles hit 28x
- 13 ‘new’ Botnets hits
- India Post
- Smishing Attacks
- Newly Registered Appl
Activity Summary - Week Ending on 12 July 2024:
- Red Sky identified 23,214 connections from ‘new’ and unique, compromised IP addresses
- Microsoft in US hit 94x
- 6 ‘new’ Botnets hits
- ChamelGang
- Chinese APT group
- India Targeted - BestCrypt
Activity Summary - Week Ending on 19 April 2024:
- Red Sky identified 13, 693 connections from ‘new’ unique IP addresses
- DataCamp in Switzerland hit 128x
- 24 ‘new’ Botnets hits
- Software Support
- Software Maintenance and Support
- BackBlaze
- Edmond
Activity Summary - Week Ending on 12 January 2024:
- Red Sky identified 18,185 connections from ‘new’ unique IP addresses
- Digital Ocean in Singapore was hit 35x
- 42 ‘new’ Botnets hits
- PyPI Packages
- CoinMiner on Linux Devices
- CultureStreak
- Court Ser
Activity Summary - Week Ending on 16 November 2023:
- Red Sky identified 27,491 connections from ‘new’ unique IP addresses
- Amazon NoVa in Virginia hit 24x
- 31 ‘new’ Botnets hits
- Predator AI
- Tkinter-based GUI
- The GPTj Class
- StealerBuilder
- CozyBear
- UK fa
Activity Summary - Week Ending on 14 September 2023:
- Red Sky Alliance identified 766 connections from ‘new’ IP’s checking in with our Sinkholes
- Kyivstar[.]ua in Ukraine Hit 250x
- 135 ‘new’ Botnets hits
- MidgeDropper
- Complex Infection Chain
- Home to Wor
Activity Summary - Week Ending on 23 February 2023:
- Red Sky Alliance identified 8,782 connections from new IP’s checking in with our Sinkholes
- Gigi in Poland hit 349x
- Analysts identified 577 ‘new’ IP addresses participating in various Botnets
- CatB R
Activity Summary - Week Ending on 23 December 2022:
- Red Sky Alliance identified 44,282 connections from new IP’s checking in with our Sinkholes
- Frantech[.]ca In Las Vegas hit 16x (2nd week)
- Analysts identified 1,046 new IP addresses participating in
