Intel Reports

Activity Summary - Week Ending on 6 March 2026 

• Red Sky identified 9,080 connections from ‘new’ and unique, compromised IP addresses
• Amazon Data Services in the US hit 289x
• CISA Warning: Cisco SD-WAN Systems
• Zoom and Goggle Meet Vulnerabilities
• Dort

Activity Summary - Week Ending on 23 January 2026 

• Red Sky identified 4,795 connections from ‘new’ and unique, compromised IP addresses
• Microsoft Corp in S. Korea hit 1,258x
• CISA Warning: AI in OT
• AutoLogger-Diagtrack-Listener.etl
• Event Tracing for

Activity Summary - Week Ending on 29 August 2025 

• Red Sky identified 10,327 connections from ‘new’ and unique, compromised IP addresses
• OVH Hosting, Inc. in Canada hit 55x
• RedSkyAlliance CTAC – Dark Web Forums/Marketplaces: 90-days
• CISA Alert - Appl

Activity Summary - Week Ending on 28 June 2024:

• Red Sky identified 19,718 connections from ‘new’ and unique, compromised IP addresses
• Amazon in Japan hit 92x
• 9 ‘new’ Botnets hits
• Evading Semiconductor Technology Controls           
• ALD - Atomic Laye

Activity Summary - Week Ending on 7 June 2024:

• Red Sky identified 18,640 connections from ‘new’ unique IP addresses
• JGG Internet Services Ltd in Belize hit 139x
• 11 ‘new’ Botnets hits
• AWS S3         
• Misconfigured S3 Buckets
• Enumeration
• Poland Attack

Activity Summary - Week Ending on 29 March 2024:

• Red Sky identified 23,636 connections from ‘new’ unique IP addresses
• Amazon[.]com in Ireland hit 15x
• 55 ‘new’ Botnets hits
• Sign1 Malware      
• JavaScript injection
• GoDaddy Infosec Warning
• Interpol War

Activity Summary - Week Ending on 16 February 2024:

• Red Sky identified 23,469 connections from ‘new’ unique IP addresses
• Privatelayer[.]com in Switzerland hit 317x
• 48 ‘new’ Botnets hits
• China Cybersecurity Industry Alliance    
• US Hacking   
• Microso

Activity Summary - Week Ending on 29 December 2023:

• Red Sky identified 9,990 connections from ‘new’ unique IP addresses
• Skoali SAS in France was hit 14x
• 59 ‘new’ Botnets hits
• Gaza CyberGang
• Micropsia and Pierogi++
• Big Bang
• MoleRats
• Arid Viper
• UK’s G

Activity Summary - Week Ending on 16 November 2023:

• Red Sky identified 27,491 connections from ‘new’ unique IP addresses
• Amazon NoVa in Virginia hit 24x
• 31 ‘new’ Botnets hits
• Predator AI
• Tkinter-based GUI
• The GPTj Class
• StealerBuilder
• CozyBear
• UK fa

Activity Summary - Week Ending on 5 October 2023:

• 102 ‘new’ Botnets hits
• Sandman APT & LuaDream
• LuaJIT platform
• Embedded Lua VMs
• Metador
• The British Royals Hit
• European Union

Red Sky Alliance Botnet Tracker

On 4 October 2023, analysts identified 10

Activity Summary - Week Ending on 24 August 2023:

• Red Sky Alliance identified 1,592 connections from new IP’s checking in with our Sinkholes
• MS – 48 Hits
• 64 ‘new’ Botnets hits
• Preparing for a Ransomware Attack
• DLL Highjacking
• Poland Attacks
• UK
• John

Activity Summary - Week Ending on 29 June 2023:

• Red Sky Alliance identified 521 connections from new IP’s checking in with our Sinkholes
• 1,573 ‘new’ Botnets hits
• Condi Botnet
• IOCs
• US Cyber Strategy Not Good
• Petro-Canada
• plugwalkjoe
• 5 Years in Prison

Activity Summary - Week Ending on 20 April 2023:

• Red Sky Alliance identified 29,549 connections from new IP’s checking in with our Sinkholes
• Descapital[.]com in the US hit 397x
• 22 ‘new’ Botnets hits
• Dark Web Forum Instruction
• Nexus & Xenomorph Andro