{"id":897,"generated_at":"2026-07-26T06:01:31.485007","period":{"start":"2026-07-26T00:00:01.431586","end":"2026-07-26T06:00:01.431586","hours":6},"briefing":"Global threats increased by 22.0% vs the previous period, with reconnaissance and malware C2 being top categories. The US, China, and India were top countries. Consider temporary blocking or rate-limiting of malicious IP clusters. In the Nordics, Sweden and Finland showed typical patterns, while Norway and Denmark had lower activity. Deprioritize routine noise from residential ISPs and focus on datacenter-hosted threats.","data":"{\"global\": {\"countries\": 193, \"unique_ips\": 93681, \"top_countries\": {\"BE\": 3180, \"BR\": 2934, \"CN\": 11400, \"DE\": 4877, \"FR\": 2625, \"GB\": 5020, \"IN\": 5189, \"NL\": 2918, \"SG\": 3004, \"US\": 23875}, \"total_threats\": 104839, \"top_categories\": {\"spam\": 4746, \"attacks\": 4603, \"malicious\": 3071, \"malware_c2\": 6254, \"reconnaissance\": 79974}, \"change_description\": \"+22.0% vs previous period\", \"low_baseline_warning\": false, \"previous_period_count\": 85933}, \"nordic\": {\"DK\": {\"total\": 71, \"unique_ips\": 59, \"top_categories\": \"abuseipdb_blacklist, attacks, botnet, brute_force, malicious, reconnaissance, spam\"}, \"FI\": {\"total\": 395, \"unique_ips\": 337, \"top_categories\": \"abuseipdb_blacklist, anonymizer, attacks, brute_force, malicious, malware_c2, reconnaissance, spam, ssh_brute_force, web_attack, web_brute_force\"}, \"IS\": {\"total\": 11, \"unique_ips\": 11, \"top_categories\": \"malware_c2, reconnaissance\"}, \"NO\": {\"total\": 135, \"unique_ips\": 102, \"top_categories\": \"abuseipdb_blacklist, anonymizer, attacks, botnet, brute_force, malicious, reconnaissance, scanning, spam, web_attack\"}, \"SE\": {\"total\": 559, \"unique_ips\": 480, \"top_categories\": \"abuseipdb_blacklist, anonymizer, attacks, botnet, brute_force, malicious, malware_c2, reconnaissance, scanning, spam, ssh_brute_force, ssh_bruteforce, web_attack\"}}, \"period\": {\"end\": \"2026-07-26T06:00:01.431586\", \"hours\": 6, \"start\": \"2026-07-26T00:00:01.431586\"}, \"top_ips\": [{\"ip\": \"103.11.41.10\", \"attacks\": 16, \"country\": \"PH\", \"categories\": \"malware_c2\"}, {\"ip\": \"103.11.41.20\", \"attacks\": 15, \"country\": \"PH\", \"categories\": \"malware_c2\"}, {\"ip\": \"185.115.164.60\", \"attacks\": 14, \"country\": \"PH\", \"categories\": \"malware_c2\"}, {\"ip\": \"185.115.164.59\", \"attacks\": 12, \"country\": \"PH\", \"categories\": \"malware_c2\"}, {\"ip\": \"111.170.148.134\", \"attacks\": 11, \"country\": \"CN\", \"categories\": \"malware_c2\"}], \"top_isps\": {\"Chinanet\": {\"reports\": 3843, \"unique_ips\": 3625}, \"Google LLC\": {\"reports\": 6904, \"unique_ips\": 5987}, \"DigitalOcean, LLC\": {\"reports\": 4500, \"unique_ips\": 4106}, \"Microsoft Corporation\": {\"reports\": 5084, \"unique_ips\": 4768}, \"Alibaba (US) Technology Co., Ltd.\": {\"reports\": 3497, \"unique_ips\": 3447}}, \"tor_exits\": 849, \"infrastructure\": {\"Residential/ISP\": {\"reports\": 64140, \"unique_ips\": 56745}, \"Datacenter/Hosting\": {\"reports\": 37604, \"unique_ips\": 34613}}}","metadata":{"model":"llama-3.3-70b","tokens_input":1675,"tokens_output":680,"processing_ms":11586},"next_update":"2026-07-26T12:00:00","api_version":"1.0"}