Threat Intelligence Briefing

The global threat landscape has surged dramatically with a 322313% increase in activity over the past 6 hours, totaling 3,975,353 threats from 3,384,837 unique IPs across 238 countries. The US (231,757 threats), India (105,490), and Russia (64,207) lead in attack volume, with aggregated threats (71%) and spam (20%) dominating categories. Nordic countries show concentrated activity: Sweden (4,239 threats), Finland (2,618), and Norway (1,952) face brute-force attacks, SSH compromises, and web assaults, primarily from residential IPs. Notably, Iceland's 487 threats included malware C2 infrastructure, a 40% spike from previous periods. Top attack IPs like <a href="https://ip.wayscloud.services/ip-intelligence/45.135.232.92" target="_blank">45.135.232.92</a> (RU) and <a href="https://ip.wayscloud.services/ip-intelligence/195.178.110.30" target="_blank">195.178.110.30</a> (BG) exhibit persistent SSH brute-forcing patterns. Immediate scrutiny of Nordic ASNs handling SSH traffic is advised, with special attention to <a href="https://ip.wayscloud.services/ip-intelligence/91.202.233.33" target="_blank">91.202.233.33</a> (TM) targeting cloud authentication systems. Deploy rate-limiting for SSH ports and prioritize patch management for web-facing services in Sweden and Finland, where attack clusters originate from Eastern European hosting providers.