Threat Intelligence Briefing

The global threat landscape saw a dramatic 98.3% decrease in activity compared to the previous 6-hour period, with 66,793 threats detected from 28,858 unique IPs across 149 countries. The US (19,403), Russia (8,378), and China (5,354) remained the top sources, with attacks (22,225), spam (13,095), and web attacks (11,201) as dominant categories. In the Nordic region, Norway (311 threats) and Sweden (245 threats) showed the highest activity, primarily involving attacks, brute force attempts, and Tor exit nodes. Iceland (77) and Finland (75) exhibited similar patterns, while Denmark (28) had notably lower volumes. High-risk IPs include <a href="https://ip.wayscloud.services/ip-intelligence/45.135.232.92" target="_blank">45.135.232.92</a> (RU) and <a href="https://ip.wayscloud.services/ip-intelligence/91.202.233.33" target="_blank">91.202.233.33</a> (TM), persistently targeting SSH and web services. Focus on monitoring these IPs and Nordic Tor exit nodes, as brute force patterns suggest coordinated campaigns. Implement strict SSH access controls and web application firewalls to mitigate risks.