Threat Intelligence Briefing

The global threat landscape has surged by 513.3% compared to the previous 6-hour period, with 49,012 threats detected from 28,720 unique IPs across 164 countries. The US leads with 11,519 threats, followed by the Netherlands (4,076) and China (4,048). Spam (11,887) and malicious activities (10,601) dominate the attack categories. In the Nordic region, Sweden recorded 217 threats, primarily from anonymizers and brute-force attacks, while Finland saw 97 threats with notable malware C2 activity. Norway (47 threats) and Denmark (27 threats) faced similar patterns, with SSH brute-force attacks prevalent. Iceland reported 13 threats, mainly scanning and web attacks. Key IPs to monitor include <a href="https://ip.wayscloud.services/ip-intelligence/45.135.232.92" target="_blank">45.135.232.92</a> (RU) and <a href="https://ip.wayscloud.services/ip-intelligence/45.148.10.121" target="_blank">45.148.10.121</a> (NL), both heavily involved in SSH brute-force campaigns. Immediate actions include blocking these IPs and enhancing SSH security configurations to mitigate brute-force risks.