Threat Intelligence Briefing
Analysis period: 2025-12-08T06:00:01.712977 - 2025-12-08T12:00:01.712977 (6 hours)
Executive Summary
The global threat landscape has seen a significant 93% decrease in activity compared to the previous 6-hour period, with 3,518 threats detected from 2,134 unique IPs across 97 countries. The US (678), China (303), and Netherlands (274) remain top sources, with severe abuse (788) and attacks (761) being the most prevalent categories. In the Nordic region, Finland (21 threats, 11 IPs) leads in activity, primarily involving attacks and severe abuse, followed by Sweden (12 threats, 9 IPs) with botnet-related traffic. Denmark (4 threats) and Norway (3 threats) showed minimal activity, focused on SSH brute force attempts. The top attacking IPs include <a href="https://ip.wayscloud.services/ip-intelligence/27.79.7.198" target="_blank">27.79.7.198</a> (VN) and <a href="https://ip.wayscloud.services/ip-intelligence/45.135.232.92" target="_blank">45.135.232.92</a> (RU), both heavily involved in SSH brute force attacks.