Threat Intelligence Briefing

The global threat landscape has surged 86.6% in the past 6 hours, with 6,566 threats from 4,075 unique IPs across 95 countries. Singapore (SG) leads with 660 threats, followed by the US (530) and Netherlands (NL) (492). Top categories include malware C2 (1,710), general attacks (1,397), and SSH brute force (1,044). Nordic activity remains lower but notable, with Finland (FI) reporting 27 threats (13 unique IPs) primarily in attacks and brute force, Sweden (SE) 18 threats (9 IPs) including botnet activity, and Norway (NO) 12 threats (8 IPs) featuring VoIP attacks. Denmark (DK) had minimal activity with 1 severe abuse case. High-risk IPs include <a href="https://ip.wayscloud.services/ip-intelligence/45.135.232.92" target="_blank">45.135.232.92</a> (RU, 11 attacks, SSH brute force) and multiple Dutch IPs (<a href="https://ip.wayscloud.services/ip-intelligence/159.223.8.129" target="_blank">159.223.8.129</a>, <a href="https://ip.wayscloud.services/ip-intelligence/164.90.202.252" target="_blank">164.90.202.252</a>) averaging 6-8 attacks each. The concentration of SSH brute force from NL/BG/RU suggests coordinated credential-stuffing campaigns. Defenders should prioritize blocking these IPs, enforce SSH key-based authentication, and monitor web applications for brute force patterns. Nordic organizations should scrutinize traffic from FI/SE residential IPs showing botnet signatures.