Threat Intelligence Briefing

The global threat landscape saw a 1.0% increase in activity over the past 6 hours, with 872,728 threats detected from 435,853 unique IPs across 209 countries. Suspicious activity dominated (72.5% of threats), followed by severe abuse (19.2%). The US (162,271) and China (145,591) were top sources. In the Nordic region, Sweden led with 5,946 threats (primarily attacks and brute force), followed by Finland (2,326) and Norway (1,202). Denmark (1,135) and Iceland (218) showed lower but notable activity, with high-threat incidents prominent in Iceland. SSH brute force and web attacks were common across the region. Key IPs to monitor include <a href="https://ip.wayscloud.services/ip-intelligence/45.135.232.92" target="_blank">45.135.232.92</a> (RU) and <a href="https://ip.wayscloud.services/ip-intelligence/134.209.81.52" target="_blank">134.209.81.52</a> (NL), both linked to severe abuse and brute force attacks. Dutch IPs from hosting providers were notably aggressive. Recommendations include tightening SSH access controls and blocking known malicious IPs, particularly from NL and RU networks.