Threat Intelligence Briefing

Global threat activity increased 2.5% over the past 6 hours, with 876,394 threats detected. The Nordic region saw notable activity, particularly in Sweden (5,847 threats), Finland (2,324), Norway (1,196), and Denmark (1,143). Primary attack categories included suspicious activity (71% of global threats), severe abuse (19%), and brute force attempts. Sweden showed diverse threats including malware C2, SSH brute force, and scanning, while Finland saw significant web attacks. Top source countries were the US (163,592 threats) and China (144,662), with Russia (23,253) notably active in brute force attacks via IP <a href="https://ip.wayscloud.services/ip-intelligence/45.135.232.92" target="_blank">45.135.232.92</a>. Key threats include SSH brute force originating from Vietnam (<a href="https://ip.wayscloud.services/ip-intelligence/171.243.150.237" target="_blank">171.243.150.237</a>, <a href="https://ip.wayscloud.services/ip-intelligence/171.231.198.48" target="_blank">171.231.198.48</a>) and a German botnet C2 (<a href="https://ip.wayscloud.services/ip-intelligence/143.20.37.250" target="_blank">143.20.37.250</a>). Organizations should prioritize blocking these IPs and enhance SSH security, particularly in Nordic-facing infrastructure where brute force attempts are prevalent. Monitor for unusual scanning patterns from Swedish and Finnish IPs, which may indicate reconnaissance for future attacks.