Threat Intelligence Briefing

The global threat landscape decreased by 2.0% over the past 6 hours, with 852,394 total threats detected. Suspicious activity dominated at 71.9%, followed by severe abuse at 19.9%. The US (158,974) and China (142,324) remained top source countries. In the Nordic region, Sweden led with 5,688 threats, primarily attacks and high-threat activity, while Finland saw 2,284 threats with notable SSH brute-force attempts. Norway and Denmark reported 1,163 and 1,105 threats respectively, focused on web attacks and brute-force patterns. Iceland had minimal activity with 220 threats. Key threat actors included Russian IP <a href="https://ip.wayscloud.services/ip-intelligence/45.135.232.92" target="_blank">45.135.232.92</a> (10 attacks) and Dutch IPs <a href="https://ip.wayscloud.services/ip-intelligence/164.92.223.83" target="_blank">164.92.223.83</a> and <a href="https://ip.wayscloud.services/ip-intelligence/159.223.229.104" target="_blank">159.223.229.104</a> (8 attacks each), all specializing in SSH brute-force. Immediate monitoring of these IPs is advised, with enhanced SSH security measures recommended for Nordic networks.