Threat Intelligence Briefing

The global threat landscape saw a marginal 0.6% increase over the past 6 hours, with 860,038 threats from 429,535 unique IPs. The US (161,563) and China (141,893) remained top sources, while Nordic countries showed varied activity: Sweden (5,395 threats, high_threat dominant), Finland (2,411, diverse attack types), Norway (1,274, brute force focus), Denmark (1,016), and Iceland (228). Suspicious activity (72.3%) and severe abuse (19.5%) were most prevalent globally. SSH brute force attacks were prominent, particularly from Russian IP <a href="https://ip.wayscloud.services/ip-intelligence/45.135.232.92" target="_blank">45.135.232.92</a> (11 attacks) and Bulgarian <a href="https://ip.wayscloud.services/ip-intelligence/195.178.110.30" target="_blank">195.178.110.30</a> (10 attacks). Three Dutch IPs (<a href="https://ip.wayscloud.services/ip-intelligence/142.93.133.124" target="_blank">142.93.133.124</a>, <a href="https://ip.wayscloud.services/ip-intelligence/164.90.201.202" target="_blank">164.90.201.202</a>, <a href="https://ip.wayscloud.services/ip-intelligence/174.138.2.214" target="_blank">174.138.2.214</a>) showed coordinated SSH/web brute force patterns. Nordic networks should prioritize monitoring SSH ports and implement rate-limiting, especially for traffic from NL/RU/BG IPs. Finnish and Norwegian systems require enhanced web application defenses due to concentrated brute force attempts.