Threat Intelligence Briefing

Global threat activity increased by 0.7% over the past 6 hours, with 853,547 incidents recorded. The Nordic region saw Sweden (5,302 threats) leading, followed by Finland (2,422), Norway (1,259), Denmark (985), and Iceland (242). Primary attack categories were suspicious activity (72%) and severe abuse (20%), with SSH brute force attacks prevalent in Sweden and Norway. The US (161,138) and China (139,986) remained top global sources, while Russia (22,879) showed notable SSH brute force activity via IP <a href="https://ip.wayscloud.services/ip-intelligence/45.135.232.92" target="_blank">45.135.232.92</a>. Monitor networks for repeated SSH authentication attempts from these regions. Nordic ISPs should prioritize patching SSH services and implement rate-limiting. Focus on datacenter IPs from NL (<a href="https://ip.wayscloud.services/ip-intelligence/161.35.149.87" target="_blank">161.35.149.87</a>) and RO (<a href="https://ip.wayscloud.services/ip-intelligence/80.94.92.40" target="_blank">80.94.92.40</a>/168) exhibiting high brute force patterns.