Threat Intelligence Briefing

The global threat landscape has decreased significantly by 42.3% compared to the previous 6-hour period, with 492,577 threats detected from 421,135 unique IPs across 208 countries. The US (92,709) and China (79,316) remain the top sources, while suspicious activity (353,033) dominates threat categories. In the Nordic region, Sweden (3,016 threats) leads, followed by Finland (1,399) and Norway (715), with high_threat and SSH brute force attacks prevalent. Notably, Tor exit nodes were detected in Sweden. The most active threat IPs include <a href="https://ip.wayscloud.services/ip-intelligence/45.135.232.92" target="_blank">45.135.232.92</a> (Russia) and <a href="https://ip.wayscloud.services/ip-intelligence/171.243.149.218" target="_blank">171.243.149.218</a> (Vietnam), both involved in SSH brute force attacks. Attack patterns show a concentrated focus on SSH vulnerabilities, particularly from Vietnamese and Dutch IPs like <a href="https://ip.wayscloud.services/ip-intelligence/146.190.25.194" target="_blank">146.190.25.194</a>. Organizations should prioritize SSH hardening and monitor these IPs for repeated brute force attempts. Nordic networks should remain vigilant for high-threat activity, especially from Sweden-based infrastructure.