Threat Intelligence Briefing

Global threat activity remains stable with a 1.4% decrease compared to the previous 6-hour period, consistent with the 7-day average. SSH brute force and web attacks dominate, primarily originating from the Netherlands (ASN 20473) and Russia (ASN 49505). Nordic regions show minimal activity, with Sweden and Denmark recording single-digit events, all within expected baselines. Russian IPs <a href="https://ip.wayscloud.services/ip-intelligence/45.140.17.124" target="_blank">45.140.17.124</a> and <a href="https://ip.wayscloud.services/ip-intelligence/45.135.232.92" target="_blank">45.135.232.92</a> continue a weeks-long pattern of SSH brute force attempts, now accounting for 1.5% of global attacks. Consider temporary rate-limiting for CIDR ranges <a href="https://ip.wayscloud.services/ip-intelligence/45.140.17.0" target="_blank">45.140.17.0</a>/24 and <a href="https://ip.wayscloud.services/ip-intelligence/45.135.232.0" target="_blank">45.135.232.0</a>/24, as these clusters exhibit persistent behavior. No immediate action is required for Nordic-facing traffic, as observed events align with routine background noise.