Threat Intelligence Briefing

Observed threats have increased 2.4% globally in the last 6 hours, with suspicious activity dominating at 79% of reports. Nordic countries saw limited activity, primarily Sweden with 34 reports of high threat and suspicious activity, followed by Finland and Norway with 7 reports each. The majority of global threats originated from the US and China. No significant attacks were observed targeting specific ISPs or hosting providers, and Tor exit node activity remains low. Focus monitoring on the Swedish network space (ASNs) exhibiting high threat and suspicious activity. SSH brute-force attacks from Romanian IPs (2.57.121.0/24) require continued vigilance. Track botnet C2 activity originating from IPs 213.209.143.62 and 196.251.115.74, as they represent persistent command and control infrastructure. Monitor for potential follow-on activity stemming from successful SSH brute-force attempts.