Threat Intelligence Briefing

Global threat activity decreased by 21.5% compared to the prior 6-hour period. SSH brute-force attempts continue to dominate, comprising 98.9% of observed attacks. No significant activity was observed within the Nordic countries during this period. Top originating countries for attacks are China, Romania, and Russia. There is no significant Tor exit node or ISP/hosting provider activity to report. Focus monitoring efforts on the 45.134.0.0/16 and 45.140.0.0/16 Russian networks, given the concentration of SSH brute-force activity. While overall activity is down, the consistency of SSH brute-force attacks suggests automated campaigns are ongoing. Continue monitoring for changes in attack vectors and emerging vulnerabilities.