Threat Intelligence Briefing

Global threat volume changed by several orders of magnitude (2,990 → 24,278 events), representing a major deviation from the previous 6-hour baseline. This surge is primarily driven by attacks, spam, and brute-force activity, with the US, India, and Germany as top source countries. Nordic threat levels remained stable and routine; Sweden (98 events) and Finland (76 events) saw typical background noise, consistent with their 7-day averages. The Vietnamese ASN hosting <a href="https://ip.wayscloud.services/ip-intelligence/116.110.146.0" target="_blank">116.110.146.0</a>/24 is notable for concentrated SSH brute-forcing. Prioritize monitoring and temporary rate-limiting of traffic from the Vietnamese and Bulgarian (ASN hosting <a href="https://ip.wayscloud.services/ip-intelligence/195.178.110.30" target="_blank">195.178.110.30</a>) CIDR ranges exhibiting this pattern. Deprioritize individual IPs from the Nordic region as they represent expected, low-volume scanning.