Russia (RU) Threat Intelligence

Russia has 101,676 malicious IP addresses with 2,410,264 abuse reports. Top threat categories include ssh bruteforce, generic bruteforce, rdp bruteforce, web attack, botnet c2. Top attacking networks: Rostelecom (8,413 IPs), Biterika Group LLC (5,470 IPs), JSC Selectel (4,987 IPs). Data collected since 2022-08-23, last activity 2026-04-16.

Threat Assessment: Russia is one of the most significant sources of cyber threats globally, with an exceptionally high volume of malicious IP addresses. The dominant attack types are ssh bruteforce, generic bruteforce, rdp bruteforce. The majority of threats originate from networks operated by Rostelecom and Biterika Group LLC.