Country Threat Intelligence Summary: Russia
Loading country intelligence data...
Russia (RU) Threat Intelligence
RURussia has 184,731 malicious IP addresses with 4,409,904 abuse reports. Top threat categories include suspicious activity, severe abuse, professional threat, ssh bruteforce, moderate threat. Top attacking networks: Rostelecom (16,516 IPs), Biterika Group LLC (9,253 IPs), PJSC MegaFon (8,841 IPs). Data collected since 2022-08-23, last activity 2026-09-06.
Threat Assessment: Russia is one of the most significant sources of cyber threats globally, with an exceptionally high volume of malicious IP addresses. The dominant attack types are suspicious activity, severe abuse, professional threat. The majority of threats originate from networks operated by Rostelecom and Biterika Group LLC.
Total Reports
4,409,904
Unique IPs
184,731
First Seen
2022-08-23
Last Activity
2026-09-06
Top Threat Categories
Suspicious Activity
103,142
Severe Abuse
28,860
Professional Threat
20,377
Ssh Bruteforce
13,413
Moderate Threat
9,155
Top Attacking Networks
Most Reported IPs in Russia
45.91.64.7
819 reports
185.94.111.1
817 reports
81.211.72.167
811 reports
79.104.0.82
804 reports
45.91.64.6
803 reports
Access this data via API
Get Russia threat intelligence programmatically.
curl https://ip.wayscloud.services/api/country/RU
Check any IP from Russia
Look up threat intelligence for a specific IP address.
Related:
Country Threat Ranking
Country Risk Trends →
Top Malicious IPs →
AS12389 Intelligence
AS35048 Intelligence
AS25159 Intelligence
Global Attack Trends
Detect Malicious Traffic
Loading threat intelligence data...