logo

The strange case of disappearing Russian servers, (Mon, Nov 25th)

ID: d8c81e71-77b8-5a6a-adca-3981465d91cd

STIX ID: report--d8c81e71-77b8-5a6a-adca-3981465d91cd

Feed Name: SANS ISC Diary

Date Published: 2024-11-25

Date Updated: 2026-04-19

...
...

This report examines Shodan-based measurements that detected a sustained drop in Russia’s Internet-exposed services since early August, with the most pronounced decrease on TCP/7547 (TR-069/CWMP) and a strong impact within AS12389 (Rostelecom). The analysis concludes that increased filtering/censorship likely reduced scanner visibility across multiple services—rather than actual server decommissioning—consistent with Russia’s broader “sovereign internet” initiatives.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.