{"id":1262464,"date":"2025-12-01T11:37:07","date_gmt":"2025-12-01T09:37:07","guid":{"rendered":"https:\/\/uatv.ua\/?p=1262464"},"modified":"2025-12-01T12:59:54","modified_gmt":"2025-12-01T10:59:54","slug":"weaponization-of-stolen-ip-addresses-how-russia-is-exploiting-ukrainian-digital-resource-in-its-war-against-ukraine","status":"publish","type":"post","link":"https:\/\/uatv.ua\/en\/weaponization-of-stolen-ip-addresses-how-russia-is-exploiting-ukrainian-digital-resource-in-its-war-against-ukraine\/","title":{"rendered":"Weaponization of stolen IP addresses &#8211; how Russia is exploiting Ukrainian digital resource in its war against Ukraine"},"content":{"rendered":"\n<p>At a time when cyber threats have become a new weapon, Europe is facing an invisible but very real danger. Russia is using Ukrainian digital resources seized during the occupation of parts of Ukrainian territory for cyberattacks and disinformation operations. This is not about abstract technologies, but about specific IP addresses\u2014digital \u201cpassports\u201d of networks through which all internet traffic passes. This is discussed in a <a href=\"https:\/\/www.ukrinform.net\/rubric-ato\/4062588-weaponization-of-stolen-ip-addresses-how-russia-is-exploiting-ukrainian-digital-resource-in-its-war-against-ukraine.html\">Ukrinform report<\/a>, <a href=\"https:\/\/uatv.ua\/en\/\">UATV English<\/a> says.<\/p>\n\n\n\n<p>As a result of Russia\u2019s occupation of parts of Ukraine in 2014 and 2022, a number of Ukrainian internet providers lost not only their property but also their IP address resources, which were taken over by Russian companies. Formally, these resources were re-registered through RIPE NCC, an international non-profit organization headquartered in Amsterdam. Despite appeals from Ukrainian lawyers and the Internet Association of Ukraine, RIPE is refusing to respond, citing \u201cneutrality\u201d and the slogan \u201cthe internet is outside politics.\u201d<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">What is an IP address and why it matters<\/h3>\n\n\n\n<p>An IP address is a unique digital \u201cpassport\u201d of every device or network connected to the Internet. It shows where traffic comes from, where data is sent, and allows systems to communicate with each other.<\/p>\n\n\n\n<p>Each address belongs to a specific range allocated by RIPE NCC, the regional internet registry for Europe, the Middle East, and Central Asia. IP addresses are not unlimited, and getting new ones today is extremely difficult.<\/p>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p>\u201cAny number sequence in these digital identifiers is limited. There are virtually no free IP addresses left in the world, so they become highly valuable. They are already seen not just as a technical resource, but as an economic asset that can be monetized,\u201d Member of Parliament and former head of the Internet Association of Ukraine Oleksandr Fediienko explained in a comment to <em>Ukrinform<\/em>.<\/p>\n<\/blockquote>\n\n\n\n<p>So IP is a limited economic asset, similar to land or mobile-spectrum frequencies. According to experts in the IP resources market, on shadow or semi-official exchanges one IPv4 address currently costs between \u20ac35 and \u20ac50. Large telecom companies own hundreds of thousands of such addresses, so losing even a few thousand units means multi-million euro losses.<\/p>\n\n\n\n<p>Beyond the economic aspect, IP addresses also have strategic value. Government communications, banking transactions, and signals of critical infrastructure pass through them. Therefore, control over them is a matter of national security.<\/p>\n\n\n\n<p>That is why the theft of Ukrainian IP addresses creates risks not only for Ukraine.<\/p>\n\n\n\n<p>Through these resources, Russian structures can disguise their cyberattacks as Ukrainian or European, making it harder to trace the source. This puts the digital security of the entire continent at risk.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">How RIPE NCC works<\/h3>\n\n\n\n<p>RIPE NCC is one of five regional internet registries in the world. The organization was conceived as a technical community independent of politics\u2014but today aggressor states exploit exactly this principle.<\/p>\n\n\n\n<p>After obtaining IP addresses, a company becomes part of the RIPE system, gains access to the technical platform, and can participate in voting and elections of the organization\u2019s governing bodies. According to Fedienko, this is what enables the Russian side to influence RIPE decisions, because it controls a significant number of IP resources.<\/p>\n\n\n\n<p>Ukraine for a long time remained passive in RIPE processes, while Russia systematically built its influence.<\/p>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p>\u201cOver many years, the Russians effectively captured RIPE. They brought their people into the board\u2014among them citizens of EU countries affiliated with Russia. We, for our part, also tried to get our representative in there even before the full-scale war, but it never worked. Because those same Russians would immediately push a narrative: allegedly, Ukraine is a small country, it has few resources, and Russia is big\u2014so it should have more,\u201d the MP added.<\/p>\n<\/blockquote>\n\n\n\n<figure class=\"wp-block-image\"><img loading=\"lazy\" decoding=\"async\" width=\"820\" height=\"473\" src=\"https:\/\/uatv.ua\/wp-content\/uploads\/2025\/12\/Fediyenko-820x473.jpg\" alt=\"\" class=\"wp-image-1262454\" srcset=\"https:\/\/uatv.ua\/wp-content\/uploads\/2025\/12\/Fediyenko-820x473.jpg 820w, https:\/\/uatv.ua\/wp-content\/uploads\/2025\/12\/Fediyenko-345x199.jpg 345w, https:\/\/uatv.ua\/wp-content\/uploads\/2025\/12\/Fediyenko-220x127.jpg 220w, https:\/\/uatv.ua\/wp-content\/uploads\/2025\/12\/Fediyenko-550x317.jpg 550w, https:\/\/uatv.ua\/wp-content\/uploads\/2025\/12\/Fediyenko-1200x692.jpg 1200w, https:\/\/uatv.ua\/wp-content\/uploads\/2025\/12\/Fediyenko-130x75.jpg 130w, https:\/\/uatv.ua\/wp-content\/uploads\/2025\/12\/Fediyenko.jpg 1300w\" sizes=\"auto, (max-width: 820px) 100vw, 820px\" \/><figcaption class=\"wp-element-caption\">Oleksandr Fedienko. Photo: ukrinform.ua<\/figcaption><\/figure>\n\n\n\n<p>Fedienko stresses: the theft of IP addresses is a direct consequence of occupation, accompanied by torture and coercion. Communications operators in the seized territories, who legally obtained these \u201cdigital passports\u201d through RIPE NCC, were stripped of them by force.<\/p>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p>\u201cI know there was a situation in Kherson where they forcibly took these resources from our telecom operators\u2014they tortured them. Because you cannot just take them like that. You need to obtain the relevant login and password,\u201d Fediienko says.<\/p>\n<\/blockquote>\n\n\n\n<p>After gaining access, the Russians submitted requests to RIPE to re-register the resources, and the international registry\u2014referring to its \u201capolitical\u201d stance\u2014made the changes. The MP emphasizes that this poses a direct security threat.<\/p>\n\n\n\n<p>Moscow\u2019s information expansion in the temporarily occupied territories is carried out through specific \u201cstate\u201d unitary communications enterprises and telecom providers created by occupation administrations. They are the ones using the largest pools of stolen IP addresses.<\/p>\n\n\n\n<p>Such structures include:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>\u201cState Unitary Enterprise of the Donetsk People\u2019s Republic \u2018Vuhletelekom\u2019\u201d;<\/li>\n\n\n\n<li>\u201cState Unitary Enterprise of the Donetsk People\u2019s Republic \u2018Komtel\u2019\u201d;<\/li>\n\n\n\n<li>\u201cRepublican Communications Operator \u2018Phoenix\u2019\u201d;<\/li>\n\n\n\n<li>\u201cState Unitary Enterprise of the Luhansk People\u2019s Republic \u2018Republican Digital Communications\u2019.\u201d<\/li>\n<\/ul>\n\n\n\n<p>This is only part of the list of enterprises involved in the information expansion.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">A hidden shield for Russian cyber aggression<\/h3>\n\n\n\n<p><strong>Andrii Pylypenko<\/strong>, a lawyer at a law firm that defended Ukraine\u2019s interests in the Netherlands in the court case over the return of the Scythian gold collection to Ukraine and in the criminal case in Italy involving National Guard serviceman Vitalii Markiv, is now part of a special group helping form Ukraine\u2019s legal position on forcibly blocking the stolen IP addresses. He says these structures play a key role in information support for the occupation regime and have long been under sanctions\u2014something RIPE NCC \u201cobviously fails to notice.\u201d<\/p>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p>\u201cThey not only expropriated IP addresses, but under the guise of providing access to \u2018their internet\u2019 they actively took part in illegally holding referendums and elections in the occupied territories, publicly called for them, and in various forms campaign in support of the aggressor\u2019s actions. They also provide access to digital coordination infrastructure for the occupation authorities and their \u2018bodies\u2019 and armed formations, spread Russian propaganda, and carry out cyberattacks against Ukraine,\u201d the lawyer explained.<\/p>\n<\/blockquote>\n\n\n\n<p>In addition, these structures collect money from residents of the occupied territories for internet access, which is then used, among other things, to further fill the budgets of the illegal entities \u201cDNR\u201d and \u201cLNR\u201d and local occupation authorities, to finance terrorist and subversive activities aimed at harming Ukraine\u2019s sovereignty and national security.<\/p>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p>\u201cThe fact that RIPE does not sever relations with these enterprises located in occupied territory is used by Russian propaganda to legitimize those territories and say: look, Europe recognizes us,\u201d the MP emphasizes.<\/p>\n<\/blockquote>\n\n\n\n<p>This stolen resource becomes a hidden shield for Russian cyber aggression. If Ukraine has blocked most Russian digital identifiers, the stolen ones have not been blocked.<\/p>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p>\u201cStolen Ukrainian digital identifiers are not blocked in our system. They can use them. It\u2019s like a car with Ukrainian license plates driven by a Russian who tries to blow it up. What will the media report afterward? That a Ukrainian car exploded. But no one will mention who the driver was. Roughly the same story is happening here,\u201d Fediienko says, explaining the mechanism of masking cyberattacks.<\/p>\n<\/blockquote>\n\n\n\n<h3 class=\"wp-block-heading\">Criminal liability for \u201capolitical neutrality\u201d<\/h3>\n\n\n\n<p>RIPE NCC\u2019s inaction has long gone beyond a technical issue and moved into the legal realm. Pylypenko explains that back in 2018, the Internet Association of Ukraine warned RIPE about cooperation with \u201cL\/DNR,\u201d but the organization refused to respond, claiming IP addresses were allegedly not an \u201ceconomic resource\u201d and therefore not subject to EU sanctions.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img loading=\"lazy\" decoding=\"async\" width=\"820\" height=\"473\" src=\"https:\/\/uatv.ua\/wp-content\/uploads\/2025\/12\/Pilipenko-820x473.jpg\" alt=\"\" class=\"wp-image-1262457\" srcset=\"https:\/\/uatv.ua\/wp-content\/uploads\/2025\/12\/Pilipenko-820x473.jpg 820w, https:\/\/uatv.ua\/wp-content\/uploads\/2025\/12\/Pilipenko-345x199.jpg 345w, https:\/\/uatv.ua\/wp-content\/uploads\/2025\/12\/Pilipenko-220x127.jpg 220w, https:\/\/uatv.ua\/wp-content\/uploads\/2025\/12\/Pilipenko-550x317.jpg 550w, https:\/\/uatv.ua\/wp-content\/uploads\/2025\/12\/Pilipenko-1200x692.jpg 1200w, https:\/\/uatv.ua\/wp-content\/uploads\/2025\/12\/Pilipenko-130x75.jpg 130w, https:\/\/uatv.ua\/wp-content\/uploads\/2025\/12\/Pilipenko.jpg 1300w\" sizes=\"auto, (max-width: 820px) 100vw, 820px\" \/><figcaption class=\"wp-element-caption\">Andrii Pylypenko. Photo: ukrinform.ua<\/figcaption><\/figure>\n\n\n\n<p>That continued until the Dutch Ministry of Foreign Affairs\u2014the state body responsible for interpreting sanctions\u2014issued a clear clarification.<\/p>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p>\u201cThe Ministry of Foreign Affairs clarified to RIPE NCC that IP resources are an economic resource that must be blocked. When they realized this, they came up with a new argument: we don\u2019t see which sanctioned persons we provide services to. They demanded: \u2018Show us where DNR\/LNR are on our membership lists.\u2019 Of course, illegal quasi-state entities cannot be members, but the members are the entities they control\u2014the same \u2018ministries\u2019 and \u2018state institutions\u2019 created by the occupiers,\u201d the lawyer explains.<\/p>\n<\/blockquote>\n\n\n\n<p>And this is despite the glaring fact that even in RIPE\u2019s official database these illegal structures openly and with impunity indicate full information stating that they are \u201cstate enterprises\u201d of the so-called \u201cDNR\u201d or \u201cLNR,\u201d without any consequences.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img loading=\"lazy\" decoding=\"async\" width=\"752\" height=\"600\" src=\"https:\/\/uatv.ua\/wp-content\/uploads\/2025\/12\/kiber-2.png\" alt=\"\" class=\"wp-image-1262458\" srcset=\"https:\/\/uatv.ua\/wp-content\/uploads\/2025\/12\/kiber-2.png 752w, https:\/\/uatv.ua\/wp-content\/uploads\/2025\/12\/kiber-2-345x275.png 345w, https:\/\/uatv.ua\/wp-content\/uploads\/2025\/12\/kiber-2-220x176.png 220w, https:\/\/uatv.ua\/wp-content\/uploads\/2025\/12\/kiber-2-550x439.png 550w, https:\/\/uatv.ua\/wp-content\/uploads\/2025\/12\/kiber-2-130x104.png 130w\" sizes=\"auto, (max-width: 752px) 100vw, 752px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image\"><img loading=\"lazy\" decoding=\"async\" width=\"756\" height=\"668\" src=\"https:\/\/uatv.ua\/wp-content\/uploads\/2025\/12\/kiber.jpg\" alt=\"\" class=\"wp-image-1262459\" srcset=\"https:\/\/uatv.ua\/wp-content\/uploads\/2025\/12\/kiber.jpg 756w, https:\/\/uatv.ua\/wp-content\/uploads\/2025\/12\/kiber-345x305.jpg 345w, https:\/\/uatv.ua\/wp-content\/uploads\/2025\/12\/kiber-220x194.jpg 220w, https:\/\/uatv.ua\/wp-content\/uploads\/2025\/12\/kiber-550x486.jpg 550w, https:\/\/uatv.ua\/wp-content\/uploads\/2025\/12\/kiber-130x115.jpg 130w\" sizes=\"auto, (max-width: 756px) 100vw, 756px\" \/><\/figure>\n\n\n\n<p>In 2021, the President of Ukraine took this issue under personal control, instructing officials to develop mechanisms for returning or disconnecting IP resources of illegal quasi-state entities in the occupied territories.<\/p>\n\n\n\n<p>At the end of 2021, a mechanism of returning to the competent authorities of the Kingdom of the Netherlands was discussed, but the process was halted by the full-scale invasion.<\/p>\n\n\n\n<p>The issue was revisited starting in summer 2022.<\/p>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p>\u201cThen we held direct consultations with the head of RIPE and the leadership of their legal department. We explained: now, after the full-scale invasion, the world\u2019s political context simply forces you to act\u2026 No one will do anything to you if you block their [the Russians\u2019 in occupied territory] IP addresses\u2014people will only applaud, especially since you have all the legal grounds,\u201d Pylypenko recalls.<\/p>\n<\/blockquote>\n\n\n\n<p>This communication with RIPE NCC leadership and their legal services continued in various formats throughout 2023, but the organization\u2019s position remained unchanged.<\/p>\n\n\n\n<p>Instead, RIPE NCC published an article about \u201cdisputed territories,\u201d confirming it would continue accepting documents from \u201cDNR\/LNR,\u201d citing the protection of \u201cfreedom of access to the internet.\u201d<\/p>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p>\u201cWe repeatedly explained how EU legislation applies\u2014it clearly says: if \u2018L\/DNR\u2019 are included in sanctions, then all entities they control are also automatically covered. It\u2019s like if I am sanctioned, then my hand is also sanctioned,\u201d the lawyer continues.<\/p>\n<\/blockquote>\n\n\n\n<p>RIPE NCC even refused to add to its internal rules a ban on accepting documents issued by occupation administrations, despite the fact that under Dutch law such documents have no legal force whatsoever. In practice, by signing contracts with sanctioned entities and providing them with an economic resource, RIPE NCC violated the EU sanctions regime, which creates grounds for criminal liability for the organization\u2019s leadership. Meanwhile, the organization denies direct cooperation with sanctioned persons and shifts responsibility to an outsourcing company that allegedly provides membership screening services.<\/p>\n\n\n\n<p>At the same time, Ukraine successfully provided the EU with a documented database of entities on the occupied territories, after which they have been added to EU sanctions lists one by one (for example, \u201cKomtel,\u201d \u201cPhoenix,\u201d and others were directly included in EU sanctions lists, including in the 16th, 17th, and 19th sanctions packages). This means the EU has obtained sufficient evidence showing harm to Ukraine\u2019s state interests, national security, and sovereignty, and that any cooperation with such entities is not only prohibited but also entails severe consequences, including at the level of EU member states, particularly in the Netherlands.<\/p>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p>\u201cAs we understand it, they [RIPE] can no longer use such excuses today. The only path for them is to freeze the relevant IP addresses and restrict access to them for sanctioned entities. Moreover, the head of an institution that violated the sanctions mechanism usually bears criminal liability. In the Netherlands, this is an aggravated crime,\u201d Pylypenko emphasizes.<\/p>\n<\/blockquote>\n\n\n\n<p>In the Netherlands, criminal cases have repeatedly been initiated for violating or circumventing EU sanctions. Over the past three years, at least 70 companies and individuals have been held liable on charges of violating EU sanctions imposed on Russia due to Russia\u2019s full-scale war in Ukraine.<\/p>\n\n\n\n<p>Recently, the Dutch prosecutor&#8217;s office officially opened a criminal case against one of the country\u2019s largest shipbuilding companies, Damen Shipyards, as well as its current CEO and two former board members, over corruption and violations of international sanctions against Russia.<\/p>\n\n\n\n<p>Ukraine is fighting not only for sovereignty in cyberspace but also to deprive the aggressor of a financial resource.<\/p>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p>\u201cWe are taking huge money away from the Russians (meaning if we return our stolen IP resource\u2014ed.), which they could get by selling those IP addresses. In fact, that isn\u2019t prohibited. We are fighting not only for information resources\u2014we are also fighting to ensure they don\u2019t later use the money obtained this way against us,\u201d Fediienko stresses.<\/p>\n<\/blockquote>\n\n\n\n<p>Experts interviewed by <em>Ukrinform<\/em> note that RIPE NCC\u2019s activities, combined with certain political influences and approaches to \u201cliberalism,\u201d may create risks for Ukraine\u2019s national security under conditions of hybrid war.<\/p>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p>\u201cI\u2019m confident we will be able, first of all, to highlight to the European security sector that RIPE needs to be brought under the oversight of European regulatory and state institutions. Because right now it is accountable to no one. That is, we Ukrainians may even become pioneers on this issue,\u201d the MP believes.<\/p>\n<\/blockquote>\n\n\n\n<p>He argues that RIPE NCC, which effectively holds a \u201cred button\u201d for part of the European internet space, must be put under control. Otherwise, inaction in cyberspace\u2014which NATO recognized in 2016 as a domain of military operations\u2014becomes a direct threat to the entire continent.<\/p>\n\n\n\n<p><strong>Marina Shashkova, <em>Ukrinform<\/em><\/strong><\/p>\n","protected":false},"excerpt":{"rendered":"<p>At a time when cyber threats have become a new weapon, Europe &#8230;<\/p>\n","protected":false},"author":31,"featured_media":1262478,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[59],"tags":[76,78],"sources":[],"class_list":["post-1262464","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-publications-en","tag-glavnoe-en","tag-homepage-en"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.2 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Weaponization of stolen IP addresses - how Russia is exploiting Ukrainian digital resource in its war against Ukraine - Freedom<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/uatv.ua\/en\/weaponization-of-stolen-ip-addresses-how-russia-is-exploiting-ukrainian-digital-resource-in-its-war-against-ukraine\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Weaponization of stolen IP addresses - how Russia is exploiting Ukrainian digital resource in its war against Ukraine - Freedom\" \/>\n<meta property=\"og:description\" content=\"At a time when cyber threats have become a new weapon, Europe ...\" \/>\n<meta property=\"og:url\" content=\"https:\/\/uatv.ua\/en\/weaponization-of-stolen-ip-addresses-how-russia-is-exploiting-ukrainian-digital-resource-in-its-war-against-ukraine\/\" \/>\n<meta property=\"og:site_name\" content=\"Freedom\" \/>\n<meta property=\"article:published_time\" content=\"2025-12-01T09:37:07+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2025-12-01T10:59:54+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/uatv.ua\/wp-content\/uploads\/2025\/12\/kiberataki-1-cropped-1300x750-1-820x473.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"820\" \/>\n\t<meta property=\"og:image:height\" content=\"473\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Danylo Shportilo\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Danylo Shportilo\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"8 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/uatv.ua\/en\/weaponization-of-stolen-ip-addresses-how-russia-is-exploiting-ukrainian-digital-resource-in-its-war-against-ukraine\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/uatv.ua\/en\/weaponization-of-stolen-ip-addresses-how-russia-is-exploiting-ukrainian-digital-resource-in-its-war-against-ukraine\/\"},\"author\":{\"name\":\"Danylo Shportilo\",\"@id\":\"https:\/\/uatv.ua\/en\/#\/schema\/person\/f4fe8d6d08deebcdee69f6671576d2d2\"},\"headline\":\"Weaponization of stolen IP addresses &#8211; how Russia is exploiting Ukrainian digital resource in its war against Ukraine\",\"datePublished\":\"2025-12-01T09:37:07+00:00\",\"dateModified\":\"2025-12-01T10:59:54+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/uatv.ua\/en\/weaponization-of-stolen-ip-addresses-how-russia-is-exploiting-ukrainian-digital-resource-in-its-war-against-ukraine\/\"},\"wordCount\":2168,\"image\":{\"@id\":\"https:\/\/uatv.ua\/en\/weaponization-of-stolen-ip-addresses-how-russia-is-exploiting-ukrainian-digital-resource-in-its-war-against-ukraine\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/uatv.ua\/wp-content\/uploads\/2025\/12\/kiberataki-1-cropped-1300x750-1.jpg\",\"keywords\":[\"\u0413\u043b\u0430\u0432\u043d\u043e\u0435\",\"\u041d\u0430 \u0433\u043b\u0430\u0432\u043d\u0443\u044e (\u0441\u043b\u0430\u0439\u0434\u0435\u0440)\"],\"articleSection\":[\"Publications\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/uatv.ua\/en\/weaponization-of-stolen-ip-addresses-how-russia-is-exploiting-ukrainian-digital-resource-in-its-war-against-ukraine\/\",\"url\":\"https:\/\/uatv.ua\/en\/weaponization-of-stolen-ip-addresses-how-russia-is-exploiting-ukrainian-digital-resource-in-its-war-against-ukraine\/\",\"name\":\"Weaponization of stolen IP addresses - how Russia is exploiting Ukrainian digital resource in its war against Ukraine - Freedom\",\"isPartOf\":{\"@id\":\"https:\/\/uatv.ua\/en\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/uatv.ua\/en\/weaponization-of-stolen-ip-addresses-how-russia-is-exploiting-ukrainian-digital-resource-in-its-war-against-ukraine\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/uatv.ua\/en\/weaponization-of-stolen-ip-addresses-how-russia-is-exploiting-ukrainian-digital-resource-in-its-war-against-ukraine\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/uatv.ua\/wp-content\/uploads\/2025\/12\/kiberataki-1-cropped-1300x750-1.jpg\",\"datePublished\":\"2025-12-01T09:37:07+00:00\",\"dateModified\":\"2025-12-01T10:59:54+00:00\",\"author\":{\"@id\":\"https:\/\/uatv.ua\/en\/#\/schema\/person\/f4fe8d6d08deebcdee69f6671576d2d2\"},\"breadcrumb\":{\"@id\":\"https:\/\/uatv.ua\/en\/weaponization-of-stolen-ip-addresses-how-russia-is-exploiting-ukrainian-digital-resource-in-its-war-against-ukraine\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/uatv.ua\/en\/weaponization-of-stolen-ip-addresses-how-russia-is-exploiting-ukrainian-digital-resource-in-its-war-against-ukraine\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/uatv.ua\/en\/weaponization-of-stolen-ip-addresses-how-russia-is-exploiting-ukrainian-digital-resource-in-its-war-against-ukraine\/#primaryimage\",\"url\":\"https:\/\/uatv.ua\/wp-content\/uploads\/2025\/12\/kiberataki-1-cropped-1300x750-1.jpg\",\"contentUrl\":\"https:\/\/uatv.ua\/wp-content\/uploads\/2025\/12\/kiberataki-1-cropped-1300x750-1.jpg\",\"width\":1300,\"height\":750,\"caption\":\"Illustrative photo: shutterstock.com\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/uatv.ua\/en\/weaponization-of-stolen-ip-addresses-how-russia-is-exploiting-ukrainian-digital-resource-in-its-war-against-ukraine\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/uatv.ua\/en\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Weaponization of stolen IP addresses &#8211; how Russia is exploiting Ukrainian digital resource in its war against Ukraine\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/uatv.ua\/en\/#website\",\"url\":\"https:\/\/uatv.ua\/en\/\",\"name\":\"Freedom\",\"description\":\"UATV - UA|TV - International Broadcasting Multimedia Platform of Ukraine\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/uatv.ua\/en\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/uatv.ua\/en\/#\/schema\/person\/f4fe8d6d08deebcdee69f6671576d2d2\",\"name\":\"Danylo Shportilo\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/secure.gravatar.com\/avatar\/dfea04f04995a5257694c4ef7149b332b4103ac47f1c95f912cddd7a1e2ef4e7?s=96&d=mm&r=g\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/dfea04f04995a5257694c4ef7149b332b4103ac47f1c95f912cddd7a1e2ef4e7?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/dfea04f04995a5257694c4ef7149b332b4103ac47f1c95f912cddd7a1e2ef4e7?s=96&d=mm&r=g\",\"caption\":\"Danylo Shportilo\"},\"url\":\"https:\/\/uatv.ua\/en\/author\/d-shportilo\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Weaponization of stolen IP addresses - how Russia is exploiting Ukrainian digital resource in its war against Ukraine - Freedom","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/uatv.ua\/en\/weaponization-of-stolen-ip-addresses-how-russia-is-exploiting-ukrainian-digital-resource-in-its-war-against-ukraine\/","og_locale":"en_US","og_type":"article","og_title":"Weaponization of stolen IP addresses - how Russia is exploiting Ukrainian digital resource in its war against Ukraine - Freedom","og_description":"At a time when cyber threats have become a new weapon, Europe ...","og_url":"https:\/\/uatv.ua\/en\/weaponization-of-stolen-ip-addresses-how-russia-is-exploiting-ukrainian-digital-resource-in-its-war-against-ukraine\/","og_site_name":"Freedom","article_published_time":"2025-12-01T09:37:07+00:00","article_modified_time":"2025-12-01T10:59:54+00:00","og_image":[{"width":820,"height":473,"url":"https:\/\/uatv.ua\/wp-content\/uploads\/2025\/12\/kiberataki-1-cropped-1300x750-1-820x473.jpg","type":"image\/jpeg"}],"author":"Danylo Shportilo","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Danylo Shportilo","Est. reading time":"8 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/uatv.ua\/en\/weaponization-of-stolen-ip-addresses-how-russia-is-exploiting-ukrainian-digital-resource-in-its-war-against-ukraine\/#article","isPartOf":{"@id":"https:\/\/uatv.ua\/en\/weaponization-of-stolen-ip-addresses-how-russia-is-exploiting-ukrainian-digital-resource-in-its-war-against-ukraine\/"},"author":{"name":"Danylo Shportilo","@id":"https:\/\/uatv.ua\/en\/#\/schema\/person\/f4fe8d6d08deebcdee69f6671576d2d2"},"headline":"Weaponization of stolen IP addresses &#8211; how Russia is exploiting Ukrainian digital resource in its war against Ukraine","datePublished":"2025-12-01T09:37:07+00:00","dateModified":"2025-12-01T10:59:54+00:00","mainEntityOfPage":{"@id":"https:\/\/uatv.ua\/en\/weaponization-of-stolen-ip-addresses-how-russia-is-exploiting-ukrainian-digital-resource-in-its-war-against-ukraine\/"},"wordCount":2168,"image":{"@id":"https:\/\/uatv.ua\/en\/weaponization-of-stolen-ip-addresses-how-russia-is-exploiting-ukrainian-digital-resource-in-its-war-against-ukraine\/#primaryimage"},"thumbnailUrl":"https:\/\/uatv.ua\/wp-content\/uploads\/2025\/12\/kiberataki-1-cropped-1300x750-1.jpg","keywords":["\u0413\u043b\u0430\u0432\u043d\u043e\u0435","\u041d\u0430 \u0433\u043b\u0430\u0432\u043d\u0443\u044e (\u0441\u043b\u0430\u0439\u0434\u0435\u0440)"],"articleSection":["Publications"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/uatv.ua\/en\/weaponization-of-stolen-ip-addresses-how-russia-is-exploiting-ukrainian-digital-resource-in-its-war-against-ukraine\/","url":"https:\/\/uatv.ua\/en\/weaponization-of-stolen-ip-addresses-how-russia-is-exploiting-ukrainian-digital-resource-in-its-war-against-ukraine\/","name":"Weaponization of stolen IP addresses - how Russia is exploiting Ukrainian digital resource in its war against Ukraine - Freedom","isPartOf":{"@id":"https:\/\/uatv.ua\/en\/#website"},"primaryImageOfPage":{"@id":"https:\/\/uatv.ua\/en\/weaponization-of-stolen-ip-addresses-how-russia-is-exploiting-ukrainian-digital-resource-in-its-war-against-ukraine\/#primaryimage"},"image":{"@id":"https:\/\/uatv.ua\/en\/weaponization-of-stolen-ip-addresses-how-russia-is-exploiting-ukrainian-digital-resource-in-its-war-against-ukraine\/#primaryimage"},"thumbnailUrl":"https:\/\/uatv.ua\/wp-content\/uploads\/2025\/12\/kiberataki-1-cropped-1300x750-1.jpg","datePublished":"2025-12-01T09:37:07+00:00","dateModified":"2025-12-01T10:59:54+00:00","author":{"@id":"https:\/\/uatv.ua\/en\/#\/schema\/person\/f4fe8d6d08deebcdee69f6671576d2d2"},"breadcrumb":{"@id":"https:\/\/uatv.ua\/en\/weaponization-of-stolen-ip-addresses-how-russia-is-exploiting-ukrainian-digital-resource-in-its-war-against-ukraine\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/uatv.ua\/en\/weaponization-of-stolen-ip-addresses-how-russia-is-exploiting-ukrainian-digital-resource-in-its-war-against-ukraine\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/uatv.ua\/en\/weaponization-of-stolen-ip-addresses-how-russia-is-exploiting-ukrainian-digital-resource-in-its-war-against-ukraine\/#primaryimage","url":"https:\/\/uatv.ua\/wp-content\/uploads\/2025\/12\/kiberataki-1-cropped-1300x750-1.jpg","contentUrl":"https:\/\/uatv.ua\/wp-content\/uploads\/2025\/12\/kiberataki-1-cropped-1300x750-1.jpg","width":1300,"height":750,"caption":"Illustrative photo: shutterstock.com"},{"@type":"BreadcrumbList","@id":"https:\/\/uatv.ua\/en\/weaponization-of-stolen-ip-addresses-how-russia-is-exploiting-ukrainian-digital-resource-in-its-war-against-ukraine\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/uatv.ua\/en\/"},{"@type":"ListItem","position":2,"name":"Weaponization of stolen IP addresses &#8211; how Russia is exploiting Ukrainian digital resource in its war against Ukraine"}]},{"@type":"WebSite","@id":"https:\/\/uatv.ua\/en\/#website","url":"https:\/\/uatv.ua\/en\/","name":"Freedom","description":"UATV - UA|TV - International Broadcasting Multimedia Platform of Ukraine","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/uatv.ua\/en\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/uatv.ua\/en\/#\/schema\/person\/f4fe8d6d08deebcdee69f6671576d2d2","name":"Danylo Shportilo","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/dfea04f04995a5257694c4ef7149b332b4103ac47f1c95f912cddd7a1e2ef4e7?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/dfea04f04995a5257694c4ef7149b332b4103ac47f1c95f912cddd7a1e2ef4e7?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/dfea04f04995a5257694c4ef7149b332b4103ac47f1c95f912cddd7a1e2ef4e7?s=96&d=mm&r=g","caption":"Danylo Shportilo"},"url":"https:\/\/uatv.ua\/en\/author\/d-shportilo\/"}]}},"_links":{"self":[{"href":"https:\/\/uatv.ua\/en\/wp-json\/wp\/v2\/posts\/1262464","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/uatv.ua\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/uatv.ua\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/uatv.ua\/en\/wp-json\/wp\/v2\/users\/31"}],"replies":[{"embeddable":true,"href":"https:\/\/uatv.ua\/en\/wp-json\/wp\/v2\/comments?post=1262464"}],"version-history":[{"count":4,"href":"https:\/\/uatv.ua\/en\/wp-json\/wp\/v2\/posts\/1262464\/revisions"}],"predecessor-version":[{"id":1262541,"href":"https:\/\/uatv.ua\/en\/wp-json\/wp\/v2\/posts\/1262464\/revisions\/1262541"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/uatv.ua\/en\/wp-json\/wp\/v2\/media\/1262478"}],"wp:attachment":[{"href":"https:\/\/uatv.ua\/en\/wp-json\/wp\/v2\/media?parent=1262464"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/uatv.ua\/en\/wp-json\/wp\/v2\/categories?post=1262464"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/uatv.ua\/en\/wp-json\/wp\/v2\/tags?post=1262464"},{"taxonomy":"sources","embeddable":true,"href":"https:\/\/uatv.ua\/en\/wp-json\/wp\/v2\/sources?post=1262464"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}