85 telecommunications operators were fined by Roskomnadzor.

      Roskomnadzor has fined 85 telecom operators for failing to provide data on IP addresses assigned to equipment used by operators and their users, reports the publication "Izvestia." The agency clarified that the information is necessary to prevent DDoS attacks. Companies are required to provide information about IP addresses after receiving a corresponding notification. In March 2026, such notifications were sent to 1,359 telecom operators. The supervisory agency indicated that the notification is carried out as part of the implementation of powers to monitor compliance with the requirements of the law "On Communications." The specific procedure for data transmission is established by an order from Roskomnadzor issued in 2025. Operators must transmit IP addresses, data on their usage locations linked to the municipality, and identifiers of technical means for countering threats (TSPU) through which traffic passes. Information about all changes must be transmitted within one day, and in the case of a request from Roskomnadzor regarding specific addresses, within one hour. In the latter case, operators are also required to provide data about users to whom IP addresses are allocated for simultaneous use of IPv4 and IPv6 protocols, explained the head of the "IT&IP Dispute Resolution" department at "Rustam Kurmaev and Partners," Yaroslav Shitsle. This is a structured record containing the IPv6 address, IPv4 address, type of operation (start/end/extension of session), timestamp, session TTL, and TSPU numbers. TelecomDaily CEO Denis Kuskov noted that in a situation where Russian companies and government organizations are regularly subjected to cyberattacks, monitoring IP addresses is necessary. By knowing about their changes, specialists can identify and localize the source of malicious traffic. This information is also important for combating spam, the expert added. In turn, NTI wireless communications expert Oleg Yablokov pointed out that this data is needed for effective traffic filtering and response to DDoS attacks, during which attackers systematically use address spoofing. Rostelecom reported that they are aware of the notifications and have made the necessary adjustments to their network. At the same time, special equipment is required for prompt notification of IP address changes, noted expert Leonid Konik. A source close to one of the telecom companies revealed that this involves hiring about 20 additional employees. A source close to another telecom company also mentioned staff expansion. According to him, for small operators, such a burden becomes particularly sensitive from a financial perspective. As Oleg Yablokov explained, according to industry research, between 25% and nearly 60% of IP addresses regularly change key parameters. A large federal operator may experience hundreds of thousands of such events daily. From a technical standpoint, the requirements are feasible; however, the operational and financial burden, especially for small and medium-sized providers, is significant, the expert added. Leonid Konik believes that many operators likely currently lack information systems capable of tracking such changes in real-time, which means additional investments are needed to develop and implement such solutions. Regarding fines, as Yaroslav Shitsle noted, failure to comply with the requirements of the order may fall under several types of administrative offenses. The fine for the first failure to provide information can reach 500,000 rubles. For repeated violations, the penalties increase to 1 million rubles. Additionally, Article 14.1, Part 3 of the Administrative Offenses Code of the Russian Federation may apply—conducting business activities in violation of license conditions, which entails a warning or a fine on legal entities of up to 40,000 rubles.