Looking at service logs at my company show a serious amount of hacking attempts by bots originating from Russian and Chinese IP addresses. Mostly harmless on an updated server not running an ancient Wordpress but attempts nonetheless.
For companies that don't serve customers there it's very common to just block those network ranges. Of course, it's no real solution, but some people are convinced every security layer contributes to 'defense in depth'.
It's not specifically Ukraine related, (spam) botnet harvesting is a much older practice. It was already a problem at my first job at the beginning of the century...
