Cloudflare data: after strikes on Yandex data centers, malicious bots simply moved networks
banteg · x · 2026-10-15
After Ukrainian drone strikes hit three Yandex facilities in Russia (Oct 7-11), claims spread that Russian bot farms had been knocked offline. Cloudflare's Radar and Bot Management data tells a more nuanced story by splitting Yandex's two ASNs:
- Yandex Search (AS13238): the traffic drop was almost entirely verified search crawlers; indexing collapsed to 99% below baseline on Oct 11.
- Yandex.Cloud (AS200350): vulnerability scanning and probing declined, but high-volume automation didn't vanish — it migrated to other hosting providers.
The takeaway: aggregate traffic metrics mislead, originating network doesn't imply operator, and only request-behavior analysis reveals why the strikes had little lasting effect on malicious traffic.
More from Infra
- vLLM ships Day-0 support for StepFun's Step-5 Preview: 604B MoE with 1M context — vllm_project · 2026-10-15
- vLLM P/D prototype hits 91.24% prefix cache hit rate on 12× GB300 with zero request errors — vllm_project · 2026-10-15
- vLLM's MTP3 validation: AIME25 up to 0.9667, prefill kernels up to 84% lower latency — vllm_project · 2026-10-15
- vLLM cuts Step 5 sparse prefill kernel latency: top-k down 84%, indexer down 43% — vllm_project · 2026-10-15
- Open-weights s1-llm-auto-router picks the right LLM in 26ms on a CPU — airesearch12 · 2026-10-15
- vLLM ships Day-0 support for Step 5 Preview: sparse attention, MoE, MTP and vision — vllm_project · 2026-10-15