Russian Bot Traffic Plummets After Ukrainian Strike Knocks Out Major Yandex Data Centers

Russian automated internet traffic has experienced a dramatic and unprecedented decline over the past few days, directly following a targeted Ukrainian strike that crippled some of the most critical infrastructure belonging to Yandex, Russia’s dominant technology and search engine conglomerate. Telecommunications and web infrastructure security data gathered by Cloudflare reveals that automated bot traffic originating from the Yandex autonomous system has plummeted to a mere fraction of its normal operating capacity, signaling a major disruption to Russia’s digital footprint.

According to Cloudflare metrics, traffic from the Yandex network has dropped precipitously to just 0.4% of the maximum number of HTTP requests recorded over the preceding two-week period. This staggering collapse comes in the wake of an initial, steep drop-off to approximately 57% on October 8. That initial fracture in traffic volume coincided directly with a strategic Ukrainian drone strike that successfully hit a major Yandex data center situated in Sasovo, Russia. The targeted facility, located roughly 195 miles to the southeast of the Kremlin, was not a standard server farm; it housed two of the nation’s most powerful supercomputers, making it a high-value asset for Russia’s computational and technological operations.

The sudden degradation of Yandex’s infrastructure highlights the vulnerability of centralized digital assets during modern conflicts, where physical cyber-infrastructure and traditional military tactics increasingly intersect. Yandex, often described as the "Google of Russia," relies heavily on its vast network of data centers to power everything from its ubiquitous search engine and mapping services to automated web-crawling bots, data indexing tools, and various algorithmic operations. When the Sasovo facility sustained direct hits from Ukrainian drones, the physical destruction of the hardware—particularly the advanced supercomputing systems housed within—triggered a massive outage that reverberated across the company’s network architecture.

In the immediate aftermath of the October 8 strike, web traffic analysts and cybersecurity firms monitoring global network traffic began noticing immediate anomalies. Cloudflare’s Radar platform, which tracks global internet traffic patterns, bot activity, and security threats in real-time, captured the sudden contraction in HTTP requests stemming from Yandex’s network blocks. While traffic initially hovered around 57% of recent maximums as systems likely attempted automated failovers, rerouting, or emergency shutdowns to prevent further damage, the situation deteriorated further in the days that followed. As secondary power failures, cooling system breakdowns, or software infrastructure collapses rippled through the affected network, the volume of bot traffic continued to nosedive until it reached the current microscopic level of 0.4%.

The reduction of automated bot traffic from a major Russian network provider has broader implications for internet security and traffic analysis. Automated bots are routinely used for a wide variety of functions, ranging from legitimate web indexing and content scraping by search engines to more malicious activities, including automated cyber-attacks, credential stuffing, DDoS operations, and coordinated disinformation campaigns. While Cloudflare’s telemetry specifically highlights the drop in overall HTTP requests and automated traffic originating from the Yandex network identifier, security researchers are closely monitoring how the prolonged outage of these core data centers will impact Russia’s broader digital operations.

The strike on Sasovo represents a significant escalation in the targeting of civilian-commercial technology infrastructure that serves dual-use or strategic functions within the Russian Federation. Because modern data centers require uninterrupted power supplies, advanced climate control systems, and robust fiber-optic connectivity to function, they remain exceptionally vulnerable to kinetic strikes. The inclusion of top-tier supercomputers within the targeted facility means that Yandex has lost irreplaceable computational hardware, the replacement of which will be severely hampered by ongoing international sanctions restricting the import of high-end semiconductors and advanced computing components into Russia.

As telemetry data continues to flow into monitoring centers like Cloudflare, industry experts will continue to assess the long-term viability of the crippled Yandex facilities and whether Russian network engineers can successfully migrate these critical automated workloads to alternative, undamaged data centers elsewhere in the country. For now, however, the digital footprint of Yandex’s automated systems remains severely constrained, providing a stark demonstration of how physical military actions can instantaneously disrupt digital infrastructure on a massive scale.