
TL;DR
Yandex's recent data center strikes led to a drop in traffic, but malicious bots simply shifted to other providers rather than disappearing. Analyzing traffic patterns revealed that while Yandex Search saw a decline in legitimate crawlers, Yandex.Cloud experienced a migration of high-volume automation.
✦ Why It Matters
Evaluate your own infrastructure's resilience against bot migrations and adapt your security measures accordingly.
Key Takeaways
Full Summary
Following drone strikes on Yandex data centers, traffic from Yandex's two autonomous systems (ASNs) dropped significantly, with Yandex Search (AS13238) seeing a decline in verified search crawlers and Yandex.Cloud (AS200350) experiencing reduced malicious activities. Analysis using Cloudflare Radar revealed that while Yandex Search's traffic fell by 99%, the malicious automation on Yandex.Cloud simply shifted to other hosting providers.
Before the strikes, automated requests accounted for over 35% of traffic from Russian IPs. Post-event, bot traffic targeting gambling accounts remained stable, indicating that operators quickly migrated their activities.
The findings highlight that a drop in traffic does not equate to a reduction in malicious behavior, emphasizing the need for deeper analysis of request patterns.
Related