17 comments

  • londons_explore 38 minutes ago
    Yandex is Russian Google.

    Of course they have bots... That's how you index the web.

    If we took Google offline I bet there would also be a reduction in bot traffic from them too!

    Indexing is also probably a low priority task, so if half their datacenter capacity is taken offline, their bot traffic probably reduces by more than 50%.

    • cromka 32 minutes ago
      I don't think these are the boys they refer to?

      EDIT: I was wrong, they're just generic bot vs human traffic numbers and you're right.

    • asdfsa32 11 minutes ago
      Don't let logic get in the way of a good propaganda.
    • DonHopkins 11 minutes ago
      Ukraine should take the rest of Yandex permanently offline so Cloudflare can get a clean objective measurment, and we can enjoy fewer Russian shill-bots on Hacker News.
      • CoastalCoder 3 minutes ago
        Can you point to a few comments that you consider examples?

        I've never noticed occurrences of such stuff, so I'm curious what I'm failing to key in on.

        • BlackRabbit1 1 minute ago
          Post a controversial political statement and grab a beer.
    • dgellow 16 minutes ago
      Yandex has cloud offering, their servers are used for actual bot traffic, not just crawlers. Yandex hasn’t been only a search company for a very long time.
    • AlienRobot 18 minutes ago
      I wonder how this will affect the Yandex search engine. I think I've read they split the Russian one and .com, but I'm not sure.
  • r721 1 hour ago
    *Sudden drop in Cloudflare bot traffic from AS13238 YANDEX — Yandex LLC

    UPD Definition of bot traffic from Cloudflare's glossary:

    >Bot vs. human traffic

    >The percentage of HTTP requests classified as bot versus human, based on bot scores. Requests with a bot score between 1 and 29 are classified as likely automated (bot), while requests with a score of 30 or above are classified as likely human. For more information, refer to Bot classes.

    >By default, Radar shows bot vs. human traffic for requests to HTML content. This filter is meant to represent traditional web traffic by excluding API calls, asset requests (images, scripts, fonts), and other machine-to-machine requests.

    https://developers.cloudflare.com/radar/glossary/#bot-vs-hum...

    https://developers.cloudflare.com/bots/concepts/bot-score/

    • walrus01 1 hour ago
      Correct, I probably didn't didn't write that in the clearest possible way, I meant "detected bot traffic hitting cloudflare originating from Yandex".
  • schleck8 36 minutes ago
    The HTTP traffic from Yandex is down to ~ 0 % after the third strike, after the first two strikes already degraded it. I wonder how this looks like at the network level because their search page still serves, but presumably their crawler is inactive now

    Edit: Here is some more info, they do have availability issues as is to be expected

    > Because three of its primary facilities were knocked offline within four days, Yandex’s failover mechanisms broke down[1][8].

    > Outages have cascaded across Yandex Go (taxis), Yandex Pay, food delivery, smart home platforms, internal logistics, and third-party corporate services hosted on Yandex Cloud[2][7]. Problems have spilled into neighboring countries using these systems (Belarus, Kazakhstan, Armenia, Serbia)[2][7].

    • Bluestein 27 minutes ago
      This will be a case study in catastrophic events for HA and Ops folks.-
      • AlienRobot 10 minutes ago
        I don't think there is much you can do about being targeted by a military, simply because of how unique the attack vector is.

        Hacking is smart but happens through software, so if you have hardware (i.e. physical) barriers, that stops the hacking.

        Natural disasters happen physically but they are dumb, so if you have software redundancy (i.e. by copying the data to multiple locations), that stops them from destroying everything.

        A military is both physical AND smart. They can target multiple locations at once and destroy whole buildings.

    • bamboozled 17 minutes ago
      I just searched "blyat" and it worked, so?
      • eptcyka 12 minutes ago
        Given that blyad is just punctuation at this point, I am not surprised.
        • throw-the-towel 1 minute ago
          The username checks out!

          ("Ept" and "suka" are two other swearwords, that are also used much like punctuation.)

  • timr 7 minutes ago
    Isn't this showing the percentage of bot traffic from the Yandex IP range?

    If so, it isn't particularly surprising that the line would go down.

    EDIT: yes, it is. Looking at the same graph for all of Russia, and there's no discernible pattern:

    https://radar.cloudflare.com/bots/ru?dateRange=7d

    same for the 48h view:

    https://radar.cloudflare.com/bots/ru?dateRange=2d

    • onemanstartup 1 minute ago
      USA accounts for 44% bot traffic worldwide. Russia 0.9%. Russia derangement syndrome on HN as usual.
  • pluc 26 minutes ago
    That's some intense mitigation from Cloudflare
    • Alifatisk 17 minutes ago
      You gave me a good laugh, cheers!
  • ericpauley 10 minutes ago
    Interestingly most traffic coming out of this AS was actually UDP: https://dashboard.terracenetworks.com/sources/asns/13238

    Pretty benign AS as far as actual exploit or malicious crawling is concerned.

    • cowlevel 4 minutes ago
      Probably QUIC if true, but you should also ask how these people get their data, because this isn't something you can just see or look up.
  • pKropotkin 1 minute ago
    Could be just crawlers
  • bearjaws 9 minutes ago
    Someone needs to inventory all the accounts that go dark on social media so we can flag them going forward.
  • speckx 17 minutes ago
    I have to wonder what will happen when the remaining 6 data centers get hit as well. It's bound to happen.
    • afdbcreid 6 minutes ago
      If there will be an world-wide war, sure. But at that point, the Internet as we know it will probably collapse anyway.
      • cowlevel 3 minutes ago
        There is one, but it's taking place mostly by information means, not physical.
  • surfingdino 13 minutes ago
    So, is sending hot hate towards a bot farm going to be a paid service on Cloudflare now?
  • dintech 13 minutes ago
    Oh no, how is Trump going to win the midterms now?
  • bamboozled 19 minutes ago
    I'm going to be really interested how much this cleans up the internet, I mean the damage is done if you read comment sections on youtube etc, but let's see how long the BS persists.
    • cowlevel 2 minutes ago
      It's only counting Yandex search crawler traffic, not any actually bad bots.
  • WiSaGaN 1 hour ago
    isn't this only counting russian origin already?
    • walrus01 1 hour ago
      The URL is CF's public metrics for bot traffic from a single specific Russian ASN, Yandex.

      https://www.peeringdb.com/net/1751

      • cowlevel 33 minutes ago
        oh well of course if you blow up Yandex then Yandex stops sending you traffic, because they got blown up.
  • toomuchtodo 1 hour ago
    Cloudflare should consider donating to the Ukrainian military for the public service they are performing.
    • exe34 20 minutes ago
      I was thinking, we should all contribute to a Yandex fund for the Ukrainian mil to help keep the level of bot activity on the rest of the internet under control!
  • rvz 1 hour ago
    “AI agents” is just a fancy rebranding of “bots” with some “intelligence”.