NHacker Next
  • new
  • past
  • show
  • ask
  • show
  • jobs
  • submit
▲Yandex bot traffic down 99% after data center attack (radar.cloudflare.com)
ron_k 6 hours ago [-]
gritzko 6 hours ago [-]
This graph shows that Yandex Web crawler farm was hit. The other option, it was shut down to accommodate more critical services that got hit. (I worked for Yandex 20 years ago, one crawler guy was in the same room.) Not sure if troll farms got affected in any way, that is a different business entirely, no overlap.

The interesting aspect is this: Yandex was taken from its owners semi-consensually. Similarly, the original owner of the troll farms was blown up in a business jet. He staged a mutiny cause his dirty bloody business was about to be taken from him non-consensually. Some other large non-consensual takeovers unfold for 5 years, soon 6.

What an appetite!

alterom 5 hours ago [-]
You really should mention chef-cum-media-mogul-cum-PMC-commander Prigozhin by name.

Yevheniy Prigozhin, of Wagner PMC fame lately (and ultimately):

https://en.wikipedia.org/wiki/Yevgeny_Prigozhin

> Not sure if troll farms got affected in any way, that is a different business entirely, no overlap.

Was a different business. Before the "consensual" takeover.

After the takeover, there's only one business that matters: do what they tell you.

bigus_dickus 5 hours ago [-]
funny that you didn’t call out Prihozin
sznio 7 hours ago [-]
I don't use X myself, but my friends told me there's a noticable reduction in hateful tweets, at least in the Polish sphere. Much less comments blaming Ukrainians for everything wrong with the world.
Geof25 5 hours ago [-]
Either Ukraine was aiming exactly for that or it is just a coincidence and Ukraine is going to exploit it further because reducing Russian bot activity will reduce visibility for parties which are openly hostile to Ukraine (like AfD) which reduces their ability to get into power.
ericmay 5 hours ago [-]
It’s also possible the US and UK gave targeting information or helped Ukraine with site selection. It’s not like we don’t know where this stuff is coming from.
CursedSilicon 5 hours ago [-]
US? Absolutely not

UK? Quite possibly. Given their recent admission (finally) around the Russian propaganda for Brexit

ruperthair 5 hours ago [-]
Thanks for the pointer to that Brexit story. https://www.bbc.co.uk/news/articles/c6jdm3zggl0ko for anyone else who's not seen it.
TrueRider 4 hours ago [-]
The BBC is a state-sponsored propaganda machine with a strict editorial policy. Only an idiot would believe the words of this prime minister, who did not even provide a single piece of evidence.
CursedSilicon 2 hours ago [-]
Good to see the bots are regrouping
dudefeliciano 2 hours ago [-]
Thank you for pointing this out, 29 day old account
jamiek88 1 hours ago [-]
Yes let’s believe the new bot account called ‘truerider’ instead of the elected prime minster with access to intelligence agency reports.

I guess you are hosted on one of the servers yet to be droned.

bluegatty 5 hours ago [-]
US is helping with targeting and a lot of things.
throw93038300 5 hours ago [-]
Most of those drones have starlink recivers.

UK has no infra to target even their own missiles. They always had to use US!

Geof25 5 hours ago [-]
Ukrainian drones can't use Starlink in Russia because Musk is not allowing that. So that's false.
catdog 5 hours ago [-]
Maybe, but also, they just hit a few of the largest data centers. Russia simply does not have that many large data centers and it's not so much of a secret where they are located I guess. Such an attack disrupts a lot of things and it's natural that the Russians focus their recovery efforts and the spare capacity they have left elsewhere on more critical services.
riffraff 5 hours ago [-]
US seems unlikely given Trump just made a deal to give money to Russia in exchange for diesel and blamed Ukraine for gas prices.

I mean, sure, maybe some random person at the Pentagon could have done it but the US has not acted as a Ukraine ally for years now.

tonyedgecombe 5 hours ago [-]
Just this week Trump was threatening to cut off intelligence if Ukraine continued targeting Russian oil refineries. This implies they are still receiving intelligence.
tonyedgecombe 5 hours ago [-]
Russia attacked several Ukraine data centres recently. This was just tit for tat.
5 hours ago [-]
maelito 6 hours ago [-]
Same in Germany : AFD's activity went abruptly down apparently.
justinnk 5 hours ago [-]
Can you link a reliable source for this? The only thing I could find online was someone claiming this with a chart that does not refer to Afd at all.
specproc 5 hours ago [-]
One of the reasons we need to better relate social media companies, is so we can get at this data. Twitter was incredibly open, pre-Musk. If you're running a platform like that, you're a publisher, and should be required to provide API access for accountability and transparency purposes.
the_mitsuhiko 5 hours ago [-]
As far as I can tell there is no reliable data that would indicate any of that.
vjk800 5 hours ago [-]
With some analysis, it might be possible to figure out which accounts were Russian trolls by comparing tweet frequency with the timing of these bombings.

There's of course the obvious, low effort trolling, but I'd think there are also more subtle, maybe more intellectually equipped information warfare going on.

EmilStraad 5 hours ago [-]
A German friend said support for the AfD completely evaporated. Gone.
mr_mitm 5 hours ago [-]
German here. I wish. AfD polls highest out of all parties, based on several independent polling organizations. [1] It's not plausible that online support evaporates over night.

[1] https://www.dkriesel.com/_media/sonntagsfrage_wahl2025.png

meowface 5 hours ago [-]
I hate Russia with a passion and strongly support Ukraine, but this kind of convenient narrative always makes me suspicious. (I use Twitter daily and haven't necessarily noticed anything.)

Reminds me of when 4channers said 4chan's daily interracial posting went way down on October 7, 2023. (It didn't.)

I could believe this, but not before I see a good empirical analysis. Until then, it just feels like typical folk gossip.

conception 5 hours ago [-]
Russia’s use of social media to influence western thought and sow discord is pretty well documented (even in their geopolitical texts).

Eg https://www.researchgate.net/publication/328006677_Weaponizi...

This is an easy topic to find empirical analysis.

meowface 5 hours ago [-]
No, I know. That doesn't necessarily mean these Yandex data centers being hit affected that yesterday and today, though. For a variety of different possible reasons.
ikt 5 hours ago [-]
right, so far we have yandex search crawler went offline

yet to see any evidence of anything else going down

meowface 2 hours ago [-]
Here's basically the most anti-Russia account on Twitter agreeing with you and me: https://x.com/P_Kallioniemi/status/2109542508682248478

Seems to likely just be a standard socially constructed folk belief

SSLy 2 hours ago [-]
All I can say is that vile comments usually there on certain pages dealing with the war in Ukraine have almost all disappeared under some of the FB feeds I read.

Excuse the grammar.

aaron695 5 hours ago [-]
[dead]
Eji1700 5 hours ago [-]
Seconded. The amount of "someone who claims to be on my side has a bad view, must be a bot!" is absurd.

People have been problematic since recorded time, and the whole "well X% of internet traffic is bots!" doesn't mean the % you're interacting with is just that.

99.99% (totally made up for example) of the emails I am probably sent are spam, those are filtered automatically before I even see them by the various email providers, and of the remaining .01% some still slips through.

I feel that there's somewhat of a similar disconnect between "x amount of traffic is bots" and people assuming that means that supposed ally who says horrible things is a bot (...or psyop..or false flag...or etc...)

parineum 5 hours ago [-]
I always assumed that all of those people were correct, everyone they were arguing with is a bot. What I think they overlooked is that everyone they agreeing with is a bot too.
Zanfa 5 hours ago [-]
EDMO published an analysis on the topic[0] of "independent anti-vax influencers" unrelated to Russia, suddenly pushing viewpoints that explicitly benefit Russia in a coordinated manner.

[0] https://edmo.eu/publications/how-covid-19-conspiracy-theoris...

meowface 2 hours ago [-]
I'm not denying that Russia spreads disinformation and propaganda. They definitely do. I'm just skeptical knocking out these data centers is necessarily creating the effect people are anecdotally claiming to observe.
5 hours ago [-]
totalbullfuckin 6 hours ago [-]
[dead]
Freedom2 6 hours ago [-]
I've actually seen less controversial comments here on HN as well.
stackghost 5 hours ago [-]
That’s on me. I’ve been commenting less.
Dkuku 6 hours ago [-]
What about true social?
xvxvx 6 hours ago [-]
For those claiming a drop in hate speech on social media, I’ve yet to see examples of this. Plenty of claims, no examples.
popalchemist 5 hours ago [-]
[dead]
toxik 6 hours ago [-]
Is this sarcasm? You don't see a lack of something. That's what it means. To prove a reduction you have to look at aggregate statistics and sentiment analysis.
thinkingemote 5 hours ago [-]
Since this submission is kind of on the topic of trolling, I miss good old fashioned forum troll comments like this. non political, not immediately obvious, cortisol provoking (7/10)
freehorse 4 hours ago [-]
Trolling was great and being a troll was a badge of honour, before normies taking over the internet destroyed that, too.
aschla 5 hours ago [-]
Keith Ledger was a terrible Batman.
jadamson 5 hours ago [-]
That's what he's asking for, but it seems Xitter becoming a walled garden has killed those old "trend" charting sites that used to exist around it.
swarnie 6 hours ago [-]
I would like to see some evidence.

Previously we can point to data and see things like Scotland Independence accounts all go quite on mass when Iran goes offline, or the OSRS player base go down and the gold price spike when Venezuela has a blackout.

I've seen no analysis connecting Yandex's sabotage to a drop in hate speech on the English speaking internet.

input_sh 5 hours ago [-]
You will not see any such analyses, as it is now impossible to make them.

We genuinely have nothing but vibes now, as we have like 4 social media sites that have collectively decided to severely limit their APIs or straight up kill research-focused tools (like Facebook's own CrowdTangle) around 2023-2024.

freehorse 4 hours ago [-]
When xitter made the geolocation visibility change, one could point to a handful of accounts that pretended to be in a certain part of the world and actually where in some other. It is not statistical, but it is at least some anecdotal evidence.

Now one could just present a handful of consistently-vocal accounts that went completely silent in the last days.

podocarp 5 hours ago [-]
What? At night I definitely see a lack of sun. He's exactly asking for statistics.
Geof25 4 hours ago [-]
Lack of Sun is evidence for that there is no Sun?
lolftw 2 hours ago [-]
Irrelevant. I'm sure the reply was about "you can't see the lack of something" which, by the example the other user posted, not entirely true.
SXX 5 hours ago [-]
I hope at least fellow IT people can recognize that "social media bots" are not running on Yandex datacenters neither they have IP adresses from Russia.

This is just not how social media botting works. If you try to "bot" facebook, instagram or any major social network via browser from datacenter IP let alone ones from Russia you'll soon get all your accounts banned.

Social media are botted via apps on mobile phones set in large farms; read: thousands of mobile devices. They either jailbroken or have some advance automation.

Neither they use Russian IP. Instead they go for residential proxies kindly provided by Israeli firms where bandwidth cost a leg, but it worth it. Or they just use their own botnets instead.

yokoprime 6 hours ago [-]
An important detail for those, like me, who have't kept up with the news: this was drone strike against a yandex data center, not cyber attack.
Hamuko 6 hours ago [-]
Multiple drone strikes, against three different data centers.
deanc 5 hours ago [-]
There's a lot of ancedotes "I've seen hatespeech drop" etc. This is measurable and there are people measuring this kind of thing. Let's wait for some real data.
wraptile 5 hours ago [-]
It is a very hard time to do this sort of study with APIs and scraping not being available to the labs that would actually want to study this.

My guess would be that there will be a significant change detected but Russian troll farms are not totally datacenter operated - it's still mostly ran by real office workers like in 1984. That being said, you still need datacenter compute for organizing even manual operations like this.

john_minsk 5 hours ago [-]
I'd like to see this data too. What report would you recommend?
nomilk 5 hours ago [-]
This is a great example of a headline that has two completely different meanings to two different groups.

Many are (incorrectly) interpreting 'bot traffic' to mean something like "fake users on social media that leave comments and 'likes' supporting right-wing posts". (something Russian bots were accused of during the 2016 US presidential election)

But Yandex is like Russia's Google. Both Google and Yandex need to scrape the internet in order to index (no indexing means the site would not appear in search results).

So Yandex datacenters going down meant so too did their 'bots' that visit sites to index them. Nothing to do with 'bots' as per the Russia collusion allegations a la the 2016 election.

fouc 5 hours ago [-]
Exactly what I think is happening here, confusion between web crawler bots and the other sort of bots.
cluckindan 5 hours ago [-]
How do you know that?
mr_mitm 5 hours ago [-]
f311a 5 hours ago [-]
He can read and think.
foltik 5 hours ago [-]
How do you think Cloudflare gets this bot traffic metric?
5 hours ago [-]
6 hours ago [-]
victorbjorklund 5 hours ago [-]
Thanks Ukraine
asdf88990 5 hours ago [-]
Russia is a pretty shithole in many ways but the posturing of people here in a post Snowden and Epstein world is something.

Yes, russia uses both farms and attempts to influence the public opinion, but guess what.

lsofzz 6 hours ago [-]
According to Cloudflare, US still accounts for majority of the bot traffic though. https://radar.cloudflare.com/bots?dateRange=12w#bot-traffic-...

Yandex is just a drop in the ocean bud.

simondotau 5 hours ago [-]
Those CF country stats are certifiably useless. They only know the last hop. We know that consumer routers and web browser extensions are vulnerable. There are plenty of ways to bounce malicious traffic through assumed-organic hosts. These are almost impossible to track, especially with the prevalence of CGNAT.

No serious person would ever claim that Russian cyber influence operations were sending traffic directly from Russian IP addresses. That's 'Get Smart' levels of absurdity. It's as ridiculous as a Russian spy pretending to be an American while speaking with a thick Russian accent.

RamblingCTO 5 hours ago [-]
As the other commenter said, not helpful. If you go with cf countries, Germany is one of the worst offenders. But only because it has Frankfurt as a big traffic node and lots of hosting providers.
6 hours ago [-]
5 hours ago [-]
charcircuit 6 hours ago [-]
This is sad to see considering Yandex seems to be the only company with a proper image search right now.
DocJade 5 hours ago [-]
It's actually incredible how terrible google images seems in comparison. Yandex is just so, so good for reverse image search
jdw64 6 hours ago [-]
Looking at the destruction of Yandex data centers, these days it shows how terrifying drones are as weapons. I'm curious about how to defend against such drones. Are kamikaze drones a method of exploding on a target after image learning?
Robdel12 6 hours ago [-]
I’m sure I’m wrong, but I remember reading about lasers being used as a cost effective defense mechanism

Something like https://www.cbsnews.com/news/us-military-laser-shoots-down-c...

cyberax 5 hours ago [-]
They are nearly useless. Lasers work with the direct line-of-sight, and the most recent iteration drones can fly just a few _meters_ over the terrain. And they can approach from any direction.

So lasers or turrets can work if you want to defend a military base in the middle of a desert, but not something that can be deployed in cities.

Apparently, the most efficient method so far is interceptor drones.

jdw64 5 hours ago [-]
very thanks!
vkou 5 hours ago [-]
> these days it shows how terrifying drones are as weapons.

They aren't fundamentally different from a bunch of assholes sitting in an airplane 25,000 feet above you, flying above the ceiling of your flak and air interceptors, dropping a few thousand tons of firebombs on your town.

> I'm curious about how to defend against such drones.

Looking at what most of their targets have in common, I'd say that there's an easy answer to that - don't start wars.

makerofthings 5 hours ago [-]
I wonder if their SREs have a 'Drone strike' playbook.
INTPenis 5 hours ago [-]
They could be dead you know. I wouldn't joke around, we're all in the same business after all. I'm sure the SRE's didn't decide who rented space in their DC.
Str1p3 3 hours ago [-]
These DCs were built by Yandex for Yandex
cyberax 5 hours ago [-]
They do. Yandex has been holding periodic "datacenter offline" exercises for a while.
atmosx 5 hours ago [-]
I’m afraid it’s going to be a popular runbook if ppl don’t get their shit together quickly.
komali2 7 hours ago [-]
This is being documented across the internet. Pro AfD posting plummeted and pro Trump posting plummeted.

It makes me wonder whether activists should have been targeting these operations sooner. I had no idea they were so centralized.

jmward01 6 hours ago [-]
I haven't seen this effect documented but if it isn't being documented it really needs to be. We need to get -very- mad about the soft wars being waged right now and the first step is to understand the extent of what is going on and by who. We all know that bots are driving a massive amount of engagement right now. It is rare though to see such direct causal proof of where it is coming from.
anigbrowl 6 hours ago [-]
It's hard to document on the major platforms because neither X nor Meta provide easy access to streaming APIs that researchers might use to verify such claims. Last time I looked X was about $60k/year, for example.
szundi 6 hours ago [-]
[dead]
rooftopzen 6 hours ago [-]
Curious where it’s being documented - this is a fascinating study (who knows how long time period to measure its impact will last) - do you have links?
mr_mitm 5 hours ago [-]
Would you mind posting at least one link? If it's actually documented across the internet, this should take you no time. A bunch of anecdotes does not count, though.
Jean-Papoulos 5 hours ago [-]
Can someone post the actual data sources for this ? I keep seeing people claim this and even post graphs, but 0 sources.
komali2 4 hours ago [-]
Mostly seeing charts like this where people track posting activity of certain accounts

https://bsky.app/profile/chadbourn.bsky.social/post/3mxmourr...

tpm 3 hours ago [-]
Does it not bother you it's entirely fact-free? No source, no info what exactly is on Y-Axis and provided data ends in the future at the time of the posting?

(and Zdechovsky is not a reliable source at all)

5 hours ago [-]
accountrequired 5 hours ago [-]
Source: trust me bro
jojobas 6 hours ago [-]
Activists? You think the Russian propaganda machine can be defeated by activists?
michaelhoney 5 hours ago [-]
Sure, if enough activists are involved, with sufficient skill and compute.
komali2 5 hours ago [-]
What's a government if not a bunch of organized activists?
throw93038300 6 hours ago [-]
[flagged]
microtonal 5 hours ago [-]
You made an account 4 minutes ago just to post this? Of course, it is obvious what they meant. The AfD voters are real voters, but they can still be driven by hate stirred up by (among other things) Russian bots.

By the way, the 40% was in one particular Bundesland (Saksen-Anhalt). In the polling for the national elections they are around 28%:

https://en.wikipedia.org/wiki/Opinion_polling_for_the_next_G...

fabian2k 5 hours ago [-]
40% in Sachsen-Anhalt. Not 40% in Germany total.
tomaskafka 5 hours ago [-]
Aaand the bot drivers are now back online
Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact
Rendered at 11:32:36 GMT+0000 (UTC) with Wasmer Edge.