Russian Bot Traffic Drops Sharply After Reported Ukrainian Strikes on Data Centers

Ukraine’s recent strikes on Russian data centers have disrupted key parts of the country’s digital infrastructure, with automated web traffic from technology giant Yandex experiencing a dramatic decline.

The attacks targeted three Yandex data centers in Sasovo, Kaluga, and Vladimir, affecting services operated by one of Russia’s most important technology companies. The disruptions have sparked widespread discussion about the relationship between digital infrastructure, automated internet activity, and online influence operations.

However, while the decline in Yandex-related traffic has been reported, it is important to distinguish automated web requests from social media propaganda activity. Yandex, often described as Russia’s equivalent of Google, operates a broad ecosystem of digital services, including search, cloud computing, email, navigation, and payment platforms.

Ukrainian drone strikes reportedly damaged three of the company’s data centers, disrupting operations and affecting services that depend on its infrastructure. The incidents demonstrate how damage to a small number of major facilities can have consequences across an interconnected digital network. The disruption also drew attention to automated traffic originating from Yandex’s network, which dropped sharply following the attacks.

Data centers provide the computing resources needed to operate websites, applications, cloud platforms, and automated software. Yandex also runs web crawlers that automatically visit websites and collect information for search indexing and other legitimate purposes. When the company’s infrastructure experiences major outages, these automated systems may be interrupted, resulting in a significant decline in observed traffic.

This helps explain why a sharp drop in automated requests can occur after damage to data center infrastructure. However, the available figures do not establish that the affected traffic was primarily generated by political propaganda bots.

The possibility that the attacks disrupted Russian online influence operations has attracted attention, particularly amid longstanding concerns about coordinated social media activity and disinformation. Nevertheless, the distinction between web crawlers and social media bots is crucial.

Web crawlers collect and index information across the internet, while social media bots may automate posts, replies, likes, and other platform interactions. These activities use different systems and cannot be measured interchangeably.

Reporting by BBC Verify and the Kyiv Independent indicates that there is no convincing evidence that the strikes significantly reduced Kremlin-linked social media influence operations. The observed decline in Yandex traffic should therefore not be presented as proof that Russian propaganda networks have been shut down.

Beyond the debate surrounding bot activity, the attacks highlight the vulnerability of centralized digital infrastructure during wartime. When major data centers go offline, the effects can extend beyond a single company, potentially disrupting cloud services, online transactions, business operations, and other internet-dependent activities.

The incident also illustrates why organizations need resilient infrastructure, reliable backup systems, and alternative recovery arrangements to maintain essential services during unexpected outages.

Ukraine’s strikes on Yandex data centers have exposed vulnerabilities in Russia’s digital infrastructure and coincided with a sharp decline in automated traffic from the company’s network. Although the development has fueled speculation about Russian propaganda bots, the available evidence does not establish that Kremlin-linked social media operations were significantly affected.