乌克兰无人机在10月7日至11日期间对俄罗斯的三个Yandex数据中心发动打击1，导致该公司网络流量大幅下滑。根据Cloudflare的分析，Yandex Search（AS13238）在10月11日的流量下降了99%，Yandex.Cloud（AS200350）的流量则下降了90%1。尽管遭受打击，到10月14日18时（UTC），流量已恢复至正常水平的85%1。
然而，基础设施的受损并未阻止恶意自动化活动。数据显示，Yandex Search中99.5%的请求属于自动化请求，其中93.6%为已验证的机器人请求1；而Yandex.Cloud约95%的请求来自机器人，但0%为Cloudflare已验证的机器人1。在攻击期间，WordPress插件扫描流量下降90%，扫描器识别请求下降93%1。针对赌博客户的俄罗斯机器人流量几乎未受影响，从1.677亿请求增至1.701亿请求，增长1.4%1。数据表明这些恶意流量并非真正离线，而是迁移到了Radist和Selectel等其他俄罗斯托管服务提供商的基础设施1。
Ukrainian drone strikes on three Yandex data centers between October 7-11 resulted in a dramatic collapse of the company's network traffic, with Yandex Search experiencing a 99% drop and Yandex.Cloud falling 90% on October 11 1. However, analysis from Cloudflare reveals that the infrastructure damage did not eliminate malicious automation—instead, hostile bot traffic simply migrated to alternative Russian hosting providers 1.
The traffic disruption proved temporary, with services recovering to 85% of normal levels by October 14 at 18:00 UTC 1. Yet the composition of remaining traffic exposed the nature of Yandex's user base: Yandex Search handled 99.5% automated requests, of which 93.6% were verified bots, while Yandex.Cloud operated almost entirely on bot traffic at approximately 95%, though none qualified as verified Cloudflare bots 1. WordPress plugin scanning requests declined by 90%, with scanner identification traffic down 93%, but gambling-focused Russian bot operations targeting gambling customers remained essentially flat, rising only 1.4% from 167.7 million to 170.1 million requests 1.
The migration of malicious infrastructure proved particularly significant: hostile automated traffic relocated to other Russian hosting networks, including Radist and Selectel ASNs, indicating that perpetrators of bot operations maintained operational continuity despite the physical damage to Yandex infrastructure 1.
评论
还没有评论，欢迎留下第一条。