Reported Measurement & EconomicsSearch & AI DiscoveryAccess Controls Cloudflare Blog ·

Cloudflare Data Shows Yandex Outage Halted Verified Crawlers While Malicious Automation Migrated

Open source ↗

Summary

Following physical strikes on Yandex data center facilities in October 2026, Cloudflare observed traffic drops exceeding 90% across both Yandex Search (AS13238) and Yandex.Cloud (AS200350). The traffic drop from Yandex Search consisted almost entirely of verified indexing bots, notably YandexBot, YandexRenderResourcesBot, and YandexImages, which hit publishing sites the hardest. Conversely, malicious automation and probing from Yandex.Cloud did not halt globally, but instead migrated immediately to alternate Russian hosting providers such as Selectel and Radist with identical JA4 fingerprints and custom user-agent headers.

Insight

Aggregate traffic and ASN-level drops conflate distinct classes of automated actors: infrastructure outages quickly disable centralized, verified search engine crawlers, whereas evasive and unverified bot operations maintain operational resilience by rapidly migrating workloads across hosting providers.

Implication

Publishers and site operators will observe reduced indexing and discovery in Yandex Search while Yandex infrastructure remains offline, but security teams cannot rely on ASN-level disruption to block malicious bot operations.

Why it matters

The analysis demonstrates that web crawling for search indexing is heavily tied to specific infrastructure, making it vulnerable to localized disruption, while malicious automation is highly portable across cloud providers and requires behavioral access controls rather than IP or ASN blocklists.

Evidence