r/SipsTea • u/Previous_Month_555 • 5h ago

Feels good man Russian disinformation bot traffic nearly eliminated overnight after Ukraine drone strikes cripple multiple Russian data centers.

Post image
26.0k Upvotes

95% Upvoted

631 comments sorted by

View all comments

26

u/greihund 4h ago

I'm going to go ahead and say that disinformation bot traffic has not been nearly eliminated. It has been dented, but it's still going strong. The narrative that it has been completely dismantled is itself disinformation, meant to make you complacent and let your guard down. You want it to be that easy. Social media bot servers can - and do - run thousands of accounts from a closet. It is not a centralized affair.

14

u/calladc 4h ago

cloudflare radar showing 0.5% of normal Russian bot traffic is active since the attacks.

it's a lot of traffic

2

u/vancitydreamer 4h ago

How do you check that? I'd love to see it

2

u/calladc 4h ago

https://radar.cloudflare.com/bots/as13238?dateRange=7d

you can see them slowly stitching it back together.

https://radar.cloudflare.com/routing/as13238?dateRange=7d

this is the bgp/routing "node" (ASN) that yandex operates inside their largest datacenter. they've been announcing updated routes to seemingly move shit around in last 24 hours but seems slow moving. they tried to move everything last night but reverted

2

u/SwimmerQuick1500 3h ago

Why is it that I click your link and click on Russian federation which is the level above https://radar.cloudflare.com/bots/ru?dateRange=7d

It appears pretty normal?

How did you make the conclusion that Yandex was the Russian bot question?

Genuinely curious because using radar.cloudflade, it says on Russian federation under "Bot traffic share by autonomous system" and it has PJSC Rostelecom at 14% and Yandex at 6.2%. I changed the timeline to before the outage and it's 13% to 9.4%.

1

u/calladc 3h ago

aa13238 is a routing node inside Russia that is specifically in the yandex datacenter that got attacked.

Russia is fine because all the nodes and peers are active minus one. technically if the DC wasn't on fire they could push the routes through peers or backup links at the same dc

2

u/SwimmerQuick1500 3h ago

I get that but how are you determining that is the Russia disinformation bot traffic and not any of the other nodes?

The graph you linked just says Yandex is down which I'm not questioning. We can see in the Russian federation graph a level above Yandex that Russian bot traffic has hardly changed.

1

u/calladc 3h ago

the graph specifically tracks Russian bots from that bgp node

2

u/SwimmerQuick1500 3h ago

But when I click on Russian federation, a level above containing all the nodes, theres not really in difference in bot traffic.

So again yes Yandex is down but at most Yandex held 10% of bot traffic for the entire Russian federation.

1

u/calladc 3h ago

it's the node specifically that the conversation is about. not all of Russia

1

u/vancitydreamer 4h ago

Thank you!