Russian Bot Traffic Claim After Drone Strikes, Examined

âš¡ TL;DR
A widely shared post claims Ukrainian drone strikes destroyed several of Russia’s “Google data centers” and nearly eliminated Russian disinformation bot traffic overnight. No public evidence supports that claim, and Google has not operated data centers inside Russia — its Russian subsidiary went bankrupt in 2022. Ukraine has struck Russian energy and industrial targets, and Russia routinely imposes mobile-internet shutdowns during drone raids, which can disrupt traffic patterns without any data centre being hit.

The claim

A post circulating on Reddit’s r/technology and across social platforms this week asserts that Russian disinformation bot traffic was “nearly eliminated overnight” after Ukrainian drone strikes “crippled multiple of Russia’s Google data centers.” The headline has been reshared tens of thousands of times since the weekend, often without a linked source, and has been repeated in aggregator feeds and AI-generated news summaries.

Russian bot traffic

As of October 12, 2026, no government, network-monitoring organisation, or security vendor has published data supporting the claim. The central premise — that Google operates data centres inside Russia that could be struck — does not match the public record.

Why the premise does not hold

Google has never built a hyperscale data centre on Russian territory. Its physical footprint in the country consisted of offices in Moscow and St Petersburg, plus Google Global Cache nodes — relatively small caching appliances installed inside the networks of local internet service providers to speed up YouTube and other services. Those are not data centres in any meaningful sense; they are racks of equipment hosted in third-party facilities.

That footprint shrank dramatically after February 2022. Google’s Russian subsidiary filed for bankruptcy in mid-2022 after Russian bailiffs seized its bank accounts over unpaid fines, leaving it unable to pay staff or suppliers. Google moved its remaining employees out of the country and has since operated free consumer services in Russia from infrastructure located elsewhere. Russian officials have periodically complained that degraded caching capacity is why YouTube loads slowly inside the country — an argument that only makes sense because Google is not running large domestic facilities.

In other words, there is no category of target matching the phrase “Russia’s Google data centers.” Russia’s large domestic data-centre operators — including those run by Sberbank, Rostelecom, Yandex and VK — are separate companies with no connection to Google.

What Ukraine has actually been striking

Ukraine’s long-range drone campaign is real, well documented, and a legitimate exercise of self-defence against the state that invaded it. Over the past two years, Ukrainian strikes have concentrated on military-industrial and energy infrastructure that sustains Russia’s war: oil refineries, fuel depots, pumping stations, airfields, ammunition plants, and electrical substations deep inside Russian territory. Ukrainian officials have described the refinery campaign in particular as an effort to reduce the export revenue funding the invasion.

Those strikes have had measurable second-order effects on connectivity, but not the ones described in the viral post. Russian authorities routinely cut or throttle mobile internet across entire regions during and after drone incursions, on the stated rationale that drones can use cellular networks for navigation and telemetry. Monitoring groups such as NetBlocks have repeatedly recorded multi-hour regional outages in Russian oblasts coinciding with air-defence alerts. Those shutdowns can and do change traffic volumes originating from Russian IP space — temporarily, and without a single server being destroyed.

That is the most plausible kernel of truth behind the claim: observers may have seen a dip in traffic from Russian networks and reverse-engineered a dramatic explanation for it.

How disinformation networks actually operate

The claim also misunderstands the infrastructure behind state-aligned influence operations. Research published by Meta, Google’s Threat Analysis Group, the EU’s EEAS, and independent outfits such as the Digital Forensic Research Lab has consistently found that Russian-linked influence networks rely on distributed, rented, and often foreign-hosted resources: commercial VPS providers in third countries, residential proxy networks, bulk-registered accounts purchased from brokers, compromised devices, and content farms staffed by contractors.

The “Doppelganger” operation documented by European researchers, for example, used domains registered through registrars outside Russia and hosting spread across multiple jurisdictions, specifically to survive takedowns. Networks built that way are resilient by design. Destroying buildings in one country would not switch them off overnight, and there is no publicly identified single point of failure whose loss would produce the effect described.

How to check a claim like this

Several public datasets would show a sudden global collapse in automated traffic if one had occurred:

  • Cloudflare Radar publishes bot-versus-human traffic ratios and country-level traffic trends.
  • NetBlocks and IODA track national and regional connectivity disruptions in near real time.
  • Platform transparency reports from Meta, TikTok and OpenAI document takedowns of coordinated inauthentic behaviour, usually with network-level detail.
  • Ukraine’s General Staff and Russia’s Defence Ministry both issue daily strike claims that can be cross-checked against satellite imagery and NASA FIRMS fire data.

None of these sources currently show the pattern described in the viral post. Readers should treat the story as unverified until a named organisation publishes data behind it.

A recurring pattern

The episode fits a familiar shape: a technically plausible-sounding claim, a satisfying narrative payoff, no named source, and rapid amplification. NarwhalTV has examined several similar cases, including Polish SIM cards found in Russian drones, Germany’s “shadow war” warning about Russian sabotage, and an unverified claim about Google TLS certificates. Infrastructure stories are especially prone to this, as seen in disputes over diesel generators at Virginia data centres and redacted water figures at a Google facility in Lincoln.

The bottom line

Ukraine’s deep-strike campaign is real and has imposed genuine costs on Russia’s war economy. The specific assertion that it destroyed “Russia’s Google data centers” and switched off Russian disinformation bots overnight is not supported by available evidence, and rests on a facility type that does not exist. NarwhalTV will update this report if any monitoring organisation or government publishes corroborating data.

0
Show Comments (0) Hide Comments (0)
0 0 votes
Article Rating
Subscribe
Notify of
guest
0 Comments
Oldest
Newest Most Voted
0
Would love your thoughts, please comment.x
()
x