This is misleading, according to comments on the earlier HN story.
The Cloudflare data is showing the bot traffic from the Yandex crawler, which identifies itself as a bot(like Google search bot).
The data apparently does not show malicious bot traffic.