Sony Pixel Power calrec Sony

Bots Now Make Up Nearly Half of All Internet Traffic Globally

16/04/2024

Facebook

Twitter

LinkedIn

Automated and malicious traffic rises for a fifth consecutive year

Bad bots account for 32% of all internet traffic

44% of all account takeover attacks target API endpoints

Thales Thales, the cybersecurity leader that protects critical applications, APIs, and data, anywhere at scale, today announced the release of the 2024 Imperva Bad Bot Report, a global analysis of automated bot traffic across the internet. Nearly half (49.6%) of all internet traffic came from bots in 2023-a 2% increase over the previous year, and the highest level Imperva has reported since it began monitoring automated traffic in 2013.

For the fifth consecutive year, the proportion of web traffic associated with bad bots grew to 32% in 2023, up from 30.2% in 2022, while traffic from human users decreased to 50.4%. Automated traffic is costing organizations billions (USD) annually due to attacks on websites, APIs, and applications.

Bots are one of the most pervasive and growing threats facing every industry, says Nanhi Singh, General Manager, Application Security at Imperva, a Thales company. From simple web scraping to malicious account takeover, spam, and denial of service, bots negatively impact an organization's bottom line by degrading online services and requiring more investment in infrastructure and customer support. Organizations must proactively address the threat of bad bots as attackers sharpen their focus on API-related abuses that can lead to account compromise or data exfiltration.

Key trends identified in the 2024 Imperva Bad Bot Report include:

Global average of bad bot traffic reached 32%: Ireland (71%), Germany (67.5%), and Mexico (42.8%), saw the highest levels of bad bot traffic in 2023. The US also saw a slightly higher ratio of bad bot traffic at 35.4% compared to 2022 (32.1%).

Growing use of generative AI connected to the rise in simple bots: Rapid adoption of generative AI and large language models (LLMs) resulted in the volume of simple bots increasing to 39.6% in 2023, up from 33.4% in 2022. The technology uses web scraping bots and automated crawlers to feed training models, while enabling nontechnical users to write automated scripts for their own use.

Account takeover is a persistent business risk: Account takeover (ATO) attacks increased 10% in 2023, compared to the same period in the prior year. Notably, 44% of all ATO attacks targeted API endpoints, compared to 35% in 2022. Of all login attempts across the internet, 11% were associated with account takeover. The industries that saw the highest volume of ATO attacks in 2023 were Financial Services (36.8%), Travel (11.5%), and Business Services (8%).

APIs are a popular vector for attack: Automated threats caused a significant 30% of API attacks in 2023. Among them, 17% were bad bots exploiting business logic vulnerabilities-a flaw within the API's design and implementation that allows attackers to manipulate legitimate functionality and gain access to sensitive data or user accounts. Cybercriminals use automated bots to find and exploit APIs, which act as a direct pathway to sensitive data, making them a prime target for business logic abuse.

Every industry has a bot problem: For a second consecutive year, Gaming (57.2%) saw the largest proportion of bad bot traffic. Meanwhile, Retail (24.4%), Travel (20.7%), and Financial Services (15.7%) experienced the highest volume of bot attacks. The proportion of advanced bad bots, those that closely mimic human behavior and evade defenses, was highest on Law & Government (75.8%), Entertainment (70.8%), and Financial Services (67.1%) websites.

Bad bot traffic originating from residential ISPs grows to 25.8%: Early bad bot evasion techniques relied on masquerading as a user agent (browser) commonly used by legitimate human users. Bad bots masquerading as mobile user agents accounted for 44.8% of all bad bot traffic in the past year, up from 28.1% just five years ago. Sophisticated actors combine mobile user agents with the use of residential or mobile ISPs. Residential proxies allow bot operators to evade detection by making it appear as if the origin of the traffic is a legitimate, ISP-assigned residential IP address.

Automated bots will soon surpass the proportion of internet traffic coming from humans, changing the way that organizations approach building and protecting their websites and applications, continued Singh. As more AI-enabled tools are introduced, bots will become omnipresent. Organizations must invest in bot management and API security tools to manage the threat from malicious, automated traffic.

Additional Information:

Download a copy of the 2024 Imperva Bad Bot Report for additional insights.

See how Imperva Advanced Bot Protection, API Security, and Client-Side Protection can protect websites, mobile applications, and APIs from automated attacks and fraud without affecting the flow of business-critical traffic.

Read the Imperva Blog for the latest product and solution news, and threat intelligence from Imperva Threat Research.

About Thales

Thales (Euronext Paris: HO) is a global leader in advanced technologies within three domains: Defence & Security, Aeronautics & Space, and Digital Identity & Security. It develops products and solutions that help make the world safer, greener and more inclusive.

The Group invests close to 4 billion a year in Research & Development, particularly in key areas such as quantum technologies, Edge computing, 6G and cybersecurity.

Thales has 81,000* employees in 68 countries. In 2023, the Group generated sales of 18.4 billion.

* These figures exclude the ground transportation business, which is being divested

Documents

Bots Now Make Up Nearly Half of All Internet Traffic Globally.pdf

Contact

Marion Bonnet, Press and social media manager, Security and Cyber

+33 (0)6 6
LINK: https://www.thalesgroup.com/en/worldwide/security/press_release/bots-n...
See more stories from thales

Most recent headlines

05/01/2027

Worlds first 802.15.4ab-UWB chip verified by Calterah and Rohde & Schwarz to be demoed at CES 2026

Worlds first 802.15.4ab-UWB chip verified by Calterah and Rohde & Schwarz to be ...

07/10/2026

Dalet Flex LTS Delivers Smarter Media Operations from Ingest to Distribution

Dalet, a leading technology and service provider for media-rich organizations, today announced the latest Long-Term Supported (LTS) release of Dalet Flex. Build...

06/09/2026

Dolby and MagentaTV Bring Fans Closer to the FIFA World Cup 2026 in Germany with Dolby Vision and Dolby Atmos

June 9 2026, 23:00 (PDT) Dolby and MagentaTV Bring Fans Closer to the FIFA Worl...

26/08/2026

New Validation Booster FAQ: What applicants need to know

Applicants interested in the Media Innovation Europe 3.0 Validation Booster call can now consult a new FAQ document addressing practical questions raised during...

26/08/2026

NWSL Moves Sunday Night Package to Roku, Expands Slate to 25 Matches in 2027

Roku Sports Channel will stream eight matches free beginning Aug. 30 as league shifts Sunday-night games away from Victory+...

26/08/2026

Inside Mountain Media Center's Hybrid-Cloud Architecture for Live Event Production

Evertz and Mobile TV Group detail how on-premises infrastructure and cloud resou...

26/08/2026

IBC 2026: Sennheiser Group to Showcase Broadcast Audio Portfolio

The Sennheiser Group will demonstrate its broadcast audio portfolio at IBC2026 (Hall 8, Booth D50), covering wireless microphone workflows, studio monitoring, a...

26/08/2026

Appear and TVTEL Deploy X20 Platform for Centralized VAR Signal Transport in Chile

Appear and Transmisiones Televisivas TVTEL Limitada have announced the deploymen...

26/08/2026

Minitech Adds Leader LPX500 and LT4670 to Rental Inventory

Leader Electronics has announced that Danish broadcast rental company Minitech has purchased a Leader LPX500 hybrid IP/SDI waveform monitor and LT4670 sync puls...

26/08/2026

IBC 2026: Encompass to Showcase Cloud Media Services

Encompass will demonstrate its Altitude media services at IBC2026 (IAMT Hub, Diamond Lounge, Hall 3, RAI Amsterdam, September 11-14). Key products on show incl...

26/08/2026

Massillon Washington High School First to Implement Daktronics Camino Platform

Daktronics has partnered with Massillon Washington High School in Ohio to install a new LED video display and implement the Daktronics Camino show control platf...

26/08/2026

Clear-Com Appoints Venuetech as Middle East Partner

Clear-Com has appointed Dubai-based Venuetech LLC as its main partner for the Middle East. Venuetech distributes professional audiovisual solutions across the r...

26/08/2026

NBC Sports NOW Debuts Two New Shows Beginning August 31

NBC Sports NOW, NBC Sports' free 24/7 streaming channel, will launch a new weekday lineup beginning Monday, August 31, including two new shows. Not So Fast...

26/08/2026

IBC 2026: Calrec to Preview ImPulseV and Argo Updates

Calrec will demonstrate updates to its ImPulseV DSP software and Argo ecosystem at IBC2026 (Stand 8.C47), including previews aligned with the EBU's Dynamic ...

26/08/2026

IBC 2026: Imagine Communications to Showcase AI Capabilities

Imagine Communications will demonstrate AI applications across its ad tech and video infrastructure portfolios at IBC2026 (Stand 1.B73, RAI Amsterdam, September...

26/08/2026

IBC 2026: Dalet to Showcase AI and Workflow Automation

Dalet will demonstrate updates to Dalet Flex, Dalet Pyramid, and Dalia, its agentic AI platform, at IBC2026 (Hall 7, Stand 7.A43). The company will also partici...

26/08/2026

Nashville Predators Tap ViewLift for New DTC Service, Pairing Streaming With Scripps Sports Broadcast Deal

Team-owned platform will stream every locally carried Predators game beginning t...

26/08/2026

Little League Baseball World Series 2026: ESPN Restores RailCam Coverage at Lamade Stadium, Upscales Cameras at Volunteer Stadium

The 12-day tournament receives the broadcaster's full onsite-studio presence...

26/08/2026

SOMA Laboratory launch the Enigma

A synth with no controls? If you're into weird and wonderful instruments, then you may already be familiar with Warsaw-based SOMA Laboratory - if you...

26/08/2026

Dreamtonics unveil Instrument X

Physical modelling orchestral instrument announced Following their recent cryptic hints, Dreamtonics have officially revealed the latest addition to their s...

26/08/2026

Bertram Brossardt visits SGL Carbon in Meitingen

Discussions at the Meitingen site on competitiveness, energy supply, and fuel cell technology Bertram Brossardt, CEO of the Bavarian metal and electrical emplo...

26/08/2026

Rohde & Schwarz USA celebrates grand opening of new manufacturing center in Frederick, Maryland

Rohde & Schwarz USA celebrates grand opening of new manufacturing center in Fred...

26/08/2026

Designing Agentic Media Workflows Humans Can Trust

For large media companies, the content archive is a gold mine. There are thousands of hours of existing, high-value assets just waiting to be tapped for highlig...

26/08/2026

Major Live Sports Events Bolster Broadcast in Nielsen's Q2 2026 Ad Supported Gauge

Ad Supported Viewing Represents 71.5% of TV in Q2 Streaming Captures Over 48% o...

26/08/2026

DAZN Accelerates U.S. Expansion with Acquisition of EverPass Media

Share Copy link Facebook X Linkedin Bluesky Email...

26/08/2026

Truthset Brings Data Rated Audiences to FreeWheel

Share Copy link Facebook X Linkedin Bluesky Email...

26/08/2026

Broadpeak Targets CTV Shopping with Click2Cart Launch

Share Copy link Facebook X Linkedin Bluesky Email...

26/08/2026

SMPTE Announces 2026 Honorees

Share Copy link Facebook X Linkedin Bluesky Email...

26/08/2026

MediaKind Beam selected by CNBC UK for cloud-connected li...

MediaKind today announced that CNBC UK has selected Beam to modernize its contribution and distribution infrastructure, bringing greater flexibility, resilience...

26/08/2026

Telestream Unveils the Next Phase of UP at IBC2026

Telestream, a global leader in media workflow technologies, today announced the next evolution of Telestream UP, expanding the cloud-native platform introduced ...

26/08/2026

SMPTE Announces 2026 Honorees

SMPTE, the home for media professionals, technologists and engineers, today announced its 2026 Honorees, recognizing individuals and organizations whose contrib...

26/08/2026

Broadpeak launches Click2Cart to mark new era in shoppabl...

New solution bridges connected TV (CTV) and ecommerce to make shoppable performance advertising easier to scale for streaming platforms and broadcasters Broadp...

26/08/2026

Scripps Research and collaborators awarded $19.5 million to establish an open-access autonomous chemistry laboratory

LA JOLLA, CA-Recent advances in robotics, automation and artificial intelligence...

26/08/2026

How WeFX Made From's' Monsters Feel Uncomfortably Real

How WeFX Made From's' Monsters Feel Uncomfortably Real Brie Clayton August 26, 2026 0 Comments From eight-foot dolls and feathered birds to R...

26/08/2026

Eleanor Roosevelt High School Elevates Student Rallies with Blackmagic Design

Eleanor Roosevelt High School Elevates Student Rallies with Blackmagic Design Brie Clayton August 26, 2026 0 Comments Student led production team uses...

26/08/2026

Grass Valley Advances Integrated Live Production for Unif...

K-Frame and Maverik X innovations extend familiar production control into AMPP, alongside new replay, audio, commentary and communications capabilities. At IBC...

26/08/2026

Magewell Expands Director and Pro Convert IP Lines at IBC...

New products continue to enable any signal, anywhere for creators...

26/08/2026

AFP and Dalet Bring Trusted Content into Every Newsroom

Dalet, a leading technology and service provider for media-rich organizations, today announced a new integrated newsroom experience with Agence France-Presse (A...

26/08/2026

Bolin Technology and ITDev Join AIMS

Share Copy link Facebook X Linkedin Bluesky Email...

26/08/2026

Enco to Highlight Caption, Translation Enhancements at IBC2026

Share Copy link Facebook X Linkedin Bluesky Email...

26/08/2026

ZOO Digital Chooses Interra Systems BATON for Quality Control

Share Copy link Facebook X Linkedin Bluesky Email...

26/08/2026

Gomez Criticizes FCC's Media Bureau on Political Advertising

Share Copy link Facebook X Linkedin Bluesky Email...

26/08/2026

Tedial to Demo AI-Driven Media Supply Chain Solutions at IBC 2026

Share Copy link Facebook X Linkedin Bluesky Email...

26/08/2026

AIMS Welcomes Bolin Technology and ITDev as Newest Member...

PTZ Camera Manufacturer and FPGA Design Specialist Join Alliance to Advance IPMX and Open AV-over-IP Standards The Alliance for IP Media Solutions (AIMS) today...

26/08/2026

ZOO Digital Selects Interra Systems BATON for File-Based...

BATON offers ZOO Digital advanced audio and video quality analysis, and scalable architecture Interra Systems, a leading provider of end-to-end quality assuran...

26/08/2026

Scottish Rugby Expands Managed Coach Communications Partn...

Riedel Communications today announced the continued expansion of its managed coach communications partnership with Scottish Rugby Union. Now entering its third ...

26/08/2026

Zixi Demonstrates Hybrid Workflows and Proven Live Video...

Zixi brings Broadcaster V19 and showcases interoperable platform on Stand 5.A76 Zixi, a leader in live video delivery and workflow orchestration, will be exhib...

26/08/2026

Scripps Research professor Jeffery Kelly elected to the European Academy of Engineering

LA JOLLA, CA-Jeffery Kelly, the H. Lutcher Brown Professor of Chemistry at Scrip...

26/08/2026

Indie Developer Launches Orty, aWindows App That Helps Freelance VideoEditors Find Better Clients

Indie Developer Launches Orty, aWindows App That Helps Freelance VideoEditors Fi...