60% of all origin traffic is from bots.

Bots now account for over half of all internet traffic.

Only 1% of bots are verified or wanted.

99% of bot traffic is unwanted or unverifiable.

In January 2026, bots accounted for 49% of all requests, nearly matching human traffic at 51%.

In 2025, bots made up more than 53% of all web traffic, up from 51% the previous year, while human activity fell to 47%.

47% of requests to cached content come from bots.

In 2025, AI-driven bot attacks surged 12.5x compared to the previous year.

27% of bot attacks targeted APIs, allowing bots to bypass user interfaces and interact directly with backend systems at machine speed.

Automated bots generate more than 36,000 vulnerability scans per second.

Automated bots account for more than half of all internet traffic.

Bad bot traffic accounts for 37% of all global internet traffic.

North America accounted for 40.7% of malicious bot transactions, followed by APAC (25%), EMEA (19.1%) and Central and Latin America (15.2%).

Bad bot activity increased 91.8%.

In the first six months of 2025 bad bot activity reached 89.2% of the total volume observed across all of 2024.