IT Pro is supported by its audience. When you purchase through links on our site, we may earn an affiliate commission. Learn more

Bad bots account for almost 40% of internet traffic

These bots include bad basic web scrapers, attack scripts, and advanced persistent bots, according to Barracuda

Almost 40% of all traffic on the internet is “bad bot” activity, according to the latest industry data. 

Automated bots, including those from search engines and social media networks, make up 64% of all internet traffic, the Barracuda Networks report found. 

“The Bot attacks: Top Threats and Trends” report found that only a quarter of this was “good bot” activity. Nearly two-fifths (39%) were from “bad bots.” The report said these bad bots included basic web scrapers, attack scripts, and advanced persistent bots. 

“These advanced bots try their best to evade standard defenses and attempt to perform their malicious activities under the radar. In our dataset, the most common of these persistent bots were ones that went after e-commerce applications and login portals,” the report said.

North America had the dubious distinction of accounting for the largest portion of bad bot traffic, and most of it originates from data centers, according to the report. North America accounted for 67% of bad bot traffic, followed by Europe and then Asia. The report said European bot traffic is more likely to come in from hosting services (VPS) or residential IPs than the North American traffic.  

While the bots were automated, bad bots were designed to function during working hours, the report found. 

Related Resource

The state of ransomware in retail 2021

Insights into the current state of ransomware in the retail sector

Whitepaper front coverFree download

“The attackers running these bad bots prefer to hide within the normal human traffic stream to avoid raising alarm bells. The common stereotype of a ‘hacker’ performing their attacks late into the night in a dark room with green fonts on a black screen has been replaced by people who set up their bots to carry out the automated attacks while they go about their day,” the report said.

Barracuda Networks gave some examples of bad bot activity, including pretending to be a known vulnerability scanner. This bot attempted to perform reconnaissance and probe for vulnerabilities using some basic attacks. As such, the bot was using a standard browser user agent but had additional custom HTTP headers that spoofed the headers of a scanner the victim organization used. 

"While some bots like search engine crawlers are good, our research shows that over 60% of bots are dedicated to carrying out malicious activities at scale," said Nitzan Miron, VP of Product Management, Application Security, Barracuda. 

"When left unchecked, these bad bots can steal data, affect site performance, and even lead to a breach. That's why it's critically important to detect and effectively block bot traffic."

Featured Resources

The 3D skills report

Add 3D skills to your creative toolkits and play a sizeable role in the digital future

Free Download

The increasing need for environmental intelligence solutions

How sustainability has become a major business priority and is continuing to grow in importance

Free Download

2022 State of the multi-cloud report

What are the biggest multi-cloud motivations for decision-makers, and what are the leading challenges

Free Download

Solve global challenges with machine learning

Tackling our word's hardest problems with ML

Free Download

Recommended

What is HTTP error 400 and how do you fix it?
Network & Internet

What is HTTP error 400 and how do you fix it?

23 Nov 2022
Static IP vs dynamic IP: What’s the difference?
Network & Internet

Static IP vs dynamic IP: What’s the difference?

27 Jul 2022
UK-based OneWeb and French Eutelsat officially discussing major merger
business transformation

UK-based OneWeb and French Eutelsat officially discussing major merger

25 Jul 2022
HTTP vs HTTPS: What difference does it make to security?
Network & Internet

HTTP vs HTTPS: What difference does it make to security?

20 Jul 2022

Most Popular

Windows 10 users locked out of devices by unskippable Microsoft 365 advert
bugs

Windows 10 users locked out of devices by unskippable Microsoft 365 advert

3 Feb 2023
Why energy efficient technology is key to a sustainable business
Sponsored

Why energy efficient technology is key to a sustainable business

16 Jan 2023
What's powering Britain’s fibre broadband boom?
Network & Internet

What's powering Britain’s fibre broadband boom?

3 Feb 2023