Bots Overtake Humans at 53% of Internet Traffic as AI-Driven Attacks Jump 12.5-Fold
Updated
Updated · escudodigital.com · May 21
Bots Overtake Humans at 53% of Internet Traffic as AI-Driven Attacks Jump 12.5-Fold
3 articles · Updated · escudodigital.com · May 21
53% of global internet traffic in 2025 came from bots, leaving human activity at 47% and marking a structural shift in how the web is used, Thales said in its Bad Bot 2026 report.
25 million AI-generated bot attacks were recorded last year, up from 2 million a year earlier, as AI scaled existing attack methods rather than creating new ones.
40% of automated traffic was malicious, and Thales said it blocked 17.2 trillion bot requests; APIs drew 27% of bot attacks because AI-driven requests can mimic legitimate authenticated behavior.
Financial services absorbed 24% of all bot attacks and 46% of incidents, while account fraud rose 70% year over year.
AI agents emerged as a third automated-traffic category after good bots and traditional malicious bots, with detectable AI traffic dominated by crawlers and fetchers that increasingly trigger threat rules.
As AI bots now outnumber humans online, is the era of trusting digital interactions officially over?
With AI creating both attacks and defenses, are we entering an unwinnable cyber war fought entirely by machines?
How will intelligent AI agents that bypass websites and ads completely reshape the internet's economy?
2025: The Year Bots Outnumber Humans Online—AI Agents, Cyber Threats, and the Fight for Trust
Overview
In 2025, the digital world changed dramatically as automated traffic—powered by advanced bots and AI agents—began to dominate the internet. This shift led to a surge in both simple and sophisticated malicious bots, doubling cyber threats and fundamentally altering how people experience online interactions. As automated threats became more complex and widespread, security teams faced the challenge of analyzing a new kind of internet traffic, moving beyond traditional detection methods. The growing volume and sophistication of bots now require a complete rethink of digital security and how we understand digital presence.