Bots now generate more than half of all internet traffic
For the first time, automated bots generate more internet traffic than humans do. Cloudflare CEO Matthew Prince announced that bots now account for 57.5% of all global HTTP requests, leaving humans at just 42.5%. The crossover happened in late April 2026 — roughly 18 months before analysts had expected it.
The AI agent effect
The culprit isn't old-school spam bots or Google's search crawler. The surge is driven by AI agents — autonomous software that browses, scrapes, and synthesizes web content on behalf of users or the companies building large language models. According to HUMAN Security, agentic AI traffic grew nearly 8,000% year-over-year in 2025. A single AI agent can ping 5,000 websites in the time a human visits five.
OpenAI, Anthropic, and Google agents now account for the bulk of that legitimate bot growth — and none of them have agreed on licensing terms with the publishers whose content they consume.
Welp, that happened faster than I predicted. Thought it would be end of 2027, then early 2027, but agentic traffic growing so fast that bots have now passed human traffic online for the first time in the Internet's history. https://t.co/2zX5bHdhsa
— Matthew Prince ? (@eastdakota) June 3, 2026
The 57.5% figure measures HTTP requests, not time spent online. Humans still dominate total engagement — hours on streaming services, social media, and apps generate fewer rapid-fire requests than a bot scraping a product database. The internet's pipes, though, are increasingly filled with machine code.
What it means for publishers and advertisers
The economic assumptions that underpin the web — ad impressions, click-through rates, referral traffic — were built around human visitors. AI agents don't click ads. They don't generate page views that pay a journalist's salary. US and UK publishers are absorbing bandwidth costs from content scraping without seeing any revenue in return, and per TechTimes, those economic assumptions are now effectively broken.
Cloudflare blocked 416 billion AI bot requests in 2025 alone and is now rolling out two responses: an HTTP 402 "Pay Per Crawl" standard that lets sites charge agents per request, and a Markdown-for-Agents format that makes content easier for AI to read — at a price. Platforms must now choose between blocking bots outright, offering free access, or negotiating per-crawl fees.
The geography of bots
Bot traffic isn't evenly spread. Gibraltar tops the list at 92.1% automated traffic, a reflection of its dense data-center infrastructure rather than any algorithmic uprising. Singapore and Iran both sit at 76.4% — Singapore for similar infrastructure reasons, Iran largely because VPN tools and automated censorship-bypass software register as bot traffic in monitoring systems, as confirmed by Tom's Hardware.
No regulatory body — not the FTC, not the EU — has yet defined clear rules for agentic scraping, licensing, or the new pay-to-crawl infrastructure. The internet shifted; the rulebook hasn't.
