The annual HUMAN Enterprise Bot Fraud Benchmark Report provides insights into automated attack trends across enterprise use cases, including account takeover, brute forcing, carding, credential stuffing, inventory hoarding, scalping, and web scraping.
Bad bot traffic increased overall even as people spent less time online
Bad bot traffic increased overall even as people spent less time online
102%
YoY increase in bad bot traffic
28%
YoY decrease in legitimate human traffic
Automated attacks continued to grow
From 2021 to 2022:
108%
YoY increase in account takeover attacks
134%
YoY increase in carding attacks
107%
YoY increase in scraping attacks
Certain industries experienced more bot attacks than others
Of traffic to online businesses, bad bots accounted for:
57%
in the Media
& Streaming industry
49%
in the Travel &
Hospitality industry
46%
in the Ticketing & Entertainment industry
Enterprise attackers prefer to hide behind desktop devices
Enterprise attackers prefer to hide behind desktop devices
26%
of malicious requests appeared to come from mobile
of malicious requests appeared to come from mobile
74%
of malicious requests appeared to come from desktop
of malicious requests appeared to come from desktop
Attackers will typically utilize proxy and anonymizing servers in the region they target
69%
of worldwide malicious traffic came from U.S. proxy servers
47%
of worldwide traffic to non-U.S. applications came from U.S. proxy servers
75%
of worldwide traffic to U.S. applications only came from U.S. proxy servers
We don’t just find the problem, we solve it. HUMAN applies modern defense to detect and mitigate sophisticated bot attacks with unmatched speed, scale, and precision.
Together, we can stop bad bots and disrupt the economics of cybercrime.