US leads in global bot traffic

According to a recent analysis by Decodo, the United States generates more than half of all bot traffic worldwide, accounting for 53.5% of the total.

Global ranking of bot traffic

Germany follows in second place with 8.2% of global bot requests, while the Netherlands and Singapore contribute 5.6% and 5.4% respectively. France holds 3.9%, and India records 3.5%. Ireland’s share sits at 3.4%, just ahead of the United Kingdom’s 3.3%. Brazil, Japan and the Russian Federation round out the next tier of contributors.

Overall, bots now represent 57.4% of all web requests, surpassing the 42.6% that come from human users. The proportion of automated traffic within each country varies sharply. In the United States, bots comprise 43.6% of domestic traffic; in Germany, the figure is 45.0%.

Domestic bot penetration differs widely

Some smaller markets show a far higher share of bot activity relative to their own internet use. The Netherlands sees 61.3% of its traffic generated by bots, and Singapore’s figure climbs to 73.7%. Iran tops the dataset with bots responsible for 81.4% of its web traffic, despite contributing only 2.4% of the global bot total.

Ireland also stands out, with bots accounting for 71.1% of its domestic traffic. Hong Kong reaches 55.6%, Finland 56.8%, and the United Kingdom records a comparatively low 21.1%, placing Britain below several larger economies in terms of automated visits to local sites.

These numbers suggest that sheer volume of bot traffic does not tell the whole story; the intensity of bot presence inside a country’s own web ecosystem can be far more pronounced in smaller economies.

AI-driven traffic fuels the rise

The report links the surge in automated requests to the rapid expansion of AI‑driven browsing tools. In 2025, traffic from agentic AI rose roughly 7,851% year‑on‑year, while overall AI‑related traffic grew about 187%. A large share of this activity—77%—targeted product and search pages, indicating that automated systems are increasingly visiting commercial parts of the web.

Retail and eCommerce sites remain the primary destinations for these bots. The company found that about 13% of successful automated requests were directed at such sites, and a separate analysis showed retail accounting for 62.5% of AI training crawler activity.

While some automated traffic is linked to scraping, fraud or credential attacks, a substantial portion originates from AI assistants and other tools that index or retrieve information on behalf of users. This distinction matters not only for cybersecurity teams but also for marketing, eCommerce and analytics departments that must understand how AI‑driven traffic is reshaping product visibility online.

Businesses may need to refine their bot management strategies. The line between harmful bots and legitimate AI systems is blurring, and the latter could become a key channel for customer acquisition as AI assistants grow more capable.

Methodology and expert comment

The findings draw on data from Cloudflare Radar combined with internal metrics to assess the balance between automated and human web requests and to map the geographic sources of bot traffic. Growth figures for AI traffic were sourced from HUMAN Security’s State of AI Traffic report.

Vaidotas Juknys, chief executive officer at Decodo, noted, “The instinct to block every bot is understandable, but not every automated visitor is malicious. As AI assistants become another way consumers discover products and services, businesses need to distinguish between harmful bots and legitimate AI systems. The agents crawling websites today may become how customers discover brands tomorrow.”