Bad Bot Report
Imperva’s 2020 Bad Bot Report investigates the daily attacks that sneak past sensors and wreak havoc on websites.
This is the 7th Annual Bad Bot Report. It’s based on 2019 data collected from Imperva’s global network and includes hundreds of billions of bad bot requests anonymized over thousands of domains. Our goal is to offer guidance about the nature and impact of automated threats to those of you on the frontlines of website security.
What makes this report unique is its focus on bad bot activity at the application layer (layer 7 of the OSI model). Automated application layer attacks differ from volumetric DDoS attacks, the latter of which manipulate lower-level network protocols.
Bad bots interact with applications in the same way a legitimate user would, making them harder to prevent. They enable highspeed abuse, misuse, and attacks on your websites, mobile apps, and APIs. They allow bot operators, attackers, unsavory competitors, and fraudsters to perform a wide array of malicious activities.
Such activities include web scraping, competitive data mining, personal and financial data harvesting, brute-force login, digital ad fraud, spam, transaction fraud, and more.
