This article was written by

Follow

Analyst’s Disclosure: I/we have no stock, option or similar derivative position in any of the companies mentioned, and no plans to initiate any such positions within the next 72 hours. I wrote this article myself, and it expresses my own opinions. I am not receiving compensation for it (other than from Seeking Alpha). I have no business relationship with any company whose stock is mentioned in this article.

Seeking Alpha’s Disclosure: Past performance is no guarantee of future results. No recommendation or advice is being given as to whether any investment is suitable for a particular investor. Any views or opinions expressed above may not reflect those of Seeking Alpha as a whole. Seeking Alpha is not a licensed securities dealer, broker or US investment adviser or investment bank. Our analysts are third party authors that include both professional investors and individual investors who may not be licensed or certified by any institute or regulatory body.

Abstract

There is a date that historians of the internet will eventually mark, much like economists mark the 2008 financial crisis or technologists mark the launch of the iPhone: the moment machine traffic crossed 50 percent of all web requests. We passed it, and almost nobody noticed.

Key Points

• The “Machine Majority” is here: We officially passed the 50% mark for bot traffic, and it’s now sitting at 57.5%. This isn’t just background noise; it’s a structural change in the internet’s population.1
• Malicious bots are rampant: About 40% of all internet traffic is outright malicious (scraping, fraud, denial-of-service attacks), and these attacks are growing. APIs are increasingly targeted directly, bypassing traditional interfaces to hit backend systems.1
• “Agentic” AI is the new powerhouse: Beyond malicious bots, autonomous AI agents are browsing the web at massive scale—visiting thousands of pages where a human would visit five.

Cloudflare CEO Matthew Prince posted to X last week with the understated calm of someone announcing a flight delay rather than a civilizational threshold: automated bot traffic has, for the first time in the internet’s history, surpassed human traffic. Cloudflare’s Radar dashboard now indicates 57.5 percent bots and 42.5 percent humans. Prince had predicted the crossover wouldn’t arrive until late 2027. It came eighteen months early.

But Cloudflare’s number, striking as it is, may actually be the optimistic read. The 2026 Thales Bad Bot Report, drawing on analysis of 17.2 trillion blocked bot requests across thousands of domains worldwide, puts automated traffic at 53 percent of all global web traffic in 2025, up from 51 percent the year before. Human activity has fallen to just 47 percent and continues to decline. The gap is widening structurally, not cyclically. This is not an anomalous spike. It is a permanent reordering of the internet’s population.

The Numbers Behind the Numbers

Before you reach for the usual reassurances, that it’s just search crawlers, just scrapers, just the background noise of the web, understand that this wave is categorically different from anything that came before. The headline percentages are alarming enough. What lies beneath them is worse.

Of the 53 percent of traffic classified as automated, 40 percent of all internet traffic is classified as outright malicious. Bad bots engaged in scraping, credential stuffing, fraud, and denial of service. That 40 percent figure marks a three percentage point jump from 37 percent in 2024, and represents the seventh consecutive year of growth in malicious bot traffic. This is not a trend that reverses. The Thales report found that daily blocked AI-enabled bot attacks rose from 2 million to 25 million in a single year, a 12.5x surge year over year.

The architecture of the attack surface is shifting, too. A full 27 percent of bot attacks now target APIs directly, bypassing user interfaces to interact with backend systems using valid credentials and well-formed requests. Financial services bore the brunt: the sector accounted for 24 percent of all bot attacks and a staggering 46 percent of account takeover incidents globally in 2025. These are not nuisance attacks. They are automated monetization operations running at an industrial scale against the most critical digital infrastructure in the world.

The Wrong Kind of Bots

The truly transformative force, however, is not the malicious bot wave. It is agentic AI: autonomous systems acting on behalf of users, navigating the web as a proxy human would, but at orders of magnitude greater scale and speed.

At SXSW in March, Cloudflare’s Prince offered a vivid illustration of the asymmetry: a human shopping for a camera visits perhaps five websites. An AI agent performing the same task visits 5,000. HUMAN Security’s 2026 State of AI Traffic report found AI-driven traffic growing eight times faster than human traffic across 2025. And the agentic category, bots acting for people rather than scraping about them, entered 2025, representing just 1.7 percent of automated traffic. By year’s end, it had grown 8,000 percent.

The 2026 AI Bot Impact Report adds further texture to the velocity: AI and LLM indexing crawlers quadrupled their share of traffic in just eight months, rising from 2.6 percent to 10.1 percent. OpenAI’s GPTBot alone grew 305 percent. Akamai found that 63 percent of all recorded AI bot triggers target the publishing sector, the industry least equipped financially to absorb traffic that generates zero corresponding ad revenue.

Read that last sentence again. The sector most heavily trafficked by the new AI bots is the one whose entire economic model depends on human eyeballs reading content and clicking advertisements. The collision between these two realities is not theoretical. It is already happening in publisher analytics dashboards right now, and most of them don’t have the tooling to see it clearly.

Local outlets like Thailand Business News are directly impacted by these trends, as high domain authority sites often see significant automated scraping and indexing that doesn’t translate into human engagement.

The Architecture of a Human First Web

The internet was architected around human usability and human attention. Every convention that defines it, the hyperlink, the page load, the session cookie, the A/B test, the conversion funnel, the programmatic ad auction, was designed with a person sitting in front of a screen as the assumed endpoint.

The entire edifice of the digital economy rests on that assumption. And the assumption is now false.

Imperva’s 2026 Bad Bot Report puts the existential risk to businesses plainly: companies that continue operating under the assumption that users are human risk catastrophically misreading their own systems. A traffic spike after a press mention may be agents indexing content for retrieval, not readers sharing a story. A conversion rate drop may reflect agents abandoning sessions because they extracted what they needed through an API call. A 40 percent bounce rate may be measuring bots that left in milliseconds, having accomplished their task. The signal is corrupted. Analytics dashboards built for a human majority internet are now measuring something else entirely, and the strategic decisions being made from them are compromised at the source.

The Hydrolix State of AI Bots 2026 report reveals just how deep the perception gap runs: survey respondents estimated AI bots generate approximately 17 percent of their traffic. The actual figure, per Thales, is more than three times that. Companies are flying blind into a machine majority internet with instruments calibrated for a human one.

A Repricing Event in Slow Motion

For investors, the implications are underpriced and accelerating. Every media asset, every e-commerce property, every brand-building exercise of the last twenty years was built for humans, monetized through human attention, and valued on the assumption that human attention would continue to flow through it.

That assumption has now been structurally broken.

Adobe Analytics data from Q1 2026 introduces a genuinely paradoxical data point into this picture: AI-driven traffic to U.S. retail sites grew 393 percent year over year in the first quarter, and those AI-referred visitors are converting 42 percent better than non-AI traffic, spending 37 percent more per visit and browsing 13 percent more pages. A year ago, regular human traffic was worth 128 percent more per visit than AI-referred traffic. That relationship has now inverted completely.

This is not the story of bots destroying commerce. It is more complex and ultimately more destabilizing: it is the story of two internets emerging simultaneously, one optimized for human browsing and attention, and one optimized for machine retrieval and action, with the economics of each diverging rapidly. Publishers and advertisers built for the first internet are being eroded by the second. Retailers who have adapted to serve AI agents well are, for now, benefiting.

The question for investors is whether those retail gains are durable, or whether they represent a temporary arbitrage before AI agents compress margins by enabling perfect price comparison at inhuman speed. The second scenario seems more likely. Salesforce found that during the 2025 holiday season, AI was credited with driving 20 percent of all retail sales and generating $262 billion in revenue through AI-assisted discovery and recommendations. That is an extraordinary concentration of commercial influence accumulating in the hands of AI intermediaries, intermediaries that did not exist as a meaningful category three years ago.

For the media, the calculus is grimmer. A UNESCO report found that generative AI is on track to cause revenue losses of 24 percent for music creators and 21 percent for audiovisual creators by 2028. The ad-funded internet model, the architecture that has sustained open journalism, independent publishing, and free services at scale for thirty years, is being structurally undermined not by piracy or platform shifts, but by a new class of traffic that consumes content without generating impressions.

The internet has always had a free rider problem. It has never had a free rider problem at 57.5 percent of all traffic.

Who Wins. Who Doesn’t?

The clearest near-term beneficiaries are the companies that sit as infrastructure between bots and the content they need. Cloudflare is the most obvious: as the layer through which the majority of global web traffic flows, bot-dominant traffic is not a threat but a product roadmap. Bot management, AI gateway services, machine identity verification, and authenticated traffic infrastructure are suddenly among the most valuable real estate on the internet. Only 33 percent of organizations currently report that their bot detection solutions successfully block more than 50 percent of AI bot traffic, an extraordinary gap in an industry that has been managing bot traffic for over a decade.

Akamai, Imperva (Thales), HUMAN Security, and the emerging wave of AI traffic governance vendors are writing the new rules of the road. The companies that build the border controls between the machine internet and the revenue internet will extract significant rents from everyone who needs to operate on both sides.

For the long tail of publishers, SaaS businesses, and brand marketers whose pricing models, growth strategies, and unit economics assume a human majority audience? The reckoning is already underway. It just hasn’t shown up in earnings calls yet, partly because companies lack the instrumentation to see it, and partly because the human traffic that remains has not yet been fully repriced for its new scarcity.

What Comes Next

There is a version of this story that ends constructively. Agentic AI, if it works as advertised, means humans accomplish more through fewer direct interactions. Our agents go out, retrieve, transact, and return with answers. Human attention becomes more concentrated and intentional, even as it constitutes a smaller share of raw traffic. The web becomes infrastructure for AI, the way electricity became infrastructure for manufacturing: invisible, essential, and no longer requiring human proximity to function.

But that transition requires every system built for the old model to be rebuilt for the new one. Identity infrastructure. Monetization logic. Attribution frameworks. Analytics tooling. Rate limiting. API governance. Content licensing architecture. The list is long, the retrofitting expensive, and the window for incumbents to execute is narrowing.

The internet was never built for this. That is not a complaint. It is an engineering brief and an investment thesis.

The bots are here. They constitute the majority. They are not leaving. The only rational response, for builders, investors, and policymakers alike, is to stop architecting, pricing, and governing the internet as though humans are still the primary user.

Additional Reading from Thailand Business News

Other People are Reading

NEW YORK — New York Knicks guard Jose Alvarado’s all-out hustle for a loose ball in the fourth quarter of Game 3 of the 2026 NBA Finals resulted in an unexpected collision with former New York City Mayor Michael Bloomberg, momentarily halting play and capturing widespread attention at Madison Square Garden on Monday night.

The incident unfolded as the Knicks trailed the San Antonio Spurs late in the contest. Alvarado, known for his tenacious defense and energy off the bench, chased the ball into the front row of seats where Bloomberg, 84, was seated courtside. The 28-year-old guard tumbled directly into the billionaire philanthropist and former three-term mayor, leaving Bloomberg briefly shaken but unharmed.

Video of the moment quickly circulated on social media and was highlighted during the ABC broadcast. Play-by-play announcer Mike Breen narrated the sequence for viewers: “As Alvarado dives into the stands and checks with former New York City Mayor Mike Bloomberg.” Breen added lightheartedly, “You never know who you’ll run into at a Knick game.”

Alvarado immediately checked on Bloomberg after untangling himself, patting his knee and inquiring about his well-being. Bloomberg appeared rattled but signaled that he was fine, offering a thumbs-up according to multiple reports and allowing the game to resume without further delay. Nearby spectators, including former NFL quarterback Eli Manning and baseball Hall of Famer Derek Jeter, also expressed concern.

The collision added an unusual sidebar to an already star-studded evening at Madison Square Garden. High-profile attendees included former President Donald Trump, who drew loud boos from sections of the crowd when shown on the arena’s jumbotron before tipoff. He attended alongside his granddaughter Kai Trump. Halftime featured a performance by rapper Cardi B.

On the court, the Spurs edged the Knicks 115-111, with Victor Wembanyama leading the way with 32 points. The loss narrowed the Knicks’ series lead to 2-1, with Game 4 scheduled for Thursday night back at the Garden. The Knicks had taken the first two games on the road in San Antonio.

Bloomberg, a lifelong New Yorker and prominent Knicks supporter, has maintained a high public profile since leaving office in 2013. The 84-year-old billionaire founded Bloomberg LP, the global financial media and data company, and has been deeply involved in philanthropy, public health initiatives and climate efforts. His presence courtside underscored the deep connections between New York business, politics and sports.

The moment highlighted the physical risks inherent in professional basketball, even for spectators in premium seats. Courtside seating at NBA arenas places fans in close proximity to the action, occasionally leading to such collisions despite safety measures. League officials and arenas typically review incidents like this, though no immediate statements were issued regarding changes to seating protocols.

Alvarado, a key contributor for the Knicks with his defensive intensity, has earned praise throughout the playoffs for his hustle plays. Monday’s dive exemplified the aggressive style that has helped propel the Knicks back to the Finals for the first time in decades. The team last reached the championship series in the late 1990s.

For Bloomberg, the brief scare came during a high-stakes game in his home city. He has long been a fixture at major New York sporting events and has expressed support for the Knicks over the years. Reports indicated he recovered quickly and remained at the game.

The 2026 NBA Finals have generated significant buzz, pitting the rising superstar Wembanyama and the Spurs against a resilient Knicks squad led by Jalen Brunson. The series marks a return to prominence for New York basketball and has drawn intense national and international interest.

Security and arena staff at Madison Square Garden are accustomed to managing high-profile crowds during marquee events. The venue, often called “The World’s Most Famous Arena,” frequently hosts celebrities, politicians and business leaders alongside passionate Knicks fans.

This was not the first notable courtside moment in recent NBA history. Similar incidents have occurred with players landing near or on spectators, prompting occasional discussions about additional protective barriers or adjusted seating arrangements. However, the league has historically favored maintaining the intimate atmosphere that makes courtside seats premium experiences.

Following the game, social media erupted with reactions ranging from concern for Bloomberg to memes about the collision. Clips of Alvarado checking on the former mayor were widely shared, turning the moment into one of the most memorable non-basketball highlights of the Finals so far.

Knicks coach Tom Thibodeau and players have emphasized playing with urgency and physicality throughout the postseason. Alvarado’s effort, while resulting in an unusual outcome, aligned with that approach. The guard has carved out a role as a spark plug for the team, contributing energy even when not in the starting lineup.

Bloomberg’s involvement in public life extends far beyond his mayoral tenure. He ran for president in 2020 and continues to influence policy debates through his foundation. His appearance at the game served as a reminder of New York’s interconnected worlds of sports, finance and politics.

As the series shifts back to New York for Game 4, fans and observers will watch to see if the Knicks can regain momentum after dropping Game 3. The Alvarado-Bloomberg incident is likely to be replayed in highlight packages, adding color to the narrative of a competitive and dramatic Finals.

NBA officials, teams and broadcasters often celebrate the league’s accessibility to fans, but incidents like Monday’s underscore the need for balance between excitement and safety. Both Alvarado and Bloomberg handled the situation with composure, allowing focus to return swiftly to the competition.

The Knicks organization has not commented specifically on the collision, focusing instead on preparation for the next game. With the series far from decided, physical play and resilience will remain central themes as both teams vie for the championship.

For longtime observers of New York sports, the sight of a Knicks player interacting directly with a former mayor exemplified the unique energy of Madison Square Garden during playoff runs. Bloomberg emerged unscathed, and the moment became another chapter in the lore of the 2026 Finals.