The "2016 Bad Bot Landscape Report: The Rise of Advanced Persistent Bots", also shows 46 per cent of all web traffic originates from bots, with over 18 per cent from bad bots.
Medium-sized websites (10,001 to 50,000 Alexa ranking) are at a greater risk, as bad bot traffic made up 26 percent of all web traffic for this group.
Significantly, however, for the first time since 2013, humans outnumbered bots for website traffic.
While real estate websites suffered the biggest rise in bad bot activity, as an industry, digital publishers were hit hardest by bad bots, which made up over 31 per cent of all their traffic.
Small digital publishers (Alexa 50,001 - 150,000) struggled with 56 per cent of traffic originating from bad bots.
Bad bots are used by competitors, hackers and fraudsters and are the key culprits behind web scraping, brute force attacks, competitive data mining, online fraud, account hijacking, data theft, unauthorized vulnerability scans, spam, man-in-the-middle attacks, digital ad fraud, and downtime.
Distil Networks co-founder and CEO Rami Essaid says bot activity in 2015 sa an influx of Advanced Persistent Bots (APBs).
"ABPs evade detection with tactics like dynamic IP rotation from huge pools of IP addresses or use Tor networks and peer to peer proxies to obfuscate their origins," Essaid says.
"They distribute attacks over hundreds of thousands of IP addresses.
"A whopping 88 per cent of 2015 bad bot traffic were APBs. This shows that bot architects have already taken note of traditional bot detection techniques and are finding new sophisticated ways to invade websites and APIs, in an effort to take advantage of critical assets and impact a business's bottom line.”
The latest report shows Maldives, Israel and Kyrgyzstan had the highest bad bot GDP (number of bad bots per online user) at 526, 168, and 94 respectively.
China, Norway, Germany, and the Netherlands are the most blocked countries for web traffic.
Meanwhile, the United States boasts the largest originator of bots again, with over 39 per cent of bot traffic, while India and Israel moved up to number two and three, respectively.
In terms of search engine activity, Chrome edged out Firefox as the browser of choice for bad bot creators with over 26 per cent of all user agents utilizing the Google browser.
Amazon earns a hat-trick, appearing in the Top 5 Bad Bot Originators three years in a row.
Despite their repeated appearance in the top Bad Bot Originators list in 2013 and 2014, residential ISPs Comcast and Time Warner fell off the Top 20 bad bot originators for 2015.
Six out of the top 20 ISPs with the highest percentage of bad bot traffic originated from China while US and Netherlands had the most mobile carriers, 5 and 3 respectively, on the top 20 list of bad bot mobile carriers.
88 percent of all bad bot traffic has one or more characteristics of an Advanced Persistent Bot
39 percent of bad bots are able to mimic human behavior so tools such as WAFs, web log analysis, or Firewalls, which perform less detailed analysis of clients and their behavior, will likely result in huge amounts of false negatives
36 percent of bad bots disguise themselves using two or more user agents, and the worst APBs change their identities over 100 times