Internet bot

An Internet bot (also called a web robot or robot), or simply bot, is a software application that runs automated tasks (scripts) on the Internet, usually with the intent to imitate human activity, such as messaging, on a large scale.An Internet bot plays the client role in a client–server model whereas the server role is usually played by web servers. Internet bots are able to perform simple and repetitive tasks much faster than a person could ever do. The most extensive use of bots is for web crawling, in which an automated script fetches, analyzes and files information from web servers. More than half of all web traffic is generated by bots.

Efforts by web servers to restrict bots vary. Some servers have a robots.txt file that contains the rules requesting how bots should behave on the website. Any bot that does not follow the rules could, in theory, be denied access to the affected website, while in practice, a website owner can force a bot to follow the rules or ensure that a bot's creator or implementer reads or acknowledges the robots.txt file. Some bots are "good", e.g. search engine spiders, while other "bad" bots are used to launch malicious attacks on websites or applications, such as political campaigns.

Activity and manipulated reviews have also had an impact on mobile app stores. In a 2023 investigation, consumer advocacy organisation Which? discovered that some of these applications which were available on both the Apple App Store and Google Play had suspicious activity in their reviews. The analysis revealed that a percentage of highly-rated applications had reviews that were suspicious, highlighting concerns about the trustworthiness of app ratings and their impact on consumers.

IM and IRC

Some bots communicate with users of Internet-based services via instant messaging (IM), Internet Relay Chat (IRC), or other web interfaces such as Facebook bots and Twitter bots. These chatbots may allow people to ask questions in plain English and then formulate a response. Such bots can often handle reporting weather, postal code information, sports scores, currency or other unit conversions, etc. Others are used for entertainment, such as SmarterChild on AOL Instant Messenger and MSN Messenger.

Additional roles of an IRC bot may be to listen on a conversation channel, and to comment on certain phrases uttered by the participants (based on pattern matching). This is sometimes used as a help service for new users or to censor profanity.[citation needed]

Social bots

Social bots are sets of algorithms that take on the duties of repetitive sets of instructions in order to establish a service or connection among social networking users. Among the various designs of networking bots, the most common are chat bots, algorithms designed to converse with a human user, and social bots, algorithms designed to mimic human behaviors to converse with patterns similar to those of a human user. The history of social botting can be traced back to Alan Turing in the 1950s and his vision of designing sets of instructional code approved by the Turing test. In the 1960s Joseph Weizenbaum created ELIZA, a natural language processing computer program considered an early indicator of artificial intelligence algorithms. ELIZA inspired computer programmers to design task-oriented programs that can match behavior patterns to their sets of instructions. As a result, natural language processing has become an influencing factor in the development of artificial intelligence and social bots. And as information and thought see a progressive mass spreading on social media websites, innovative technological advancements are made following the same pattern.[citation needed]

Twitter bots posting similar messages five days after the 2016 United States elections

Reports of political interferences in recent elections, including the 2016 US and 2017 UK general elections, have set the notion of bots being more prevalent because of the ethics that is challenged between the bot's design and the bot's designer. Emilio Ferrara, a computer scientist from the University of Southern California reporting on Communications of the ACM, said the lack of resources available to implement fact-checking and information verification results in the large volumes of false reports and claims made about these bots on social media platforms. In the case of Twitter, most of these bots are programmed with search filter capabilities that target keywords and phrases favoring political agendas and then retweet them. While the attention of bots is programmed to spread unverified information throughout the social media platforms, it is a challenge that programmers face in the wake of a hostile political climate. The Bot Effect is what Ferrara reported as the socialization of bots and human users creating a vulnerability to the leaking of personal information and polarizing influences outside the ethics of the bot's code, and was confirmed by Guillory Kramer in his study where he observed the behavior of emotionally volatile users and the impact the bots have on them, altering their perception of reality.

Commercial bots

There has been a great deal of controversy about the use of bots to aggregate auction listings and automate betting. In the 2000 case, eBay v. Bidder's Edge, auction website eBay obtained a preliminary injunction against Bidder's Edge using bots to aggregate listings from eBay's site due to the potential for disruption of the site. However, in 2003, the California Supreme Court in Intel Corp v. Hamidi rejected an interpretation based on eBay that unauthorized use alone would constitute harm and trespass.

The United Kingdom-based bet exchange, Betfair, saw such a large amount of traffic coming from bots[citation needed] that it launched a WebService API in 2004, aimed at bot programmers, through which it can actively manage bot interactions.

Bot farms are known to be used in online app stores, like the Apple App Store and Google Play, to manipulate positions or increase positive ratings/reviews.

A rapidly growing form of internet bot is the chatbot. From 2016, when Facebook Messenger allowed developers to place chatbots on their platform, there has been an exponential growth of their use on that app alone. 30,000 bots were created for Messenger in the first six months, rising to 100,000 by September 2017. Avi Ben Ezra, CTO of SnatchBot, told Forbes that evidence from the use of their chatbot building platform pointed to a near future saving of millions of hours of human labor as 'live chat' on websites was replaced with bots.

Companies use internet bots to increase online engagement and streamline communication. Companies often use bots to cut down on cost; instead of employing people to communicate with consumers, companies have developed new ways to be efficient. These chatbots are used to answer customers' questions; for example, Domino's developed a chatbot that can take orders via Facebook Messenger. Chatbots allow companies to allocate their employees' time to other tasks.

Malicious bots

According to Cloudflare, a bot attack is "a type of cyber attack that uses automated scripts to disrupt a site, steal data, make fraudulent purchases, or perform other malicious actions." Spambots are internet bots that distribute large amounts of spam on the internet, often in order to transmit advertising links, but they can also spread malware or create fake user accounts. Attackers can use malware (such as a virus or Trojan horse) or other methods to compromise multiple devices and organize them into a malicious botnet for coordinating automated attacks, such as denial-of-service attacks.

According to Incapsula's 2016 Bot Traffic Report, 94.2% of 100,000 randomly selected domains experienced a bot attack.

Examples of malicious bots, botnets, and bot-related attacks include:

  1. Account takeover bots for password cracking and credential stuffing.
  2. Email spambots that harvest email addresses from contact or guestbook pages.
  3. Website scrapers (content scrapers) that reuse website content without permission, sometimes on scraper sites or automatically generated doorway pages.
  4. Comment spambots and forum spambots distribute malicious links (for phishing, malware distribution, or fraud) via discussion forums, blogs, website comments, or other channels.
  5. Registration bots execute a form of email bombing by registering a specific email address with numerous services, which then flood the target's email inbox with confirmation notices that can distract attention from urgent messages indicating a security breach.
  6. DDoS attacks carried out using botnets or smurf techniques.
  7. Viewbots generate fake views, and clickbots generate fraudulent clicks, activities which distort analytics and can be used to mislead viewers or extract money from advertisers.
  8. Scalper bots, also known as scalping bots, automate purchases of scarce goods in high demand for resale at higher prices. Examples include ticket bots and bots for sneakers ("sneaker bots"), other streetwear, game consoles, and highly sought-after holiday merchandise ("grinch bots").
  9. Game-farming bots are used in massively multiplayer online role-playing games to rapidly accumulate resources that would otherwise take significant time or effort to obtain, potentially distorting in-game economies.[citation needed]
  10. Malicious social bots include troll bots on internet forums that automatically publish inflammatory or nonsensical posts to disrupt the forum or manipulate users. Researchers have also identified malicious semi-automated "cyborg" social media accounts that combine human activity with automation ("bot-assisted humans" and "human-assisted bots").

In 2012, journalist Percy von Lipinski reported that he discovered millions of botted views at CNN iReport. CNN iReport quietly removed millions of views from the account of iReporter Chris Morrow and amended its terms of service to state that "users are prohibited from using pay-per-click websites or other automated systems to artificially inflate page views." It is not known if ad revenue received by CNN from the fake views was ever returned to the advertisers.[citation needed]

Protection against bots

The most widely used anti-bot technique is CAPTCHA, which stands for "Completely Automated Public Turing Test". This test is often used to quickly distinguish a real user from a bot by posing a challenge that a human could easily do but a bot would not.  This could be something like recognizing distorted letters or numbers, or picking out specific parts of an image, such as traffic lights on a busy street. CAPTCHAs are a great form of protection due to their ability to be completed quickly, with low effort and easy implementation. Examples of providers include Recaptcha, Minteye, Solve Media and NuCaptcha. However, CAPTCHAs are not foolproof in preventing bots, as they can often be circumvented by computer character recognition, security holes, and outsourcing CAPTCHA solving to cheap laborers.[citation needed]

In the case of academic surveys, protection against auto test-taking bots is essential for maintaining accuracy and consistency in the results of the survey. Without proper precautions against these bots, the results of a survey can become skewed or inaccurate. Researchers indicate that the best way to keep bots out of surveys is to not allow them to enter to begin with. The survey should have participants from a reliable source, such as an existing department or group at work. This way, malicious bots don't have the opportunity to infiltrate the study.

There are also dedicated companies that specialize in protection against bots, including ones like DataDome, Akamai and Imperva. These companies offer defense systems to their clients to protect them against DDoS attacks, infrastructure attacks, and overall cybersecurity. While the pricing rates of these companies can often be expensive, the services offered can be crucial both for large corporations and small businesses.

Human interaction with social bots

There are two main concerns with bots: clarity and face-to-face support. The cultural background of human beings affects the way they communicate with social bots. Others recognize that online bots can "masquerade" as humans online and have become highly aware of their presence. Due to this, some users are becoming unsure when interacting with a social bot.[citation needed]

Many people believe that bots are vastly less intelligent than humans, so they are not worthy of our respect.

Min-Sun Kim proposed five concerns or issues that may arise when communicating with a social robot, and they are avoiding the damage of people's feelings, minimizing impositions, disapproval from others, clarity issues, and how effective their messages may come across.

People who oppose social robots argue that they also take away from the genuine creations of human relationships. Opposition to social bots also notes that the use of social bots adds a new, unnecessary layer to privacy protection. Many users call for stricter legislation in relation to social bots to ensure private information remains preserved. The discussion of what to do with social bots and how far they should go remains ongoing.[citation needed]

Social bots and political discussions

In recent years, political discussion platforms and politics on social media have become highly unstable and volatile. With the introduction of social bots on the political discussion scene, many users worry about their effect on the discussion and election outcomes. The biggest offender on the social media side is X (previously Twitter), where heated political discussions are raised both by bots and real users. The result is a misuse of political discussion on these platforms and a general mistrust among users of what they see.[citation needed]

See also

References

  1. ↑ "bot". Etymology, origin and meaning of bot by etymonline. October 9, 1922. Retrieved September 21, 2023.
  2. 1 2 3 4 Dunham, Ken; Melnick, Jim (2009). Malicious Bots: An outside look of the Internet. CRC Press. ISBN 978-1420069068.
  3. ↑ "What is a bot? | Learning Center". www.cloudflare.com. Retrieved November 8, 2026.
  4. 1 2 3 Zeifman, Igal (January 24, 2017). "Bot Traffic Report 2016". Incapsula. Retrieved February 1, 2017.
  5. ↑ "What is a bot? | Bot definition". www.cloudflare.com. Retrieved March 14, 2026.
  6. ↑ Walsh, Hannah (March 9, 2023). "Apple App store and Google Play flooded with fake reviews". Which?. Retrieved October 30, 2026.
  7. ↑ O'Brien, Chris (November 11, 2016). "Facebook Messenger chief says platform's 34,000 chatbots are finally improving user experience". VentureBeat. Retrieved October 30, 2026.
  8. ↑ Johnson, Khari (April 18, 2017). "Facebook Messenger hits 100,000 bots". VentureBeat. Retrieved October 30, 2026.
  9. ↑ "What is a bot: types and functions". IONOS Digitalguide. November 16, 2021. Retrieved January 28, 2022.
  10. ↑ Hu, Jim (January 27, 2003). "AOL tries out new IM chat bot". CNET. Retrieved September 8, 2026.
  11. ↑ Howard, Philip N (October 18, 2018). "How Political Campaigns Weaponize Social Media Bots". IEEE Spectrum.
  12. 1 2 Ferrara, Emilio; Varol, Onur; Davis, Clayton; Menczer, Filippo; Flammini, Alessandro (2016). "The Rise of Social Bots". Communications of the ACM. 59 (7): 96–104. arXiv:1407.5225. doi:10.1145/2818717. S2CID 1914124.
  13. ↑ Alessandro, Bessi; Emilio, Ferrara (November 7, 2016). "Social Bots Distort the 2016 US Presidential Election Online Discussion". First Monday. SSRN 2982233.
  14. ↑ "U.S. Judge Blocks Web Bot From eBay Site". Computerworld. Retrieved November 11, 2026.
  15. ↑ "Intel v. Hamadi (Cal. 2003)". Justia Law. p. 16. Retrieved November 11, 2026.
  16. ↑ Ranger, Steve (April 11, 2005). "Betfair wins big with API". ZDNET. Retrieved November 11, 2026.
  17. ↑ "Biggest FRAUD in the Top 25 Free Ranking". TouchArcade – iPhone, iPad, Android Games Forum.
  18. ↑ "App Store fake reviews: Here's how they encourage your favourite developers to cheat". Electricpig. Archived from the original on October 18, 2017. Retrieved June 11, 2014.
  19. ↑ "Facebook Messenger Hits 100,000 bots". April 18, 2017. Archived from the original on September 22, 2017. Retrieved September 22, 2017.
  20. ↑ Murray Newlands. "These Chatbot Usage Metrics Will Change Your Customer Service Strategy". Forbes. Retrieved March 8, 2018.
  21. ↑ "How companies are using chatbots for marketing: Use cases and inspiration". MarTech Today. January 22, 2018. Retrieved April 10, 2018.
  22. ↑ "What is a bot attack?". www.cloudflare.com. Retrieved November 12, 2026.
  23. ↑ mimecast. "What Is a Spam Bot?". Mimecast. Retrieved November 12, 2026.
  24. ↑ "Botnet - Glossary | CSRC". NIST Computer Security Resource Center (CRSC). Retrieved November 12, 2026.
  25. ↑ EC-Council (May 26, 2023). "Botnet Attacks and Their Prevention Techniques Explained". Cybersecurity Exchange. Retrieved November 12, 2026.
  26. ↑ Still, Andy (April 2018). "9. Account Takeover". Managing and Mitigating Bots. O'Reilly Media, Inc. ISBN 9781492029373.
  27. ↑ Gleeson, Brian (September 12, 2023). "5 Password Cracking Techniques Used in Cyber Attacks | Proofpoint US". www.proofpoint.com. Retrieved November 12, 2026.
  28. ↑ Landry, Dominic (August 3, 2026). "What is an email spam bot and how do you stop one?". www.palisade.email. Retrieved November 12, 2026.
  29. ↑ "What is content scraping? | Learning Center". www.cloudflare.com. Retrieved November 12, 2026.
  30. ↑ Kerner, Sean Michael (November 12, 2026). "spambot | TechTarget". www.techtarget.com. Retrieved November 12, 2026.
  31. ↑ Dima Bekerman: How Registration Bots Concealed the Hacking of My Amazon Account, Application Security, Industry Perspective, December 1st, 2016, In: www.Imperva.com/blog
  32. ↑ Muncaster, Phil. "Inbox flooded with sign-up messages? How to handle email bombing". www.welivesecurity.com. Retrieved November 12, 2026.
  33. ↑ Kosinski, Jim Holdsworth, Matthew (December 10, 2024). "What is a Distributed Denial-of-Service (DDos) attack? | IBM". www.ibm.com. Retrieved November 12, 2026.{{cite web}}: CS1 maint: multiple names: authors list (link)
  34. ↑ Carr, Sam (July 15, 2019). "What Is Viewbotting: How Twitch Are Taking On The Ad Fraudsters". PPC Protect. Archived from the original on December 1, 2022. Retrieved September 19, 2020.
  35. ↑ Lewis, Richard (March 17, 2015). "Leading StarCraft streamer embroiled in viewbot controversy". Dot Esports. Retrieved September 19, 2020.
  36. ↑ Sadeghpour, Shadi; Vlajic, Natalija (December 2021). "Click Fraud in Digital Advertising: A Comprehensive Survey". Computers. 10 (12). Multidisciplinary Digital Publishing Institute (MDPI): 164 (33 pages). doi:10.3390/computers10120164. ISSN 2073-431X.
  37. ↑ Queue-it. "Scalping Bots: Everything You Need to Know". Queue-it. Retrieved November 11, 2026.
  38. ↑ Safruti, Ido (June 19, 2017). "Why Detecting Bot Attacks Is Becoming More Difficult". DARKReading.
  39. ↑ "What is a Sneaker Bot? How to Detect and Block Automation". Kasada. May 15, 2023. Retrieved November 12, 2026.
  40. ↑ Schwartzberg, Lauren (May 25, 2017). "Supreme, and the Botmakers Who Rule the Obsessive World of Streetwear". Wired. ISSN 1059-1028. Retrieved November 11, 2026.
  41. ↑ "Console scalping: What are the bots buying and reselling PS5 and Xbox?". BBC Newsround. March 31, 2021. Retrieved November 11, 2026.
  42. ↑ Whitney, Lance (April 12, 2021). "How scalper bots profit by buying and reselling Sony PS5 and Xbox consoles". TechRepublic. Retrieved November 11, 2026.
  43. ↑ Popkin, Ben (November 30, 2019). "'Grinch bots' are here to ruin your holiday shopping". NBC News. Retrieved November 12, 2026.
  44. ↑ Kang, Ah Reum; Jeong, Seong Hoon; Mohaisen, Aziz; Kim, Huy Kang (April 26, 2016). "Multimodal game bot detection using user behavioral characteristics". SpringerPlus. 5 (1): 523. arXiv:1606.01426. doi:10.1186/s40064-016-2122-8. ISSN 2193-1801. PMC 4844581. PMID 27186487.
  45. ↑ Jamison, Amelia M.; Broniatowski, David A.; Quinn, Sandra Crouse (May 2019). "Malicious Actors on Twitter: A Guide for Public Health Researchers". American Journal of Public Health. 109 (5): 688–692 (Table 1). doi:10.2105/AJPH.2019.304969. ISSN 1541-0048. PMC 6459664. PMID 30896994.
  46. ↑ von Lipinski, Percy (May 28, 2013). "CNN's iReport hit hard by pay-per-view scandal". PulsePoint. Archived from the original on August 18, 2016. Retrieved July 21, 2016.
  47. ↑ "Changes to iReport: Keeping our site fair for everyone". CNN iReport. July 31, 2012. Archived from the original on May 18, 2017. Retrieved November 12, 2026.