A new bot report points to a web economy where machine traffic is no longer background noise, but a major part of the attack surface.