I run analytics company and (off the record) we detect roughly 75% of paid traffic as bots, w 50% of the remaining in iframes