A site my wife works on suddenly started getting massive Direct Traffic from Belgium that spiked in early September then dropped but has stayed in the thousands of hits per day.
She only has access to Google Analytics, so she can't look at the IP address, but I was able to confirm that it is all the same user agent string and it's a version of chrome about a year old that otherwise sends no traffic.
The best solution I can think of is to filter on the user agent.
If she had access to their server or Cloudflare, I'd block the traffic there, but the developer keeps everything locked down and doesn't seem super savvy.
Any other ideas? The site gets under 100K visitors per month so throwing 5k to 40k bit visits per day messes with all the metrics, so the need to do something.
Seems odd - usually stuff like that is from Eastern Europe or Asia. If they we're Russian and using a proxy, I would expect it to change geos regularly.
Very odd.