Possible bot traffic Sept 2024

[ctro]

Is anyone else seeing a jump in visits from a possible bot? In one week, we jumped from 2 million to 3 million visits, which is unusual outside of November.

These million visits have no referring domain, multiple user agents, multiple IP addresses, no corresponding orders and most of them bounce after the first page. Almost all are mobile devices but not a specific browser, device, or operating system. It's not tied to a specific geo-location.

We know it's bogus, but we can't block it in our usual ways.

Does anyone have any other ideas of how to identify and block this traffic?