Unexpected spikes can be a challenge but generally IP and geo location are good starts like you have.
I would also check with your marketing teams to see if any digital campaigns were run that could contribute as well.
I also encourage you if possible to add transaction ID as a captured variable as that can assist from your internal sales system to correlate and see if indeed things are as expected.
GLTU