To check that this isn't bot traffic, what are the engagement stats for these sessions? (I.e. session duration/ pages per session).
If these metrics show zero engagment, it is possible that this is bot traffic.
Alternatively, could this be someone within your organisation or your web developer testing some features?