As @StephenOstermiller points out, this is likely spam traffic which doesn't ever come anywhere near your website. People are simply sending data to Analytics using your tracking ID. The idea is that you become interested in what this traffic is and look at the referrer or hostname of it. Google has been doing better at blocking some of this traffic over the last few years, but they're careful to not block traffic that might actually be genuine so some still gets through.
Easiest way to see if this is the case: Go to Behaviour > Site Content > All Pages, click your home page (probably indicated by
/) and then add Hostname as a secondary dimension. If one of the hostnames shown isn't your website's then it's junk and not actually traffic to your website.
You can block this junk traffic at View level by adding a hostname filter. Here's Google's own instructions on filters at view level: