I have a website with a around 100k unique pages that are regularly updated. Our search engine rankings have been steadily improving and so has our traffic. Search engines crawl the site constantly and account for a lot of activity in the logs. However, I am seeing really large portion of the traffic is single requests from unique ips. They look like real users from real isps with normal user agents and requesting various pages. A good portion seems geographically strange (ie from far away Countries when our site is Country specific) but it doesn't look like a ddos attack. Out of all the unique ip addresses that hit our site, 80% of them have single requests like this. Normally I wouldn't even notice nor care too much but our host charges based on the number of visitors (calculated as unique ip addresses per day) and needless to say we are blowing through our plan limits. Google Analytics is not recording these single requests.
I am not sure what would cause this. Would the browser website prefetch feature account for some of this? Looking at Google Search Console, we have 300k impressions each day with about 3k clicks.