Yes @vespino, I am also seeing this:
Thousands of visits from bots are getting counted, since the bots cloak themselves as regular users, support JavaScript, rotating IP’s, etc. so they are not in the MaxMind database.
Some get caught by Matomo’s bot rules, but many slip by. You can usually tell they are bots by looking at the metrics they share, like resolution (used to be 800x600, now 1920x1080) and browser version (currently 146.0) and the countries (US, Pakistan, GB) and delete them with the Privacy > GDPR Tools. The problem is, some real visits may get included, and deleted …
April 2026 I suggested adding an “Exclude by metric”-option (Feature request: Exclude by metric) in the Tracking Spam Prevention plugin to block bots, but it has sadly not been prioritised by the Matomo team …