Invalid or bot traffic can be caused by the following:

• Buying expired domains or redirecting old sites to a new one has the potential to redirect unwanted spam traffic your way.
  
  
• Being an easy hacking target. Bots trying to log in to CMS admin so they can hack into a site. Sites should set their CMS login page to something different than a common or default URL (for example, make the login page www.website.com/myadminportal_12 instead of www.website.com/admin)
  
  
• Sharing content or “link-building” using common practices espoused by SEO hires online. Sharing links to your site in comment sections, online listings, and in places that it’s highly possible that web crawlers may try to crawl those pages makes it ideal for crawlers hitting your site pages with a lot of frequency. If the crawler is unsophisticated or the link is on a page that is hit by bots a lot, this can trickle down to more invalid traffic to your site.

You should contact your host for advice on how to prevent invalid / bot traffic from coming to your website. For added protection, publishers can download the Cloudflare app under the 'Settings' tab of the Ezoic Dashboard.