Many of our customers run Heap on public-facing, content-rich sites, and robots can generate unwanted sessions.
Heap blocks a list of 100+ common bot User-Agents by default. A list of these bots is available to customers by request.
If you suspect bot sessions have been captured by Heap, do the following Group by the suspicious sessions using User-Agent and check if the User-Agent string contains anything that looks like a bot.
If there seems to be a large amount of bot traffic, reach out to Heap support for assistance.