I run an online media company, and the “junk” direct traffic is actually causing the page to load and impressions to be served.  Would a new spider or bot be causing the page to actually load?

If not, I am leaning towards some malicious redirect that’s causing the sudden surge in direct traffic. The big question is where, and how to locate and shut down the source.