Given that you flagged your question in Google Analytics, I assume that your question is aimed at identifying this false traffic so that you can prevent it from polluting web metrics, and not how to actually stop the abusive activity. In any case, my question concerns only the first.
Instead of referencing your server’s activity logs or adding node to the production data stream, you can do this exclusively from Google Analytics.
In the Analytics options bar, select Filter Manager, and then enter the name of this filter in the text box.
Hostname, , , . - :
^ somedomain.com $
, , GA - Hostname, .