Usage Analyzer Summary

By Brad Williamson (brad@bradw.dev) ยท buymeacoffee.com/h3Dfhw4ElD

Reads /var/log/apache2/*access.log* (any file containing access.log, including domain-specific logs), expands rotated archives into a temp directory, groups traffic from the trailing 7 days by IP, classifies legitimate website usage versus intrusion-style probes, and plots geolocated IPs on a world map.

Cache refreshes hourly.
Last build: 2026-07-14T00:07:02+00:00

Target website filter

Scope the summary, map, and stats to one inferred website target, and narrow the hourly chart to a date range.

Requests parsed
699
6.4 MB transferred
Unique IPs
57
0 lines skipped
Legitimate usage IPs
36
505 requests
Likely intrusion IPs
4
163 requests

World map

Green markers are legitimate visitors, amber markers are automation or crawlers, red markers are likely intrusion attempts, and purple markers show mixed signals.

Legitimate usage Automation Intrusion attempt Mixed
57 geolocated markers shown, with legitimate website usage included in green.

Requests by day

Daily request volume over the trailing 7 days for the currently selected website scope. Click a point to filter the whole page down to that day.

2 daily buckets shown from 2026-07-13 through 2026-07-14.

Requests by hour

Hourly request volume for the currently selected website and date range.

2 hourly buckets shown from 2026-07-13 23:00 through 2026-07-14 00:00.