Usage Analyzer Traffic Patterns

Classification is based on request targets, status outcomes, user agents, referers, and whether an IP behaved more like a browser, a scheduled job, or a probe, over the trailing 7 days.

Cache refreshes hourly.
Last build: 2026-07-14T01:07:01+00:00

Target website filter

Scope the traffic patterns to one inferred website target.

Traffic patterns

Legitimate usage: 72 IPs Automation: 2 IPs Intrusion attempts: 7 IPs Mixed: 34 IPs

Target websites

Website Count
bradcentral.net 609
bradw.dev 161
evergreenhillna.org 538
Direct access by IP address 54
0 requests could not be tied to a specific site because older shared-log entries did not include the vhost and some requests still lack enough host information to infer the target site.

Top routes

URL Count
/xmlrpc.php 321
/ 90
/wp-login.php 23
/usage/ 19
/robots.txt 16
/favicon.ico 13
- 10
/wp-includes/css/buttons.css 6

Top suspicious targets

URL Count
/xmlrpc.php 321
/wp-login.php 23
/wp-includes/css/buttons.css 6
/wp-admin/ 5
/ 4
/wp-admin/install.php?step=1 4
/cgi-bin/cgi-bin/cgi-bin/cgi-bin/cache.php 3
/wp-admin 2

Top user agents

Agent Count
- 351
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36 309
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 105
jetmon/1.0 (Jetpack Site Uptime Monitor by WordPress.com) 40
Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36 36
Jetpack by WordPress.com 19
Go-http-client/1.1 17
Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com) 12
Logs analyzed from /var/log/apache2/other_vhosts_access.log through /var/log/apache2/access.log.
Extracted archives live in /tmp/usage-analyzer/extracted.
Generated at 2026-07-14T01:07:01+00:00.