=== date range per log file === --- access.log --- 20/08/2026:00:00:04 +0000 20/08/2026:08:03:25 +0000 --- access.log.1 --- 16/08/2026:00:00:00 +0000 19/08/2026:23:59:56 +0000 --- access.log.2.zst --- 13/08/2026:00:00:04 +0000 16/08/2026:00:00:00 +0000 --- access.log.3.zst --- 09/08/2026:00:00:00 +0000 12/08/2026:23:59:58 +0000 === 1.5 ATTRIBUTION — who makes the requests, by source IP + token + user agent === --- window slice: 18/08 from 09:51 onward, 19/08 all, 20/08 to now --- 5 10.77.0.3 [18/08/2026:12:52:31 libwww-perl/6.78 5 10.77.0.3 [16/08/2026:18:52:31 libwww-perl/6.78 5 10.77.0.3 [16/08/2026:12:52:31 libwww-perl/6.78 5 10.77.0.2 [20/08/2026:08:02:09 libwww-perl/6.78 5 10.77.0.2 [20/08/2026:07:52:09 libwww-perl/6.78 5 10.77.0.2 [20/08/2026:07:47:09 libwww-perl/6.78 5 10.77.0.2 [20/08/2026:07:42:09 libwww-perl/6.78 5 10.77.0.2 [20/08/2026:06:32:09 libwww-perl/6.78 5 10.77.0.2 [20/08/2026:05:27:09 libwww-perl/6.78 5 10.77.0.2 [20/08/2026:05:22:09 libwww-perl/6.78 5 10.77.0.2 [20/08/2026:05:17:09 libwww-perl/6.78 5 10.77.0.2 [20/08/2026:04:12:09 libwww-perl/6.78 5 10.77.0.2 [18/08/2026:03:54:55 libwww-perl/6.78 5 10.77.0.2 [15/08/2026:22:34:57 libwww-perl/6.78 5 10.77.0.2 [15/08/2026:12:54:56 libwww-perl/6.78 5 10.77.0.2 [15/08/2026:09:29:56 libwww-perl/6.78 5 10.77.0.2 [15/08/2026:08:04:56 libwww-perl/6.78 5 10.77.0.2 [14/08/2026:23:04:56 libwww-perl/6.78 5 10.77.0.2 [14/08/2026:19:24:56 libwww-perl/6.78 5 10.77.0.2 [14/08/2026:18:29:56 libwww-perl/6.78 === request TOTALS in the elapsed window (18/08 09:51Z -> now) === 3538 17/08/2026 13 3538 17/08/2026 14 3538 17/08/2026 15 3548 17/08/2026 16 3538 17/08/2026 17 673 17/08/2026 18 335 18/08/2026 03 3546 18/08/2026 04 3538 18/08/2026 05 3546 18/08/2026 06 3536 18/08/2026 07 3538 18/08/2026 08 3546 18/08/2026 09 3550 18/08/2026 10 3546 18/08/2026 11 3543 18/08/2026 12 3540 18/08/2026 13 3540 18/08/2026 14 3540 18/08/2026 15 3548 18/08/2026 16 3540 18/08/2026 17 3551 18/08/2026 18 3540 18/08/2026 19 3540 18/08/2026 20 3540 18/08/2026 21 3550 18/08/2026 22 3540 18/08/2026 23 3550 19/08/2026 00 3540 19/08/2026 01 3540 19/08/2026 02 3540 19/08/2026 03 3553 19/08/2026 04 3540 19/08/2026 05 3552 19/08/2026 06 3540 19/08/2026 07 3540 19/08/2026 08 3540 19/08/2026 09 3546 19/08/2026 10 3540 19/08/2026 11 3546 19/08/2026 12 3540 19/08/2026 13 3540 19/08/2026 14 3540 19/08/2026 15 3548 19/08/2026 16 3540 19/08/2026 17 3548 19/08/2026 18 3540 19/08/2026 19 3540 19/08/2026 20 3540 19/08/2026 21 3548 19/08/2026 22 3540 19/08/2026 23 3548 20/08/2026 00 3540 20/08/2026 01 3540 20/08/2026 02 3540 20/08/2026 03 3546 20/08/2026 04 3540 20/08/2026 05 3546 20/08/2026 06 3539 20/08/2026 07 209 20/08/2026 08 === 1.6 BACKUP ACTIVITY in the window — protocol upgrades / writes === 28 "POST /api2/json/admin/datastore/felhom-offsite/verify" 200 139 28 "POST /api2/json/admin/datastore/felhom-offsite/verify" 200 131 4 "GET //api2/json/reader?backup-id=9201&backup-time=1787025523&backup-type=ct&debug=true&ns=demo-hp&store=felhom-offsite" 101 0 4 "GET //api2/json/reader?backup-id=9201&backup-time=1787025463&backup-type=ct&debug=true&ns=demo-felhom&store=felhom-offsite" 101 0 4 "GET //api2/json/reader?backup-id=9201&backup-time=1786476553&backup-type=ct&debug=true&ns=demo-hp&store=felhom-offsite" 101 0 1 "PUT /api2/json/admin/datastore/felhom-offsite/notes?backup-id=9201&backup-time=1787025523&backup-type=ct¬es=felhom+local-api&ns=demo-hp" 200 13 1 "PUT /api2/json/admin/datastore/felhom-offsite/notes?backup-id=9201&backup-time=1787025463&backup-type=ct¬es=felhom+local-api&ns=demo-felhom" 200 13 1 "POST /api2/json/admin/datastore/felhom-offsite/upload-backup-log?backup-id=9201&backup-time=1787025523&backup-type=ct&ns=demo-hp" 200 13 1 "POST /api2/json/admin/datastore/felhom-offsite/upload-backup-log?backup-id=9201&backup-time=1787025463&backup-type=ct&ns=demo-felhom" 200 13 1 "GET //api2/json/backup?backup-id=9201&backup-time=1787025523&backup-type=ct&benchmark=false&debug=true&ns=demo-hp&store=felhom-offsite" 101 0 1 "GET //api2/json/backup?backup-id=9201&backup-time=1787025463&backup-type=ct&benchmark=false&debug=true&ns=demo-felhom&store=felhom-offsite" 101 0 --- explicit: any line mentioning backup/upload/chunk/finish --- 2