Domain web traffic

    Hello to all,


    I've found an curiosity about one of my domains that I host on an I-mscp 1.2.2 server.
    In statistics for this particular domain on one day it had an massive web traffic value, compared to previous days, the number of the visitors being lower than previous days.
    From domain's logs I don't see nothing out of the ordinary.


    Is there a way to find out how the web traffic is calculated(what represents), so I can figure out where is the bandwidth eater?

    Found out what was the issue: Chinese and Ukrainian bots trying POST Wordpress login page, even if the login page was blocked only for certain IP's, and I didn't had any fail2ban jail set for this kind of attack.


    Any ideas about this another kind of attack?

    Code
    1. Apr 21 02:51:24 domain.com postfix/smtpd[15597]: sql plugin Parse the username daryl
    2. Apr 21 02:51:24 domain.com postfix/smtpd[15597]: sql plugin try and connect to a host
    3. Apr 21 02:51:24 domain.com postfix/smtpd[15597]: sql plugin trying to open db 'imscp' on host '127.0.0.1:3306'
    4. Apr 21 02:51:25 domain.com postfix/smtpd[15597]: sql plugin Parse the username daryouch
    5. Apr 21 02:51:25 domain.com postfix/smtpd[15597]: sql plugin try and connect to a host
    6. Apr 21 02:51:25 domain.com postfix/smtpd[15597]: sql plugin trying to open db 'imscp' on host '127.0.0.1:3306'
    7. Apr 21 02:51:25 domain.com postfix/smtpd[15597]: begin transaction
    8. Apr 21 02:51:25 domain.com postfix/smtpd[15597]: sql plugin create statement from userPassword daryouch domain.com
    9. Apr 21 02:51:25 domain.com postfix/smtpd[15597]: sql plugin doing query SELECT mail_pass FROM mail_users WHERE mail_addr = 'daryouch@domain.com ' AND status = 'ok';
    10. Apr 21 02:51:25 domain.com postfix/smtpd[15597]: sql plugin: no result found