I learned from
Shae about
goaccess. It is
so. It's fast and simple. After Matomo broke for maybe the fifth time sometime last year, I decided to just go without web analytics, but after finding my server unresponsive a few times, I decide to see if there was something not bloated out there and asked on the Recurse forums.
And now I can see that around 50-60% of the requests to my sites are from some IP that is owned by Microsoft and running
GolamV2 crawler, another IP running on a Microsoft server that's probing for PHP vulnerabilities, and some other crawlers not even pretending with a browser user-agent.