Building analytics from access logs is massively unreliable. I have a few domains that answer for http traffic but only serve "Welcome to nginx". When I tail the access logs I see thousands of requests from obvious bots, but also that traffic seems to be pretending to be other forms of traffic also.

There are some bots that pretend to be phones browsing around, IE, firefox.

Just remember that relying purely on access log analytics isn't something that will return accurate results.