Synthetic anomaly detection over the live honeypot stream. Compares the last 30 days to the prior same-length window and surfaces UA-lie surges, country share swings, volume spikes, and newly-observed verified vendors. Configure persistent alert rules →
Traffic surge: 647,601 events vs 68,738 prior
2026-07-24T05:54:23.810Z → 2026-08-23T05:54:23.810Z
{
"curTotal": 647601,
"prevTotal": 68738,
"ratio": 9.42
}US traffic share at 99% (642,670 events)
2026-07-24T05:54:23.810Z → 2026-08-23T05:54:23.810Z
{
"country": "US",
"curCount": 642670,
"prevCount": 68595,
"ratio": 9.36905022231941
}New verified-vendor user agents observed
2026-07-24T05:54:23.810Z → 2026-08-23T05:54:23.810Z
{
"count": 5,
"examples": [
"Mozilla/5.0 (compatible; Claude-Web/1.0; +https://www.anthropic.com)",
"Mozilla/5.0 (compatible; Google-Extended/1.0; +http://www.google.com/bot.html)",
"Mozilla/5.0 (compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)",
"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot",
"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)"
]
}