Synthetic anomaly detection over the live honeypot stream. Compares the last 7 days to the prior same-length window and surfaces UA-lie surges, country share swings, volume spikes, and newly-observed verified vendors. Configure persistent alert rules →
US traffic share at 99% (68 events)
2026-05-18T00:27:36.816Z → 2026-05-25T00:27:36.816Z
{
"country": "US",
"curCount": 68,
"prevCount": 0,
"ratio": 68
}New verified-vendor user agents observed
2026-05-18T00:27:36.816Z → 2026-05-25T00:27:36.816Z
{
"count": 3,
"examples": [
"CCBot/2.0",
"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)",
"GPTBot/1.0"
]
}