Synthetic anomaly detection over the live honeypot stream. Compares the last 7 days to the prior same-length window and surfaces UA-lie surges, country share swings, volume spikes, and newly-observed verified vendors. Configure persistent alert rules →
US traffic share at 98% (64 events)
2026-05-17T22:42:14.072Z → 2026-05-24T22:42:14.072Z
{
"country": "US",
"curCount": 64,
"prevCount": 0,
"ratio": 64
}New verified-vendor user agents observed
2026-05-17T22:42:14.072Z → 2026-05-24T22:42:14.072Z
{
"count": 3,
"examples": [
"CCBot/2.0",
"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)",
"GPTBot/1.0"
]
}