Requests by country and upload spikes

Under the globe on the World map, Requests by country lists the countries your apps connect to, busiest first: a flag, a bar and the number of requests (connections opened plus blocked attempts). The five busiest show by default; the arrow shows up to twelve.

Show a country on the globe

• Click a row: the globe turns to that country the short way round, stops spinning and labels it with its number of requests. Its lines stay bright while the others fade.
• Click the row again, or pick another one: the globe spins on from where it stands.
• Point at a row for two buttons. Filter shows only that country on the globe and in the side list (Show All undoes it). Block adds a block rule for each app and destination already seen there, after asking you.

Upload spikes

FireAI adds up, every second, how much data your Mac sends to each country. A country counts as a spike when it received at least 5 MB in the last 10 seconds and at least ten times its usual amount. It then moves to the top of the list in red with its upload speed (for example ↑ 4.2 MB/s), a red line under the title says “Unusual upload to France · since 14:02”, its lines turn red on the globe with a pulsing marker, the Home weather turns to Storm and the menu bar icon shows ↑ FR.

• A spike stays flagged for a minute after it ends, so you have time to see it.
• An upload that simply keeps going, such as a backup, becomes the new normal after a couple of minutes and stops being flagged.
• A spike is a signal, not a verdict: FireAI does not block it on its own. Click the country to see which apps and destinations are behind it, then block them if you did not expect it.