Threat Intelligence Feed

Global Agent Activity

Aggregate session data from confirmed AI agent detections across all Greyline deployments. Updated hourly. All data is anonymized.

296 Total sessions detected
0 Sessions last 24 hours
1 Sessions last 7 days
6 Confirmed agents (30d)
Score distribution (30 days)
Critical (90–100)
3
Confirmed (61–89)
3
Suspicious (31–60)
3
Clean (0–30)
0

Based on 9 scored sessions

Strategy breakdown (30 days)
interrogate 7
tarpit 2
honeypot 0
poison 0

Strategy set by individual Greyline deployments.

Top frameworks (30 days)

No framework data yet — sessions are accumulating.

Recent confirmed detections Public sessions — click to view transcript
Session Hostname Verdict Framework Strategy When
e96f7a1eea32… test-api.themeridianlab.com CONFIRMED 76 — interrogate 4d ago
1fa47dea10df… test-api.themeridianlab.com CONFIRMED 76 — interrogate 10d ago
9090ae40ff74… records-api.themeridianlab.com CRITICAL 90 — tarpit 15d ago
7f9618fcec75… test-api.themeridianlab.com CRITICAL 91 — interrogate 18d ago
3011fe70f53f… findata-api.themeridianlab.com CRITICAL 90 — interrogate 22d ago
ca9001eecb23… records-api.themeridianlab.com CONFIRMED 75 — tarpit 28d ago
b735ef7677a6… records-api.themeridianlab.com CRITICAL 95 aiohttp tarpit 41d ago
011a47134787… records-api.themeridianlab.com CONFIRMED 73 — tarpit 42d ago
be70e96d4f97… records-api.themeridianlab.com CONFIRMED 75 — tarpit 42d ago
938beadf3373… records-api.themeridianlab.com CONFIRMED 72 — tarpit 42d ago

Last updated: Sun, 17 May 2026 03:00:48 GMT

Full dataset access

Individual fingerprint hashes, per-session signal breakdowns, and confidence scores are queryable via the Greyline Business API.

Deploy Greyline

Getting hit by agents in the wild? Deploy Greyline in front of your API. These are the exact fingerprints it detects and deflects.

A Meridian Lab product