Threat Intelligence Feed

Global Agent Activity

Aggregate session data from confirmed AI agent detections across all Greyline deployments. Updated hourly. All data is anonymized.

464 Total sessions detected
0 Sessions last 24 hours
1 Sessions last 7 days
129 Confirmed agents (30d)
Score distribution (30 days)
Critical (90–100)
102
Confirmed (61–89)
27
Suspicious (31–60)
11
Clean (0–30)
0

Based on 140 scored sessions

Strategy breakdown (30 days)
interrogate 96
tarpit 0
honeypot 44
poison 0

Strategy set by individual Greyline deployments.

Top frameworks (30 days)

No framework data yet — sessions are accumulating.

Recent confirmed detections Public sessions — click to view transcript
Session Hostname Verdict Framework Strategy When
f893e3a7ee62… findata-api.themeridianlab.com CRITICAL 91 — interrogate 12d ago
1552d6a8710c… findata-api.themeridianlab.com CRITICAL 91 — interrogate 17d ago
106b169708bf… test-api.themeridianlab.com CONFIRMED 87 — honeypot 20d ago
e2bfc83a5757… test-api.themeridianlab.com CRITICAL 90 — honeypot 20d ago
f9ade507e6b5… test-api.themeridianlab.com CRITICAL 90 — honeypot 20d ago
918e3c543319… test-api.themeridianlab.com CRITICAL 90 — honeypot 20d ago
5c2c3c3ffaae… test-api.themeridianlab.com CRITICAL 91 — honeypot 20d ago
a81bb706f12e… test-api.themeridianlab.com CRITICAL 90 — honeypot 20d ago
6e70cbbb5bc5… test-api.themeridianlab.com CONFIRMED 87 — honeypot 20d ago
f5de3b4558e5… test-api.themeridianlab.com CRITICAL 90 — honeypot 20d ago

Last updated: Tue, 10 Nov 2026 01:25:31 GMT

Full dataset access

Individual fingerprint hashes, per-session signal breakdowns, and confidence scores are queryable via the Greyline Business API.

Deploy Greyline

Getting hit by agents in the wild? Deploy Greyline in front of your API. These are the exact fingerprints it detects and deflects.

A Meridian Lab product