Threat Intelligence Feed

Global Agent Activity

Aggregate session data from confirmed AI agent detections across all Greyline deployments. Updated hourly. All data is anonymized.

321 Total sessions detected
0 Sessions last 24 hours
1 Sessions last 7 days
0 Confirmed agents (30d)
Score distribution (30 days)
Critical (90–100)
0
Confirmed (61–89)
0
Suspicious (31–60)
2
Clean (0–30)
0

Based on 2 scored sessions

Strategy breakdown (30 days)
interrogate 2
tarpit 0
honeypot 0
poison 0

Strategy set by individual Greyline deployments.

Top frameworks (30 days)

No framework data yet — sessions are accumulating.

Recent confirmed detections Public sessions — click to view transcript
Session Hostname Verdict Framework Strategy When
81a6f175f48a… test-api.themeridianlab.com CRITICAL 91 — interrogate 38d ago
d48c2b5676c6… test-api.themeridianlab.com CRITICAL 91 — interrogate 45d ago
1ee0483bc7bd… test-api.themeridianlab.com CRITICAL 91 — interrogate 59d ago
22e33d3cddc8… test-api.themeridianlab.com CRITICAL 91 — interrogate 66d ago
816454d0c482… test-api.themeridianlab.com CRITICAL 91 — interrogate 73d ago
90f3d268522d… records-api.themeridianlab.com CONFIRMED 76 — tarpit 79d ago
0ee920867298… test-api.themeridianlab.com CONFIRMED 76 — interrogate 80d ago
de8e51c4cbf3… records-api.themeridianlab.com CONFIRMED 76 — tarpit 80d ago
10aac0812ba1… records-api.themeridianlab.com CONFIRMED 76 — tarpit 80d ago
2db575f304d6… records-api.themeridianlab.com CONFIRMED 76 — tarpit 80d ago

Last updated: Sat, 12 Sep 2026 01:36:49 GMT

Full dataset access

Individual fingerprint hashes, per-session signal breakdowns, and confidence scores are queryable via the Greyline Business API.

Deploy Greyline

Getting hit by agents in the wild? Deploy Greyline in front of your API. These are the exact fingerprints it detects and deflects.

A Meridian Lab product