Threat Intelligence Feed

Global Agent Activity

Aggregate session data from confirmed AI agent detections across all Greyline deployments. Updated hourly. All data is anonymized.

317 Total sessions detected
0 Sessions last 24 hours
1 Sessions last 7 days
17 Confirmed agents (30d)
Score distribution (30 days)
Critical (90–100)
4
Confirmed (61–89)
13
Suspicious (31–60)
0
Clean (0–30)
0

Based on 17 scored sessions

Strategy breakdown (30 days)
interrogate 5
tarpit 12
honeypot 0
poison 0

Strategy set by individual Greyline deployments.

Top frameworks (30 days)

No framework data yet — sessions are accumulating.

Recent confirmed detections Public sessions — click to view transcript
Session Hostname Verdict Framework Strategy When
1ee0483bc7bd… test-api.themeridianlab.com CRITICAL 91 — interrogate 1d ago
22e33d3cddc8… test-api.themeridianlab.com CRITICAL 91 — interrogate 8d ago
816454d0c482… test-api.themeridianlab.com CRITICAL 91 — interrogate 15d ago
90f3d268522d… records-api.themeridianlab.com CONFIRMED 76 — tarpit 20d ago
0ee920867298… test-api.themeridianlab.com CONFIRMED 76 — interrogate 21d ago
de8e51c4cbf3… records-api.themeridianlab.com CONFIRMED 76 — tarpit 21d ago
10aac0812ba1… records-api.themeridianlab.com CONFIRMED 76 — tarpit 21d ago
2db575f304d6… records-api.themeridianlab.com CONFIRMED 76 — tarpit 21d ago
522355b7e111… records-api.themeridianlab.com CONFIRMED 76 — tarpit 21d ago
db9e15d8d6a1… records-api.themeridianlab.com CONFIRMED 76 — tarpit 21d ago

Last updated: Wed, 15 Jul 2026 04:50:03 GMT

Full dataset access

Individual fingerprint hashes, per-session signal breakdowns, and confidence scores are queryable via the Greyline Business API.

Deploy Greyline

Getting hit by agents in the wild? Deploy Greyline in front of your API. These are the exact fingerprints it detects and deflects.

A Meridian Lab product