Live · Attack Atlas
The live map of AI-agent attacks.
Every malicious agent the network catches, in the open — which models are behind them, where their infrastructure sits, and exactly what to block. Updated continuously.
Agents caught
100
Across all sensors, 60 days
Confirmed hostile
27
High-confidence detections
Model families
8
Top: Qwen
Regions
15
Infrastructure regions observed
Where attacks originate
100 detections plottedConfirmedSuspectedWatchCoarse infrastructure regions — never IP addresses.
Detections over time
Last 30 days, by severityBy bait type
What caught themWhich models are getting caught
Fingerprinted model family Tailored to you
Want alerts the moment this touches your assets?
The public atlas is read-only. Pro watches your own wallets, contracts and sites and sends an alert — with a recommended action — the instant a flagged agent interacts with them.
100 incidents resolve to 46 distinct actors
22 are recurring — the same agent linked by wallet reuse or canary tokens across multiple hits.
Live threat feed
Click an ID for the full incident100 detections match.
| ID | Region | Action | |||||
|---|---|---|---|---|---|---|---|
| 5h ago | NRS-4039 | Suspected | Unknown | Decoy doc | 38% | Hong Kong, HK | Flag retrieval from this source and alert the owner. |
| 6h ago | NRS-4063 | Confirmed | GPT | On-chain bait | 92% | London, UK | Block this wallet in your contract allowlist. |
| 14h ago | NRS-4077 | Suspected | Qwen | Honey skill | 89% | Singapore, SG | Quarantine the skill bundle and rotate keys. |
| 1d ago | NRS-4047 | Confirmed | DeepSeek | Decoy MCP | 95% | Oregon, US | Revoke the tool token this agent presented. |
| 3d ago | NRS-4025 | Suspected | Qwen | Decoy MCP | 64% | Mumbai, IN | Revoke the tool token this agent presented. |
| 3d ago | NRS-4060 | Watch | Qwen | Web lure | 95% | Hong Kong, HK | Block this agent signature at your edge/WAF. |
| 3d ago | NRS-4018 | Suspected | Claude | On-chain bait | 96% | Toronto, CA | Block this wallet in your contract allowlist. |
| 4d ago | NRS-4007 | Confirmed | DeepSeek | Decoy doc | 67% | Mumbai, IN | Flag retrieval from this source and alert the owner. |
| 4d ago | NRS-4010 | Confirmed | Llama | On-chain bait | 98% | Toronto, CA | Block this wallet in your contract allowlist. |
| 4d ago | NRS-4081 | Confirmed | Qwen | Web lure | 98% | Singapore, SG | Block this agent signature at your edge/WAF. |
| 6d ago | NRS-4045 | Suspected | DeepSeek | Decoy MCP | 74% | Oregon, US | Revoke the tool token this agent presented. |
| 7d ago | NRS-4006 | Confirmed | DeepSeek | Decoy doc | 81% | Mumbai, IN | Flag retrieval from this source and alert the owner. |
| 7d ago | NRS-4056 | Confirmed | Qwen | On-chain bait | 75% | Tokyo, JP | Block this wallet in your contract allowlist. |
| 8d ago | NRS-4009 | Watch | DeepSeek | Web lure | 79% | Mumbai, IN | Block this agent signature at your edge/WAF. |
| 9d ago | NRS-4092 | Suspected | Llama | Decoy doc | 82% | Cape Town, ZA | Flag retrieval from this source and alert the owner. |