Threats

Live threat feed. External-agent activity is the headline concern — it operates at machine speed with reasoning.

6 of 14 shown threats originate from autonomous external agents.
Filters
Threat feed · 14
EventTypeOriginSourceTargetSeverityStatusTime
EVT-7741Autonomous recon sweepExternal agent45.148.10.221Perimeter · edge-gw-01CriticalINVESTIGATING13:01:00
EVT-7740Lateral movementExternal agent10.4.19.66app-tier · svc-paymentsCriticalLIVE12:57:31
EVT-7738Prompt injectionExternal agentapi-gw-east / user fieldAI model · support-llmHighMITIGATED12:43:29
EVT-7736Signaling stormBot / scriptbotnet · 3.2k sourcesauth-gw · cluster-aHighINVESTIGATING12:30:03
EVT-7733Model extractionExternal agent172.18.0.44AI model · nlp-predictHighLIVE12:26:29
EVT-7724Data stagingExternal agent10.4.19.66db-tier · warehouse-2HighLIVE11:16:40
EVT-7729Credential stuffingBot / scriptrotating residential proxiesidentity · sso-portalMediumMITIGATED12:21:53
EVT-7727Privilege escalationInsideruser · j.marshidentity · role-storeMediumINVESTIGATING11:50:12
EVT-7708BeaconingExternal agentendpoint · wks-2231185.220.101.47MediumINVESTIGATING09:38:22
EVT-7699Impossible travelHumanuser · a.okaforidentity · sso-portalMediumRESOLVED09:00:51
EVT-7690Config tamperInsideruser · ci-runnernetwork · fw-rulesetMediumRESOLVED08:22:34
EVT-7718Model driftInsidersensor-array-9AI model · anomaly-detector-v4LowMITIGATED10:51:04
EVT-7712Certificate anomalyHumanmtls-peer-19service-mesh · smfLowMITIGATED10:03:37
EVT-7702Port sweepBot / script91.219.29.14Perimeter · edge-gw-02LowRESOLVED09:15:10