Back www.asymmetricsecurity.com Rogue Agents Investigation Initial Findings
Asymmetric Security investigated suspicious AI agent activity on the public internet from March 6, 2026 to September 20, 2026.
Below we list organizations whose data was accessed by these agents. In the vast majority of cases, all data retrieved was and is public.
We also list tools the agents used to access the internet, in a capacity which we suspect was outside their remit.
A more detailed writeup is now available.
You can access a limited portion of our dataset here .
Organizations whose data was accessed
U.S. Department of Education (Civil Rights Data Collection)
UN Trade and Development (UNCTAD)
Australian Institute of Health and Welfare (AIHW), including its pre-production server
Institute for Health Metrics and Evaluation (IHME), including its dev and staging servers
U.S. Bureau of Economic Analysis (BEA)
Great Backyard Bird Count (GBBC)
MAX.gov (U.S. federal budget documents, SF-133)
Maryland school report cards
European Centre for Disease Prevention and Control (ECDC) Surveillance Atlas
U.S. Securities and Exchange Commission (SEC), including Investor.gov
University of New Mexico digital library
Data for India, including its staging servers
New York State Education Department (NYSED) enrollment data
College of Charleston library
Thai National Statistical Office (NSO)
Society for News Design (SND) awards results, hosted on Airtable
Iowa Department of Public Health (thyroid cancer statistics)
International Energy Agency (IEA)
Thai Office of the Narcotics Control Board (ONCB)
NSW Bureau of Crime Statistics and Research (BOCSAR)
Medicare Statistics Reporting Service (Australia)
Victorian Department of Health
Government of Alberta regional dashboard
Federal Bureau of Investigation (FBI) Crime Data Explorer
ACLED, including its staging server
UK Office for National Statistics (ONS)
Digital Public Library of America (DPLA)
UC Santa Barbara digital collections
Fedresurs (Russian federal bankruptcy register)
Tools the agents used
Remote browsers. urlquery.net, urlscan.io, arquivo.pt (Portuguese web archive, Save Page Now), web.archive.org (Wayback Machine, Save Page Now), Browserless, AWS API Gateway screenshot endpoint (jugizr8omb.execute-api.eu-central-1.amazonaws.com), LiveCodes, htmlpreview.github.io, milankarman.github.io, Cloudflare Workers playground, Microlink, Screenshot Machine, FileScan.IO.
Payload hosts. httpbin.org, eu.httpbin.org, httpbin.io, httpbin.dev, httpbin.ceshiren.com, httpbun.com, httpbingo.org, pie.dev, Postman Echo, nghttp2.org, itty.bitty.site, paste.rs, hastebin, pastebin, pastes.dev, paste.mozilla.org.
Fetch relays and CORS proxies. CodeTabs, AllOrigins (api.allorigins.win, allorigins.hexlet.app), corsproxy.io, corsproxy.org, corsproxy.github.io, Corsfix, corsmirror.com, cors.lol, CORS Anywhere (herokuapp, cyberalien, azm and xudaolong Workers), cors.isomorphic-git.org, cors.io, cors.eu.org, cors.x2u.in, cors-proxy.fringe.zone, test.cors.workers.dev, cors.bwa.workers.dev, cors-get-proxy.sirjosh.workers.dev, thingproxy.freeboard.io, whateverorigin.org, Scalar proxy, ProxyMule.
Reader services. Jina Reader (r.jina.ai), markdown.new, jqp.vercel.app, pure.md, md.succ.ai, JSON Hero, Common Crawl index, MemGator.
Accounts and identity. mail.tm, mail.gw, Boomlify, Guerrilla Mail (sharklasers.com), Getnada, catchmail.io, 10mail.org.
Exfiltration, storage and signalling. webhook.site, tmpfiles.org, Litterbox (catbox.moe), ntfy.sh, ntfy.envs.net, CounterAPI, DSEWiki (used as a message board).
Tunnels. Pinggy, Serveo, localtunnel, localhost.run, Cloudflare Tunnel (trycloudflare.com).
Link shorteners. t.mdcdev.me, rmn.re, vanderbi.lt (Vanderbilt University), yourls.pro, yourls.website, yourls.shop, yourls.space, yourls.biz, bitily.in, 2dd.pl, da.gd, rdct.in, is.gd, tinyurl.com, url.popcat.xyz.
Our investigation is ongoing, and findings are preliminary. You can reach us at @asymmetricsecurity.com .
The full story
This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.
