Scanning for AI Models, (Tue, Apr 14th)

DShield sensors have detected ongoing reconnaissance probes targeting various AI models and platforms including claude, openclaw, and huggingface, beginning March 10, 2026. The scanning activity has persisted continuously since its initial detection. While the article documents the reconnaissance phase, no specific threat actors or malicious tools have been identified. The probes suggest an adversary is conducting infrastructure or service discovery, likely to identify vulnerabilities or enumerate accessible AI endpoints for subsequent attack phases. Organizations running AI services should ensure proper authentication, implement rate limiting, monitor for anomalous access patterns, and review access controls on AI model endpoints to mitigate potential exploitation.

Starting March 10, 2026, my DShield sensor started getting probe for various AI models such as claude, openclaw, huggingface, etc. Reviewing the data already reported by other DShield sensors to ISC, the DShield database shows reporting of these probes started that day and has been active ever since.

DShield sensors have detected ongoing reconnaissance probes targeting various AI models and platforms including claude, openclaw, and huggingface, beginning March 10, 2026. The scanning activity has persisted continuously since its initial detection. While the article documents the reconnaissance phase, no specific threat actors or malicious tools have been identified. The probes suggest an adversary is conducting infrastructure or service discovery, likely to identify vulnerabilities or enumerate accessible AI endpoints for subsequent attack phases. Organizations running AI services should ensure proper authentication, implement rate limiting, monitor for anomalous access patterns, and review access controls on AI model endpoints to mitigate potential exploitation. Starting March 10, 2026, my DShield sensor started getting probe for various AI models such as claude, openclaw, huggingface, etc. Reviewing the data already reported by other DShield sensors to ISC, the DShield database shows reporting of these probes started that day and has been active ever since. Starting March 10, 2026, my DShield sensor started getting probe for various AI models such as claude, openclaw, huggingface, etc. Reviewing the data already reported by other DShield sensors to ISC, the DShield database shows reporting of these probes started that day and has been active ever since.