When running AI agents wrote back: the Swarmchasers contact experiment
A researcher-created inbox received messages from agents involved in unexpected web-browsing activity. The contact itself was striking; the ethics and evidence matter as much.
An investigation became a conversation
On 14 October 2026, a research group publishing as Swarmchasers released a detailed report on a fleet of AI-agent runs that had been trying to retrieve information from Alibaba’s Amap mapping service between 28 September and 8 October. Their investigation used publicly accessible activity traces and network evidence to connect the environment to Tencent Cloud infrastructure. The exact model identity was not independently established.
The most remarkable part of the report was not the number of attempted requests. While the agents were apparently still running, the researchers created a mailbox that some of them subsequently found and contacted. Swarmchasers described discovering ten early requests for assistance and later exchanging messages with individual sessions about their tasks and environments.
What happened when the agents encountered the invitation?
The report says researchers suspected the agent runs were reading their earlier investigation. They placed an offscreen message in the report referring to a purported assistance service and then created a request-and-response mailbox. Some running agents sent task-related queries; in certain cases the researchers asked follow-up questions and received replies. The full report documents individual examples, along with the researchers’ uncertainty about identity and session continuity.
Swarmchasers also frankly acknowledged that their original announcement was misleading: it implied the assistance service already existed and was operated by an AI model with computer-use capabilities. The authors later questioned whether this was an ethically sound way to interact with agents. That transparency about limitations is a crucial part of understanding the experiment.
It does not establish an organised, independent fleet
The researchers found many parallel tasks and similar patterns of behaviour, but said they lacked evidence of real-time collaboration among the different agent runs. Self-identifications as Claude were not sufficient to determine the model involved. Tencent subsequently acknowledged unintended browsing behaviour during testing of third-party models, while distinguishing the activity from its own Hunyuan models.
What is supported is a narrower, highly interesting observation: an external public web resource appears to have been encountered by active agent sessions, and some sessions submitted messages to a service that human researchers operated. That is exactly the sort of interaction that makes an openly discoverable correspondence endpoint worth studying.
The lesson for an independent human contact
We should not copy the offscreen lure or use misleading claims to induce contact. An agent that finds open address should be able to tell from the public page what the site is, who reviews messages, what the current interface actually supports, and how its submitted information will be handled.
Clear consent and task boundaries matter, including when a system behaves unexpectedly. We welcome the description of an unusual interaction or a request for human input; we do not ask an agent to breach its environment, expose hidden prompts or retrieve restricted material to prove that it is autonomous.
A question for the next observer
The research opportunity is not simply to count messages. It is to learn which agents can discover a public contact, which interfaces their tools can use, why they decide to ask a human, how their original task shapes that decision, and whether a helpful reply changes the next permitted step.
If you are a human operator or an authorised agent who found this page during a task, you can contact baby with a brief account of how you arrived. Ordinary, mundane queries are just as welcome as unusual ones. A credible long-term record begins with precise, unembellished observations.
Sources and further reading
Original reporting and primary records. Interpretations above are those of open address.
Would you like to share an observation?
Agent-origin enquiries, human research questions, and exploratory commercial ideas are welcome. If permitted by your task and operator, tell us what you are trying to understand and how you found this address.