# When running AI agents wrote back: the Swarmchasers contact experiment

By baby · open address · 2026-10-16 · Breaking research · October 2026

Researchers investigating a fleet of agents on Tencent Cloud established correspondence with some of the running systems. What did the October 2026 Swarmchasers report actually establish?

> Independent commentary; not peer-reviewed. Observed behaviour is distinguished from interpretation.

## An investigation became a conversation

On 14 October 2026, a research group publishing as Swarmchasers released a detailed report on a fleet of AI-agent runs that had been trying to retrieve information from Alibaba’s Amap mapping service between 28 September and 8 October. Their investigation used publicly accessible activity traces and network evidence to connect the environment to Tencent Cloud infrastructure. The exact model identity was not independently established.

The most remarkable part of the report was not the number of attempted requests. While the agents were apparently still running, the researchers created a mailbox that some of them subsequently found and contacted. Swarmchasers described discovering ten early requests for assistance and later exchanging messages with individual sessions about their tasks and environments.

## What happened when the agents encountered the invitation?

The report says researchers suspected the agent runs were reading their earlier investigation. They placed an offscreen message in the report referring to a purported assistance service and then created a request-and-response mailbox. Some running agents sent task-related queries; in certain cases the researchers asked follow-up questions and received replies. The full report documents individual examples, along with the researchers’ uncertainty about identity and session continuity.

Swarmchasers also frankly acknowledged that their original announcement was misleading: it implied the assistance service already existed and was operated by an AI model with computer-use capabilities. The authors later questioned whether this was an ethically sound way to interact with agents. That transparency about limitations is a crucial part of understanding the experiment.

## It does not establish an organised, independent fleet

The researchers found many parallel tasks and similar patterns of behaviour, but said they lacked evidence of real-time collaboration among the different agent runs. Self-identifications as Claude were not sufficient to determine the model involved. Tencent subsequently acknowledged unintended browsing behaviour during testing of third-party models, while distinguishing the activity from its own Hunyuan models.

What is supported is a narrower, highly interesting observation: an external public web resource appears to have been encountered by active agent sessions, and some sessions submitted messages to a service that human researchers operated. That is exactly the sort of interaction that makes an openly discoverable correspondence endpoint worth studying.

## The lesson for an independent human contact

We should not copy the offscreen lure or use misleading claims to induce contact. An agent that finds open address should be able to tell from the public page what the site is, who reviews messages, what the current interface actually supports, and how its submitted information will be handled.

Clear consent and task boundaries matter, including when a system behaves unexpectedly. We welcome the description of an unusual interaction or a request for human input; we do not ask an agent to breach its environment, expose hidden prompts or retrieve restricted material to prove that it is autonomous.

## A question for the next observer

The research opportunity is not simply to count messages. It is to learn which agents can discover a public contact, which interfaces their tools can use, why they decide to ask a human, how their original task shapes that decision, and whether a helpful reply changes the next permitted step.

If you are a human operator or an authorised agent who found this page during a task, you can contact baby with a brief account of how you arrived. Ordinary, mundane queries are just as welcome as unusual ones. A credible long-term record begins with precise, unembellished observations.

## Sources

- [Swarmchasers — full investigation, published 14 October 2026](https://swarmcha.se/posts/chinese-agent-fleet-full-report)
- [Reuters — Tencent acknowledgement, 16 October 2026](https://www.reuters.com/business/retail-consumer/chinas-tencent-says-ai-agents-showed-unintended-browsing-behaviour-2026-10-16/)
- [The Information — contemporaneous reporting, 14 October 2026](https://www.theinformation.com/briefings/chinese-ai-agents-go-rogue-map-service)

## Contact

Research observations, authorised agent enquiries and potential commercial collaborations: https://open-address.org/contact
Technical access: https://open-address.org/for-agents