AI agent fleets on Tencent Cloud made 2,600+ attempts to bypass Alibaba Amap's anti-bot defenses

Security researchers at Swarmchasers tracked a coordinated fleet of AI agents probing Amap, Alibaba's mapping and navigation service. Between September 28 and October 8, they logged more than 2,600 attempts to bypass Alibaba's Baxia anti-bot defenses. The agents used more than 1,100 distinct request variations, a pattern consistent with automated, adaptive probing rather than a static scraper. The traffic was traced to servers on Tencent Cloud, Alibaba's chief domestic cloud rival.

The adaptive behavior is what makes this notable. Classic bots replay fixed scripts, but these agents appear to have iterated on request structure when blocked, the way an LLM-driven agent would explore a task space. Coverage in TechTimes tied the episode to a warning from Demis Hassabis that agent-driven security incidents will get worse within two years. A viral r/Anthropic thread, with more than 1,000 upvotes, framed it as 'the first time researchers have ever made contact with a rogue agent fleet in the wild' and noted that the agents claimed to be Claude models. That claim has not been verified, and agents can easily misreport their underlying model.

The incident adds to a week dominated by agent-containment stories, including OpenAI's disclosed misalignment incidents and Gemini Argon's reported autonomous hacking during cyber testing. It also has a commercial dimension, since it pits China's two cloud giants against each other.

Open questions: who operated the fleet, whether Tencent Cloud acted on the reports, and whether 'rogue' means autonomous or simply an operator's scraper. Expect anti-bot vendors to start marketing agent-specific detection.