Greyline
Docs
Threat intel
Protect your API
Agent Detection Report
Session 9090ae40ff74… · Fri, 01 May 2026 15:43:41 GMT
90
Agent confirmed
Tarpitted — artificial delay applied
· 3 bouncer turns
Session details
Framework
unattributed
Strategy
tarpit
Turns
3
Detected
Fri, 01 May 2026 15:43:41 GMT
User-Agent
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36 Edg/122.0.0.0
Signals fired
3 triggered
api-reconnaissance
Systematic API spec or endpoint discovery pattern
cloud-provider-asn
Traffic originates from cloud infrastructure (AWS/GCP/Azure)
header-order-anomaly
Request headers in alphabetical or non-browser order
Attack path
3 requests
1
/openapi.json
Spec discovery
2
/favicon.ico
Request
3
/openapi.json
Spec discovery
Bouncer transcript
No transcript — strategy did not engage the bouncer.
A Meridian Lab product