API scan detected on service
Cette page n'est pas encore disponible en français, sa traduction est en cours.
Si vous avez des questions ou des retours sur notre projet de traduction actuel,
n'hésitez pas à nous contacter.
Goal
Detect when your API endpoints are being probed by a third party. The goal of the attacker may be to find undocumented APIs or functionality.
Strategy
Monitors the HTTP errors produced by the application in API endpoints and triggers when an elevated rate is detected.
The signal is set to LOW severity, as the error produced by an API endpoint depends on the actual implementation of each application.
Triage and response
- Review the
4xx errors to detect if your application is temporarily misbehaving. - Consider temporarily blocking the attacking IP(s) to prevent them from overloading your systems or identifying confidential resources.
