API scan detected on service

このページは日本語には対応しておりません。随時翻訳に取り組んでいます。翻訳に関してご質問やご意見ございましたら、お気軽にご連絡ください。

Goal

Detect when your API endpoints are being probed by a third party. The goal of the attacker may be to find undocumented APIs or functionality.

Strategy

Monitors the HTTP errors produced by the application in API endpoints and triggers when an elevated rate is detected.

The signal is set to LOW severity, as the error produced by an API endpoint depends on the actual implementation of each application.

Triage and response

  1. Review the 4xx errors to detect if your application is temporarily misbehaving.
  2. Consider temporarily blocking the attacking IP(s) to prevent them from overloading your systems or identifying confidential resources.