The API Security Enforcer (ASE) blocks certain requests based on API Mapping or API Behavioral Security (ABS)-detected attacks. For these blocked requests, it sends a standard error message back to the client.
The following table describes the error messages.
| Blocked Connection | HTTP Error Code | Error Definition | Message Body |
|---|---|---|---|
|
Unknown API |
503 |
Service Unavailable |
Error: Unknown API |
|
Unknown Hostname |
503 |
Service Unavailable |
Error: Unknown Hostname |
|
Malformed Request |
400 |
Bad Request |
Error: Malformed Request |
|
IP attack |
403 |
Unauthorized |
Error: Unauthorized |
|
Cookie attack |
403 |
Unauthorized |
Error: Unauthorized |
|
OAuth2 Token attack |
403 |
Unauthorized |
Error: Unauthorized |
|
API Key attack |
403 |
Unauthorized |
Error: Unauthorized |
|
Username attack |
403 |
Unauthorized |
Error: Unauthorized |
