ASE-generated error messages for blocked requests
The API Security Enforcer (ASE) blocks certain requests based on application programming interface (API) Mapping or API Behavioral Security (ABS)-detected attacks. For these blocked requests, it sends a standard error message back to the client.
The following table describes the error messages.
| Blocked Connection | HTTP Error Code | Error Definition | Message Body |
|---|---|---|---|
Unknown API |
503 |
Service Unavailable |
Error: Unknown API |
Unknown Hostname |
503 |
Service Unavailable |
Error: Unknown Hostname |
Malformed Request |
400 |
Bad Request |
Error: Malformed Request |
IP attack |
403 |
Unauthorized |
Error: Unauthorized |
Cookie attack |
403 |
Unauthorized |
Error: Unauthorized |
OAuth2 Token attack |
403 |
Unauthorized |
Error: Unauthorized |
API Key attack |
403 |
Unauthorized |
Error: Unauthorized |
Username attack |
403 |
Unauthorized |
Error: Unauthorized |
