https://www.humansecurity.com/learn/blog/api-bot-attacks-the-hidden-threat-to-application-security