Take Actions on Threats

Overview

Akto enables you to quickly respond to malicious behavior by blocking the IP addresses of threat actors. When you block an IP address, Akto prevents all incoming requests from that source, helping you protect your APIs in real time.

You can block an IP address from two areas within API Threat Detection: Threat Actors and Threat Activity.

1. Block an IP from Threat Actors

1

Go to Threat Actors under API Threat Detection.

2

Select the threat actor whose activity you want to stop.

3

The detailed view for that actor opens.

4

In the top-right corner, select Block IP.

5

Confirm your action by selecting Block IP in the confirmation dialog.

2. Block an IP from Threat Activity

1

Go to API Threat Detection →Threat Activity.

2

Open the detailed view for the specific threat activity you want to address.

3

Select the Block IPs button on the right-hand side.

4

A confirmation dialog opens.

5

Select Save to block the IP address.

Important Note

Blocking an IP address is completely reversible. Once you block an IP, the Block IP button changes to Unblock IP, allowing you to restore access whenever needed.