How to Detect Suspicious API Traffic