The Role of Bots in API Attacks