After updating the otx-api-ip data adapter to include my OTX API key, I’m no longer getting results against inbound IP addresses. Before using the API key, I was consistently getting results when looking at inbound IP addresses coming from our firewall. Has anyone else experienced this behavior? I’m subscribed to a variety of users and pulses within OTX. Not sure what I’m doing wrong. Is there something else I need to do or configure that I’m missing?
did you checked if you might be ratelimited or similar?
No. I’ve looked everywhere on OTX and cannot find any details about rate limits for the API, etc. The lookups are happening and I can see the cache for the lookup table growing, it’s just not getting any hits. I’ll keep an eye on it and see what’s going on. Where would I check my OTX rate limits?