A logic app Get-VirusTotalIPReport is not working

Question

I am trying to automate IP enrichment using the Virus Total API.

I have set up a logic app and tied it to a respective analytical rule but I am getting the following error.

This is a test instance and we have only few resources running on it.

Answer 1

if you are using Public API

it is limited to 500 requests per day and a rate of 4 requests per minute.

To solve the 4 request per min problem

you can add a delay to ensure requests do not exceed the quota.

{
  "definition": {
    "$schema": "https://schema.management.azure.com/providers/Microsoft.Logic/schemas/2016-06-01/workflowdefinition.json#",
    "actions": {
      "HTTP": {
        "inputs": {
          "method": "GET",
          "uri": "https://www.virustotal.com/api/v3/ip_addresses/@{variables('IPAddress')}",
          "headers": {
            "x-apikey": "@{variables('APIKey')}"
          }
        },
        "runAfter": {},
        "type": "Http"
      },
      "Delay": {
        "type": "Delay",
        "inputs": {
          "interval": {
            "count": 1,
            "unit": "Minute"
          }
        },
        "runAfter": {
          "HTTP": [
            "Succeeded"
          ]
        }
      }
    },
    "triggers": {
      "manual": {
        "type": "Request",
        "inputs": {
          "schema": {}
        }
      }
    },
    "outputs": {},
    "description": ""
  },
  "parameters": {
    "IPAddress": {
      "defaultValue": "8.8.8.8",
      "type": "String"
    },
    "APIKey": {
      "defaultValue": "your_virustotal_api_key",
      "type": "SecureString"
    }
  }
}