after doing some tests with api calls and using a wrong key, access for the IP address I've used has been blocked for more than 1 hour.
Debugging showed the following:
[httpsd 19916 - 1672924146 warning] _api_key_lock_out -- Request from x.x.x.x will be ignored. Locked out for 3807 more seconds.
I couldn't find an option to reset this lockout timer.