To restrict access by IP address, go to Settings --> Security --> IP Addresses. Simply enter in a single IP address or a range of IP addresses and designate whether the restriction should apply to the web interface, the API, or both.
![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj-WD8cv_N_Oa4H1j-BOArOEuM4B2Qk0nk0TUo1xXE0S_05nHN4GsvRNkZ0CSHce7LguV7l1W2vgQWvRxnEibqlY7qgLnLsN6bjf1PydKkqTZIC63v17Slg_S33AbZ2oWVQ9Fru/s400/IPRestrictions.gif)
If there are no IPs entered, as is the default on accounts, then there are NO restrictions on which IP addresses can access your account. As soon as you enter at least one IP range, then that becomes the range from which your account must be accessed.
If a user attempts to login to the web interface from an unauthorized IP address, then the user will see the following message:
![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgJcWCABYTj66412R0JhDUFtYcwiP6fr2vApGL-XnwRBiA3JWcvswcCWP5T6RQ7RoDbPGb3PrFEDpjHIucEAnmm6ZKOCu76A-YGVy-4INTCMHTFfUofoLtwMCj-xI5gSFP0DP1S/s400/IPRange1.gif)
If the API is called by a node outside of the authorized IP addresses, then an exception will be thrown, as shown below:
![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiEIDuPSwT21Usj4uU4wcZf-qClznA2bXAvAmWjjHTocFu1BH42NJOf4vCfeINr-6ONmF0AqJbR0I43z4m49lzEI0mztTf9rucHdJQkBeQy-5fH4Dw4ZA7CuMTTGy7FhU2XQ7Fd/s400/IPRangeAPI.gif)