You need to confirm whether the final ip of the calling interface is consistent with the one filled in the whitelist. It needs export ip, not local ip. You can confirm your export ip through the address "api.thesports.com/v1/ip/demo". The first digit of the returned "X-Forwarded-For" field is your export ip