...

This message will be returned for any Unauthorized IP address that attempts a remote connection using the JavaScript API, SOAP API, or one of the legacy XML APIs. This is a security measure to lessen the chance of someone stealing credentials and harming a merchant's account. 

Solution

(A user with "Edit Users" permission enabled)

Login to https://secure.ultracart.com and navigate to:

...