TEC > Block REST API requests coming from EA.

functions.php

<?php
/**
 * Block REST API requests coming from Event Aggregator. Basically blocks imports.
 * It can block other sites trying to siphon events with EA through the "Other URL" source.
 *
 * Usage: Add the snippet with a plugin like Code Snippets or to your functions.php file.
 *
 * @author: Andras Guseo
 *
 * Plugins required: The Events Calendar
 *
 * @since November 7, 2024 Initial version.
 */

add_filter( 'rest_pre_dispatch', function ( $result, $server, $request ) {
	// List of IPs to block
	$blocked_ips = [ '199.189.224.106' ];

	// Get the client IP address
	$client_ip = $_SERVER['REMOTE_ADDR'];

	// Check if this is a request to the events endpoint
	if ( $request->get_route() === '/tribe/events/v1/events' ) {
		// If the client IP is in the blocked list, deny access
		if ( in_array( $client_ip, $blocked_ips ) ) {
			return new WP_Error(
				'rest_forbidden',
				__( 'Access to this endpoint is blocked.' ),
				array( 'status' => 403 )
			);
		}
	}

	return $result;
}, 10, 3 );