Whitelist for WordPress Admin's IP (e.g. Rapid Backend Calls From Plugins)

Can anyone point me to any docs for the current procedure to whitelist an IP for a new WordPress site?

I see WordPress | ApisCP Docs et al.

In the past we had false positive block of client’s WAN (dynamic) IP address due to plugin actions generating rapid calls (appearing as bad actor.)

As a result we had to manually allow (recidive, mod-evasive, etc?), e.g.

# cpcmd scope:set apache.evasive-whitelist '<IP_ADDRESS>'
# cpcmd scope:set apache.shield-whitelist <IP_ADDRESS>

Asking specifically because I think I saw some mention of changes to firewall/blocking and I have not kept up.

Edit: To clarify, the main issue with WordPress specifically, was hitting the 429 resource limit error pages due to plugins generated requests rapidly.