Bubble runs on dynamic IPs so it can be a variation of many different IPs, the only way to do IP auth is on a dedicated plan unless someone has found a work around.