diff --git a/client/index.js b/client/index.js
index 7193827fc..ad3ea84f7 100755
--- a/client/index.js
+++ b/client/index.js
@@ -31,7 +31,6 @@ const middleware = new Middleware();
 app.use(middleware.expressJsonRequestBodySizeLimiter());
 app.use(middleware.expressUrlencdedRequestBodySizeLimiter());
 app.use(middleware.corsLimiter());
-app.use(middleware.ipWhitelistLimiter());
 app.use(middleware.blockchainApiRateLimiter);
 
 const eventHandler = NodeConfigs.ENABLE_EVENT_HANDLER === true ? new EventHandler() : null;
@@ -112,6 +111,9 @@ app.get('/last_block_number', (req, res, next) => {
     .end();
 });
 
+// NOTE(platfowner): This middleware should be placed after minimally required APIs (see above).
+app.use(middleware.ipWhitelistLimiter());
+
 /**
  * Dev Client GET APIs (available to whitelisted IPs)
  */