when using IP filtering I'm having a security exception with my requests missing authentication credentials for REST request.
is it possible to use IP filtering feature without user ?
IP Filtering is a feature within Elasticsearch security, and requires you to turn on security.
If you wish you can use the anonymous access feature within security to skip the requirement to enter a username & password, but I would strongly discourage it. It is not advisable to rely on IP filters as your only defense against things like ransomware attacks.
Elasticsearch's security features like authentication and role based access control can help keep your data safe.