The Console now flags API users that have no IP allowlist, so you can see which API keys can be used from any network and add an allowlist.
Where to look
Go to Settings > Users, or open API Users in Developer Center. Each API user with an empty allowlist shows a warning. The table header shows how many API users have no allowlist, and you can add IP addresses from there.