If the AJAX request is coming from a different site and trying to reach yours, then it’s being blocked by the anti-bot security system.