The connection keys I send out have been causing the hosting service to lock
out the IP number of the user. Is this because Contribute is not authenticating
to the password protected directory, and then just keeps trying?

Is there a way around this or something I can do to avoid it (eg protect the
site in another way)?

help appreciated.