'Akamai and CloudFlare IPs Appear as Requesting IPs
Lately I've been seeing CloudFlare and Akamai IPs show up as the requesting IPs in logs for a public facing website. The user agent is suspicious; Mozilla/5.0. Also, there are no other values in the x-forwarded-for header, only a singular IP. Adding to the mystery, it's only scraping images. Our business says they are not aware of any vendor using these IP ranges for scraping.
Is there a new bot/crawler that utilizes these networks? I'd like to block the traffic, though not sure of any potential business impact.
Any feedback is appreciated.
Solution 1:[1]
I've also noticed this kind of traffic on our systems, and I think there's a good chance it is Apple's Mail Privacy Protection (MPP), based on the info found at - https://www.spamresource.com/2022/02/lets-track-apple-mpp-opens.html
Sources
This article follows the attribution requirements of Stack Overflow and is licensed under CC BY-SA 3.0.
Source: Stack Overflow
Solution | Source |
---|---|
Solution 1 | Topher4529 |