This started happening ~3 hours ago according to my logs. We've not made any changes that we're aware of, and our source IP's haven't changed.
What's interesting is that in this case, the 'unauthorized IP address' being identified in the 403 is 158.115.141.209, which is a Cisco Meraki IP address...not our source. Something goof up with a redirect?
Anyone else seeing this?