I'm seeing bot-like activity from Cloudflare 104.28.246.0/24 and 104.28.214.0/24.
Spur.us says these IP's are used by the Vpngate VPN. VPNGate is a free public VPN Cloud operated by the Univ of Tsukuba, Japan. How a Japanese university can justify this sort of project (presumably using public money to pay private outfits like Cloudflare) is anyone's guess. Internet rif-raf are by far the largest users of such a network I would think. VPNGate seems to have been in operation for many years.
User-agents I'm seeing from this are:
Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 YaBrowser/22.7.0 Yowser/2.5 Safari/537.36
Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:114.0) Gecko/20100101 Firefox/114.0
Note that these cloudflare IP ranges are in the neighborhood of the iCloud public relay, presumably they don't overlap. Some chat going back to 2016 show that people have been looking for ways to grab their IP list. OVH and Hetzner mentioned.
