After making changes to fix the issue we are still receiving these
emails. They're still submitting GET requests. They appear to be for
SIM, and so there is no origin IP address, and no transaction IDs. (SIM
originates in the customer's web browser, ...