Imperva Cyber Community

Hi,

Let's say we have two people behind the same public IP address. Both users access the same application.

• The first user uses automation, which triggers the web scraping condition and gets blocked according to the ABP policy.
• The second user uses a regular browser and interacts with the application normally.

After some time, the second user is also flagged for web scraping.
Even after rebooting the ISP router, the same issue occurs.

The question is: Is this behavior normal?
And does the detection have a relationship with the IP reputation based on the previous behavior of that public IP address?