Before I go off digging into this one further, I am just curious as to whether this is yourselves performing these requests on my site:

IP addresses are Amazon AWS, the API Key used doesn't exist on my site and the request data is:

{
    "query": "query Stats { core { stats { contentCount, memberCount } } }"
}

Thanks

Looks like this is left over from the Mobile app directory, we'll get that disabled.

If it matters on a per-site basis, I'm getting them too.

1 minute ago, CheersnGears said:

If it matters on a per-site basis, I'm getting them too.

Anyone that enabled the mobile app beta will get it once a week