I replied in detail via email, but to close up the public thread here: these specific IPs are inbound-only and cannot make requests. The specific IP address in @jthen’s logs is the inbound IP address assgned to their app.
If you are parsing x-forwarded-for, you need to remove the rightmost element as that is the IP address of your app. Request headers · Fly Docs