Yeah, I cannot reproduce from any other location so it seems tied to our PAT address... Guess I have to actually do work. :) I suspect malware as our PAT is actually running less translations than typical. Checking with our IDS vendor. Thanks for the follow up. -----Original Message----- From: Rubens Kuhl [mailto:rubensk@gmail.com] Sent: Thursday, June 10, 2010 12:34 PM To: Thomas Magill Cc: nanog@nanog.org Subject: Re: Google Issues? This usually indicates a heavily malware-contaminated userbase or 1-to-N NAT/PAT with a large N. Having both is what usually triggers this, but sometimes if you are strong on one, it could be enough. Rubens On Thu, Jun 10, 2010 at 4:23 PM, Thomas Magill <tmagill@providecommerce.com> wrote:

Is anyone seeing warnings today from Google that they suspect that searches are coming from an automated source and asking to complete some captcha-type authentication to complete a search?  We have had a couple of reports on this and I want to make sure it isn't a google issue.  I know this isn't really an operator issue but there are enough knowledgeable people here that I thought I would ask.

Thomas Magill Network Engineer

Office: (858) 909-3777

Cell: (858) 869-9685 mailto:tmagill@providecommerce.com <mailto:tmagill@providecommerce.com>

provide-commerce 4840 Eastgate Mall

San Diego, CA  92121

ProFlowers <http://www.proflowers.com/>  | redENVELOPE <http://www.redenvelope.com/>  | Cherry Moon Farms <http://www.cherrymoonfarms.com/>  | Shari's Berries <http://www.berries.com/>