In the experience of the community what causes the “Unusual traffic” messages when doing google searches? This ISP network hands out public IP addresses to each and every customer. No batting going on. Does Google typically drop entire /24’s into this if they see an issue? The initial troubleshooting we have done involves disconnecting the customer router and going direct with a laptop. Still the same captcha. We clock “I am not a robot” and the search goes through, but it re-appaers the next search. Looking for a direction to look. What typically causes this? I know what the page says, but looking for specifics. Thanks Justin Wilson j2sw@mtin.net www.mtin.net www.midwest-ix.com
As I understand it, no one really knows. They refuse to tell anyone. On Fri, Sep 14, 2018 at 12:31 PM, Justin Wilson <lists@mtin.net> wrote:
In the experience of the community what causes the “Unusual traffic” messages when doing google searches? This ISP network hands out public IP addresses to each and every customer. No batting going on. Does Google typically drop entire /24’s into this if they see an issue? The initial troubleshooting we have done involves disconnecting the customer router and going direct with a laptop. Still the same captcha. We clock “I am not a robot” and the search goes through, but it re-appaers the next search.
Looking for a direction to look. What typically causes this? I know what the page says, but looking for specifics.
Thanks
Justin Wilson j2sw@mtin.net
www.mtin.net www.midwest-ix.com
Yeah google captcha is fun, I trigger this all the time when relentlessly searching for something, ironically I giggle at the idea that my searching is so extreme it's classified as a bot at times. On Fri, 14 Sep 2018 at 10:32, Justin Wilson <lists@mtin.net> wrote:
In the experience of the community what causes the “Unusual traffic” messages when doing google searches? This ISP network hands out public IP addresses to each and every customer. No batting going on. Does Google typically drop entire /24’s into this if they see an issue? The initial troubleshooting we have done involves disconnecting the customer router and going direct with a laptop. Still the same captcha. We clock “I am not a robot” and the search goes through, but it re-appaers the next search.
Looking for a direction to look. What typically causes this? I know what the page says, but looking for specifics.
Thanks
Justin Wilson j2sw@mtin.net
www.mtin.net www.midwest-ix.com
Im going with the corporate greed/free labor angle. Perhaps they need more training data for their cars and figure a couple small ISP/businesses worth of people is worth flipping over temporarily? This email has been sent from my phone. Please excuse any brevity, typos, or lack of formality. ________________________________ From: Selphie Keller <selphie.keller@gmail.com> Sent: Friday, September 14, 2018 17:20 To: lists@mtin.net Cc: NANOG list Subject: Re: Google Captcha Yeah google captcha is fun, I trigger this all the time when relentlessly searching for something, ironically I giggle at the idea that my searching is so extreme it's classified as a bot at times. On Fri, 14 Sep 2018 at 10:32, Justin Wilson <lists@mtin.net<mailto:lists@mtin.net>> wrote: In the experience of the community what causes the “Unusual traffic” messages when doing google searches? This ISP network hands out public IP addresses to each and every customer. No batting going on. Does Google typically drop entire /24’s into this if they see an issue? The initial troubleshooting we have done involves disconnecting the customer router and going direct with a laptop. Still the same captcha. We clock “I am not a robot” and the search goes through, but it re-appaers the next search. Looking for a direction to look. What typically causes this? I know what the page says, but looking for specifics. Thanks Justin Wilson j2sw@mtin.net<mailto:j2sw@mtin.net> www.mtin.net<https://na01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.mtin.net&data=02%7C01%7C%7Cedc5b3d0cc6e4846700408d61a87de0a%7C453303889ca9424bbe1a29721272041d%7C1%7C0%7C636725568182245095&sdata=G1g2F5wE5Wc%2B31zy%2FGylJK5%2FWjWr%2FgA3kr%2FPhMkYzZg%3D&reserved=0> www.midwest-ix.com<https://na01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.midwest-ix.com&data=02%7C01%7C%7Cedc5b3d0cc6e4846700408d61a87de0a%7C453303889ca9424bbe1a29721272041d%7C1%7C0%7C636725568182255104&sdata=XxMYA%2BmSFyYUyzL2sF7bWehtv8EiNBIXspfgW%2FxIIgI%3D&reserved=0>
- Not being signed in to a Google account with a verified phone number - Searching complex things that look like dorks ("powered by vbulletin", "xxx v0.0.1", etc), can trigger within a page or two sometimes - Does this end user lease any IPs from brokers or otherwise? - on extremely, very, very dirty/dangerous/bad netblocks used almost entirely for fraud, bots, ddos, etc before (google Methbot; example of a few that almost certainly gets high risk penalized on everything: https://bgp.he.net/search?search%5Bsearch%5D=%22Cloud+innovation%22+or+%22cloudinnovation%22+or+%22larus%22+or+%22netstack%22+or+%22DET+Africa%22+or+%22Digital+Energy%22+or+%22GZ+Systems%22&commit=Search ) - Blocking cookies - Malware using you as a proxy is also a thing - a lot of the proxy sellers (google for backconnect, reverse backconnect, etc) entirely run off malware, botnet, etc. They are often used for checkout/stolen credit cards/"carding"/L7 http flooding services such as Shopify and Nike. This will result in extremely persistent "bans" from recaptcha because virtually all of these checkout sites utilise it On Fri, Sep 14, 2018, at 9:31 AM, Justin Wilson wrote:
In the experience of the community what causes the “Unusual traffic” messages when doing google searches? This ISP network hands out public IP addresses to each and every customer. No batting going on. Does Google typically drop entire /24’s into this if they see an issue? The initial troubleshooting we have done involves disconnecting the customer router and going direct with a laptop. Still the same captcha. We clock “I am not a robot” and the search goes through, but it re-appaers the next search.> Looking for a direction to look. What typically causes this? I know what the page says, but looking for specifics.> Thanks
Justin Wilson j2sw@mtin.net
www.mtin.net www.midwest-ix.com
Solving a captcha issues an exemption cookie. If you're being blocked again on the "next search" this implies that cookie isn't working because: - your "next search" was several hours later, and the exemption cookie expired - you cleared cookies (or used a different browser) - you're doing something abusive from that browser that gets your exemption cookie blocked Damian On Fri, Sep 14, 2018 at 9:32 AM Justin Wilson <lists@mtin.net> wrote:
In the experience of the community what causes the “Unusual traffic” messages when doing google searches? This ISP network hands out public IP addresses to each and every customer. No batting going on. Does Google typically drop entire /24’s into this if they see an issue? The initial troubleshooting we have done involves disconnecting the customer router and going direct with a laptop. Still the same captcha. We clock “I am not a robot” and the search goes through, but it re-appaers the next search.
Looking for a direction to look. What typically causes this? I know what the page says, but looking for specifics.
Thanks
Justin Wilson j2sw@mtin.net
www.mtin.net www.midwest-ix.com
participants (6)
-
Chris Gross -
Damian Menscher -
Justin Wilson -
nop＠imap.cc -
Ross Tajvar -
Selphie Keller