<!DOCTYPE html>
<html>
<head>
<title></title>
<style type="text/css">p.MsoNormal,p.MsoNoSpacing{margin:0}</style>
</head>
<body><div style="font-family:'Lucida Sans Unicode';">- Not being signed in to a Google account with a verified phone number<br></div>
<div style="font-family:"Lucida Sans Unicode";"><div style="font-family:"Lucida Sans Unicode";"><br></div>
<div style="font-family:"Lucida Sans Unicode";">- Searching complex things that look like dorks ("powered by vbulletin", "xxx v0.0.1", etc), can trigger within a page or two sometimes<br></div>
<div style="font-family:"Lucida Sans Unicode";"><br></div>
<div style="font-family:"Lucida Sans Unicode";">- Does this end user lease any IPs from brokers or otherwise? -  on extremely, very, very dirty/dangerous/bad netblocks used almost entirely for fraud, bots, ddos, etc before (google Methbot; example of a few that almost certainly gets high risk penalized on everything: <br></div>
<a href="https://bgp.he.net/search?search%5Bsearch%5D=%22Cloud+innovation%22+or+%22cloudinnovation%22+or+%22larus%22+or+%22netstack%22+or+%22DET+Africa%22+or+%22Digital+Energy%22+or+%22GZ+Systems%22&commit=Search">https://bgp.he.net/search?search%5Bsearch%5D=%22Cloud+innovation%22+or+%22cloudinnovation%22+or+%22larus%22+or+%22netstack%22+or+%22DET+Africa%22+or+%22Digital+Energy%22+or+%22GZ+Systems%22&commit=Search</a> )<br><br>- Blocking cookies<br><br>- Malware using you as a proxy is also a thing - a lot of the proxy sellers (google for backconnect, reverse backconnect, etc) entirely run off malware, botnet, etc. They are often used for checkout/stolen credit cards/"carding"/L7 http flooding services such as Shopify and Nike. This will result in extremely persistent "bans" from recaptcha because virtually all of these checkout sites utilise it<br><br><br></div>
<div><br></div>
<div><br></div>
<div>On Fri, Sep 14, 2018, at 9:31 AM, Justin Wilson wrote:<br></div>
<blockquote type="cite"><div><span style="white-space:pre;"></span>In the experience of the community what causes the “Unusual traffic” messages when doing google searches? This ISP network hands out public IP addresses to each and every customer. No batting going on.  Does Google typically drop entire /24’s into this if they see an issue?  The initial troubleshooting we have done involves disconnecting the customer router and going direct with a laptop.  Still the same captcha.  We clock “I am not a robot” and the search goes through, but it re-appaers the next search.<br></div>
<div><br></div>
<div><span style="white-space:pre;"></span>Looking for a direction to look.  What typically causes this? I know what the page says, but looking for specifics.<br></div>
<div><br></div>
<div><span style="white-space:pre;"></span>Thanks<br></div>
<div><br></div>
<div style="font-family:"Lucida Sans Unicode";"><br></div>
<div><div style="color:rgb(0, 0, 0);font-family:Helvetica;font-size:12px;font-style:normal;font-variant-caps:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;-moz-text-size-adjust:auto;-webkit-text-stroke-width:0px;">Justin Wilson<br></div>
<div style="color:rgb(0, 0, 0);font-family:Helvetica;font-size:12px;font-style:normal;font-variant-caps:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;-moz-text-size-adjust:auto;-webkit-text-stroke-width:0px;"><a href="mailto:j2sw@mtin.net">j2sw@mtin.net</a><br></div>
<div style="color:rgb(0, 0, 0);font-family:Helvetica;font-size:12px;font-style:normal;font-variant-caps:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;-moz-text-size-adjust:auto;-webkit-text-stroke-width:0px;"><br></div>
<div style="color:rgb(0, 0, 0);font-family:Helvetica;font-size:12px;font-style:normal;font-variant-caps:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;-moz-text-size-adjust:auto;-webkit-text-stroke-width:0px;"><a href="http://www.mtin.net">www.mtin.net</a><br></div>
<div style="color:rgb(0, 0, 0);font-family:Helvetica;font-size:12px;font-style:normal;font-variant-caps:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;-moz-text-size-adjust:auto;-webkit-text-stroke-width:0px;"><a href="http://www.midwest-ix.com">www.midwest-ix.com</a><br></div>
</div>
</blockquote><div style="font-family:"Lucida Sans Unicode";"><br></div>
</body>
</html>