[127051] in North American Network Operators' Group
RE: Google Issues?
daemon@ATHENA.MIT.EDU (Thomas Magill)
Thu Jun 10 15:37:20 2010
Date: Thu, 10 Jun 2010 12:37:10 -0700
In-Reply-To: <AANLkTilFN5j5qN8wji8oIdkk-R5c-RwkklPpqmh05Xd6@mail.gmail.com>
From: "Thomas Magill" <tmagill@providecommerce.com>
To: "Rubens Kuhl" <rubensk@gmail.com>
Cc: nanog@nanog.org
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
Yeah, I cannot reproduce from any other location so it seems tied to =
our PAT address... Guess I have to actually do work. :) I suspect =
malware as our PAT is actually running less translations than typical. =
Checking with our IDS vendor. Thanks for the follow up.
-----Original Message-----
From: Rubens Kuhl [mailto:rubensk@gmail.com]=20
Sent: Thursday, June 10, 2010 12:34 PM
To: Thomas Magill
Cc: nanog@nanog.org
Subject: Re: Google Issues?
This usually indicates a heavily malware-contaminated userbase or
1-to-N NAT/PAT with a large N. Having both is what usually triggers
this, but sometimes if you are strong on one, it could be enough.
Rubens
On Thu, Jun 10, 2010 at 4:23 PM, Thomas Magill
<tmagill@providecommerce.com> wrote:
> Is anyone seeing warnings today from Google that they suspect that
> searches are coming from an automated source and asking to complete =
some
> captcha-type authentication to complete a search? =A0We have had a =
couple
> of reports on this and I want to make sure it isn't a google issue. =
=A0I
> know this isn't really an operator issue but there are enough
> knowledgeable people here that I thought I would ask.
>
>
>
> Thomas Magill
> Network Engineer
>
> Office: (858) 909-3777
>
> Cell: (858) 869-9685
> mailto:tmagill@providecommerce.com =
<mailto:tmagill@providecommerce.com>
>
>
> provide-commerce
> 4840 Eastgate Mall
>
> San Diego, CA =A092121
>
>
>
> ProFlowers <http://www.proflowers.com/> =A0| redENVELOPE
> <http://www.redenvelope.com/> =A0| Cherry Moon Farms
> <http://www.cherrymoonfarms.com/> =A0| Shari's Berries
> <http://www.berries.com/>
>
>
>
>
