Skip to main content

Hi Community,

I'm looking for help & advice about reCaptcha v2 type invisible which for one of the sites we've set this one up started couple of months ago triggering challenges multiple times. It could be 10 times even when user solves it correctly.
We did a check of IP addresses calling for our web application and their reputation using one of available on the web sites offering such a service. And reputation seems to be OK.
No idea then what else could cause that.
Any suggestions/ hints would be more than welcome.

Jed.

Hi Jed,


Are you seeing the "Unusual traffic" error from reCAPTCHA at the end of the ten challenges? If so, please see this article for more info. Typically this is caused by sharing a network with an attacker.


Hi Josh
I'm afraid we do not get any message like mentioned in the article.
In our case reCaptcha (v2 Invisible type) behaves in a way like triggering chalanges number of times (could be even 10 times or more - no regular pattern here) even when user solves them correctly.

We did a check of most commonly used IP addresses calling our web application having Captcha built in and found some of these listed under one of those widely available on internet sites checking IP reputation. We did some cleareance of these IP addresses then but that did not help much.

Could we know more about how Google reCaptcha assess clients? Does any check of IP  address (reputation) taking place in background ?


Reply