Probably because from their side that behavior looks no different from certain types of attacks that they are familiar with and are actively working to block?