Interestingly I had the same experience just now.
I am getting back into botting after a ~4 year break and here is what just happened:
- Created an osrs account via my mobile phone (nice roaming IP which changes every time I disconnect and reconnect my IP)
- Using a pretty ghetto setup to get started with minimal investment, consisting of:
- Everyone's favorite free "IEuser" Windows 10 image
- Free VPN with kill switch installed on the VM
- I proceed to hand-do Tutorial island. I even set myself up as an ironman in the slight hope that this would make my account less suspicious when I actually began to run bots.
- I get my Ironman armour (manually) then allow my account to AFK while i'm off developing script #1 (just a noddy "run to nearest bank" script)
- I come back approx. 20 minutes later to enjoy my "serious rule breaking" login page
Can anyone with more experience share their thoughts? I personally suspect its the IP swapping from a UK mobile IP to a UK datacentre IP, which is almost certainly flagged, but could the VM be a culprit? I am unsure exactly what telemetery Jagex sends back.