Re: Sudden surge in CGNAT blacklisting

[TJ Trout via NANOG <nanog () lists nanog org>]

I remember reading about setting specific prefixes as residential maybe
that was via geofeed or whois comments, also it seems like you basically
need a separate AS for broadband customers if you do any type of hosting or
colocation as it will likely get flagged as vpn

On Thu, May 15, 2025 at 12:34 PM Eric C. Miller via NANOG <
nanog () lists nanog org> wrote:

> Has anyone else experienced a sudden increase in the past 2 weeks of
> blocks getting flagged as "VPN" or "Proxy?" We have some older leased space
> from HE and Cogent that got hammered seemingly all at once. We've started
> accelerating our migration to our ARIN space, but it's still odd why it's
> all of a sudden.
>
> Most of the addresses are between 32:1 and 256:1 CGNAT pool IPs, and there
> are other 256:1 IPs that remain unaffected. Each customer behind an IP is
> in the same subdivision.
>
> Eric
> _______________________________________________
> NANOG mailing list
>
> https://lists.nanog.org/archives/list/nanog () lists nanog org/message/LP3QJFMS47DGB4TY7BAYRSLLCVNGKN4I/
_______________________________________________
NANOG mailing list 
https://lists.nanog.org/archives/list/nanog () lists nanog org/message/7N36KN3BN5SU4COR3VZJNSRUKZZQXMHJ/