Comment by jerf

Probably CGNAT, "Carrier-Grade NAT": https://en.wikipedia.org/wiki/Carrier-grade_NAT

Huge, huge numbers of machines behind a single external IP mean that your internet access carries all their reputation by proxy. Since switching off Comcast to a smaller fiber company that uses CGNAT I've seen somewhat more Cloudflare challenges.