My point was: some of the ranges ARE servers and WOULD present fake credentials including the X-Forwarded-For. I break the ranges down according to content, not whether some sub-ranges are dynamic. There are a lot of sub-ranges that are killers, whether dynamic or server.
Google Preview - and a lot more of google - is an automatic block here. I don't believe it makes a difference and the primary IP is in any case only blocked if it fails on other criteria.