<![CDATA[IPv6 block list]]>Hi,

Currently I use ET, Dshield and Talos IPv4 list but I have some scan reaching my router from IPv6 host (example : 240e:​f7:​4f01:​c:​:​3 ).

Is there any list of IPv6 to add to PfBlockerNG ?

]]>https://forum.netgate.com/topic/150203/ipv6-block-listRSS for NodeFri, 16 Oct 2026 05:30:47 GMTMon, 03 Feb 2020 15:56:55 GMT60<![CDATA[Reply to IPv6 block list on Mon, 03 Feb 2020 18:44:31 GMT]]>@Le_Bleu

Block the ISP via their ASN number.

AS details for 240e:f7:4f01:c::3 :-

route6: 240E::/24
descr: China Telecom
origin: AS4134
mnt-by: MAINT-CT-GNOC
changed: dougd@chinatelecom.cn 20180820 #08:22:54Z
source: RADB

route6: 240e::/20
descr: CHINANET-IPv6-ROUTE
origin: AS4134
mnt-by: MAINT-CHINANET
last-modified: 2018-08-21T08:05:25Z
source: APNIC

Monday, 3 February 2020 at 18:41:09 Greenwich Mean Time

Screenshot 2020-02-03 at 18.43.10.png

]]>https://forum.netgate.com/post/889359https://forum.netgate.com/post/889359Mon, 03 Feb 2020 18:44:31 GMT<![CDATA[Reply to IPv6 block list on Mon, 03 Feb 2020 16:34:53 GMT]]>Blocking region is too much.
I host web services with some visitors from Russia and China.

]]>https://forum.netgate.com/post/889357https://forum.netgate.com/post/889357Mon, 03 Feb 2020 16:34:53 GMT<![CDATA[Reply to IPv6 block list on Mon, 03 Feb 2020 16:11:29 GMT]]>That subnets been trying to hit my WAN /64 for the past few months.

I've blocked China and a few other regions via GeoIP so they don't hit my IPsec & SFTP allow rules further down the list.

Screenshot 2020-02-03 at 16.07.18.png

Screenshot 2020-02-03 at 16.10.00.png

]]>https://forum.netgate.com/post/889353https://forum.netgate.com/post/889353Mon, 03 Feb 2020 16:11:29 GMT