IPv6 block list

Le_Bleu · Feb 3, 2020, 3:56 PM

Hi,

Currently I use ET, Dshield and Talos IPv4 list but I have some scan reaching my router from IPv6 host (example : 240e:f7:4f01:c::3 ).

Is there any list of IPv6 to add to PfBlockerNG ?

NogBadTheBad · Feb 3, 2020, 4:11 PM

That subnets been trying to hit my WAN /64 for the past few months.

I've blocked China and a few other regions via GeoIP so they don't hit my IPsec & SFTP allow rules further down the list.

Le_Bleu · Feb 3, 2020, 4:34 PM

Blocking region is too much.
I host web services with some visitors from Russia and China.

NogBadTheBad · Feb 3, 2020, 6:44 PM

Block the ISP via their ASN number.

AS details for 240e:f7:4f01:c::3 :-

route6: 240E::/24
descr: China Telecom
origin: AS4134
mnt-by: MAINT-CT-GNOC
changed: dougd@chinatelecom.cn 20180820 #08:22:54Z
source: RADB

route6: 240e::/20
descr: CHINANET-IPv6-ROUTE
origin: AS4134
mnt-by: MAINT-CHINANET
last-modified: 2018-08-21T08:05:25Z
source: APNIC

Monday, 3 February 2020 at 18:41:09 Greenwich Mean Time