&gt;Update: The IPv6 addresses which are used appear to be fictional. They haven’t been allocated yet and are non-routable.<p>What kind of network are they using that lets them send forged source addresses? Also, a temporary solution in that case would be to use a blocklist of non-allocated ranges.