so did we. but the problem is hetzner is cheap and ignores any kind of abuse complaint that isn’t DMCA seemingly. so it allows people to spin up massive and cheap botnets with trillions of IPv6 addresses. i recently just entirely disabled IPv6 for poast and cleared our AAAA because it’s easier than trying to filter the IPs all the time.
or (ip.src in {2a01:4ff::/32 2a01:4f9::/32 2a01:4f8::/32 2400:8901::/32})