Reserved/private ranges from IPv6 should also be blocked by default. https://en.wikipedia.org/wiki/Reserved_IP_addresses