Here are some more fake sites pretending to be the Bundeskriminalamt and Bundespolizei (agencies of the German Federal Police) which are probably worth blocking, following on from these.
22.214.171.124 [Sia Vps Hosting, Latvia]
126.96.36.199 [Invalid pointer to bundespolizei.de]
dpolg-bundespolizei.org [also on 188.8.131.52]
inter-bundeskriminalamt.org [also on 184.108.40.206]
220.127.116.11 [China Motion Network Communication]
Note that 18.104.22.168 is actually the real IP for bundespolizei.de, but the scammers are pointing their DNS records to it, presumably to cause confusion.
You can safely block access to 22.214.171.124/24 (Sia VPS) without much fear of losing anything important. The Chinese netblock is more mixed, but blocking at least 126.96.36.199 might be a good idea if you are in Germany.
Leave a reply