Here are some more fake sites pretending to be the Bundeskriminalamt and Bundespolizei (agencies of the German Federal Police) which are probably worth blocking, following on from these.
184.108.40.206 [Sia Vps Hosting, Latvia]
220.127.116.11 [Invalid pointer to bundespolizei.de]
dpolg-bundespolizei.org [also on 18.104.22.168]
inter-bundeskriminalamt.org [also on 22.214.171.124]
126.96.36.199 [China Motion Network Communication]
Note that 188.8.131.52 is actually the real IP for bundespolizei.de, but the scammers are pointing their DNS records to it, presumably to cause confusion.
You can safely block access to 184.108.40.206/24 (Sia VPS) without much fear of losing anything important. The Chinese netblock is more mixed, but blocking at least 220.127.116.11 might be a good idea if you are in Germany.
Leave a reply