nanog mailing list archives

Re: BKA Wiesbaden - Abteilung Cybercrime (Not sure if this is a phishing E-mail or real...)


From: Stefan Giera <giera () belwue de>
Date: Mon, 3 Apr 2023 17:04:47 +0200

Looks like scam to me, we are based in Germany and from time to time we are getting requests from BKA, all mails were originated from "*@bka.bund.de", never heard about ths "cyber.bka.de" Domain. Also I would expect something more like a specific criminal investigation from the BKA instead of the usual "we found suspicious ip addresses" announcement like Shadowserver is offering.

Governmental services within DTAG (AS3320) ip space is pretty common in Germany.


HTH,
Stefan


--
Stefan Giera, BelWü (AS553)
BelWü-Koordination, Universität Stuttgart
Industriestr. 28, 70565 Stuttgart

Tel: +49 711/685-65797 | Durchwahl
Tel: +49 711/685-88030 | NOC, Netzbetrieb, Router
Tel: +49 711/685-88020 | (Schul)Hotline
Fax: +49 711/678 83 63
E-Mail: ip () belwue de - http://www.belwue.de


Current thread: