22.214.171.124 Henan Police Academy Henan Gongan Xueyuan 河南公安学院 HNGAZK-CN at http://hnp.edu.cn/. Their IP range is 126.96.36.199 – 188.8.131.52. There are a couple of abuse postings from them such as 1, 2
The Henan Police Academy is part of the 184.108.40.206/15 range owned by CERNET China Education and Research Network. CERN’s IP ranges are huge. They have ASNs of AS4538 and AS38587 Tsinghua Science Park Internet Data Center.
Why would a police academy be used as a place to content spam web site, I do not know.
$ host hnp.edu.cn
hnp.edu.cn has address 220.127.116.11
hnp.edu.cn mail is handled by 10 mail.hnp.edu.cn
$ nmap hnp.edu.cn
Starting Nmap 7.01 ( https://nmap.org ) at 2017-07-19 13:01 EDT
Nmap scan report for hnp.edu.cn (18.104.22.168)
Host is up (0.0038s latency).
Not shown: 991 closed ports
PORT STATE SERVICE
21/tcp filtered ftp
22/tcp open ssh
53/tcp filtered domain
80/tcp open http
110/tcp filtered pop3
443/tcp filtered https
444/tcp filtered snpp
1723/tcp filtered pptp
8080/tcp filtered http-proxy
Nmap done: 1 IP address (1 host up) scanned in 23.72 seconds
On second thought I did a search on baidu.cn and found they could be Henan Police High level Specialty Academy 河南公安高等专科学校, who would have the initials HNGAZK. This school is in the same city as the one above and has the email address of firstname.lastname@example.org and site of http://www.hngazk.edu.cn