Henan Police Academy 河南公安学院, China, CERN spams me

Henan police Academy 河南公安学院, Zhengzhou, China, left me some comment spam today.

Today the Henan Police Academy 河南公安学院 from Zhengzhou, Henan, visited my site and left comment spam. I thought it very odd, because Chinese government organizations, including Chinese police, are usually quite discreet and don’t present themselves in such an open way.

183.169.128.30 Henan Police Academy Henan Gongan Xueyuan 河南公安学院 HNGAZK-CN at http://hnp.edu.cn/. Their IP range is 183.169.128.0 – 183.169.159.255. There are a couple of abuse postings from them such as 1, 2

The Henan Police Academy is part of the 183.168.0.0/15 range owned by CERNET China Education and Research Network. CERN’s IP ranges are huge. They have ASNs of AS4538 and AS38587 Tsinghua Science Park Internet Data Center.

Why would a police academy be used as a place to content spam web site, I do not know.

$ host hnp.edu.cn
hnp.edu.cn has address 183.169.128.218
hnp.edu.cn mail is handled by 10 mail.hnp.edu.cn

$ nmap hnp.edu.cn
Starting Nmap 7.01 ( https://nmap.org ) at 2017-07-19 13:01 EDT
Nmap scan report for hnp.edu.cn (183.169.128.218)
Host is up (0.0038s latency).
Not shown: 991 closed ports
PORT STATE SERVICE
21/tcp filtered ftp
22/tcp open ssh
53/tcp filtered domain
80/tcp open http
110/tcp filtered pop3
443/tcp filtered https
444/tcp filtered snpp
1723/tcp filtered pptp
8080/tcp filtered http-proxy

Nmap done: 1 IP address (1 host up) scanned in 23.72 seconds

Henan police Academy 河南公安学院, Zhengzhou, China, left me some comment spam today.

On second thought I did a search on baidu.cn and found they could be Henan Police High level Specialty Academy 河南公安高等专科学校, who would have the initials HNGAZK. This school is in the same city as the one above and has the email address of master@hngazk.edu.cn and site of http://www.hngazk.edu.cn