cnc-noc.net - Ethical Issues

Post Reply
User avatar
nova7
Posts: 267
Joined: Fri Apr 06, 2012 11:32 pm

cnc-noc.net - Ethical Issues

Post by nova7 » Tue Mar 05, 2013 7:05 pm

Due to the 20,000 character limit of scorecard comments, I'm reposting my Over 20,000 character scorecard comment here:

November 2012, CNCGroup / cnc-noc.net is running AS9929 / China Netcom. China Netcom IP range 58.83.8.0/22 is spamhaus.org do-not-route listed.
xhttp://bgp.he.net/AS9929#_whois (CNCGroup / cnc-noc.net is running AS9929 / China Netcom)
xwww.spamhaus.org/sbl/query/SBL67465 (IP range 58.83.8.0/22 is do-not-route listed, yet CNCGroup /cnc-noc.net is routing it)
xhttp://bgp.he.net/ip/58.83.8.0#_ipinfo (IP range 58.83.8.0/22 routed by AS9929, which CNCGroup/cnc-noc.net is running)

AND
November 2012, cnc-noc.net is a contact address for chinaunicom.cn / AS4837 / CNC Group.
xhttp://bgp.he.net/ip/116.255.129.148#_whois (cnc-noc.net is listed as a contact)
xwww.mywot.com/scorecard/chinaunicom.cn (The poor reputation of chinaunicom.cn)

AND
cnc-noc.net / unicom with it's collective of provinces / chinaunicom.cn / AS4837 / CNC Group and it's collective of provinces is running network operations for Yambo Financial and has been blacklisted by the Spamhaus Project one hundred nineteen times from August 2005 to January 2012. See:
xwww.spamhaus.org/statistics/spammers/ (September 2012, Yambo Financial is listed as the 6th most prolific spam operation in the World).

xwww.spamhaus.org/rokso/sbl_archived/SPM880/yambo-financials (Archived support of Yambo Financial by cncgroup / unicom one hundred ninteen times. There are plenty of very large, more 'clean' networks that have Never run Yambo Financial spam operations and thus are Not listed).

AND
cnc-noc.net / unicom / chinaunicom.cn / AS4837 / CNC Group is running network operations for Canadian Pharmacy and has been blacklisted by the Spamhaus Project numerous times going back Years. See:
xwww.spamhaus.org/rokso/sbl_current/SPM1099/canadian-pharmacy (Note the unicom networks).

AND
September 2012, China Unicom has supported espionage. See:
xwww.secureworks.com/research/threats/the-mirage-campaign (Subsection "Threat Actors", IP range 114.240.0.0 - 114.255.255.255)

AND
cnc-noc.net / chinaunicom.cn / unicom / AS4837 / CNC Group / apnic.net have been operating the SAME spam operations since at least December 2007 (MORE than FOUR YEARS).
See:
xwww.spamhaus.org/sbl/listings.lasso?isp=unicom-jx (unicom-Jiangxi province)
xwww.spamhaus.org/sbl/listings.lasso?isp=unicom-cn
xwww.spamhaus.org/sbl/listings.lasso?isp=unicom-bj unicom-Beijing province)
xwww.spamhaus.org/sbl/listings/unicom-sh (unicom-Shanghai province)
xhttp://network-tools.com/default.asp?prog=express&host=chinaunicom.cn

More unicom province reports:
xwww.spamhaus.org/sbl/listings/unicom-ln (Unicom-Liaoning province)
xhttp://network-tools.com/default.asp?prog=whois&host=lntelecom.com (Example of the Unicom-Liaoning and cnc-noc.net relation)
xwww.spamhaus.org/sbl/listings/unicom-tj (Unicom Tianjin Province)
xhttp://network-tools.com/default.asp?prog=network&host=124.68.1.203 (Example of the Unicom-Tianjin and cnc-noc.net relation)
xwww.spamhaus.org/sbl/listings/unicom-hl (Unicom Heilongjiang Province)
xhttp://network-tools.com/default.asp?prog=network&host=221.209.60.0 (Example of the Unicom-Heilongjiang and cnc-noc.net relation)
xwww.spamhaus.org/sbl/listings/unicom-js (Unicom-Jiangsu Province)
xhttp://bgp.he.net/ip/58.241.9.138#_whois (Example of the Unicom-Jiangsu province and cnc-noc.net relation)

All of these networks are routing through AS4808 which is one of the WORST networks of the WORLD. See:
xwww.robtex.com/dns/cnc-noc.net.html#graph
xwww.robtex.com/dns/chinaunicom.cn.html#graph
xhttp://sitevet.com/db/asn/AS4808
(AS4808 reputation)

AS9929 and AS4837 are the networks routing for AS4808. See:
xwww.robtex.com/as/as4808.html#graph

AS4837/ chinaunicom.cn is one of the WORST networks of the WORLD:
xhttp://sitevet.com/db/asn/AS4837

AS4837 / chinaunicom.cn / CNC Group is being run by cnc-noc.net. See:
xwww.robtex.com/as/as4837.html#rr

Reputation reports of all these networks:
www.mywot.com/scorecard/chinaunicom.cn
www.mywot.com/scorecard/china-netcom.com

AND
September 2012, chinaunicom.cn / AS4837 / cnc-noc.net is hosting malware. See:
xhttp://support.clean-mx.de/clean-mx/viruses.php?as=AS4837&sort=firstseen%20desc&response=alive&sort=firstseen%20desc&response=alive&limit=0,1000

AND:
Cnc-noc.net has hichina, which has a poor reputation, as its registrar.
See:
xwww.robtex.com/as/as37963.html#graph
www.mywot.com/scorecard/hichina.com (the poor reputation of hichina.com)
xhttp://network-tools.com/default.asp?prog=whois&host=cnc-noc.net (hichina, which has a poor reputation, is the registrar of cnc-noc.net)

AND
October 2012, cnc-noc.net / AS4837 is hosting the same botnet command and control for months.
xhttps://spyeyetracker.abuse.ch/monitor.php?as=4837
xhttps://zeustracker.abuse.ch/monitor.php?as=4837

User avatar
nova7
Posts: 267
Joined: Fri Apr 06, 2012 11:32 pm

RE: cnc-noc.net - Ethical Issues

Post by nova7 » Mon Jul 14, 2014 4:25 pm

Another instance of China state-sponsored data stealing, again on the China Unicom (cnc-noc.net / chinaunicom.cn / unicom / AS4837 / CNC Group / apnic.net) network:
xwww.infosecurity-magazine.com/view/39257/malware-siphons-the-brains-of-shipping-companies-in-sophisticated-supply-chain-attack
xhttp://network-tools.com/default.asp?prog=network&host=lxjx.cn (cnc-noc.net / chinaunicom.cn / unicom / AS4837 / CNC Group is running the network for Lanxiang Vocational School / lxjx.cn , mentioned in the article as the command and control location for a botnet)
xhttp://bgp.he.net/dns/lxjx.cn#_ipinfo (the Lanxiang Vocational School / lxjx.cn network is run by China Unicom / chinaunicom.cn / AS4837 / CNC Group / cnc-noc.net)

User avatar
nova7
Posts: 267
Joined: Fri Apr 06, 2012 11:32 pm

RE: cnc-noc.net - Ethical Issues

Post by nova7 » Fri Aug 25, 2017 6:40 pm

cnc-noc.net / china-netcom.com is supporting AS4837 - China Unicom / chinaUnicom.cn - Tianjin & Fujian province portions of China Unicom, and other province networks / AS4837 - China Unicom:
xhttps://bgp.he.net/AS4837#_whois (cnc-noc.net / china-netcom.com is supporting China Unicom)
xhttps://bgp.he.net/AS4837#_prefixes (China Unicom - Tianjin province network / China Unicom - Fujian province network, and other province networks of China Unicom)

xwww.talosintelligence.com/reputation_center/lookup?search=China%20Unicom%20Tianjin (China Unicom - Tianjin province network / cnc-noc.net / china-netcom.com sustains IP addresses rated up to "very high" for the amounts of spam sent during a 30 day period from CBL-listed, botnet-infected IP addresses.

Other, see July 2010 forum:
www.mywot.com/en/forum/6894-china-net-com (china-netcom.com / China Unicom / chinauUicom.cn - Fujian province)


User avatar
nova7
Posts: 267
Joined: Fri Apr 06, 2012 11:32 pm

RE: cnc-noc.net - Ethical Issues

Post by nova7 » Sat Aug 26, 2017 6:21 pm

xhttps://bgp.he.net/AS4808#_whois (AS4808 - China Unicom / chinaunicom.cn supported by CNCGroup / cnc-noc.net, AS4808 - China Unicom / chinaunicom.cn, and apnic.net)
xhttps://bgp.he.net/net/211.147.0.0/20#_whois (Example, also many other network ranges running Beijing zhong bang Telecom Technology Co Ltd, support by CNnic.cn, sina.com and and btte.net directly and further supported by CNCGroup / cnc-noc.net, AS4808 - China Unicom / chinaunicom.cn, and apnic.net, shown above, of Beijing Teletron Telecom Engineering Co., Ltd.)
xhttps://bgp.he.net/AS4808#_prefixes (Example, also many other network ranges, of support by CNnic.cn and btte.net directly and further supported by CNCGroup / cnc-noc.net, AS4837 - China Unicom / chinaunicom.cn, and apnic.net and btte.net, shown above, of Beijing Teletron Telecom Engineering Co., Ltd.)
xwww.talosintelligence.com/reputation_center/lookup?search=Beijing%20zhong%20bang%20Telecom%20Technology%20Co (CBL-listed, botnet infections on Beijing zhong bang Telecom Technology Co Ltd, which is supported by CNnic.cn AKA China Network Information Center - CN NIC / CNnic.net.cn and btte.net )

User avatar
nova7
Posts: 267
Joined: Fri Apr 06, 2012 11:32 pm

Re: cnc-noc.net - Ethical Issues

Post by nova7 » Mon Aug 06, 2018 6:49 pm

Running: sina.com.cn < sinamail.sina.com.cn

www.borderware.com/domain_lookup.php?q= ... =1&go=Show (sinamail.sina.com.cn IP addresses with poor reputations running on the China Unicom Beijing / CN Telecom / AS4808 network)

Post Reply

Who is online

Users browsing this forum: No registered users and 1 guest