from mushawe.yoafrica.com ([196.44.176.11])
	by gwayi.yoafrica.com with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
	(Exim 4.90_1 (FreeBSD))
	(envelope-from <abuse-reply@columbia.edu>)
	id 1gJCv2-000OHz-Qy; Sun, 04 Nov 2018 09:34:00 +0200

from gairezi.yoafrica.com ([196.44.176.14]:22406)
	by mushawe.yoafrica.com with esmtp (Exim 4.90_1)
	id 1gJD28-00088j-CP; Sun, 04 Nov 2018 09:41:20 +0200

from localhost (localhost [127.0.0.1])
	by gairezi.yoafrica.com (Postfix) with ESMTP id 01EB62E7836;
	Sun,  4 Nov 2018 09:35:05 +0200 (CAT)

No, score=1.201 tagged_above=-999 required=5
	tests=[BAYES_50=0.8, KAM_NUMSUBJECT=0.5, RCVD_IN_DNSWL_MED=0.001,
	SPF_PASS=-0.001, ST_P0F_Linux=-0.1, ST_RCVD_IN_HOSTKARMA_W=0.001]
	autolearn=no autolearn_force=no

from gairezi.yoafrica.com (localhost [127.0.0.1])
	by gairezi.yoafrica.com (Postfix) with ESMTP id D10BF2E7FCB;
	Sun,  4 Nov 2018 09:34:58 +0200 (CAT)

pass (columbia.edu: 128.59.72.51 is authorized to use 'abuse-reply@columbia.edu' in 'mfrom' identity (mechanism 'ip4:128.59.72.0/24' matched)) receiver=gairezi.yoafrica.com; identity=mailfrom; envelope-from="abuse-reply@columbia.edu"; helo=outprodmail02.cc.columbia.edu; client-ip=128.59.72.51

from outprodmail02.cc.columbia.edu (outprodmail02.cc.columbia.edu [128.59.72.51])
	by gairezi.yoafrica.com (Postfix) with ESMTP id 8D7842E7FE7;
	Sun,  4 Nov 2018 09:34:55 +0200 (CAT)

from hazelnut (hazelnut.cc.columbia.edu [128.59.213.250])
	by outprodmail02.cc.columbia.edu (8.14.4/8.14.4) with ESMTP id wA47Xb9R044293;
	Sun, 4 Nov 2018 02:33:48 -0500

from hazelnut (localhost.localdomain [127.0.0.1])
	by hazelnut (Postfix) with ESMTP id 098E182;
	Sun,  4 Nov 2018 02:33:48 -0500 (EST)

from sendprodmail02.cc.columbia.edu (sendprodmail02.cc.columbia.edu [128.59.72.14])
	by hazelnut (Postfix) with ESMTP id 9AE238B;
	Sun,  4 Nov 2018 02:33:40 -0500 (EST)

from netflprodapp04.cc.columbia.edu (netflprodapp04.cc.columbia.edu [128.59.93.37])
	by sendprodmail02.cc.columbia.edu (8.14.4/8.14.4) with ESMTP id wA47XYQA011595;
	Sun, 4 Nov 2018 02:33:40 -0500

by netflprodapp04.cc.columbia.edu (Postfix, from userid 194299)
	id A9185395; Sun,  4 Nov 2018 02:33:39 -0500 (EST)

This is an automated message from Columbia University IT Security.  You are
receiving it because you are listed as the abuse contact for the machine
referred to below.  This machine attempted to gain unauthorized
access to one or more machines at Columbia University.

Details are provided below.  Please take all necessary
steps to mitigate such attacks.

If you have received this message in error, or if this incident
reported is inappropriate, please contact security@columbia.edu
so that we can update our procedures.  Please include the entire
body of this message.

Thank You.

Columbia University IT Security
security@columbia.edu

Name:     17-37sxx.broadband.yoafrica.com
Address:  41.190.37.17

Incident type: 1433/tcp
First attempt: 03-nov-2018 08:30:00 GMT-0500
Last attempt: 03-nov-2018 08:35:00 GMT-0500
Total attempts: 2717

03-Nov-2018 08:24:51 GMT-0400 41.190.37.17:39971 -> 129.236.102.36:1433 6 192
03-Nov-2018 08:25:15 GMT-0400 41.190.37.17:51310 -> 129.236.105.227:1433 6 48
03-Nov-2018 08:25:15 GMT-0400 41.190.37.17:23822 -> 129.236.105.214:1433 6 48
03-Nov-2018 08:25:15 GMT-0400 41.190.37.17:33750 -> 129.236.105.233:1433 6 48
03-Nov-2018 08:25:15 GMT-0400 41.190.37.17:39604 -> 129.236.105.231:1433 6 48
03-Nov-2018 08:25:15 GMT-0400 41.190.37.17:20895 -> 129.236.105.215:1433 6 48
03-Nov-2018 08:25:20 GMT-0400 41.190.37.17:33730 -> 129.236.107.68:1433 6 48
03-Nov-2018 08:25:15 GMT-0400 41.190.37.17:44495 -> 129.236.107.98:1433 6 96
03-Nov-2018 08:25:16 GMT-0400 41.190.37.17:41866 -> 129.236.108.134:1433 6 192
03-Nov-2018 08:25:15 GMT-0400 41.190.37.17:9783 -> 129.236.108.33:1433 6 144
03-Nov-2018 08:25:20 GMT-0400 41.190.37.17:33604 -> 129.236.108.204:1433 6 96
03-Nov-2018 08:25:23 GMT-0400 41.190.37.17:42606 -> 129.236.107.233:1433 6 48
03-Nov-2018 08:30:19 GMT-0400 41.190.37.17:58051 -> 129.236.162.112:1433 6 722
03-Nov-2018 08:25:28 GMT-0400 41.190.37.17:53980 -> 129.236.109.53:1433 6 48
03-Nov-2018 08:25:31 GMT-0400 41.190.37.17:44460 -> 129.236.109.213:1433 6 48
03-Nov-2018 08:25:31 GMT-0400 41.190.37.17:15193 -> 129.236.109.223:1433 6 48
03-Nov-2018 08:25:31 GMT-0400 41.190.37.17:38607 -> 129.236.109.215:1433 6 48
03-Nov-2018 08:25:23 GMT-0400 41.190.37.17:32864 -> 129.236.109.105:1433 6 96
03-Nov-2018 08:25:24 GMT-0400 41.190.37.17:62020 -> 129.236.109.207:1433 6 96
03-Nov-2018 08:25:28 GMT-0400 41.190.37.17:54167 -> 129.236.110.199:1433 6 96
03-Nov-2018 08:25:34 GMT-0400 41.190.37.17:57094 -> 129.236.110.198:1433 6 48
03-Nov-2018 08:25:34 GMT-0400 41.190.37.17:47165 -> 129.236.110.179:1433 6 48
03-Nov-2018 08:25:34 GMT-0400 41.190.37.17:17898 -> 129.236.110.189:1433 6 48
03-Nov-2018 08:25:34 GMT-0400 41.190.37.17:44238 -> 129.236.110.180:1433 6 48
03-Nov-2018 08:25:34 GMT-0400 41.190.37.17:62947 -> 129.236.110.196:1433 6 48
03-Nov-2018 08:25:28 GMT-0400 41.190.37.17:16528 -> 129.236.111.135:1433 6 192
03-Nov-2018 08:25:36 GMT-0400 41.190.37.17:7230 -> 129.236.111.71:1433 6 48
03-Nov-2018 08:25:36 GMT-0400 41.190.37.17:9194 -> 129.236.112.195:1433 6 96
03-Nov-2018 08:25:44 GMT-0400 41.190.37.17:13159 -> 129.236.113.72:1433 6 48
03-Nov-2018 08:25:48 GMT-0400 41.190.37.17:18161 -> 129.236.114.83:1433 6 48
03-Nov-2018 08:25:48 GMT-0400 41.190.37.17:15234 -> 129.236.114.84:1433 6 48
03-Nov-2018 08:25:48 GMT-0400 41.190.37.17:12308 -> 129.236.114.85:1433 6 48
03-Nov-2018 08:25:48 GMT-0400 41.190.37.17:26941 -> 129.236.114.80:1433 6 48
03-Nov-2018 08:25:48 GMT-0400 41.190.37.17:24014 -> 129.236.114.81:1433 6 48
03-Nov-2018 08:25:48 GMT-0400 41.190.37.17:41574 -> 129.236.114.75:1433 6 48
03-Nov-2018 08:25:49 GMT-0400 41.190.37.17:6454 -> 129.236.114.87:1433 6 48
03-Nov-2018 08:30:44 GMT-0400 41.190.37.17:46670 -> 129.236.184.18:1433 6 722
03-Nov-2018 08:25:55 GMT-0400 41.190.37.17:39983 -> 129.236.115.245:1433 6 48
03-Nov-2018 08:25:55 GMT-0400 41.190.37.17:28276 -> 129.236.115.249:1433 6 48
03-Nov-2018 08:25:53 GMT-0400 41.190.37.17:55356 -> 129.236.115.83:1433 6 48
03-Nov-2018 08:25:55 GMT-0400 41.190.37.17:42999 -> 129.236.115.255:1433 6 48
03-Nov-2018 08:25:55 GMT-0400 41.190.37.17:58691 -> 129.236.116.5:1433 6 48
03-Nov-2018 08:25:55 GMT-0400 41.190.37.17:19496 -> 129.236.115.252:1433 6 48
03-Nov-2018 08:25:53 GMT-0400 41.190.37.17:14383 -> 129.236.115.97:1433 6 48
03-Nov-2018 08:25:53 GMT-0400 41.190.37.17:58283 -> 129.236.115.82:1433 6 48
03-Nov-2018 08:25:53 GMT-0400 41.190.37.17:20236 -> 129.236.115.95:1433 6 48
03-Nov-2018 08:25:53 GMT-0400 41.190.37.17:5603 -> 129.236.115.100:1433 6 48
03-Nov-2018 08:25:53 GMT-0400 41.190.37.17:30165 -> 129.236.115.114:1433 6 48
03-Nov-2018 08:25:53 GMT-0400 41.190.37.17:59431 -> 129.236.115.104:1433 6 48
Attempts continue...
03-Nov-2018 08:33:07 GMT-0400 41.190.37.17:38156 -> 129.236.184.18:1433 6 564
03-Nov-2018 08:33:07 GMT-0400 41.190.37.17:48827 -> 129.236.160.34:1433 6 801
03-Nov-2018 08:33:08 GMT-0400 41.190.37.17:6364 -> 129.236.184.18:1433 6 564
03-Nov-2018 08:33:10 GMT-0400 41.190.37.17:59076 -> 129.236.160.57:1433 6 473
03-Nov-2018 08:34:20 GMT-0400 41.190.37.17:48576 -> 129.236.170.195:1433 6 897
03-Nov-2018 08:33:11 GMT-0400 41.190.37.17:58286 -> 129.236.160.34:1433 6 903
03-Nov-2018 08:33:12 GMT-0400 41.190.37.17:37617 -> 129.236.184.18:1433 6 722
03-Nov-2018 08:33:13 GMT-0400 41.190.37.17:39377 -> 129.236.160.34:1433 6 92
03-Nov-2018 08:33:13 GMT-0400 41.190.37.17:6389 -> 129.236.184.18:1433 6 473
03-Nov-2018 08:33:17 GMT-0400 41.190.37.17:56766 -> 129.236.160.34:1433 6 722
03-Nov-2018 08:34:45 GMT-0400 41.190.37.17:44488 -> 129.236.160.34:1433 6 809
03-Nov-2018 08:34:45 GMT-0400 41.190.37.17:55352 -> 129.236.170.195:1433 6 891
03-Nov-2018 08:34:49 GMT-0400 41.190.37.17:61895 -> 129.236.160.34:1433 6 855
03-Nov-2018 08:34:53 GMT-0400 41.190.37.17:35971 -> 129.236.160.34:1433 6 855
03-Nov-2018 08:33:35 GMT-0400 41.190.37.17:49642 -> 129.236.160.57:1433 6 722
03-Nov-2018 08:35:03 GMT-0400 41.190.37.17:51429 -> 129.236.160.34:1433 6 847
03-Nov-2018 08:33:37 GMT-0400 41.190.37.17:45956 -> 129.236.162.112:1433 6 722
03-Nov-2018 08:35:04 GMT-0400 41.190.37.17:43096 -> 129.236.184.18:1433 6 572
03-Nov-2018 08:35:07 GMT-0400 41.190.37.17:52531 -> 129.236.160.34:1433 6 903
03-Nov-2018 08:33:04 GMT-0400 41.190.37.17:37989 -> 129.236.225.107:1433 6 192
03-Nov-2018 08:33:04 GMT-0400 41.190.37.17:32136 -> 129.236.225.109:1433 6 192
03-Nov-2018 08:33:04 GMT-0400 41.190.37.17:29209 -> 129.236.225.110:1433 6 192
03-Nov-2018 08:33:04 GMT-0400 41.190.37.17:26282 -> 129.236.225.111:1433 6 192
03-Nov-2018 08:33:04 GMT-0400 41.190.37.17:23356 -> 129.236.225.112:1433 6 144
03-Nov-2018 08:33:04 GMT-0400 41.190.37.17:15946 -> 129.236.224.169:1433 6 96
03-Nov-2018 08:33:04 GMT-0400 41.190.37.17:20429 -> 129.236.225.113:1433 6 192
03-Nov-2018 08:33:04 GMT-0400 41.190.37.17:14576 -> 129.236.225.115:1433 6 144
03-Nov-2018 08:33:04 GMT-0400 41.190.37.17:25688 -> 129.236.223.41:1433 6 48
03-Nov-2018 08:33:04 GMT-0400 41.190.37.17:64883 -> 129.236.223.50:1433 6 48
03-Nov-2018 08:33:04 GMT-0400 41.190.37.17:32689 -> 129.236.223.61:1433 6 48
03-Nov-2018 08:33:04 GMT-0400 41.190.37.17:29763 -> 129.236.223.62:1433 6 48
03-Nov-2018 08:33:04 GMT-0400 41.190.37.17:20983 -> 129.236.223.65:1433 6 48
03-Nov-2018 08:33:04 GMT-0400 41.190.37.17:61703 -> 129.236.223.73:1433 6 48
03-Nov-2018 08:33:04 GMT-0400 41.190.37.17:51398 -> 129.236.223.77:1433 6 48
03-Nov-2018 08:33:04 GMT-0400 41.190.37.17:23909 -> 129.236.223.64:1433 6 48
03-Nov-2018 08:33:04 GMT-0400 41.190.37.17:60178 -> 129.236.223.74:1433 6 48
03-Nov-2018 08:33:05 GMT-0400 41.190.37.17:45544 -> 129.236.223.79:1433 6 48
03-Nov-2018 08:33:05 GMT-0400 41.190.37.17:42618 -> 129.236.223.80:1433 6 48
03-Nov-2018 08:33:05 GMT-0400 41.190.37.17:34433 -> 129.236.225.153:1433 6 192
03-Nov-2018 08:33:05 GMT-0400 41.190.37.17:27985 -> 129.236.223.85:1433 6 48
03-Nov-2018 08:33:05 GMT-0400 41.190.37.17:63291 -> 129.236.224.220:1433 6 96
03-Nov-2018 08:33:05 GMT-0400 41.190.37.17:55473 -> 129.236.223.98:1433 6 48
03-Nov-2018 08:33:05 GMT-0400 41.190.37.17:33838 -> 129.236.223.83:1433 6 48
03-Nov-2018 08:33:05 GMT-0400 41.190.37.17:30911 -> 129.236.223.84:1433 6 48
03-Nov-2018 08:33:05 GMT-0400 41.190.37.17:34509 -> 129.236.223.94:1433 6 48
03-Nov-2018 08:33:05 GMT-0400 41.190.37.17:25058 -> 129.236.223.86:1433 6 48
03-Nov-2018 08:33:05 GMT-0400 41.190.37.17:4571 -> 129.236.223.93:1433 6 48
03-Nov-2018 08:33:05 GMT-0400 41.190.37.17:64253 -> 129.236.223.95:1433 6 48
03-Nov-2018 08:33:05 GMT-0400 41.190.37.17:26206 -> 129.236.223.108:1433 6 48