from mushawe.yoafrica.com ([196.44.176.11])
	by gwayi.yoafrica.com with esmtp (Exim 4.90_1 (FreeBSD))
	(envelope-from <abuseoutreturned@checkdomain.de>)
	id 1i1mQQ-000GKZ-6l
	for abuse@yoafrica.com; Sun, 25 Aug 2019 08:54:54 +0200

from [41.190.32.2] (port=31469 helo=sengwe.utande.co.zw)
	by mushawe.yoafrica.com with esmtp (Exim 4.90_1)
	id 1i1mSi-00070q-8H
	for abuse@yoafrica.com; Sun, 25 Aug 2019 08:57:16 +0200

from localhost (localhost [127.0.0.1])
	by sengwe.utande.co.zw (Postfix) with ESMTP id 2CC6A77D2AD
	for <abuse@yoafrica.com>; Sun, 25 Aug 2019 08:56:47 +0200 (CAT)

No, score=1.727 tagged_above=-999 required=5
	tests=[BAYES_50=0.8, KAM_ASCII_DIVIDERS=0.8, KAM_NUMSUBJECT=0.2,
	RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001,
	ST_P0F_Linux=-0.1, TW_VS=0.027] autolearn=no autolearn_force=no

from sengwe.utande.co.zw (localhost [127.0.0.1])
	by sengwe.utande.co.zw (Postfix) with ESMTP id 2FC7977D2AE
	for <abuse@yoafrica.com>; Sun, 25 Aug 2019 08:56:35 +0200 (CAT)

sengwe.utande.co.zw;
        spf=pass smtp.mailfrom=abuseoutreturned@checkdomain.de
          smtp.helo=mx.checkdomain.de

pass
        (checkdomain.de: Sender is authorized to use 'abuseoutreturned@checkdomain.de' in 'mfrom' identity (mechanism 'include:mx.spf.checkdomain.de' matched))
        receiver=sengwe.utande.co.zw;
        identity=mailfrom;
        envelope-from="abuseoutreturned@checkdomain.de";
        helo=mx.checkdomain.de;
        client-ip=136.243.13.126

from mx.checkdomain.de (mx.checkdomain.de [136.243.13.126])
	by sengwe.utande.co.zw (Postfix) with ESMTPS id CD66C77D2AA
	for <abuse@yoafrica.com>; Sun, 25 Aug 2019 08:56:30 +0200 (CAT)

from web1.core.checkdomain.de (unknown [46.243.91.2])
	by mx.checkdomain.de (Postfix) with ESMTP id A9B256CF0098;
	Sun, 25 Aug 2019 08:54:44 +0200 (CEST)

by web1.core.checkdomain.de (Postfix, from userid 48)
	id A49344E03B86; Sun, 25 Aug 2019 08:54:44 +0200 (CEST)

Abuse-Message [Anfrage#RRHB2CGCX]: abuse report about 41.190.36.210/32- Sun, 25 Aug 2019 08:54:44 +0200

multipart/mixed;
   boundary="--E62BAE82D06E39C8B926DE5B18F9AE4E"

[english version below]

Guten Tag abuse@yoafrica.com,

von einem Rechner in Ihrem Netzwerk sind wiederholt Attacken/Störungen
auf mindestens zwei unser Server ausgegangen. Bitte tragen Sie dafür
Sorge, dass Attacken/Störungen zukünftig unterbunden/abgestellt werden.

   IP-Nummer: 41.190.36.210/32
   PTR-Name : 210-36sxx.broadband.yoafrica.com

Vorsorglich haben wir die verursachende IP-Nummer bis zum:
          Sun, 15 Sep 2019 08:53:13 +0200
von der Kommunikation mit unseren Servern ausgeschlossen.

Um mehr Details zu erfahren und/oder ein Rückmeldung an uns zu über-
mitteln, steht Ihnen nachstehender Link zur Verfügung:
     https://www.checkdomain.de/blacklist/?k=RRHB2CGCX

Bitte prüfen Sie den/die Rechner hinter der IP-Nummer 41.190.36.210/32 und
lösen das Problem.

Sie können diese E-Mail mit X-ARF-Programmen (1. Befestigung = Details, 
2. Attachment = Logdatei) zu analysieren. Sie finden mehr Informationen 
über X-Arf unter der URL: http://www.x-arf.org/specification.html

Im Anhang dieser Mail finden Sie die weitergehende Informationen.

Abuse-Team Checkdomain

+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Dear abuse@yoafrica.com,

a computer within your network repeatedly attacks at least two or
more of our servers. Please ensure that attacks are prevented in future.

   IP-Number: 41.190.36.210/32

Preemptively we blocked the respoonsible ip number until:
and excluded it from the communication with our servers.

For more details and / or for providing feedback to us, you can use
the following link:
   https://www.checkdomain.net/en/support/blacklist/?k=RRHB2CGCX

Please check the machine(s) behind the IP 41.190.36.210/32 and fix
the problem.

You can parse this Mail with X-ARF-Tools (1. attachment = Details, 
2. attachment = Logs). You found more Information about X-Arf under
the URL: http://www.x-arf.org/specification.html

In the attachment of this mail you can find more information.

---------------------------------------------------------------------
Checkdomain GmbH, Große Burgstraße 27/29, 23552 Lübeck, Germany

tel +49 (0)451 70 99 70, fax +49 (0)451 70 99 727
abuse@checkdomain.de, http://www.checkdomain.de

Geschäftsführer/CEO: Daniel Hagemeier, Marcel Chorengel
Amtsgericht Lübeck, HRB 5100 HL

---
Reported-From: abuse-out@checkdomain.de
Category: info
Report-Type: info
Service: different services
Version: 0.1
User-Agent: Checkdomain Express 0.19
Date: Sun, 25 Aug 2019 08:54:44 +0200
Source-Type: ipv4
Source: 41.190.36.210
Port: n/a
Report-ID: rrhb2cgcx@checkdomain.de
Schema-URL: http://www.blocklist.de/downloads/schema/info_0.1.1.json
Attachment: text/plain