Return-Path: <3QOgOZx8KAIsv33v0t-B36z74prt-p0t687-236t40Dv33v0t.r31@scoutcamp.bounces.google.com> Delivered-To: aitvarsity@136-243-145-84.cprapid.com Received: from 136-243-145-84.cprapid.com by 136-243-145-84.cprapid.com with LMTP id 4D8/N2zoDmcbLCcAHvuL7w (envelope-from <3QOgOZx8KAIsv33v0t-B36z74prt-p0t687-236t40Dv33v0t.r31@scoutcamp.bounces.google.com>) for ; Wed, 16 Oct 2024 00:10:52 +0200 Return-path: <3QOgOZx8KAIsv33v0t-B36z74prt-p0t687-236t40Dv33v0t.r31@scoutcamp.bounces.google.com> Envelope-to: dzidonu@aitvarsity.net Delivery-date: Wed, 16 Oct 2024 00:10:52 +0200 Received: from mail-io1-f71.google.com ([209.85.166.71]:38959) by 136-243-145-84.cprapid.com with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256 (Exim 4.97.1) (envelope-from <3QOgOZx8KAIsv33v0t-B36z74prt-p0t687-236t40Dv33v0t.r31@scoutcamp.bounces.google.com>) id 1t0pkh-0000000AloS-3X59 for dzidonu@aitvarsity.net; Wed, 16 Oct 2024 00:10:52 +0200 Received: by mail-io1-f71.google.com with SMTP id ca18e2360f4ac-8353c004245so60649639f.0 for ; Tue, 15 Oct 2024 15:10:30 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20230601; t=1729030208; x=1729635008; darn=aitvarsity.net; h=to:from:subject:message-id:feedback-id:reply-to:date:mime-version :from:to:cc:subject:date:message-id:reply-to; bh=LvFob4xnQo/x8YVzRw320O1KQ/fkiyksb5a/N/kR9mM=; b=Jma01Q9nmiRf/4tn0vqm1rTexMwHA+XfMtQ19B1fYsGzoszVFfHrLNouGL6PkGlP6N rwDrKBEDrdZQDAPg80YXUbzEUdRPMM2tU+ih6aLSx4qbRkMewlvafAZths6Kvws0XoXa rg7cJkHOfVGttj7skOhCV7zvznex/7bel03HH6HfrrdErl/X2uk2TbGU83824urYE3Yy GG5ssZFcPcj+YUzgIG6dNtJzXup6HNTpcwcUaZiUBNwiGtz757N2g2R/ZhtLn7wx74Ue TwcTOlsiKrQ2BnjQR4hbIqKGWhTnd0vN3i7TX5+0CgT+QIRanSSn9JAxX09ZFVPS4qCw jz0A== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1729030208; x=1729635008; h=to:from:subject:message-id:feedback-id:reply-to:date:mime-version :x-gm-message-state:from:to:cc:subject:date:message-id:reply-to; bh=LvFob4xnQo/x8YVzRw320O1KQ/fkiyksb5a/N/kR9mM=; b=RJatqsW7xwnLYUQ5i9iRYTy15iQCLAdV73jHn5wpHgfpkinHmjfhhhoWSXsBTs4J5h VD8DRBw/p41+daRT3LJS4fGRoOVrvi2jEirfxyFXCcOPUtQjx8XlSrGdmQX9X66Q3sMR jd68ffQGtepnZ5Bk7bA8aeP0oLb05iNB5vgx+XakxITCGQGQZLM4v1hFHecZN1ETyEyY ExFnzHxfMc+Y2TsJ3XCZs9CSzDpgRCwS5CxcoZ0V4eR1lDGD83C8cbs6d5qGxeWmBuqI Viz/WRMvV4eiWt8nDzN4/0mgHF+JbV3gvZOgUrs92wy759Vx6aZPbbgx9werZHDw4axz 0bow== X-Gm-Message-State: AOJu0Yx58uduKhzIQbxNb8Cw5qW/fgKoPgMXeKTSP+l4aMYIpQZGnGtm hxJA3ovL5E7NJYD42G7Gny0yXaUlew44alYCYhLWKQhgNQGuZVgKFR/L X-Google-Smtp-Source: AGHT+IFhjRPL3321vUAfrrv9qzryIcTPlw8b3Y3C4eJ6jSCPg9rSjUYRSBCMrwNG+lZ0xDAzltiTVp8= MIME-Version: 1.0 X-Received: by 2002:a6b:d603:0:b0:82a:a4f0:c95e with SMTP id ca18e2360f4ac-83795126ab0mr391292439f.5.1729030208254; Tue, 15 Oct 2024 15:10:08 -0700 (PDT) Date: Tue, 15 Oct 2024 15:10:08 -0700 Reply-To: Google Workspace Alerts X-Google-Id: 263011 Feedback-ID: P1709-0:C20113082:M110293278-en:gamma X-Notifications: 5f385dc53b420000 X-Notifications-Bounce-Info: AdZT3xQfCsmKIuW0Ub0bbyHnivyjs_Xt4hhMCF6qq819faut4U9nnLnIe4sGD5r_KjIEJ1m52f-ZJm9R8l5uaG5Ta_DoYn_YlPr0kjCQnAZQm1I851BypB5hV79HBTwP1vt0jWBpow8im_MH68Zc-mSdZ3Cl8KpAZKPw9qTMvB4PO0k0E2rYy0Weabd2T9mp_syvdAwXAbpRHwqEXd5R0nroeHDUyPoSJ7R5YrUBvsCceUJi1wakvWE_T5J-4a4_FXWAwtxLx-SChvikcvdZJNkA_xS00nIUQQ4hmYfyt5eMZS9fmndYo_R3vE_Kb8Nfl9MJSbPRuHyK0yNUetOoxOjSb4kAZ520MZOUrIHlJgvb5TsFyDuGgSYCQoC4THbfl8uzFgekMfCvuwbLTHxrGn17UJB9jhBDmr7MzCiohJ9X3P91cpoEXxFhSSXPA5WS68XnLVMpEuTIdiiUQo64_UCemxTSGl1tLQO2MMtvzDmsygUwlvEDvTsC0XJh3mCVlDKUKwiOc1j-9XsvGZ3UmUlJ-2VOU55l5DOeGuEMcsQnOnpNJGKFC3JhBnQcB2prKf2Ip15Ss14nMVTIBetFZDtBx2bsWgX6Hxr9X1a6jICtoANjAwNjA0MDQxNTM1NTk2OTMzMg Message-ID: Subject: Alert: Suspicious login From: Google Workspace Alerts To: dzidonu@aitvarsity.net Content-Type: multipart/alternative; boundary="0000000000005e762e06248b37be" X-Spam-Status: No, score=-7.6 X-Spam-Score: -75 X-Spam-Bar: ------- X-Ham-Report: Spam detection software, running on the system "136-243-145-84.cprapid.com", has NOT identified this incoming email as spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see root\@localhost for details. Content preview: Notification from Google Google Workspace Image This Suspicious login alert is to inform you that Google has detected a suspicious login in your domain. Google considers login activity suspicious if we notice a sign in attempt that doesn't match a [...] Content analysis details: (-7.6 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- -7.5 USER_IN_DEF_DKIM_WL From: address is in the default DKIM welcome-list -0.0 SPF_PASS SPF: sender matches SPF record -0.1 DKIM_VALID Message has at least one valid DKIM or DK signature -0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's domain 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [209.85.166.71 listed in bl.score.senderscore.com] 0.0 HTML_MESSAGE BODY: HTML included in message 0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [209.85.166.71 listed in sa-accredit.habeas.com] 0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [209.85.166.71 listed in sa-trusted.bondedsender.org] -0.0 DKIMWL_WL_MED DKIMwl.org - Medium trust sender X-Spam-Flag: NO --0000000000005e762e06248b37be Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes Notification from Google Google Workspace Image This Suspicious login alert is to inform you that Google has detected a suspicious login in your domain. Google considers login activity suspicious if we notice a sign in attempt that doesn't match a user's normal behavior, such as a sign in from an unusual location, or because we think an unauthorized person attempted to access a user's account. The alert details include: User: ads19a00014y@ait.edu.gh Attempted Login IP: 103.147.230.17 Activity Date: Tuesday, Oct 15, 2024, 9:40:00 PM (UTC) Please view the alert center for additional details, investigation options, and remediation recommendations. Go to Alert Center You have received this important update about your Google Workspace account because you are the designated admin recipient for this alert type. You can turn off these alerts or change the email recipients in the System defined rules section of the Admin Console. Google LLC 1600 Amphitheatre Parkway Mountain View, CA 94043 --0000000000005e762e06248b37be Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Notification from G= oogle
3D"Google
= =C2=A0
=C2=A0

This Suspiciou= s login=C2=A0alert is to inform you that Google has detected a suspicious l= ogin in your domain. Google considers login activity suspicious if we notic= e a sign in attempt that doesn't match a user's normal behavior, su= ch as a sign in from an unusual location, or because we think an unauthoriz= ed person attempted to access a user's account.

The alert details include:

  • User: ads19a00014y@ait.edu.gh
  • Attempted Login IP: 103.147.230.17
=20
  • Activity Date: Tuesday, Oct 15, 2024, 9:40:= 00=E2=80=AFPM (UTC)

Please vi= ew the alert center for additional details, investigation options, and reme= diation recommendations.

Go to Alert Center

=C2=A0

You have received this= important update about your Google Workspace account because you are the d= esignated admin recipient for this alert type. You can turn off these alert= s or change the email recipients in the System defined rules section of the = Admin Console.

Google LLC 1600 Amphitheatre Parkway Mountain View, CA = 94043
=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 = =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0
3D"" --0000000000005e762e06248b37be--