Return-Path: <3tSwPZx8KAIou22uzs-A25y63oqs-ozs576-125s3zCu22uzs.q20@scoutcamp.bounces.google.com> Delivered-To: aitvarsity@136-243-145-84.cprapid.com Received: from 136-243-145-84.cprapid.com by 136-243-145-84.cprapid.com with LMTP id V0PmFOIsD2fQ2ScAHvuL7w (envelope-from <3tSwPZx8KAIou22uzs-A25y63oqs-ozs576-125s3zCu22uzs.q20@scoutcamp.bounces.google.com>) for ; Wed, 16 Oct 2024 05:02:58 +0200 Return-path: <3tSwPZx8KAIou22uzs-A25y63oqs-ozs576-125s3zCu22uzs.q20@scoutcamp.bounces.google.com> Envelope-to: dzidonu@aitvarsity.net Delivery-date: Wed, 16 Oct 2024 05:02:58 +0200 Received: from mail-qt1-f197.google.com ([209.85.160.197]:41965) by 136-243-145-84.cprapid.com with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256 (Exim 4.97.1) (envelope-from <3tSwPZx8KAIou22uzs-A25y63oqs-ozs576-125s3zCu22uzs.q20@scoutcamp.bounces.google.com>) id 1t0uJO-0000000AxM4-0D74 for dzidonu@aitvarsity.net; Wed, 16 Oct 2024 05:02:58 +0200 Received: by mail-qt1-f197.google.com with SMTP id d75a77b69052e-4606ebc507cso6925801cf.3 for ; Tue, 15 Oct 2024 20:02:35 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20230601; t=1729047734; x=1729652534; darn=aitvarsity.net; h=to:from:subject:message-id:feedback-id:reply-to:date:mime-version :from:to:cc:subject:date:message-id:reply-to; bh=4qLdR0Xi0PeCMvR9uIeTroV1Q4nCoqIxc1smJBFnBDY=; b=Bcogd6FRKjYQYjVhM98Vj6iou3+boK6WydnIppNst0KWO1GfzqM/TdDz2Vp3Ln9DW6 p6ZHSuvO4g3NnU0B9x9FpFHCf4EiOLFVxowTKsuqQ1nUu2Xz7T6r8qTmEOWi/tyMEZ27 lGJSa47AtEdSo6bAg2QvV1W4RVlFntbHW1qpz4LO7YRtCqy6lHUQcGyn44N0qnMWO75A uy5D8JFirmhgIDRPGp1cUSH82S+4R/ViOFpH25p+pXW3hsX5KoBJRVFnIYD1fE7y3uvN 0eSAPIspXoUqZ5O8MGo84YEVMBagr6Dnnf/LJGqQ/jdNpVzbZcU6Fi5hu1MJIR7hns5n v+bA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1729047734; x=1729652534; h=to:from:subject:message-id:feedback-id:reply-to:date:mime-version :x-gm-message-state:from:to:cc:subject:date:message-id:reply-to; bh=4qLdR0Xi0PeCMvR9uIeTroV1Q4nCoqIxc1smJBFnBDY=; b=UTPIqhdHyP5YQPPG45ZsixiMM+KeKGY60FF5wzLrDaWdsx4cKckmAxdLrM79UGYLjo BzJtuYSRbed+nDX+krD6NDS7EQFP6gtmKR9t0r5XJ2kwWHclmjkrwZeq8I4MwEigkv0L bPE+Hv9z67x6mY13J3AxuLncEYcOQxO80U/sSHSPRsKraoOrxxEaOp5u45CJNiX0FKnp FNhFOTrSN0DHU5p3hDLMugfzOiJvPuC8AHc5UgmSPjJqq+nzI26TIoGQbnnD3I1ETNyP ZU4kUMQio71hJjWnsPolGoo8jb5UxgfqEbqPAxfHpE9XzQfyooDRoH5zbO75AMZGV3Po yi7w== X-Gm-Message-State: AOJu0YxURGKudxmg2UvUcktuDxJtKXOkEmTSyPR12u3R3T9M48rd36AN ub8Q4YN7sv8SSsXM0KdLqCDqCLn9qW/L2YYm5D+pKh9Oa4aR8yqMEqlj X-Google-Smtp-Source: AGHT+IGqe3Qk69UIkRJIrcuoQykjRNgvenI8yPy6VO+OMPcsuIpOR7g/lyGPYPdfd2/0e+sgMyW8zOg= MIME-Version: 1.0 X-Received: by 2002:ac8:7dca:0:b0:460:4846:e1cf with SMTP id d75a77b69052e-4604bbb8a5fmr125033981cf.6.1729047733809; Tue, 15 Oct 2024 20:02:13 -0700 (PDT) Date: Tue, 15 Oct 2024 20:02:13 -0700 Reply-To: Google Workspace Alerts X-Google-Id: 263011 Feedback-ID: P1709-0:C20113082:M110293278-en:gamma X-Notifications: 0490563da0220000 X-Notifications-Bounce-Info: AdZT3xRDFSm-eJ6DqDqrIbiLjTjWsUtfPsYe6pZyOndDIMbYwBG1nYCnOojpTW5l-ZXOK9BqKQL2dmhpgtwALGRxpTXhDe_iTES6-chiTAipkb0WV9Q4Mzl29oIJSuI4ldXAy8QqSFJMFVU1XUrMmIHYAz3cq9YkjII_m038YzBtErPrfoRMaPp6XiujvzUJDuz-LRWvddMxmsCqm6oiCc-Z3V_ofX-s_juC90Oy6cBrH-kQrAn_HIbT788S6GqA3PLtQ8aTJj1F59wXtEnxnhh4nMyFWcSKH0Hmpe4f_pIxmNxPI22t5xMG06JVVzeY8IlZDwlm1DWZxsaeG-iqvjLsyMhNsW9NEENrRbdnt7FnObT5bCo0MJZqmSI0g8xe4ERi6EwjAqGrby_1r9uYsQ9QIh8Eet2SLRiP9NPgrd7FRnbvyKZX8bNBLzqt7gSEtXow7sQDZEMrSDom0Gq7FX4I07jG-8ZqgiuaBs4DTApMEK9muWE8LiK2uaXui8UM36xIS8_auqBfRaXnt5Lx_Kd4C6znfHBjRq1Yr-bYqVAZ6d1shjOvU7IW-N7lOQkixS_HfSZq1BIXxCJ2KNqO9gETjLpjYl4L1WgChG5_l9mH5XMNjAwNjA0MDQxNTM1NTk2OTMzMg Message-ID: Subject: Alert: Suspicious login From: Google Workspace Alerts To: dzidonu@aitvarsity.net Content-Type: multipart/alternative; boundary="000000000000f933fb06248f4b1e" X-Spam-Status: No, score=-7.6 X-Spam-Score: -75 X-Spam-Bar: ------- X-Ham-Report: Spam detection software, running on the system "136-243-145-84.cprapid.com", has NOT identified this incoming email as spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see root\@localhost for details. Content preview: Notification from Google Google Workspace Image This Suspicious login alert is to inform you that Google has detected a suspicious login in your domain. Google considers login activity suspicious if we notice a sign in attempt that doesn't match a [...] Content analysis details: (-7.6 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- -0.0 SPF_PASS SPF: sender matches SPF record -7.5 USER_IN_DEF_DKIM_WL From: address is in the default DKIM welcome-list 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid -0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's domain -0.1 DKIM_VALID Message has at least one valid DKIM or DK signature 0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [209.85.160.197 listed in bl.score.senderscore.com] 0.0 HTML_MESSAGE BODY: HTML included in message 0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [209.85.160.197 listed in sa-accredit.habeas.com] 0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [209.85.160.197 listed in sa-trusted.bondedsender.org] -0.0 DKIMWL_WL_MED DKIMwl.org - Medium trust sender X-Spam-Flag: NO --000000000000f933fb06248f4b1e Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes Notification from Google Google Workspace Image This Suspicious login alert is to inform you that Google has detected a suspicious login in your domain. Google considers login activity suspicious if we notice a sign in attempt that doesn't match a user's normal behavior, such as a sign in from an unusual location, or because we think an unauthorized person attempted to access a user's account. The alert details include: User: ads22a00072y@ait.edu.gh Attempted Login IP: 154.161.159.79 Activity Date: Wednesday, Oct 16, 2024, 2:32:10 AM (UTC) Please view the alert center for additional details, investigation options, and remediation recommendations. Go to Alert Center You have received this important update about your Google Workspace account because you are the designated admin recipient for this alert type. You can turn off these alerts or change the email recipients in the System defined rules section of the Admin Console. Google LLC 1600 Amphitheatre Parkway Mountain View, CA 94043 --000000000000f933fb06248f4b1e Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Notification from G= oogle
3D"Google
= =C2=A0
=C2=A0

This Suspiciou= s login=C2=A0alert is to inform you that Google has detected a suspicious l= ogin in your domain. Google considers login activity suspicious if we notic= e a sign in attempt that doesn't match a user's normal behavior, su= ch as a sign in from an unusual location, or because we think an unauthoriz= ed person attempted to access a user's account.

The alert details include:

  • User: ads22a00072y@ait.edu.gh
  • Attempted Login IP: 154.161.159.79
=20
  • Activity Date: Wednesday, Oct 16, 2024, 2:3= 2:10=E2=80=AFAM (UTC)

Please vi= ew the alert center for additional details, investigation options, and reme= diation recommendations.

Go to Alert Center

=C2=A0

You have received this= important update about your Google Workspace account because you are the d= esignated admin recipient for this alert type. You can turn off these alert= s or change the email recipients in the System defined rules section of the = Admin Console.

Google LLC 1600 Amphitheatre Parkway Mountain View, CA = 94043
=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 = =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0
3D"" --000000000000f933fb06248f4b1e--