Return-Path: <39yQCZx8KAIgs00sxq-803w41moq-mxq354-z03q1xAs00sxq.o0y@scoutcamp.bounces.google.com> Delivered-To: aitvarsity@136-243-145-84.cprapid.com Received: from 136-243-145-84.cprapid.com by 136-243-145-84.cprapid.com with LMTP id cBWnACQlAmfjIhEAHvuL7w (envelope-from <39yQCZx8KAIgs00sxq-803w41moq-mxq354-z03q1xAs00sxq.o0y@scoutcamp.bounces.google.com>) for ; Sun, 06 Oct 2024 07:50:28 +0200 Return-path: <39yQCZx8KAIgs00sxq-803w41moq-mxq354-z03q1xAs00sxq.o0y@scoutcamp.bounces.google.com> Envelope-to: dzidonu@aitvarsity.net Delivery-date: Sun, 06 Oct 2024 07:50:28 +0200 Received: from mail-pf1-f199.google.com ([209.85.210.199]:40768) by 136-243-145-84.cprapid.com with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256 (Exim 4.97.1) (envelope-from <39yQCZx8KAIgs00sxq-803w41moq-mxq354-z03q1xAs00sxq.o0y@scoutcamp.bounces.google.com>) id 1sxK9y-00000004i6t-1z1N for dzidonu@aitvarsity.net; Sun, 06 Oct 2024 07:50:27 +0200 Received: by mail-pf1-f199.google.com with SMTP id d2e1a72fcca58-71df7364394so205187b3a.3 for ; Sat, 05 Oct 2024 22:50:06 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20230601; t=1728193783; x=1728798583; darn=aitvarsity.net; h=to:from:subject:message-id:feedback-id:reply-to:date:mime-version :from:to:cc:subject:date:message-id:reply-to; bh=6HHSUeu2V2hbC5ZSfb+kh+DyDZQeJl4+XdKXT50tbBs=; b=JSkaRXI/W7y6n1n/CYghpP0NNGb+mKHeA9cbOOVeT6QdnLnfNT+WcA7c4j/+9veQlW DF/+926Z2BoRw5AzKQQKoqqAe+/TdFUNY6V4vOoF9a0tLSWs7j2XtblKG/o7GCqcp9aq CCeoHZvsxvaPCJHk9M11MH6fWhndcvoIMrJEViUA3IwPlAKO7iWtEvkAe7uZKZOzCMxP NvbjFCWbnfnaa66Kv3W0iO1OyqwydeqRiqBRaCF0SDWena4T/z4A1EGfN2glD8MAz8MT CUZqKX6PvMNlEZaMOI4+eGqpN/ehiZaORUtJfr6eA2DCv8NV4ByNmETw28O5KZD1eGsD TsHw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1728193783; x=1728798583; h=to:from:subject:message-id:feedback-id:reply-to:date:mime-version :x-gm-message-state:from:to:cc:subject:date:message-id:reply-to; bh=6HHSUeu2V2hbC5ZSfb+kh+DyDZQeJl4+XdKXT50tbBs=; b=wHV2q/T9yFrVVavbA8p/WzZmkZkMWVGHkgOcblHS8qJ3kLpJ+mn1h1s+uJKFO4NsaG 8/bHaOtMUs6NhMqbPEUkTn5HHEBcfo7juTG8l3Cqg6entLisOSq4l5tLlIcIRUkpZNtv Vxw5Fpc/aVI2IBST9Zmk5ltsMlRoJz79Flkwnr7vOnnWmIgzJKdbjzDBdpErmu2bJHmp m484DJ5a6TrGUJ1p9OYPHS07HlIEqDVYkwZ9K0w0iei+QTjbfauQlr910WfikNOZ/iZe +v/+fBxrgUUmMexDDQYt3M3s17JAp56ec5FO1F1zO+eCr24L9P/W7APtVw4JcmMqroja +AkQ== X-Gm-Message-State: AOJu0Yw0zB9o/5Xb/h3QS9Bmya5Li/hjxY8GLn5ZCa4gcH3bDt8lujPD gyCZ4eep78qY5p1SrVAa4reWxLzkRWWhMctsW/hOPpRtTwbuisY1UWsL X-Google-Smtp-Source: AGHT+IFl/vNoqkV8EGsXMWie5UGyMQPHpPHZmb6WmqZclIp6BCStHiMvCesgPWSppkb5OVY0Y5wUSBg= MIME-Version: 1.0 X-Received: by 2002:a05:6a21:328d:b0:1cf:4dc7:e4fc with SMTP id adf61e73a8af0-1d6dfa288cemr5954955637.2.1728193783618; Sat, 05 Oct 2024 22:49:43 -0700 (PDT) Date: Sat, 05 Oct 2024 22:49:43 -0700 Reply-To: Google Workspace Alerts X-Google-Id: 263011 Feedback-ID: P1709-0:C20113082:M110293278-en:gamma X-Notifications: 015533b3ec420000 X-Notifications-Bounce-Info: AdZT3xQWIwiFW1myYcB0asn3BNaMV8k7bOwt3IQZyZIntSz879MXe8NQgRwsZYWXVaHtYgYPGsoYQxDSF75LyEF_CffHEe3H1JjGTkNPKxl_C3dCB_hM1fkmq6WdhiH71GQC6tCPWNNa-wB9gNKuPNnnGAo7pJ5I6KZU8k9Z9vyP-viCvWhqfAeARuGKEb7ZmH3TVxUoceFV9nxVPJZrMnNPGCOjRemjcnAaFLAWWcQRJi1WGlzzJ469MDeWLmZhsZYiFxHvbaeqvne6WMWjPh6a0K5i6Bz-bwBhDQGuGqCQP3Us7tChA8Nr_2zg1R_UmmDszy1iyikPj6MWG5v-HOYEWJE_OhlVYcG4Om7kX-P5ILYwL6d7NEk0qS9tPnpWmUC76UcFb56uBeh4LiyzZOTwoc0szf4JEON_mmd4nI5RugmVkMZ9HqB1an59Zpj3mTmKCWZBTfXvSfyHY4mlU8fF74h8NS8jTEvlnPgEc9f1ywNV9sCFdJw_XxBQZDgBH6JbwURwtVMkqkYtPHuL9yrdeWx87OZ8JoxeXSepaFGckwqgNR2dul2QZAQwMszlF_Oz4MCiSATNvbgOQAYAk_4sIsIIiMDICs1njJasSUOlDaL6TANjAwNjA0MDQxNTM1NTk2OTMzMg Message-ID: <196d0381b9dfe5558b52840c1df5ba882650f1d4-20113082-110821613@google.com> Subject: Alert: Suspicious login From: Google Workspace Alerts To: dzidonu@aitvarsity.net Content-Type: multipart/alternative; boundary="00000000000093608c0623c87819" X-Spam-Status: No, score=-7.6 X-Spam-Score: -75 X-Spam-Bar: ------- X-Ham-Report: Spam detection software, running on the system "136-243-145-84.cprapid.com", has NOT identified this incoming email as spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see root\@localhost for details. Content preview: Notification from Google Google Workspace Image This Suspicious login alert is to inform you that Google has detected a suspicious login in your domain. Google considers login activity suspicious if we notice a sign in attempt that doesn't match a [...] Content analysis details: (-7.6 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- -7.5 USER_IN_DEF_DKIM_WL From: address is in the default DKIM welcome-list -0.0 SPF_PASS SPF: sender matches SPF record -0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's domain 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid -0.1 DKIM_VALID Message has at least one valid DKIM or DK signature 0.0 HTML_MESSAGE BODY: HTML included in message 0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [209.85.210.199 listed in sa-accredit.habeas.com] 0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [209.85.210.199 listed in sa-trusted.bondedsender.org] 0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [209.85.210.199 listed in bl.score.senderscore.com] -0.0 DKIMWL_WL_MED DKIMwl.org - Medium trust sender X-Spam-Flag: NO --00000000000093608c0623c87819 Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes Notification from Google Google Workspace Image This Suspicious login alert is to inform you that Google has detected a suspicious login in your domain. Google considers login activity suspicious if we notice a sign in attempt that doesn't match a user's normal behavior, such as a sign in from an unusual location, or because we think an unauthorized person attempted to access a user's account. The alert details include: User: ads17a00060y@ait.edu.gh Attempted Login IP: 171.226.30.24 Activity Date: Sunday, Oct 6, 2024, 5:19:38 AM (UTC) Please view the alert center for additional details, investigation options, and remediation recommendations. Go to Alert Center You have received this important update about your Google Workspace account because you are the designated admin recipient for this alert type. You can turn off these alerts or change the email recipients in the System defined rules section of the Admin Console. Google LLC 1600 Amphitheatre Parkway Mountain View, CA 94043 --00000000000093608c0623c87819 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Notification from G= oogle
3D"Google
= =C2=A0
=C2=A0

This Suspiciou= s login=C2=A0alert is to inform you that Google has detected a suspicious l= ogin in your domain. Google considers login activity suspicious if we notic= e a sign in attempt that doesn't match a user's normal behavior, su= ch as a sign in from an unusual location, or because we think an unauthoriz= ed person attempted to access a user's account.

The alert details include:

  • User: ads17a00060y@ait.edu.gh
  • Attempted Login IP: 171.226.30.24
=20
  • Activity Date: Sunday, Oct 6, 2024, 5:19:38= =E2=80=AFAM (UTC)

Please vi= ew the alert center for additional details, investigation options, and reme= diation recommendations.

Go to Alert Center

=C2=A0

You have received this= important update about your Google Workspace account because you are the d= esignated admin recipient for this alert type. You can turn off these alert= s or change the email recipients in the System defined rules section of the = Admin Console.

Google LLC 1600 Amphitheatre Parkway Mountain View, CA = 94043
=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 = =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0
3D"" --00000000000093608c0623c87819--