Return-Path: <3tMoLZx8KALcdlldib-tlohpmXZb-Xiboqp-klobmivdlldib.Zlj@scoutcamp.bounces.google.com> Delivered-To: aitvarsity@136-243-145-84.cprapid.com Received: from 136-243-145-84.cprapid.com by 136-243-145-84.cprapid.com with LMTP id +J7yL+DKC2cMMx0AHvuL7w (envelope-from <3tMoLZx8KALcdlldib-tlohpmXZb-Xiboqp-klobmivdlldib.Zlj@scoutcamp.bounces.google.com>) for ; Sun, 13 Oct 2024 15:28:00 +0200 Return-path: <3tMoLZx8KALcdlldib-tlohpmXZb-Xiboqp-klobmivdlldib.Zlj@scoutcamp.bounces.google.com> Envelope-to: dzidonu@aitvarsity.net Delivery-date: Sun, 13 Oct 2024 15:28:00 +0200 Received: from mail-il1-f198.google.com ([209.85.166.198]:39070) by 136-243-145-84.cprapid.com with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256 (Exim 4.97.1) (envelope-from <3tMoLZx8KALcdlldib-tlohpmXZb-Xiboqp-klobmivdlldib.Zlj@scoutcamp.bounces.google.com>) id 1szydZ-000000081ll-2UoI for dzidonu@aitvarsity.net; Sun, 13 Oct 2024 15:28:00 +0200 Received: by mail-il1-f198.google.com with SMTP id e9e14a558f8ab-3a3b7141d2cso1124435ab.0 for ; Sun, 13 Oct 2024 06:27:37 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20230601; t=1728826036; x=1729430836; darn=aitvarsity.net; h=to:from:subject:message-id:feedback-id:reply-to:date:mime-version :from:to:cc:subject:date:message-id:reply-to; bh=C5lHvFUxPMxf8Ndve7hI3mmBDeK57/gakR4qydpjRtE=; b=JhoP8jM06Nd91omhyujkc+IHB6ym30XVswzJDGZGn/4JtgqimIBSrkNhiUyMEsTL2V BJg974Alos6GuAjgfG0DgDoIAzzRWuFmuyS9mXgLqzmwjSFexKbt4Gtj3VnXbvC9urcb YDNh90Bi76b6/dlA2sBo5M1T5mSUBDJsdEQXK1fJgOYy65D3IJMJA68W+2NmUkQPuAMb mZ06nJdw/qmiotecU05iop9jwQFj617b+BvCiqC9cUz0qQDfBwhteo8bGteKiHWTSi8g Pfp+Lv2xL1jMZOXpgHtLOepSHq6W2+ple0PW2sgxvOV/gUrwkf7XDI43itOvDoINJWrS vEqw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1728826036; x=1729430836; h=to:from:subject:message-id:feedback-id:reply-to:date:mime-version :x-gm-message-state:from:to:cc:subject:date:message-id:reply-to; bh=C5lHvFUxPMxf8Ndve7hI3mmBDeK57/gakR4qydpjRtE=; b=SXoYSPaHWcFriZsNPgiZgOzELF1vJ5lUj8tF7qGzu6D8wHJk9J32snUWHD+ZQdNOXe ICT//xSHIlUFIeRZU/5K2E2qgCh2NGSfaznbol9kKh058seVZM5Ubmur/YW3/ETO3kWf nYaVZUeA58x+Tww6vDOwFnSkdiqOtDCUBCslw9NTlucatjfOKrgwrvYM+B31pacjGiTh lLrYqCDGuKkBArJ+w5T4pTs0AVjuoPyfy626xrRFmgNq0QdKP51pIa2jJ6zhMM6D1uSi Q/CIBQNcsUv7eUYA/Zf7i6bj175THQtjCetwmCeqbEmLWpveocJDZ/2JRTCeQwn7CAuS qtag== X-Gm-Message-State: AOJu0Yw6XYlPv4zkHagILOb5vPhDKYIjA04HlV+oKHu3Ti1HLhllYaYb PPGmfaPG+wi8eR/lEhoUarjRi7iU1V2gByizV85I5hvYHECnk1uiUMmA X-Google-Smtp-Source: AGHT+IH5rei2p/HFpzpdRCWTYbriO62Ty/0kp/GfEFbMqo7YWl4CW1Jeea/F0edoYoQlH+/kWlETPLM= MIME-Version: 1.0 X-Received: by 2002:a05:6e02:1c29:b0:3a1:f549:7290 with SMTP id e9e14a558f8ab-3a3b6081a7bmr18135145ab.6.1728826036195; Sun, 13 Oct 2024 06:27:16 -0700 (PDT) Date: Sun, 13 Oct 2024 06:27:16 -0700 Reply-To: Google Workspace Alerts X-Google-Id: 263011 Feedback-ID: P1709-0:C20113082:M110293278-en:gamma X-Notifications: 6e5b9091ad420000 X-Notifications-Bounce-Info: AdZT3xQno9_bApEG7PonmS6lpQR5-s-udG5RCNCqQZ6c2ZJUKsGaVcokmVRYTxYe3D8gowtVWM7qUnrr5V5Se7WGhvXZ7XIF5LPU2Mo6KtNRTTbeHMjNXQ2Q09VEfJuO5ywowrXTqPZ6uv84R1gmZjFBkj7wfYknV8qbOamhLq7YXWk_pO4dpPYj-1lIU9JOhxtKtJps1PvFEjjic6aucNtFiCSkT7Gse81ZCgylG3t0AiDlHQ3jp1QdhTW1BL97o9rH40SmCNXNEKgkWg9vbNKEKAozANfiYcL_GVyFRew_EF0EoAUzkuMUg86Dgjl9iERkpUHYaOoiSa0L9ozzB5N5NkmQwjqwBIaWpEc2BzKCPG3TWOAOpG9hk7rhUdgAG_PyWkevzu9SzDbnx9rOHye6DXF4c8dxSaJlZC-7gTxmqqe7vtbEfAsKubjKmyMpIvZK5RAjLl7kYjL65RzqIkJHB6f48F6jJd0FK0nfjs88zffZdiDhQM28LXwLBZXqTUChilukTNW8mfeDzSBuA0wj2djHbv7PGp_v4lsIFbTqpL1M4Drep6iSiDxi7gaA9cQZFuzOO4S_KinZS1qFR0WCh8uPpj4z91Iukzubuk6lPoQNjAwNjA0MDQxNTM1NTk2OTMzMg Message-ID: <8b4b66ac18be9108cd5cea848b007dc48850d194-20113082-110821613@google.com> Subject: Alert: Suspicious login From: Google Workspace Alerts To: dzidonu@aitvarsity.net Content-Type: multipart/alternative; boundary="000000000000c4159206245bad37" X-Spam-Status: No, score=-7.6 X-Spam-Score: -75 X-Spam-Bar: ------- X-Ham-Report: Spam detection software, running on the system "136-243-145-84.cprapid.com", has NOT identified this incoming email as spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see root\@localhost for details. Content preview: Notification from Google Google Workspace Image This Suspicious login alert is to inform you that Google has detected a suspicious login in your domain. Google considers login activity suspicious if we notice a sign in attempt that doesn't match a [...] Content analysis details: (-7.6 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- -7.5 USER_IN_DEF_DKIM_WL From: address is in the default DKIM welcome-list -0.0 SPF_PASS SPF: sender matches SPF record -0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's domain -0.1 DKIM_VALID Message has at least one valid DKIM or DK signature 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [209.85.166.198 listed in bl.score.senderscore.com] 0.0 HTML_MESSAGE BODY: HTML included in message 0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [209.85.166.198 listed in sa-trusted.bondedsender.org] 0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [209.85.166.198 listed in sa-accredit.habeas.com] -0.0 DKIMWL_WL_MED DKIMwl.org - Medium trust sender X-Spam-Flag: NO --000000000000c4159206245bad37 Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes Notification from Google Google Workspace Image This Suspicious login alert is to inform you that Google has detected a suspicious login in your domain. Google considers login activity suspicious if we notice a sign in attempt that doesn't match a user's normal behavior, such as a sign in from an unusual location, or because we think an unauthorized person attempted to access a user's account. The alert details include: User: abs1@ait.edu.gh Attempted Login IP: 41.155.68.151 Activity Date: Sunday, Oct 13, 2024, 12:57:13 PM (UTC) Please view the alert center for additional details, investigation options, and remediation recommendations. Go to Alert Center You have received this important update about your Google Workspace account because you are the designated admin recipient for this alert type. You can turn off these alerts or change the email recipients in the System defined rules section of the Admin Console. Google LLC 1600 Amphitheatre Parkway Mountain View, CA 94043 --000000000000c4159206245bad37 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Notification from G= oogle
3D"Google
= =C2=A0
=C2=A0

This Suspiciou= s login=C2=A0alert is to inform you that Google has detected a suspicious l= ogin in your domain. Google considers login activity suspicious if we notic= e a sign in attempt that doesn't match a user's normal behavior, su= ch as a sign in from an unusual location, or because we think an unauthoriz= ed person attempted to access a user's account.

The alert details include:

  • User: abs1@ait.edu.gh
  • Attempted Login IP: 41.155.68.151
=20
  • Activity Date: Sunday, Oct 13, 2024, 12:57:= 13=E2=80=AFPM (UTC)

Please vi= ew the alert center for additional details, investigation options, and reme= diation recommendations.

Go to Alert Center

=C2=A0

You have received this= important update about your Google Workspace account because you are the d= esignated admin recipient for this alert type. You can turn off these alert= s or change the email recipients in the System defined rules section of the = Admin Console.

Google LLC 1600 Amphitheatre Parkway Mountain View, CA = 94043
=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 = =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0
3D"" --000000000000c4159206245bad37--