Return-Path: <3eU8PZx8KAJQ4CC492-KCF8GDy02-y92FHG-BCF2D9M4CC492.0CA@scoutcamp.bounces.google.com> Delivered-To: aitvarsity@136-243-145-84.cprapid.com Received: from 136-243-145-84.cprapid.com by 136-243-145-84.cprapid.com with LMTP id R8AyM6RPD2flSCgAHvuL7w (envelope-from <3eU8PZx8KAJQ4CC492-KCF8GDy02-y92FHG-BCF2D9M4CC492.0CA@scoutcamp.bounces.google.com>) for ; Wed, 16 Oct 2024 07:31:16 +0200 Return-path: <3eU8PZx8KAJQ4CC492-KCF8GDy02-y92FHG-BCF2D9M4CC492.0CA@scoutcamp.bounces.google.com> Envelope-to: dzidonu@aitvarsity.net Delivery-date: Wed, 16 Oct 2024 07:31:16 +0200 Received: from mail-yb1-f199.google.com ([209.85.219.199]:39639) by 136-243-145-84.cprapid.com with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256 (Exim 4.97.1) (envelope-from <3eU8PZx8KAJQ4CC492-KCF8GDy02-y92FHG-BCF2D9M4CC492.0CA@scoutcamp.bounces.google.com>) id 1t0wcu-0000000B4lw-3a0G for dzidonu@aitvarsity.net; Wed, 16 Oct 2024 07:31:16 +0200 Received: by mail-yb1-f199.google.com with SMTP id 3f1490d57ef6-e2929c15e69so1321513276.2 for ; Tue, 15 Oct 2024 22:30:54 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20230601; t=1729056633; x=1729661433; darn=aitvarsity.net; h=to:from:subject:message-id:feedback-id:reply-to:date:mime-version :from:to:cc:subject:date:message-id:reply-to; bh=rw4SJSUGWnAlbVg0pXJBORzjNAx1x+hPctOu2ABs4QQ=; b=mMubQBJAz+DmZlM+YmzVyic0tu7WJF84CkK6YHJ+OZYx4y+GI0U5MqOoj+0W9qdE0n M5qtulLikp3t0ycljQZzzrQJq4Vhu5XcwBy0RGZGXs5YKf+ZoE9h1axV2b2YNCEC/MnP JQINBktWaQBvziSRyHOepNzhiAJq9ctrUAi9vPyGL6fj6rcIYSnrZKYbB1T35+xfCTjI gEA3Q2UnR6BKjcvgb8YVEnhX06ajkE8daR/llG4Umo27Zb0OqQX/y9jK3k8/X0ln9wpS QKjsuHwtdCmx2UdE72kl9xYBO+JJEuy9j4dw+9X5zG5sI3BysSkA17v+wTGuOolHo/JE E42w== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1729056633; x=1729661433; h=to:from:subject:message-id:feedback-id:reply-to:date:mime-version :x-gm-message-state:from:to:cc:subject:date:message-id:reply-to; bh=rw4SJSUGWnAlbVg0pXJBORzjNAx1x+hPctOu2ABs4QQ=; b=NMAxGSK50LLiO2pKsdcwJPp9Y8iTWAoiR9sEcCNDMz7peHrQt1ALc7frfVAX0A8Xlb qTIRF1IP28SVbe8U99wkOE9hngkLpiKfiSubge+5c3Rl32J8c/mfwl+9DxfL+BsCbrPB nLPDygU5R5MXGivItzdXGHWTASi403V/iPouJAt3/CaQcNDPQ1hY6PaW4tvBIWpsv3mo hOt7RHH5guLqStkNdmTXMWBVvTUZLbSHgPyu1l62PIwipIvf4kFun8FQQaeE+GxGjRcx a9HB+6GJO2+d6fY5C/16x211psa57frsLVJXFHjfLZUk/TdwUbGrr5F0KYmjOFwNnbvj 2pKw== X-Gm-Message-State: AOJu0YxSHyPHTNGvfrX3tHz/dnI4PZJku9NEx7J4WsE/fcNwbAda/eKL Wb9hn+MPxV4XyiT/NkrZ3Yzd/JfBLMIyx+PT3jJLJCadu/wNJdgcYVh6 X-Google-Smtp-Source: AGHT+IELBBxkWIcFQBn3/B4cgJLHmMADaM2UibKwIJAfyK8wPHqTTekCoj5oo+AlDnrSobz54JOTXDE= MIME-Version: 1.0 X-Received: by 2002:a05:690c:ec5:b0:6e2:1842:c2d4 with SMTP id 00721157ae682-6e3471e4934mr65725757b3.0.1729056633343; Tue, 15 Oct 2024 22:30:33 -0700 (PDT) Date: Tue, 15 Oct 2024 22:30:33 -0700 Reply-To: Google Workspace Alerts X-Google-Id: 263011 Feedback-ID: P1709-0:C20113082:M110293278-en:gamma X-Notifications: 185da01087420000 X-Notifications-Bounce-Info: AdZT3xQZwsahgh674mdRM8E9W0XzJAXZdZkuTOLu1zu-zIYpdxyIhR0xikLQAxmkypnsbCGS8MSByOvt3AFmz-rc687n6GX76VO3sf5woLXuSc-2Yp4Q7mPBIGwwUO4s0vehkRg2mEcZnAdlblk58h3ZnZK8O80fLd9YoTgihR5Mgc2_81qJfAwCQftcH_mMMIVeuKh_l0hlhrIh9pLEKEvPVLQ1noyj9xGb6JoeTF7JGLGgSG5daR4pw2tKUvGLpKx_6uB1Dz9vkUdUL01vpkatMc6OUrpjc9oDK0FxNZ9sz1-lVYVvYzSDEBVE_GLpkFV9q1r3m8bzehdyoYOMByUhmjXNgCsM_VlP2he48LcBXKNcePM49oi7ATiZ862Xc0v0CLrrSItHCR2gYkjKj0-fyiiOfhWYuIxyIfg7vtIhl7ND7TMvybnazTU3EXBCuU4-E0yqhFoVFLdAuuxPBOV5BWlsHsw_HSubLzN3bGGYEPl3RhfziZ8CdHphQ3jcOhJHZhlMJ_3v1nB8N2zhGrTd58YV_f6VFy5KO7O4WvHMcIQ35K9N1e4Dhn7RYZ3kUbMp1YadzT5feVPpGYLWWo-o4WjxSpkjSlWHKUnijKCnZF8NjAwNjA0MDQxNTM1NTk2OTMzMg Message-ID: <31dfe78137f230a35f08ed1473748185a05d63f9-20113082-110821613@google.com> Subject: Alert: Suspicious login From: Google Workspace Alerts To: dzidonu@aitvarsity.net Content-Type: multipart/alternative; boundary="0000000000006d50d20624915e6f" X-Spam-Status: No, score=-7.6 X-Spam-Score: -75 X-Spam-Bar: ------- X-Ham-Report: Spam detection software, running on the system "136-243-145-84.cprapid.com", has NOT identified this incoming email as spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see root\@localhost for details. Content preview: Notification from Google Google Workspace Image This Suspicious login alert is to inform you that Google has detected a suspicious login in your domain. Google considers login activity suspicious if we notice a sign in attempt that doesn't match a [...] Content analysis details: (-7.6 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- -0.0 SPF_PASS SPF: sender matches SPF record -7.5 USER_IN_DEF_DKIM_WL From: address is in the default DKIM welcome-list 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid -0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's domain -0.1 DKIM_VALID Message has at least one valid DKIM or DK signature 0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [209.85.219.199 listed in bl.score.senderscore.com] 0.0 HTML_MESSAGE BODY: HTML included in message 0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [209.85.219.199 listed in sa-trusted.bondedsender.org] 0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [209.85.219.199 listed in sa-accredit.habeas.com] -0.0 DKIMWL_WL_MED DKIMwl.org - Medium trust sender X-Spam-Flag: NO --0000000000006d50d20624915e6f Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes Notification from Google Google Workspace Image This Suspicious login alert is to inform you that Google has detected a suspicious login in your domain. Google considers login activity suspicious if we notice a sign in attempt that doesn't match a user's normal behavior, such as a sign in from an unusual location, or because we think an unauthorized person attempted to access a user's account. The alert details include: User: eng20b00166y@ait.edu.gh Attempted Login IP: 77.76.13.66 Activity Date: Wednesday, Oct 16, 2024, 5:00:29 AM (UTC) Please view the alert center for additional details, investigation options, and remediation recommendations. Go to Alert Center You have received this important update about your Google Workspace account because you are the designated admin recipient for this alert type. You can turn off these alerts or change the email recipients in the System defined rules section of the Admin Console. Google LLC 1600 Amphitheatre Parkway Mountain View, CA 94043 --0000000000006d50d20624915e6f Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Notification from G= oogle
3D"Google
= =C2=A0
=C2=A0

This Suspiciou= s login=C2=A0alert is to inform you that Google has detected a suspicious l= ogin in your domain. Google considers login activity suspicious if we notic= e a sign in attempt that doesn't match a user's normal behavior, su= ch as a sign in from an unusual location, or because we think an unauthoriz= ed person attempted to access a user's account.

The alert details include:

  • User: eng20b00166y@ait.edu.gh
  • Attempted Login IP: 77.76.13.66
=20
  • Activity Date: Wednesday, Oct 16, 2024, 5:0= 0:29=E2=80=AFAM (UTC)

Please vi= ew the alert center for additional details, investigation options, and reme= diation recommendations.

Go to Alert Center

=C2=A0

You have received this= important update about your Google Workspace account because you are the d= esignated admin recipient for this alert type. You can turn off these alert= s or change the email recipients in the System defined rules section of the A= dmin Console.

Google LLC 1600 Amphitheatre Parkway Mountain View, CA = 94043
=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 = =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2= =A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0
3D"" --0000000000006d50d20624915e6f--