From unknown Wed Apr 08 04:38:45 2026
X-Loop: owner@bugs.x2go.org
Subject: Bug#240: Unusual Login Attempt   
Reply-To: "Andrew   Staska" <Andrew.Staska@k12.nd.us>, 240@bugs.x2go.org
Resent-From: "Andrew   Staska" <Andrew.Staska@k12.nd.us>
Resent-To: x2go-dev@lists.x2go.org
Resent-CC: X2Go Developers <x2go-dev@lists.x2go.org>
X-Loop: owner@bugs.x2go.org
Resent-Date: Fri, 02 Jun 2017 04:55:01 +0000
Resent-Message-ID: <handler.240.B240.14963791596838@bugs.x2go.org>
Resent-Sender: owner@bugs.x2go.org
X-X2Go-PR-Message: followup 240
X-X2Go-PR-Package: x2goclient
X-X2Go-PR-Keywords: 
Received: via spool by 240-submit@bugs.x2go.org id=B240.14963791596838
          (code B ref 240); Fri, 02 Jun 2017 04:55:01 +0000
Received: (at 240) by bugs.x2go.org; 2 Jun 2017 04:52:39 +0000
X-Spam-Checker-Version: SpamAssassin 3.4.1 (2015-04-28) on
	ymir.das-netzwerkteam.de
X-Spam-Level: *
X-Spam-Status: No, score=1.8 required=3.0 tests=BAYES_50,DKIM_SIGNED,
	DKIM_VALID,HTML_MESSAGE,MISSING_HEADERS,RCVD_IN_DNSWL_BLOCKED,SPF_HELO_PASS,
	URIBL_BLOCKED autolearn=no autolearn_force=no version=3.4.1
Received: from localhost (localhost [127.0.0.1])
	by ymir.das-netzwerkteam.de (Postfix) with ESMTP id E6EDE5DAD3
	for <240@bugs.x2go.org>; Fri,  2 Jun 2017 06:52:37 +0200 (CEST)
X-Virus-Scanned: Debian amavisd-new at ymir.das-netzwerkteam.de
Received: from ymir.das-netzwerkteam.de ([127.0.0.1])
	by localhost (ymir.das-netzwerkteam.de [127.0.0.1]) (amavisd-new, port 10024)
	with ESMTP id p3U3BOGOcpjM for <240@bugs.x2go.org>;
	Fri,  2 Jun 2017 06:52:31 +0200 (CEST)
X-Greylist: delayed 8215 seconds by postgrey-1.35 at ymir.das-netzwerkteam.de; Fri, 02 Jun 2017 06:52:30 CEST
Received: from NAM01-BN3-obe.outbound.protection.outlook.com (mail-bn3nam01hn0212.outbound.protection.outlook.com [104.47.33.212])
	by ymir.das-netzwerkteam.de (Postfix) with ESMTPS id 7E19D5DA4A
	for <240@bugs.x2go.org>; Fri,  2 Jun 2017 06:52:30 +0200 (CEST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=nodak.onmicrosoft.com;
 s=selector1-k12-nd-us;
 h=From:Date:Subject:Message-ID:Content-Type:MIME-Version;
 bh=5V+MAeowefDmBJObt1WhlYYVrRsV4vFidUf9PH0p450=;
 b=hMcAjn25YBAURBy0eF4jhkyLQ4FU1KSUNNVIpLWimW3y3mxocseroz/F6iah3NsgJMzPpDoBR7Ul3jdmvhvn8UHf4KN8BUDfixwZEOJI31FP/0L680TU1VFAO4wQZaSHgu0VUsLCVDceCQsVc8G0A550AH+0jlxkvnOVZKiI0x4=
Received: from BY1PR0501MB1191.namprd05.prod.outlook.com (10.160.104.143) by
 BY1PR0501MB1190.namprd05.prod.outlook.com (10.160.104.142) with Microsoft
 SMTP Server (version=TLS1_2,
 cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.1143.6; Fri, 2 Jun
 2017 02:21:13 +0000
Received: from BY1PR0501MB1191.namprd05.prod.outlook.com ([10.160.104.143]) by
 BY1PR0501MB1191.namprd05.prod.outlook.com ([10.160.104.143]) with mapi id
 15.01.1143.013; Fri, 2 Jun 2017 02:21:13 +0000
From: "Andrew   Staska" <Andrew.Staska@k12.nd.us>
Thread-Topic: Unusual Login Attempt   
Thread-Index: AQHS20a6wn7ltyK24UW/CBqTm8zbAg==
Date: Fri, 2 Jun 2017 02:21:11 +0000
Message-ID: <BY1PR0501MB119196E4587F7553A3AEABC0A4F70@BY1PR0501MB1191.namprd05.prod.outlook.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
authentication-results: k2ob.com; dkim=none (message not signed)
 header.d=none;k2ob.com; dmarc=none action=none header.from=k12.nd.us;
x-originating-ip: [41.51.157.211]
x-ms-publictraffictype: Email
x-microsoft-exchange-diagnostics: 1;BY1PR0501MB1190;7:6yTtqRUPANFr5N48va8fHEiovqdjh0HOdlvVk85nKS2myEzc8aF58JsKTSfQkuqrzkfQVIO3l65kst3vYHEQKh38QkGsUqpCV/YNTKa9CiU9Idf0DjTIU0tUVLoqeah1gfDiUEL6iYxgQlyJ3O/8ZU38sZvqzeNTpR3G+lf/ytydI3h5+nledgibQyZhsP17zvCKw6zFiA1gS2QNHV3s74rKowRlJxssmojWs630D4nB3m/o47GuzW8oH+wDYYRo0R4u2t4xeJ9XvwlkfKpaMLSoHhfYnD9bAjGP4ztVO704zR43RiPvFvl4JVp9taFLeTgLBRz2AKI7/Bd7V1Hklg==
x-ms-traffictypediagnostic: BY1PR0501MB1190:
x-ms-office365-filtering-correlation-id: 0574f0eb-2df5-41e3-8eab-08d4a95e0ad9
x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:(22001)(2017030254075)(201703131423075)(201703031133081)(201702281549075);SRVR:BY1PR0501MB1190;
x-microsoft-antispam-prvs: <BY1PR0501MB1190CB0464FBADDD9B893A89A4F70@BY1PR0501MB1190.namprd05.prod.outlook.com>
x-exchange-antispam-report-test: UriScan:(73312121905874)(211936372134217);
x-exchange-antispam-report-cfa-test: BCL:0;PCL:0;RULEID:(100000700101)(100105000095)(100000701101)(100105300095)(100000702101)(100105100095)(6040450)(601004)(2401047)(8121501046)(5005006)(100000703101)(100105400095)(10201501046)(93006095)(93001095)(3002001)(6041248)(20161123564025)(20161123560025)(20161123555025)(20161123558100)(201703131423075)(201702281529075)(201702281528075)(201703061421075)(201703061406153)(20161123562025)(6072148)(100000704101)(100105200095)(100000705101)(100105500095);SRVR:BY1PR0501MB1190;BCL:0;PCL:0;RULEID:(100000800101)(100110000095)(100000801101)(100110300095)(100000802101)(100110100095)(100000803101)(100110400095)(100000804101)(100110200095)(100000805101)(100110500095);SRVR:BY1PR0501MB1190;
x-forefront-prvs: 03264AEA72
x-forefront-antispam-report: SFV:SPM;SFS:(10009020)(6039001)(39850400002)(39450400003)(39840400002)(39410400002)(39400400002)(50986999)(7066003)(10916006)(7906003)(7116003)(5660300001)(3660700001)(17550700004)(4270600005)(66066001)(7366002)(7406005)(7416002)(7336002)(3280700002)(88732003)(478600001)(189998001)(76576003)(881003)(7276002)(74482002)(53936002)(14454004)(558084003)(109986005)(110136004)(9686003)(6436002)(3480700004)(86362001)(77096006)(86372001)(236005)(72206003)(8676002)(8656002)(8666007)(99286003)(38730400002)(606005)(8936002)(81166006)(2906002)(588024002)(25786009)(1671002)(122556002)(97736004)(2900100001)(54896002)(6506006)(33656002)(6306002)(55016002)(68736007)(7736002)(54356999)(555874004)(3846002)(39060400002)(42882006)(102836003)(7696004)(6606003)(6116002)(74316002)(19627405001)(16490700004);DIR:OUT;SFP:1501;SCL:5;SRVR:BY1PR0501MB1190;H:BY1PR0501MB1191.namprd05.prod.outlook.com;FPR:;SPF:None;MLV:ovr;PTR:InfoNoRecords;LANG:en;
spamdiagnosticoutput: 1:22
Content-Type: multipart/alternative;
	boundary="_000_BY1PR0501MB119196E4587F7553A3AEABC0A4F70BY1PR0501MB1191_"
MIME-Version: 1.0
X-OriginatorOrg: k12.nd.us
X-MS-Exchange-CrossTenant-originalarrivaltime: 02 Jun 2017 02:21:11.3413
 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: dbbf782a-cef1-4af1-86c8-1f9201061db6
X-MS-Exchange-Transport-CrossTenantHeadersStamped: BY1PR0501MB1190

--_000_BY1PR0501MB119196E4587F7553A3AEABC0A4F70BY1PR0501MB1191_
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

For Details Verify<http://help-des.weebly.com/>


--_000_BY1PR0501MB119196E4587F7553A3AEABC0A4F70BY1PR0501MB1191_
Content-Type: text/html; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

<html>
<head>
<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Diso-8859-=
1">
<style type=3D"text/css" style=3D"display:none;"><!-- P {margin-top:0;margi=
n-bottom:0;} --></style>
</head>
<body dir=3D"ltr">
<div id=3D"divtagdefaultwrapper" style=3D"font-size:12pt;color:#000000;font=
-family:Calibri,Arial,Helvetica,sans-serif;" dir=3D"ltr">
<p></p>
<span style=3D"color: rgb(34, 34, 34); font-family: arial, sans-serif; font=
-size: small;">For Details&nbsp;</span><a href=3D"http://help-des.weebly.co=
m/" target=3D"_blank" data-saferedirecturl=3D"https://www.google.com/url?hl=
=3Den&amp;q=3Dhttp://k12-ndus.weebly.com&amp;source=3Dgmail&amp;ust=3D14964=
53667370000&amp;usg=3DAFQjCNHhAbcYaWAnzZ0Hb1SukGJO7k0a0Q" style=3D"color: r=
gb(17, 85, 204); font-family: arial, sans-serif; font-size: small;">Verify<=
/a>
<div id=3D"Signature">
<div id=3D"divtagdefaultwrapper" style=3D"font-size: 12pt; color: rgb(0, 0,=
 0); background-color: rgb(255, 255, 255); font-family: Calibri, Arial, Hel=
vetica, sans-serif, EmojiFont, &quot;Apple Color Emoji&quot;, &quot;Segoe U=
I Emoji&quot;, NotoColorEmoji, &quot;Segoe UI Symbol&quot;, &quot;Android E=
moji&quot;, EmojiSymbols;">
<p style=3D"color:rgb(0,0,0); font-family:Calibri,Arial,Helvetica,sans-seri=
f; font-size:12pt; background-color:rgb(255,255,255)">
<br>
</p>
<div style=3D"color:rgb(0,0,0); font-family:Calibri,Arial,Helvetica,sans-se=
rif; font-size:12pt; background-color:rgb(255,255,255)">
</div>
</div>
</div>
</div>
</body>
</html>

--_000_BY1PR0501MB119196E4587F7553A3AEABC0A4F70BY1PR0501MB1191_--
