[Cause] User x has logged in from the Internet at user level y. [Countermeasure] This is a password record.