Microsoft Account > Security > Unusual Activity

I have also been getting my MSAccount logged into by US IP addresses, 13.101.xxx.xxx. I didn't think to check their WhoIs entry but, following your lead, I can see that they are all MS addresses.

I had changed my password once [at MS's suggestion since they flagged up that intrusion had occurred] yet the bugger had logged in to my MSAccount again within five hours.
I changed my password again then scanned for malware but found nothing [I had been wondering if spyware of some kind was involved].
- I have not updated the saved password in Firefox as a means of testing if a leak in it has betrayed my password.
- Similarly, I have not been using MSOffice Outlook and have instead been logging in online to check email, which is a real pain in the butt compared to letting Outlook do it for me.


Their logging in pattern is weird. Around 12th July there were a couple of logins, between about 18th & 19th there were a dozen or more, since 19th there have been none.

Perhaps they're trawling for bots & fake accounts.

Added an hour later:-
And there was an unsuccessful attempt to long while I was writing this post.

So whoever is doing this is basing it on old data and I'll be interested in seeing when they succeed. They had the new password five hours after I set it up a week ago yet do not have the new one I set up two days ago.
This failed intrusion happened ten minutes before I re-started using MSOffice Outlook for my emails.



Thanks for telling me that I'm not alone,
Denis

tfwul said:

So, I guess it had something to do with automatic sync

I only use local accounts on my computer.
I do not have automatic sync on anything.
The only times I expect to see an entry is when my Outlook runs to check email & when I manually log in to my MSAccount online using Edge.
{I have not yet bothered to update the password in my Firefox, on my other computers or on my phone so there's nothing of mine that could be doing it behind my back.}

I had another of the strange logins in the early hours of this morning.

All the best,
Denis

NMI said:

OUTLOOK MAIL ACCOUNT - UNUSUAL ACTIVITY

Thanks for finding that explanation,

Denis

@Brink
@z3r010

I think this would be a useful News section item.

NMI said:

Outlook email users alerted to suspicious activity from Microsoft-owned IP address

It would save people wasting time having to review their recent activity & change passwords.

All the best,
Denis

Try3 said:

@Brink
@z3r010

I think this would be a useful News section item.

It would save people wasting time having to review their recent activity & change passwords.

All the best,
Denis

Outlook email users alerted to suspicious activity from Microsoft IPs