Microsoft Account - unusual activity

Had this from the Microsoft Account Team: "We detected something unusual about a recent sign-in for the Microsoft account *** Email address is removed for privacy *** For example, you might be signing in from a new location, device, or app."

I followed the "Review Recent Activity" link and found an IMAP entry with an "Approximate location: United States" and a "Type: Successful Sync".

This certainly was not me - I live in the UK! I followed the recommendations and change my password, checked a few hours later and found new "United States" entries. I have changed my password several times now but cannot prevent this unauthorized access. Below is an example:

This was followed by:

I am running Windows 7

Can anyone please help me resolve this problem ?

 

Hi, Janet.

I'm Jen, I'm also an Outlook user just like you. I'm not working for Microsoft but I'd be happy to help you figure this out.

Based on the screenshots, it looks like your account is compromised. It would be best to change your password and secure the account immediately. Also, use the "Sign me out" link found in https://account.live.com/proofs/manage/ to help you sign out your account from apps or browsers it was signed into. However, please be advised that this may take 24 hours.

I also recommend reviewing your security info to make sure there are no changes made and enable your 2-step verification. I shared some articles below with additional steps that you may find helpful.
https://support.microsoft.com/en-us/office/help...
https://support.microsoft.com/en-us/account-bil...
https://support.microsoft.com/en-us/office/my-o...

I hope this somehow helps. Feel free to share how it went.

Kind regards.

1 person found this reply helpful

·

Was this reply helpful?

Sorry this didn't help.

Great! Thanks for your feedback.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this reply?

Thanks for your feedback.

It's not likely your account has been compromosed. Many people are reporting this same thing and it appears to be caused by Microsoft because the 13.101.x.x addresses belong to Microsoft. Here's another thread about it: https://answers.microsoft.com/en-us/outlook_com/forum/all/outlook-mail-account-unusual-activity/6cfb226f-8cd7-41ae-bd0a-a80d100af543 

Brian

Was this reply helpful?

Sorry this didn't help.

Great! Thanks for your feedback.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this reply?

Thanks for your feedback.

Hi Jen

Thanks for your reply.

I don't know if you've seen Brian Tillman's response which, together with the thread he gives the link for, indicates that there isn't in fact a problem since the 13.101.x.x address belongs to Microsoft. The discussion also gives a link to a website from which you can look up the owner of an IP address. I didn't know about this - I think it's really useful.

Again, thanks for taking the trouble to reply to my question.

Regards, Janet

Was this reply helpful?

Sorry this didn't help.

Great! Thanks for your feedback.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this reply?

Thanks for your feedback.

Brian

Many thanks for the reply and the information. It's certainly put my mind at rest.

Regards,

Janet

Was this reply helpful?

Sorry this didn't help.

Great! Thanks for your feedback.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this reply?

Thanks for your feedback.

 
 

Question Info


Last updated October 21, 2022 Views 446 Applies to: