Unusual Account Activity from MS IP Addresses

Anonymous
2022-07-15T04:15:50+00:00

Yesterday I received an email from your Microsoft Account Team regarding unusual activity.  When I looked into it, it showed an unusual actvity detected for an Automatic POP3 sync from IP 13.101.248.75.  This activity did not have my account alias listed as it usually does, and listed the location as United States.  On the review activity page I said this was not me.  I changed my password, but then saw another unusual account activity from IP 13.101.248.41. This one did have my account alias listed.   I changed my passwords almost 1/2 dozen times yesterday.24hrs after my final password change, I received today another email regarding unusual activity.  It was another unusual activity detected for an Automatic POP3 sync from IP 13.101.248.75. Once again I confirmed this was not me, although this time I did not change my password.  Three hours later, I received yet another notification of unusual activity.  This time it was for IP 13.101.219.207  However, at the same time it had the exact same thing for IP address 13.101.53.212.  While I was not notified of that one, nor asked to confirm if this was me, it does list it as unusual activity. I looked all the IP address up on ARIN WHOIS.  According to them they all belong to Microsoft. I am sending this to all the email addresses on ARIN WHOIS that are listed as a point of contact.  I NEED ANSWERS. This has never happened before yesterday. I am afraid to confirm that these are me because I don't understand why MS IPs would be POP3 syncing to my account. I only have my Gmail account to POP3 sync to this email.  Those IP addresses tend to begin with a 2607 number.  I keep saying this isn't me, but not sure what I should do. Ignore, confirm it's me or continue to say it's not me. I want to know why is a Microsoft IP auto syncing to my email account? So much so that it generates an unusual activity text/email?I NEED some guidance on this.  There is no help article covering this.  And there is no way to contact a live person for help, which is ABSOLUTELY RIDICULOUS!

Outlook | Windows | Classic Outlook for Windows | For business

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments
Answer accepted by question author
Anonymous
2022-07-19T21:48:24+00:00

Finally got to talk to someone at MS- this was their reply:

Thank you for the information. Please be advise that Microsoft is aware of this known issue already. This started to happen even last week and we are already working with this matter. We even have created a ticket number for this issue while it is still happening.

The ticket number for the emerging issue is INC31680156.

So they are on it, but no idea when it will be fixed.

[EDIT] They also confirmed that the account was secure, no need to change passwords, etc

Was this answer helpful?

30+ people found this answer helpful.
0 comments

52 additional answers

Sort by: Oldest
Most helpful Newest Oldest
  1. Anonymous
    2022-07-19T18:59:09+00:00

    I have the same problem from Denmark. I was in the middle of moving and had to login to my account, when it showed and I accidentally clicked "this was me." Did NOT see that it was all the way from the US. Now I feel extremely stupid.

    I changed password and set up the authenticator, but I still get the note "succesfully synchronised" with somewhere in America. Tried to figure a way to contact them, but that is hell for sure! So i'll stay in here for updates. Whats going on for real.......

    Was this answer helpful?

    0 comments
  2. Anonymous
    2022-07-19T19:17:23+00:00

    Quick question for everyone….

    Are people using older devices that is using IMAP and basic Auth?

    My old man is on an iPhone 6 on iOS 12.5.5 where IMAP is used in the iOS mail app

    I’m on a 12 pro max iOS 16 beta using the mail app on iOS which now uses modern auth and active sync im sure.

    I wonder if this is a basic authentication issue since the stated depreciating it in late June 2022?

    obviously those using POP is Basic auth but I assume most are using the native mail apps on their devices?

    Dre

    Was this answer helpful?

    0 comments
  3. Anonymous
    2022-07-19T21:12:49+00:00

    Quick question for everyone….

    Are people using older devices that is using IMAP and basic Auth?

    My old man is on an iPhone 6 on iOS 12.5.5 where IMAP is used in the iOS mail app

    I’m on a 12 pro max iOS 16 beta using the mail app on iOS which now uses modern auth and active sync im sure.

    I wonder if this is a basic authentication issue since the stated depreciating it in late June 2022?

    obviously those using POP is Basic auth but I assume most are using the native mail apps on their devices?

    Dre

    Hi Dre

    i set up the POP3 import on my Gmail almost a decade ago. It's using the old pop3.live.com address. I typically access Gmail, and thus imports off my Android Device. That is currently Pixel 4a running Android 12. I did test setting up my secondary email on my dad's gmail with the newer POP3 address outlook.office365.com and got the same results. I have wondered the same thing about basic deprecation and what that means for those of using Gmail to POP3 import our MS email, but haven't found any answers yet. I know when you set these up as an import, you can choose to GMAILIFY said accounts, but I don't want to link an account that way to gmail. So I'm really hoping there is a way to still do the POP3 import, or it looks like I'll be turning on forwarding for my MS mail.

    Was this answer helpful?

    0 comments
  4. Anonymous
    2022-07-19T21:25:39+00:00

    Had yet another one today, same email. Im interested in the "To help keep you safe, we've blocked access to your inbox, contacts list, and calendar for that sign-in", yet I'm still able to retrieve emails.

    And apart from the nonsense scripted robot reply to the first post, any hope of MS adding something sensible to this thread?

    Was this answer helpful?

    0 comments