Live.com login activity and a warning "Unusual activity detected"

Anonymous

I could not find a more direct forum than Outlook to ask this question, if it is not the right forum my apologies.

I received an e-mail alert that indicated unusual activity detected on my live.com account. When I checked the recent activity, I found two IP numbers. One matched my external IP and the other did not. I changed my password right away and checked the activity again. To my surprise, the other IP and its variants were appearing along with my external IP number at the same intervals.

I tried to find the IP number roots and ironically, it pointed at Microsoft. I am really confused! Can someone explain the source of this IP and whether I need to do anything to stop it from occurring.? I use Edge browser and I log in with my account. When it syncs, does it use a separate IP from my IP number?

Thank you,

Cemal

Note: I am not using the Outlook mail client. I check my mail using two different mail clients on two different computers at the same location that share the same external IP number. On occasion, I check my live.com e-mail online using a Web browser.

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments

46 answers

Anonymous

2022-07-13T17:30:02+00:00
I also just got email about "Microsoft account unusual sign-in activity", and reviewing activity I see:
```
Protocol: POP3
```
IP: 13..39Account alias:@live.com Time: 2 hours agoApproximate location: United StatesType: Unusual activity detected

What I find interesting is that the IP address belongs to Microsoft:
```
Source Registry
ARIN
Net Range
13.*********.0 - 13.*********.255
CIDR
13.*********.0/11
13.*********.0/13
13.*********.0/14
Name
MSFT
Handle
NET-13-64-0-0-1
```
Could it be some normal internal activity at Microsoft that is being mis-reported as unusual?

-T
```
     ***\*\*\*\*Remove PII\*\*\*\****
```
Was this answer helpful?

0 comments No comments
Anonymous

2022-07-13T01:50:33+00:00

Thank you, we will be waiting.

Cemal
Was this answer helpful?

0 comments No comments
Anonymous

2022-07-12T01:22:15+00:00

Hello again,

I have a new screen capture and some entries have tiny map squares in them. The Rhode Island map would be my location but I have no idea about the square that shows Seatle, Tacoma area.

Thank you for looking into this.

****Remove PII****
Was this answer helpful?

0 comments No comments

Anonymous

For the record, I have just received a message. I am putting a copy of the message below. This is quite disconcerting, I would like to find a solution to this as quickly as possible.

Thank you,

Cemal

Sender: Microsoft account team <******@accountprotection.microsoft.com>

Microsoft account
Verify your account
We detected something unusual about a recent sign-in for the Microsoft account ac********@live.com. For example, you might be signing in from a new location, device, or app.
To help keep you safe, we've blocked access to your inbox, contacts list, and calendar for that sign-in. Please review your recent activity and we'll help you secure your account. To regain access, you'll need to confirm that the recent activity was yours.
	Review recent activity	<br>	---
Thanks,
The Microsoft account team

0 comments

Anonymous

2022-07-11T13:12:41+00:00

Thank you. Yes, I had a screen capture yesterday, but I captured a new one just now. I am attaching it to this message.

I hope we can find a good answer.

Cemal

****Remove PII****
Was this answer helpful?

0 comments No comments