Why is a Microsoft IP address accessing my outlook.com account?

Discussion in 'Off Topic Area' started by annabanana, Jan 20, 2015.

  1. annabanana

    annabanana Active Member

    Joined:
    Jul 12, 2014
    Messages:
    167
    Likes Received:
    48
    Trophy Points:
    28
    Location:
    at the beach
    My Device:
    SPro3
    I wonder if any of the Microsoft MVPs or others have any ideas about this. Twice now I have gotten notices from Microsoft (Microsoft account team [account-security-noreply@account.microsoft.com] of unusual sign-in activity. Both times are from the same IP address which appears to belong to Microsoft.

    Sign-in details:
    Country/region: United States
    IP address: 132.245.80.28

    This IP address apparently belongs to Microsoft.
    http://whois.domaintools.com/132.245.80.28
    NetRange: 132.245.0.0 - 132.245.255.255
    CIDR: 132.245.0.0/16
    NetName: MICROSOFT
    NetHandle: NET-132-245-0-0-1
    Parent: NET132 (NET-132-0-0-0-0)
    NetType: Direct Assignment
    OriginAS:
    Organization: Microsoft Corp (MSFT-Z)
    RegDate: 2011-06-22
    Updated: 2013-08-20
    Ref: http://whois.arin.net/rest/net/NET-132-245-0-0-

    At first I thought it might be phishing email, but it appears to be legit.

    I've contacted Microsoft support but so far all I got was now to change my password, add two-factor authentication, etc. What I'd really know is why is a person or script/bot, or whatever accessing my account.
     
  2. jnjroach

    jnjroach Administrator Staff Member

    Joined:
    Nov 9, 2012
    Messages:
    7,106
    Likes Received:
    1,724
    Trophy Points:
    113
    Location:
    Seattle, WA USA
    My Device:
    Surface Book
    Weird.... that looks to be a Sales Office in Wichita, KS

    Try here:

    http://www.msgsoc.com/

    This is Microsoft's Global Security...
     
  3. Tsurugaya

    Tsurugaya Active Member

    Joined:
    Jan 23, 2014
    Messages:
    395
    Likes Received:
    28
    Trophy Points:
    28
    Could they have account names that might be confused by a typo?
     
  4. annabanana

    annabanana Active Member

    Joined:
    Jul 12, 2014
    Messages:
    167
    Likes Received:
    48
    Trophy Points:
    28
    Location:
    at the beach
    My Device:
    SPro3
    Weird indeed. How did you get that it's a sales office in Wichita? When I tracert the IP it stops at 207.xxx... MSN something
    I don't see anything on the Global Security site that would be helpful for this issue - maybe I am missing something.

    I have 3 smartphones, my desktop, my SP3 and Windows mail on the SP3 all using the same MS id. It's real pain to have to change the password on everything.

    It started after I set up my email on a new smartphone on AT&T. A mistyped my password a couple it times - would that trigger something at Microsoft to access my account?
     
  5. kundas1

    kundas1 Super Moderator Staff Member

    Joined:
    Dec 4, 2013
    Messages:
    1,653
    Likes Received:
    299
    Trophy Points:
    83
    My Device:
    SPro3
    Its one of the 3 lettered GOV. People...
     
  6. GreyFox7

    GreyFox7 Super Moderator Staff Member

    Joined:
    Jul 27, 2014
    Messages:
    6,342
    Likes Received:
    1,279
    Trophy Points:
    113
    I suppose you could Tweet at msgsoc, the response should be interesting :)
    Why is MS 132.245.80.28 accessing my email account?

    It might be the Chinese or North Koreans :D
    The alphabet agencies would only be interested in mail to/from 'Persons of Interest' although junk or spam could be of interest under the right circumstances then again it could just have been a typo. :D

    I know you can get flagged pretty easily because my dad called me and said he forgot his password to his MS Account to login to his computer. Sometimes he can mistype his PW repeatedly or he forgets what he's done... :) At one point I launched the browser from my desktop try his password on his account and was immediately flagged because of the 'different' IP address even though I never got on.
     
    Last edited: Jan 21, 2015
  7. jnjroach

    jnjroach Administrator Staff Member

    Joined:
    Nov 9, 2012
    Messages:
    7,106
    Likes Received:
    1,724
    Trophy Points:
    113
    Location:
    Seattle, WA USA
    My Device:
    Surface Book
    I used this:
    http://whatismyipaddress.com/ip/132.245.80.28

    It appears to be a regional field office used by the US Sub..

    The Microsoft Global Security has a Contact Us Section on the link I posted....
     
  8. GreyFox7

    GreyFox7 Super Moderator Staff Member

    Joined:
    Jul 27, 2014
    Messages:
    6,342
    Likes Received:
    1,279
    Trophy Points:
    113
    From the geolocation blurb on whatsmyipadress:
    And as this article is being written (at a local coffee shop), the geo-locator says I'm near Wichita, Kansas, when I'm in fact smelling the breezes off the Pacific Ocean between San Diego and Los Angeles. (If you go to our Hide IP address page you'll find out how that can happen.)​

    There's something about Wichita ... I've seen that popup before :)
     
  9. jnjroach

    jnjroach Administrator Staff Member

    Joined:
    Nov 9, 2012
    Messages:
    7,106
    Likes Received:
    1,724
    Trophy Points:
    113
    Location:
    Seattle, WA USA
    My Device:
    Surface Book
    Yes, I know how to abscond IP Addresses, but if in fact this is a MS IP Address, they have an office in that location. I'm in Bellevue, WA but Comcast Business has my POP in San Antonio, TX....
     
  10. GreyFox7

    GreyFox7 Super Moderator Staff Member

    Joined:
    Jul 27, 2014
    Messages:
    6,342
    Likes Received:
    1,279
    Trophy Points:
    113
    The MS office is on the southwest side of Wichita but the goelocator pin is a farm field on the northeast side. :) according to satellite images anyway. of course certain things are officially not shown in satellite images... so that field may really be a datacenter or the guy in that farm house may be running a service in his barn alongside the milking machines. :D
     
  11. jnjroach

    jnjroach Administrator Staff Member

    Joined:
    Nov 9, 2012
    Messages:
    7,106
    Likes Received:
    1,724
    Trophy Points:
    113
    Location:
    Seattle, WA USA
    My Device:
    Surface Book
    It is wherever the Point of Presence (POP) reports....it's seldom exact or even close especially in "Flyover Country" ;)
     
  12. annabanana

    annabanana Active Member

    Joined:
    Jul 12, 2014
    Messages:
    167
    Likes Received:
    48
    Trophy Points:
    28
    Location:
    at the beach
    My Device:
    SPro3
    I looked at that Contact Us page but it has links to their social media sites only.
    I have some other contacts to try.
     

Share This Page

Search tags for this page
ip adress from microsoft redmond accessing my account
,
microsoft ip accessed my email
,
microsoft outlook unusual sign-in activity
,
unusual activity from ip address
,
unusual email activity from an ip address
,

unusual sign in activity ip address is microsoft

,
whois microsoft account team