Forum Discussion
Why are Microsoft Data Centres logging in to my Office 365 accounts? Activity Alerts - BAV2ROPC
Hello, I have an activity alert set up to email me whenever a log in is detected from one of my 12 office 365 email users. These emails contain the username logging in and the IP address the log in o...
Starting seeing this since 2/10/2020, even on account that are "Sign in blocked" since last year.
Today, one of the user was logged in by this account and then 1 hour letter, we internally received phishing email from this user.
We monitored login closely and this user had no sign of credential being compromised because all logins in the past 30 days are from proper device and IP address, only 1 incident that is using this agent today.
| UserLoggedIn | 2020-03-11T00:36:50 | BAV2ROPC | 52.96.3.197 | Microsoft Corporation | San Jose | California | United States |
This sounds MS datacenter being compromised or what?