Outlook profile changed - spoof?

[John Marsh]

I received a warning e-mail re. changes to account profile settings.

I have checked my recent activity and the changes originated in W. USA, from http://64.4.25.200 , which appears to be a Microsoft IP address. Can IP addresses be spoofed?

All other access has been from UK IP addresses. (BT's various 'final switch' locations.)

Furthermore, the changes were done via Internet Explorer, which I don't use.

I was online around the time of the changes. I cannot be sure that I didn't make any changes myself - by accepting what was already displayed in my Profile.

Anyway, password changed.


More information: the suspicious IP address gives no response to either Ping Plotter or an online utility.

[Avtrician]

I would suggest you ignore and delete the email, dont click on any links. Sounds like yet another phishing scam.

[John Marsh]

Thanks for the advice. This one's a bit odd. There was only one access event from the 64.4. etc IP address, which occurred a minute after I had signed in. It makes me wonder if someone set up a system to monitor the data pipeline and access accounts when they have just been accessed by their holders.

Similar reports: Microsoft account profile information changed? - Microsoft Community (http://answers.microsoft.com/en-us/outlook_com/forum/osecurity-oinfosafe/microsoft-account-profile-information-changed/6575cbfe-d887-41c5-99a8-b75417ad1887)

Microsoft Says Someone Changed My Profile Information - Microsoft Community (http://answers.microsoft.com/en-us/outlook_com/forum/osecurity-oinfosafe/microsoft-says-someone-changed-my-profile/c51ae674-d25e-4aa4-bbbe-0165d83865df)

If it's a snooper, why raise the alarm by changing profile information? I'm thinking it's some kind of quirk within Microsoft.

I have tried to replicate the events of yesterday, by viewing my Profile. No alert e-mails received.