A bit of background.
I got an email a few days ago that said:
We think that someone else might have accessed the Microsoft account *******@*******.net. When this happens, we require you to verify your identity with a security challenge and then change your password the next time you sign in.
If someone else has access to your account, they have your password and might be trying to access your personal information or send junk email.
If you haven't already recovered your account, we can help you do it now.
Learn how to make your account more secure.
The Microsoft account team
So naturally, I just ignored it. Typical scam. Then it showed up again.
So THIS time I decided to just go into live.com directly WITHOUT clicking links in email, and discovered the same message in my account.
So low and behold, it was legitimate. But I was very confused because I thought Microsoft a) doesn't alert to security breaches like this, and this looks really bad very similar to a phishing scam.
I check and sure enough Microsoft discontinued the use of email to alert back in July. But Manually verifying through live.com showed it was true. Confused......but whatever to that. For now.
So now onto the actual problem.
While having a look at the recent activity, I discovered hundreds of security challenges to my account, none of which appeared successful. Each attempt a minute or two apart, and constantly for 4 days, 24 hours a day, 1-2 minutes apart. All coming from the same IP. So I think some little turd is trying to brute force my password. I immediately change the password to a very secure one.
THEN, I run the IP. Low and behold, it's coming from my own house.
I run around the house, checking my kids computers, XBOX, laptop, everything is powered off. Definitely during periods of known activity.
Since I changed the passwords, now the activity has completely stopped. But they never gained access anyway. And it was from inside my own house.
WHAT the H-E double hockey sticks is happening here?