Am I just being paranoid? (Gmail/Outlook.com)

A place to talk about anything technology related, incorporating the Tech Help section.

Moderator: Tech Moderators

Mr.Clark
Posts: 4435
Joined: Mon Mar 19, 2007 8:57 am

Am I just being paranoid? (Gmail/Outlook.com)

Postby Mr.Clark » Sun Nov 20, 2016 10:29 am

I don't know where else to ask this.

All of my domains are run through my Google Apps account. It's the only account I use, really.

I do have a my.name@outlook.com. account (I snatched it early in case I wanted to have a more "professional" non-Google email address).

I have been picking up email from this account into my Google account using POP3 for a few years.

On Friday, I got two notifications from Outlook.com saying

Microsoft account
Unusual sign-in activity
We've detected something unusual about a recent sign-in to the Microsoft account ga*****@outlook.com. To help keep you safe, we've required an extra security challenge.
Sign-in details:
Country/region: Unknown
IP address: 25.169.153.146
Date: 18/11/2016 02:02 (GMT)
If this was you, then you can safely ignore this email.
If you aren't sure whether this was you, a malicious user might have your password. Please review your recent activity and we'll help you take corrective action.


I looked up that IP address. According to CentralOps, that address belongs to the MOD!

Code: Select all

Queried whois.ripe.net with "-B 25.169.153.146"...

% Information related to '25.0.0.0 - 25.255.255.255'

% Abuse contact for '25.0.0.0 - 25.255.255.255' is 'hostmaster@mod.uk'

inetnum:        25.0.0.0 - 25.255.255.255
netname:        UK-MOD-19850128
country:        GB
org:            ORG-DMoD1-RIPE
admin-c:        MN1891-RIPE
tech-c:         MN1891-RIPE
status:         LEGACY
notify:         hostmaster@mod.uk
mnt-by:         UK-MOD-MNT
mnt-domains:    UK-MOD-MNT
mnt-routes:     UK-MOD-MNT
mnt-by:         RIPE-NCC-LEGACY-MNT
created:        2005-08-23T10:27:23Z
last-modified:  2016-04-14T09:56:26Z
source:         RIPE

organisation:   ORG-DMoD1-RIPE
org-name:       UK Ministry of Defence
org-type:       LIR
address:        Not Published
address:        Not Published
address:        Not Published
address:        UNITED KINGDOM
phone:          +44(0)3067700816
e-mail:         mathew.newton643@mod.gov.uk
admin-c:        MN1891-RIPE
abuse-c:        MH12763-RIPE
mnt-ref:        RIPE-NCC-HM-MNT
mnt-ref:        UK-MOD-MNT
mnt-by:         RIPE-NCC-HM-MNT
mnt-by:         UK-MOD-MNT
created:        2004-04-17T12:18:23Z
last-modified:  2016-10-06T11:09:40Z
source:         RIPE


I did a bit more digging (after shitting myself and changing the account password and setting up 2-factor authentication!).

That IP address is the one that is connecting to Outlook.com when Google checks for new mail. I confirmed by removing the account from Google, waiting a bit, then connecting it back up and checking the account activity.

Am I being paranoid to think that someone (Google?) is running their service through someone like GCHQ? Have I been reading too many Snowden articles?

WTF is going on?

User avatar
Ekona
Posts: 16625
Joined: Sun Mar 18, 2007 8:24 pm
Tag: Official member of the RB Anti Facist Party est. 2009
Location: Braintree, innit

Re: Am I just being paranoid? (Gmail/Outlook.com)

Postby Ekona » Sun Nov 20, 2016 10:45 am

I have no idea, but I love the tinfoil hattery of this! :D

Probably nothing. You'd think that if Google were using the MOD, or the MOD were out to get you, they'd be a little more subtle about it.
"Chav kids are like sand people. They're easily startled but they'll be back, and in greater numbers."

Mr.Clark
Posts: 4435
Joined: Mon Mar 19, 2007 8:57 am

Re: Am I just being paranoid? (Gmail/Outlook.com)

Postby Mr.Clark » Sun Nov 20, 2016 10:59 am

Given that I really haven't done anything, I doubt they're out to get me personally O_o

But if it's just some sort of sweeping net, I'm surprised no-one else has noticed yet. I'm not exactly an IT Security expert or anything.

Although come to think about it, I did google it. So it stands to reason I wouldn't find anything...

Image

User avatar
kingweed
Posts: 4187
Joined: Sun Mar 18, 2007 7:14 pm
Tag: Tags eh ?
Location: Just over there.
Contact:

Re: Am I just being paranoid? (Gmail/Outlook.com)

Postby kingweed » Sun Nov 20, 2016 11:01 am

lol'd

:lol:

User avatar
RB
Posts: 10689
Joined: Sun Mar 18, 2007 3:27 pm

Re: Am I just being paranoid? (Gmail/Outlook.com)

Postby RB » Sun Nov 20, 2016 1:03 pm

Have you called the phone number in the whois to see who answers?

Edit: I just did and got an answer phone. Googling that number shows a few people got called from it but then it was silent or hung up.
A slight majority of a statistically worthless sample size agree.

User avatar
Ekona
Posts: 16625
Joined: Sun Mar 18, 2007 8:24 pm
Tag: Official member of the RB Anti Facist Party est. 2009
Location: Braintree, innit

Re: Am I just being paranoid? (Gmail/Outlook.com)

Postby Ekona » Sun Nov 20, 2016 4:54 pm

"Chav kids are like sand people. They're easily startled but they'll be back, and in greater numbers."

Mr.Clark
Posts: 4435
Joined: Mon Mar 19, 2007 8:57 am

Re: Am I just being paranoid? (Gmail/Outlook.com)

Postby Mr.Clark » Sun Nov 20, 2016 6:38 pm

Did I try calling the MOD?

No. I did not. Didn't really want to draw attention to myself, you know? ;)

I did read that article. It does nothing to reduce my paranoia...

User avatar
RB
Posts: 10689
Joined: Sun Mar 18, 2007 3:27 pm

Re: Am I just being paranoid? (Gmail/Outlook.com)

Postby RB » Sun Nov 20, 2016 7:01 pm

I'm going to call them again in office hours. They are public servants and I want to know why they are spending my money spying on a bloke who I internet-know.
A slight majority of a statistically worthless sample size agree.

Mr.Clark
Posts: 4435
Joined: Mon Mar 19, 2007 8:57 am

Re: Am I just being paranoid? (Gmail/Outlook.com)

Postby Mr.Clark » Sun Nov 20, 2016 10:08 pm

Thanks...

(such thanks to be rescinded if an MI-5 kill squad snatches me off the streets)

Gi Me Beer
Posts: 2315
Joined: Tue Sep 04, 2007 8:45 am
Tag: French cars, my favourite

Re: Am I just being paranoid? (Gmail/Outlook.com)

Postby Gi Me Beer » Sun Nov 20, 2016 10:11 pm

No yr not, emigrate to Northern Cyprus now.

User avatar
RB
Posts: 10689
Joined: Sun Mar 18, 2007 3:27 pm

Re: Am I just being paranoid? (Gmail/Outlook.com)

Postby RB » Mon Nov 21, 2016 11:27 am

I called again, still an answer phone.
A slight majority of a statistically worthless sample size agree.

Joe
Posts: 5098
Joined: Sun Mar 18, 2007 5:40 pm

Re: Am I just being paranoid? (Gmail/Outlook.com)

Postby Joe » Wed Nov 23, 2016 2:36 pm



Return to “Tech Talk”

Who is online

Users browsing this forum: No registered users and 3 guests

cron