Some of the activity logs show "activesync", which I assume is my WP. Other log entries show logging in from Windows CE devices, which is very strange. But yes

Some of the activity logs show "activesync", which I assume is my WP. Other log entries show logging in from Windows CE devices, which is very strange. But yes, "datacenter" was the first thing that popped into my head. Then of course there were the constant failed security question checks coming in at a rapid pace. I pretty much assume those are dangerous. I changed my PW to something insanely long with lots of nice junk in it and added two factor on top of that.