Unauthorized successful sessions are being registered in my Authenticator
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(6.4, 24%, 10%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EJO%3C/text%3E%3C/svg%3E)
My Authenticator is registering sessions coming from UK - I'm in Portugal and all my activity has been here, so such a wrong localization seems unlikely - and has been conceding successful entrance on my 365 account.
The IP addresses correspond to UK's companies addresses (basic info running "whois").
Last week someone wiped out all my OneDrive info. I could get it up and running using MS OneDrive Restor.
I changed the login methods - changing passwords, using MFA, and no password access. I still get entries in Authenticator saying that there was a "successful session start".
Maybe it's my fault, maybe some kind of bad configuration, and these are just web sessions that my apps request (I erased all my specific app passwords) from a UK server, or the like. Or it can be a security failure. Any way, what is your advice? what can I do to end this?
Thanks.