Multiple sign in attempts from another country and not me

Those prompts mean someone or something is repeatedly trying to sign in to the account using the correct username and password, and Microsoft Authenticator is blocking the attempts at the second factor.

What to do:

1. Continue to deny any requests not initiated personally
   Authenticator and Outlook mobile are designed so that if a prompt appears that was not requested, selecting Deny keeps the account safe.
2. Change the account password immediately
   Since repeated prompts indicate ongoing attempts, change the password for the affected account to a strong, unique one. This invalidates any stored or stolen password that might be in use.
3. Review recent sign-in activity
   In the account’s security/sign-in activity page, check for unfamiliar locations, devices, or times. If anything looks suspicious, sign out of all sessions and change the password again if needed.
4. Keep multifactor authentication enabled
   Do not turn off Microsoft Authenticator or MFA. MFA is what is preventing these attempts from succeeding.
5. Be alert for phishing and social engineering
   Attackers may call, text, or email pretending to be support or a bank and ask to read out the Authenticator code or approve a prompt. No legitimate company should ever ask for verification codes over the phone or ask to approve a sign-in that was not initiated.

If unrequested prompts continue frequently even after changing the password, consider updating all recovery info (phone, email), and review devices and sessions again to ensure only trusted devices remain associated with the account.

References:

• Using Outlook mobile to sign in
• Authentication methods in Microsoft Entra ID - Microsoft Authenticator app
• Microsoft Authenticator FAQs