Unauthorized sign-in attempts

Question

Unauthorized sign-in attempts

Bob Jaffe 0

In the last week, I’ve had two attempts to sign in to my Microsoft account. Both times I received a notification to confirm a sign-in attempt via Microsoft Authenticator. I denied both attempts and changed both my password and sign-in protocol after the first attempt, but want to check to see if you this is happening to anyone else.

Gene Russell 0 Reputation points

2026-07-06T20:15:41.93+00:00

Your "ANSWERS" keep suggesting I should be able to SEE the unsuccessful login attempts but you ONLY SHOW my successful logins!!!! I've literally had dozens of attempts which result in approval requests on my phone and I constantly DENY them but then when I check the activity THERE'S NEVER ANY TRACE OF THE ATTEMPTS!!!!! WHY AREN'T YOU SHOWING THEM IN THE LOGIN ACTIVITY???????
Gene Russell 0 Reputation points

2026-07-06T20:17:52.83+00:00

LIST ALL THE LOGIN ATTEMPTS TO MY ACCOUNT AND NOT JUST THE SUCCESSFUL ONES!!!! I'VE HAD REPEATED ATTEMPTS BY SOMEONE TO LOGIN TO MY ACCOUNT AND I KEEP HAVING TO DENY THEM ON MY MOBILE PHONE AND THEN WHEN I COME HERE TO SEARCH FOR THE ACTIVITY, IT'S NEVER LISTED!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

1 answer

Your answer

Gene Russell 0 Reputation points

2026-07-06T20:15:41.93+00:00

Your "ANSWERS" keep suggesting I should be able to SEE the unsuccessful login attempts but you ONLY SHOW my successful logins!!!! I've literally had dozens of attempts which result in approval requests on my phone and I constantly DENY them but then when I check the activity THERE'S NEVER ANY TRACE OF THE ATTEMPTS!!!!! WHY AREN'T YOU SHOWING THEM IN THE LOGIN ACTIVITY???????
Gene Russell 0 Reputation points

2026-07-06T20:17:52.83+00:00

LIST ALL THE LOGIN ATTEMPTS TO MY ACCOUNT AND NOT JUST THE SUCCESSFUL ONES!!!! I'VE HAD REPEATED ATTEMPTS BY SOMEONE TO LOGIN TO MY ACCOUNT AND I KEEP HAVING TO DENY THEM ON MY MOBILE PHONE AND THEN WHEN I COME HERE TO SEARCH FOR THE ACTIVITY, IT'S NEVER LISTED!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

Answer 1

Those notifications mean someone (or something like a bot) is trying to sign in with the correct username but doesn’t have your second factor. Because Microsoft Authenticator is blocking the attempts and they’re being denied, the account is still protected.

To review and further secure the account:

Check recent sign-in activity
- For a personal Microsoft account, go to the Security basics page and select Review activity to open the Recent activity page. Review all sign-ins and mark anything you don’t recognize as This wasn’t me or Secure your account as appropriate.
- For a work or school account, go to My Account, select Recent activity, and review each sign-in. If anything looks unfamiliar, immediately change the password and then update security info at Security info.
Interpret the attempts correctly
- Unsuccessful sign-ins can mean either mistyped credentials or that an attacker is trying to guess the password. If you see “Additional verification failed, invalid code” under Session activity, it means the password was correct but MFA stopped the sign-in. In that case, changing the password and reviewing security info is recommended.
Strengthen protection
- Keep multi-factor authentication (two-step verification) enabled; it prevents access even if the password is guessed.
- After changing the password, sign out of other sessions and review security info (phone numbers, emails, and registered authenticators) to ensure only trusted methods are present.

If this continues or you suspect someone else is trying repeatedly to access a work or school account, contact the organization’s IT administrator so they can review Microsoft Entra sign-in logs and adjust security as needed.

References: