I recieved request to authorize login from unknown location, denied, can I see list of requests

Question

Level 1

11 points

I recieved request to authorize login from unknown location, denied, can I see list of requests

One of my devices was lost, is locked, and am waiting for it to turn on. Today I received a request on another device to authorize access to an unspecified device\purpose from a location on other side of country.

I checked the lost device and still shows not turned on so I don't know what that was. Of course I did not authorize, but is there a way I can see a history of these requests to try find out more?

Tx

iPad, iPadOS 13

Posted on Jun 12, 2020 11:10 AM

Reply

Answer 1

Jun 12, 2020 11:13 AM in response to AWilliei

You can't get a list, but you can Check your Apple ID device list (https://support.apple.com/en-us/HT205064) and remove any device that shouldn't be signed in using the steps in the link.

If there are none that shouldn’t be signed in, then you should not have a problem at this point. But, if an unauthorized device is signed in, Change your Apple ID password https://support.apple.com/en-us/HT201355

Here is What to do after you change your Apple ID or password https://support.apple.com/en-us/HT204071

And see these security-related Apple Documents to deal with cases of unauthorized sign ins and other security matters:

If you think your Apple ID has been compromised https://support.apple.com/en-us/HT201303

Security and your Apple ID https://support.apple.com/en-us/HT201303

iCloud security overview https://support.apple.com/en-us/HT202303

Ways to keep your information safe on Mac https://support.apple.com/en-gb/guide/mac-help/mh11402/mac

Using app-specific passwords https://support.apple.com/en-us/HT204397

Reply

Answer 2

Jun 12, 2020 12:51 PM in response to AWilliei

You are very welcome. You should remove it from your device list if it was not supposed to be signed in. You won't be able to get details. But see the following from Two-factor authentication for Apple ID https://support.apple.com/en-us/HT204915.

When you sign in on a new device, you’ll get a notification on your other trusted devices that includes a map showing the approximate location of the new device. This is an approximate location based on the IP address the device is currently using, rather than the exact location of the device. The location shown might reflect the network you're connected to, and not your physical location.

If you know you’re the person trying to sign in but you don’t recognize the location shown, you can still tap Allow and continue signing in. However, if you ever see a notification that your Apple ID is being used to sign in on a new device and you're not the one signing in, tap Don’t Allow to block the sign in attempt.

Reply

Answer 3

Eric Root

Level 10

686,035 points

Jun 12, 2020 8:01 PM in response to AWilliei

One possibility. If this is an e-mail you received, or a popup on the screen, about the time you were actually logging in, there is probably nothing to worry about. The location in the e-mail is where your ISP reported it. If their servers are in a location distant from you, there will be a large error. Based on other posts I have read, the distant error can be very large.

Reply

Answer 4

AWilliei Author

Level 1

11 points

Jun 12, 2020 2:14 PM in response to Eric Root

unlikely it would be.

Reply

Answer 5

AWilliei Author

Level 1

11 points

Jun 12, 2020 12:10 PM in response to donv_the_ghost

Thank you. I locked it right away with notify and a message to appear when turned on, and am checking regularly with find my device....looking in my macbook it appears in a list of signed in devices but also says cannot be used to receive Apple ID verification codes.

I am hoping to recover and not have to wipe it, which requires it be turned on to happen anyways, if I am correct.

I suspended service with my provider as well. Can I actually sign out of it or is that how I am able to keep tracking for when it turns on?

I think I have done everything I can but that verification request from a remote and distant location shook me up. No way to get details on that at all?

Oh, edit...it does have a link to Remove from Account.....but if I do that don't I lose the ability to track and or remote wipe?

Thanx again eh?

Reply

Answer 6

AWilliei Author

Level 1

11 points

Jun 12, 2020 12:47 PM in response to Eric Root

Tx....see above, done that except no wipe and @donv got me thinking about the possible impact of remove from account and ability to track and\or wipe when I have decided not getting it back.

If you can shed any light on that would be helpful.

Reply

Answer 7

Eric Root

Level 10

686,035 points

Jun 12, 2020 1:03 PM in response to AWilliei

You are welcome. Did you look at the What happens when you erase a device in Find My iPhone? section in the first article I posted?

After you erase a device, you can’t use Find My iPhone to locate the device or play a sound on it. However, you may still be able to locate your Mac or Apple Watch if it’s near a previously used Wi-Fi network.

Reply

Answer 8

AWilliei Author

Level 1

11 points

Jun 12, 2020 2:15 PM in response to donv_the_ghost

I already have that....it is what sparked this post. I got a request like you described on another device to authorize. It's in the original post.

I am holding off cause I want to recover it as was but about to accept a loss soon.

Reply

Answer 9

AWilliei Author

Level 1

11 points

Jun 12, 2020 6:48 PM in response to AWilliei

It just happened again....as soon as I clicked to login into Apple My Support page. I got an activation request from the same location about 2,000 miles away.

Can anyone explain why that would happne? Tx

Reply

Answer 10

AWilliei Author

Level 1

11 points

Jun 12, 2020 10:12 PM in response to Eric Root

I just reproduced it. I clicked on this...

Then I get this on either of my other devices.

I suppose it must be this causing it, yet it doesn't happen using my Apple ID logging into this forum or iCloud. I don't like something I can't explain but it is probably ok.

I won't consider it solved until I find out why this behavior though.

Tx

Reply