I have two factor authentication on for Instagram, Twitter and Facebook and when I go into the login activity of my accounts it says I logged in from CT last month even though I wasn't there at all then. My instagram data I downloaded shows a new IP Address which is also in CT as I managed to pinpoint it to that state. I've never recieved a text on my phone saying someone else was trying to log in. Also, my icloud account on my iphone says it's logging in from MA or CT when it texts me the verification code and when I go to enter said code onto my computer or iPad it shows a map with CT or MA at the bottom when I'm physically not in any of those states.