Whereas I suppose it could be random, the vast majority of my "dodgy access" notifications seem to originate in Russia, the Ukraine, China and Vietnam.

Facebook has annoyingly many, and Instagram is basically Facebook. I also get a lot from PayPal... and somehow my PayPal card info was stolen at some point (some years ago) and someone suddenly started charging parking and limousine services in Amsterdam, of all places. That took a while to get straightened out.

On the whole, I've been pretty fortunate, though!