Check your Firefox account to see if you didn't click the notification login to tell you of logins? Look at the link and check your settings isn't check there when your logged into your account.

https://support.mozilla.org/en-US/users/settings

Are these legit? How can I know? Each say from mozilla.org/firefox

Mozilla account - Managing account data https://support.mozilla.org/en-US/kb/firefox-accounts-managing-account-data

The various Mozilla services you can use with your Mozilla Account https://support.mozilla.org/en-US/kb/access-mozilla-services-firefox-account

If you still think there is suspicious activity on your Mozilla account then see https://support.mozilla.org/en-US/kb/suspicious-activity-my-firefox-account

Upon checking, looks like I have a password for firefox created many years ago. Don't recall doing so. I will check into the links posted here and do more research. Interesting that I received 2 emails showing different logins in other countries. Not sure what they could access. Any idea?

Then you need to change your password cause seems like your login has been compromised by other sites that you might've have used the same email login at those sites.

If you change your Mozilla Account password then you will lose what you have Synced to the Sync server since the password encrypts the connection.

Note you are using you Mozilla Account to login and post on this support.mozilla.org site.

This is all foreign to me. I have used firefox for years as my browser as I prefer it to Safari. In my connected services there is an Unknown item about 4+ hrs ago that I can not delete. I have setup 2 factor and realize I do not remember my password. If I log out, will Mozilla give me the option to recover by a forgot my password? Taking this one step at a time. Thanks for your patience.

Not sure of what may have been synced, I have 1 mac and 1 PC that use firefox.

After setting up 2 factor auth, I changed my password. That did create the need to authorize password saves or not, which isn't a big deal. I believe having made these changes, my original issue has been resolved. No foreign logins in other countries by unknowns.

Thanks for your assistance.