Whenever you get a text or notification containing some security code for a login attempt, you should never ignore it. And that couldn’t be any more true if you didn’t initiate the login request to begin with.
Source: LifeHacker – Update Your Password Whenever You Get a Random 2FA Request