Google, Microsoft, and Apple all use previously authenticated ips as a signal for their account recovery processes.