[scottlinux]

I too have this IP in my account login history. As well as others since July from other places globally.

This appears it was not brute force attempts, as the log would show failed login attempts. They just logged right in, first try. Sounds like a web site vulnerability.