The IP addresses of both transactions are 115.133.198.86 and 64.120.79.136.
The first is somewhere in Malaysia. The second is a dedicated server hosted in Dallas, USA. Both are very unlikely to be legitimate traffic in this context.
Me password was (have been changed) J08-uU33-1604-82-xXx
Unfortunately this isn't a very strong password.