Hey before we blame him for trying to steal accounts. I lt does not prove anything. You said the last IP is USA any other IP on the account that is his region?
Maybe he used VPN to dodge and old ban from hacking or something. All the channel are logged so go back to 2013 then check the channel logs, search for his name and see if his server talk is as bad as his forums....
Well :/