Strange connection in our Active Connection list

We are seeing a connection from Varna(Bulgaria)in our Active connection list. We are no where near Bulgaria neither we use a VPN that could make this happen.

We have reset our password but the connection keeps showing up. Is there anyway we can gather more information about this suspicious connection?

Thank you