Got a question

I notice a user WW2admin is on, and in the admin CP. (although the no permission stop sign is displayed) I look at the IP and its in the Ukraine, not where the member page says it is. Is this guy legit, or not.

http://www.ww2incolor.com/forum/online.php

This also happened a couple of weeks ago, I informed Procyon then.
The admin powers of ww2admin (the old site owner Nick) were therefore revoked.
On the ‘Who’s online’ page you can actually see that he’s not able to use the admin CP (note the little Stop sign).
I’m pretty sure this is a hacker…

Is that Nick’s legitimate membership page, or should we ban it ?