Low effort speculation:
That’s a vodaphone portugal IP, but this is likely traffic routing though their customer cellular network and not their corporate. It’s possible that someone in PT has a similar username for this service and is fat fingering it. It’s also possible that you’re seeing a tiny sliver of a larger attack.
Spur.us tracks that IP as an egress point for openproxy and windscribe ResIP networks so it’s worth considering that the origin of the authentications you’re seeing may not be Portuguese cellphone but someone hiding behind those services.
Here’s a paper describing the difficulties such a service creates for folks trying to secure accounts with traditional IP reputation based rules. “Resident Evil: Understanding Residential IP Proxy as a Dark Service” https://ieeexplore.ieee.org/document/8835239
Shooting in the dark for how a bad actor would monetize account takeover for this service if this is in fact an attack… They could try to sell your invitation to that private tracker. They could also look to scoop up a bunch of folks to try and blackmail based on what victims are download/seeding. Other more creative options I’m not thinking of might be on the table.
she viewed all of her peers as children since she felt she had more lived experience which is fine
That’s not fine. Her lived experience doesn’t seem to be translating to maturity at a rate worth bragging about whether the claim is true or not. The foundation of any healthy relationship is respect. I think that whether you want to confront anyone about these events or not, you would benefit from seeking out mutually respectful relationships.
Consider whether her actions can really be caused by a fault of yours if she belittles almost everyone in the same way.