We log every user's IP, and only ONE IP has logged in to your account today, and that is from Cable One ISP.
So no one else is accessing your forum account, unless the bad actor also shared an IP with you, which I doubt.
I think you have HF on...
Two-step verification will reset every 30 days, so after 30 days, when you visit the forum, it will send you a new code automatically (assuming your two-step verification is via email).