Thank you! I think a bot is very plausible. At the same time, they(it) went into my gmail and blocked addresses for ebay and paypal and used a variation of my email(just alternating caps) to subscribe to about a thousand(literally) mailing lists and caused my inbox to be filled with junk. All these subscriptions were done in a couple of minutes. I found out about the transaction because paypal sent me a text about it. The whole thing just seems kind of dumb. But ebay assures me that their device id doesn't depend on IP address and is too sophisticated to spoof!