how to get the IP address from which the login password was changed?

I’ve received an email that the administrator user account password have been changed but it doesn’t include the IP address from which it was changed. Is there a way of finding it? Thanks.