Many authentications requests coming from data2

It seems that in a period of 3 days, anonymous has logged into icat+ 27 times. We need to:

• Check if above is true
• If not expected then check why it happens
• Check if this could be optimised