Blocklist, allowlist, and threat monitoring
Automated login attempts targeting /api/auth/login with 14,280 requests in the last hour. Using rotating user-agent strings and distributed across 3 subnets. Matches known Tor exit node.