CUNY Academic Commons

Cross-referencing that IP address, which appears to be a Verizon address from Virginia, I see a number of reset-password attempts beginning at 06/Feb/2025:00:27:42 and ending at 06/Feb/2025:00:23:11. Other traffic from this IP address looks pretty typical, like a regular user browsing the site rather than a bot or some other type of attacker. So I'd guess that this is likely a user entering the wrong username. In fact, I see another user in the system with a similar user login (it's the same as the reporter's, but with some trailing digits), so it seems likely that the resets came from a user who forgot their username. I would say that there's nothing to worry about here.