Woke up to a swarm of bogus hits on my login endpoint at 3AM. At first i thought it was a sleepy dev sneaking in a quick patch but turns out it was some persistent stranger poking around. My reflex was to slam the banhammer and patch those holes before breakfast rolled around. Never thought that an obscure corner of my site could turn into an open playground for unwelcome guests. Next time im keeping a fresh pot of strong coffee and an ironclad firewall running before sunup.