As a software dev i spotted a funky pattern in our nginx logs this morning something was scanning endpoints nonstop. Every few seconds there was a HEAD request failing authentication on our admin portal. Feels like some bot army or a bored hacker probing for open doors. Im def gonna tighten the filter rules and maybe shun em if they dont back off.