On login screens, there are endless attempts to guess passwords (brute force) and massive API calls coming from the same IP.