The webcam light on his laptop flickered on, a tiny, judgmental green eye. Elias slammed the laptop shut, the room plunging into total darkness. He realized then that "finding" a link works both ways—sometimes, the link finds you.
Configure your server (Nginx/Apache) or a Web Application Firewall (WAF) to allow only 5-10 login attempts per minute from a single IP address. If a finder bot sends 1,000 requests in 10 seconds, the IP gets blocked.