seen way too many of these lately. built a small tool once that had an open db port for like two hours—caught it by accident. how's your setup different from the usual config mistakes?