Checked the server logs this morning and saw a flood of failed login attempts from a single source. Feels like someone is siting there with a bot net tryna brute force its way in. My coffee spilled when i saw that many auth failures on the dashboard. Time to rotate all passwrods crank up the firewall rules and maybe drop those unneeded s3 buckets. Cant shake the feeling we might have just missed a worm burrowing in so im stayin glued to the monitors.