been digging through our firewall alerts all afternoon and noticed one host pumping out endless login tries like it owns the place makes me think we got a stuck script or worse. might be smart to rotate creds and block anything that smells like a brute force before our whole setup goes sideways.