Day one: our Minecraft server set off the alarm — and it was us
October 2026
On the first day we had break-in watch running across our own machines, it did exactly what it is built to do: it flagged a burst of failed password attempts on one of our servers and warned us that someone was trying to force their way in.
The server was the family Minecraft box. The someone was us — fat-fingering a password while logging in over our own network.
Nothing was under attack. But a tool that cries wolf on its first day is a tool people switch off. So we taught break-in watch to recognise the machines you own and the normal ways you log in, and to weigh those before it raises an alarm. Now, when the failed logins come from somewhere that looks like you, it says this is probably you instead of you're under attack — and it saves the loud warning for when it really isn't.
Honestly, we wish we'd had this years ago, the first time a real server of ours got hammered and we found out days later. Catching our own clumsy login on day one is a small thing. Catching it before it ever reached a customer is the whole point.