Author name: Ron Mercier

I hadn’t published a single post yet. The server was brand new. Nobody had the link. And yet, less than 24 hours after going live, my Nginx error logs were full of automated bots hunting for exposed credentials. Here’s exactly what they were after and how I stopped them.