After I documented my Linode server taking 4,000+ failed login attempts in 24 hours, the next obvious question was: what […]
A complete walkthrough of how I built and deployed a portfolio website on AWS S3 static hosting, CloudFront CDN, Route 53 custom domain, a serverless visitor counter with Lambda and DynamoDB, and automated CI/CD with GitHub Actions. No console clicking required.
I hadn’t published a single post yet. The server was brand new. Nobody had the link. And yet, less than 24 hours after going live, my Nginx error logs were full of automated bots hunting for exposed credentials. Here’s exactly what they were after and how I stopped them.
