[stomachmonkey]

Don't look at your security logs if you ever want to sleep again.

I stopped looking at them a decade ago.

I've had a few clients that have freaked out and tried to go nuclear over a single minor breach attempt until I show them the live logs and they realize this stuff is happening 24/7/365.

It just never ever ends.

Last month I fired up a cloud instance that I needed to run Windows on.

Damn thing got compromised in the first 5 minutes before I could even finish hardening it.

Most of my stuff runs off Linode these days.

One of the advantages is being able to keep multiple distinct public IP's for an instance and swap a clean one in if the primary is being abused.

Does not help if they are coming after you based on FQDN though.

Which reminds me, I need to run something by you.

Been in DC for 3 days, in NJ now and will be in NYC next few days but when I get back I'd appreciate a few minutes of your time if you don't mind.