@arcticA lot of DDoS and other attacks come from people self-hosting their shit because they think they understand security. Many of them have security effective against script kiddies but are easy pickings for those with unpublished exploits because they don't know how to analyze their logs for evidence they were attacked or compromised by an unknown zero day.
@JessTheUnstill