Even worse, Tweakers as well :(
Seriously though. I don’t know what’s best. Taking everything down or not.. I just run a small time SaaS.
tail -F /var/log/access_log | grep --line-buffered -v -E '"(GET|HEAD) 'And the work to clean up if you get compromised is massive.