Also might consider limiting max_connections and implementing fail2ban, as the more layers of security the better.

I've also noticed that the free VPS from host1free are hot targets for the HF skiddies.
My paid VPS (not host1) is way obscured though, we'll see ...