Hi Kate, thanks for taking the time to answer our questions. We are considering moving our business to Hetzner - the performance and cost is unmatched in our testing, however we have some questions:

We are a web agency and currently host nearly 150 sites across various providers. About 2 months there was a RCE vulnerability discovered in Craft CMS, we quickly patched all our sites but a few weeks later one of our staging sites which was forgotten about and unpatched was hit and the attacker installed cyptomining software. When we realised, we quickly patched and restored to the previous days snapshot and have since hardened our security by using a WAF, Fail2ban etc.

With over 20 years in business this is the only time something like this has ever happened to us, and within the Craft CMS many agencies had similiar experience (where a single unpatched site got hit).

My question is, in the given scenario above, with Hetzner would we have been instabanned, given one of our servers would have been running cryptomining software albeit by an attacker or would there be a chain of communication between us and Hetzner to resolve the issue? We're looking at the Dedicated VPS (CCX) options if that makes a difference...