I remember getting an abuse warning from Hetzner as one of our employees was seeding (legal) files via a p2p file sharing framework (IPFS I think?) and the client on his machine sent out broadcast and port scanning requests over the VPN into our Hetzner infrastructure. Hetzner is quite nice in that they dont' immediately block your servers, other providers are less lenient though and such stuff can quickly get your infrastructure to be taken down, especially if you're not an "important" customer of your hoster. I think after you reach a certain scale you can't stop this from happening easily, so it's good to either block such stuff via the firewall or have good audit logs.