tailscale runs a continuous netcheck to an unroutable IP (203.0.113.1:12345:UDP) [1] for whatever reason. This triggered Hetzner's ghetto-ass DDOS protection, thinking my server was compromised or I was netscanning the world. They sent me an email saying my server was compromised and I had 24hrs to remedy it.

I responded to the email and filled out this attestation form declaring that my server was not under attack, it was a false positive, and explained what they were seeing (not to mention it's an unroutable IP). They still null routed my server and refused to turn it back on, and their arrogant support told me there was no way I was in control of this server etc. They took my box offline during a peak user day, so I migrated to AWS and never looked back.

Don't do anything of importance on Hetzner. No wonder they only get people running pirated plex boxes.

[1] https://github.com/tailscale/tailscale/blob/94304819263b0553...