I've gotten notices from Hetzner for hosting IPFS node, apparently it does some local network discovery by default which looks like a malware when you squint hard enough.

apparently too many outbound requests is enough to get on their radar