A VPS provider having a server provisioning script available doesn't seem to be such a crazy thing to me - it still doesn't prove that Huthos are behind the attacks.