I watched one Kai Lentit video about how as soon as you provision a VPS, it is under attack by bots. After a day on a new Hetzner VPS fail2ban shows 356 failed ssh login attempts. But it's nice that Hetzner let's you just disable password auth for ssh during provisioning (it is the default).