@mobileck @eugeniyoz @w3Nicolas @digitalocean @raisupcom That's an argument for locking them out of their account. It's not an argument for stopping all of their instances (including those that weren't behaving "suspiciously") without advance notification. DO did both, and it's that 2nd one that makes then unusable in production