Hello,
we have the same trouble, I tried a lot to drop the traffic with iptables and ebtabels every times the solve check from hetzner results in ok, but after some days the problem war’s back with new MACs.
Now, I fixed it by activating the hetzner firewall (in robot) and replaced the default...