Comment by SoftTalker

Until your VPS provider has its management dashboard breached, allowing an attacker remote console and configuration access to your VMs and everything that enables.