I report, give them a call if they are reachable and tell them they have x hours to fix it
If its very serious (like this last time when someone's Wordpress got hacked and was causing a significant CPU load), I suspended the account, told them they could clean it up WHEN they are available (I...