SVAI Hosting has introduced a new bot activity monitoring and analysis system — BotDetector.
The system analyzes web server access logs and behavioral patterns of automated clients, including request frequency and sequence, repeated activity, invalid requests, and other indicators.
This helps detect aggressive website scanning, large-scale probing for known vulnerabilities, abnormal bot activity, and automated attempts to compromise websites.
Bot activity information is available directly in the hosting control panel:
DirectAdmin → Extra Features → BotDetector
Some clearly malicious activity may be blocked automatically. Blocking is performed at the ModSecurity level, while information about triggered rules can be reviewed in the Web Application Firewall audit log.
Known search engines and legitimate crawlers are handled separately and included in allowlists, so normal website indexing should not be affected by our additional security rules.
As with any automated security system, false positives may occasionally occur. If a legitimate service, application, or bot you rely on is blocked, you can review the corresponding ModSecurity event and, if necessary, exclude the specific rule for your domain.
We have also prepared a separate article that explains in more detail how BotDetector, ModSecurity, ImunifyAV antivirus scanning, and Borg Backup work, as well as what actions customers can take themselves in case of blocking or detected threats:
Website Security on SVAI Hosting: Antivirus, ModSecurity, BotDetector and Backups
https://svai.net/blog/website-security-waf-backup
In addition to BotDetector, the following security and recovery tools are also available on SVAI Hosting:
ImunifyAV — regular antivirus scanning of hosted files and access to detected threats in DirectAdmin.
ModSecurity — a web application firewall used to block dangerous requests and attempts to exploit vulnerabilities.
Borg Backup — automated incremental backups of website files and databases, with self-service recovery available through DirectAdmin.
We also recommend keeping CMS platforms, plugins, and components up to date, especially popular systems such as WordPress and Joomla. Server-side protection significantly reduces risks, but it cannot fully compensate for outdated or vulnerable software.
If you have any questions about BotDetector, ModSecurity, detected threats, or backups, please contact our technical support team.