Between 28 and 30 August 2026, a block of Hetzner address space used by Softaculous and Virtualizor was hijacked. Traffic for those addresses was pulled toward an attacker's server for roughly 33 hours across two waves.