BuiltWith: UA & Host

.your-server.de

[Pfui]

Another too-frequent no-robots.txt bot, always blocked, always undeterred. Now also using a name-branded UA (emphasis mine):

srv-10.builtwith.com [projecthoneypot.org...]
Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/534.13 (KHTML, like Gecko) Chrome/9.0.597.107 Safari/534.13 BuiltWith/1.2

05:07:04 / (403)
05:07:05 / (403)
05:43:27 / (403)
05:43:28 / (403)

Previously, for example:

srv-9.builtwith.com [projecthoneypot.org...]
Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US; rv:1.9.2.3) Gecko/20100401 Firefox/3.6.3 GTB6 (.NET CLR 3.5.30729)

11/06 19:33:54 / (403)
11/06 19:33:55 / (403)

About those, robtex says --

srv-10.builtwith.com has one IP number (46.4.121.230) , which also has a corresponding reverse pointer.
Static.230.121.4.46.clients.your-server.de point to the same IP. [robtex.com...]

-- and:

srv-9.builtwith.com has one IP number (88.198.248.106) , which also has a corresponding reverse pointer.
Static.88-198-248-106.clients.your-server.de point to the same IP. [robtex.com...]

FWIW on my sites, .your-server.de has a very long, very troublesome history.

[DeeCee]

Agree with your assessment of .your-server.de, they loose quite a few IPs into my DNSBLs every day for all kinds of offenses.

Only 2 hours ago, they lost 88.198.51.12 because of SSH hacking attempts. They really love poking at root, oracle, test and other usernames. :)
Fortunately I poke right back. :)

Almost everything that arrives from Hetzner Online AG seems to be of a very negative nature. Mr. Martin Hetzner appear to cater especially to hacker, Spam, and scam bots.

Your-server.de AKA Hetzner Online has lost about 40 static IPs into block-lists over just the past few weeks.

[keyplyr]

Only 2 hours ago, they lost 88.198.51.12 because of SSH hacking attempts.

I agree, gave that range the boot just a few weeks ago.

hetzner/your-server.de
88.198.0.0 - 88.198.15.255
88.198.0.0/16

[Panthro]

I just got a bunch of visits from these guys yesterday.