Skip to content

For site owners and firewall admins

Uptimia monitoring bots

Uptimia users pick the websites, APIs and servers to check. Uptimia's monitoring locations run the checks. Below is what those requests look like, which IP addresses send them and how to reach us.

Seen in your server logs
Website and keyword checks
Mozilla/5.0 (compatible; Uptimia; +https://www.uptimia.com/bot)
Page speed, transactions, screenshots
… Chrome/<version> Safari/537.36 Uptimia/1.0 (+https://www.uptimia.com/bot)
API checks
Uptimia-ApiMonitor/1.0 (+https://www.uptimia.com/bot)
179IPv4 addresses
97IPv6 entries
Norobots.txt read

The short version

What a site owner or a firewall admin needs to know.

A user starts every check

A customer, a trial account or a free account added your address to a monitor. Uptimia does not pick the sites.

Each user agent names Uptimia

Every default user agent contains the word Uptimia. Updated monitoring locations also add the address of this page.

Published IP addresses

Every monitoring location is in a plain-text list your firewall can load.

robots.txt is not read

Monitoring checks run because a user asked for that address to be checked.

The user sets the interval

From every 30 seconds upward, within the limits of their plan.

Unwanted checks

E-mail the domain, the time and the IP address you saw to complaints@uptimia.com

What each check sends

The user picks the check type and the address. Each check type sends a different request.

Website and keyword
One GET request, or a POST if the user chose one. The check reads the whole response. It follows redirects only when the user turned them on, and a keyword check searches the response for a word. If a confirming location also finds the site down, it runs a traceroute to the host, up to 15 hops.
HTTP
Security monitoring
One GET request for the monitored page, and one GET for its http:// address, from Uptimia's servers. When that page answers without some security headers, the scan repeats the GET once with a browser-style user agent, because some sites send bots fewer headers than browsers. No browser runs and no script on the page executes. On a domain the user has proved they own, a scan also makes a few read-only GET, HEAD or TRACE requests to pages and folders that page refers to, never with a cookie, and tests which common ports answer.
HTTP
Page speed
Chromium loads the page with its images, scripts and styles, the way a visitor's browser does. When the monitor is down at that moment, one GET request with the website-check user agent goes first.
Browser
Transaction
Chromium repeats the steps the user recorded on the site, such as clicks, form fills and logins. The site receives whatever requests those pages make.
Browser
Failure screenshots
When a website check fails on a trial or paid account, Chromium loads the page to take a screenshot.
Browser
API
The requests the user configured, in order. Methods GET, POST, PUT, PATCH, DELETE or HEAD, with the headers and body the user set.
API
SSL, port, ping, DNS, mail
A TLS handshake, a TCP connection, a ping, a UDP packet, a DNS query or an SMTP, POP3 or IMAP greeting. No HTTP request and no user agent.
No HTTP
Nothing to your server
Domain expiry (asks the registry over RDAP or WHOIS), DNS and blacklist monitoring (DNS queries to name servers and blacklists), security monitoring's malware check (asks Google Web Risk), heartbeat monitoring (the user's own jobs call Uptimia) and server monitoring (an agent on the user's own server reports to Uptimia).
None

User agents

The User-Agent headers monitoring checks send by default. A user can replace the user agent of a website or API check with their own User-Agent header, so match the IP address too.

Website and keyword checks, page speed pre-check
Mozilla/5.0 (compatible; Uptimia; +https://www.uptimia.com/bot)
Page speed, transactions and failure screenshots
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/<version> Safari/537.36 Uptimia/1.0 (+https://www.uptimia.com/bot)

The Chrome version follows the Chromium release running on the monitoring location, so it changes when the browser is updated.

API checks
Uptimia-ApiMonitor/1.0 (+https://www.uptimia.com/bot)
Security monitoring
Mozilla/5.0 (compatible; UptimiaSecurityMonitor/1.0; +https://www.uptimia.com/bot)
Security monitoring, repeated page request
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Safari/537.36 UptimiaSecurityMonitor/1.0 (+https://www.uptimia.com/bot)

A header check may repeat one page request with this browser-style user agent. It still names Uptimia and links to this page. No browser runs.

Older user agents

Monitoring locations that have not been updated yet still send these strings. They contain the word Uptimia but no link to this page.

  • Mozilla/5.0 (compatible; Uptimia; www.uptimia.com)
  • Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/<version> Safari/537.36 Uptimia/1.0 (https://www.uptimia.com)
  • Uptimia-ApiMonitor/1.0 (+https://www.uptimia.com)
HTTP 429 with Retry-After. When your server answers a website check with HTTP 429 and a Retry-After header, the check waits and asks again. It makes at most 3 attempts and waits no longer than 30 seconds in total.

How often checks run

Each user picks the interval for each monitor. These are the shortest intervals each plan allows.

Check Free Basic Professional and higher, trial
Website and keyword 5 min 1 min 30 s
Page speed Not included 5 min 1 min
Transaction Not included 10 min 10 min
API 5 min 1 min 1 min
SSL certificate Not included From every 10 minutes to once a day
One location per check, more only after a failure
1 location checks The check fails Up to 3 other locations confirm

The user chooses how many locations confirm, and each one is a different location. An API check set to 1 confirmation reports the failure without a second location. A few accounts have shorter intervals agreed with Uptimia.

IP addresses

Monitoring checks come from the addresses in this list. The list changes when monitoring locations are added or moved.

Show all 276 entries

179 IPv4 and 97 IPv6 entries. Some IPv6 entries are prefixes, such as /64.

74.119.194.122
137.184.94.36
51.75.170.220
199.247.0.96
2a05:f480:1800:3666:5400:06ff:fe3a:c688
93.115.18.6
2a0c:b9c0:f:4413::1
51.79.240.138
2402:1f00:8000:800::281a
209.145.48.145
202.78.170.252
2a03:90c0:514:2905::699
158.69.124.159
2607:5300:60:919f::
216.238.110.248
2001:19f0:b800:183a:5400:3ff:fef1:847a
152.228.133.230
2001:41d0:404:200::81f4
192.36.61.24
2a03:f80:370:a00a::/64
185.122.186.154
2a03:f80:420:54ca::1
5.253.43.131
185.243.215.192
139.99.236.25
2402:1f00:8100:400::1996
45.77.178.221
45.56.89.150
2600:3c01::f03c:93ff:fe97:7775
155.138.203.9
2001:19f0:5401:82b:5400:3ff:fef1:d578
208.81.246.2
192.34.85.32
154.12.235.24
192.73.242.94
208.72.155.80
2001:19f0:c000:c41f:5400:3ff:fef3:9dc
216.230.231.22
5.226.169.22
149.248.7.54
2001:19f0:6001:bf:5400:3ff:fef1:d58c
45.77.166.217
2001:19f0:9002:1670:5400:3ff:fef3:a1a
64.115.146.31
184.95.56.23
45.76.247.38
2001:19f0:8001:1063:5400:4ff:fe1a:ed65
208.17.90.75
92.223.30.35
2a03:90c0:1a5::b2
154.53.63.67
162.252.175.30
2605:3b80:11:4180::1
205.143.207.95
207.246.87.204
2001:19f0:5:60c0:5400:3ff:fef1:eda6
45.82.161.53
2a03:90c0:295::141
31.13.213.16
2a03:90c0:215::5a
162.247.76.194
65.79.190.94
92.38.149.41
45.32.139.74
2001:19f0:ac01:6a1:5400:3ff:fef1:ed87
159.247.33.53
2.56.222.31
2a03:90c0:133:2903::c9
168.214.152.25
137.220.57.16
2001:19f0:5c00:1909:5400:4ff:fe1a:ecc2
162.255.162.52
155.138.241.31
2001:19f0:6401:d29:5400:4ff:fe1a:ed16
65.25.83.5
155.97.137.59
158.69.63.98
2607:5300:201:3100::46eb
192.71.227.46
2605:3b80:cad:1a86::1
216.238.71.251
2001:19f0:b400:118c:5400:3ff:fef1:d5c5
89.223.88.11
2a03:90c0:545::a
151.236.8.40
2a03:f80:ed15:70f2::1
185.26.237.160
2a03:f80:ed31:8878::1
192.71.249.132
2a03:f80:32:ee3a::1
95.164.62.8
2a12:6500:0:5::1
176.62.160.65
188.211.166.62
2a03:f80:359:b2c4::1
93.160.88.253
95.164.10.36
2a13:6300:0:1a::1
192.36.27.88
2a03:f80:45:231a::1
89.40.105.99
2a03:f80:358:f149::1
194.63.145.165
2a09:cd40:f:43b3::1
78.141.198.130
2001:19f0:7402:1512:5400:3ff:fefc:2448
95.164.37.131
91.132.95.21
2a03:f80:4416:6e7c::1
149.102.128.13
37.61.229.225
2a03:90c0:146::2012
178.128.45.12
145.239.6.120
2001:41d0:800:278::1/128
82.198.223.25
51.68.180.180
2001:41d0:700:1bb4::
194.163.128.65
212.53.132.25
78.46.1.53
80.190.158.99
54.38.158.248
2001:41d0:701:1100::a87
188.40.52.12
89.15.2.21
62.157.212.26
149.154.159.228
2a03:f80:49:a5dc::1
212.52.16.9
2a03:f80:30:1667::1
91.239.65.45
2a03:90c0:277::1c1
5.181.77.92
2a03:90c0:395::fa
193.57.138.47
45.12.144.56
78.141.214.15
2001:19f0:5001:d74:5400:4ff:fe30:bd7b
151.236.14.167
2a03:f80:31:91dd::1
45.12.145.125
95.164.84.180
194.68.32.40
2a03:f80:47:771b::1
51.77.42.80
2001:41d0:602:2e4::
151.236.25.95
2a03:f80:48:c6::1
77.91.102.45
2a09:7c40:0:13::1
37.235.48.147
2a03:f80:48:be01::1
5.182.39.59
80.251.169.141
45.82.102.118
2a03:90c0:4c0:2903:ffff::329
213.111.187.87
2a03:f80:7:187b::1
192.121.171.45
2a03:f80:70:bb7c::1
5.180.55.83
2a13:6303:0:2::1
45.133.216.239
2a09:7c43:0:5::1
89.40.104.2
2a03:f80:372:a85e::1
46.183.184.11
2a03:f80:385:86f6::/64
45.154.206.102
2a11:840:60:1b:216:3eff:fe5d:1b97
193.24.235.48
2a09:cd45:1:87a4::1
45.153.124.189
2a03:f80:373:a99d::1
37.235.53.104
2a00:1d70:ed15:297f::1
185.170.214.187
158.255.215.105
2a03:f80:33:d863::1
94.232.247.26
2a0b:cf47:0:76::1
51.255.95.82
2001:41d0:1004:2552::
162.19.66.220
2001:41d0:304:200::33eb
89.41.172.28
2a03:90c0:1b5:ffff::cd:1
5.90.1.4
5.89.17.34
192.71.244.47
2a03:f80:386:67ba::/64
70.34.204.185
2a05:f480:2000:231d:5400:4ff:fe5a:925c
178.73.210.249
2a00:1a28:1251:b2da::1
159.144.158.96
5.182.36.206
2a11:4c03:0:f::1
178.209.50.220
2a02:418:6a04:629d::1
103.215.218.239
2a03:90c0:166:174::1
200.42.136.21
45.82.245.126
5.252.24.165
2a03:90c0:525::142
45.82.249.41
2a14:3086::15a
87.121.99.218
2a03:90c0:555::662
186.72.79.24
155.133.7.23
64.176.38.5
2401:c080:3800:2e89:5400:4ff:fe4d:6457
103.19.2.131
39.105.113.253
38.54.30.93
43.240.124.23
158.255.208.25
2a03:f80:852:a0b1::1
89.44.193.116
103.136.43.179
89.223.95.88
2a03:90c0:2c8::211
14.139.160.70
128.199.17.77
65.20.67.148
2401:c080:2400:1268:5400:3ff:fef1:d5af
45.89.106.119
38.60.191.155
158.247.203.244
45.128.54.38
2a14:3087::8d2
38.54.36.13
38.54.107.219
38.54.33.193
146.185.214.151
2a03:90c0:105::55
172.105.180.165
2400:8907::f03c:93ff:fecb:6104
45.76.117.187
2001:19f0:5801:1989:5400:04ff:fe2d:ea08
67.219.101.98
2401:c080:2000:1575:5400:3ff:fef1:d5b6
154.26.155.233
45.15.140.36
2a14:3085::a2
87.237.196.10
5.188.227.29
2a03:90c0:1e7::c1
95.177.214.34
38.54.75.244
45.83.141.47
213.130.121.18
213.158.188.34
85.234.81.30
2a03:90c0:1f6::c9
197.98.12.17
38.60.218.244
94.176.182.125
2a05:8280:f:4399::1
194.233.94.210
85.208.108.19
37.221.126.154
2a11:3802:0:b::1
45.15.170.104
2a14:3084::2e0
45.15.160.219
45.15.167.46
45.83.21.49
93.115.240.174
2a03:90c0:5f1:2903::11f1
45.8.147.28
2a11:3803::12a
94.131.2.254

Let the checks through

If a firewall, a WAF or bot protection blocks the checks, they fail and the user sees your site as down.

1Allow the IP addresses

Load the plain-text list into your firewall or WAF allowlist and refresh it on a schedule. For nginx, save the nginx allowlist as a file and include it in a geo block.

geo $uptimia {
    default 0;
    include /etc/nginx/uptimia-ips.conf;
}
2Do not rely on the user agent alone

A user can set their own User-Agent header, and anyone can send a user agent with the word Uptimia. Match the IP address as well.

The Web Health Index scanner runs on some of the same monitoring locations, so allowing these addresses also lets it through. To stop it without blocking monitoring, add a robots.txt group for User-agent UptimiaHealthIndex with Disallow: /. The Web Health Index scanner page shows the two lines.

Monitoring you did not ask for

An Uptimia user can add any public address to a monitor. If the checks on your site are unwanted, tell us.

E-mail complaints@uptimia.com
Include
  • The domain that was checked
  • The time of the requests, with the time zone
  • The IP address you saw

You can also block the IP addresses above. The user who set up the check then sees it fail.

The free tools on uptimia.com, such as the HTTP status checker, send one-off requests when a visitor runs them. They are not monitoring, and some send a browser user agent without the word Uptimia.

A different scanner
Saw UptimiaHealthIndex in your logs?
That is the Uptimia Web Health Index scanner. It has its own page and a robots.txt opt-out.
Web Health Index scanner