The HowlOps monitoring bot

If you found this page in your access logs, one of your own customers asked us to check that their site is up. We are an uptime monitoring service, and the traffic you are seeing is that check.

What it does

It makes a single request to one URL that a customer of ours configured, and records whether it answered, how long it took, and the status code. It does not crawl. It does not follow links, read your sitemap, index content, or fetch assets. One request, one URL, on a schedule.

How often

The customer chooses the interval, most commonly once a minute. When they have asked for checks from more than one part of the world, you will see one request per interval from each of those regions. If a check fails we may retry it shortly afterwards to tell a real outage from a blip.

Where it comes from

These are the addresses we probe from. Allowlist them if our checks are being blocked. The same list is available as JSON at /api/v1/public/probers so a firewall rule can consume it directly.

RegionIPv4IPv6
Singapore47.128.225.262406:da18:17e2:7f00:fd0c:e22c:4983:9a42
Singapore56.10.70.412406:da18:17e2:7f00:2944:519:4a6d:d028
Czech Republic (CZ1)185.28.101.1872001:15e8:110:7d01::1f2
Czech Republic (CZ1)185.28.101.1872001:15e8:110:7d01::1f2
Nuremberg (nbg1)46.224.26.1092a01:4f8:1c1e:e21a::1
Nuremberg (nbg1)46.224.26.1092a01:4f8:1c1e:e21a::1
Falkenstein (fsn1)167.233.122.2272a01:4f8:c015:5f96::1
Falkenstein (fsn1)167.233.122.2272a01:4f8:c015:5f96::1
Helsinki (hel1)204.168.169.1402a01:4f9:c015:43bf::1
Helsinki (hel1)204.168.169.1402a01:4f9:c015:43bf::1
Czech Republic (CZ2)37.205.12.632a03:3b40:fe:8df::1
Czech Republic (CZ2)37.205.12.632a03:3b40:fe:8df::1
US West (N. California)18.145.216.2512600:1f1c:fbb:b300:c3d9:706a:59eb:41e4
US West (N. California)54.193.38.2162600:1f1c:fbb:b300:40ba:34b8:6594:66f7

How to block it

Block the addresses above and the checks will stop reaching you. We would rather you did that deliberately than have a WAF do it silently, because a silent block looks like an outage to our customer: they get paged, they call you, and nothing was ever wrong. If you would prefer we stop entirely, write to us and we will take the target off our fleet.

What we will not do

We do not disguise our traffic. We do not rotate through residential addresses, forge browser fingerprints, or solve challenges meant to keep bots out. A monitor that works only by outsmarting your bot management is not measuring whether your site is up, and it would break on a schedule neither of us controls.

Questions about this traffic: contact us.