For server administrators
About the requests you are seeing
If you found this address in a server log, the requests come from Upmondi, an uptime monitoring service. Somebody who looks after the site asked us to check that it is reachable. We are not a crawler: we request one address, the one they entered, and nothing else on the site.
The user agent we send
Upmondi/1.0 (+https://upmondi.com/monitoring)
What the requests look like
- How often
- Once per check interval for each monitored address, at most once a minute and by default once every five minutes.
- What we request
- Exactly the address the account holder entered, with GET or HEAD. We follow redirects, and every hop is validated before it is requested.
- What we do not do
- We do not follow links, read sitemaps, submit forms, run JavaScript, or request images, styles or scripts. One address, one request.
- What we read
- The status code, the response time and, when the account holder asked for a keyword check, the first part of the body. Responses are capped and discarded.
- Certificates
- For https addresses we also open a TLS connection every six hours to read the certificate expiry date. It carries no user agent, because it sends no HTTP request.
- Domain names
- Domain expiry comes from RDAP at the registry, roughly once a day. That never touches your server.
If you would rather not block it
Blocking the checks does not stop them being made; it turns them into failures, and the person monitoring the site is paged for an outage that is not happening. Allowing the addresses below is the reliable fix, because a user agent string can be set by anyone and your firewall is right not to trust it.
If you run the site yourself and did not set this up, someone with access to it did — a colleague, an agency or a previous administrator. Ask around before you spend time on a firewall rule.