A LITTLE OWL KNOW-HOW
FAQ & help
Answers about PingHoot, plus a helping wing when a check cannot get through.
Using PingHoot
What counts as a monitor?
One specific URL. Uptime, text rules and SSL checks for that URL are included together. A homepage and a separate checkout page use two monitors.
Can I use the free plan for a business?
Absolutely. Your 5 free monitors can watch personal projects, business websites or client sites.
How quickly will I hear about an outage?
Free plans check every 5 minutes; paid plans every 1 minute. By default, two consecutive failures confirm an outage. Choose one to five failed checks per monitor, with confirmation retries about one minute apart. Queue and alert delivery can add time.
How do SMS alerts work?
Paid plans include a monthly allowance of UK SMS credits. Every plan, including Free, can buy extra credits. Verify your UK mobile number, then enable SMS for each monitor. One text uses one credit; recovery texts are optional and use another credit.
Does the text check run JavaScript?
It checks the HTML returned by the server. Content added only by JavaScript is not checked. Use Test now during setup to verify your phrase.
Can I send alerts to my own application?
Yes. Paid plans support a custom webhook URL for each monitor, with optional recovery notifications. View the full request and response in your webhook history and replay a delivery when you need to.
When a website cannot be monitored
A website can work in your browser but refuse an automated check. The check records what PingHoot receives, which may differ from what your visitors see.
Why does my browser work while PingHoot reports a failure?
Hosting firewalls, bot protection, country restrictions and rate limits can block monitoring traffic. Your browser may already have a login or a cookie that lets it through. PingHoot does not sign in, solve CAPTCHAs or execute JavaScript challenges.
Check the latest error and HTTP status in your monitor history. A 403 can indicate a denied request, 429 usually indicates rate limiting, and a timeout can mean a slow server or a blocked connection. These are clues, not proof of a firewall problem.
If a challenge page returns HTTP 200, an uptime check alone may pass. Add required text that appears in your real page's server-rendered HTML to help detect that response.
What should I ask my hosting company to allow?
Ask your host to check its firewall and bot-protection logs for the monitored URL at the failed check time, using UTC. Our website checks send this user-agent:
PingHoot (website health monitor)
Favicon lookups use PingHoot (favicon check).
PingHoot monitoring IP addresses
139.59.178.246
Ask for a narrow exception for monitoring requests to the public hostname and path you own. A user-agent can be copied by anyone, so it is not proof that a request came from PingHoot. Where possible, also restrict the exception to monitoring source IPs confirmed with us; do not assume pinghoot.com's website IP is the checker's IP.
If your host cannot permit automated requests, that URL may not be suitable for external monitoring. A public health endpoint can be an alternative, but it only measures that endpoint and does not prove the whole website works.
How can I let PingHoot through Cloudflare?
- Find the failed request in Cloudflare's Security Events using its time, hostname and path. Identify which product or rule blocked or challenged it.
- For supported products, create a custom rule under Security rules with a Skip action. Match the exact user-agent above, your monitored hostname and path, and the GET method. Add confirmed monitoring source IPs where available.
- Skip only the rule or security feature causing the false positive. Keep logging enabled and place the exception before the rule it needs to bypass. Avoid an exception that skips every protection across your whole website.
- Save it, run Test now in PingHoot's monitor editor, then confirm the request in Cloudflare's logs.
Bot Fight Mode is different: custom Skip rules cannot bypass it. Super Bot Fight Mode supports scoped Skip exceptions. If Bot Fight Mode is responsible, review the available options with your host or Cloudflare before changing site-wide protection.
Cloudflare: configure Skip rules · Cloudflare: bot-protection false positives
What if it is a DNS, SSL or connection error?
Check the exact URL, public DNS records and certificate chain with your host. PingHoot requires a publicly reachable HTTP or HTTPS URL on port 80 or 443. Private networks, localhost addresses and URLs containing login credentials are not supported.
Fix expired or invalid certificates rather than disabling certificate checks. Redirects must also lead to a permitted public URL; PingHoot rejects HTTPS-to-HTTP downgrades. If the response times out or is too large, ask your host about the response or choose a suitable lightweight public page.
Why is my required text missing even though I can see it?
Text checks read the HTML sent by the server. They cannot see text loaded later by JavaScript or shown only after signing in. Check your phrase, case-sensitivity setting and the server response. A firewall challenge or a redirect to a login page can also explain missing text.
Use a phrase in the initial HTML and try Test now again. Do not remove a useful text check just to make a challenge page look healthy.