[Answered] 72.29.95.172 checks my server constantly?

kwagner · February 27th, 2008, 2:21 PM

Did a reverse DNS and it resolved to synapse-node1.dimenoc.com.

Since about the 23rd of january I've gotten requests in my web server logs like the following:
72.29.95.172 - - [23/Jan/2008:06:36:00 +0000] "HEAD / HTTP/1.0" 302 0 "" ""
First noticed because awstats showed a huge jump in 302 status codes. Since then, it's been steadily requesting the same thing (current stats for Feb show it requested over 50,000 times). It's not much of an issue, minimal bandwidth, and I did filter out the address for future logging. Just curious why it's doing this. I noticed the same IP connecting to my mail server constantly:
02-23 19:04:03 +0000 connection accepted from [72.29.95.172]
02-23 19:04:03 +0000 closing session with [72.29.95.172]
02-23 19:04:21 +0000 connection accepted from [72.29.95.172]
02-23 19:04:21 +0000 closing session from [72.29.95.172]

Just a status check?

**Dan** · February 27th, 2008, 2:41 PM

Please see this post: [MAJOR Changes] New Server Monitoring System!

This is just a status check

**removed** · February 27th, 2008, 2:42 PM

Yep, we're just making sure that your server is up.

kwagner · February 27th, 2008, 2:58 PM

Thanks for the replies, and the service

February 27th, 2008, 2:21 PM	#1 (permalink)
kwagner Registered User Fresh Surpasser Joined in Aug 2005 21 posts Gave thanks: 2 Thanked 0 times	[Answered] 72.29.95.172 checks my server constantly? Did a reverse DNS and it resolved to synapse-node1.dimenoc.com. Since about the 23rd of january I've gotten requests in my web server logs like the following: 72.29.95.172 - - [23/Jan/2008:06:36:00 +0000] "HEAD / HTTP/1.0" 302 0 "" "" First noticed because awstats showed a huge jump in 302 status codes. Since then, it's been steadily requesting the same thing (current stats for Feb show it requested over 50,000 times). It's not much of an issue, minimal bandwidth, and I did filter out the address for future logging. Just curious why it's doing this. I noticed the same IP connecting to my mail server constantly: 02-23 19:04:03 +0000 connection accepted from [72.29.95.172] 02-23 19:04:03 +0000 closing session with [72.29.95.172] 02-23 19:04:21 +0000 connection accepted from [72.29.95.172] 02-23 19:04:21 +0000 closing session from [72.29.95.172] Just a status check? Last edited by kwagner; February 27th, 2008 at 2:29 PM. Reason: added reverse dns

February 27th, 2008, 2:41 PM	#2 (permalink)
Dan Staff of Surpass Super #1 Joined in Apr 2007 2,463 posts Gave thanks: 119 Thanked 163 times	Please see this post: [MAJOR Changes] New Server Monitoring System! This is just a status check __________________ D4nz Net - Surpass Help Desk - NES Forever Use the thanks button. It works! AIM: dansorl

February 27th, 2008, 2:42 PM	#3 (permalink)
removed Surpass Abuse Admin Super #1 Joined in Mar 2005 Lives in Houston, TX 7,574 posts Gave thanks: 10 Thanked 263 times	Yep, we're just making sure that your server is up. __________________ Surpass Abuse & Security unofficial IRC chat: #surpass irc.blessed.net (efnet)

Thread Tools	Search this Thread
Show Printable Version Email this Page	Search this Thread: Advanced Search

February 27th, 2008, 2:58 PM	#4 (permalink)
kwagner Registered User Fresh Surpasser Joined in Aug 2005 21 posts Gave thanks: 2 Thanked 0 times	Thanks for the replies, and the service

Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)