It is our crawler. Somebody with access to this site asked Attesso to check which third-party scripts and cookies it loads, so we fetched a handful of pages and recorded what they requested. If that was not you, the section on blocking is at the bottom and takes about a minute.
Every request we make carries this user agent:
Mozilla/5.0 (compatible; AttessoScanner/1.0; +https://getattesso.com/scanner)
We do not publish a fixed IP address, and you should be wary of any page that gives you one for us. Scans run across several machines and we add more as demand grows, so an allowlist built on an address would silently stop matching. Match on the user agent above. If your firewall genuinely cannot, email [email protected] and we will send you the current ranges and tell you when they change.
It loads a small number of pages in a real browser and watches which hosts they contact and which cookies get set. That is the whole job.
If someone is running Attesso on this site, the scan is how their cookie banner learns what to block and how their cookie policy gets written. Blocking the crawler does not stop the banner working, but the tracker list will go stale, and a policy that describes the wrong cookies is the specific thing they were trying to avoid.
No hard feelings. Add this to /robots.txt:
User-agent: AttessoScanner Disallow: /
We check robots.txt before every scan and honour it. If you would rather block at the edge, a Cloudflare WAF rule matching the user agent works immediately and does not wait on a cache.
If the traffic looks heavier than what is described here, or you are seeing requests you do not think we would make, tell us and we will look at it the same day. Include a few log lines with timestamps if you can.