# KonformiaBot | konformia.at

> KonformiaBot, the checking robot of konformia.at: user agent, IP address, behaviour, robots.txt and how to allow it in Cloudflare or another firewall.

Source: https://konformia.at/en/bot

# KonformiaBot

KonformiaBot is the checking robot of konformia.at. It opens a website the way a visitor sees it and measures what loads before and after cookie consent, plus accessibility, security headers and email records.

## When it visits

Only when someone enters this website on konformia.at for a check, and then once a week while the owner has booked ongoing checks. It does not crawl the web on its own.

## How to recognise it

User agent: `Mozilla/5.0 (compatible; KonformiaBot/0.1; +https://konformia.at/bot)`
IP address: `204.168.216.113` (server in Finland, IPv4 only)

## How it behaves

- It follows robots.txt (token `KonformiaBot` or `*`).

- At most 10 pages per check, plus up to 20 links and 20 images checked for reachability; for shops one item into the cart and the first checkout page, without ordering.

- It never gets around bot protection or a security challenge. If one appears, the report says "blocked".

- Before it reports that something loads without consent, it opens the home page a second time with an ordinary browser user agent, because some banners treat robots differently. This only happens if the home page was already open to KonformiaBot.

## Allowing it when your bot protection blocks it

**Cloudflare, all plans:** under Security rules, Create rule > Custom rules. Condition: field "IP Source Address" equals `204.168.216.113` and field "User Agent" contains `KonformiaBot`. Action "Skip", ticked: All remaining custom rules, All rate limiting rules, All managed rules, All Super Bot Fight Mode rules, Browser Integrity Check, Security Level. Then Deploy.

**Cloudflare with Bot Fight Mode (Free plan):** Cloudflare does not let a rule skip it. It does not trigger, though, if an IP access rule matches first: under Security rules, Create rule > IP access rules, enter `204.168.216.113`, action "Allow", Create.

**Other firewalls (host, AWS WAF, security plugins):** add an exception for the IP address `204.168.216.113`, ideally also limited to the user agent `KonformiaBot`.

Then start the check again in your account. The exception applies to this one address only; you can delete it at any time.

## Contact

Questions or complaints about KonformiaBot: [hallo@konformia.at](mailto:hallo@konformia.at?subject=KonformiaBot). To exclude it entirely, add to robots.txt: `User-agent: KonformiaBot` and `Disallow: /`.