Filtering out scanner traffic caused by the monthly scans

Richard van der Velde

February 28, 2025 12:59
Updated

Google Analytics will automatically recognize traffic from the Cookiebot scanner and omit it from your reporting.

Domains added to your Cookiebot CMP account are scanned monthly. These scans can appear as anomalous traffic in statistics reporting.
This usually presents itself as significant spikes on a specific day every month.

Anomalous spikes caused by the Cookiebot scanner's monthly scans

If you see such spikes that correlate with the monthly scans you can consider filtering out the scanner's IP addresses:

20.223.9.138
34.107.102.47
34.141.10.24
34.159.86.126
34.159.168.195
34.159.247.222
35.198.78.207
35.198.137.6
35.198.160.49
35.246.143.2
35.246.191.14

Alternatively, you could use this regular expression:

^(20\.223\.9\.138|34\.(107\.102\.47|141\.10\.24|159\.(86\.126|168\.195|247\.222))|35\.(198\.(78\.207|137\.6|160\.49)|246\.(143\.2|191\.14)))$