agent-orchestrator-icon-fetch

Its full user-agent string, exactly as it arrives at the gate:

There is no operator to verify against. This name is what software calls itself when nobody gave it one.

Add these two lines to the robots.txt file at the root of your site. Well-behaved crawlers read it before they crawl, so the change applies from agent-orchestrator-icon-fetch's next visit. Nothing else on your site needs to change.

# Block agent-orchestrator-icon-fetch from the whole site
User-agent: agent-orchestrator-icon-fetch
Disallow: /

Or let it visit but keep it away from part of the site:

# Let it in, but keep it out of one room
User-agent: agent-orchestrator-icon-fetch
Allow: /
Disallow: /members/

Scripts and scanners run from wherever their owners rent a server. These are the networks behind the visits on file:

Networks and countries come from the visitor's IP address, looked up in a local copy of the DB-IP database. The addresses themselves are never stored.