AliyunSecBot/Aliyun
GoodBotCommunity-sourcedA security-focused crawler operated by Alibaba Cloud used to verify website integrity and perform vulnerability assessments for customers using their security services. Operated by Alibaba Cloud.
What is AliyunSecBot/Aliyun?
AliyunSecBot is the official automated agent for Alibaba Cloud's security suite. It is designed to crawl websites protected by Alibaba Cloud's security products to perform automated vulnerability scanning and security health checks. By identifying potential weaknesses in a site's configuration or code, it allows administrators to proactively patch security gaps before they can be exploited by malicious actors.
Identification
Why it crawls your site
The bot crawls websites to gather data necessary for security analysis and threat detection within the Alibaba Cloud ecosystem. It operates on behalf of site owners who have enabled security monitoring features, ensuring that the platform can provide accurate reports on the security posture of the hosted assets. Verification can be performed by checking the User-Agent string against the official Alibaba Cloud service documentation and ensuring the source IP addresses originate from Alibaba Cloud's verified infrastructure ranges.
IP ranges
Requests from AliyunSecBot/Aliyun originate from these published ranges. For strict verification, match the source IP against this list in addition to checking the user-agent and reverse-DNS.
Block or allow AliyunSecBot/Aliyun
Add a Disallow rule for AliyunSecBot/Aliyun ([email protected]) in your robots.txt file. You can also block at the server level using your web server configuration or CDN firewall rules to filter requests matching the user-agent string.
# Block AliyunSecBot/Aliyun from crawling your entire site User-agent: AliyunSecBot/Aliyun ([email protected]) Disallow: / # Allow AliyunSecBot/Aliyun full access User-agent: AliyunSecBot/Aliyun ([email protected]) Allow: /
Ensure your robots.txt allows AliyunSecBot/Aliyun ([email protected]). Verify requests by checking the user-agent string.
Traffic & trends
No Cloudflare traffic data available.
Loading trend data…
Links & references
Data sources
This profile is compiled from the following sources.
Something wrong with this entry? Suggest a correction