AliyunBot
Alibaba · reviewed 2026-11-05
About AliyunBot
Alibaba Cloud crawler observed in the wild; purpose not officially documented.
Operates Qwen/Tongyi; Qwen-User fetches for user questions, QwenBot/TongyiBot collect training data.
Usually means: The vendor has not published enough to say which product triggered the fetch. The hit is real; the intent is not documented.
Identity
User agent
Crawlers are matched by token, not the full browser string. Providers may add version or product text around it.
robots.txt token
Use this token in a User-agent line to allow or block the crawler.
Block this token
User-agent: AliyunBot Disallow: /
A Disallow only stops crawlers that honor robots.txt. Classify the category before blocking; check the live file with the robots.txt checker.
Verify a hit
A matching user agent is not proof: any client can send the string. When the vendor publishes network data, compare the request against it before you trust the hit.
Match the user agent
Request UA contains AliyunBot.
Check reverse DNS
The vendor publishes no reverse-DNS suffix.
Check the IP range
The vendor publishes no IP ranges.
A verified hit proves the network path; it does not prove what the crawler will do with the page.
AliyunBot: common questions
What is AliyunBot?
AliyunBot is a crawler from Alibaba, filed under Other AI bots. Alibaba Cloud crawler observed in the wild; purpose not officially documented. Requests advertise it in the User-Agent header as AliyunBot.
Does AliyunBot train AI models?
The directory files it under Other AI bots: no training role is documented for it, and the vendor has not published enough to classify it further.
How do I block AliyunBot in robots.txt?
Add a group with User-agent: AliyunBot and Disallow: / to robots.txt, then re-test the live file. robots.txt matches the token, not the full User-Agent string, and blocking this token does not block the vendor's other crawlers.
How do I verify an AliyunBot hit?
Only by user agent. Alibaba publishes neither reverse DNS nor IP ranges, so a match is not checked — that is not the same as forged, but it is not proof either.
Testing a block? Run the live file through the robots.txt tester or check the whole AI crawler access group.
See when AliyunBot hits your site
Page scripts never see AI crawlers because they do not run JavaScript. Install the server probe and each hit lands in the Crawlers block with its path and status.