Is AliyunBot in my logs really Alibaba?

There is no way to prove it. Alibaba publishes neither an address list nor a reverse DNS record for this crawler, so the user agent is the only evidence and anyone can send it. We record the visit as an unverified claim rather than presenting it as confirmed.

How do I tell AliyunBot apart from Alibaba's other crawlers?

By the token, and only by the token. Alibaba also sends Qwen-User, QwenBot, and the strings differ by a few characters while the jobs differ completely — one may be answering somebody's question while another collects training material. Match on the exact token rather than on the operator's name appearing anywhere in the header, or the four end up counted as one.

Does AliyunBot run JavaScript?

No. It requests the HTML and leaves. That is why a browser-based analytics tag never records these visits: the tag is JavaScript, and nothing runs it. Seeing this crawler at all requires reading it server-side.

Why is AliyunBot counted as Other AI traffic and not something else?

Because that is the job this particular crawler does. Alibaba runs more than one — Qwen-User, QwenBot — and they are counted separately because the decisions about them are separate. Filing them together under one operator name would let ordinary indexing look like AI interest, which is the single most misleading thing an AI traffic report can do.

Why does AliyunBot not show up in Google Analytics?

Google Analytics runs in the browser. This crawler never opens a browser — it requests the HTML, reads it, and leaves, so the tracking script is never executed and no event is ever sent. Every browser-based analytics tool has the same blind spot, which is why crawler traffic has to be read from the server side to be seen at all.

Why can a AliyunBot visit not be verified?

Alibaba publishes neither a machine-readable list of the addresses its crawler uses nor a reverse DNS record pointing back at itself. With neither, the user-agent header is the only evidence, and anyone can send it. Rather than showing a confidence we cannot support, the visit is recorded as an unverified claim — which is also the honest answer to give anyone asking how much of your AI traffic is real.

AI crawlers

AliyunBot

Also known as Alibaba AliyunBot

4 min read · updated 2026-09-09

Definition

AliyunBot is Alibaba's crawler for traffic that is neither answering nor training. Alibaba Cloud infrastructure traffic. Alibaba Cloud fetched your page; it is not a model answering or training.

For the reference card — AliyunBot in the crawler directory.

What AliyunBot is

Alibaba crawls for Qwen and Tongyi. Neither is documented in the way Western operators document their crawlers, and no address list is published, so everything known about these tokens comes from observed traffic.

On this site AliyunBot is counted as other AI traffic, which is the row it appears in on your dashboard. The category matters because it decides which number moves when this crawler visits, and the four are reported separately for exactly that reason.

What its traffic looks like

Irregular and low volume. These fetches happen for a specific reason — an ad check, a preview, an infrastructure request — rather than on a schedule, so there is no pattern worth reading into unless the count is unexpectedly high.

How it is verified

Alibaba publishes neither a machine-readable list of the addresses this crawler uses nor a reverse DNS record pointing back at itself. The user-agent header is therefore the only evidence, and anyone can send it — so a visit is recorded as an unverified claim rather than as a confirmed fetch.

That is not a gap in the measurement so much as an honest ceiling. A report that showed these as verified would be inventing a confidence nobody can support, and the number it produced would be the first thing to fall apart when somebody asked where it came from.

If you block it

Very little. This fetch is neither an answer nor training, so blocking it costs you nothing except the record of Alibaba having visited.

There is not much to decide here. This fetch is neither answering a question nor collecting training material, so it neither brings readers nor takes anything you would miss.

It is worth watching the volume rather than the intent. If a crawler in this category becomes a large share of your requests, that is a bandwidth question, and it is answered with a rate limit rather than a robots rule.

How it differs from Alibaba's other crawlers

Alibaba sends 3 crawlers and gives each its own token, so they can be allowed and refused separately. The tokens differ by a few characters and what the fetch means does not:

Qwen-User — ai assistant. Qwen fetching a page to answer someone's question. QwenBot — ai training. Alibaba's training crawler for Qwen.

Confusing two of these is the most common mistake with this operator, and it is expensive in one direction: a rule meant for the training crawler that lands on the search crawler removes you from results without stopping any training.

Questions

Is AliyunBot in my logs really Alibaba?: There is no way to prove it. Alibaba publishes neither an address list nor a reverse DNS record for this crawler, so the user agent is the only evidence and anyone can send it. We record the visit as an unverified claim rather than presenting it as confirmed.
How do I tell AliyunBot apart from Alibaba's other crawlers?: By the token, and only by the token. Alibaba also sends Qwen-User, QwenBot, and the strings differ by a few characters while the jobs differ completely — one may be answering somebody's question while another collects training material. Match on the exact token rather than on the operator's name appearing anywhere in the header, or the four end up counted as one.
Does AliyunBot run JavaScript?: No. It requests the HTML and leaves. That is why a browser-based analytics tag never records these visits: the tag is JavaScript, and nothing runs it. Seeing this crawler at all requires reading it server-side.
Why is AliyunBot counted as Other AI traffic and not something else?: Because that is the job this particular crawler does. Alibaba runs more than one — Qwen-User, QwenBot — and they are counted separately because the decisions about them are separate. Filing them together under one operator name would let ordinary indexing look like AI interest, which is the single most misleading thing an AI traffic report can do.
Why does AliyunBot not show up in Google Analytics?: Google Analytics runs in the browser. This crawler never opens a browser — it requests the HTML, reads it, and leaves, so the tracking script is never executed and no event is ever sent. Every browser-based analytics tool has the same blind spot, which is why crawler traffic has to be read from the server side to be seen at all.
Why can a AliyunBot visit not be verified?: Alibaba publishes neither a machine-readable list of the addresses its crawler uses nor a reverse DNS record pointing back at itself. With neither, the user-agent header is the only evidence, and anyone can send it. Rather than showing a confidence we cannot support, the visit is recorded as an unverified claim — which is also the honest answer to give anyone asking how much of your AI traffic is real.

See whether AliyunBot is reaching your pages.

AI crawlers take your HTML and leave without running a line of JavaScript, so a browser tag records nothing. TrueStat reads them server-side, checks each address against what the operator publishes, and shows you which pages were fetched — including the ones that returned a 404.

Start tracking All terms