AliyunSecBot
SafeUser-agent: AliyunSecBot
Operator: Alibaba Cloud
Added:
Bot directoryCategory
Cloud provider crawlers used for security scanning, CDN warm-up or threat intelligence.
User-agent: AliyunSecBot
Operator: Alibaba Cloud
Added:
User-agent: Amazonbot
Operator: Amazon
Added:
User-agent: Google-CloudVertexBot
Operator: Google
Added:
No bots match those filters. Try a shorter search or browse every category. Missing a crawler? Tell us and we will research it.
Our database lists 3 cloud services from 3 operators. 3 are rated safe, 0 caution and 0 aggressive. What they are for:
| Purpose | Crawlers |
|---|---|
| checks pages for an SEO, uptime or analytics service | 1 |
| collects pages to train AI models | 1 |
| fetches a page when a person asks an assistant or app to open it | 1 |
How the 3 cloud services spread across our six priority tiers, where Tier 1 is what you would notice losing:
The highest-priority cloud services here are Amazonbot. Start your review with these.
From our robots.txt study of the Tranco top 10,000 (5,583 valid files, fetched October 20, 2026):
| Token | Files naming it | Files blocking it |
|---|---|---|
Amazonbot | 10.6% | 12.2% |
Tokens in cloud services can be blocked without being named, through User-agent: * with Disallow: /, which is why some blocking shares in this table exceed the naming shares.
User-agent: * should say, because every crawler you do not name follows it.Disallow lines inside it.The User-agent: * group. If there is no such group, it may crawl everything.
Not necessarily. Safety describes behaviour. Whether to allow it depends on what it does with your content and what you lose by blocking it.
Ranked by priority tier, these are the cloud services with the biggest effect on a typical site:
Amazonbot (Amazon, Tier 2): a training crawler that collects pages to train AI models.Google-CloudVertexBot (Google, Tier 3): a retrieval crawler that feeds AI search answers that fetches a page when a person asks an assistant or app to open it.AliyunSecBot (Alibaba Cloud, Tier 6): a utility crawler that checks pages for an SEO, uptime or analytics service.Of the 3 cloud services we track, 2 are documented as following robots.txt, 0 as not following it for some requests, 0 with exceptions or disputed behaviour, and 1 with no clear statement from the operator. Where behaviour is unclear, back a robots.txt rule with a server-side one.
| If you run... | Recommended approach |
|---|---|
| Site that uses this kind of service | Allow the crawlers for services you actually use; they need access to work. |
| Site that does not use the service | Blocking is low risk; it has little effect on search or AI visibility. |
| Site under heavy bot load | Rate-limit or block the noisiest crawlers first. |
| Privacy-sensitive site | Block crawlers whose data use you have not reviewed. |
The errors we see most often with cloud services in the files and firewalls we test:
All three hide inside a file that looks correct, so check cloud services from outside after every change.
robots.txt says what Amazonbot and Google-CloudVertexBot and AliyunSecBot may do; your access logs show what they actually did.
On a server with standard Nginx or Apache logs, this counts matching requests per day (adjust the log path for your host):
grep -iE "Amazonbot|Google-CloudVertexBot|AliyunSecBot" /var/log/nginx/access.log \
| awk '{print $4}' | cut -d: -f1 | sort | uniq -c
And this shows which paths it requested most, which is the quickest way to see whether your Disallow lines are being respected:
grep -iE "Amazonbot|Google-CloudVertexBot|AliyunSecBot" /var/log/nginx/access.log \
| awk '{print $7}' | sort | uniq -c | sort -rn | head -20
Anyone can send these user-agents, so confirm the source before acting on a match:
Amazonbot: we hold no published IP list, so use reverse DNS where cloud services documents a hostname and treat an unverifiable Amazonbot request with caution. Check it separately from Google-CloudVertexBot and AliyunSecBot.Google-CloudVertexBot: compare each address with the ranges at developers.google.com/static/crawling/ipranges/common-crawlers.json. A request claiming to be Google-CloudVertexBot from outside them is not genuine. Check it separately from Amazonbot and AliyunSecBot.AliyunSecBot: we hold no published IP list, so use reverse DNS where cloud services documents a hostname and treat an unverifiable AliyunSecBot request with caution. Check it separately from Amazonbot and Google-CloudVertexBot.The newest cloud services in our database: Google-CloudVertexBot (March 17, 2026), Amazonbot (March 17, 2026), AliyunSecBot (March 17, 2026). A User-agent: * default decides what each of these gets until you name it.
Movement among the tracked cloud services: 2026 and October 20, 2026, files naming Amazonbot went from 543 to 593 (+50) and files blocking it from 624 to 680 (+56), so more sites wrote a rule for Amazonbot and more of those rules block it.
AliyunSecBot from Alibaba Cloud: it checks pages for an SEO, uptime or analytics service; Tier 6, rated safe, blocking impact not documented.Amazonbot from Amazon: it collects pages to train AI models; Tier 2, rated safe, blocking impact low.Google-CloudVertexBot from Google: it fetches a page when a person asks an assistant or app to open it; Tier 3, rated safe, blocking impact low.Related: how AI engines choose their sources
With so few cloud services, you can decide about every one of them by name rather than relying on a User-agent: * default.
From our robots.txt study of the Tranco top 10,000 (5,583 valid files, fetched October 20, 2026):
Amazonbot, the only one tracked among the cloud services tokens: blocked in 12.2% of files (464 with its own group, 216 through User-agent: *), more often by the top 1,000 (15.6%) than the long tail (11.9%).For scale, 20.1% of all files block at least one AI training crawler. Amazonbot is one of the tokens driving that figure.
User-agent: *, so a short file with a sensible default is easier to maintain than a long list.User-agent: * default matters: it decides what happens to crawlers you have never heard of.Text size
Saved on this device only. Drag the round button to move it. Accessibility statement
Scout your AI crawler guide