Operator
Alibaba
Alibaba runs 5 bots across 5 agent types. Each one is a separate user-agent so you can allow or block them independently.
AliyunSecBot is operated by Alibaba. Probes websites for vulnerabilities, exposed credentials, or compliance issues. Sometimes legitimate (your own pentest vendor) and sometimes hostile reconnaissance.
Quark-Agent is operated by Alibaba. Autonomously navigates websites, fills forms, and takes actions on behalf of a human user. Often runs a full headless browser and can perform any interaction a person could.
Quark-Spider is operated by Alibaba. Indexes pages for AI-powered search products that cite and link back to sources. Allowing it is typically how a site becomes citable inside answer engines and LLM search.
Qwen-User is operated by Alibaba. Fetches a page in real time when an LLM is mid-answer to a user question. Traffic spikes correlate with question volume rather than crawl schedules, so it shows up unpredictably.
QwenBot is operated by Alibaba. Crawls broadly across the public web to gather content for training new model versions. Site owners can opt out via robots.txt, though enforcement varies by operator.
Live data | via Cloudflare Radar
See how Alibaba's bots show up in real internet traffic
Cloudflare Radar publishes a continuously-updating view of AI bot activity across the websites Cloudflare protects. You can see which user-agents drive the most requests, how that share shifts week to week, and which industries each bot crawls hardest. The data refreshes on Cloudflare's side, so the link below is always current.
Open Cloudflare Radar AI InsightsWhat you'll find there
- User-agent share for every tracked AI bot, including Alibaba's
- Robots.txt and crawl-purpose breakdowns per operator
- Industry and content-type targets for each crawler
- Time-series trends going back several months
AI operator best practices
How the leading AI operators behave: self-verification, distinct bots by purpose, and whether they respect robots.txt. Live from Cloudflare Radar.