All Products
Search
Document Center

:Large amounts of access logs from Alibaba cloud IP addresses

Last Updated:Dec 30, 2020

Problem description

In the logs of the origin, a large number of accesses from Alibaba cloud IP addresses were found.

Cause

And is associated with Alibaba Cloud products.

Solution

Web Application Firewall

Web Application Firewall is applied to both the Client and the origin server. Therefore, if you use Web Application Firewall, all requests sent to the origin server are Web Application Firewall back-to-origin IP addresses. If you need to view IP is not Web Application Firewall IP addresses can log on Web Application Firewall console click Web Application Firewall back-to-source IP segment list can.

Anti-DDoS Premium and Anti-DDoS Pro

Similar to the Web Application Firewall architecture, anti-DDoS pro acts on the Client and origin server. To check whether the IP address is Anti-DDoS Pro, log on to the anti-DDoS console and click view back-to-origin CIDR block.

CDN

The CDN architecture is similar to the Web Application Firewall architecture. You can log on to the CDN console to check whether the IP address belongs to CDN.

Other conditions

The preceding products are not used by any of your customers. However, the customers who use these products may also be accessing Alibaba Cloud hosts. The IP addresses that you receive from these customers are also Alibaba Cloud's IP addresses. You can check whether these customers connect to your businesses.

Application scope

  • Web Application Firewall
  • Anti-DDoS Premium and Anti-DDoS Pro
  • CDN