Alibaba Cloud Observability
Alibaba Cloud Observability
Jul 7, 2025 · Information Security

Tracing Malicious Attacks with Alibaba Cloud SLS SQL and Automated Multi‑Cloud Defense

This article walks through a real‑world case where a large platform suffered a massive traffic‑based attack, showing how Alibaba Cloud Log Service (SLS) SQL can extract high‑frequency IPs, join them with user identifiers, perform geographic analysis, and automatically update AWS and Alibaba WAF rules to block malicious sources.

SLSSQLattack tracing
0 likes · 13 min read
Tracing Malicious Attacks with Alibaba Cloud SLS SQL and Automated Multi‑Cloud Defense
Alibaba Cloud Native
Alibaba Cloud Native
Jul 2, 2025 · Information Security

Tracing Malicious Attacks on Large Platforms with Alibaba Cloud SLS SQL

This article walks through a real‑world case where a large platform suffered a massive traffic‑based attack, showing how to extract high‑frequency IPs, join logs by trace_id, perform geographic analysis, and automate blacklist updates across Alibaba Cloud and AWS using SLS SQL and Python SDKs.

Information SecuritySLSSQL
0 likes · 12 min read
Tracing Malicious Attacks on Large Platforms with Alibaba Cloud SLS SQL