diff --git a/container_includes/ip_bans/ip_addresses_alibaba.txt b/container_includes/ip_bans/ip_addresses_alibaba.txt
new file mode 100644
index 0000000000..c7266f9e61
--- /dev/null
+++ b/container_includes/ip_bans/ip_addresses_alibaba.txt
@@ -0,0 +1,20 @@
+# We noticed Alibaba's US data center sending us traffic on 2023-06-23.
+#
+# eg. https://www.whatismyip.com/ip/47.252.18.46/
+#   City: Virginia Beach
+#   State: Virginia
+#   Country: United States of America
+#   ISP: AliCloud
+#   Domain: alicloud.com
+#   Network Speed: T1
+#   Known Proxy: yes
+#   Proxy Type: DCH
+#   ASN: 45102
+#   Organization: Alibaba US Technology Co. Ltd.
+#
+# We should probably block these with a CIDR block.
+#
+
+47.252.18.46
+47.253.34.68
+47.253.98.109