IP address detection method, detection device and electronic equipment

Abstract

The embodiment of the invention provides an IP address detection method, detection device and electronic equipment. The network device obtains the target user equipment, and the target user equipment communicates with the network device through the IP address to be detected; the network device obtains the total number of the first user equipment, and the first user equipment is current or in the history Devices that detect IP addresses and normal IP addresses communicate with network devices. When the total number is not less than the preset number threshold, the network device determines that the IP address to be detected is a normal IP address. The method can utilize the existing credible normal IP address to analyze the IP address to be detected, and determine that the IP address to be detected is a normal IP address, thereby preventing the normal IP address from being killed by mistake.

Description

technical field [0001] The present invention relates to the field of big data technology, in particular to a detection method, detection device and electronic equipment of a protocol (Internet Protocol, IP for short) address interconnected between networks. Background technique [0002] In the field of big data security, the IP address dimension has always been a dimension that is difficult to accurately evaluate, that is, it is not easy to evaluate whether an IP address is a safe IP address from the perspective of the IP address. The current traditional way of evaluating IP addresses is mainly to detect a single IP address in isolation. [0003] However, the inventor found in the process of realizing the present invention that the prior art has at least the following problems: [0004] The traditional IP address detection method is for a single IP address, by counting the service requests sent by the user equipment using the IP address, and analyzing whether some abnormal ...

AI Technical Summary

Problems solved by technology

However, the IP1 address sends normal emails at other times of the day (times other than 8:00), which shows that the proportion of normal behavior of the IP1 address is very high, and it is a normal IP address with no threat on a high probability. , causing the IP1 address to be killed by mistake

Secondly, if the amount of service requests sent by the IP address is small, it is impossible to accurately analyze the behavior characteristics of the user equipment using the IP address. The behavior characteristics include abnormal behavior and normal behavior.

[0005] It can be seen that the detection results of the traditional IP address detection method may not be accurate, and it is easy to cause the risk of normal IP addresses being killed by mistake.

Images