Request interception method and device, electronic equipment and computer readable storage medium

Abstract

The invention provides a request interception method and a device thereof, electronic equipment and a computer readable storage medium, and relates to the field of network security. A data analysis server obtains all website access logs received from a network application firewall in a past preset time period, and for each website access log, if a malicious behavior collection point matched with the website access log exists in a plurality of malicious behavior collection points, the malicious behavior collection points are matched with the website access log; if yes, one time is added to the count of the data tuple corresponding to the website access log, a target data tuple meeting a preset condition is selected according to count values corresponding to all the data tuples, an IP address in the target data tuple is added into an IP interception list, and the IP interception list is sent to a network application firewall, therefore, when the network application firewall receives the proxy IP request matched with the IP address in the IP interception list, the proxy IP request is intercepted, and the recognition and interception effects of the proxy IP request are improved.

Description

technical field [0001] The present application relates to the field of network security, in particular, to a request interception method, device, electronic equipment and computer-readable storage medium. Background technique [0002] With the rapid development of the Internet, malicious network attacks have become a problem that cannot be ignored in the industry. Malicious network attacks can be abnormal means adopted to achieve a certain purpose, such as network attacks, malicious requests, and so on. In the network environment, malicious behaviors on the network can cause the website to fail to provide services to users normally in a very short period of time, which seriously affects the normal operation of the Internet. [0003] Nowadays, some access requests will use the IP proxy pool to implement web crawlers, zombie account registration, online voting, swiping orders, etc., but these are often accompanied by fraudulent and malicious access behaviors, which are direct...

AI Technical Summary

Problems solved by technology

In the network environment, malicious network behavior can cause the website to fail to provide services to users in a very short period of time, which seriously affects the normal operation of the Internet.

[0003] Nowadays, some access requests will use the IP proxy pool to implement web crawlers, zombie account registration, online voting, swiping orders, etc., but these are often accompanied by fraudulent and malicious access behaviors, which are directly banned in general risk control strategies

Images