IP address dynamic blocking method and device, equipment and medium

Abstract

The invention provides an IP address dynamic blocking method. The method comprises the following steps: setting a first blocking parameter; dividing the IP address into one or more IP address fields according to the first blocking parameter; an IP address blocking target segment is determined from the one or more IP address segments, and the IP address blocking target segment is an IP address segment comprising the IP address to be blocked; and determining a first blocking time length according to the first blocking parameter, and blocking the IP address blocking target segment within the first blocking time length. On the other hand, the invention further provides an IP address dynamic blocking device, electronic equipment and a computer readable storage medium.

Description

technical field [0001] The present disclosure relates to the technical field of computer network security, in particular to a method, device, equipment and medium for dynamically blocking IP addresses. Background technique [0002] Blocking IP is a means to strengthen access control between networks, prevent malicious users from accessing or attacking network resources, and protect the normal service use of network resources. It checks the IP address characteristics of data packets transmitted between two or more networks according to certain security policies to determine whether the communication between the networks is allowed and monitors the operating status of the networks. In practice, although this technology is an effective means of network protection, it also has some shortcomings: when there are attacks from malicious IP addresses, if the administrator wants to block these IP addresses, there are two common methods, one is to block only these IP addresses , the a...

AI Technical Summary

Problems solved by technology

In practice, although this technology is an effective means of network protection, it also has some shortcomings: when there are attacks from malicious IP addresses, if the administrator wants to block these IP addresses, there are two common methods, one is to block only these IP addresses , the advantage is to accurately block black IPs, the disadvantage is that the block list is long and difficult to maintain, the other is to block the entire network segment, the advantage is that there are fewer items in the block list and easy maintenance, and the disadvantage is that the blocking range may be expanded , affecting normal users on the same network segment to access the network

Moreover, after the IP is blocked, the administrator will often not ask any more questions, resulting in permanent IP blocking, which will also cause problems for users who normally use these IPs in the future.

Images