Methods, devices, equipment, and storage media for identifying abnormal accounts

Abstract

This application relates to a method, apparatus, device, and storage medium for determining abnormal accounts, and pertains to the field of communication technology. The method includes: acquiring network usage information of an account to be detected within a first preset time period. The network usage information includes: online times, cumulative network traffic, the number of first IP addresses, and the number of second IP addresses. The first IP addresses represent different IP addresses assigned to the account to be detected, and the second IP addresses represent the IP addresses of different servers accessed by the account to be detected. Then, based on the network usage information, it is determined whether the account to be detected is an abnormal account. Abnormal accounts include: instant dialing accounts or second-diverting accounts. Instant dialing accounts represent accounts that access the network more times within a second preset time period than a first preset number of times. Second-diverting accounts represent accounts that switch networks more times within a third preset time period than a second preset number of times. This application is used to determine abnormal accounts.

Images