The invention discloses an
attack detection method and device, a
computer program product and
electronic equipment. The method relates to the field of security detection or other related fields, and comprises the following steps: obtaining a plurality of access requests and response data of each access request, a target
domain name included in each access request being used for
a domain name server to analyze to obtain a target
IP address;
processing a plurality of data pairs formed by the plurality of access requests and the response data of each access request to generate a
time sequence corresponding to the access of the same
client to the target
domain name, a plurality of survival time fields included in the
time sequence being obtained by respectively analyzing the plurality of data pairs; performing sequence evaluation
processing on the
time sequence to obtain a target sequence index; and determining whether the target
IP address is a malicious address according to the target sequence index. Through the method and the device, the problem that whether the target
IP address is malicious or not is difficult to accurately distinguish in related technologies is solved.