A method of defending against website attacks, comprising: obtaining a traffic threshold value corresponding to a target IP address; determining whether real-time visitor traffic for the target IP address exceeds the traffic threshold value; and handling incoming visitor traffic for the target IP address based at least in part on whether the real-time visitor traffic for the target IP address exceeds the traffic threshold value, wherein the handling incoming visitor traffic for the target IP address based at least in part on whether the real-time visitor traffic for the target IP address exceeds the traffic threshold value comprises: in response to a determination that the real-time visitor traffic for the target IP address exceeds the traffic threshold value: configuring a blackhole route for the target IP address; obtaining a blackhole route release time corresponding to the blackhole route, wherein: the blackhole route release time is determined based on one or more predetermined blackhole route release time determining rules and at least one or more characteristics of historical traffic to the target IP address to the target IP address; and the one or more characteristics of the historical traffic to the target IP address include a number of times visitor traffic to the target IP address was forwarded to a blackhole route within a specific historical period of time, a peak amount traffic for the target IP during the specific historical period of time, or both; and redirecting the incoming visitor traffic for the target IP address to the blackhole route until the blackhole release time corresponding to the blackhole route has been reached. obtaining a traffic threshold value corresponding to a target IP address; determining whether real-time visitor traffic for the target IP address exceeds the traffic threshold value; and handling incoming visitor traffic for the target IP address based at least in part on whether the real-time visitor traffic for the target IP address exceeds the traffic threshold value, wherein the handling incoming visitor traffic for the target IP address based at least in part on whether the real-time visitor traffic for the target IP address exceeds the traffic threshold value comprises: in response to a determination that the real-time visitor traffic for the target IP address exceeds the traffic threshold value: configuring a blackhole route for the target IP address; obtaining a blackhole route release time corresponding to the blackhole route, wherein: the blackhole route release time is determined based on one or more predetermined blackhole route release time determining rules and at least one or more characteristics of historical traffic to the target IP address to the target IP address; and the one or more characteristics of the historical traffic to the target IP address include a number of times visitor traffic to the target IP address was forwarded to a blackhole route within a specific historical period of time, a peak amount traffic for the target IP during the specific historical period of time, or both; and redirecting the incoming visitor traffic for the target IP address to the blackhole route until the blackhole release time corresponding to the blackhole route has been reached. configuring a blackhole route for the target IP address; obtaining a blackhole route release time corresponding to the blackhole route, wherein: the blackhole route release time is determined based on one or more predetermined blackhole route release time determining rules and at least one or more characteristics of historical traffic to the target IP address to the target IP address; and the one or more characteristics of the historical traffic to the target IP address include a number of times visitor traffic to the target IP address was forwarded to a blackhole route within a specific historical period of time, a peak amount traffic for the target IP during the specific historical period of time, or both; and redirecting the incoming visitor traffic for the target IP address to the blackhole route until the blackhole release time corresponding to the blackhole route has been reached.