Abstract: A method for preventing IGMP packet attacks includes two levels of anti-attack steps: anti-attacking on the basis of the source IP address of an IGMP packet; and anti-attacking on the basis of the multicast group IP address of the IGMP packet. Moreover, an apparatus for preventing IGMP packet attacks is disclosed herein. In the embodiments of the present disclosure, the attacks are prevented hierarchically in light of the source address and multicast group IP of the IGMP packet, thus effectively solving network exceptions caused by malicious IGMP packets which surge in a short time.