Port monitoring method and device, computer equipment and storage medium

Abstract

The invention relates to a port monitoring method and device, computer equipment and a storage medium. The port monitoring method comprises the following steps: receiving the request data sent by a terminal and extracting the network address carried on the request data; marking the network address when the network address is not queried in the network information memory pool; obtaining a port to receive the request data; obtaining the risk level of the marked network address according to the type of the port and the request data; storing the network address with a risk level greater than a preset level when the risk level of the network address is greater than the preset level; and not responding to the request data when receiving the request data sent by the network address whose risk level is greater than the preset level. According to the invention, manual monitoring at any time is not required, therefore, the problem that the network address whose risk level is greater than the preset level is omitted because the manual monitoring can not be performed at certain special time is avoided, and the omission of the corresponding intrusion equipment is avoided; thus, the discovery efficiency can be improved, and the risk can be discovered in time.

Description

technical field [0001] The invention relates to the computer field, in particular to a port monitoring method, device, computer equipment and storage medium. Background technique [0002] With the development of Internet technology, people can carry out various activities on the Internet. Therefore, people pay more and more attention to whether there is an intrusion device requesting to connect with the server for data transmission. Usually, the intrusion device first scans the port of the server , when the available ports in the server are found, the intrusion device will send a communication request to interact with the server. If the intrusion device is not found in time to scan the server for port scanning request connection, and then defend, there will be a risk of server intrusion. [0003] Traditionally, the server needs to manually monitor different ports on time, so as to check whether there are intrusion devices scanning the ports of the server, so as to discover t...

AI Technical Summary

Problems solved by technology

[0004] Based on this, it is necessary to provide a port monitoring method, device, computer equipment and storage medium for detecting whether the intrusion device scans the port of the server and finds that it is not timely and the discovery efficiency is low.

Images