Malicious request interception method and device and computer equipment

Abstract

The invention discloses a malicious request interception method and device and computer equipment, relates to the technical field of information, and mainly aims to directly intercept malicious requests in a Kong gateway layer, so that the performance consumption of a back-end php layer is reduced, and the pollution to service logs is avoided. The method comprises the following steps: receiving a service request triggered by a user; analyzing the service request to obtain equipment identification information and / or an IP address corresponding to the service request; querying a preset blacklist according to the equipment identification information and / or the IP address, and determining whether the service request is a malicious request or not according to a query result; and if the service request is a malicious request, intercepting the service request. The method is suitable for intercepting malicious requests.

Description

technical field [0001] The present invention relates to the field of information technology, in particular to a malicious request interception method, device and computer equipment. Background technique [0002] With the rapid development of the Internet, network malicious behavior has become a problem that cannot be ignored in the industry. Network malicious behavior can be an abnormal means to achieve a certain purpose, such as network attacks, malicious requests, etc. Malicious requests can be through applications, Over a period of time, the hypertext transfer protocol network requests that are continuously sent to the server and affect the normal operation of the server, for example, interfere with normal user network behavior or attack a web site in this way, because these requests are very intensive , causing enormous pressure on the server, so it needs to be intercepted. [0003] At present, after receiving a service request, if the service request is a malicious req...

AI Technical Summary

Problems solved by technology

However, because this method puts malicious requests in the PHP layer to intercept, it increases the performance consumption of the PHP layer. In addition, because the PHP layer will record corresponding logs for each request, it will be used for subsequent daily activity statistics and user behavior analysis. , so such a large number of malicious requests will cause a lot of invalid logs to be added to the php layer, thereby polluting the normal business logs, which is not conducive to the analysis of user behavior, and will also waste storage space

Images