Method and device for processing abnormal access of server

The invention discloses a server abnormal access processing method and device, and the method comprises the following steps: obtaining a server access command, and generating a server log based on the server access command; pushing the server log to a log unloading system for storage; accessing the log unloading system through an Flink framework to obtain the server log; classifying the server logs based on a log classification model; performing abnormal access detection on the server log based on a classification result; and processing the server access command based on the detection result. According to the invention, data center security protection means are added, the labor cost of server operation and maintenance is reduced, and the operation and maintenance efficiency is improved. 本发明公开了一种服务器异常访问的处理方法及装置，其中方法包含如下步骤：获取服务器访问命令，基于所述服务器访问命令生成服务器日志；将所述服务器日志推送至日志转存系统中进行存储；通过Flink框架访问所述日志转存系统来获取所述服务器日志；基于日志分类模型对所述服务器日志进行分类；基于所述分类的结果对所述服务器日志进行异常访问检测；基于所述检测的结果对所述服务器访问命令进行处理。本发明增加了数据中心安全防护手段，减少了运维服务器人工成本，提升了运维效率。