REAL-TIME SCANNING OF IP ADDRESSES
Examples of the present disclosure describe systems and methods of providing real-time scanning of IP addresses. In aspects, input may be received by a real-time IP scanning system. The system may generate one or more work orders based on the input. A scanner associated with the system may access a work order and attempt to communicate with one or more devices identified by the work order. If the attempted communication with a device is successful, a protocol analyzer may be used to provide a predefined payload to the device. If the response from the device matches an expected string, the device may be determined to be a safe and/or legitimate device. If the response from the device does not match an expected string, the device may be determined to be a malicious device.
1 . A method for providing real-time scanning of IP addresses, the method comprising:
communicating with a computing device to obtain device indicator information from the computing device;
providing the device indicator information to a first machine learned model to obtain a selection of a payload, wherein the payload is configured for a particular device type of the computing device, and wherein the payload is configured to solicit an expected response from the particular device type; and
providing the selected payload to the computing device to solicit a response from the computing device.