CN105227688A - A kind of region class Target IP localization method based on route characteristic - Google Patents
A kind of region class Target IP localization method based on route characteristic Download PDFInfo
- Publication number
- CN105227688A CN105227688A CN201510545712.6A CN201510545712A CN105227688A CN 105227688 A CN105227688 A CN 105227688A CN 201510545712 A CN201510545712 A CN 201510545712A CN 105227688 A CN105227688 A CN 105227688A
- Authority
- CN
- China
- Prior art keywords
- address
- target
- object region
- communication path
- intermediate router
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Granted
Links
- 238000000034 method Methods 0.000 title claims abstract description 21
- 230000004807 localization Effects 0.000 title claims abstract description 17
- 238000004891 communication Methods 0.000 claims abstract description 82
- 238000001514 detection method Methods 0.000 claims abstract description 58
- 230000009191 jumping Effects 0.000 claims abstract description 53
- 238000005259 measurement Methods 0.000 claims abstract description 14
- 239000000203 mixture Substances 0.000 claims description 10
- 238000012217 deletion Methods 0.000 claims description 6
- 230000037430 deletion Effects 0.000 claims description 6
- 238000005516 engineering process Methods 0.000 description 4
- 238000012545 processing Methods 0.000 description 2
- 238000002474 experimental method Methods 0.000 description 1
- 239000000284 extract Substances 0.000 description 1
- 238000012795 verification Methods 0.000 description 1
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L61/00—Network arrangements, protocols or services for addressing or naming
- H04L61/09—Mapping addresses
- H04L61/25—Mapping addresses of the same type
- H04L61/2503—Translation of Internet protocol [IP] addresses
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L67/00—Network arrangements or protocols for supporting network services or applications
- H04L67/50—Network services
- H04L67/52—Network services specially adapted for the location of the user terminal
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L2101/00—Indexing scheme associated with group H04L61/00
- H04L2101/60—Types of network addresses
- H04L2101/69—Types of network addresses using geographic information, e.g. room number
Landscapes
- Engineering & Computer Science (AREA)
- Computer Networks & Wireless Communication (AREA)
- Signal Processing (AREA)
- Data Exchanges In Wide-Area Networks (AREA)
Abstract
The invention discloses a kind of region class Target IP localization method based on route characteristic, comprise the following steps: multiple regions at A, select target IP possibility place are as object region; B, select the multiple terrestrial reference IP being positioned at each object region, obtain the communication path from detection source to the multiple terrestrial reference IP in each object region; C, jumping figure according to all intermediate router interface IP address on each bar communication path and this intermediate router distance measurement source, calculate the candidate feature in each object region; The candidate feature that D, basis obtain, calculates the route characteristic in each object region; E, acquisition detection source, to the communication path of Target IP, calculate the route characteristic of Target IP; Similitude between the route characteristic of F, calculating Target IP and each object zone routing feature, the locating area of select target IP.Present invention, avoiding the high error rate of being carried out IP location by the time delay of dynamic change between node, improve the reliability of Target IP region class location.
Description
Technical field
The present invention relates to field of information security technology, particularly relate to a kind of region class Target IP localization method based on route characteristic.
Background technology
IP location refers to the position of network entity in geographical space determining that IP address is corresponding.Along with location Based service (being called for short LBS) is more and more extensive, the application of IP location technology also gets more and more, as embedded the advertisement for visitor region in webpage; According to geographical position adjustment web displaying language; The access log analyzing web page extracts marketing data; Define electronic tax revenue territorial scope; Find as the illegal act such as network fraud and attack, carry out network forensics etc.As can be seen here, IP location technology all has very wide application prospect in commercial market, network security and cloud service.
As a rule, region class location is the basis of high accuracy IP location, is namely determining the region of Target IP as economized or behind city, being just expected to for it estimates a positioning result more accurately, as certain most probable position determined by longitude and latitude.But in actual location, in a lot of situation, the region at Target IP place is also unknown, and when internodal time delay and distance correlation more weak time, always can not obtain effective locating area according to time delay for Target IP calculates the method for distance restraint.
Summary of the invention
The object of the present invention is to provide a kind of region class Target IP localization method based on route characteristic, the reliable location of region class accurately can be carried out to the Target IP of position the unknown, avoid the situation that cannot obtain effective location result when carrying out IP location according to time delay.
For achieving the above object, the technical solution used in the present invention is:
Based on a region class Target IP localization method for route characteristic, comprise the following steps:
Multiple regions at A, select target IP possibility place, as object region, then enter step B;
B, from terrestrial reference storehouse, select the multiple terrestrial reference IP being positioned at each object region, the node of a selected known geographical locations is as detection source, and obtain from detection source to the communication path of the multiple terrestrial reference IP in each object region, record all intermediate router interface IP address on each bar communication path and the jumping figure in this intermediate router distance measurement source respectively, then enter step C;
C, all intermediate router interface IP address on the every bar communication path of each object region are replaced with C class address corresponding to this IP address, IP1.IP2.IP3.* is replaced with by IP1.IP2.IP3.IP4, for each object region, each one by one after statistics replacement in this object region on every bar communication path jumps intermediate router interface IP address, and intermediate router interface IP address identical on every bar communication path is jumped out existing number of times add up identical, obtain a series of by jumping figure, the tlv triple of intermediate router interface IP address and number of times composition, be the candidate feature in each object region, then step D is entered,
D, for the tlv triple that jumping figure in the candidate feature in each object region is identical, number of times in each tlv triple is added, the value obtained is as the radix of this jumping, calculate the number of times of each tlv triple and the ratio of this jumping radix in each object region, the ratio calculated is appeared at the probability on this object area communication path as the intermediate router interface IP address of correspondence, " number of times " in the tlv triple of object region candidate feature is replaced with this probability, obtain a series of by jumping figure, the new tlv triple of intermediate router interface IP address and probability composition, be the route characteristic in each object region, then step F is entered,
E, obtain the communication path of detection source to Target IP, the jumping figure in all intermediate router interface IP address on record object IP communication path and this intermediate router distance measurement source, all intermediate router interface IP address on Target IP communication path are replaced with C class address corresponding to this IP address, IP1.IP2.IP3.* is replaced with by IP1.IP2.IP3.IP4, each of replacing on rear Target IP communication path of statistics jumps intermediate router interface IP address, obtain a series of by jumping figure, two tuples of intermediate router interface IP address composition, be the route characteristic of Target IP, then step F is entered,
Similitude between the route characteristic of F, calculating Target IP and the route characteristic in each object region, select in the route characteristic in each object region respectively, the tlv triple that jumping figure is identical with two tuples in Target IP route characteristic with the intermediate router interface IP address of this jumping, for the route characteristic in each object region, probability in the multiple tlv triple therefrom selected is added, the probability sum obtained is Target IP and drops on probable value in corresponding object region, and the object region selecting gained probable value maximum is as the locating area of Target IP.
In described step B, when choosing the multiple terrestrial reference IP being positioned at each object region from terrestrial reference storehouse, make selected multiple terrestrial reference IP cover all network segments that in each object region, IP address is corresponding, and ensure that the terrestrial reference IP quantity chosen in each network segment is more than or equal to 10% of IP address sum in this network segment.
In described step C, first comparison detection source is to every bar communication path in each object region, before in each bar communication path m jump intermediate router interface IP address identical time, the front m deleting each bar communication path jumps intermediate router interface IP address and final jump intermediate router interface IP address, intermediate router interface IP address on each bar communication path after deletion is replaced with C class address corresponding to this IP address, replaces with IP1.IP2.IP3.* by IP1.IP2.IP3.IP4.
In described step e, first the front m deleted on Target IP communication path jumps intermediate router interface IP address and final jump intermediate router interface IP address, intermediate router interface IP address on Target IP communication path after deletion is replaced with C class address corresponding to this IP address, replaces with IP1.IP2.IP3.* by IP1.IP2.IP3.IP4.
In described steps A, utilize the positional information of Whois data base querying Target IP, or in terrestrial reference storehouse, search the landmark locations belonging to the same network segment with Target IP, choose multiple regions at Target IP possibility place as object region.
In described step B, send traceroute detection packet from detection source to the multiple terrestrial reference IP in each object region, obtain the communication path from detection source to the multiple terrestrial reference IP in each object region.
In described step e, send traceroute detection packet from detection source to Target IP, obtain the communication path of detection source to Target IP.
The present invention is by fixing a detection source and multiple object region, known region class terrestrial reference IP is utilized to obtain the route characteristic in object region, on the basis that the communication path information of the communication path information corresponding to different object region and Target IP is analyzed, be respectively each object region and Target IP calculates one group of route characteristic, and the route characteristic in the route characteristic of Target IP and multiple object region is compared, calculate the probability that Target IP falls into this object region, the object region of gained maximum probability is the region class positioning result of Target IP, avoid by the time delay of dynamic change between node carry out IP location time high error rate, improve the reliability of Target IP region class location.
Accompanying drawing explanation
Fig. 1 is schematic flow sheet of the present invention.
Embodiment
For the detection source and destination region that is determined, route characteristic refer to from detection source to be positioned at this object region Target IP by way of one group of intermediate router, find through a large amount of path detection experiment, same detection source is comparatively similar to the route characteristic in same object region, and same detection source differs greatly to the route characteristic in different object region, the region class localization method therefore carrying out Target IP according to the route characteristic in different object region has reliability and accuracy.
As shown in Figure 1, a kind of region class Target IP localization method based on route characteristic of the present invention, comprises the following steps:
Multiple regions at A, select target IP possibility place, as object region, then enter step B.Wherein, the positional information of Whois data base querying Target IP can be utilized, or in terrestrial reference storehouse, search the landmark locations belonging to the same network segment with Target IP, and accordingly select target IP may multiple regions at place as object region.
B, from terrestrial reference storehouse, select the multiple terrestrial reference IP being positioned at each object region, the node of a selected known geographical locations is as detection source, and obtain from detection source to the communication path of the multiple terrestrial reference IP in each object region, record all intermediate router interface IP address on each bar communication path and the jumping figure in this intermediate router distance measurement source respectively, then enter step C.Wherein, the terrestrial reference IP quantity selected in each object region is more, coverage is wider, the positioning result finally obtaining Target IP is more accurate, therefore the multiple terrestrial reference IP selected by the present invention cover all network segments that in each object region, IP address is corresponding, and ensure that the terrestrial reference IP quantity chosen in each network segment is more than or equal to 10% of IP address sum in this network segment.The present invention, when obtaining from detection source to the communication path of the multiple terrestrial reference IP in each object region, adopts the mode sending traceroute detection packet from detection source to Target IP.Wherein, if one communication path has N number of intermediate router, N gets positive integer, then from detection source through the jumping figure in first intermediate router distance measurement source be designated as 1, from detection source through the jumping figure in second intermediate router distance measurement source be designated as 2, the like, from detection source through the jumping figure in N number of intermediate router distance measurement source be designated as n.
C, all intermediate router interface IP address on the every bar communication path of each object region are replaced with C class address corresponding to this IP address, IP1.IP2.IP3.* is replaced with by IP1.IP2.IP3.IP4, for each object region, each one by one after statistics replacement in this object region on every bar communication path jumps intermediate router interface IP address, and intermediate router interface IP address identical on every bar communication path is jumped out existing number of times add up identical, obtain a series of by jumping figure, the tlv triple of intermediate router interface IP address and number of times composition, be the candidate feature in each object region, then step D is entered.
In order to simplify computational process, improve location efficiency, the present invention first comparison detection source to the communication path of the multiple terrestrial reference IP in each object region, before in each bar communication path m jump intermediate router interface IP address identical time, there is no relative value each other, therefore the front m deleting each bar communication path jumps intermediate router interface IP address, again due to terrestrial reference IP that the final jump intermediate router interface IP address on each bar communication path is in selected each object region, there is no relative value equally, therefore also the final jump intermediate router interface IP address on each bar communication path can be deleted.Because the multiple IP addresses in class c network distribute to same region usually, the region class therefore for Target IP is located, and all intermediate router interface IP address on each bar communication path after deleting can be replaced with C class address corresponding to this IP address.
D, for the tlv triple that jumping figure in the candidate feature in each object region is identical, number of times in each tlv triple is added, the value obtained is as the radix of this jumping, calculate the number of times of each tlv triple and the ratio of this jumping radix in each object region, the ratio calculated is appeared at the probability on this object area communication path as the intermediate router interface IP address of correspondence, " number of times " in the tlv triple of object region candidate feature is replaced with this probability, obtain a series of by jumping figure, the new tlv triple of intermediate router interface IP address and probability composition, be the route characteristic in each object region, then step F is entered,
E, obtain the communication path of detection source to Target IP, the jumping figure in all intermediate router interface IP address on record object IP communication path and this intermediate router distance measurement source, all intermediate router interface IP address on Target IP communication path are replaced with C class address corresponding to this IP address, IP1.IP2.IP3.* is replaced with by IP1.IP2.IP3.IP4, each of replacing on rear Target IP communication path of statistics jumps intermediate router interface IP address, obtain a series of by jumping figure, two tuples of intermediate router interface IP address composition, be the route characteristic of Target IP, then step F is entered.The present invention, when obtaining the communication path from detection source to Target IP, adopts the mode sending traceroute detection packet from detection source to Target IP.
The present invention deletes m before in detection source to each object area communication path and jumps intermediate router interface IP address and final jump intermediate router interface IP address in step C, therefore also can delete m before in detection source to Target IP communication path and jump intermediate router interface IP address and final jump intermediate router interface IP address, m value is herein identical with the m value in step C, then all intermediate router interface IP address on the Target IP communication path after deletion is replaced with C class address corresponding to this IP address.
Similitude between the route characteristic of F, calculating Target IP and the route characteristic in each object region, add up in the route characteristic in each object region respectively, the tlv triple that jumping figure is identical with two tuples in Target IP route characteristic with the intermediate router interface IP address of this jumping, for the route characteristic in each object region, probability in the multiple tlv triple therefrom selected is added, the probability sum obtained is Target IP and drops on probable value in corresponding object region, and the object region selecting gained probable value maximum is as the locating area of Target IP.
Below in conjunction with specific embodiment, the region class Target IP localization method based on route characteristic of the present invention is described, comprises the following steps:
A, utilize the positional information of Whois data base querying Target IP 218.1.117.165, selected Shanghai, Shenzhen and Xi'an may the object regions at place as it afterwards by analysis, then enter step B.
B, from terrestrial reference storehouse, select the multiple terrestrial reference IP being positioned at Shanghai, three the object regions in Shenzhen and Xi'an respectively, wherein choose the terrestrial reference IP being positioned at Shanghai and add up to 115, the terrestrial reference IP being positioned at Shenzhen adds up to 72, and the terrestrial reference IP being positioned at Xi'an adds up to 60.Choose and be positioned at one, Pekinese node as detection source, traceroute detection packet is sent to all terrestrial reference IP in three object regions from detection source, the communication path wherein arriving Shanghai adds up to 28, the communication path arriving Shenzhen adds up to 36, the communication path arriving Xi'an adds up to 56, records the interface IP address of the intermediate router in each object region on each communication path and the jumping figure in this intermediate router distance measurement source.Wherein, from detection source through the jumping figure in first intermediate router distance measurement source be designated as 1, from detection source through the jumping figure in second intermediate router distance measurement source be designated as 2, the like, until be recorded to from detection source through last intermediate router.
C, through comparing, arrive Beijing, Shanghai, all communication paths in three object regions, Xi'an 4 jumping intermediate router interface IP address of going forward are all identical, do not possess relative value each other, therefore delete front 4 on three all communication paths in object region and jump intermediate router interface IP address, again because the intermediate router interface IP address of final jump on each bar communication path is the terrestrial reference IP chosen, therefore the final jump intermediate router interface IP address on each bar communication path can also be deleted, final reservation the 5th skips to the 13rd intermediate router interface IP address of jumping and relevant information thereof.
Because the multiple IP addresses in class c network distribute to same region usually, the region class therefore for Target IP is located, and all intermediate router interface IP address on each bar communication path can be replaced with C class address corresponding to this IP address.Accordingly, by Shanghai, Shenzhen, on each article of communication path of object region, three, Xi'an after deleting, the 5th skips to the 13rd intermediate router interface IP address of jumping, replace with the C class address that this IP address is corresponding, IP1.IP2.IP3.* is replaced with by IP1.IP2.IP3.IP4, then for each object region, each one by one after statistics replacement in this object region on every bar communication path jumps intermediate router interface IP address, and intermediate router interface IP address identical on every bar communication path is jumped out existing number of times add up identical, obtain a series of by jumping figure, the tlv triple of intermediate router interface IP address and number of times composition, be the candidate feature in each object region.The candidate feature that the present embodiment finally obtains Shanghai is as shown in table 1:
The candidate feature in table 1 Shanghai
The candidate feature in Shenzhen is as shown in table 2:
The candidate feature in table 2 Shenzhen
The candidate feature in Xi'an is as shown in table 3:
The candidate feature in table 1 Xi'an
D, for the identical tlv triple of jumping figure in three object region candidate features, be added by number of times in each tlv triple, the value obtained is as the radix of this jumping, then the 5th radix of jumping is 222,6th radix of jumping is 242,7th jump radix be the 169,8th jump radix be the 200,9th jump radix be 178,10th radix of jumping is 153,11st jump radix be the 169,12nd jump radix be the 130,13rd jump radix be 83; Calculate the number of times of each tlv triple and the ratio of this jumping radix in each object region, the ratio calculated is appeared at the probability on this object area communication path as the intermediate router interface IP address of correspondence, " number of times " in the tlv triple of object region candidate feature is replaced with this probability, obtain a series of new tlv triple be made up of jumping figure, intermediate router interface IP address and probability, be the route characteristic in each object region, the route characteristic that the present embodiment finally obtains Shanghai is as shown in table 4:
The route characteristic in table 4 Shanghai
The route characteristic in Shenzhen is as shown in table 5:
The route characteristic in table 5 Shenzhen
The route characteristic in Xi'an is as shown in table 6:
The route characteristic in table 6 Xi'an
E, traceroute detection packet is sent to Target IP 218.1.117.165 from being positioned at Pekinese's detection source, obtain the communication path between detection source and Target IP 218.1.117.165, the jumping figure in all intermediate router interface IP address on record object IP communication path and this intermediate router distance measurement source, delete front 4 on Target IP communication path and jump intermediate router interface IP address and final jump intermediate router interface IP address, and all intermediate router interface IP on the Target IP communication path after deletion are replaced with C class address corresponding to this IP, IP1.IP2.IP3.* is replaced with by IP1.IP2.IP3.IP4, each of replacing on rear Target IP communication path of statistics jumps jumping figure and the IP address thereof of intermediate router, obtain a series of two tuples be made up of jumping figure, intermediate router interface IP address, be the route characteristic of Target IP 218.1.117.165, in the present embodiment, the route characteristic of Target IP 218.1.117.165 is as shown in table 7:
The route characteristic of table 7 Target IP 218.1.117.165
F, when calculating the similitude between the route characteristic of Target IP 218.1.117.165 and three object zone routing features, select in the route characteristic in each object region respectively, the tlv triple that jumping figure is identical with two tuples in Target IP route characteristic with the intermediate router interface IP address of this jumping, for the route characteristic in each object region, probability in the multiple tlv triple therefrom selected is added, the probability sum obtained is Target IP 218.1.117.165 and drops on probable value in corresponding object region, the object region selecting gained probable value maximum is as the locating area of Target IP.As calculated, the probability that Target IP 218.1.117.165 drops on Shanghai is 0.964, and the probability dropping on Shenzhen is 0.284, and the probability dropping on Xi'an is 0.243, therefore, judges that Target IP 218.1.117.165 is positioned at Shanghai.Through verification, Target IP 218.1.117.165 is really positioned at Shanghai, therefore uses the positioning result of region class Target IP localization method gained of the present invention consistent with the actual position of Target IP.
For further illustrating locating effect of the present invention, choose the Target IP 202.104.150.82 being positioned at Shenzhen, traceroute detection packet is sent from detection source to Target IP 202.104.150.82, obtain the communication path between detection source and Target IP, the route characteristic of Target IP 202.104.150.82 can be obtained according to the processing procedure of above-mentioned steps E, as shown in table 8:
The route characteristic of table 8 Target IP 202.104.150.82
According to the processing procedure of above-mentioned steps F, the route characteristic of calculating Target IP 202.104.150.82 appears at the probability in three object zone routing features, using the positioning result of the region of maximum probability as target, can obtain the probability that Target IP 202.104.150.82 is positioned at Shanghai is 0.513, the probability being positioned at Shenzhen is 0.609, the probability being positioned at Xi'an is 0.533, and therefore judge that this target is positioned at Shenzhen, positioning result is consistent with physical location.
The present invention is by fixing a detection source and multiple possible object region, record from detection source to be positioned at object region multiple terrestrial reference IP by way of one group of intermediate router, be used for mark from same detection source to the route characteristic in each object region, namely utilize the region class terrestrial reference IP of known accurate location to find out one group of route characteristic in this object region.When locating, by the route characteristic of Target IP compared with the route characteristic in object region, and calculating its probability belonging to each object region, the object region of gained maximum probability is the region class positioning result of Target IP, thus can obtain the region at Target IP place.Present invention, avoiding by the time delay of dynamic change between node carry out IP location time high error rate, improve Target IP region class location reliability.
Claims (7)
1., based on a region class Target IP localization method for route characteristic, it is characterized in that, comprise the following steps:
Multiple regions at A, select target IP possibility place, as object region, then enter step B;
B, from terrestrial reference storehouse, select the multiple terrestrial reference IP being positioned at each object region, the node of a selected known geographical locations is as detection source, and obtain from detection source to the communication path of the multiple terrestrial reference IP in each object region, record all intermediate router interface IP address on each bar communication path and the jumping figure in this intermediate router distance measurement source respectively, then enter step C;
C, all intermediate router interface IP address on the every bar communication path of each object region are replaced with C class address corresponding to this IP address, IP1.IP2.IP3.* is replaced with by IP1.IP2.IP3.IP4, for each object region, each one by one after statistics replacement in this object region on every bar communication path jumps intermediate router interface IP address, and intermediate router interface IP address identical on every bar communication path is jumped out existing number of times add up identical, obtain a series of by jumping figure, the tlv triple of intermediate router interface IP address and number of times composition, be the candidate feature in each object region, then step D is entered,
D, for the tlv triple that jumping figure in the candidate feature in each object region is identical, number of times in each tlv triple is added, the value obtained is as the radix of this jumping, calculate the number of times of each tlv triple and the ratio of this jumping radix in each object region, the ratio calculated is appeared at the probability on this object area communication path as the intermediate router interface IP address of correspondence, " number of times " in the tlv triple of object region candidate feature is replaced with this probability, obtain a series of by jumping figure, the new tlv triple of intermediate router interface IP address and probability composition, be the route characteristic in each object region, then step F is entered,
E, obtain the communication path of detection source to Target IP, the jumping figure in all intermediate router interface IP address on record object IP communication path and this intermediate router distance measurement source, all intermediate router interface IP address on Target IP communication path are replaced with C class address corresponding to this IP address, IP1.IP2.IP3.* is replaced with by IP1.IP2.IP3.IP4, each of replacing on rear Target IP communication path of statistics jumps intermediate router interface IP address, obtain a series of by jumping figure, two tuples of intermediate router interface IP address composition, be the route characteristic of Target IP, then step F is entered,
Similitude between the route characteristic of F, calculating Target IP and the route characteristic in each object region, select in the route characteristic in each object region respectively, the tlv triple that jumping figure is identical with two tuples in Target IP route characteristic with the intermediate router interface IP address of this jumping, for the route characteristic in each object region, probability in the multiple tlv triple therefrom selected is added, the probability sum obtained is Target IP and drops on probable value in corresponding object region, and the object region selecting gained probable value maximum is as the locating area of Target IP.
2. as claimed in claim 1 based on the region class Target IP localization method of route characteristic, it is characterized in that: in described step B, when choosing the multiple terrestrial reference IP being positioned at each object region from terrestrial reference storehouse, make selected multiple terrestrial reference IP cover all network segments that in each object region, IP address is corresponding, and ensure that the terrestrial reference IP quantity chosen in each network segment is more than or equal to 10% of IP address sum in this network segment.
3. as claimed in claim 1 based on the region class Target IP localization method of route characteristic, it is characterized in that: in described step C, first comparison detection source is to every bar communication path in each object region, before in each bar communication path m jump intermediate router interface IP address identical time, the front m deleting each bar communication path jumps intermediate router interface IP address and final jump intermediate router interface IP address, intermediate router interface IP address on each bar communication path after deletion is replaced with C class address corresponding to this IP address, IP1.IP2.IP3.* is replaced with by IP1.IP2.IP3.IP4.
4. as claimed in claim 3 based on the region class Target IP localization method of route characteristic, it is characterized in that: in described step e, first the front m deleted on Target IP communication path jumps intermediate router interface IP address and final jump intermediate router interface IP address, intermediate router interface IP address on Target IP communication path after deletion is replaced with C class address corresponding to this IP address, replaces with IP1.IP2.IP3.* by IP1.IP2.IP3.IP4.
5. as claimed in claim 1 based on the region class Target IP localization method of route characteristic, it is characterized in that: in described steps A, utilize the positional information of Whois data base querying Target IP, or in terrestrial reference storehouse, search the landmark locations belonging to the same network segment with Target IP, choose multiple regions at Target IP possibility place as object region.
6. as claimed in claim 1 based on the region class Target IP localization method of route characteristic, it is characterized in that: in described step B, send traceroute detection packet from detection source to the multiple terrestrial reference IP in each object region, obtain the communication path from detection source to the multiple terrestrial reference IP in each object region.
7. as claimed in claim 1 based on the region class Target IP localization method of route characteristic, it is characterized in that: in described step e, send traceroute detection packet from detection source to Target IP, obtain the communication path of detection source to Target IP.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201510545712.6A CN105227688B (en) | 2015-08-31 | 2015-08-31 | A kind of region class Target IP localization method based on route characteristic |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201510545712.6A CN105227688B (en) | 2015-08-31 | 2015-08-31 | A kind of region class Target IP localization method based on route characteristic |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN105227688A true CN105227688A (en) | 2016-01-06 |
| CN105227688B CN105227688B (en) | 2018-06-29 |
Family
ID=54996357
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201510545712.6A Active CN105227688B (en) | 2015-08-31 | 2015-08-31 | A kind of region class Target IP localization method based on route characteristic |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN105227688B (en) |
Cited By (12)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN107277121A (en) * | 2017-06-05 | 2017-10-20 | 中国科学院信息工程研究所 | A kind of network equipment localization method and device |
| CN107508925A (en) * | 2016-06-14 | 2017-12-22 | 阿里巴巴集团控股有限公司 | A kind of method and apparatus for being used to determine the regional information of IP address |
| CN109474712A (en) * | 2018-11-06 | 2019-03-15 | 网宿科技股份有限公司 | IP geographic information determining method, server and storage medium |
| CN110012128A (en) * | 2019-04-12 | 2019-07-12 | 中原工学院 | Network entity terrestrial reference screening technique based on hop count |
| CN110188954A (en) * | 2019-05-31 | 2019-08-30 | 中国人民解放军战略支援部队信息工程大学 | Terrestrial reference reliability estimation method and device based on POP network |
| CN110995885A (en) * | 2019-12-13 | 2020-04-10 | 罗向阳 | IP positioning method based on router error training |
| CN111352825A (en) * | 2018-12-21 | 2020-06-30 | 北京金山云网络技术有限公司 | Data interface test method and device and server |
| CN111526222A (en) * | 2020-04-14 | 2020-08-11 | 中国科学院信息工程研究所 | Network equipment geographical positioning method and device |
| CN112769702A (en) * | 2021-01-06 | 2021-05-07 | 郑州埃文计算机科技有限公司 | Router positioning method based on router alias and datum point geographic features |
| CN113395211A (en) * | 2021-06-08 | 2021-09-14 | 哈尔滨工业大学（威海） | Routing IP positioning optimization method based on clustering idea |
| CN113726659A (en) * | 2021-08-31 | 2021-11-30 | 电子科技大学 | Network anonymous router identification method based on maximum likelihood |
| CN115665237A (en) * | 2022-12-28 | 2023-01-31 | 中国电子信息产业集团有限公司第六研究所 | IP address real-time positioning method and system |
Citations (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101355595A (en) * | 2008-09-17 | 2009-01-28 | 北京搜狗科技发展有限公司 | Method and apparatus for locating physical location of IP address |
| CN102291299A (en) * | 2011-08-08 | 2011-12-21 | 北京酷智科技有限公司 | Internet location positioning method and system based on network routing path |
| CN103259877A (en) * | 2013-04-15 | 2013-08-21 | 北京百度网讯科技有限公司 | IP address geographic position determination method and system |
| CN103973837A (en) * | 2014-05-27 | 2014-08-06 | 北京瑞汛世纪科技有限公司 | Method and device for determining physical location information |
| CN104333616A (en) * | 2014-11-06 | 2015-02-04 | 中国科学院计算机网络信息中心 | Inferring and filling method of IP address base |
-
2015
- 2015-08-31 CN CN201510545712.6A patent/CN105227688B/en active Active
Patent Citations (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101355595A (en) * | 2008-09-17 | 2009-01-28 | 北京搜狗科技发展有限公司 | Method and apparatus for locating physical location of IP address |
| CN102291299A (en) * | 2011-08-08 | 2011-12-21 | 北京酷智科技有限公司 | Internet location positioning method and system based on network routing path |
| CN103259877A (en) * | 2013-04-15 | 2013-08-21 | 北京百度网讯科技有限公司 | IP address geographic position determination method and system |
| CN103973837A (en) * | 2014-05-27 | 2014-08-06 | 北京瑞汛世纪科技有限公司 | Method and device for determining physical location information |
| CN104333616A (en) * | 2014-11-06 | 2015-02-04 | 中国科学院计算机网络信息中心 | Inferring and filling method of IP address base |
Cited By (16)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN107508925A (en) * | 2016-06-14 | 2017-12-22 | 阿里巴巴集团控股有限公司 | A kind of method and apparatus for being used to determine the regional information of IP address |
| CN107277121A (en) * | 2017-06-05 | 2017-10-20 | 中国科学院信息工程研究所 | A kind of network equipment localization method and device |
| CN109474712A (en) * | 2018-11-06 | 2019-03-15 | 网宿科技股份有限公司 | IP geographic information determining method, server and storage medium |
| CN111352825A (en) * | 2018-12-21 | 2020-06-30 | 北京金山云网络技术有限公司 | Data interface test method and device and server |
| CN110012128A (en) * | 2019-04-12 | 2019-07-12 | 中原工学院 | Network entity terrestrial reference screening technique based on hop count |
| CN110188954A (en) * | 2019-05-31 | 2019-08-30 | 中国人民解放军战略支援部队信息工程大学 | Terrestrial reference reliability estimation method and device based on POP network |
| CN110995885B (en) * | 2019-12-13 | 2022-02-22 | 中国人民解放军战略支援部队信息工程大学 | IP positioning method based on router error training |
| CN110995885A (en) * | 2019-12-13 | 2020-04-10 | 罗向阳 | IP positioning method based on router error training |
| CN111526222A (en) * | 2020-04-14 | 2020-08-11 | 中国科学院信息工程研究所 | Network equipment geographical positioning method and device |
| CN111526222B (en) * | 2020-04-14 | 2021-07-27 | 中国科学院信息工程研究所 | Network equipment geographical positioning method and device |
| CN112769702A (en) * | 2021-01-06 | 2021-05-07 | 郑州埃文计算机科技有限公司 | Router positioning method based on router alias and datum point geographic features |
| CN113395211A (en) * | 2021-06-08 | 2021-09-14 | 哈尔滨工业大学（威海） | Routing IP positioning optimization method based on clustering idea |
| CN113726659A (en) * | 2021-08-31 | 2021-11-30 | 电子科技大学 | Network anonymous router identification method based on maximum likelihood |
| CN113726659B (en) * | 2021-08-31 | 2022-04-19 | 电子科技大学 | Network anonymous router identification method based on maximum likelihood |
| CN115665237A (en) * | 2022-12-28 | 2023-01-31 | 中国电子信息产业集团有限公司第六研究所 | IP address real-time positioning method and system |
| CN115665237B (en) * | 2022-12-28 | 2023-03-14 | 中国电子信息产业集团有限公司第六研究所 | IP address real-time positioning method and system |
Also Published As
| Publication number | Publication date |
|---|---|
| CN105227688B (en) | 2018-06-29 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN105227688A (en) | A kind of region class Target IP localization method based on route characteristic | |
| Huffaker et al. | DRoP: DNS-based router positioning | |
| JP6920294B2 (en) | Methods, systems and equipment for locating geographic locations using route tracking | |
| CN110995885B (en) | IP positioning method based on router error training | |
| CN110012120A (en) | A kind of IP City-level location algorithm based on PoP network topology | |
| CN104506591A (en) | Target IP (Internet protocol) geographic position locating method based on nearest common router | |
| Youn et al. | Statistical geolocation of internet hosts | |
| CN103259877A (en) | IP address geographic position determination method and system | |
| CN110474843A (en) | IP localization method based on hop count | |
| Zhao et al. | IP Geolocation based on identification routers and local delay distribution similarity | |
| CN105262849B (en) | IP localization methods based on tolerable error | |
| CN114520799B (en) | Urban IP positioning and error estimation method and system based on minimum circle coverage | |
| CN111064817B (en) | City-level IP positioning method based on node sorting | |
| CN110912756B (en) | IP positioning-oriented network topology boundary routing IP identification algorithm | |
| Zhu et al. | An algorithm of city-level landmark mining based on internet forum | |
| CN110012128A (en) | Network entity terrestrial reference screening technique based on hop count | |
| Chen et al. | A landmark calibration-based IP geolocation approach | |
| CN105245628B (en) | A kind of network entity geographic position locating method suitable for Weak link network | |
| Zhao et al. | City-level geolocation based on routing feature | |
| US11792110B2 (en) | Geolocation system and method | |
| Xiang et al. | No-jump-into-latency in china's internet! toward last-mile hop count based ip geo-localization | |
| CN105812204A (en) | Recursion domain name server online identification method based on connectivity estimation | |
| CN113395211B (en) | Routing IP positioning optimization method based on clustering idea | |
| CN108848203A (en) | A kind of recognition methods and system of China's network boundary | |
| Wong et al. | Geolocalization on the Internet through Constraint Satisfaction. |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| C06 | Publication | ||
| PB01 | Publication | ||
| C10 | Entry into substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant | ||
| TR01 | Transfer of patent right | ||
| TR01 | Transfer of patent right |
Effective date of registration: 20200728 Address after: 450001 No. 62 science Avenue, hi tech Zone, Henan, Zhengzhou Patentee after: Information Engineering University of the Chinese People's Liberation Army Strategic Support Force Address before: 450001 Information Engineering University, 62 science Avenue, hi tech Zone, Henan, Zhengzhou Patentee before: Luo Xiangyang |