CN105227688B - A kind of region class Target IP localization method based on route characteristic - Google Patents
A kind of region class Target IP localization method based on route characteristic Download PDFInfo
- Publication number
- CN105227688B CN105227688B CN201510545712.6A CN201510545712A CN105227688B CN 105227688 B CN105227688 B CN 105227688B CN 201510545712 A CN201510545712 A CN 201510545712A CN 105227688 B CN105227688 B CN 105227688B
- Authority
- CN
- China
- Prior art keywords
- address
- target
- region
- communication path
- intermediate router
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Active
Links
- 230000004807 localization Effects 0.000 title claims abstract description 21
- 238000000034 method Methods 0.000 title claims abstract description 21
- 238000004891 communication Methods 0.000 claims abstract description 80
- 238000001514 detection method Methods 0.000 claims abstract description 55
- 238000005259 measurement Methods 0.000 claims abstract description 14
- 238000012217 deletion Methods 0.000 claims description 8
- 230000037430 deletion Effects 0.000 claims description 8
- 238000005516 engineering process Methods 0.000 description 4
- 238000012545 processing Methods 0.000 description 2
- 238000010586 diagram Methods 0.000 description 1
- 238000012360 testing method Methods 0.000 description 1
- 238000012795 verification Methods 0.000 description 1
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L61/00—Network arrangements, protocols or services for addressing or naming
- H04L61/09—Mapping addresses
- H04L61/25—Mapping addresses of the same type
- H04L61/2503—Translation of Internet protocol [IP] addresses
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L67/00—Network arrangements or protocols for supporting network services or applications
- H04L67/50—Network services
- H04L67/52—Network services specially adapted for the location of the user terminal
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L2101/00—Indexing scheme associated with group H04L61/00
- H04L2101/60—Types of network addresses
- H04L2101/69—Types of network addresses using geographic information, e.g. room number
Landscapes
- Engineering & Computer Science (AREA)
- Computer Networks & Wireless Communication (AREA)
- Signal Processing (AREA)
- Data Exchanges In Wide-Area Networks (AREA)
Abstract
The invention discloses a kind of region class Target IP localization methods based on route characteristic, include the following steps：A, selection target IP may where multiple regions region as a purpose；B, multiple terrestrial reference IP in each destination region are selected, obtain the communication path of multiple terrestrial reference IP out of from detection source to each destination region；C, according to all intermediate router interface IP address and the hop count in the intermediate router distance measurement source on each communication path, the candidate feature of each destination region is calculated；D, according to obtained candidate feature, the route characteristic of each destination region is calculated；E, detection source is obtained to the communication path of Target IP, calculates the route characteristic of Target IP；F, the similitude between the route characteristic of Target IP and each destination region route characteristic, the localization region of selection target IP are calculated.The invention avoids the high error rates that the time delay by dynamic change between node carries out IP positioning, improve the reliability of Target IP region class positioning.
Description
Technical field
The present invention relates to field of information security technology more particularly to a kind of region class Target IP positioning based on route characteristic
Method.
Background technology
IP positioning refers to determine position of the corresponding network entity of IP address in geographical space.With based on position
Service (abbreviation LBS) it is more and more extensive, the application of IP location technologies is also more and more, embedded for visitor such as in webpage
The advertisement of region；Web displaying language is adjusted according to geographical location；The access log of web page is analyzed to extract city's number of fields
According to；Define electronic tax revenue territorial scope；It was found that such as network fraud and attack illegal act, carry out network forensics etc..Thus may be used
See, IP location technologies all have very wide application prospect in commercial market, network security and cloud service.
Usually, region class positioning is the basis of high-precision IP positioning, i.e., in the region that Target IP is determined such as
After province or city, just it is expected to estimate a more accurate positioning result, some the most probable position such as determined by longitude and latitude for it
It puts.However in actual location, the region where Target IP is also unknown in many cases, and the time delay between the node with away from
When weaker from correlation, it is not always able to effectively be positioned come the method for calculating distance restraint for Target IP according to time delay
Region.
Invention content
The purpose of the present invention is to provide a kind of region class Target IP localization methods based on route characteristic, can be to place
The Target IP of Location-Unknown carries out reliable accurately region class positioning, and avoiding can not be had when carrying out IP positioning according to time delay
Imitate the situation of positioning result.
To achieve the above object, the technical solution adopted by the present invention is：
A kind of region class Target IP localization method based on route characteristic, includes the following steps：
A, selection target IP may where multiple regions region as a purpose, subsequently into step B；
B, multiple terrestrial reference IP in each destination region are selected from terrestrial reference storehouse, a selected known geographical locations
Node obtains the communication path of multiple terrestrial reference IP out of from detection source to each destination region as detection source, records respectively
The hop count of all intermediate router interface IP address and the intermediate router distance measurement source on each communication path, Ran Houjin
Enter step C；
C, by all intermediate router interface IP address on each every communication path in destination region with replacing with the IP
The corresponding C classes address in location, i.e., replace with IP1.IP2.IP3.* by IP1.IP2.IP3.IP4, for each destination region, one by one
Each jump intermediate router interface IP address after statistics is replaced in the destination region on every communication path, and every is communicated
Identical intermediate router interface IP address jumps out existing number and adds up identical on path, obtains a series of by hop count, centre
The triple of router interface IP address and number composition, the candidate feature of as each destination region, subsequently into step D；
D, for the identical triple of hop count in the candidate feature of each destination region, by the number phase in each triple
Add, radix of the obtained value as the jump, calculate the ratio of the number of each triple and the jump radix in each destination region,
It is appeared in using the ratio being calculated as corresponding intermediate router interface IP address general on the destination region communication path
Rate is replaced " number " in the triple of destination region candidate feature with this probability, is obtained a series of by hop count, intermediate router
The new triple of interface IP address and probability composition, the route characteristic of as each destination region, subsequently into step F；
E, detection source is obtained to the communication path of Target IP, and all intermediate routers recorded on Target IP communication path connect
Mouth IP address and the hop count in the intermediate router distance measurement source, by all intermediate router interfaces on Target IP communication path
IP address replaces with the corresponding C classes address of the IP address, i.e., IP1.IP2.IP3.IP4 is replaced with IP1.IP2.IP3.*, statistics
Each jump intermediate router interface IP address after replacement on Target IP communication path obtains a series of by hop count, intermediate routing
The route characteristic of two tuples, as Target IP of device interface IP address composition, subsequently into step F；
F, the similitude between the route characteristic of Target IP and the route characteristic of each destination region is calculated, is selected respectively each
In the route characteristic of a destination region, intermediate router interface IP address and two in Target IP route characteristic of hop count and the jump
The identical triple of tuple, for the route characteristic of each destination region, by the probability phase in the multiple triples therefrom selected
Add, the sum of obtained probability is that Target IP falls the probability value in corresponding destination region, the mesh of selection gained probability value maximum
Localization region of the region as Target IP.
In the step B, when the multiple terrestrial reference IP being located in each destination region are chosen from terrestrial reference storehouse, make selected
Multiple terrestrial reference IP cover the corresponding all network segments of IP address in each destination region, and ensure the terrestrial reference IP chosen in each network segment
Quantity is more than or equal to 10% of IP address sum in the network segment.
In the step C, every communication path in comparison detection source to each destination region first, when each communication lines
When preceding m jump intermediate router interface IP address in diameter is identical, the preceding m for deleting each communication path jumps intermediate router interface IP
Address and final jump intermediate router interface IP address, by the intermediate router interface IP on each communication path after deletion
Address replaces with the corresponding C classes address of the IP address, i.e., IP1.IP2.IP3.IP4 is replaced with IP1.IP2.IP3.*.
In the step E, preceding m first on delete target IP communication paths jumps intermediate router interface IP address and most
Latter jump intermediate router interface IP address, the intermediate router interface IP address on the Target IP communication path after deletion is replaced
The corresponding C classes address of the IP address is changed to, i.e., IP1.IP2.IP3.IP4 is replaced with into IP1.IP2.IP3.*.
In the step A, search using the location information of Whois data base querying Target IPs or in terrestrial reference storehouse with
Target IP belongs to the landmark locations of the same network segment, choose Target IP may where multiple regions region as a purpose.
In the step B, traceroute detections are sent from multiple terrestrial reference IPs of the detection source into each destination region
Packet obtains the communication path of multiple terrestrial reference IP out of from detection source to each destination region.
In the step E, traceroute detection packets are sent from detection source to Target IP, obtain detection source to Target IP
Communication path.
The present invention obtains purpose by fixing a detection source and multiple destination regions, using known region class terrestrial reference IP
The route characteristic in region, in the communication path information progress to the corresponding communication path information in different destination regions and Target IP
On the basis of analysis, respectively each destination region and Target IP calculate one group of route characteristic, and by the route characteristic of Target IP
It is compared with the route characteristic of multiple destination regions, calculates the probability that Target IP falls into the destination region, gained maximum probability
Destination region be Target IP region class positioning result, avoid by between node dynamic change time delay carry out IP positioning
When high error rate, improve Target IP region class positioning reliability.
Description of the drawings
Fig. 1 is the flow diagram of the present invention.
Specific embodiment
For a determining detection source and destination region, route characteristic refers to from detection source in the destination region
Target IP by way of one group of intermediate router, by a large amount of path detections test find, same detection source to same purpose
The route characteristic in region is more similar, and the route characteristic of same detection source to different destination regions differs greatly, therefore foundation
The region class localization method that the route characteristic of different destination regions carries out Target IP has reliability and accuracy.
As shown in Figure 1, a kind of region class Target IP localization method based on route characteristic of the present invention, including following
Step：
A, selection target IP may where multiple regions region as a purpose, subsequently into step B.Wherein, it is available
The location information of Whois data base querying Target IPs searches the ground mark for belonging to the same network segment with Target IP in terrestrial reference storehouse
Put, and accordingly selection target IP may where multiple regions region as a purpose.
B, multiple terrestrial reference IP in each destination region are selected from terrestrial reference storehouse, a selected known geographical locations
Node obtains the communication path of multiple terrestrial reference IP out of from detection source to each destination region as detection source, records respectively
The hop count of all intermediate router interface IP address and the intermediate router distance measurement source on each communication path, Ran Houjin
Enter step C.Wherein, the terrestrial reference IP quantity selected in each destination region is more, and coverage area is wider, finally obtains Target IP
Positioning result it is more accurate, therefore to cover IP address in each destination region corresponding all by multiple terrestrial reference IP selected by the present invention
The network segment, and ensure that the terrestrial reference IP quantity chosen in each network segment is more than or equal to 10% of IP address sum in the network segment.The present invention
In the communication path for obtaining multiple terrestrial reference IP out of from detection source to each destination region, sent out using from detection source to Target IP
Send the traceroute modes of detection packet.Wherein, if there is N number of intermediate router on a communication path, N takes positive integer, then from
Detection source set out by the hop count in first intermediate router distance measurement source be denoted as 1, from detection source by second
The hop count in a intermediate router distance measurement source is denoted as 2, and so on, from detection source by n-th intermediate router
The hop count in distance measurement source is denoted as n.
C, by all intermediate router interface IP address on each every communication path in destination region with replacing with the IP
The corresponding C classes address in location, i.e., replace with IP1.IP2.IP3.* by IP1.IP2.IP3.IP4, for each destination region, one by one
Each jump intermediate router interface IP address after statistics is replaced in the destination region on every communication path, and every is communicated
Identical intermediate router interface IP address jumps out existing number and adds up identical on path, obtains a series of by hop count, centre
The triple of router interface IP address and number composition, the candidate feature of as each destination region, subsequently into step D.
In order to simplify calculating process, location efficiency is improved, in present invention comparison detection source to each destination region first
The communication path of multiple terrestrial reference IP, when in each communication path preceding m jump intermediate router interface IP address it is identical when, mutually it
Between without relative value, therefore the preceding m for deleting each communication path jumps intermediate router interface IP address, and due to each communication lines
Final jump intermediate router interface IP address on diameter is the terrestrial reference IP in selected each destination region, also without than
Compared with value, therefore the final jump intermediate router interface IP address on each communication path can also be deleted.Due to class c network
In multiple IP address be commonly assigned to same region, therefore the region class of Target IP is positioned, can will be after deletion
Each communication path on all intermediate router interface IP address replace with the corresponding C classes address of the IP address.
D, for the identical triple of hop count in the candidate feature of each destination region, by the number phase in each triple
Add, radix of the obtained value as the jump, calculate the ratio of the number of each triple and the jump radix in each destination region,
It is appeared in using the ratio being calculated as corresponding intermediate router interface IP address general on the destination region communication path
Rate is replaced " number " in the triple of destination region candidate feature with this probability, is obtained a series of by hop count, intermediate router
The new triple of interface IP address and probability composition, the route characteristic of as each destination region, subsequently into step F；
E, detection source is obtained to the communication path of Target IP, and all intermediate routers recorded on Target IP communication path connect
Mouth IP address and the hop count in the intermediate router distance measurement source, by all intermediate router interfaces on Target IP communication path
IP address replaces with the corresponding C classes address of the IP address, i.e., IP1.IP2.IP3.IP4 is replaced with IP1.IP2.IP3.*, statistics
Each jump intermediate router interface IP address after replacement on Target IP communication path obtains a series of by hop count, intermediate routing
The route characteristic of two tuples, as Target IP of device interface IP address composition, subsequently into step F.The present invention is being obtained from spy
Survey source to Target IP communication path when, using from detection source to Target IP send traceroute detection packet by the way of.
The preceding m that the present invention is deleted in step C in detection source to each destination region communication path jumps intermediate router
Interface IP address and final jump intermediate router interface IP address, therefore can also delete in detection source to Target IP communication path
Preceding m jump intermediate router interface IP address and final jump intermediate router interface IP address, m values herein in step C
M values it is identical, all intermediate router interface IP address on the Target IP communication path after deletion are then replaced with into the IP
The corresponding C classes address in address.
F, the similitude between the route characteristic of Target IP and the route characteristic of each destination region is calculated, statistics is each respectively
In the route characteristic of a destination region, intermediate router interface IP address and two in Target IP route characteristic of hop count and the jump
The identical triple of tuple, for the route characteristic of each destination region, by the probability phase in the multiple triples therefrom selected
Add, the sum of obtained probability is that Target IP falls the probability value in corresponding destination region, the mesh of selection gained probability value maximum
Localization region of the region as Target IP.
Illustrate the region class Target IP localization method of the present invention based on route characteristic with reference to specific embodiment,
Include the following steps：
A, using the location information of Whois data base querying Target IPs 218.1.117.165, selected after analysis Shanghai,
Shenzhen and Xi'an are as its destination region where possible, subsequently into step B.
B, multiple terrestrial reference IP in Shanghai, Shenzhen and three, Xi'an destination region are selected respectively from terrestrial reference storehouse,
The middle terrestrial reference IP sums chosen positioned at Shanghai are 115, and the terrestrial reference IP sums positioned at Shenzhen are 72, the terrestrial reference IP sums positioned at Xi'an
It is 60.It chooses and is located at the node of Pekinese one as detection source, from all terrestrial reference IPs hair of the detection source into three destination regions
Traceroute detection packets are sent, wherein the communication path sum for reaching Shanghai is 28, the communication path sum for reaching Shenzhen is 36,
The communication path sum for reaching Xi'an is 56, records connecing for the intermediate router in each destination region on each communication path
Mouth IP address and the hop count in the intermediate router distance measurement source.Wherein, from detection source by first intermediate route
The hop count in device distance measurement source is denoted as 1, from detection source by second intermediate router distance measurement source hop count remember
Be 2, and so on, until be recorded from detection source by the last one intermediate router.
C, through comparing, reach Beijing, Shanghai, three, Xi'an destination region all communication paths go forward to route among 4 jumps
Device interface IP address all same does not have relative value, therefore deletes on three all communication paths in destination region between each other
Preceding 4 jump intermediate router interface IP address, and due to the intermediate router interface IP of final jump on each communication path
Location is the terrestrial reference IP chosen, therefore can also delete the final jump intermediate router interface IP address on each communication path, most
Retain the 5th intermediate router interface IP address and its relevant information for skipping to the 13rd jump eventually.
Since multiple IP address in class c network are commonly assigned to same region, for the region class of Target IP
All intermediate router interface IP address on each communication path can be replaced with the corresponding C classes address of the IP address by positioning.
Accordingly, Shanghai, Shenzhen, three, Xi'an destination region the 5th are skipped in the 13rd jump on each article of communication path after deletion
Between router interface IP address, replace with the corresponding C classes address of the IP address, i.e., replace with IP1.IP2.IP3.IP4
IP1.IP2.IP3.*, then for each destination region, after statistics is replaced one by one in the destination region on every communication path
Each jump intermediate router interface IP address, and by intermediate router interface IP address identical on every communication path identical
It jumps out existing number to add up, obtains a series of triples being made of hop count, intermediate router interface IP address and number, as
The candidate feature of each destination region.The candidate feature that the present embodiment finally obtains Shanghai is as shown in table 1：
The candidate feature in 1 Shanghai of table
The candidate feature in Shenzhen is as shown in table 2：
The candidate feature in 2 Shenzhen of table
The candidate feature in Xi'an is as shown in table 3：
The candidate feature in 1 Xi'an of table
D, for the identical triple of hop count in three destination region candidate features, the number in each triple is added,
Radix of the obtained value as the jump, then it is 169 that the 5th radix jumped, which is the radix that the 222, the 6th radix jumped is the 242, the 7th jump,
8th radix jumped is that the radix that the radix that the 200, the 9th radix jumped is the 178, the 10th jump is the 153, the 11st jump is the 169, the 12nd jump
Radix be the 130, the 13rd jump radix be 83；Calculate the ratio of the number of each triple and the jump radix in each destination region
Value, appears in the ratio being calculated as corresponding intermediate router interface IP address on the destination region communication path
Probability replaces " number " in the triple of destination region candidate feature with this probability, obtains a series of by hop count, intermediate routing
The new triple of device interface IP address and probability composition, the route characteristic of as each destination region, the present embodiment finally obtain
The route characteristic in Shanghai is as shown in table 4：
The route characteristic in 4 Shanghai of table
The route characteristic in Shenzhen is as shown in table 5：
The route characteristic in 5 Shenzhen of table
The route characteristic in Xi'an is as shown in table 6：
The route characteristic in 6 Xi'an of table
E, traceroute detection packets are sent to Target IP 218.1.117.165 from positioned at Pekinese's detection source, is visited
Communication path between survey source and Target IP 218.1.117.165, all intermediate routers recorded on Target IP communication path connect
Mouthful IP address and the hop count in the intermediate router distance measurement source, preceding 4 on delete target IP communication paths jump intermediate router
Interface IP address and final jump intermediate router interface IP address, and by all centres on the Target IP communication path after deletion
Router interface IP replaces with the corresponding C classes addresses of the IP, i.e., IP1.IP2.IP3.IP4 is replaced with IP1.IP2.IP3.*；System
The hop count and its IP address of each jump intermediate router on Target IP communication path after meter is replaced, obtain it is a series of by hop count,
The route characteristic of two tuples, as Target IP 218.1.117.165 of intermediate router interface IP address composition, the present embodiment
The route characteristic of middle Target IP 218.1.117.165 is as shown in table 7：
The route characteristic of 7 Target IP 218.1.117.165 of table
F, it calculates similar between the route characteristic of Target IP 218.1.117.165 and three destination region route characteristics
During property, in the route characteristic for selecting each destination region respectively, the intermediate router interface IP address and target of hop count and the jump
The identical triple of two tuples in IP route characteristics, it is multiple by what is therefrom selected for the route characteristic of each destination region
Probability in triple is added, and the sum of obtained probability is that Target IP 218.1.117.165 is fallen in corresponding destination region
Probability value selects localization region of the destination region of gained probability value maximum as Target IP.It is computed, Target IP
218.1.117.165 the probability fallen in Shanghai is 0.964, and the probability fallen in Shenzhen is 0.284, and falling the probability in Xi'an is
0.243, therefore, judge that Target IP 218.1.117.165 is located at Shanghai.Through verification, Target IP 218.1.117.165 is really located at
Shanghai, therefore use the positioning result obtained by region class Target IP localization method of the present invention and the practical position one of Target IP
It causes.
For the locating effect further illustrated the present invention, the Target IP 202.104.150.82 positioned at Shenzhen is chosen, from spy
Survey source sends traceroute detection packets to Target IP 202.104.150.82, obtains the communication lines between detection source and Target IP
Diameter can obtain the route characteristic of Target IP 202.104.150.82, as shown in table 8 according to the processing procedure of above-mentioned steps E：
The route characteristic of 8 Target IP 202.104.150.82 of table
According to the processing procedure of above-mentioned steps F, the route characteristic for calculating Target IP 202.104.150.82 appears in three
Probability in the route characteristic of destination region using the region of maximum probability as the positioning result of target, can obtain Target IP
202.104.150.82 it is 0.513 positioned at the probability in Shanghai, the probability positioned at Shenzhen is 0.609, and the probability positioned at Xi'an is
0.533, therefore judge that the target is located at Shenzhen, positioning result is consistent with physical location.
The present invention is recorded by fixing a detection source and multiple possible destination regions from detection source to positioned at purpose area
Multiple terrestrial reference IP in domain by way of one group of intermediate router, for identifying the road from same detection source to each destination region
Diameter feature finds out one group of route characteristic of the destination region using the region class terrestrial reference IP of known accurate location.In positioning,
The route characteristic of Target IP with the route characteristic of destination region is compared, and calculates it and belongs to the probability of each destination region, institute
The destination region for obtaining maximum probability is the region class positioning result of Target IP, so as to can obtain the region where Target IP.This
Invention avoids high error rate when IP positioning is carried out by the time delay of dynamic change between node, improves Target IP region class and determines
The reliability of position.
Claims (7)
1. a kind of region class Target IP localization method based on route characteristic, which is characterized in that include the following steps：
A, selection target IP may where multiple regions region as a purpose, subsequently into step B；
B, multiple terrestrial reference IP in each destination region are selected from terrestrial reference storehouse, select the node of a known geographical locations
As detection source, and the communication path of multiple terrestrial reference IP out of from detection source to each destination region is obtained, record each item respectively
The hop count of all intermediate router interface IP address and the intermediate router distance measurement source on communication path, subsequently into step
Rapid C；
C, all intermediate router interface IP address on each every communication path in destination region are replaced with into the IP address pair
The C classes address answered, i.e., replace with IP1.IP2.IP3.* by IP1.IP2.IP3.IP4, for each destination region, count one by one
Each jump intermediate router interface IP address after replacement in the destination region on every communication path, and by every communication path
Upper identical intermediate router interface IP address jumps out existing number and adds up identical, obtain it is a series of by hop count, intermediate route
The triple of device interface IP address and number composition, the candidate feature of as each destination region, subsequently into step D；
D, for the identical triple of hop count in the candidate feature of each destination region, the number in each triple is added, is obtained
Radix of the value arrived as the jump calculates the ratio of the number of each triple and the jump radix in each destination region, will count
Obtained ratio appears in the probability on the destination region communication path as corresponding intermediate router interface IP address, uses
This probability replaces the number in the triple of destination region candidate feature, obtains a series of by hop count, intermediate router interface IP
Address and the new triple of probability composition, the route characteristic of as each destination region, subsequently into step F；
E, detection source is obtained to the communication path of Target IP, records all intermediate router interface IP on Target IP communication path
Address and the hop count in the intermediate router distance measurement source, by all intermediate router interface IP on Target IP communication path
Location replaces with the corresponding C classes address of the IP address, i.e., IP1.IP2.IP3.IP4 is replaced with IP1.IP2.IP3.*, and statistics is replaced
Each jump intermediate router interface IP address on Target IP communication path afterwards obtains a series of being connect by hop count, intermediate router
The route characteristic of two tuples, as Target IP of mouth IP address composition, subsequently into step F；
F, the similitude between the route characteristic of Target IP and the route characteristic of each destination region is calculated, selects each mesh respectively
Region route characteristic in, the intermediate router interface IP address of hop count and the jump and two tuples in Target IP route characteristic
Identical triple for the route characteristic of each destination region, the probability in the multiple triples therefrom selected is added, is obtained
To the sum of probability be that Target IP falls the probability value in corresponding destination region, the destination region of selection gained probability value maximum
Localization region as Target IP.
2. the region class Target IP localization method based on route characteristic as described in claim 1, it is characterised in that：The step
In rapid B, when choosing the multiple terrestrial reference IP being located in each destination region from terrestrial reference storehouse, cover selected multiple terrestrial reference IP each
The corresponding all network segments of IP address in a destination region, and ensure that the terrestrial reference IP quantity chosen in each network segment is more than or equal to the net
The 10% of IP address sum in section.
3. the region class Target IP localization method based on route characteristic as described in claim 1, it is characterised in that：The step
In rapid C, every communication path in comparison detection source to each destination region first, when the preceding m in each communication path jumps centre
When router interface IP address is identical, the preceding m for deleting each communication path jumps intermediate router interface IP address and final jump
Intermediate router interface IP address on each communication path after deletion is replaced with the IP by intermediate router interface IP address
The corresponding C classes address in address, i.e., replace with IP1.IP2.IP3.* by IP1.IP2.IP3.IP4.
4. the region class Target IP localization method based on route characteristic as claimed in claim 3, it is characterised in that：The step
In rapid E, the preceding m first on delete target IP communication paths jumps intermediate router interface IP address and final jump intermediate router
Intermediate router interface IP address on Target IP communication path after deletion is replaced with the IP address and corresponded to by interface IP address
C classes address, i.e., IP1.IP2.IP3.IP4 is replaced with into IP1.IP2.IP3.*.
5. the region class Target IP localization method based on route characteristic as described in claim 1, it is characterised in that：The step
In rapid A, search using the location information of Whois data base querying Target IPs or in terrestrial reference storehouse and belong to same net with Target IP
The landmark locations of section, choose Target IP may where multiple regions region as a purpose.
6. the region class Target IP localization method based on route characteristic as described in claim 1, it is characterised in that：The step
In rapid B, traceroute detection packets are sent from multiple terrestrial reference IPs of the detection source into each destination region, obtain from detection source to
The communication path of multiple terrestrial reference IP in each destination region.
7. the region class Target IP localization method based on route characteristic as described in claim 1, it is characterised in that：The step
In rapid E, traceroute detection packets are sent from detection source to Target IP, obtain detection source to the communication path of Target IP.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201510545712.6A CN105227688B (en) | 2015-08-31 | 2015-08-31 | A kind of region class Target IP localization method based on route characteristic |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201510545712.6A CN105227688B (en) | 2015-08-31 | 2015-08-31 | A kind of region class Target IP localization method based on route characteristic |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN105227688A CN105227688A (en) | 2016-01-06 |
| CN105227688B true CN105227688B (en) | 2018-06-29 |
Family
ID=54996357
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201510545712.6A Active CN105227688B (en) | 2015-08-31 | 2015-08-31 | A kind of region class Target IP localization method based on route characteristic |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN105227688B (en) |
Families Citing this family (12)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN107508925A (en) * | 2016-06-14 | 2017-12-22 | 阿里巴巴集团控股有限公司 | A kind of method and apparatus for being used to determine the regional information of IP address |
| CN107277121B (en) * | 2017-06-05 | 2019-11-29 | 中国科学院信息工程研究所 | A kind of network equipment localization method and device |
| CN109474712B (en) * | 2018-11-06 | 2022-05-13 | 网宿科技股份有限公司 | IP geographic information determining method, server and storage medium |
| CN111352825B (en) * | 2018-12-21 | 2023-06-02 | 北京金山云网络技术有限公司 | Data interface testing method and device and server |
| CN110012128A (en) * | 2019-04-12 | 2019-07-12 | 中原工学院 | Network entity terrestrial reference screening technique based on hop count |
| CN110188954A (en) * | 2019-05-31 | 2019-08-30 | 中国人民解放军战略支援部队信息工程大学 | Terrestrial reference reliability estimation method and device based on POP network |
| CN110995885B (en) * | 2019-12-13 | 2022-02-22 | 中国人民解放军战略支援部队信息工程大学 | IP positioning method based on router error training |
| CN111526222B (en) * | 2020-04-14 | 2021-07-27 | 中国科学院信息工程研究所 | Network equipment geographical positioning method and device |
| CN112769702B (en) * | 2021-01-06 | 2023-07-21 | 郑州埃文计算机科技有限公司 | Router positioning method based on router alias and reference point geographic features |
| CN113395211B (en) * | 2021-06-08 | 2022-11-18 | 哈尔滨工业大学（威海） | Routing IP positioning optimization method based on clustering idea |
| CN113726659B (en) * | 2021-08-31 | 2022-04-19 | 电子科技大学 | Network anonymous router identification method based on maximum likelihood |
| CN115665237B (en) * | 2022-12-28 | 2023-03-14 | 中国电子信息产业集团有限公司第六研究所 | IP address real-time positioning method and system |
Citations (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101355595A (en) * | 2008-09-17 | 2009-01-28 | 北京搜狗科技发展有限公司 | Method and apparatus for locating physical location of IP address |
| CN102291299A (en) * | 2011-08-08 | 2011-12-21 | 北京酷智科技有限公司 | Internet location positioning method and system based on network routing path |
| CN103259877A (en) * | 2013-04-15 | 2013-08-21 | 北京百度网讯科技有限公司 | IP address geographic position determination method and system |
| CN103973837A (en) * | 2014-05-27 | 2014-08-06 | 北京瑞汛世纪科技有限公司 | Method and device for determining physical location information |
| CN104333616A (en) * | 2014-11-06 | 2015-02-04 | 中国科学院计算机网络信息中心 | Inferring and filling method of IP address base |
-
2015
- 2015-08-31 CN CN201510545712.6A patent/CN105227688B/en active Active
Patent Citations (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101355595A (en) * | 2008-09-17 | 2009-01-28 | 北京搜狗科技发展有限公司 | Method and apparatus for locating physical location of IP address |
| CN102291299A (en) * | 2011-08-08 | 2011-12-21 | 北京酷智科技有限公司 | Internet location positioning method and system based on network routing path |
| CN103259877A (en) * | 2013-04-15 | 2013-08-21 | 北京百度网讯科技有限公司 | IP address geographic position determination method and system |
| CN103973837A (en) * | 2014-05-27 | 2014-08-06 | 北京瑞汛世纪科技有限公司 | Method and device for determining physical location information |
| CN104333616A (en) * | 2014-11-06 | 2015-02-04 | 中国科学院计算机网络信息中心 | Inferring and filling method of IP address base |
Also Published As
| Publication number | Publication date |
|---|---|
| CN105227688A (en) | 2016-01-06 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN105227688B (en) | A kind of region class Target IP localization method based on route characteristic | |
| Huffaker et al. | DRoP: DNS-based router positioning | |
| CN103259877B (en) | The geographic position determination method and system of IP address | |
| Scheitle et al. | HLOC: Hints-based geolocation leveraging multiple measurement frameworks | |
| CN110012120A (en) | A kind of IP City-level location algorithm based on PoP network topology | |
| Komosny et al. | Location accuracy of commercial IP address geolocation databases | |
| CN110995885B (en) | IP positioning method based on router error training | |
| Du et al. | RIPE IPmap active geolocation: Mechanism and performance evaluation | |
| CN111064817B (en) | City-level IP positioning method based on node sorting | |
| CN110912756B (en) | IP positioning-oriented network topology boundary routing IP identification algorithm | |
| CN114520799A (en) | Urban IP positioning and error estimation method and system based on minimum circle coverage | |
| CN110012128A (en) | Network entity terrestrial reference screening technique based on hop count | |
| CN104715012A (en) | Network entity city-level landmark mining algorithm based on Internet forum | |
| CN105245628B (en) | A kind of network entity geographic position locating method suitable for Weak link network | |
| US11792110B2 (en) | Geolocation system and method | |
| Xiang et al. | No-jump-into-latency in china's internet! toward last-mile hop count based ip geo-localization | |
| Li et al. | A complete evaluation of the Chinese IP geolocation databases | |
| CN108848203A (en) | A kind of recognition methods and system of China's network boundary | |
| CN110188954A (en) | Terrestrial reference reliability estimation method and device based on POP network | |
| CN113395211B (en) | Routing IP positioning optimization method based on clustering idea | |
| CN105812204A (en) | Recursion domain name server online identification method based on connectivity estimation | |
| Hillmann et al. | Dragoon: advanced modelling of IP geolocation by use of latency measurements | |
| CN109639510A (en) | A kind of region PoP division methods based on subnets analysis | |
| Ding et al. | A Street‐Level IP Geolocation Method Based on Delay‐Distance Correlation and Multilayered Common Routers | |
| Candela et al. | Dissecting the speed-of-internet of Middle East |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| C06 | Publication | ||
| PB01 | Publication | ||
| C10 | Entry into substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant | ||
| TR01 | Transfer of patent right | ||
| TR01 | Transfer of patent right |
Effective date of registration: 20200728 Address after: 450001 No. 62 science Avenue, hi tech Zone, Henan, Zhengzhou Patentee after: Information Engineering University of the Chinese People's Liberation Army Strategic Support Force Address before: 450001 Information Engineering University, 62 science Avenue, hi tech Zone, Henan, Zhengzhou Patentee before: Luo Xiangyang |