CN107743155B - IP labeling method, device, electronic equipment and storage medium - Google Patents
IP labeling method, device, electronic equipment and storage medium Download PDFInfo
- Publication number
- CN107743155B CN107743155B CN201711104245.9A CN201711104245A CN107743155B CN 107743155 B CN107743155 B CN 107743155B CN 201711104245 A CN201711104245 A CN 201711104245A CN 107743155 B CN107743155 B CN 107743155B
- Authority
- CN
- China
- Prior art keywords
- information
- target
- equipment
- description
- port
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Active
Links
Images
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L2101/00—Indexing scheme associated with group H04L61/00
- H04L2101/60—Types of network addresses
- H04L2101/69—Types of network addresses using geographic information, e.g. room number
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L2101/00—Indexing scheme associated with group H04L61/00
- H04L2101/60—Types of network addresses
Landscapes
- Engineering & Computer Science (AREA)
- Computer Networks & Wireless Communication (AREA)
- Signal Processing (AREA)
- Information Transfer Between Computers (AREA)
Abstract
The invention provides an IP labeling method, an IP labeling device, electronic equipment and a storage medium, and relates to the technical field of computers. The IP labeling method comprises the following steps: acquiring port scanning information of a target IP, wherein the port scanning information at least comprises port description information; acquiring device information of target equipment corresponding to the target IP, wherein the device information at least comprises geographical position information of the target equipment and target equipment product information corresponding to the target equipment; and establishing a corresponding relation between the target IP and the equipment information and the port description information. The IP labeling method, the device, the electronic equipment and the storage medium can realize high-dimensional labeling on the IP, so that the IP information is more comprehensive, and the value and the reliability of the IP information in situation awareness application are improved.
Description
Technical Field
The invention relates to the technical field of computers, in particular to an IP labeling method, an IP labeling device, electronic equipment and a storage medium.
Background
The basis for realizing internet situation awareness is to identify the host survivability, port openness, services provided by the ports, port components and other information of all hosts to which the IPs belong in the whole internet. However, the method only realizes the situation perception of the host to which the IP belongs at two lower levels of physics and running software by identifying the openness, the server and the components of the port. Namely, the dimension of the related information of the currently obtained IP is low, and the method is not convenient for application in situation awareness.
Disclosure of Invention
In view of this, embodiments of the present invention provide an IP tagging method, an IP tagging apparatus, an electronic device, and a storage medium, so as to solve the problem that the obtained IP related information has a low dimension and is inconvenient to apply in situational awareness.
In order to achieve the purpose, the technical scheme adopted by the invention is as follows:
in a first aspect, an embodiment of the present invention provides an IP labeling method, where the method includes: acquiring port scanning information of a target IP, wherein the port scanning information at least comprises port description information; acquiring device information of target equipment corresponding to the target IP, wherein the device information at least comprises geographical position information of the target equipment and target equipment product information corresponding to the target equipment; and establishing a corresponding relation between the target IP and the equipment information and the port description information.
As an optional implementation, in the IP labeling method, the port scanning information includes a description field of the target device, and the acquiring device information corresponding to the target IP includes: acquiring the geographical location information of the target equipment based on the address field of the target IP; and acquiring the target equipment product information matched with the description field in a first preset database.
As an optional implementation, in the IP labeling method, the obtaining of the target device product information in the first preset database, where the first preset database includes a preset description word and a description item corresponding to the preset description word, includes: acquiring a target descriptor matched with a preset descriptor in the first preset database in the description field; obtaining a description item corresponding to a preset descriptor matched with the target descriptor in the first preset database, wherein the description item is used as a description item of the target descriptor; and associating the target description words with the description items corresponding to the target description words to obtain the target equipment product information.
As an optional implementation, in the IP labeling method, after the corresponding relationship between the target IP and the device information and the port description information is established, the method further includes: acquiring an information query request for the target IP input by a user; and responding to the information inquiry request, and displaying the equipment information and the port description information of the target IP so as to enable a user to determine the importance of the equipment corresponding to the target IP based on the equipment information and the port description information of the target IP.
In a second aspect, an embodiment of the present invention provides an IP labeling apparatus, where the apparatus includes a first information obtaining module, a second information obtaining module, and a first storage executing module, where the first information obtaining module is configured to obtain port scanning information of a target IP, where the port scanning information at least includes port description information; the second information acquisition module is used for acquiring equipment information corresponding to the target IP, wherein the equipment information at least comprises geographical position information of the target IP and product information of equipment corresponding to the target IP; the first storage execution module is used for storing the equipment information and the port description information as the labeling information of the target IP in an IP information database.
As an optional implementation, in the IP labeling apparatus, the second information obtaining module includes a location information obtaining unit and a product information obtaining unit, where the location information obtaining unit is configured to obtain geographic location information of the target IP based on an address field of the target IP, where the geographic location information includes longitude and latitude information and/or specific address information; the product information acquisition unit is used for acquiring information matched with the equipment description field in a first preset database, and the information is used as product information of equipment corresponding to the target IP, and the product information of the equipment comprises manufacturer information, brand information, model information and equipment type information.
As an optional implementation, in the IP labeling apparatus, the first preset database includes preset description words and description items corresponding to the preset description words, and the product information obtaining unit is specifically configured to: matching the device description field with preset description words in the first preset database to obtain target description words in the device description field; taking a description item corresponding to the matched preset descriptor as a description item of the target descriptor, wherein the description item comprises a manufacturer item, a brand item, a model item and an equipment type item; and associating the target descriptor with the description item corresponding to the target descriptor to obtain manufacturer information, brand information, model information and equipment type information of the equipment corresponding to the target IP, wherein the manufacturer information, the brand information, the model information and the equipment type information are used as product information of the equipment corresponding to the target IP.
As an optional implementation, in the above IP labeling apparatus, the apparatus further includes an inquiry request obtaining module and a request response module, where the inquiry request obtaining module is configured to obtain an inquiry request for the labeling information of the first IP, which is input by a user; the request response module is used for responding to the annotation information query request and displaying the annotation information of the first IP so that a user can determine the importance of the equipment corresponding to the first IP based on the annotation information.
In a third aspect, an embodiment of the present invention provides an electronic device, where the electronic device includes a memory and a processor, where the memory stores computer instructions, and when the computer instructions are read and executed by the processor, the processor is caused to execute the IP tagging method provided in the first aspect.
In a fourth aspect, an embodiment of the present invention provides a storage medium, where a computer instruction is stored in the storage medium, where the computer instruction, when read and executed, executes the IP tagging method provided in the first aspect.
According to the IP labeling method, the IP labeling device, the electronic equipment and the storage medium provided by the embodiment of the invention, the port scanning information of the target IP is obtained, the port scanning information at least comprises the port description information, then the equipment information of the target equipment corresponding to the target IP is obtained, the equipment information at least comprises the geographical position information of the target equipment and the product information of the target equipment corresponding to the target equipment, and finally the corresponding relation between the target IP and the equipment information and the port description information is established. Therefore, higher dimensionality marking of the IP can be achieved, the information of the IP is more comprehensive, the value and the reliability of the information of the IP in situation awareness application are improved, and the problem that the currently obtained IP related information is low in dimensionality and inconvenient to apply in situation awareness is solved.
In order to make the aforementioned and other objects, features and advantages of the present invention comprehensible, preferred embodiments accompanied with figures are described in detail below.
Drawings
In order to make the objects, technical solutions and advantages of the embodiments of the present invention clearer, the technical solutions in the embodiments of the present invention will be clearly and completely described below with reference to the drawings in the embodiments of the present invention, and it is obvious that the described embodiments are some, but not all, embodiments of the present invention. All other embodiments, which can be derived by a person skilled in the art from the embodiments given herein without making any creative effort, shall fall within the protection scope of the present invention.
FIG. 1 is a block diagram of an electronic device provided by an embodiment of the invention;
FIG. 2 is a flowchart illustrating an IP tagging method according to an embodiment of the present invention;
fig. 3 is a flowchart illustrating step S120 in the IP labeling method according to an embodiment of the present invention;
FIG. 4 is a block diagram of an IP labeling apparatus provided in an embodiment of the present invention;
fig. 5 is a block diagram illustrating a second information obtaining module in the IP tagging apparatus according to the embodiment of the present invention.
Detailed Description
The technical solutions in the embodiments of the present invention will be clearly and completely described below with reference to the drawings in the embodiments of the present invention, and it is obvious that the described embodiments are only a part of the embodiments of the present invention, and not all of the embodiments. The components of embodiments of the present invention generally described and illustrated in the figures herein may be arranged and designed in a wide variety of different configurations. Thus, the following detailed description of the embodiments of the present invention, presented in the figures, is not intended to limit the scope of the invention, as claimed, but is merely representative of selected embodiments of the invention. All other embodiments, which can be derived by a person skilled in the art from the embodiments of the present invention without making any creative effort, shall fall within the protection scope of the present invention.
It should be noted that: like reference numbers and letters refer to like items in the following figures, and thus, once an item is defined in one figure, it need not be further defined and explained in subsequent figures. Meanwhile, in the description of the present invention, the terms "first", "second", and the like are used only for distinguishing the description, and are not to be construed as indicating or implying relative importance.
Fig. 1 shows a block diagram of an electronic device applicable to an embodiment of the present invention. As shown in FIG. 1, electronic device 100 includes a memory 102, a memory controller 104, one or more processors 106 (only one shown), a peripherals interface 108, a radio frequency module 110, an audio module 112, a display unit 114, and the like. These components communicate with each other via one or more communication buses/signal lines 116.
The memory 102 may be used to store software programs and modules, such as program instructions/modules corresponding to the IP tagging method and apparatus in the embodiment of the present invention, and the processor 106 executes various functional applications and data processing, such as the IP tagging method provided in the embodiment of the present invention, by executing the software programs and modules stored in the memory 102.
The memory 102 may include high speed random access memory, and may also include non-volatile memory, such as one or more magnetic storage devices, flash memory, or other non-volatile solid-state memory. Access to the memory 102 by the processor 106, and possibly other components, may be under the control of the memory controller 104.
The peripheral interface 108 couples various input/output devices to the processor 106 as well as to the memory 102. In some embodiments, the peripheral interface 108, the processor 106, and the memory controller 104 may be implemented in a single chip. In other examples, they may be implemented separately from the individual chips.
The rf module 110 is used for receiving and transmitting electromagnetic waves, and implementing interconversion between the electromagnetic waves and electrical signals, so as to communicate with a communication network or other devices.
The display unit 114 provides a display interface between the electronic device 100 and a user. In particular, display unit 114 displays video output to the user, the content of which may include text, graphics, video, and any combination thereof.
It will be appreciated that the configuration shown in FIG. 1 is merely illustrative and that electronic device 100 may include more or fewer components than shown in FIG. 1 or have a different configuration than shown in FIG. 1. The components shown in fig. 1 may be implemented in hardware, software, or a combination thereof.
In the existing scheme for labeling the IP, port scanning is only performed through a port scanning tool, and port scanning information can only be obtained to label the port dimension.
First embodiment
Fig. 2 shows a flowchart of an IP labeling method according to an embodiment of the present invention. Referring to fig. 2, the IP tagging method includes:
step S110: and acquiring port scanning information of the target IP, wherein the port scanning information at least comprises port description information.
The IP labeling method provided by the embodiment of the invention further acquires more detailed information of the IP through the port scanning information. Therefore, in the embodiment of the present invention, first, the port scanning information of the target IP that needs to be labeled may be obtained.
In the embodiment of the invention, the port scanning information of the target IP can be acquired through the port scanning tool. A port scan tool is a tool used to detect open port conditions on a server or host. For example, the port scan tool may be an Nmap port scan tool.
Of course, the specific category of the port scan tool is not limited in the embodiment of the present invention.
In the embodiment of the invention, the port scanning tool is used for scanning the port scanning information obtained by the port of the target IP. The port scan information may include port scan information.
The port scan information may be information about the openness of the port, the services provided, and the like. Of course, the specific content of the port scan information is not limited in the embodiment of the present invention.
For example, a port scan tool is used to scan 80 ports with target IP of 98.103.157.164, and 80 ports with the target IP are obtained to be in an open state, and the service provided is http service.
In this embodiment of the present invention, the obtained port scanning information of the target IP may be port scanning information obtained by scanning one port, or may also be port scanning information obtained by scanning multiple ports, and the specific number of ports is not limited in this embodiment of the present invention.
In the embodiment of the present invention, the port scanning information of the target IP is obtained, and the port scanning information corresponding to all ports of the target IP may also be pre-stored, so that the port scanning information corresponding to all ports of the target IP may be directly read.
Step S120: and acquiring the equipment information of the target equipment corresponding to the target IP, wherein the equipment information at least comprises the geographical position information of the target equipment and the product information of the target equipment corresponding to the target equipment.
After the port scanning information of the target IP is obtained, the device information of the target device corresponding to the target IP may be obtained, where the device information may include the geographic location information of the target device and the product information of the target device corresponding to the target device.
In this embodiment of the present invention, the port scan information may further include a description field of the target device. For example, Polycom VSX 8000 http config, Polycom VSX 8000 ftpd, etc.
In the embodiment of the present invention, the description field of the target device may include a descriptor corresponding to a manufacturer of the target device, a descriptor corresponding to a brand, a descriptor corresponding to a model, a descriptor of a device type, and the like.
Of course, in the embodiment of the present invention, the specific content of the description field of the target device is not limited.
In the embodiment of the present invention, each descriptor in the description field of the target device in the port scan information is in a connected state, that is, a descriptor corresponding to a manufacturer, a descriptor corresponding to a brand, a descriptor corresponding to a model, a descriptor of a device type, and the like cannot be directly identified. Therefore, the device product information of the target device needs to be acquired according to the description field of the target device.
In the embodiment of the present invention, referring to fig. 3, step S120 may include:
step S121: and acquiring the geographical position information of the target equipment based on the address field of the target IP.
In the embodiment of the present invention, the geographical location information of the target device may be obtained according to the address field of the target IP.
In the embodiment of the present invention, the electronic device may store a geographic location information database where target devices corresponding to all IPs are located, and the geographic location information database stores the geographic location information of the target IP in a manner of associating the address field of the target IP with the geographic location information of the device, that is, the address field of the IP and the geographic location information of the device corresponding to the IP are in a one-to-one correspondence relationship.
In the embodiment of the invention, the geographical location information of the target device corresponding to the address field of the target IP can be searched from the geographical location information database.
In the embodiment of the present invention, the geographical location information of the target device may include longitude and latitude information of the location of the target device, and specific address information.
The specific address information may be country, province, city, etc.
Of course, the geographic location information of the target device is not limited in the embodiment of the present invention, and may also include other content, for example, operator information, an organization to which the target device belongs, and the like.
For example, the geographic location information corresponding to the target IP address field 98.103.157.164 may be queried through the geographic location information base, and the obtained geographic location information of the target device corresponding to the target IP is information of Time Warner Cable belonging to the organization, Time Warner Cable, etc., of longitude-80.1664, latitude 42.0667, in the united states of pennsylvania.
Step S122: and acquiring the target equipment product information matched with the description field in a first preset database.
In an embodiment of the present invention, the first preset database includes preset descriptors and description items corresponding to the preset descriptors. Specifically, the description item may be a manufacturer item, a brand item, a model item, and a device type item, and the preset descriptor may be manufacturer specific content, brand specific content, model specific content, and device type specific content.
In this embodiment of the present invention, step S122 may include:
acquiring a target descriptor matched with a preset descriptor in the first preset database in the description field; obtaining a description item corresponding to a preset descriptor matched with the target descriptor in the first preset database, wherein the description item is used as a description item of the target descriptor; and associating the target description words with the description items corresponding to the target description words to obtain the target equipment product information.
It is to be understood that the description field may be broken down into a number of words and a number of sums. For example, Polycom VSX 8000 http config can be decomposed into Polycom, VSX, 8000, http and config. Then matching the decomposed words and the sums with preset keywords to obtain target keywords matched with the preset keywords: polycom, VSX 8000. And then obtaining items corresponding to the target keywords, the Polycom corresponding to the manufacturer items, the brand items and the VSX 8000 corresponding to the model items. And finally, associating the Polycom, the VSX 8000, the http and the config with a manufacturer item, a brand item, a model item and an equipment type item to obtain a network camera with a Polycom manufacturer, a Polycom brand, a VSX 8000 model and an equipment type. It should be noted that the first preset database may further store a device type corresponding to the model of each device, and the device type may be obtained by querying the model of the device in the first preset database.
Therefore, the device information of the target device corresponding to the target IP can be obtained, and the device information includes the geographical location information of the target device and the product information of the target device corresponding to the target device.
Step S130: and establishing a corresponding relation between the target IP and the equipment information and the port description information.
After obtaining the device information including the geographical location information of the target device and the product information of the target device, a corresponding relationship between the target IP and the device information and the port description information may be established, that is, the device information and the port description information are associated with the target IP and then stored. So as to store the device information and the port description information corresponding to the target IP.
In the embodiment of the present invention, there may be a case where the number of scanned ports is single or less, that is, port scan information of which the port scan information is a small number of ports is obtained, and port scan information of other ports of the target IP is not available. Therefore, the port scanning information of other ports can be acquired and stored after being associated with the target IP.
In this embodiment of the present invention, the IP labeling method may further include: acquiring an information query request for the target IP input by a user; and responding to the information inquiry request, and displaying the equipment information and the port description information of the target IP so as to enable a user to determine the importance of the equipment corresponding to the target IP based on the equipment information and the port description information of the target IP.
It can be understood that the user may query the information of the target IP to obtain the device information and the port description information of the target IP, where the device information includes the geographic location information of the target device and the target device product information corresponding to the target device. For example, when the target IP98.103.157.164 is queried, the device corresponding to the target IP is a webcam, the manufacturer and the brand are Polycom, the model is VSX 8000, the target device is located in the state of pennsylvania, longitude-80.1664, dimension 42.0667, belongs to the Time Warner Cable of the organization, and the operator is the Time Warner Cable, and the device opens 80 ports for providing http service and 21 ports for providing ftp service. Therefore, the user can determine the importance of the device corresponding to the IP according to the device information of the target device and the port description information, and set different monitoring in situation awareness according to the importance.
Therefore, the labeling of the target IP can be completed, so that the labeled information of the target IP can comprise port scanning information and equipment information, and the equipment information is the geographical position information of the target equipment corresponding to the target IP and the product information of the target equipment corresponding to the target equipment. Therefore, the labeled information of the target IP is more detailed and comprehensive, the dimension of the labeled information of the target IP is high, and the application value and the reliability of the labeled information of the IP in situation awareness are improved conveniently.
Second embodiment
A second embodiment of the present invention provides an IP labeling apparatus. Referring to fig. 4, the IP tagging apparatus 200 includes a first information obtaining module 210, a second information obtaining module 220, and a first storage executing module 230. The first information obtaining module 210 is configured to obtain port scanning information of a target IP, where the port scanning information at least includes port description information; the second information obtaining module 220 is configured to obtain device information corresponding to the target IP, where the device information at least includes geographic location information where the target IP is located and product information of a device corresponding to the target IP; the first storage executing module 230 is configured to store the device information and the port description information as labeling information of the target IP in an IP information database.
In the embodiment of the present invention, referring to fig. 5, the second information obtaining module 220 includes a position information obtaining unit 221 and a product information obtaining unit 222. The location information obtaining unit 221 is configured to obtain geographic location information where the target IP is located based on an address field of the target IP, where the geographic location information includes longitude and latitude information and/or specific address information; the product information obtaining unit 222 is configured to obtain information, which is matched with the device description field, in a first preset database, as product information of a device corresponding to the target IP, where the product information of the device includes manufacturer information, brand information, model information, and device type information.
In an embodiment of the present invention, the first preset database includes preset descriptors and description items corresponding to the preset descriptors, and the product information obtaining unit 222 is specifically configured to: matching the device description field with preset description words in the first preset database to obtain target description words in the device description field; taking a description item corresponding to the matched preset descriptor as a description item of the target descriptor, wherein the description item comprises a manufacturer item, a brand item, a model item and an equipment type item; and associating the target descriptor with the description item corresponding to the target descriptor to obtain manufacturer information, brand information, model information and equipment type information of the equipment corresponding to the target IP, wherein the manufacturer information, the brand information, the model information and the equipment type information are used as product information of the equipment corresponding to the target IP.
In the embodiment of the present invention, the IP labeling device 200 further includes a query request obtaining module and a request responding module, wherein the query request obtaining module is configured to obtain a query request for labeling information of the first IP, which is input by a user; the request response module is used for responding to the annotation information query request and displaying the annotation information of the first IP so that a user can determine the importance of the equipment corresponding to the first IP based on the annotation information.
Third embodiment
In a third embodiment of the present invention, referring to fig. 1, the electronic device 100 includes a memory 102 and a processor 106, wherein the memory 102 stores computer instructions, and when the computer instructions are read and executed by the processor 106, the processor 106 executes the IP tagging method according to the first embodiment of the present invention.
Fourth embodiment
A fourth embodiment of the present invention provides a storage medium, in which computer instructions are stored, where the computer instructions, when read and executed, execute the IP tagging method provided in the first embodiment of the present invention.
In summary, according to the IP labeling method, apparatus, electronic device, and storage medium provided in the embodiments of the present invention, by obtaining port scanning information of a target IP, where the port scanning information at least includes port description information, then obtaining device information of a target device corresponding to the target IP, where the device information at least includes geographic location information of the target device and target device product information corresponding to the target device, and finally establishing a corresponding relationship between the target IP and the device information and the port description information. Therefore, higher dimensionality marking of the IP can be achieved, the information of the IP is more comprehensive, the value and the reliability of the information of the IP in situation awareness application are improved, and the problem that the currently obtained IP related information is low in dimensionality and inconvenient to apply in situation awareness is solved.
It should be noted that, in the present specification, the embodiments are all described in a progressive manner, each embodiment focuses on differences from other embodiments, and the same and similar parts among the embodiments may be referred to each other. For the device-like embodiment, since it is basically similar to the method embodiment, the description is simple, and for the relevant points, reference may be made to the partial description of the method embodiment.
In the embodiments provided in the present application, it should be understood that the disclosed apparatus and method can be implemented in other ways. The apparatus embodiments described above are merely illustrative, and for example, the flowchart and block diagrams in the figures illustrate the architecture, functionality, and operation of possible implementations of apparatus, methods and computer program products according to various embodiments of the present invention. In this regard, each block in the flowchart or block diagrams may represent a module, segment, or portion of code, which comprises one or more executable instructions for implementing the specified logical function(s). It should also be noted that, in some alternative implementations, the functions noted in the block may occur out of the order noted in the figures. For example, two blocks shown in succession may, in fact, be executed substantially concurrently, or the blocks may sometimes be executed in the reverse order, depending upon the functionality involved. It will also be noted that each block of the block diagrams and/or flowchart illustration, and combinations of blocks in the block diagrams and/or flowchart illustration, can be implemented by special purpose hardware-based systems which perform the specified functions or acts, or combinations of special purpose hardware and computer instructions.
In addition, the functional modules in the embodiments of the present invention may be integrated together to form an independent part, or each module may exist separately, or two or more modules may be integrated to form an independent part.
The functions, if implemented in the form of software functional modules and sold or used as a stand-alone product, may be stored in a computer readable storage medium. Based on such understanding, the technical solution of the present invention may be embodied in the form of a software product, which is stored in a storage medium and includes instructions for causing a computer device (which may be a personal computer, a server, or a network device) to execute all or part of the steps of the method according to the embodiments of the present invention. And the aforementioned storage medium includes: a U-disk, a removable hard disk, a Read-Only Memory (ROM), a Random Access Memory (RAM), a magnetic disk or an optical disk, and other various media capable of storing program codes. It is noted that, herein, relational terms such as first and second, and the like may be used solely to distinguish one entity or action from another entity or action without necessarily requiring or implying any actual such relationship or order between such entities or actions. Also, the terms "comprises," "comprising," or any other variation thereof, are intended to cover a non-exclusive inclusion, such that a process, method, article, or apparatus that comprises a list of elements does not include only those elements but may include other elements not expressly listed or inherent to such process, method, article, or apparatus. Without further limitation, an element defined by the phrase "comprising an … …" does not exclude the presence of other identical elements in a process, method, article, or apparatus that comprises the element.
The above description is only a preferred embodiment of the present invention and is not intended to limit the present invention, and various modifications and changes may be made by those skilled in the art. Any modification, equivalent replacement, or improvement made within the spirit and principle of the present invention should be included in the protection scope of the present invention. It should be noted that: like reference numbers and letters refer to like items in the following figures, and thus, once an item is defined in one figure, it need not be further defined and explained in subsequent figures.
The above description is only for the specific embodiments of the present invention, but the scope of the present invention is not limited thereto, and any person skilled in the art can easily conceive of the changes or substitutions within the technical scope of the present invention, and all the changes or substitutions should be covered within the scope of the present invention. Therefore, the protection scope of the present invention shall be subject to the protection scope of the claims.
Claims (6)
1. An IP tagging method, the method comprising:
acquiring port scanning information of a target IP, wherein the port scanning information at least comprises port description information;
acquiring device information of target equipment corresponding to the target IP, wherein the device information at least comprises geographical position information of the target equipment and target equipment product information corresponding to the target equipment;
establishing a corresponding relation between the target IP and the equipment information and the port description information;
the port scanning information comprises a description field of the target equipment, wherein each descriptor in the description field of the target equipment is in a connected state;
the acquiring the device information corresponding to the target IP includes:
acquiring the geographical location information of the target equipment based on the address field of the target IP;
acquiring the target equipment product information matched with the description field in a first preset database;
the obtaining of the target device product information matched with the description field in the first preset database includes:
acquiring a target descriptor matched with a preset descriptor in the first preset database in the description field;
obtaining a description item corresponding to a preset descriptor matched with the target descriptor in the first preset database, wherein the description item is used as a description item of the target descriptor;
and associating the target description words with the description items corresponding to the target description words to obtain the target equipment product information.
2. The method according to claim 1, wherein after establishing the correspondence between the target IP and the device information and the port description information, the method further comprises:
acquiring an information query request for the target IP input by a user;
and responding to the information inquiry request, and displaying the equipment information and the port description information of the target IP so as to enable a user to determine the importance of the equipment corresponding to the target IP based on the equipment information and the port description information of the target IP.
3. An IP labeling device is characterized in that the device comprises a first information acquisition module, a second information acquisition module and a first storage execution module, wherein,
the first information acquisition module is used for acquiring port scanning information of a target IP, wherein the port scanning information at least comprises port description information;
the second information acquisition module is used for acquiring equipment information corresponding to the target IP, wherein the equipment information at least comprises geographical position information of the target IP and product information of equipment corresponding to the target IP;
the first storage execution module is used for storing the equipment information and the port description information as the labeling information of the target IP in an IP information database;
the port scanning information comprises a description field of the target equipment, wherein each descriptor in the description field of the target equipment is in a connected state;
the second information acquisition module comprises a position information acquisition unit and a product information acquisition unit, wherein,
the position information acquiring unit is used for acquiring geographical position information of the target IP based on an address field of the target IP, wherein the geographical position information comprises longitude and latitude information and/or specific address information;
the product information acquisition unit is used for acquiring information matched with the description field in a first preset database, and the information is used as product information of equipment corresponding to the target IP, wherein the product information of the equipment comprises manufacturer information, brand information, model information and equipment type information;
the first preset database comprises preset descriptors and description items corresponding to the preset descriptors, and the product information acquisition unit is specifically configured to:
matching the description field with preset description words in the first preset database to obtain target description words in the description field;
taking a description item corresponding to the matched preset descriptor as a description item of the target descriptor, wherein the description item comprises a manufacturer item, a brand item, a model item and an equipment type item;
and associating the target descriptor with the description item corresponding to the target descriptor to obtain manufacturer information, brand information, model information and equipment type information of the equipment corresponding to the target IP, wherein the manufacturer information, the brand information, the model information and the equipment type information are used as product information of the equipment corresponding to the target IP.
4. The apparatus of claim 3, further comprising a query request acquisition module and a request response module, wherein,
the query request acquisition module is used for acquiring a labeling information query request for the first IP input by a user;
the request response module is used for responding to the annotation information query request and displaying the annotation information of the first IP so that a user can determine the importance of the equipment corresponding to the first IP based on the annotation information.
5. An electronic device, comprising a memory and a processor, the memory storing computer instructions that, when read and executed by the processor, cause the processor to perform the method of claim 1 or 2.
6. A storage medium having stored thereon computer instructions, wherein the computer instructions, when read and executed, perform the method of claim 1 or 2.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201711104245.9A CN107743155B (en) | 2017-11-10 | 2017-11-10 | IP labeling method, device, electronic equipment and storage medium |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201711104245.9A CN107743155B (en) | 2017-11-10 | 2017-11-10 | IP labeling method, device, electronic equipment and storage medium |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN107743155A CN107743155A (en) | 2018-02-27 |
| CN107743155B true CN107743155B (en) | 2021-04-13 |
Family
ID=61233243
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201711104245.9A Active CN107743155B (en) | 2017-11-10 | 2017-11-10 | IP labeling method, device, electronic equipment and storage medium |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN107743155B (en) |
Families Citing this family (2)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN111142963B (en) * | 2019-11-22 | 2023-05-16 | 贵州电网有限责任公司 | Port query method, device equipment and storage medium of substation instrument |
| CN113114511B (en) * | 2021-04-22 | 2022-07-15 | 中国科学技术大学 | Method and device for generating port description information of network equipment |
Citations (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US8073936B2 (en) * | 2006-06-08 | 2011-12-06 | Cisco Technology, Inc. | Providing support for responding to location protocol queries within a network node |
| CN103475509A (en) * | 2013-08-29 | 2013-12-25 | 华为技术有限公司 | Method and equipment for determining and presenting network information |
| CN105409188A (en) * | 2013-07-24 | 2016-03-16 | 高通股份有限公司 | Method and system for associating internet protocol (IP) address, media access control (MAC) address and location for a user device |
| CN105450977A (en) * | 2014-09-24 | 2016-03-30 | 三亚中兴软件有限责任公司 | Video conference calling method and video conference calling system |
| CN105471936A (en) * | 2014-08-12 | 2016-04-06 | 无锡市嘉邦电力管道厂 | Remote monitoring method and remote monitoring device for Internet-of-things equipment |
-
2017
- 2017-11-10 CN CN201711104245.9A patent/CN107743155B/en active Active
Patent Citations (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US8073936B2 (en) * | 2006-06-08 | 2011-12-06 | Cisco Technology, Inc. | Providing support for responding to location protocol queries within a network node |
| CN105409188A (en) * | 2013-07-24 | 2016-03-16 | 高通股份有限公司 | Method and system for associating internet protocol (IP) address, media access control (MAC) address and location for a user device |
| CN103475509A (en) * | 2013-08-29 | 2013-12-25 | 华为技术有限公司 | Method and equipment for determining and presenting network information |
| CN105471936A (en) * | 2014-08-12 | 2016-04-06 | 无锡市嘉邦电力管道厂 | Remote monitoring method and remote monitoring device for Internet-of-things equipment |
| CN105450977A (en) * | 2014-09-24 | 2016-03-30 | 三亚中兴软件有限责任公司 | Video conference calling method and video conference calling system |
Also Published As
| Publication number | Publication date |
|---|---|
| CN107743155A (en) | 2018-02-27 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN107967357B (en) | Friend pushing method and system and terminal equipment | |
| US11362923B2 (en) | Techniques for infrastructure analysis of internet-based activity | |
| US11044269B2 (en) | Techniques for determining threat intelligence for network infrastructure analysis | |
| US11822597B2 (en) | Geofence-based object identification in an extended reality environment | |
| US11145123B1 (en) | Generating extended reality overlays in an industrial environment | |
| CN107861981B (en) | Data processing method and device | |
| WO2015081720A1 (en) | Instant messaging (im) based information recommendation method, apparatus, and terminal | |
| CN110191154B (en) | User tag determination method and device | |
| US20140358712A1 (en) | Shopping guide system, shopping guide management device and method | |
| CN107743155B (en) | IP labeling method, device, electronic equipment and storage medium | |
| WO2013152729A1 (en) | Method and apparatus for providing software for terminal device | |
| US20140365445A1 (en) | Server with file managing function and file managing method | |
| CN108804452B (en) | Multimedia resource cover display method and device | |
| WO2016101736A1 (en) | Method and apparatus for poi name customization and poi query on electronic map | |
| US10754747B2 (en) | Physical port information associated with system identifiers | |
| CN114021016A (en) | Data recommendation method, device, equipment and storage medium | |
| CN104573132A (en) | Method and device for finding songs | |
| US11531706B2 (en) | Graph search using index vertices | |
| CN110287338B (en) | Industry hotspot determination method, device, equipment and medium | |
| US20160350318A1 (en) | Method, system for classifying comment record and webpage management device | |
| CN106020605A (en) | Application icon display method, user terminal and system | |
| CN111339380B (en) | Interface time-consuming data processing method and related device | |
| CN110598072B (en) | Feature data aggregation method and device | |
| CN113422826A (en) | Information pushing method and device | |
| CN108958929B (en) | Method and device for applying algorithm library, storage medium and electronic equipment |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| CB02 | Change of applicant information |
Address after: Room 311501, Unit 1, Building 5, Courtyard 1, Futong East Street, Chaoyang District, Beijing Applicant after: Beijing Zhichuangyu Information Technology Co., Ltd. Address before: Room 803, Jinwei Building, 55 Lanindichang South Road, Haidian District, Beijing Applicant before: Beijing Knows Chuangyu Information Technology Co.,Ltd. |
|
| CB02 | Change of applicant information | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant |