CN113779165B - IP address geographic position ambiguity judging method and related equipment - Google Patents

Abstract

The disclosure provides a method for judging ambiguity of IP address geographic location and related equipment, the method includes: constructing the same IP address segment set and disputed IP address segment set according to different IP location databases, and performing IP address activity based on the same IP address segment set Probe, build active IP address data set. Associate the disputed IP address segment with the active IP address segment, calculate the path vectors corresponding to different IP address segments, and use the address position of the active IP address segment closest to the path vector of the disputed IP address segment as the disputed IP address segment target location. The judging method provided by the present disclosure solves the problem of inconsistency of IP address geographic locations in multi-source IP address geographic location databases, makes full use of the full path information from the detection point to the destination IP, and has high reliability. At the same time, it only needs to correspond to some active IPs in the disputed cities and can complete the geographical location discrimination, which has the advantages of real-time, accuracy, light weight and easy deployment.

Description

IP address geographic location ambiguity determination method and related equipment

technical field

The present disclosure relates to the technical field of the Internet, and in particular to a method for judging ambiguity of an IP address geographic location and related equipment.

Background technique

An IP address is a unified address format provided by the IP protocol. It is a core component of the Internet and can be used to uniquely identify a host or device connected to the network. The device or host used by the user must have an IP address before it can access the Internet and obtain network resources. IP address geographic location refers to an address in physical space corresponding to an IP address in cyberspace. Generally speaking, there is a one-to-one correspondence between IP addresses and physical addresses. IP positioning refers to the establishment of a mapping relationship between an IP address and its physical address through certain technical means. IP positioning is widely used in network performance optimization, network security analysis, and personalized recommendation. An IP address is the logical address of a network or host on the Internet, and its geographic location plays an important role in network traffic scheduling, network security event analysis, and user promotion. At present, there are many IP address geographic location databases in the industry. However, multi-source IP address geographic location information causes ambiguity in IP address location and reduces the use effect of IP address geographic location.

Contents of the invention

In view of this, the purpose of the present disclosure is to propose a method for judging ambiguity of an IP address geographic location and related equipment.

Based on the above purpose, the present disclosure provides a method for judging ambiguity of IP address geographic location, including:

Obtain location information from at least two IP location libraries;

Standardize the geographic location in the positioning information;

Associating the IP address segment in the positioning information with the autonomous system as (autonomous system) information in the routing information table through the routing prefix;

Constructing the same IP address segment set based on the positioning information and the as information, and constructing a disputed IP address segment set based on the positioning information and the as information;

Based on the same IP address segment set, determine the active IP address segment set through liveness detection;

Based on the set of disputed IP address segments and the set of active IP address segments, determine at least two active IP address segments associated with each disputed IP address segment in the set of disputed IP address segments through predetermined rules;

Obtain the path vector of the disputed IP address segment and the path vectors of all the active IP address segments associated therewith through route tracing, respectively calculate the path vector of the disputed IP address segment and each of the active IP addresses The distance of the path vector of the segment, and the geographic location associated with the active IP address segment corresponding to the smallest distance is used as the target geographic location of the disputed IP address segment.

Further, the positioning information includes: starting and ending IP, country code, state/province/region and city name, and the geographic location includes country code, state/province/region and city name.

Further, the standardization process includes: querying the geographic location in a preset standard geographic location library, and if the geographic location is a non-standard geographic location, replacing the geographic location with a standard geographic location.

Further, the constructing the same IP address segment set based on the positioning information and the as information, and constructing the disputed IP address segment set based on the positioning information and the as information include: the starting and ending IPs corresponding to the The record information with the same geographical location and as information is combined to construct the same IP address segment set, and the record information with the same start and end IP and different geographic location and/or as information is combined to construct a disputed IP address segment set.

Further, the determination of the active IP address segment set through liveness detection based on the same IP address segment set includes: extracting information from the same IP address segment set to construct a first dictionary, and the first dictionary is { City name: as: [IP address segment collection]}, randomly extract a part of IP addresses from each IP address segment of the first dictionary, and perform activity detection on it, based on the city name, the as information and The corresponding liveness detection result is an active IP address segment, and a set of active IP address segments is constructed.

Further, the predetermined rule includes: extracting information from the set of disputed IP address segments to construct a second dictionary, the second dictionary is {disputed IP address segment: [the first disputed city, the second disputed city...the Nth disputed city as]}, based on the as information, use the similarity principle to respectively query the first disputed city, the second disputed city... the Nth disputed city in the active IP address segment set in the second dictionary The corresponding active IP address segment is used as the active IP address segment associated with the disputed IP address segment.

Further, the obtaining the path vector of the disputed IP address segment and the path vectors of all the active IP address segments associated with it through route tracing includes: constructing a third dictionary, and the third dictionary is { Disputed IP address segment: [the first disputed city + as + the first active IP address segment, the second disputed city + as + the second active IP address segment... the Nth disputed city + as + the Nth active IP address segment]}, the The disputed IP address segment and all the active IP address segments in the three dictionaries initiate route tracing detection, and convert the path obtained through the route tracing detection into a path vector.

Based on the same inventive concept, the present disclosure also provides an IP address geographical ambiguity determination device, including:

An acquisition module configured to acquire location information from at least two IP location libraries;

A standardization processing module configured to perform standardization processing on the geographic location in the positioning information;

An information association module configured to associate the IP address segment in the positioning information with the as information in the routing information table through a routing prefix;

A set construction module configured to construct the same IP address segment set based on the positioning information and the as information, and construct a disputed IP address segment set based on the positioning information and the as information;

The activity detection module is configured to determine the active IP address segment set through liveness detection based on the same IP address segment set;

The associated active IP determination module is configured to determine at least Two active IP address segments;

The geographical location determination module is configured to respectively obtain the path vector of the disputed IP address segment and the path vectors of all the active IP address segments associated therewith through route tracing, and calculate the path vectors of the disputed IP address segment respectively For the distance from the path vector of each active IP address segment, the geographic location associated with the active IP address segment corresponding to the smallest distance is used as the target geographic location of the disputed IP address segment.

Based on the same inventive concept, the present disclosure also provides an electronic device, including a memory, a processor, and a computer program stored on the memory and executable by the processor. When the processor executes the computer program, it realizes method as above.

Based on the same inventive concept, the present disclosure also provides a non-transitory computer-readable storage medium, the non-transitory computer-readable storage medium stores computer instructions, and the computer instructions are used to cause a computer to execute the above-mentioned method.

It can be seen from the above that the present disclosure provides a method for judging ambiguity of IP address geographic location and related equipment to solve the problem of IP address geographic location inconsistency in multi-source IP address geographic location databases. By analyzing the multi-source IP address geographic location database, the IP address geographic location in the database is obtained to locate the same IP address set and different IP address sets, and the network path from a specific measurement point to these sets is obtained through active measurement, and the same IP address is located according to Collected network paths to establish city-level network path benchmark data sets. For the set of IP addresses with inconsistent geographic location, the ambiguity discrimination of IP address geographic location is realized by comparing the similarity of the network path to the benchmark data set of the network path of a specific city. The method provided by the disclosure is less dependent on network quality, fully utilizes the full path information from the detection point to the destination IP, and has high reliability. At the same time, it only needs to correspond to some active IPs in the disputed cities and can complete the geographical location discrimination, which has the advantages of real-time, accuracy, light weight and easy deployment.

Description of drawings

In order to more clearly illustrate the technical solutions in the present disclosure or related technologies, the following will briefly introduce the accompanying drawings that need to be used in the descriptions of the embodiments or related technologies. Obviously, the accompanying drawings in the following description are only for the present disclosure Embodiments, for those of ordinary skill in the art, other drawings can also be obtained based on these drawings without any creative effort.

FIG. 1 is a schematic flowchart of a method for judging ambiguity in an IP address geographic location according to an embodiment of the present disclosure;

FIG. 2 is a schematic flow diagram of liveness detection in an embodiment of the present disclosure;

FIG. 3 is a schematic structural diagram of an apparatus for determining ambiguity in an IP address geographic location according to an embodiment of the present disclosure;

FIG. 4 is a schematic structural diagram of an electronic device according to an embodiment of the present disclosure.

Detailed ways

In order to make the purpose, technical solutions and advantages of the present disclosure clearer, the present disclosure will be further described in detail below in conjunction with specific embodiments and with reference to the accompanying drawings.

It should be noted that, unless otherwise defined, the technical terms or scientific terms used in the embodiments of the present disclosure shall have ordinary meanings understood by those skilled in the art to which the present disclosure belongs. "First", "second" and similar words used in the embodiments of the present disclosure do not indicate any order, quantity or importance, but are only used to distinguish different components. "Comprising" or "comprising" and similar words mean that the elements or items appearing before the word include the elements or items listed after the word and their equivalents, without excluding other elements or items. Words such as "connected" or "connected" are not limited to physical or mechanical connections, but may include electrical connections, whether direct or indirect. "Up", "Down", "Left", "Right" and so on are only used to indicate the relative positional relationship. When the absolute position of the described object changes, the relative positional relationship may also change accordingly.

As described in the background, the IP address geographic location database is a database describing the mapping relationship between IP addresses and their physical locations, and is generally called an IP location database. Obtaining IP location by using IP location library is the most common form. Therefore, many organizations provide IP location library services. Common IP location databases now generally have two versions, free and commercial. Compared with the commercial version, the free version has fewer records and the positioning accuracy is relatively lower. There are many records in the IP location database, and each record generally includes address block prefix or start address to end address, continent code, country code, state/province/region, city, latitude and longitude, zip code and other information. Based on this, the mapping relationship between the IP address and the physical address can be determined. Different IP location databases use different detection methods. Therefore, different IP location databases with the same IP address may have location inconsistencies. We refer to these inconsistent location data as disputed IPs. Dispute IP ambiguity The location of the address is determined to solve the problem of inconsistency in the geographical location of multi-source IP addresses.

Embodiments of the present disclosure will be described in detail below in conjunction with the accompanying drawings.

Referring to FIG. 1, the present disclosure provides a method for judging ambiguity of an IP address geographic location, including the following steps:

Step S101. Obtain location information from at least two IP location databases. Specifically, different IP location libraries have inconsistent descriptions of IP addresses due to their different detection methods. The positioning information of the IP address segment is extracted from different IP positioning databases, and then the positioning information is further processed.

Step S102 , standardize the geographic location in the positioning information. The descriptions of the same geographic location in different IP positioning databases may be different, and it is necessary to unify the description of the geographic location, that is, standardize the description of the same geographic location.

Step S103, associating the IP address segment in the location information with the as information in the routing information table through the routing prefix. The routing table contains the routing prefix and the autonomous system number asn (autonomous system number) of the autonomous domain. Build a prefix tree for all routing prefixes, and find the routing prefix to which the IP address segment belongs from the prefix tree, so that the IP address segment can be associated with The route prefix to which it belongs is associated with the asn.

Step S104, constructing a set of identical IP address segments based on the positioning information and the as information, and constructing a set of disputed IP address segments based on the positioning information and the as information. Specifically, according to the differences in the IP address segment information in the positioning information, different sets are respectively constructed. The positioning information of the undisputed IP address segment is combined to construct the same IP address segment set, and the positioning information of the IP address segment is disputed to construct the disputed IP address segment. A collection of address segments.

Step S105 , based on the same IP address segment set, determine an active IP address segment set through liveness detection. Specifically, for a set of identical IP address segments with no disputes over IP address segments, liveness detection is performed on the IP address segments in the set, and IP address segments whose detection results are active are combined as an active IP address segment set.

Step S106, based on the set of disputed IP address segments and the set of active IP address segments, determine at least two active IP address segments associated with each disputed IP address segment in the set of disputed IP address segments through predetermined rules . The disputed IP address segment is associated with the active IP address segment in the set of active IP address segments, and at least two active IP address segments with the highest similarity to the disputed IP address segment are selected for subsequent determination of the geographic location of the disputed IP address segment.

Step S107: Obtain the path vector of the disputed IP address segment and the path vectors of all the active IP address segments associated with it through route tracing, respectively calculate the path vector of the disputed IP address segment and each of the For the distance of the path vector of the active IP address segment, the geographic location associated with the active IP address segment corresponding to the minimum distance is used as the target geographic location of the disputed IP address segment.

In some embodiments, the positioning information includes: starting and ending IP, country code, state/province/region and city name, and the geographic location includes country code, state/province/region and city name. The location information in the IP location library usually includes address block prefix or start address to end address, country code, state/province/region and city fields, and different IP location libraries may have different descriptions for the same city.

In some embodiments, the standardization process includes: querying the geographic location in a preset standard geographic location library, and if the geographic location is a non-standard geographic location, replacing the geographic location with a standard geographic location. Specifically, take the geographic location information in one of the IP location databases as the reference, use the geographic location information in other location libraries as the key, and use the geographic location information in the reference location library as the value to construct {alias: standard naming} dictionary, if If there is a difference between the geographic location information described in a certain record and the geographic location information in the reference database, the dictionary is queried for replacement.

In some embodiments, the constructing the same IP address segment set based on the positioning information and the as information, and constructing the disputed IP address segment set based on the positioning information and the as information include: mapping the start and end IPs to The record information with the same geographical location and as information is combined to construct the same IP address segment set, and the record information with the same start and end IP and different geographic location and/or as information is combined to construct a disputed IP address segment set.

Specifically, the IP address segment in the positioning information includes an undisputed IP address segment and a disputed IP address segment, and the two types of IP address segments are combined to form a set. The non-disputed IP address segment is the record information with exactly the same geographical location information in the positioning information, which is combined to construct a set of the same IP address segment. For example, the positioning information in the first IP positioning library is {IP segment 1: start and end IP, country A, province A, city A, as A}, and the positioning information in the second IP positioning library is {IP segment 1: start and end IP , country A, province A, city A, as A}, such positioning information is regarded as the same record information, and a set of the same IP address segment is constructed for storage.

If the geographical location information or as information of the disputed IP address segment is different, including the state/province/region, city name or as information, etc., record the different geographical location information of the disputed IP address segment behind the disputed IP address segment as the disputed IP Element of the address segment collection. For example, the positioning information in the first IP positioning library is {IP segment 1: start and end IP, country A, province A, city A, as A}, and the positioning information in the second IP positioning library is {IP segment 1: start and end IP , country A, province B, city B, as A}, such positioning information is regarded as different record information, and a collection of disputed IP address segments is constructed for preservation.

In some embodiments, the determining the active IP address segment set through liveness detection based on the same IP address segment set includes: extracting information from the same IP address segment set to construct a first dictionary, the first The dictionary is {city name: as: [IP address segment collection]}, randomly extracts some IP addresses from each IP address segment of the first dictionary, and performs activity detection on them, based on the city name, the The as information and the corresponding activity detection result are active IP address segments, and a set of active IP address segments is constructed.

Specifically, the city name and as information in the same IP address segment set are used as keys, and the corresponding IP address segment is used as a value to construct the first dictionary {city name: as: [IP address segment set]}, the same city name The as information corresponds to different IP address segments, and these IP address segments are recorded as a set behind the city name and the as information. For the set of IP address segments, which may include active IP address segments and inactive IP address segments, detection tools are required to further detect network conditions. With reference to Fig. 2, utilize PING to carry out liveness detection in the present embodiment, PING order detects liveness by sending ICMP message to destination address, if receive reply message, then think that this address section is active address section, will active After the address is saved in the address segment, the inactive IP address segment is removed from the set at the same time, and a set of active IP address segments with the same location for each city and each network is established.

In some embodiments, the predetermined rule includes: extracting information from the set of disputed IP address segments to construct a second dictionary, the second dictionary is {disputed IP address segment: [the first disputed city, the second disputed city... The Nth disputed city as]}, respectively query the first disputed city, the second disputed city... the Nth disputed city in the active IP address in the second dictionary by using the similarity principle based on as information The corresponding active IP address segment in the segment set is used as the active IP address segment associated with the disputed IP address segment.

Specifically, the different disputed cities corresponding to the disputed IP address segment with the same as information are queried in the set of active IP address segments, and the IP address segment with the highest similarity corresponding to each disputed city is selected as the active IP address segment corresponding to the disputed city. IP address segment, build the third dictionary {disputed IP address segment: [first disputed city + as + first active IP address segment second disputed city + as + second active IP address segment ... Nth disputed city + as + Nth active IP address segment]}.

In some embodiments, the obtaining the path vector of the disputed IP address segment and the path vectors of all the active IP address segments associated therewith through route tracing includes: constructing a third dictionary, the third The dictionary is {disputed IP address segment: [first disputed city+as+first active IP address segment second disputed city+as+second active IP address segment...Nth disputed city+as+Nth active IP address segment]}, for The disputed IP address segment and all the active IP address segments in the third dictionary initiate a trace-route detection, and convert the path obtained through the trace-route detection into a path vector. In this embodiment, the scamper tool is used to initiate route tracing, and multi-thread detection can be performed, and the sending rate of detection packets is controlled to increase the detection rate, and the detection results are saved in the form of files.

Build the fourth dictionary {IP address segment: [path vector]}, the path vector includes the path vector of the disputed IP address segment and the path vector of the active IP address segment, when constructing the path vector, encounter * (no return data package) will be discarded. Use the IP address segment in the third dictionary as the key, search the corresponding value in the fourth dictionary, and build the fifth dictionary {disputed IP address segment: [disputed IP address segment path vector first active IP address segment corresponding to path vector No. The second active IP address segment corresponds to the path vector...the Nth active IP address segment corresponds to the path vector]}. Comparing the distance between the path vector of the disputed IP address segment and the path vector of each active IP address segment respectively, the two IP address segments with closer distance have greater similarity in physical space. Due to the inconsistency of the length of the vectors, the dynamic time warping (DTW, Dynamic TimeWarping) algorithm is used to compare the distance between the vectors, as follows:

(1) Input the path vector corresponding to the disputed IP address segment and the path vector corresponding to one of the active IP address segments, and calculate the distance between each point of the two vectors by constructing a distance matrix between the two vectors.

(2) Find a path from the upper left corner to the lower right corner from the distance matrix, so that the element sum on the path is the smallest, and the element sum is the distance between two vectors. Find the smallest element and use the dynamic programming method, the specific implementation is as follows:

Suppose the distance matrix is M, and the length of the shortest path from the upper left corner of the matrix (1,1) to any point (i,j) is Lmin(i,j). Since the current path length = the path length of the previous step + the size of the current element, for an element (i, j) on the path, its previous element can only be one of the following three: a) the adjacent element on the left (i, j-1), b) the upper neighbor (i-1, j), c) the upper left neighbor (i-1, j-1). Then you can use the recursive algorithm to find the shortest path length: Lmin(i,j)=min{Lmin(i,j-1),Lmin(i-1,j),Lmin(i-1,j-1)}+M (i,j), where the initial condition Lmin=(1,1)=M(1,1), the result returns the distance between the two vectors.

(3) respectively (the path vector of the disputed IP address segment, the path vector corresponding to the first active IP address segment), (the path vector of the disputed IP address segment, the path vector corresponding to the second active IP address segment) ... (the path vector of the disputed IP address segment , the Nth active IP address segment corresponds to the path vector) as a parameter, input into the above DTW algorithm, compare the returned distance values, and finally get the geographical location of the active IP address segment corresponding to the smallest distance value as the target of the disputed IP address segment Geographical location, so as to complete the determination of the geographical location of the disputed IP address.

In a specific embodiment, there are two IP location libraries A and B. First, with library A as the standard, standardize the records of cities in library B that have aliases with library A. Then combine with the routing table of the day, associate each IP address segment with the prefix of the routing table, and then associate it with the corresponding as. Then compare the location of each IP segment in the A library with that in the B library, save the records with the same location as the same IP address segment set, divide the data in the set by city and as, and create {city: as: [IP address segment collection]} set as a benchmark, for each IP segment in the benchmark set, randomly select several IPs for activity detection, use the PING tool to detect, and receive a reply that the address is considered active and will be active The IP address segment is appended to the IP address segment. If no active IP address segment is found, this IP address segment will be removed. Records with different locations are saved as a collection of disputed IP address segments. Database A locates the IP address segment as Suzhou, and library B locates the IP address segment as Nanjing. For this record, we save it as {disputed IP address segment: [Suzhou Nanjing as]}, and query the active IP address sets corresponding to AS in Suzhou and Nanjing from the benchmark set, and use the principle of similarity to find the disputed IP addresses from the active addresses For the IP address segment with the highest similarity, generate {disputed IP address segment: [Suzhou+as+the first active IP Nanjing+as+the second active IP]} dictionary. Use scamper to initiate route tracking detection on the disputed IP and the corresponding active IP, and save the results in the form of files. Convert the detected path into a path vector, and build a {IP:[path vector]} dictionary. Use the IP in the {disputed IP address segment: [Suzhou + as + the first active IP Nanjing + as + the second active IP]} dictionary as the key, find the corresponding value in the dictionary in {IP: [path vector]}, and construct { Disputed IP: [the path vector of the disputed IP, the first active IP corresponds to the path vector, the second active IP corresponds to the path vector]} dictionary. Use the DTW algorithm to compare the distances between the disputed IP and the path vectors corresponding to the first active IP and the second active IP. If the returned result shows that it is close to the first active IP address segment, then the IP address segment is considered to be located in Suzhou.

It should be noted that the methods in the embodiments of the present disclosure may be executed by a single device, such as a computer or a server. The method of this embodiment can also be applied in a distributed scenario, and is completed by cooperation of multiple devices. In the case of such a distributed scenario, one of the multiple devices may only perform one or more steps in the method of the embodiment of the present disclosure, and the multiple devices will interact with each other to complete all described method.

It should be noted that some embodiments of the present disclosure are described above. Other implementations are within the scope of the following claims. In some cases, the actions or steps recited in the claims can be performed in an order different from those in the above-described embodiments and still achieve desirable results. In addition, the processes depicted in the accompanying figures do not necessarily require the particular order shown, or sequential order, to achieve desirable results. Multitasking and parallel processing are also possible or may be advantageous in certain embodiments.

Based on the same inventive concept, and corresponding to the method in any of the foregoing embodiments, the present disclosure further provides an apparatus for determining ambiguity of an IP address geographic location.

With reference to Fig. 3, described a kind of IP address geographical location ambiguity determination device comprises:

The obtaining module 301 is configured to obtain positioning information from at least two IP positioning libraries;

A standardization processing module 302, configured to perform standardization processing on the geographic location in the positioning information;

The information association module 303 is configured to associate the IP address segment in the positioning information with the as information in the routing information table through a routing prefix;

The set construction module 304 is configured to construct the same IP address segment set based on the positioning information and the as information, and construct a disputed IP address segment set based on the positioning information and the as information;

The activity detection module 305 is configured to determine an active IP address segment set through liveness detection based on the same IP address segment set;

The associated active IP determining module 306 is configured to, based on the set of disputed IP address segments and the set of active IP address segments, determine the IP address associated with each disputed IP address segment in the set of disputed IP address segments through predetermined rules. At least two active IP address segments;

The geographic location determination module 307 is configured to respectively obtain the path vector of the disputed IP address segment and the path vectors of all the active IP address segments associated therewith through route tracing, and calculate the paths of the disputed IP address segment respectively For the distance between the vector and the path vector of each active IP address segment, the geographic location associated with the active IP address segment corresponding to the smallest distance is used as the target geographic location of the disputed IP address segment.

For the convenience of description, when describing the above devices, functions are divided into various modules and described separately. Of course, when implementing the present disclosure, the functions of each module can be implemented in one or more pieces of software and/or hardware.

The device in the above embodiment is used to implement the corresponding IP address geographic location ambiguity determination method in any of the above embodiments, and has the beneficial effects of the corresponding method embodiment, and will not be repeated here.

Based on the same inventive concept, and corresponding to the methods in any of the above embodiments, the present disclosure also provides an electronic device, including a memory, a processor, and a computer program stored in the memory and operable on the processor, the processor When the program is executed, the method for judging the ambiguity of the geographical location of the IP address described in any one of the above embodiments is realized.

FIG. 4 shows a schematic diagram of a more specific hardware structure of an electronic device provided by this embodiment. The device may include: a processor 1010 , a memory 1020 , an input/output interface 1030 , a communication interface 1040 and a bus 1050 . The processor 1010 , the memory 1020 , the input/output interface 1030 and the communication interface 1040 are connected to each other within the device through the bus 1050 .

The processor 1010 may be implemented by a general-purpose CPU (Central Processing Unit, central processing unit), a microprocessor, an application specific integrated circuit (Application Specific Integrated Circuit, ASIC), or one or more integrated circuits, and is used to execute related programs to realize the technical solutions provided by the embodiments of this specification.

The memory 1020 may be implemented in the form of ROM (Read Only Memory, read only memory), RAM (Random Access Memory, random access memory), static storage device, dynamic storage device, and the like. The memory 1020 can store operating systems and other application programs. When implementing the technical solutions provided by the embodiments of this specification through software or firmware, the relevant program codes are stored in the memory 1020 and invoked by the processor 1010 for execution.

The input/output interface 1030 is used to connect the input/output module to realize information input and output. The input/output module can be configured in the device as a component (not shown in the figure), or can be externally connected to the device to provide corresponding functions. The input device may include a keyboard, mouse, touch screen, microphone, various sensors, etc., and the output device may include a display, a speaker, a vibrator, an indicator light, and the like.

The communication interface 1040 is used to connect a communication module (not shown in the figure), so as to realize the communication interaction between the device and other devices. The communication module can realize communication through wired means (such as USB, network cable, etc.), and can also realize communication through wireless means (such as mobile network, WIFI, Bluetooth, etc.).

Bus 1050 includes a path that carries information between the various components of the device (eg, processor 1010, memory 1020, input/output interface 1030, and communication interface 1040).

It should be noted that although the above device only shows the processor 1010, the memory 1020, the input/output interface 1030, the communication interface 1040, and the bus 1050, in the specific implementation process, the device may also include other components. In addition, those skilled in the art can understand that the above-mentioned device may only include components necessary to implement the solutions of the embodiments of this specification, and does not necessarily include all the components shown in the figure.

The electronic device in the foregoing embodiments is used to implement the corresponding IP address geographic location ambiguity determination method in any of the foregoing embodiments, and has the beneficial effects of the corresponding method embodiments, which will not be repeated here.

Based on the same inventive concept, the present disclosure also provides a non-transitory computer-readable storage medium corresponding to the method in any of the above-mentioned embodiments, the non-transitory computer-readable storage medium stores computer instructions, and the computer instructions use The purpose is to make the computer execute the method for judging the ambiguity of the geographical location of the IP address as described in any one of the above embodiments.

The computer-readable medium in this embodiment includes permanent and non-permanent, removable and non-removable media, and information storage can be realized by any method or technology. Information may be computer readable instructions, data structures, modules of a program, or other data. Examples of computer storage media include, but are not limited to, phase change memory (PRAM), static random access memory (SRAM), dynamic random access memory (DRAM), other types of random access memory (RAM), read only memory (ROM), Electrically Erasable Programmable Read-Only Memory (EEPROM), Flash memory or other memory technology, Compact Disc Read-Only Memory (CD-ROM), Digital Versatile Disc (DVD) or other optical storage, Magnetic tape cartridge, tape magnetic disk storage or other magnetic storage device or any other non-transmission medium that can be used to store information that can be accessed by a computing device.

The computer instructions stored in the storage medium of the above embodiments are used to make the computer execute the method for determining the ambiguity of IP address geographic location as described in any of the above embodiments, and have the beneficial effects of the corresponding method embodiments, which will not be repeated here.

Those of ordinary skill in the art should understand that: the discussion of any of the above embodiments is exemplary only, and is not intended to imply that the scope of the present disclosure (including claims) is limited to these examples; under the idea of the present disclosure, the above embodiments or Combinations between technical features in different embodiments are also possible, steps may be implemented in any order, and there are many other variations of the different aspects of the disclosed embodiments as described above, which are not provided in detail for the sake of brevity.

In addition, for simplicity of illustration and discussion, and so as not to obscure the embodiments of the present disclosure, well-known power/supply circuits associated with integrated circuit (IC) chips and other components may or may not be shown in the provided figures. ground connection. Furthermore, devices may be shown in block diagram form in order to avoid obscuring the embodiments of the disclosure, and this also takes into account the fact that details regarding the implementation of these block diagram devices are highly dependent on the implementation of the embodiments of the disclosure to be implemented. platform (ie, the details should be well within the purview of those skilled in the art). Where specific details (eg, circuits) have been set forth to describe example embodiments of the present disclosure, it will be apparent to those skilled in the art that other applications may be made without or with variations from these specific details. Embodiments of the present disclosure are implemented below. Accordingly, these descriptions should be regarded as illustrative rather than restrictive.

Although the disclosure has been described in conjunction with specific embodiments thereof, many alternatives, modifications and variations of those embodiments will be apparent to those of ordinary skill in the art from the foregoing description. For example, other memory architectures such as dynamic RAM (DRAM) may use the discussed embodiments.

The disclosed embodiments are intended to embrace all such alterations, modifications and variations that fall within the broad scope of the appended claims. Therefore, any omissions, modifications, equivalent replacements, improvements, etc. made within the spirit and principles of the embodiments of the present disclosure shall fall within the protection scope of the present disclosure.

Claims (10)

1. A method for judging the ambiguity of an IP address geographic location, comprising: Obtain location information from at least two IP location libraries; Standardize the geographic location in the positioning information; Associating the IP address segment in the positioning information with the autonomous system as information in the routing information table through a routing prefix; Constructing the same IP address segment set based on the positioning information and the as information, and constructing a disputed IP address segment set based on the positioning information and the as information; Based on the same IP address segment set, determine the active IP address segment set through liveness detection; Based on the set of disputed IP address segments and the set of active IP address segments, determine at least two active IP address segments associated with each disputed IP address segment in the set of disputed IP address segments through predetermined rules; Obtain the path vector of the disputed IP address segment and the path vectors of all the active IP address segments associated therewith through route tracing, respectively calculate the path vector of the disputed IP address segment and each of the active IP addresses The distance of the path vector of the segment, and the geographic location associated with the active IP address segment corresponding to the smallest distance is used as the target geographic location of the disputed IP address segment. 2. The determination method according to claim 1, wherein the positioning information includes: start and end IP, country code, state/province/region and city name, and the geographic location includes country code, state/province/region and city name. 3. The judging method according to claim 1, wherein the standardization process comprises: querying the geographic location in a preset standard geographic location library, and if the geographic location is a non-standard geographic location, the The geographic location is replaced with the standard geographic location. 4. The judging method according to claim 2, wherein said constructing the same IP address segment set based on said positioning information and said as information, constructing a disputed IP address segment set based on said positioning information and said as information, include: Combining the record information corresponding to the same starting and ending IPs with the same geographical location and as information to construct the same IP address segment set, and merging the record information with the same starting and ending IPs but different geographical locations and/or as information to construct a dispute A collection of IP address segments. 5. The determination method according to claim 2, wherein said determining an active IP address segment set by liveness detection based on said same IP address segment set includes: Extract information from the same IP address segment set to build a first dictionary, the first dictionary is {city name: as: [IP address segment set]}, randomly from each IP address segment of the first dictionary Extracting part of the IP addresses, performing activity detection on them, and constructing a set of active IP address segments based on the city name, the as information and the IP address segments corresponding to the activity detection results that are active. 6. The determination method according to claim 1, wherein the predetermined rule comprises: extracting information from the set of disputed IP address segments to construct a second dictionary, the second dictionary being {disputed IP address segment: [th One disputed city, the second disputed city...the Nth disputed city as]}, based on the as information, use the similarity principle to respectively query the first disputed city, the second disputed city...the Nth disputed city in the second dictionary The active IP address segment corresponding to the disputed city in the active IP address segment set is used as the active IP address segment associated with the disputed IP address segment. 7. The judging method according to claim 6, said obtaining respectively the path vector of said disputed IP address segment and the path vectors of all said active IP address segments associated therewith through route tracing, comprising: constructing a third Dictionary, the third dictionary is {disputed IP address segment: [first disputed city+as+first active IP address segment second disputed city+as+second active IP address segment...Nth disputed city+as+Nth active IP address segment]}, initiate route tracing detection on the disputed IP address segment and all the active IP address segments in the third dictionary, and convert the path obtained through the route tracing detection into a path vector. 8. A device for determining geographical ambiguity of an IP address, comprising: An acquisition module configured to acquire location information from at least two IP location libraries; A standardization processing module configured to perform standardization processing on the geographic location in the positioning information; An information association module configured to associate the IP address segment in the positioning information with the as information in the routing information table through a routing prefix; A set construction module configured to construct the same IP address segment set based on the positioning information and the as information, and construct a disputed IP address segment set based on the positioning information and the as information; The activity detection module is configured to determine the active IP address segment set through liveness detection based on the same IP address segment set; The associated active IP determination module is configured to determine at least Two active IP address segments; The geographical location determination module is configured to respectively obtain the path vector of the disputed IP address segment and the path vectors of all the active IP address segments associated therewith through route tracing, and calculate the path vectors of the disputed IP address segment respectively For the distance from the path vector of each active IP address segment, the geographic location associated with the active IP address segment corresponding to the smallest distance is used as the target geographic location of the disputed IP address segment. 9. An electronic device, comprising a memory, a processor, and a computer program stored on the memory and executable by the processor, and the processor implements any of claims 1 to 7 when executing the computer program. one of the methods described. 10. A non-transitory computer-readable storage medium, the non-transitory computer-readable storage medium stores computer instructions, the computer instructions are used to cause a computer to perform the method according to any one of claims 1 to 7 .