CN114244825B - A method and system for accurately judging the external network IP address of a network host - Google Patents

Abstract

The invention discloses a method and system for accurately judging the external network IP address of a network host. First, an HTTP service is deployed in a cloud server, and the network host initiates HTTP access to the cloud server, and the cloud server records HTTP access information of the network host; Then the network host initiates Traceroute detection to the cloud server, and uploads the Traceroute detection information to the cloud server; the cloud server obtains the IP information of the remote server from the HTTP access information of the network host, and judges the IP information of the remote server and the network host based on the IP information address database. The IP information and the attributes of each hop IP information in the Traceroute detection information are judged based on the attributes of each IP information to obtain the external network IP information of the network host.

Description

A method and system for accurately judging the external network IP address of a network host

technical field

The invention relates to the technical field of network address judgment, in particular to a method and system for accurately judging the external network IP address of a network host.

Background technique

In the analysis of network monitoring data, it is usually necessary to accurately determine the external network IP address of the network host in order to obtain more accurate network quality analysis results. However, due to the wide variety of technologies and networking methods adopted by broadband access service providers, such as xDLS, FTTH, LAN, etc., commonly used access technologies, small broadband access service providers can only provide broadband access services, requiring Relying on the network of China Telecom, China Unicom or China Mobile to access the Internet, it is technically difficult to accurately locate the external network IP of the network host.

Contents of the invention

The purpose of the present invention is to overcome the above-mentioned technical deficiencies, propose a method and system for accurately judging the IP address of a network host external network, improve the representation ability of the feature extraction network by using self-supervised learning tasks, and realize the technology of improving a small amount of labeled data classification tasks Effect.

In order to achieve the above technical purpose, the first aspect of the technical solution of the present invention provides a method for accurately judging the IP address of a network host external network, which includes the following steps:

The HTTP service is deployed in the cloud server, and the network host initiates HTTP access to the cloud server, and the cloud server records the HTTP access information of the network host;

The network host initiates Traceroute detection to the cloud server, and uploads the Traceroute detection information to the cloud server;

The cloud server obtains the IP information of the remote server and the IP information of the network host from the HTTP access information of the network host, and judges the IP information of the remote server, the IP information of the network host, and the attributes of each hop in the Traceroute detection information based on the IP information address database. The attributes of each IP information are judged to obtain the external network IP information of the network host.

The second aspect of the present invention provides a system for accurately judging the external network IP address of a network host, which includes the following functional modules:

The HTTP access module is used to deploy HTTP services in the cloud server, and the network host initiates HTTP access to the cloud server, and the cloud server records the HTTP access information of the network host;

The Traceroute detection module is used to initiate a Traceroute detection to the cloud server by the network host, and upload the Traceroute detection information to the cloud server;

The IP judging module is used for the cloud server to obtain remote server IP information and network host IP information from the network host HTTP access information, and judge the attribute of each hop IP information in the Traceroute detection information based on the IP information address library, and according to each IP information The attribute is judged to obtain the IP information of the external network of the network host.

The third aspect of the present invention provides a server, including a memory, a processor, and a computer program stored in the memory and operable on the processor. When the processor executes the computer program, the above-mentioned accurate The steps of the method for judging the IP address of the external network of the network host.

The fourth aspect of the present invention provides a computer-readable storage medium, the computer-readable storage medium stores a computer program, and when the computer program is executed by a processor, the above-mentioned method for accurately determining the IP address of a network host external network is implemented. step.

Compared with the prior art, the present invention extracts the remote server IP information and the network host IP information, judges the network host external network IP information according to the remote server IP information and the network host IP information attributes, and further according to each extracted information in the Traceroute detection information The attribute of jumping IP information and the attribute of remote server IP information are comprehensively judged, so as to judge and obtain accurate external network IP information of the network host.

Description of drawings

Fig. 1 is a block flow diagram of a method for accurately judging the external network IP address of a network host described in an embodiment of the present invention;

Fig. 2 is a block diagram of the steps of judging the IP information of the network host external network according to the embodiment of the present invention;

Fig. 3 is a module block diagram of a system for accurately judging the external network IP address of a network host according to an embodiment of the present invention.

Detailed ways

In order to make the object, technical solution and advantages of the present invention clearer, the present invention will be further described in detail below in conjunction with the accompanying drawings and embodiments. It should be understood that the specific embodiments described here are only used to explain the present invention, not to limit the present invention.

Aiming at the problem of relatively large technical difficulty in locating the external network IP of the network host in the prior art, the present invention provides a method for accurately judging the external network IP address of the network host, as shown in Figure 1, which includes the following steps:

S1. Deploying HTTP services in the cloud server, the network host initiates HTTP access to the cloud server, and the cloud server records the HTTP access information of the network host;

S2. The network host initiates a Traceroute detection to the cloud server, and uploads the Traceroute detection information to the cloud server;

S3. The cloud server obtains the IP information of the remote server and the IP information of the network host from the HTTP access information of the network host, and judges the IP information of the remote server, the IP information of the network host and the attributes of each hop of IP information in the Traceroute detection information based on the IP information address database, The IP information of the external network of the network host is obtained by judging the attributes of each IP information.

Wherein, the step S3 includes the following content:

The cloud server obtains the remote server IP information and the network host IP information from the network host HTTP access information and the network host information, and judges the attributes of the remote server IP information and the network host IP information based on the IP information address database. The attribute of the host IP information is judged to obtain the external network IP information of the network host;

When the external network IP information of the network host cannot be confirmed based on the remote server IP information and the network host IP information attributes, the cloud server extracts the IP information of each hop from the Traceroute detection information, and judges the remote server IP information and IP information based on the IP information address database. The attribute of the IP information of each hop is judged according to the IP information of the remote server and the attribute of the IP information of each hop to obtain the IP information of the external network of the network host.

Specifically, as shown in Figure 2, the process of judging the external network IP information of the network host based on the remote server IP information, network host IP information, and Traceroute detection information is as follows:

1) The cloud server obtains remote server IP information (ie REMOTE_IP) and network host IP information from the network host HTTP access information and network host information;

2) judge remote server IP information (being REMOTE_IP) and the attribute of network host IP information based on IP information address storehouse;

3) If the network host IP information is public network IP information and is the same as the remote server IP information (ie REMOTE_IP), then the network host external network IP information is the remote server IP information;

4) If the above conditions are not established, if the network host IP information is public network IP information, and is not the IP information of the three major operators of China Telecom, China Unicom and China Mobile, then the network host external network IP information is the network host IP information.

5) under the situation that none of the above conditions is established, extract the attribute of each hop IP information in the Traceroute detection information;

6) In the case that the IP information of the network host external network cannot be judged according to the attribute of the remote server IP information (ie REMOTE_IP) and the IP information of the network host, based on the judgment based on the IP information address database, if the first 5 hops in each hop of IP information are all If the public network IP information is not found, the external network IP information of the network host is the remote server IP information;

7) If public network IP information is found in the first 5 hops of IP information of each hop, and the first public network IP information found in each hop of IP information belongs to operators other than China Telecom, China Unicom and China Mobile, and the remote server IP information Belonging to the three major operators of China Telecom, China Unicom and China Mobile, the external network IP information of the network host is the first public network IP information found in the IP information of each hop; otherwise, the external network IP information of the network host is the remote server IP information.

8) Except for the above-mentioned circumstances, the IP information of the external network of the network host is the IP information of the remote server.

The present invention extracts the IP information of the remote server and the IP information of the network host, judges the IP information of the external network of the network host according to the attributes of the IP information of the remote server and the IP information of the network host, and further according to the attribute of each hop of IP information extracted from the Traceroute detection information and the remote The attributes of the server IP information are comprehensively judged, so as to judge and obtain accurate external network IP information of the network host.

As shown in Figure 3, the embodiment of the present invention also provides a system for accurately judging the external network IP address of a network host, which includes the following functional modules:

HTTP access module 10, is used for deploying HTTP service in cloud server, initiates HTTP visit to cloud server by network host, and cloud server records described network host HTTP access information;

Traceroute detection module 20, is used to initiate Traceroute detection to cloud server by network host, and Traceroute detection information is uploaded to cloud server;

The IP judging module 30 is used for the cloud server to obtain the remote server IP information and the network host IP information from the network host HTTP access information, and judge each hop in the remote server IP information, the network host IP information and the Traceroute detection information based on the IP information address library The attributes of the IP information are obtained by judging the attributes of each IP information to obtain the IP information of the external network of the network host.

The execution method of the system for accurately determining the external network IP address of the network host in this embodiment is basically the same as the above-mentioned method for accurately determining the external network IP address of the network host, so details are not described in detail.

The server in this embodiment is a device that provides computing services, and generally refers to a computer with relatively high computing capabilities that is provided to multiple consumers through the network. The server in this embodiment includes: a memory, a processor, and a system bus. The memory includes executable programs stored thereon. Those skilled in the art can understand that the structure of the terminal device in this embodiment does not constitute a limitation on the terminal device. , may include more or fewer components than shown, or combine certain components, or have different component arrangements.

The memory can be used to store software programs and modules, and the processor executes various functional applications and data processing of the terminal by running the software programs and modules stored in the memory. The memory can mainly include a program storage area and a data storage area, wherein the program storage area can store an operating system, at least one application program required by a function (such as a sound playback function, an image playback function, etc.); The data created by the use (such as audio data, phone book, etc.) and so on. In addition, the memory may include high-speed random access memory, and may also include non-volatile memory, such as at least one magnetic disk storage device, flash memory device, or other volatile solid-state storage devices.

An executable program containing a method for accurately determining the IP address of a network host on the external network is included in the memory, and the executable program can be divided into one or more modules/units, and the one or more modules/units are stored in In the memory, and executed by the processor, to complete the information acquisition and implementation process, the one or more modules/units may be a series of computer program instruction segments capable of completing specific functions, and the instruction segments are used to describe the The execution process of the computer program in the server. For example, the computer program can be divided into an HTTP access module 10 , a Traceroute detection module 20 , and an IP judgment module 30 .

The processor is the control center of the server. It uses various interfaces and lines to connect various parts of the entire terminal equipment. By running or executing software programs and/or modules stored in the memory, and calling data stored in the memory, the terminal executes Various functions and processing data, so as to carry out overall monitoring of the terminal. Optionally, the processor may include one or more processing units; preferably, the processor may integrate an application processor and a modem processor, wherein the application processor mainly processes the operating system, application programs, etc., and the modem processing The device mainly handles wireless communication. It can be understood that the foregoing modem processor may not be integrated into the processor.

The system bus is used to connect various functional components inside the computer, and can transmit data information, address information, and control information, and its type can be, for example, PCI bus, ISA bus, VESA bus, etc. The instructions of the processor are transmitted to the memory through the bus, and the memory feeds back data to the processor. The system bus is responsible for the data and instruction interaction between the processor and the memory. Of course, the system bus can also be connected to other devices, such as network interfaces, display devices, and the like.

The server should at least include a CPU, a chipset, a memory, a disk system, etc., and other components will not be repeated here.

In the embodiment of the present invention, the executable program executed by the processor included in the terminal is specifically: a method for accurately determining the external network IP address of a network host, which includes the following steps:

The HTTP service is deployed in the cloud server, and the network host initiates HTTP access to the cloud server, and the cloud server records the HTTP access information of the network host;

The network host initiates Traceroute detection to the cloud server, and uploads the Traceroute detection information to the cloud server;

The cloud server obtains the IP information of the remote server and the IP information of the network host from the HTTP access information of the network host, and judges the IP information of the remote server, the IP information of the network host, and the attributes of each hop in the Traceroute detection information based on the IP information address database. The attributes of each IP information are judged to obtain the external network IP information of the network host.

Those skilled in the art can clearly understand that for the convenience and brevity of the description, the specific working process of the above-described system, device and unit can refer to the corresponding process in the foregoing method embodiment, which will not be repeated here.

In the above-mentioned embodiments, the descriptions of each embodiment have their own emphases, and for parts that are not detailed or recorded in a certain embodiment, refer to the relevant descriptions of other embodiments.

Those skilled in the art can appreciate that the modules, units and/or method steps of the embodiments described in conjunction with the embodiments disclosed herein can be implemented by electronic hardware, or a combination of computer software and electronic hardware. Whether these functions are executed by hardware or software depends on the specific application and design constraints of the technical solution. Those skilled in the art may use different methods to implement the described functions for each specific application, but such implementation should not be regarded as exceeding the scope of the present invention.

As mentioned above, the above embodiments are only used to illustrate the technical solutions of the present invention, rather than to limit them; although the present invention has been described in detail with reference to the foregoing embodiments, those of ordinary skill in the art should understand that: it can still understand the foregoing The technical solutions recorded in each embodiment are modified, or some of the technical features are replaced equivalently; and these modifications or replacements do not make the essence of the corresponding technical solutions deviate from the spirit and scope of the technical solutions of the various embodiments of the present invention.

Claims (5)

1. A method for accurately judging the external network IP address of a network host is characterized by comprising the following steps:

deploying HTTP service in a cloud server, initiating HTTP access to the cloud server by a network host, and recording HTTP access information of the network host by the cloud server;

initiating Traceroute detection to a cloud server by a network host, and uploading Traceroute detection information to the cloud server;

the cloud server acquires remote server IP information and network host IP information from network host HTTP access information, judges the attribute of each hop of IP information in the remote server IP information, the network host IP information and Traceroute detection information based on an IP information address base, and judges the attribute of each piece of IP information to acquire network host extranet IP information;

the cloud server acquires remote server IP information and network host IP information from network host HTTP access information, judges the attribute of each hop of IP information in the remote server IP information, the network host IP information and Traceroute detection information based on an IP information address base, and judges the attribute of each piece of IP information to acquire network host extranet IP information, and the method comprises the following steps:

the cloud server acquires remote server IP information and network host IP information from the network host HTTP access information and the network host information, judges the attributes of the remote server IP information and the network host IP information based on an IP information address base, and judges according to the attributes of the remote server IP information and the network host IP information to obtain network host external network IP information;

when the cloud server cannot confirm the external network IP information of the network host under the judgment of the remote server IP information and the network host IP information attribute, the cloud server extracts the IP information of each hop from Traceroute detection information, judges the remote server IP information and the attribute of the IP information of each hop based on an IP information address base, and judges to obtain the external network IP information of the network host according to the remote server IP information and the attribute of the IP information of each hop;

the external network IP information of the network host is obtained by judging according to the IP information of the remote server and the attribute of the IP information of the network host; the method comprises the following steps:

if the IP information of the network host is public network IP information and is the same as the IP information of the remote server, the IP information of the external network of the network host is the IP information of the remote server;

under the condition that the condition is not met, if the IP information of the network host is public network IP information and is IP information of three operators, namely non-telecom, unicom and Mobile, the IP information of the network host and the external network IP information are the IP information of the network host;

the method for judging and obtaining the external network IP information of the network host according to the remote server IP information and the attribute of each hop of IP information comprises the following steps:

under the condition that the external network IP information of the network host cannot be obtained according to the remote server IP information and the attribute of the network host IP information, if the public network IP information is not found in the first 5 hops of each hop of IP information, the external network IP information of the network host is the remote server IP information;

if public network IP information is found in the first 5 hops of the IP information of each hop, the 1 st public network IP information found in the IP information of each hop belongs to operators except for telecom, unicom and Mobile, and the IP information of the remote server belongs to three operators, namely telecom, unicom and Mobile, the IP information of the external network of the network host is the 1 st public network IP information found in the IP information of each hop; otherwise, the IP information of the external network of the network host is the IP information of the remote server.

2. The method of claim 1, wherein the IP address of the external network of the network host is the IP address of the remote server, except for the case.

3. A system for accurately judging the external network IP address of a network host is characterized by comprising the following functional modules:

the HTTP access module is used for deploying HTTP service in the cloud server, the network host initiates HTTP access to the cloud server, and the cloud server records HTTP access information of the network host;

the Traceroute detection module is used for initiating Traceroute detection to the cloud server by the network host and uploading Traceroute detection information to the cloud server;

the IP judging module is used for acquiring remote server IP information and network host IP information from the network host HTTP access information by the cloud server, judging the attribute of each hop of IP information in the remote server IP information, the network host IP information and the Traceroute detection information based on the IP information address base, and judging according to the attribute of each piece of IP information to obtain the external network IP information of the network host;

the method includes the steps that the cloud server acquires remote server IP information and network host IP information from network host HTTP access information, judges the attribute of each hop of IP information in the remote server IP information, the network host IP information and Traceroute detection information based on an IP information address base, and judges the attribute of each piece of IP information to obtain network host extranet IP information, and the method includes the following steps:

the cloud server acquires remote server IP information and network host IP information from the network host HTTP access information and the network host information, judges the attributes of the remote server IP information and the network host IP information based on an IP information address base, and judges according to the attributes of the remote server IP information and the network host IP information to obtain network host external network IP information;

when the cloud server still cannot confirm the external network IP information of the network host under the judgment of the remote server IP information and the network host IP information attribute, the cloud server extracts the IP information of each hop from Traceroute detection information, judges the remote server IP information and the attribute of the IP information of each hop based on an IP information address base, and judges the external network IP information of the network host according to the remote server IP information and the attribute of the IP information of each hop;

the external network IP information of the network host is obtained by judging according to the IP information of the remote server and the attribute of the IP information of the network host; the method comprises the following steps:

if the IP information of the network host is public network IP information and is the same as the IP information of the remote server, the IP information of the external network of the network host is the IP information of the remote server;

under the condition that the condition is not satisfied, if the IP information of the network host is public network IP information and is IP information of three operators, namely non-telecom, unicom and Mobile, the IP information of the external network of the network host is the IP information of the network host;

the method for judging and obtaining the external network IP information of the network host according to the remote server IP information and the attribute of each hop of IP information comprises the following steps:

under the condition that the external network IP information of the network host cannot be obtained according to the remote server IP information and the attribute of the network host IP information, if the public network IP information is not found in the first 5 hops of each hop of IP information, the external network IP information of the network host is the remote server IP information;

if public network IP information is found in the first 5 hops of each hop of IP information, the 1 st public network IP information found in each hop of IP information belongs to operators except telecom, unicom and Mobile, and the remote server IP information belongs to three operators, namely telecom, unicom and Mobile, the network host external network IP information is the 1 st public network IP information found in each hop of IP information; otherwise, the external network IP information of the network host is the IP information of the remote server.

4. A server comprising a memory, a processor and a computer program stored in the memory and executable on the processor, wherein the processor when executing the computer program implements the steps of the method for accurately determining an IP address of an external network of a network host according to any one of claims 1 to 2.

5. A computer-readable storage medium, in which a computer program is stored, which, when being executed by a processor, carries out the steps of the method for accurately determining an IP address of an external network of a network host according to any one of claims 1 to 2.

Images