Proxy IP address identification method, device, electronic equipment and storage medium

Abstract

This application relates to the field of computer technology, and discloses a proxy IP address identification method, device, electronic equipment, and storage medium. The method includes: according to a pair of SYN packets and ACKs sent by the client to the service server in the same request process packet; according to the time when the SYN packet arrives at the business server and the time when the ACK packet arrives at the business server, determine the network delay for transmitting data packets between the client and the business server; if the network delay is greater than the delay threshold, determine the network delay used by the client The IP address is the proxy IP address. The proxy IP address identification method, device, electronic equipment, and storage medium provided in the embodiments of the present application do not need to actively send detection data packets, and realize real-time online non-perceptual detection, even if the proxy server used by the client has countermeasures such as authentication and firewall. The detection function can also be effectively identified, which can improve the detection coverage.

Description

technical field [0001] The present application relates to the field of computer technology, and in particular to a proxy IP address identification method, device, electronic equipment and storage medium. Background technique [0002] With the widespread application of Internet technology, the security requirements for the network environment are getting higher and higher, and network hackers can use VPN (Virtual Private Network, virtual private network) and other technologies to hide their real IP addresses, and to detect and attack network security. Cybercrime has brought great difficulties. Therefore, there is an urgent need for a method that can identify the proxy IP address, thereby assisting in identifying malicious attacks and malicious users, and improving network security or business security. [0003] At present, the commonly used method of identifying the proxy IP address is mainly the detection method of active scanning. The detection server actively sends test da...

AI Technical Summary

Problems solved by technology

[0004] However, there are as many as 400 million active IP addresses in the real Internet, and the detection cost of scanning one by one is relatively high, and the types of proxy servers are complex, the protocol changes greatly, and the number of proxy ports is large, so it is difficult to cover them all. In addition, some proxy servers have anti- detection methods, resulting in the detection method of active scanning cannot be effectively carried out

Images