Follow-up on Google play’s recent delisting issue—IP identification and judgment


This issue mainly talks about how to identify the quality of proxy IPs that occupy a relatively important position in Google listings.

First of all, IP judgment has multiple dimensions. From the traditional IP quality, it is divided into bandwidth, ping value, stability, anonymity, and protocol judgment. Advanced ones include C segment, ASN, and attribute judgment (whether it is residential). .

In general, IP has many identification dimensions, and many different variables may occur under different circumstances. We will conduct some in-depth discussions specifically on these ranges.

IP ping value

Based on the ping value, we can see whether a network is directly connected or native. Taking the United States as an example, under normal circumstances, the direct connection ping value provided by high-quality IP is between 130-180, and the difference is basically around 250;

bandwidth

The second one is the bandwidth issue. Currently, bandwidth does not have a big impact on Google’s listings. This mainly affects the cloud testing section or other modules that are not easy to say but require bandwidth. Currently, the bandwidth of most cn2 is very expensive. , even if you want to get 100m, it is ridiculously expensive.

The price I asked last time was USD100$/Mbps. When pursuing the bandwidth rate of cn2, you need to consider the thickness of your wallet. There are also some BGP lines on the market that are optimized for us and can achieve relatively good rates. , but these lines are generally used for sharing, otherwise the cost cannot be afforded.

The high-speed bandwidth that can achieve direct connection on the market must either be optimized in the middle or be directly connected to enterprises. Generally, if ordinary family homes are not optimized, the delay will be very high, and the delay will cause packet loss due to the proxy attribute problem.

Our local packages that are not anonymously disguised may be uploaded directly to Google’s servers, so it is recommended that you try to optimize the mid-range network when using a proxy.

What is ASN?

ASN is an autonomous system number. Each IP group or block in the Internet will be assigned a unique ASN identification number according to the corresponding organization. It is used to identify the IP address block on the routing Internet. The autonomous system exchanges it through the Border Gateway Protocol (BGP). Routing information to achieve interconnection of different network segment blocks.

After understanding what ASN is, we understand the role that ASN plays in identifying users on the platform. Each independent cloud vendor has a unique ASN. The ASN of a certain cloud vendor and the reverse domain name behind it are constantly used on the platform.

When there are some dangerous behaviors, the platform will blacklist the ASN and the corresponding number segment. This is why some cloud vendors are easy to use at first, but become increasingly difficult to use later.

How to determine which ASN is high quality?

From the perspective of niche IP, because they are new companies and number segments, the corresponding ASN will be very long. When it is determined that the resource is niche, the longer and newer the ASN, the cleaner it will be until it is used by the majority. Users use and engage in dangerous behaviors.

In another case, the ASN is very short, as shown in the figure AS174. This ASN is most likely a pure home IP from a telecom operator. Even if there is abuse, the number segment behind it is not easy to be blacklisted because There may be hundreds of millions of users behind this kind of ASN using the backbone network services, and the platform will be more lenient in judging these ASNs.

The determination of ASN numbers is relatively basic. There are different ways to determine more abusive behaviors, such as reverse domain names and the number of times the corresponding IP segment has been abused in the platform library. If the number of abuses is too high, the platform will target the The C segment of the IP is blacklisted.

reverse domain name

How to check the reverse domain name? Take Google 8.8.8.8 as an example. Enter nslookup 8.8.8.8 to check the corresponding reverse domain name. The reverse domain name usually has the logo of the corresponding cloud vendor. Some IPs abused by crawlers will also have Records of many websites, this method is also a better way to judge whether the IP is pure.

The judgment of IP is multi-dimensional. In the future, the author will share more about Google developer account information, IP anonymity and some simulation ideas.