15. A system for profiling an Internet endpoint associated with an Internet endpoint identifier, comprising: a hardware processor; a profiling rule generator executing on the hardware processor to generate a profiling rule using an Internet search engine; and a profiler operatively coupled to the profiling rule generator, executing on the hardware processor to: obtain a search result by inputting the Internet endpoint identifier as a search phrase to the Internet search engine; and classify the Internet endpoint based on the search result using the profiling rule, wherein the Internet endpoint identifier comprises at least one selected from a group consisting of an Internet Protocol (IP) address, a domain name, and an IP prefix, wherein the profiling rule comprises a IP tag and a key phrase list having a phrase associated with a URL class, the URL class being associated with the IP tag, wherein the profiling rule further comprises a data structure having an entry, the entry having a first domain name associated with the phrase, wherein the data structure is a cache having a plurality of indexes corresponding to a plurality of values, the plurality of indexes comprising the first domain name, the plurality of values comprising the phrase, wherein the search result comprises: a Uniform Resource Locator (URL) having a second domain name; and a hit text associated with the URL, the hit text comprising the phrase in the key phrase list, wherein classifying the Internet endpoint comprises: assigning the URL class to the URL and assigning the IP tag to the Internet end point in determining the first domain name is the same as the second domain name, wherein generating the profiling rule comprises: adding an index comprising the second domain name to the cache in determining the plurality of indexes do not comprise the second domain name; setting a counter to an initial count; obtaining another search result by inputting another Internet endpoint domain name to the Internet search engine, the another search result comprising another hit text associated with another URL; the another hit text comprising another phrase in the key phrase list; incrementing the counter in determining the another URL comprises the second domain name; and setting a value in the cache corresponding to the index based on at least one selected from a group consisting of the phrase and the another phrase in determining the counter exceeds a pre-determined threshold.
15. A system for profiling an Internet endpoint associated with an Internet endpoint identifier, comprising: a hardware processor; a profiling rule generator executing on the hardware processor to generate a profiling rule using an Internet search engine; and a profiler operatively coupled to the profiling rule generator, executing on the hardware processor to: obtain a search result by inputting the Internet endpoint identifier as a search phrase to the Internet search engine; and classify the Internet endpoint based on the search result using the profiling rule, wherein the Internet endpoint identifier comprises at least one selected from a group consisting of an Internet Protocol (IP) address, a domain name, and an IP prefix, wherein the profiling rule comprises a IP tag and a key phrase list having a phrase associated with a URL class, the URL class being associated with the IP tag, wherein the profiling rule further comprises a data structure having an entry, the entry having a first domain name associated with the phrase, wherein the data structure is a cache having a plurality of indexes corresponding to a plurality of values, the plurality of indexes comprising the first domain name, the plurality of values comprising the phrase, wherein the search result comprises: a Uniform Resource Locator (URL) having a second domain name; and a hit text associated with the URL, the hit text comprising the phrase in the key phrase list, wherein classifying the Internet endpoint comprises: assigning the URL class to the URL and assigning the IP tag to the Internet end point in determining the first domain name is the same as the second domain name, wherein generating the profiling rule comprises: adding an index comprising the second domain name to the cache in determining the plurality of indexes do not comprise the second domain name; setting a counter to an initial count; obtaining another search result by inputting another Internet endpoint domain name to the Internet search engine, the another search result comprising another hit text associated with another URL; the another hit text comprising another phrase in the key phrase list; incrementing the counter in determining the another URL comprises the second domain name; and setting a value in the cache corresponding to the index based on at least one selected from a group consisting of the phrase and the another phrase in determining the counter exceeds a pre-determined threshold. 20. The system of claim 15 , wherein the profiling rule generator is further to: identify a plurality of top ranked endpoints from at least a portion of the Internet based on traffic flow distribution associated with at least the portion of the Internet; classify the plurality of top ranked endpoints using the profiling rule to generate a plurality of IP tags; identify a plurality of server tags from the plurality of IP tags based on semantics; and classify a traffic flow having a source IP address and a destination IP address according to the plurality of server tags based on semantics, wherein an IP tag of at least one selected from a group consisting of the source IP address and the destination IP address matches at least one of the plurality of IP tags.