ClearIP Documentation

Fraud

When ClearIP detects that excessive calls have been made, a ClearIP trigger event is activated, and an alert can be sent. ClearIP can be configured to send an alert in up to 3 different methods: email, text message, or HTTP POST to a specified URL.

HTTP POST to Alert URL

Here is an example of the contents of an alert HTTP POST sent by ClearIP for a Slow Traffic Pumping by User and Calling Number Trigger Event.

{
  "action": "report-only",
  "actionEndTime": 1577973558312,
  "actionStartTime": 1577969958312,
  "actionTime": 60,
  "alertEmail": "example@transnexus.com",
  "alertPhone": "",
  "alertUrl": "",
  "bucketSize": 60,
  "calledCountry": "99999999-9999-4999-9999-999999999999",
  "calledNumber": "",
  "callingNumber": "14072855050",
  "fraudScore": 4.0342,
  "fraudScoreThreshold": 4,
  "group": "99999999-9999-4999-9999-999999999999",
  "id": "99999999-9999-4999-9999-999999999999",
  "operator": "99999999-9999-4999-9999-999999999999",
  "reseller": "99999999-9999-4999-9999-999999999999",
  "serviceProvider": "99999999-9999-4999-9999-999999999999",
  "type": "slow-traffic-pumping-by-user-and-calling-number",
  "user": "99999999-9999-4999-9999-999999999999",
}

ClearIP uses the following IP ranges to send HTTP POSTs:

  • 35.175.114.64/26
  • 44.234.113.32/27
Fraud