IP Pattern

Modified on Mon, 5 Aug at 2:56 PM

Fraudshield - Marks Conversions with high IP-Similarity.





Options: 

Ip Pattern

To reproduce this reason check the IP Address column inside the conversion report for conversions with the same IP range (same 1st 3 blocks), example:

  • 123.123.123.1
  • 123.123.123.2
  • 123.123.123.3


Having over 10%-15% of conversions from the same IP range is highly suspicious as these similar IPs indicate users coming from the same street, building or cellphone tower.


A very common tactic among fraudsters is making a conversion and then resetting their IP to get a new but similar one, in order to artificially increase the amount of conversions while avoiding duplicate IPs.


Click and Conversion IP Mismatch

  • Flags Conversions where the Conversion IP does not belong to the same country
  • Click / Conversion IP Exact Match Check - Checks if the Click IP is the same as the Conversion IP



Was this article helpful?

That’s Great!

Thank you for your feedback

Sorry! We couldn't be helpful

Thank you for your feedback

Let us know how can we improve this article!

Select at least one of the reasons

Feedback sent

We appreciate your effort and will try to fix the article