000031385 - AAH-What is the "High Velocity IP Address" List?

Document created by RSA Customer Support Employee on Jun 14, 2016Last modified by RSA Customer Support Employee on Apr 21, 2017
Version 2Show Document
  • View in full screen mode

Article Content

Article Number000031385
Applies ToRSA Product Set: Adaptive Authentication (Hosted)
IssueA customer is interested in setting up a rule that deals with potentially fraudulent IP addresses and wants to know what the  "High Velocity IP Address" List is
ResolutionThis list is created by our ORE (Offline Risk Engine.) The ORE runs once per day to look at data that was not available when a transaction was initially reviewed and scored but the online risk engine. The list is created by adding IPs that have been seen being used by multiple users for transactions. These transactions can be seen by any customer who uses the ORE. .These IPs were removed from the list 3 days later as the list was once again updated by the ORE because these IPs no longer met the criteria of high IP velocity.