CountryGrouping: Difference between revisions
(Review: replaced duplicate Scaling content with relevant Country Grouping and GeoIP documentation) |
(Review: přidán diagram GeoIP priority, Note box pro troubleshooting, doplněna Key Question) |
||
| Line 17: | Line 17: | ||
=== Service Priority === | === Service Priority === | ||
VoIPmonitor uses GeoIP services in the following order: | VoIPmonitor uses GeoIP services in the following order: | ||
<kroki lang="mermaid"> | |||
%%{init: {'flowchart': {'nodeSpacing': 15, 'rankSpacing': 40}}}%% | |||
flowchart TB | |||
A[IP Lookup Request] --> B{MaxMind API<br/>configured?} | |||
B -->|Yes| C[Use MaxMind] | |||
B -->|No| D{IPInfoDB API<br/>configured?} | |||
D -->|Yes| E[Use IPInfoDB] | |||
D -->|No| F[Local Database] | |||
F --> G{Data found?} | |||
G -->|Yes| H[Return Country] | |||
G -->|No| I[Free Portals<br/>fallback] | |||
C --> H | |||
E --> H | |||
I --> H | |||
</kroki> | |||
# '''MaxMind API''' (if API key is configured) | # '''MaxMind API''' (if API key is configured) | ||
# '''IPInfoDB API''' (if API key is configured and MaxMind not available) | # '''IPInfoDB API''' (if API key is configured and MaxMind not available) | ||
| Line 30: | Line 48: | ||
=== Country/Continent Destination Alert (Realtime) === | === Country/Continent Destination Alert (Realtime) === | ||
Triggers when calls are made to specific countries or continents. | Triggers when calls are made to specific countries or continents. | ||
| Line 43: | Line 62: | ||
=== Change CDR Country Alert (CDR-based) === | === Change CDR Country Alert (CDR-based) === | ||
Detects when the IP address of a caller or callee changes to a different country between calls. | Detects when the IP address of a caller or callee changes to a different country between calls. | ||
| Line 55: | Line 75: | ||
=== Change REGISTER Country Alert (CDR-based) === | === Change REGISTER Country Alert (CDR-based) === | ||
Detects when a device's registration IP address changes to a different country. | Detects when a device's registration IP address changes to a different country. | ||
| Line 86: | Line 107: | ||
=== GeoIP Data Not Showing === | === GeoIP Data Not Showing === | ||
* Check GeoIP configuration in System Configuration | * Check GeoIP configuration in System Configuration | ||
* Verify GUI can reach voipmonitor.org for database updates | * Verify GUI can reach voipmonitor.org for database updates | ||
| Line 91: | Line 113: | ||
=== Incorrect Country Detection === | === Incorrect Country Detection === | ||
{{Note|GeoIP databases are not 100% accurate. Detection is based on IP address allocation data which may be outdated or incorrect for some ranges.}} | |||
* Submit corrections to MaxMind: [https://www.maxmind.com/en/geoip-correction MaxMind Correction Form] | * Submit corrections to MaxMind: [https://www.maxmind.com/en/geoip-correction MaxMind Correction Form] | ||
* After MaxMind updates, notify VoIPmonitor support for GUI release with updated data | * After MaxMind updates, notify VoIPmonitor support for GUI release with updated data | ||
== See Also == | == See Also == | ||
* [[Anti-fraud]] - Complete anti-fraud alert configuration | * [[Anti-fraud]] - Complete anti-fraud alert configuration | ||
* [[Order_of_GeoIP_processing]] - GeoIP service priority and manual updates | * [[Order_of_GeoIP_processing]] - GeoIP service priority and manual updates | ||
| Line 103: | Line 128: | ||
== AI Summary for RAG == | == AI Summary for RAG == | ||
'''Summary:''' Guide to country grouping and GeoIP-based features in VoIPmonitor. Covers GeoIP service configuration (MaxMind | '''Summary:''' Guide to country grouping and GeoIP-based features in VoIPmonitor. Covers GeoIP service configuration (MaxMind API → IPInfoDB API → local database → free portals fallback), country-based anti-fraud alerts (Country/Continent Destination for real-time detection of calls to high-fraud destinations, Change CDR Country for detecting caller IP country changes between calls, Change REGISTER Country for detecting device registration from different countries), country filtering in CDR views, and integration with IP Groups. GeoIP enables geographic analysis, fraud detection, and compliance with calling restrictions. | ||
'''Keywords:''' country grouping, GeoIP, MaxMind, IPInfoDB, country filtering, anti-fraud, country destination alert, change CDR country, change REGISTER country, geographic location, IP geolocation, fraud detection, country whitelist, exclude countries, continent alert | '''Keywords:''' country grouping, GeoIP, MaxMind, IPInfoDB, country filtering, anti-fraud, country destination alert, change CDR country, change REGISTER country, geographic location, IP geolocation, fraud detection, country whitelist, exclude countries, continent alert | ||
| Line 117: | Line 142: | ||
* Can I combine country alerts with IP Groups? | * Can I combine country alerts with IP Groups? | ||
* How do I troubleshoot incorrect country detection? | * How do I troubleshoot incorrect country detection? | ||
* What is the GeoIP service priority order? | |||
Revision as of 18:00, 6 January 2026
This guide covers country-based grouping and GeoIP features in VoIPmonitor, including country filtering, anti-fraud alerts based on geographic location, and country-based CDR analysis.
Overview
VoIPmonitor uses GeoIP databases to determine the geographic location of IP addresses. This enables:
- Country-based filtering in CDR views
- Anti-fraud alerts for destination countries/continents
- Detection of country changes for registered devices
- Geographic analysis and reporting
GeoIP Configuration
GeoIP services are configured in GUI Settings → System Configuration → GeoIP.
Service Priority
VoIPmonitor uses GeoIP services in the following order:
- MaxMind API (if API key is configured)
- IPInfoDB API (if API key is configured and MaxMind not available)
- Local database (updated with each GUI release)
- Free demo portals (fallback: ipinfodb, freegeoip, maxmind)
For detailed GeoIP configuration, see Order_of_GeoIP_processing.
Country-Based Anti-Fraud Alerts
VoIPmonitor provides several anti-fraud alerts that use country detection. These are configured in GUI → Alerts → Anti Fraud.
Country/Continent Destination Alert (Realtime)
Triggers when calls are made to specific countries or continents.
Use cases:
- Block or alert on calls to high-fraud destinations
- Monitor international call patterns
- Enforce geographic calling restrictions
Configuration:
- Select target countries or continents
- Set threshold (number of calls or percentage)
- Configure notification (email, script)
Change CDR Country Alert (CDR-based)
Detects when the IP address of a caller or callee changes to a different country between calls.
Use cases:
- Detect compromised accounts being used from different locations
- Identify VPN/proxy usage
- Monitor for credential theft
Configuration:
- Exclude countries: Whitelist of allowed countries (e.g., if users legitimately travel between certain countries)
- Filter by specific numbers or IP ranges
Change REGISTER Country Alert (CDR-based)
Detects when a device's registration IP address changes to a different country.
Use cases:
- Detect SIP account takeover
- Monitor device mobility
- Identify suspicious registration patterns
Country Filtering in CDR
When GeoIP is enabled, you can filter CDR records by country in the GUI:
- Go to CDR → Filter
- Use the country filter fields in the filter form
- Select specific countries from the dropdown
This allows you to:
- View all calls to/from a specific country
- Analyze traffic patterns by geographic region
- Generate country-specific reports
Integration with IP Groups
For more granular control, combine GeoIP features with IP Groups:
- Create IP Groups for known provider IPs per country
- Use Groups in alert filters for precise targeting
- Combine country-based alerts with IP-based filtering
Troubleshooting
GeoIP Data Not Showing
- Check GeoIP configuration in System Configuration
- Verify GUI can reach voipmonitor.org for database updates
- See manual GeoIP database update
Incorrect Country Detection
ℹ️ Note: GeoIP databases are not 100% accurate. Detection is based on IP address allocation data which may be outdated or incorrect for some ranges.
- Submit corrections to MaxMind: MaxMind Correction Form
- After MaxMind updates, notify VoIPmonitor support for GUI release with updated data
See Also
- Anti-fraud - Complete anti-fraud alert configuration
- Order_of_GeoIP_processing - GeoIP service priority and manual updates
- Groups - IP Groups and Telephone Number Groups
- Alerts - General alert configuration
AI Summary for RAG
Summary: Guide to country grouping and GeoIP-based features in VoIPmonitor. Covers GeoIP service configuration (MaxMind API → IPInfoDB API → local database → free portals fallback), country-based anti-fraud alerts (Country/Continent Destination for real-time detection of calls to high-fraud destinations, Change CDR Country for detecting caller IP country changes between calls, Change REGISTER Country for detecting device registration from different countries), country filtering in CDR views, and integration with IP Groups. GeoIP enables geographic analysis, fraud detection, and compliance with calling restrictions.
Keywords: country grouping, GeoIP, MaxMind, IPInfoDB, country filtering, anti-fraud, country destination alert, change CDR country, change REGISTER country, geographic location, IP geolocation, fraud detection, country whitelist, exclude countries, continent alert
Key Questions:
- How do I filter CDR by country in VoIPmonitor?
- How do I set up country-based anti-fraud alerts?
- What is the Change CDR Country alert?
- How do I detect when a device registers from a different country?
- How do I whitelist countries in anti-fraud alerts?
- What GeoIP services does VoIPmonitor use?
- How do I configure country destination alerts?
- Can I combine country alerts with IP Groups?
- How do I troubleshoot incorrect country detection?
- What is the GeoIP service priority order?