Cyberthreats Map | Cyberthreat Intelligence

IPQS Cyberthreat Map & Residential Proxy Detection

IPQS Threat Network Volume

Detection events for data scored in the past 24 hours.

Residential Proxies & Botnets Residential botnets & compromised devices.	64,122,630
Abusive TOR & VPNs High risk connections in data centers.	92,541,905
Malicious Bots Non-human and automated behavior.	30,980,640
Fraudulent Transactions Stolen credit cards and user data.	2,123,189
Invalid & Disconnected Phone Numbers Low quality, abusive phone numbers.	768,529
Invalid & Abusive Email Addresses Email addresses associated with fraudsters.	5,974,710

Trending Fraud Fusion™ Threats

Private Botnet 5%
Residential Botnet 11%
Suspicious Payment 5%
Suspicious Login 7%
Stolen User Data 10%
Account Takeover (ATO) 3%

Abuse Issues

Cyberthreat Intelligence Sources

Most Abusive Networks

Choopa, LLC	US
KDDI CORPORATION	JP
Bell Canada	CA
Amazon.com, Inc.	US
PT. Telkomsel	ID
CenturyLink Communications	US

Mobile Device Threats

Mobile Safari 10	iOS 10.3
Chrome Mobile 101	Android
Chrome Mobile 102	Android 12.0
Chrome Mobile 103	Android 12.0
Chrome Mobile 100	Android
Mobile Safari	iOS 15.1

Residential Botnet Devices

Chrome 104	Windows 10
Chrome 73	Windows 10
Chrome 103	Windows 10
Chrome 80	Mac 10.15
Chrome 88	Windows 7
Chrome 80	Windows 8.1

IPQS Fraud Detection Threat Network

Explore cyber data across the IPQS Threat Network for a wide range of abusive actions across the internet. Monitor residential botnets and infected devices that allow cybercriminals to engage in malicious behavior.

IPQS threat tools provide quick lookups to check IP address reputation and scan URLs for malware. Improve fraud detection models with intelligent scoring that identifies sophisticated abuse like ATO, fake account creation fraud, bots, chargebacks, and much more.

Learn about the IPQS Fraud Detection Threat Network

Live API Threat Feeds & Databases

Score users, clicks, and payments with real-time risk analysis by IPQS. Identify bots, stolen user data, malicious behavior, and fraudulent payments with advanced reputation checks — enhanced by scoring over 1 billion actions per day.

View API Docs » — OR — Grab a Free Account »

What Is The IPQS Threat Network?

IPQS serves threat intelligence feeds directly to Fortune 500s and the internet's largest financial institutions, ad networks, payment processors, and leading brands in ride share, dating, gaming, and travel. Many of our clients also feed threat data back into our ecosystem, allowing IPQS to detect new threats faster than any other service.

Fraud Fusion™ intelligently parses this data stream to perform accurate reputation checks across IP addresses, clicks, user data, and transactions. IPQS clients benefit by feeding behavior data and submitting abuse reports to improve scoring across the IPQS threat network. IPQS customers gain a significant edge in cyberthreat intelligence by tapping into a live network of data for abusive users and cybercriminals.

Want to learn more about our threat intelligence feeds? Book a demo below to learn how IPQS is outperforming other threat providers by over 40%.

Book a Demo »

Looking for Threat Data?

View malicious behavior and the latest cyberthreats with a different angle than legacy providers. Easily identify residential botnets and infected devices with over 10 years of technology powering the perfect threat network. Solve common issues with abusive users and fraudulent behavior for any industry:

Account Takeover Protection and phishing risk mitigation
Bot Detection with device fingerprinting and behavior analysis
IP Reputation & Proxy Detection including VPN & residential proxy detection
Chargeback Protection and payment approval screening
User & Application Validation including phone validation and email verification
Click Fraud Detection and ad fraud solutions

Live Threat Intelligence Feeds For SOAR/SIEMs

Integrate IPQS live threat intelligence feeds to ensure your network is protected from the latest threats from account takeover (ATO), business compromised emails (BEC), cyber attacks, bot attacks, and much more. Integrate directly into your favorite platforms such as Splunk, Cortex XSOAR & Demisto, Sumo Logic, IBM QRadar, ThreatConnect, and many more.