Cyberthreats Map | Cyberthreat Intelligence

IPQS Cyberthreat Map & Residential Proxy Detection

IPQS Threat Network Volume

Detection events for data scored in the past 24 hours.

Residential Proxies & Botnets Residential botnets & compromised devices.	64,139,982
Abusive TOR & VPNs High risk connections in data centers.	92,795,989
Malicious Bots Non-human and automated behavior.	31,139,911
Fraudulent Transactions Stolen credit cards and user data.	2,123,912
Invalid & Disconnected Phone Numbers Low quality, abusive phone numbers.	768,753
Invalid & Abusive Email Addresses Email addresses associated with fraudsters.	5,974,923

Trending Fraud Fusion™ Threats

Web Scraping 11%
Abusive User Action 14%
Disposable Emails 3%
Fake User Registration 5%
Credential Stuffing 7%
Account Takeover (ATO) 3%

Abuse Issues

Cyberthreat Intelligence Sources

Most Abusive Networks

Choopa, LLC	US
SoftLayer Technologies Inc.	US
Spectrum	US
NTT America, Inc.	US
NTT Communications Corporation	JP
ColocationIX GmbH	DE

Mobile Device Threats

Mobile Safari	iOS 15.1
Chrome Mobile iOS 103	iOS 15.3
Mobile Safari 14	iOS 15.1
Chrome Mobile 78	Android 7.0
Chrome Mobile 101	Android 12.0
Chrome Mobile 100	Android 8.1

Residential Botnet Devices

Microsoft Edge 18	Windows 10
Chrome 79	Windows 7
Chrome 103	Windows 10
Chrome 76	Windows 100
Internet Explorer 11.0	Windows 10
Chrome 73	Windows 10

IPQS Fraud Detection Threat Network

Explore cyber data across the IPQS Threat Network for a wide range of abusive actions across the internet. Monitor residential botnets and infected devices that allow cybercriminals to engage in malicious behavior.

IPQS threat tools provide quick lookups to check IP address reputation and scan URLs for malware. Improve fraud detection models with intelligent scoring that identifies sophisticated abuse like ATO, fake account creation fraud, bots, chargebacks, and much more.

Learn about the IPQS Fraud Detection Threat Network

Live API Threat Feeds & Databases

Score users, clicks, and payments with real-time risk analysis by IPQS. Identify bots, stolen user data, malicious behavior, and fraudulent payments with advanced reputation checks — enhanced by scoring over 1 billion actions per day.

View API Docs » — OR — Grab a Free Account »

What Is The IPQS Threat Network?

IPQS serves threat intelligence feeds directly to Fortune 500s and the internet's largest financial institutions, ad networks, payment processors, and leading brands in ride share, dating, gaming, and travel. Many of our clients also feed threat data back into our ecosystem, allowing IPQS to detect new threats faster than any other service.

Fraud Fusion™ intelligently parses this data stream to perform accurate reputation checks across IP addresses, clicks, user data, and transactions. IPQS clients benefit by feeding behavior data and submitting abuse reports to improve scoring across the IPQS threat network. IPQS customers gain a significant edge in cyberthreat intelligence by tapping into a live network of data for abusive users and cybercriminals.

Want to learn more about our threat intelligence feeds? Book a demo below to learn how IPQS is outperforming other threat providers by over 40%.

Book a Demo »

Looking for Threat Data?

View malicious behavior and the latest cyberthreats with a different angle than legacy providers. Easily identify residential botnets and infected devices with over 10 years of technology powering the perfect threat network. Solve common issues with abusive users and fraudulent behavior for any industry:

Account Takeover Protection and phishing risk mitigation
Bot Detection with device fingerprinting and behavior analysis
IP Reputation & Proxy Detection including VPN & residential proxy detection
Chargeback Protection and payment approval screening
User & Application Validation including phone validation and email verification
Click Fraud Detection and ad fraud solutions

Live Threat Intelligence Feeds For SOAR/SIEMs

Integrate IPQS live threat intelligence feeds to ensure your network is protected from the latest threats from account takeover (ATO), business compromised emails (BEC), cyber attacks, bot attacks, and much more. Integrate directly into your favorite platforms such as Splunk, Cortex XSOAR & Demisto, Sumo Logic, IBM QRadar, ThreatConnect, and many more.