Cyberthreats Map | Cyberthreat Intelligence

IPQS Cyberthreat Map & Residential Proxy Detection

IPQS Threat Network Volume

Detection events for data scored in the past 24 hours.

Residential Proxies & Botnets Residential botnets & compromised devices.	64,155,414
Abusive TOR & VPNs High risk connections in data centers.	92,182,909
Malicious Bots Non-human and automated behavior.	31,421,669
Fraudulent Transactions Stolen credit cards and user data.	2,123,474
Invalid & Disconnected Phone Numbers Low quality, abusive phone numbers.	768,064
Invalid & Abusive Email Addresses Email addresses associated with fraudsters.	5,975,044

Trending Fraud Fusion™ Threats

Fake User Application 3%
Suspicious Login 5%
Location Spoofing 6%
App Install Fraud 11%
Abusive VPNs 9%
Suspicious Payment 2%

Abuse Issues

Cyberthreat Intelligence Sources

Most Abusive Networks

TekSavvy Solutions, Inc.	CA
ColocationIX GmbH	DE
M247 Ltd	GB
Shanghai Huajuan Information Technology	CN
Verizon Fios	US
Verizon Wireless	US

Mobile Device Threats

Chrome Mobile 101	Android 12.0
Chrome Mobile iOS 103	iOS 15.3
Chrome Mobile 79	Android 7.0
Chrome Mobile 78	Android 7.0
Mobile Safari	iOS 15.1
Chrome Mobile 100	Android

Residential Botnet Devices

Chrome 90	Windows 7
Chrome 80	Mac 10.14
Chrome 76	Windows 100
Chrome 88	Windows 7
Safari 15.5	Mac 10.15
Chrome 101	Windows 10

IPQS Fraud Detection Threat Network

Explore cyber data across the IPQS Threat Network for a wide range of abusive actions across the internet. Monitor residential botnets and infected devices that allow cybercriminals to engage in malicious behavior.

IPQS threat tools provide quick lookups to check IP address reputation and scan URLs for malware. Improve fraud detection models with intelligent scoring that identifies sophisticated abuse like ATO, fake account creation fraud, bots, chargebacks, and much more.

Learn about the IPQS Fraud Detection Threat Network

Live API Threat Feeds & Databases

Score users, clicks, and payments with real-time risk analysis by IPQS. Identify bots, stolen user data, malicious behavior, and fraudulent payments with advanced reputation checks — enhanced by scoring over 1 billion actions per day.

View API Docs » — OR — Grab a Free Account »

What Is The IPQS Threat Network?

IPQS serves threat intelligence feeds directly to Fortune 500s and the internet's largest financial institutions, ad networks, payment processors, and leading brands in ride share, dating, gaming, and travel. Many of our clients also feed threat data back into our ecosystem, allowing IPQS to detect new threats faster than any other service.

Fraud Fusion™ intelligently parses this data stream to perform accurate reputation checks across IP addresses, clicks, user data, and transactions. IPQS clients benefit by feeding behavior data and submitting abuse reports to improve scoring across the IPQS threat network. IPQS customers gain a significant edge in cyberthreat intelligence by tapping into a live network of data for abusive users and cybercriminals.

Want to learn more about our threat intelligence feeds? Book a demo below to learn how IPQS is outperforming other threat providers by over 40%.

Book a Demo »

Looking for Threat Data?

View malicious behavior and the latest cyberthreats with a different angle than legacy providers. Easily identify residential botnets and infected devices with over 10 years of technology powering the perfect threat network. Solve common issues with abusive users and fraudulent behavior for any industry:

Account Takeover Protection and phishing risk mitigation
Bot Detection with device fingerprinting and behavior analysis
IP Reputation & Proxy Detection including VPN & residential proxy detection
Chargeback Protection and payment approval screening
User & Application Validation including phone validation and email verification
Click Fraud Detection and ad fraud solutions

Live Threat Intelligence Feeds For SOAR/SIEMs

Integrate IPQS live threat intelligence feeds to ensure your network is protected from the latest threats from account takeover (ATO), business compromised emails (BEC), cyber attacks, bot attacks, and much more. Integrate directly into your favorite platforms such as Splunk, Cortex XSOAR & Demisto, Sumo Logic, IBM QRadar, ThreatConnect, and many more.