Cyberthreats Map | Cyberthreat Intelligence

IPQS Cyberthreat Map & Residential Proxy Detection

IPQS Threat Network Volume

Detection events for data scored in the past 24 hours.

Residential Proxies & Botnets Residential botnets & compromised devices.	64,177,537
Abusive TOR & VPNs High risk connections in data centers.	92,791,634
Malicious Bots Non-human and automated behavior.	31,106,753
Fraudulent Transactions Stolen credit cards and user data.	2,123,386
Invalid & Disconnected Phone Numbers Low quality, abusive phone numbers.	769,073
Invalid & Abusive Email Addresses Email addresses associated with fraudsters.	5,975,048

Trending Fraud Fusion™ Threats

Abusive User Action 8%
Emulators 16%
App Install Fraud 9%
Payment Chargeback 2%
Suspicious Payment 4%
Stolen User Data 14%

Abuse Issues

Cyberthreat Intelligence Sources

Most Abusive Networks

COLT Technology Services Group Limited	GB
PJSC Rostelecom	RU
Micron21 Datacentre Pty Ltd	AU
KDDI CORPORATION	JP
PJSC MegaFon	RU
CenturyLink Communications	US

Mobile Device Threats

Mobile Safari 12.1	iOS 12.4
Mobile Safari 10	iOS 10.3
Mobile Safari	iOS 15.1
Chrome Mobile 103	Android 12.0
Chrome Mobile iOS 103	iOS 15.3
Chrome Mobile 70	Android 8.1

Residential Botnet Devices

Chrome 105	Windows 10
Chrome 87	Windows 10
Chrome 104	Windows 10
Microsoft Edge 18	Windows 10
Chrome 79	Windows 7
Chrome 78	Windows 7

IPQS Fraud Detection Threat Network

Explore cyber data across the IPQS Threat Network for a wide range of abusive actions across the internet. Monitor residential botnets and infected devices that allow cybercriminals to engage in malicious behavior.

IPQS threat tools provide quick lookups to check IP address reputation and scan URLs for malware. Improve fraud detection models with intelligent scoring that identifies sophisticated abuse like ATO, fake account creation fraud, bots, chargebacks, and much more.

Learn about the IPQS Fraud Detection Threat Network

Live API Threat Feeds & Databases

Score users, clicks, and payments with real-time risk analysis by IPQS. Identify bots, stolen user data, malicious behavior, and fraudulent payments with advanced reputation checks — enhanced by scoring over 1 billion actions per day.

View API Docs » — OR — Grab a Free Account »

What Is The IPQS Threat Network?

IPQS serves threat intelligence feeds directly to Fortune 500s and the internet's largest financial institutions, ad networks, payment processors, and leading brands in ride share, dating, gaming, and travel. Many of our clients also feed threat data back into our ecosystem, allowing IPQS to detect new threats faster than any other service.

Fraud Fusion™ intelligently parses this data stream to perform accurate reputation checks across IP addresses, clicks, user data, and transactions. IPQS clients benefit by feeding behavior data and submitting abuse reports to improve scoring across the IPQS threat network. IPQS customers gain a significant edge in cyberthreat intelligence by tapping into a live network of data for abusive users and cybercriminals.

Want to learn more about our threat intelligence feeds? Book a demo below to learn how IPQS is outperforming other threat providers by over 40%.

Book a Demo »

Looking for Threat Data?

View malicious behavior and the latest cyberthreats with a different angle than legacy providers. Easily identify residential botnets and infected devices with over 10 years of technology powering the perfect threat network. Solve common issues with abusive users and fraudulent behavior for any industry:

Account Takeover Protection and phishing risk mitigation
Bot Detection with device fingerprinting and behavior analysis
IP Reputation & Proxy Detection including VPN & residential proxy detection
Chargeback Protection and payment approval screening
User & Application Validation including phone validation and email verification
Click Fraud Detection and ad fraud solutions

Live Threat Intelligence Feeds For SOAR/SIEMs

Integrate IPQS live threat intelligence feeds to ensure your network is protected from the latest threats from account takeover (ATO), business compromised emails (BEC), cyber attacks, bot attacks, and much more. Integrate directly into your favorite platforms such as Splunk, Cortex XSOAR & Demisto, Sumo Logic, IBM QRadar, ThreatConnect, and many more.