Brazil (BR) Threat Intelligence

BR

Brazil has 77,549 malicious IP addresses with 3,740,419 abuse reports. Top threat categories include suspicious activity, severe abuse, moderate threat, high threat, ssh bruteforce. Top attacking networks: Claro NXT Telecomunicacoes Ltda (3,444 IPs), TELEFONICA BRASIL S.A (1,982 IPs), TELEFONICA BRASIL S.A (1,749 IPs). Data collected since 2022-12-15, last activity 2026-04-06.

Threat Assessment: Brazil shows substantial cyber threat activity, ranking among the top threat source countries worldwide. The dominant attack types are suspicious activity, severe abuse, moderate threat. The majority of threats originate from networks operated by Claro NXT Telecomunicacoes Ltda and TELEFONICA BRASIL S.A.

Total Reports
3,740,419
Unique IPs
77,549
First Seen
2022-12-15
Last Activity
2026-04-06

Top Threat Categories

Suspicious Activity 121,401
Severe Abuse 25,579
Moderate Threat 6,909
High Threat 4,369
Ssh Bruteforce 3,412

Top Attacking Networks

AS28573 Claro NXT Telecomunicacoes Ltda
3,444 IPs
AS27699 TELEFONICA BRASIL S.A
1,982 IPs
AS26599 TELEFONICA BRASIL S.A
1,749 IPs

Most Reported IPs in Brazil

170.82.104.76 808 reports
201.149.107.50 360 reports
187.16.96.250 328 reports
189.50.142.82 303 reports
138.255.176.234 283 reports

Access this data via API

Get Brazil threat intelligence programmatically.

curl https://ip.wayscloud.services/api/country/BR

View full API documentation

See how we classify and verify threats →

Check any IP from Brazil

Look up threat intelligence for a specific IP address.

Related: Country Threat Ranking Country Risk Trends → Top Malicious IPs → AS28573 Intelligence AS27699 Intelligence AS26599 Intelligence Global Attack Trends Detect Malicious Traffic

Loading threat intelligence data...