Brazil (BR) Threat Intelligence

BR

Brazil has 221,363 malicious IP addresses with 6,440,954 abuse reports. Top threat categories include tcp scan, suspicious activity, malware distribution, high threat, moderate threat. Top attacking networks: Claro NXT Telecomunicacoes Ltda (12,373 IPs), TELEFONICA BRASIL S.A (8,093 IPs), TELEFONICA BRASIL S.A (7,690 IPs). Data collected since 2022-12-15, last activity 2026-10-05.

Threat Assessment: Brazil is one of the most significant sources of cyber threats globally, with an exceptionally high volume of malicious IP addresses. The dominant attack types are tcp scan, suspicious activity, malware distribution. The majority of threats originate from networks operated by Claro NXT Telecomunicacoes Ltda and TELEFONICA BRASIL S.A.

Total Reports
6,440,954
Unique IPs
221,363
First Seen
2022-12-15
Last Activity
2026-10-05

Top Threat Categories

Tcp Scan 636,449
Suspicious Activity 427,694
Malware Distribution 187,425
High Threat 176,516
Moderate Threat 37,645

Top Attacking Networks

AS28573 Claro NXT Telecomunicacoes Ltda
12,373 IPs
AS27699 TELEFONICA BRASIL S.A
8,093 IPs
AS26599 TELEFONICA BRASIL S.A
7,690 IPs

Most Reported IPs in Brazil

200.155.66.2 1,405 reports
187.110.238.50 1,392 reports
200.196.50.91 1,391 reports
187.51.208.158 1,388 reports
179.51.153.37 1,386 reports

Access this data via API

Get Brazil threat intelligence programmatically.

curl https://ip.wayscloud.services/api/country/BR

View full API documentation

See how we classify and verify threats →

Check any IP from Brazil

Look up threat intelligence for a specific IP address.

Related: Country Threat Ranking Country Risk Trends → Top Malicious IPs → AS28573 Intelligence AS27699 Intelligence AS26599 Intelligence Global Attack Trends Detect Malicious Traffic

Loading threat intelligence data...