Brazil (BR) Threat Intelligence

BR

Brazil has 228,634 malicious IP addresses with 6,554,168 abuse reports. Top threat categories include tcp scan, suspicious activity, high threat, malware distribution, moderate threat. Top attacking networks: Claro NXT Telecomunicacoes Ltda (13,244 IPs), TELEFONICA BRASIL S.A (8,593 IPs), TELEFONICA BRASIL S.A (8,170 IPs). Data collected since 2022-12-15, last activity 2026-10-13.

Threat Assessment: Brazil is one of the most significant sources of cyber threats globally, with an exceptionally high volume of malicious IP addresses. The dominant attack types are tcp scan, suspicious activity, high threat. The majority of threats originate from networks operated by Claro NXT Telecomunicacoes Ltda and TELEFONICA BRASIL S.A.

Total Reports
6,554,168
Unique IPs
228,634
First Seen
2022-12-15
Last Activity
2026-10-13

Top Threat Categories

Tcp Scan 661,329
Suspicious Activity 445,970
High Threat 227,274
Malware Distribution 190,054
Moderate Threat 39,072

Top Attacking Networks

AS28573 Claro NXT Telecomunicacoes Ltda
13,244 IPs
AS27699 TELEFONICA BRASIL S.A
8,593 IPs
AS26599 TELEFONICA BRASIL S.A
8,170 IPs

Most Reported IPs in Brazil

200.155.66.2 1,614 reports
187.110.238.50 1,599 reports
200.196.50.91 1,596 reports
179.51.153.37 1,589 reports
187.51.208.158 1,584 reports

Access this data via API

Get Brazil threat intelligence programmatically.

curl https://ip.wayscloud.services/api/country/BR

View full API documentation

See how we classify and verify threats →

Check any IP from Brazil

Look up threat intelligence for a specific IP address.

Related: Country Threat Ranking Country Risk Trends → Top Malicious IPs → AS28573 Intelligence AS27699 Intelligence AS26599 Intelligence Global Attack Trends Detect Malicious Traffic

Loading threat intelligence data...