Brazil (BR) Threat Intelligence

Brazil has 72,260 malicious IP addresses with 3,605,616 abuse reports. Top threat categories include ssh bruteforce, generic bruteforce, web attack, botnet c2, rdp bruteforce. Top attacking networks: Claro NXT Telecomunicacoes Ltda (3,308 IPs), TELEFONICA BRASIL S.A (1,751 IPs), TELEFONICA BRASIL S.A (1,518 IPs). Data collected since 2022-12-15, last activity 2026-04-16.

Threat Assessment: Brazil shows substantial cyber threat activity, ranking among the top threat source countries worldwide. The dominant attack types are ssh bruteforce, generic bruteforce, web attack. The majority of threats originate from networks operated by Claro NXT Telecomunicacoes Ltda and TELEFONICA BRASIL S.A.