Were they residential IP addresses? I had this a couple weeks back. But it wasn't just Brazil, constant hits from Argentina and few other countries. Tried different things but they were all unique residential addresses and hard to block, then set up challenge for the whole continent. Finally, it went down.