Romania (RO) Threat Intelligence

RO

Romania has 23,178 malicious IP addresses with 557,403 abuse reports. Top threat categories include ssh bruteforce, suspicious activity, severe abuse, generic bruteforce, tcp scan. Top attacking networks: Unmanaged Ltd (3,304 IPs), Net Gate Telecom S.R.L. (2,826 IPs), Digi Romania S.A. (2,319 IPs). Data collected since 2023-02-17, last activity 2026-09-06.

Threat Assessment: Romania shows substantial cyber threat activity, ranking among the top threat source countries worldwide. The dominant attack types are ssh bruteforce, suspicious activity, severe abuse. The majority of threats originate from networks operated by Unmanaged Ltd and Net Gate Telecom S.R.L..

Total Reports
557,403
Unique IPs
23,178
First Seen
2023-02-17
Last Activity
2026-09-06

Top Threat Categories

Ssh Bruteforce 32,808
Suspicious Activity 6,273
Severe Abuse 3,513
Generic Bruteforce 3,018
Tcp Scan 1,556

Top Attacking Networks

AS47890 Unmanaged Ltd
3,304 IPs
AS34450 Net Gate Telecom S.R.L.
2,826 IPs
AS8708 Digi Romania S.A.
2,319 IPs

Most Reported IPs in Romania

80.94.92.128 3,618 reports
2.57.121.112 1,716 reports
2.57.122.177 1,696 reports
2.57.121.25 1,675 reports
2.57.122.238 1,454 reports

Access this data via API

Get Romania threat intelligence programmatically.

curl https://ip.wayscloud.services/api/country/RO

View full API documentation

See how we classify and verify threats →

Check any IP from Romania

Look up threat intelligence for a specific IP address.

Related: Country Threat Ranking Country Risk Trends → Top Malicious IPs → AS47890 Intelligence AS34450 Intelligence AS8708 Intelligence Global Attack Trends Detect Malicious Traffic

Loading threat intelligence data...