Country Threat Intelligence Summary: Romania
Loading country intelligence data...
Romania (RO) Threat Intelligence
RORomania has 23,856 malicious IP addresses with 635,989 abuse reports. Top threat categories include tcp scan, high threat, suspicious activity, ssh bruteforce, malware distribution. Top attacking networks: Unmanaged Ltd (3,325 IPs), Net Gate Telecom S.R.L. (2,830 IPs), Digi Romania S.A. (2,785 IPs). Data collected since 2023-02-17, last activity 2026-10-04.
Threat Assessment: Romania shows substantial cyber threat activity, ranking among the top threat source countries worldwide. The dominant attack types are tcp scan, high threat, suspicious activity. The majority of threats originate from networks operated by Unmanaged Ltd and Net Gate Telecom S.R.L..
Total Reports
635,989
Unique IPs
23,856
First Seen
2023-02-17
Last Activity
2026-10-04
Top Threat Categories
Tcp Scan
87,489
High Threat
41,335
Suspicious Activity
36,257
Ssh Bruteforce
35,198
Malware Distribution
14,247
Top Attacking Networks
Most Reported IPs in Romania
80.94.92.128
5,448 reports
2.57.122.238
2,688 reports
2.57.121.112
2,342 reports
2.57.121.25
2,235 reports
193.46.255.86
2,205 reports
Access this data via API
Get Romania threat intelligence programmatically.
curl https://ip.wayscloud.services/api/country/RO
Check any IP from Romania
Look up threat intelligence for a specific IP address.
Related:
Country Threat Ranking
Country Risk Trends →
Top Malicious IPs →
AS47890 Intelligence
AS34450 Intelligence
AS8708 Intelligence
Global Attack Trends
Detect Malicious Traffic
Loading threat intelligence data...