Country Threat Intelligence Summary: Romania
Loading country intelligence data...
Romania (RO) Threat Intelligence
RORomania has 24,515 malicious IP addresses with 663,379 abuse reports. Top threat categories include tcp scan, high threat, suspicious activity, ssh bruteforce, malware distribution. Top attacking networks: Unmanaged Ltd (3,327 IPs), Digi Romania S.A. (2,971 IPs), Net Gate Telecom S.R.L. (2,830 IPs). Data collected since 2023-02-17, last activity 2026-10-13.
Threat Assessment: Romania shows substantial cyber threat activity, ranking among the top threat source countries worldwide. The dominant attack types are tcp scan, high threat, suspicious activity. The majority of threats originate from networks operated by Unmanaged Ltd and Digi Romania S.A..
Total Reports
663,379
Unique IPs
24,515
First Seen
2023-02-17
Last Activity
2026-10-13
Top Threat Categories
Tcp Scan
92,201
High Threat
58,973
Suspicious Activity
39,400
Ssh Bruteforce
35,445
Malware Distribution
15,384
Top Attacking Networks
Most Reported IPs in Romania
80.94.92.128
5,631 reports
2.57.122.238
3,112 reports
2.57.121.112
2,590 reports
193.46.255.86
2,500 reports
2.57.121.25
2,479 reports
Access this data via API
Get Romania threat intelligence programmatically.
curl https://ip.wayscloud.services/api/country/RO
Check any IP from Romania
Look up threat intelligence for a specific IP address.
Related:
Country Threat Ranking
Country Risk Trends →
Top Malicious IPs →
AS47890 Intelligence
AS8708 Intelligence
AS34450 Intelligence
Global Attack Trends
Detect Malicious Traffic
Loading threat intelligence data...