Romania (RO) Threat Intelligence

RO

Romania has 13,600 malicious IP addresses with 267,286 abuse reports. Top threat categories include ssh bruteforce, generic bruteforce, repeat offender, spam, web attack. Top attacking networks: Unmanaged Ltd (2,007 IPs), Net Gate Telecom S.R.L. (1,794 IPs), Samteco Serv Srl (1,000 IPs). Data collected since 2023-02-17, last activity 2026-04-16.

Threat Assessment: Romania shows substantial cyber threat activity, ranking among the top threat source countries worldwide. The dominant attack types are ssh bruteforce, generic bruteforce, repeat offender. The majority of threats originate from networks operated by Unmanaged Ltd and Net Gate Telecom S.R.L..

Total Reports
267,286
Unique IPs
13,600
First Seen
2023-02-17
Last Activity
2026-04-16

Top Threat Categories

Ssh Bruteforce 20,697
Generic Bruteforce 1,431
Repeat Offender 93
Spam 67
Web Attack 42

Top Attacking Networks

AS47890 Unmanaged Ltd
2,007 IPs
AS34450 Net Gate Telecom S.R.L.
1,794 IPs
AS209767 Samteco Serv Srl
1,000 IPs

Most Reported IPs in Romania

2.57.122.177 2,333 reports
2.57.121.112 1,745 reports
2.57.121.25 1,627 reports
80.94.92.165 1,279 reports
80.94.92.187 1,106 reports

Access this data via API

Get Romania threat intelligence programmatically.

curl https://ip.wayscloud.services/api/country/RO

View full API documentation

See how we classify and verify threats →

Check any IP from Romania

Look up threat intelligence for a specific IP address.

Related: Country Threat Ranking Country Risk Trends → Top Malicious IPs → AS47890 Intelligence AS34450 Intelligence AS209767 Intelligence Global Attack Trends Detect Malicious Traffic

Loading threat intelligence data...