Malicious IPs in Romania

IPv4 networks located in Romania that are currently flagged for malicious activity, aggregated from multiple external and internal threat intelligence sources. Snapshot of (UTC), updated daily.

Flagged IPv4 networks
53
#45 of 176 countries
Per million allocated IPv4
6.75
#48 of 77 countries
Flagged IPv4 addresses
4,139
ranges count at most as a /24
Allocated IPv4 addresses
7,852,416
RIR delegation statistics

Romania at a glance

Romania had 53 flagged IPv4 networks in the snapshot of 2026-10-10, rank #45 of 176 countries by absolute count. Relative to its allocated IPv4 space that is 6.75 flagged networks per million addresses, rank #48 of 77, well below the median of 10.6 across all rated countries. The largest category is other malicious networks with 40% of the flagged networks, followed by brute force sources (30%). The three networks (ASNs) with the most flagged IPs hold 34% of them, led by M247 M247 Europe SRL (AS9009). Another 1 flagged IPv6 network is located in Romania.

Malicious activity in Romania by category

A network listed in several categories counts once, in the most specific one. Also flagged: 1 IPv6 network.

  • Other malicious networks in Romania

    21 (40%)

    21 flagged networks, #31 of 147 countries for other malicious networks. Addresses and ranges reported as malicious without a more specific category. Other Malicious Networks by Country

  • Brute force sources in Romania

    16 (30%)

    16 flagged networks, #62 of 159 countries for brute force sources. Sources of password guessing against SSH, mail, FTP and web logins. Brute Force Sources by Country

  • Botnet hosts in Romania

    7 (13%)

    7 flagged networks, #47 of 126 countries for botnet hosts. Infected hosts taking part in a botnet. Botnet Hosts by Country

  • C2 servers in Romania

    7 (13%)

    7 flagged networks, #13 of 52 countries for C2 servers. Command-and-control servers, payload hosts and other attacker-run infrastructure. C2 Servers by Country

  • Scanners in Romania

    1 (2%)

    1 flagged network, #26 of 44 countries for scanners. Hosts scanning or probing services on the internet. Scanners by Country

  • Spam sources in Romania

    1 (2%)

    1 flagged network, #54 of 85 countries for spam sources. Sources of email spam. Spam Sources by Country

Networks with the most flagged IPs in Romania

Autonomous systems announcing the flagged networks located in Romania.

#NetworkFlagged networks
1AS9009M247 M247 Europe SRL7
2AS8708DIGI-RO DIGI ROMANIA S.A.6
3AS34450WDC-AS Net Gate Telecom S.R.L.5
4AS12302Vodafone_Ro Vodafone Romania S.A.4
5AS9050RTD Orange Romania S.A.3
6AS200651FlokiNET FlokiNET ehf3
7AS8953ASN-ORANGE-ROMANIA Orange Romania S.A.3
8AS3257GTT-BACKBONE GTT Communications Inc.2
9AS49645SOFT-EXPERT-AS Soft Expert SRL2
10AS210558services-1337-gmbh 1337 Services GmbH2

Compare Romania with other countries

Ranked by flagged networks per million allocated IPv4 addresses.

Countries ranked next to Romania by rate

#CountryNetworksPer million
46Poland1557.73
47Iran827.55
48Romania536.75
49Algeria326.71
50Hungary396.58
51China2,2046.43

Other countries in the RIPE NCC region

#CountryNetworksPer million
1Iraq65142
2Uzbekistan41122
7Albania3059.3
10Jordan2233.9
13Azerbaijan2328.8
15Qatar2326.9
16Oman2425.2
17Moldova3023.8

Questions about Romania

How many malicious IP addresses are there in Romania?
On 2026-10-10, 53 IPv4 networks (/24 blocks) located in Romania were flagged for malicious activity, with 4,139 listed IPv4 addresses and 1 IPv6 network. Each /24 counts once, however many of its addresses are listed.
Which networks in Romania host the most flagged IPs?
M247 M247 Europe SRL (AS9009, 7 networks), DIGI-RO DIGI ROMANIA S.A. (AS8708, 6 networks), WDC-AS Net Gate Telecom S.R.L. (AS34450, 5 networks). Large hosting providers appear because attackers rent their servers, not necessarily because of the operator.

Query this data per IP via the API

Look up threat categories, reputation score, ASN and geolocation for any address in Romania or anywhere else with one API call.

Read the API docsSee pricing
Back to the world threat mapAll networks registered in Romania