DigitalOcean Referral Badge
cloud1
cloud2
cloud3
cloud4
cloud5
cloud6
← Back

CITY REPORT — Bucharest / București / Romania · Bucharest / București / Romania

First sighted: May 4, 2023, 3 a.m. · Last sighted: March 2, 2026, 2 a.m.

Risk
35 (med)
Total hits
8613
Total errors
1397
Distinct IPs
2055
Distinct ASNs
58
Country
Romania
Region
București
City
Bucharest

Risk

Model: v1 Computed: 2026-03-04 18:16:17
Risk score
35
Risk gradient
Key drivers are enriched against the published annotator catalog when available; otherwise sensible defaults are used.
Annotator influence radar
Rendering annotator influence profile…
Normalized contribution (0..1) per annotator versus robust per-code envelope.
Key drivers
Credential brute forcing
Repeated authentication attempts consistent with password guessing or credential stuffing.
cred
Hits 166
Points 563.20
Sensitive file probing
Requests target commonly sensitive files, configs, backups, or administrative resources.
sfp
Hits 47
Points 368.72
Automated client behavior
Traffic patterns strongly suggest automation rather than a human-operated browser.
bot
Hits 594
Points 276.50
User-Agent anomaly
User-Agent signals look missing, inconsistent, or indicative of non-browser tooling.
ua
Hits 1051
Points 182.08
Path traversal attempts
Request paths/parameters resemble attempts to access files outside intended directories.
trav
Hits 16
Points 115.44
Scan velocity
High request rate and broad endpoint coverage suggest scanning or automated enumeration.
scan_velocity
Hits 77
Points 91.08
Protocol anomaly
Request structure or protocol-level signals deviate from typical browser HTTP traffic.
proto
Hits 102
Points 89.28
Request size anomaly
Requests are unusually large or shaped in a way that suggests abuse or automation.
request_size
Hits 200
Points 68.64
Command injection attempts
Request content resembles attempts to execute OS commands via an application.
cmdi
Hits 2
Points 42.50
Referrer abuse
Referrer patterns look manipulated, irrelevant, or inconsistent with normal navigation.
ref
Hits 14
Points 2.52

Traffic

Rollup

Daily activity (hits per day) and basic HTTP rollup counters for this city.

Loading activity…
Daily activity (hits per day). Total in window: .
Traffic rollup
HTTP status classes, URL diversity, and totals.
2xx
4658
3xx
1605
4xx
958
5xx
439
Unique URLs
0
Total hits
8613
First seen
May 4, 2023, 3 a.m.
Last seen
March 2, 2026, 2 a.m.

Annotators (All-time)

Heatmap of annotator × severity. Darker cells mean more volume in that band. Tip: switch to Weighted points to see what drives impact (not just noise).

Severity →
Low High
Repeated authentication attempts consistent with password guessing or credential stuffing.
hits 166 pts 563.20
Breakdown by severity band (all-time). “Weighted” reflects your weight configuration.
Severity Total Labels Weighted First seen Last seen Top labels
10 56 1 308.00 Nov. 5, 2023, 5:52 a.m. Feb. 26, 2026, 2:12 a.m.
cred 56
8 43 1 189.20 Nov. 5, 2023, 5:52 a.m. Feb. 26, 2026, 2:12 a.m.
cred 43
12 9 1 59.40 Dec. 19, 2023, 8:22 p.m. Jan. 7, 2025, 5:10 p.m.
cred 9
6 2 1 6.60 April 30, 2024, 4:10 p.m. April 30, 2024, 4:10 p.m.
cred 2
0 56 1 0.00 Nov. 5, 2023, 5:52 a.m. Feb. 26, 2026, 2:12 a.m.
cred 56
Requests target commonly sensitive files, configs, backups, or administrative resources.
hits 47 pts 368.72
Breakdown by severity band (all-time). “Weighted” reflects your weight configuration.
Severity Total Labels Weighted First seen Last seen Top labels
40 29 1 255.20 Aug. 22, 2023, 3:46 p.m. Feb. 8, 2026, 6:43 p.m.
sensitive_file 29
24 10 1 52.80 Aug. 11, 2023, 1:19 a.m. March 1, 2026, 8 p.m.
sensitive_file 10
34 6 1 44.88 Feb. 22, 2025, 10:51 a.m. Feb. 22, 2025, 10:53 a.m.
sensitive_file 6
36 2 1 15.84 Feb. 15, 2026, 3:36 p.m. Feb. 15, 2026, 3:36 p.m.
sensitive_file 2
Traffic patterns strongly suggest automation rather than a human-operated browser.
hits 594 pts 276.50
Breakdown by severity band (all-time). “Weighted” reflects your weight configuration.
Severity Total Labels Weighted First seen Last seen Top labels
10 389 1 194.50 Oct. 9, 2023, 5:09 p.m. Feb. 15, 2026, 11:22 a.m.
bot 389
8 205 1 82.00 Sept. 6, 2024, 1:50 a.m. Jan. 9, 2025, 1:34 a.m.
bot 205
User-Agent signals look missing, inconsistent, or indicative of non-browser tooling.
hits 1051 pts 182.08
Breakdown by severity band (all-time). “Weighted” reflects your weight configuration.
Severity Total Labels Weighted First seen Last seen Top labels
12 374 1 89.76 Oct. 9, 2023, 5:09 p.m. July 24, 2025, 12:45 a.m.
ua 374
6 421 1 50.52 May 4, 2023, 9:14 a.m. Oct. 7, 2025, 5:08 p.m.
ua 421
8 239 1 38.24 July 20, 2023, 5:31 a.m. Aug. 26, 2025, 12:17 p.m.
ua 239
10 15 1 3.00 Sept. 7, 2023, 6:15 p.m. May 14, 2024, 10:59 a.m.
ua 15
14 2 1 0.56 Dec. 11, 2023, 5:27 p.m. Jan. 6, 2024, 11:30 a.m.
ua 2
Request paths/parameters resemble attempts to access files outside intended directories.
hits 16 pts 115.44
Breakdown by severity band (all-time). “Weighted” reflects your weight configuration.
Severity Total Labels Weighted First seen Last seen Top labels
28 6 1 43.68 Feb. 22, 2025, 10:51 a.m. Feb. 22, 2025, 10:53 a.m.
trav 6
26 6 1 40.56 Feb. 22, 2025, 10:51 a.m. Feb. 22, 2025, 10:53 a.m.
trav 6
30 4 1 31.20 Feb. 22, 2025, 10:51 a.m. Feb. 22, 2025, 10:51 a.m.
trav 4
Scan velocity scan_velocity
High request rate and broad endpoint coverage suggest scanning or automated enumeration.
hits 77 pts 91.08
Breakdown by severity band (all-time). “Weighted” reflects your weight configuration.
Severity Total Labels Weighted First seen Last seen Top labels
10 26 1 46.80 Jan. 27, 2025, midnight July 31, 2025, 10:58 p.m.
scan_velocity 26
16 6 1 17.28 Feb. 22, 2025, 10:52 a.m. July 22, 2025, 4:54 p.m.
scan_velocity 6
18 4 1 12.96 Feb. 22, 2025, 10:52 a.m. Feb. 22, 2025, 10:53 a.m.
scan_velocity 4
20 2 1 7.20 Feb. 22, 2025, 10:53 a.m. Feb. 22, 2025, 10:53 a.m.
scan_velocity 2
12 2 1 4.32 May 27, 2025, 12:01 a.m. July 22, 2025, 4:53 p.m.
scan_velocity 2
14 1 1 2.52 July 22, 2025, 4:53 p.m. July 22, 2025, 4:53 p.m.
scan_velocity 1
0 36 1 0.00 Jan. 27, 2025, midnight July 31, 2025, 10:58 p.m.
scan_velocity 36
Request structure or protocol-level signals deviate from typical browser HTTP traffic.
hits 102 pts 89.28
Breakdown by severity band (all-time). “Weighted” reflects your weight configuration.
Severity Total Labels Weighted First seen Last seen Top labels
11 99 1 87.12 Nov. 20, 2024, 1:51 a.m. Feb. 24, 2025, 3:45 p.m.
proto 99
12 2 1 1.92 Feb. 22, 2025, 10:51 a.m. Feb. 22, 2025, 10:51 a.m.
proto 2
3 1 1 0.24 Feb. 22, 2025, 10:51 a.m. Feb. 22, 2025, 10:51 a.m.
proto 1
Requests are unusually large or shaped in a way that suggests abuse or automation.
hits 200 pts 68.64
Breakdown by severity band (all-time). “Weighted” reflects your weight configuration.
Severity Total Labels Weighted First seen Last seen Top labels
14 74 1 62.16 June 26, 2025, 3 p.m. Feb. 20, 2026, 2:10 a.m.
request_size 74
12 9 1 6.48 July 9, 2023, 1:25 p.m. Aug. 1, 2025, 11:03 p.m.
request_size 9
0 117 1 0.00 Jan. 5, 2025, 6:54 p.m. Aug. 1, 2025, 11:03 p.m.
request_size 117
Request content resembles attempts to execute OS commands via an application.
hits 2 pts 42.50
Breakdown by severity band (all-time). “Weighted” reflects your weight configuration.
Severity Total Labels Weighted First seen Last seen Top labels
28 1 1 23.80 Feb. 22, 2025, 10:53 a.m. Feb. 22, 2025, 10:53 a.m.
cmdi 1
22 1 1 18.70 Feb. 22, 2025, 10:53 a.m. Feb. 22, 2025, 10:53 a.m.
cmdi 1
Referrer patterns look manipulated, irrelevant, or inconsistent with normal navigation.
hits 14 pts 2.52
Breakdown by severity band (all-time). “Weighted” reflects your weight configuration.
Severity Total Labels Weighted First seen Last seen Top labels
6 14 1 2.52 Nov. 5, 2023, 5:52 a.m. June 11, 2024, 6:14 p.m.
ref 14

HTTP Status Breakdown

Response mix grouped by status class (2xx/3xx/4xx/5xx). Uses totals aggregation and renders a donut.

Loading status mix…
Running one aggregation and rendering the chart.

Geolocation

Live geolocation and map tiles auto-load for this Org snapshot (peer IPs with coordinates).

Loading map…

Interesting IPs

Top risky peers inside this city (latest snapshot). Sorted by risk score, then hits.

72.5.43.86 low
18 /100
Last seen 2024-06-15 03:00
Hits
438
Errors
0
Country
Romania
ASN
AS399629
AS Org
BL Networks
185.100.87.192 low
14 /100
Last seen 2024-02-12 02:00
Hits
75
Errors
2
Country
Romania
ASN
AS200651
AS Org
FlokiNET ehf
195.210.4.1 low
10 /100
Last seen 2025-08-01 03:00
Hits
759
Errors
8
Country
Romania
ASN
AS44418
AS Org
Bitdefender SRL
65.38.120.98 low
10 /100
Last seen 2024-06-15 03:00
Hits
411
Errors
0
Country
Romania
ASN
AS399629
AS Org
BL Networks
91.208.75.180 low
9 /100
Last seen 2025-02-23 02:00
Hits
50
Errors
44
Country
Romania
ASN
AS6718
AS Org
NAV COMMUNICATIONS SRL
185.100.87.41 low
6 /100
Last seen 2024-01-16 02:00
Hits
57
Errors
0
Country
Romania
ASN
AS200651
AS Org
FlokiNET ehf
95.76.3.82 low
4 /100
Last seen 2025-06-26 03:00
Hits
463
Errors
221
Country
Romania
ASN
AS12302
AS Org
Vodafone Romania S.A.
185.146.232.243 low
3 /100
Last seen 2024-04-20 03:00
Hits
21
Errors
0
Country
Romania
ASN
AS200651
AS Org
FlokiNET ehf
89.41.183.21 low
3 /100
Last seen 2024-01-07 02:00
Hits
6
Errors
0
Country
Romania
ASN
AS33911
AS Org
TENNET TELECOM SRL
64.7.199.254 low
2 /100
Last seen 2024-05-20 03:00
Hits
168
Errors
1
Country
Romania
ASN
AS399629
AS Org
BL Networks
185.100.85.23 low
2 /100
Last seen 2024-01-05 02:00
Hits
37
Errors
0
Country
Romania
ASN
AS200651
AS Org
FlokiNET ehf
91.208.75.153 low
2 /100
Last seen 2024-01-09 02:00
Hits
35
Errors
0
Country
Romania
ASN
AS6718
AS Org
NAV COMMUNICATIONS SRL
185.100.87.139 low
2 /100
Last seen 2023-11-10 02:00
Hits
32
Errors
0
Country
Romania
ASN
AS200651
AS Org
FlokiNET ehf
62.133.45.2 low
2 /100
Last seen 2024-05-11 03:00
Hits
20
Errors
0
Country
Romania
ASN
AS9009
AS Org
M247 Europe SRL
185.92.194.80 low
2 /100
Last seen 2023-12-20 02:00
Hits
4
Errors
2
Country
Romania
ASN
AS44043
AS Org
Cyber_Folks SRL
185.181.103.8 low
2 /100
Last seen 2024-05-14 03:00
Hits
3
Errors
0
Country
Romania
ASN
AS9009
AS Org
M247 Europe SRL
91.195.98.51 low
2 /100
Last seen 2024-01-28 02:00
Hits
3
Errors
0
Country
Romania
ASN
AS9009
AS Org
M247 Europe SRL
86.124.42.46 low
1 /100
Last seen 2025-01-27 02:00
Hits
149
Errors
78
Country
Romania
ASN
AS8708
AS Org
RCS & RDS
140.233.190.105 low
1 /100
Last seen 2026-02-16 02:00
Hits
30
Errors
12
Country
Romania
ASN
AS214209
AS Org
Internet Magnate (Pty) Ltd
91.208.75.4 low
1 /100
Last seen 2023-12-06 02:00
Hits
25
Errors
0
Country
Romania
ASN
AS6718
AS Org
NAV COMMUNICATIONS SRL
91.208.75.178 low
1 /100
Last seen 2025-10-05 03:00
Hits
18
Errors
1
Country
Romania
ASN
AS6718
AS Org
NAV COMMUNICATIONS SRL
185.165.169.239 low
1 /100
Last seen 2024-02-17 02:00
Hits
18
Errors
0
Country
Romania
ASN
AS200651
AS Org
FlokiNET ehf
94.177.106.59 low
1 /100
Last seen 2024-06-14 03:00
Hits
17
Errors
0
Country
Romania
ASN
AS25198
AS Org
ZetServers
91.208.75.239 low
1 /100
Last seen 2023-12-13 02:00
Hits
17
Errors
0
Country
Romania
ASN
AS6718
AS Org
NAV COMMUNICATIONS SRL
185.100.87.253 low
1 /100
Last seen 2024-02-22 02:00
Hits
15
Errors
0
Country
Romania
ASN
AS200651
AS Org
FlokiNET ehf
89.149.41.31 low
1 /100
Last seen 2024-02-16 02:00
Hits
14
Errors
6
Country
Romania
ASN
AS834
AS Org
IPXO LLC
82.76.171.76 low
1 /100
Last seen 2026-02-21 02:00
Hits
9
Errors
0
Country
Romania
ASN
AS8708
AS Org
RCS & RDS
81.180.92.240 low
1 /100
Last seen 2025-10-05 03:00
Hits
8
Errors
2
Country
Romania
ASN
AS200019
AS Org
ALEXHOST SRL
109.166.129.90 low
1 /100
Last seen 2026-02-12 02:00
Hits
5
Errors
2
Country
Romania
ASN
AS8953
AS Org
Orange Romania S.A.
128.127.117.131 low
1 /100
Last seen 2023-12-21 02:00
Hits
4
Errors
2
Country
Romania
ASN
AS8953
AS Org
Orange Romania S.A.
82.78.167.116 low
1 /100
Last seen 2026-02-16 02:00
Hits
3
Errors
0
Country
Romania
ASN
AS8708
AS Org
RCS & RDS
146.70.246.116 low
1 /100
Last seen 2026-02-11 02:00
Hits
2
Errors
1
Country
Romania
ASN
AS9009
AS Org
M247 Europe SRL
185.195.17.38 low
1 /100
Last seen 2024-01-30 02:00
Hits
2
Errors
0
Country
Romania
ASN
AS9009
AS Org
M247 Europe SRL
185.195.17.37 low
1 /100
Last seen 2024-01-26 02:00
Hits
2
Errors
0
Country
Romania
ASN
AS9009
AS Org
M247 Europe SRL
92.81.156.198 low
1 /100
Last seen 2023-11-07 02:00
Hits
2
Errors
0
Country
Romania
ASN
AS9050
AS Org
Orange Romania S.A.
185.100.87.136 low
0 /100
Last seen 2026-02-20 02:00
Hits
646
Errors
279
Country
Romania
ASN
AS200651
AS Org
FlokiNET ehf
109.100.184.78 low
0 /100
Last seen 2025-02-12 02:00
Hits
375
Errors
0
Country
Romania
ASN
AS9050
AS Org
Orange Romania S.A.
213.233.85.12 low
0 /100
Last seen 2026-02-15 02:00
Hits
80
Errors
6
Country
Romania
ASN
AS12302
AS Org
Vodafone Romania S.A.
84.117.79.159 low
0 /100
Last seen 2024-11-21 02:00
Hits
43
Errors
3
Country
Romania
ASN
AS12302
AS Org
Vodafone Romania S.A.
188.25.225.149 low
0 /100
Last seen 2024-11-07 02:00
Hits
43
Errors
3
Country
Romania
ASN
AS8708
AS Org
RCS & RDS
188.26.84.45 low
0 /100
Last seen 2026-02-25 02:00
Hits
33
Errors
1
Country
Romania
ASN
AS8708
AS Org
RCS & RDS
188.26.231.24 low
0 /100
Last seen 2026-02-25 02:00
Hits
33
Errors
4
Country
Romania
ASN
AS8708
AS Org
RCS & RDS
109.166.135.27 low
0 /100
Last seen 2024-04-30 03:00
Hits
33
Errors
1
Country
Romania
ASN
AS8953
AS Org
Orange Romania S.A.
185.96.160.50 low
0 /100
Last seen 2026-02-26 02:00
Hits
32
Errors
8
Country
Romania
ASN
AS212330
AS Org
Civilisation Information Technology, communication and internet services Co., LTD
109.101.226.165 low
0 /100
Last seen 2025-02-14 02:00
Hits
32
Errors
0
Country
Romania
ASN
AS9050
AS Org
Orange Romania S.A.
185.163.109.66 low
0 /100
Last seen 2023-10-04 03:00
Hits
30
Errors
6
Country
Romania
ASN
AS9009
AS Org
M247 Europe SRL
141.85.144.225 low
0 /100
Last seen 2024-06-03 03:00
Hits
28
Errors
1
Country
Romania
ASN
AS2614
AS Org
RoEduNet
81.196.155.52 low
0 /100
Last seen 2023-12-29 02:00
Hits
28
Errors
3
Country
Romania
ASN
AS8708
AS Org
RCS & RDS
86.121.131.8 low
0 /100
Last seen 2025-03-10 02:00
Hits
26
Errors
0
Country
Romania
ASN
AS8708
AS Org
RCS & RDS
109.166.138.133 low
0 /100
Last seen 2024-01-27 02:00
Hits
24
Errors
2
Country
Romania
ASN
AS8953
AS Org
Orange Romania S.A.
185.96.160.90 low
0 /100
Last seen 2026-02-28 02:00
Hits
22
Errors
2
Country
Romania
ASN
AS212330
AS Org
Civilisation Information Technology, communication and internet services Co., LTD
95.77.224.55 low
0 /100
Last seen 2026-02-27 02:00
Hits
22
Errors
3
Country
Romania
ASN
AS12302
AS Org
Vodafone Romania S.A.
185.96.160.58 low
0 /100
Last seen 2026-02-26 02:00
Hits
21
Errors
5
Country
Romania
ASN
AS212330
AS Org
Civilisation Information Technology, communication and internet services Co., LTD
109.166.130.31 low
0 /100
Last seen 2025-08-02 03:00
Hits
21
Errors
0
Country
Romania
ASN
AS8953
AS Org
Orange Romania S.A.
193.186.4.7 low
0 /100
Last seen 2025-04-07 03:00
Hits
20
Errors
10
Country
Romania
ASN
AS15169
AS Org
Google LLC
82.137.32.35 low
0 /100
Last seen 2025-01-19 02:00
Hits
20
Errors
1
Country
Romania
ASN
AS8708
AS Org
RCS & RDS
5.12.45.113 low
0 /100
Last seen 2024-04-28 03:00
Hits
20
Errors
3
Country
Romania
ASN
AS8708
AS Org
DIGI ROMANIA S.A.
128.127.122.90 low
0 /100
Last seen 2026-02-25 02:00
Hits
19
Errors
3
Country
Romania
ASN
AS8953
AS Org
Orange Romania S.A.
89.47.232.79 low
0 /100
Last seen 2026-02-27 02:00
Hits
18
Errors
2
Country
Romania
ASN
AS62390
AS Org
NexonHost Srl
104.28.106.147 low
0 /100
Last seen 2025-10-08 03:00
Hits
18
Errors
0
Country
Romania
ASN
AS13335
AS Org
Cloudflare, Inc.
213.233.110.116 low
0 /100
Last seen 2025-03-19 02:00
Hits
17
Errors
0
Country
Romania
ASN
AS12302
AS Org
Vodafone Romania S.A.
31.5.53.33 low
0 /100
Last seen 2025-03-02 02:00
Hits
17
Errors
0
Country
Romania
ASN
AS12302
AS Org
Vodafone Romania S.A.
104.28.106.146 low
0 /100
Last seen 2025-01-20 02:00
Hits
17
Errors
0
Country
Romania
ASN
AS13335
AS Org
Cloudflare, Inc.
86.123.35.147 low
0 /100
Last seen 2024-12-03 02:00
Hits
17
Errors
1
Country
Romania
ASN
AS8708
AS Org
RCS & RDS
213.233.108.197 low
0 /100
Last seen 2024-11-11 02:00
Hits
17
Errors
0
Country
Romania
ASN
AS12302
AS Org
Vodafone Romania S.A.
188.27.187.42 low
0 /100
Last seen 2025-01-06 02:00
Hits
16
Errors
0
Country
Romania
ASN
AS8708
AS Org
RCS & RDS
128.127.118.76 low
0 /100
Last seen 2024-10-29 02:00
Hits
16
Errors
1
Country
Romania
ASN
AS8953
AS Org
Orange Romania S.A.
136.255.202.118 low
0 /100
Last seen 2025-03-01 02:00
Hits
15
Errors
0
Country
Romania
ASN
AS12302
AS Org
Vodafone Romania S.A.
81.196.218.81 low
0 /100
Last seen 2025-02-10 02:00
Hits
15
Errors
0
Country
Romania
ASN
AS8708
AS Org
RCS & RDS
188.27.1.67 low
0 /100
Last seen 2024-12-05 02:00
Hits
15
Errors
2
Country
Romania
ASN
AS8708
AS Org
RCS & RDS
89.40.223.233 low
0 /100
Last seen 2025-03-20 02:00
Hits
14
Errors
2
Country
Romania
ASN
AS48955
AS Org
Internet Resources Management SRL
188.27.191.209 low
0 /100
Last seen 2023-09-07 03:00
Hits
14
Errors
0
Country
Romania
ASN
AS8708
AS Org
RCS & RDS
78.96.83.233 low
0 /100
Last seen 2026-02-11 02:00
Hits
13
Errors
1
Country
Romania
ASN
AS12302
AS Org
Vodafone Romania S.A.
188.25.225.81 low
0 /100
Last seen 2024-10-07 03:00
Hits
13
Errors
2
Country
Romania
ASN
AS8708
AS Org
RCS & RDS
89.123.113.226 low
0 /100
Last seen 2026-02-13 02:00
Hits
12
Errors
4
Country
Romania
ASN
AS9050
AS Org
Orange Romania S.A.