Darkstat - strange traffic to Romania...?

[Modesty]

Hi

I opened darkstat on my pfsense box and found this:

the IP is located in romania
https://myip.ms/info/whois/37.120.203.163

Im located in Oslo (Norway) and I do not expect this much traffic from my router to Romania.

Is this IP some big company service provider?
Maybe VPN provider (my wife works from home so it can be a big corp pc that updates during nights)?

[Napsterbater]

@Modesty Based on http://37.120.203.163 I am going to say it is a NordVPN server.