Significant Threat
IP 146.190.153.30 is a high-risk address operating from DigitalOcean's network infrastructure in the United States, with an extensive abuse history spanning over 10 months and a substantial body of 8,204 reports from automated honeypot sensors, indicating sustained malicious activity at an elevated frequency level.
The IP, registered under ASN 14061 (DIGITALOCEAN-ASN), was first reported in September 2025 with the most recent activity logged in July 2026, demonstrating persistent engagement in hostile network behaviour across nearly a full year. Detection originated from 20 distinct automated honeypot sensors, lending high confidence (85%) to the assessment that this address poses a genuine threat. The dominant reported threat category is Hacking activity, accounting for 18 of the most recent reports, while isolated incidents of IoT-targeted activity and exploited host behaviour were also logged, suggesting a versatile attack profile capable of multiple intrusion methodologies.
The Hacking classification encompasses general intrusion attempts, vulnerability exploitation, and unauthorized access probes, which collectively represent one of the most common and dangerous threat vectors facing internet-exposed services today. The sheer volume of reports (8,204) and sustained high activity frequency (8/10) indicate that this IP is not merely scanning passively but actively engaging with targets, likely attempting credential-based attacks or exploiting known vulnerabilities in exposed services. When combined with IoT targeting capability, this address presents a concrete risk of compromise to poorly secured connected devices and infrastructure.
Site operators should immediately block or rate-limit connections from this IP at the firewall level and monitor inbound traffic patterns for similar solicitation. Implementing fail2ban or equivalent intrusion-prevention tools can automate the blocking of repeat offenders based on failed authentication attempts. All internet-facing services should enforce strong, unique credentials, disable unnecessary services, and maintain current patch schedules to reduce vulnerability surfaces. Organizations observing traffic from this address should treat it as hostile and log all interaction for incident-response purposes.
NL 
GB 
CA 
HK 
BG 
RO 
FR