Substantial Risk
IP address 185.218.138.13 is a high-risk address linked to sustained port-scanning reconnaissance activity, with a threat level of 8/10 and a 91% confidence score based on 1310 total abuse reports spanning March through June 2026. The dominant threat category across recent detections is port scanning, indicating systematic probing of exposed network services rather than opportunistic noise.
The volume of 1310 reports from automated honeypot sensors reflects persistent reconnaissance behavior over a four-month observation window, with an activity frequency rated 8/10. All 20 most recent reports consistently document port-scanning activity, specifically targeting Cisco ASA security appliances. Geolocation places the IP within the United States, routed through network operator Vlad Cojuhari operating AS205997. The sustained detection pattern and consistent targeting of a specific security appliance type distinguish this address from casual scanning and suggest an organized, methodical enumeration effort.
Port scanning represents the initial reconnaissance phase of most cyberattack sequences, allowing threat actors to map exposed services, identify unpatched software versions, and catalogue potential entry points before launching targeted exploitation. The specific focus on Cisco ASA devices points toward gathering intelligence on perimeter security configurations, potentially to identify known vulnerabilities in firewall or VPN implementations. For an organization with externally accessible Cisco ASA infrastructure, such reconnaissance increases the risk of subsequent targeted attacks if vulnerabilities exist or credentials are weak.
Site operators should implement firewall rules to block or rate-limit repeated scanning patterns from this address range, deploy automated defensive tools such as fail2ban to respond to reconnaissance signatures, minimize the exposure of management interfaces to untrusted networks, and monitor logs for Cisco ASA probing activity that may herald more aggressive follow-on attempts.
KZ 
HK 
UA