Elevated Risk
IP address 185.136.15.111 is a high-risk address operating from Kazakhstan under ASN AS205997, with a threat level of 8/10 and over 1000 reported incidents of malicious activity dominated by port-scanning reconnaissance detected by automated honeypot sensors.
The address, registered to network operator Vlad Cojuhari, has sustained an activity frequency rated at 8/10 across a concentrated two-month window from July 2026 through August 2026, yielding a confidence score of 91% based on 20 recent reports submitted by automated honeypot infrastructure. The volume of cumulative reports and the consistent probe activity pattern indicate persistent rather than opportunistic behaviour, with the IP repeatedly targeting new victim networks over this period. The CiscoASA-specific probing detected in recent activity suggests deliberate reconnaissance against Cisco security appliances, a high-value target category in enterprise environments.
Port scanning represents a critical precursor phase in the attack lifecycle, enabling threat actors to enumerate exposed services, identify unpatched or misconfigured systems, and map network topology before launching targeted exploitation attempts. This reconnaissance itself creates operational risk: the intelligence gathered can inform subsequent intrusion attempts or be weaponised by other threat actors. A port scan targeting CiscoASA devices specifically implies interest in perimeter security controls, potentially as a stepping stone toward deeper network compromise or data exfiltration.
Network defenders should treat this IP as actively hostile and implement immediate countermeasures: block or severely rate-limit traffic originating from 185.136.15.111 at the network perimeter, enforce strict firewall rules to minimise exposed services on internet-facing systems, and deploy detection mechanisms such as fail2ban to automatically identify and respond to scanning patterns. Continuous monitoring for CiscoASA-specific probe signatures is strongly recommended given the observed targeting pattern.
US 
BG 
UA