Is IP address 195.91.131.218 dangerous?

Yes, 195.91.131.218 is considered dangerous with a threat level of 7/10. It has been reported 3 times for malicious activities including . We recommend blocking this IP address.

Who owns or operates IP address 195.91.131.218?

IP address 195.91.131.218 is operated by JSC ER-Telecom Holding (ASN 31363) and is geolocated to RU. This information is derived from public WHOIS and geolocation databases.

Should I block IP address 195.91.131.218?

Yes, blocking 195.91.131.218 is strongly recommended. With a threat level of 7/10 and 3 security reports, this IP poses significant risk. Implement firewall rules to block incoming and outgoing traffic.

How accurate is this threat assessment for 195.91.131.218?

Our threat assessment for 195.91.131.218 has a confidence score of 22%, based on 3 independent reports from multiple independent sources. Higher confidence scores indicate more reliable assessments.

IP Address

195.91.131.218

IPv4 Public

AS31363

JSC ER-Telecom Holding

3 Reports

Is this your IP address? If the cause is fixed, you can request removal. Free of charge, usually decided within 48 hours. Request delisting

Russia Location

JSC ER-Telecom Holding ASN 31363

3 Reports

Community Data Source

Substantial Risk

Threat level 7/10 for 195.91.131.218 based on 3 documented incidents.

Consistent suspicious behavior patterns. 22% confidence rating.

More threatening than 79% of monitored IPs

Threat Categories

Brute-Force 3

SSH 3

Technical Details

Brute-force attacks systematically attempt password combinations against authentication systems.

Recommended Mitigations

Implement rate limiting, account lockout policies, multi-factor authentication, and fail2ban.

Behavioral Analysis

Activity Pattern: Consistent Activity

Steady malicious activity over 2 days indicates persistent threat actor operations.

First Observed 27. September 2026

Last Activity 29. September 2026

Recent (7 days) 0 incidents

High-Risk Network Association

This IP belongs to a network (ASN 31363) with elevated threat levels. The ISP JSC ER-Telecom Holding hosts multiple reported malicious addresses, suggesting systemic security issues or permissive policies.

Network-wide patterns may indicate this is part of a larger malicious infrastructure.

Security Recommendations

Configure firewall rules and intrusion detection alerts.

Long-term blocking recommended.

Reputation Summary

Threat Level 7/10 High

High

Activity Frequency 0/10 Inactive

Confidence Score 19% Low Confidence

Confidence History

27. Sep 2026 - 29. Sep 2026

22% Current

Stable Trend

Date	Categories	Source	Confidence
29. Sep 2026	SSH Brute-Force	Community	75%
28. Sep 2026	SSH Brute-Force	Community	75%
27. Sep 2026	SSH Brute-Force	Community	75%

Basic Information

IP Address: 195.91.131.218
IP Version: IPv4
Network Type: Public
Tor Network: No
Network Class: Class C

Geolocation

Country: RU
ASN: AS31363
ISP: JSC ER-Telecom Holding

DNS Information

Reverse DNS: mail.mskmg6.ru
PTR Record: Yes
Connection Type: Static

Statistics

Total Reports: 3
First Reported: 27 Sep 2026
Last Reported: 29 Sep 2026, 18:11

Network Reputation

Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.

Network Identity

ASN: AS31363

Organization: JSC ER-Telecom Holding

Country:

Network Threat Assessment

8/10

This network has a high threat level with significant malicious activity reported across multiple IPs.

Network Statistics

Total IPs Monitored

Total Reports

Reports per IP

Network Context

This IP address belongs to JSC ER-Telecom Holding (AS31363), which manages 1 IP addresses in our monitoring system. Out of these, 5 have been reported for suspicious activities, resulting in a network-wide threat level of 8/10.

Network warning: This network has elevated threat levels. Exercise caution when interacting with IPs from this ASN.