191.96.249.212

ThreatDown is now the name of the Malwarebytes line of business products. References to Malwarebytes below reflect the amazing technology used to first identify the threat.

Short bio

The IP 191.96.249.212 was blocked because it is associated with malware identified as a keylogger known as Agent Tesla.

Malicious behavior

Agent Tesla is a commercial keylogger that can be abused to monitor the keystrokes on a system and take screenshots. The IP 191.96.249.212 hosts a webpanel for this keylogger.

Protection

block 191.96.249.212

Malwarebytes blocks the IP 191.96.249.212

Add an exclusion

Should users wish to visit a blocked IP Address and exclude it from being blocked, they can add it to the exclusions list. Here’s how to do it.

  • Open Malwarebytes for Windows.
  • Click the Detection History
  • Click the Allow List
  • To add an item to the Allow List, click Add.
  • Select Allow a website.
  • Select Add an IP address and enter the IP address that you wish to exclude.
  • Click on Done and the IP address should appear in your Allow List.