195.22.28.198

ThreatDown is now the name of the Malwarebytes line of business products. References to Malwarebytes below reflect the amazing technology used to first identify the threat.

Short bio

The IP 195.22.28.198 was blocked because it hosts several sites that are involved in spreading Trojansand ransomware. The domains hosted at this IP have delivered Sality, a Trojan malware, as well as Locky ransomware.

Protection

SalityIPblock

Malwarebytes blocks any connection to this IP.

Add an exclusion

Should users wish to visit a blocked IP Address and exclude it from being blocked, they can add it to the exclusions list. Here’s how to do it.

  • Open Malwarebytes for Windows.
  • Click the Detection History
  • Click the Allow List
  • To add an item to the Allow List, click Add.
  • Select Allow a website.
  • Select Add an IP address and enter the IP address that you wish to exclude.
  • Click on Done and the IP address should appear in your Allow List.