191.96.249.212

detection icon

Short bio

The IP 191.96.249.212 was blocked because it is associated with malware identified as a keylogger known as Agent Tesla.

Malicious behavior

Agent Tesla is a commercial keylogger that can be abused to monitor the keystrokes on a system and take screenshots. The IP 191.96.249.212 hosts a webpanel for this keylogger.

Protection

block 191.96.249.212

Malwarebytes blocks the IP 191.96.249.212

Exclusion

Should users wish to visit a blocked IP Address and exclude it from being blocked, they can add it to the exclusions list. Here’s how to do it.

  • Open Malwarebytes for Windows.
  • Click the Detection History
  • Click the Allow List
  • To add an item to the Allow List, click Add.
  • Select Allow a website.
  • Select Add an IP address and enter the IP address that you wish to exclude.
  • Click on Done and the IP address should appear in your Allow List.