191.96.249.212

Short bio

The IP 191.96.249.212 was blocked because it is associated with malware identified as a keylogger known as Agent Tesla.

Malicious behavior

Agent Tesla is a commercial keylogger that can be abused to monitor the keystrokes on a system and take screenshots. The IP 191.96.249.212 hosts a webpanel for this keylogger.

Protection

Malwarebytes blocks the IP 191.96.249.212 because it is associated with malware.

block 191.96.249.212

Malwarebytes blocks the IP 191.96.249.212

Exclusion

Should users wish to visit a blocked IP Address and exclude it from being blocked, they can add it to the exclusions list. Here’s how to do it.

The Exclusions tab includes a list of items to be excluded from scans. The items may include files, folders, websites, or applications that connect to the Internet, as well as previously detected exploits. To access the exclusions in Malwarebytes:

  • Click on the Settings tab in the left pane.
  • Click on the Exclusions tab.
  • Click the Add Exclusion button.
  • Select the exclusion type “Exclude a Website” and use the Next button to enter the IP address that you wish to visit.

Cybersecurity info you can’t do without

Want to stay informed on the latest news in cybersecurity? Sign up for our newsletter and learn how to protect your computer from threats.

Select your language