191.96.249.212

Short bio

The IP 191.96.249.212 was blocked because it is associated with malware identified as a keylogger known as Agent Tesla.

Malicious behavior

Agent Tesla is a commercial keylogger that can be abused to monitor the keystrokes on a system and take screenshots. The IP 191.96.249.212 hosts a webpanel for this keylogger.

Protection

Malwarebytes blocks the IP 191.96.249.212

Exclusion

Should users wish to visit a blocked IP Address and exclude it from being blocked, they can add it to the exclusions list. Here’s how to do it.

• Open Malwarebytes for Windows.
• Click the Detection History
• Click the Allow List
• To add an item to the Allow List, click Add.
• Select Allow a website.
• Select Add an IP address and enter the IP address that you wish to exclude.
• Click on Done and the IP address should appear in your Allow List.