The IP 220.127.116.11 is blocked by Malwarebytes as the most common IP in the range 18.104.22.168 – 22.214.171.124. These IPs are used by a family of adware that uses DNS hijacks to serve advertisements.
The IP 126.96.36.199 belongs to one of the DNS servers used by the adware family called DNSUnlocker. DNSUnlocker changes the victim’s DNS settings in order to add or modify ads shown on websites visited.
Malwarebytes blocks the communications to this adware server.
Should users wish to visit a blocked IP address and exclude it from being blocked, they can add it to the exclusions list. Here’s how to do it.
The Exclusions tab includes a list of items to be excluded from scans. The items may include files, folders, websites, or applications that connect to the Internet, as well as previously detected exploits. To access the exclusions in Malwarebytes: