The IP 220.127.116.11 was blocked because it hosts several sites that are involved in spreading Trojans and ransomware. The domains hosted at this IP have delivered Sality, a Trojan malware, as well as Locky ransomware.
The IP 18.104.22.168 is blocked by Malwarebytes as the most common IP in the range 22.214.171.124 – 126.96.36.199. These IPs are used by a family of adware that uses DNS hijacks to serve advertisements.
The IP 188.8.131.52 belongs to one of the DNS servers used by the adware family called DNSUnlocker. DNSUnlocker changes the victim’s DNS settings in order to add or modify ads shown on websites visited.
Malwarebytes blocks the communications to this adware server.
Should users wish to visit a blocked IP address and exclude it from being blocked, they can add it to the exclusions list. Here’s how to do it.
The Exclusions tab includes a list of items to be excluded from scans. The items may include files, folders, websites, or applications that connect to the Internet, as well as previously detected exploits. To access the exclusions in Malwarebytes: