Sites hosted at the IP 220.127.116.11 have been involved in phishing activity, but we have also seen this IP being contacted by trojans detected by Malwarebytes as Trojan.Dropper to download spyware detected by Malwarebytes as Spyware.Lokibot and Spyware.PasswordStealer.
Malwarebytes blocks the IP 18.104.22.168 because it was associated with phishing.
Should users wish to visit a blocked IP Address and exclude it from being blocked, they can add it to the exclusions list. Here’s how to do it.
The Exclusions tab includes a list of items to be excluded from scans. The items may include files, folders, websites, or applications that connect to the Internet, as well as previously detected exploits. To access the exclusions in Malwarebytes:
· Select the exclusion type “Exclude a Website” and use the Next button to enter the IP address that you wish to visit.