The IP 184.108.40.206 was blocked because it was associated with a Trojan detected by Malwarebytes as Trojan.CoinMiner.
The IP 220.127.116.11 was found to be hosting files in use for Monero mining by trojans.
Malwarebytes blocks the IP 18.104.22.168 because it was associated with a Trojan.
Should users wish to visit a blocked IP Address and exclude it from being blocked, they can add it to the exclusions list. Here’s how to do it.