Tor node

[sp123]

Hello,

I noticed Malwarebytes is blocking 192.160.102[.]164

This is a Tor node, and blocking it breaks programs which use Tor. While Tor is abused - and it seems threat actors may have used the same server for malicious activities - an entire IP should not be blocked for a abuse unless it is used only for abuse, which is not the case.

Thank you.

Edited November 21, 2023 by sp123
It did break Whonix

[TeMerc]

11 minutes ago, sp123 said:

Hello,

I noticed Malwarebytes is blocking 192.160.102[.]164

This is a Tor node, and blocking it breaks programs which use Tor. While Tor is abused - and it seems threat actors may have used the same server for malicious activities - an entire IP should not be blocked for a abuse unless it is used only for abuse, which is not the case.

Thank you.

Hello, thanks for bringing this to our attention. We've reviewed the data from the IP(not an FP, cleaned) again and have determined it no longer warrants being blocked so we've disabled the block in our database. 

Removal should be reflected in the next database update going out in a few hours or so.