Firewall Rules in Malwarebytes for Windows

  • Compatible with:
  • Windows

Malwarebytes URLs

The following table lists URLs and ports that should be opened on your firewall for Malwarbytes version 5 on Windows devices to communicate properly with these servers. By default, these ports are open, but if you have customized your firewall verify the following rules are in place.

URL Purpose
www.malwarebytes.com:443 Used to verify connectivity to the Malwarebytes servers.
cleo.mb-internal.com:443 Used by the in-app purchase flow to simplify the process of upgrading or renewing your subscription.
links.malwarebytes.com:443 Used by the in-app purchase flow to simplify the process of upgrading or renewing your subscription.
iris.mwbsys.com:443 Used for serving in-app messaging, such as news about the latest threats, personalized reports, renewal reminders or other offers.
my-device.malwarebytes.com:443 Used to register your installation with on Malwarebytes account portal: my.malwarebytes.com.
cdn.mwbsys.com:443 Used to deliver new updates and downloads to Malwarebytes.
sirius.mwbsys.com:443 Used to check for updates for both the product version and the protection database.
keystone.mwbsys.com:443 Used to validate your subscription.
telemetry.malwarebytes.com:443 Communicates telemetry and threat information to Malwarebytes servers. More information on our telemetry can be found on our Privacy Policy.
hubble.mb-cosmos.com:443 Used to validate threats against Malwarebytes Nebula servers for better protection and to reduce potential for detection of legitimate applications.

Malwarebytes files

The following table lists files that should be allowed through your firewall for Malwarebytes version 5 on Windows devices.

Application Purpose
C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.exe File that controls the Malwarebytes app. 
C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe File that controls the real-time protection. 
C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe File that controls the VPN connection. 
Was this article helpful?
14 out of 37 found this helpful