159.203.163.252

Short bio

The IP address 159.203.163.252 was blocked as part of the range 159.203.163.252/32 by Malwarebytes because it is associated with a Trojan.

Malicious behavior

Server(s) at this IP address were found to act as a C2 server for a Cobalt Strike instance.

Protection

Malwarebytes blocks the IP address 159.203.163.252 because it is associated with a Trojan.

Exclusion

Should users wish to visit a blocked IP Address and exclude it from being blocked, they can add it to the exclusions list. Here’s how to do it.

• Open Malwarebytes for Windows.
• Click the Detection History
• Click the Allow List
• To add an item to the Allow List, click Add.
• Select Allow a website.
• Select Add an IP address and enter the IP address that you wish to exclude.
• Click on Done and the IP address should appear in your Allow List.