159.203.163.252

detection icon

Short bio

The IP address 159.203.163.252 was blocked as part of the range 159.203.163.252/32 by Malwarebytes because it is associated with a Trojan.

Malicious behavior

Server(s) at this IP address were found to act as a C2 server for a Cobalt Strike instance.

Protection

Malwarebytes blocks the IP address 159.203.163.252 because it is associated with a Trojan.

Malwarebytes blocks 159.203.163.252
Malwarebytes blocks 159.203.163.252

Exclusion

Should users wish to visit a blocked IP Address and exclude it from being blocked, they can add it to the exclusions list. Here’s how to do it.

  • Open Malwarebytes for Windows.
  • Click the Detection History
  • Click the Allow List
  • To add an item to the Allow List, click Add.
  • Select Allow a website.
  • Select Add an IP address and enter the IP address that you wish to exclude.
  • Click on Done and the IP address should appear in your Allow List.