Related blog content
Trojans: What's the real deal?
Oh, the sites you will never see
Cobalt Strike, a penetration testing tool abused by criminals
The IP address 159.203.163.252 was blocked as part of the range 159.203.163.252/32 by Malwarebytes because it is associated with a Trojan.
Server(s) at this IP address were found to act as a C2 server for a Cobalt Strike instance.
Malwarebytes blocks the IP address 159.203.163.252 because it is associated with a Trojan.
Malwarebytes blocks 159.203.163.252
Should users wish to visit a blocked IP Address and exclude it from being blocked, they can add it to the exclusions list. Here’s how to do it.
Select your language