IOC Radar
IPMediumSignal 28/100

216.198.54.11

Location
United StatesUnited States
San Francisco, California
ASN
AS209242
Zendesk, Inc.
First Seen
Nov 14, 2025
Last Seen
May 4, 2026
Nov 14
First Seen
221d ago
May 4
Last Seen
49d ago
5
Reports
source reports
28%
Confidence
medium
Found in 5 reports. Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
IPv4 Address
Network layer indicator observed in threat reports.
MISP Category
Network Activity
Confidence
28%
Signal Score
28 / 100
IDS Rule
No
Threat Context
Tags
MITRE ATT&CK

MITRE ATT&CK TTPs

46 techniques

Network Information

CountryUSUnited States
RegionSan Francisco, California
ASNAS209242
OrganizationZendesk, Inc.

Feed Intelligence Summary

5 reports28% confidence
5
Source reports
28%
Confidence score
Category tags
aaaaaccount discoveryaccount profilingaccount securityaccount takeoveractive scanactive scanningada indicatoraddressalertsalf:trojan:msil/agenttesla.kmanalysis dateantivmapi abuseasiaauthentication bypassauthentication flawbad reputationbloat-abrute forcecanadacaptionchinacode executioncommand and controlcommand executioncommunication protocolcredential accesscredential harvestingcredential stuffingcredential theftcredentialtheftcryptocurrencycryptographydata breachdata exfiltrationdata store exposuredata uploaddataexfiltrationdigital certificatedigital signaturedns attacke-signature securityeuropeexecutable malwareexploitation activityfind suggestedhostname addhttp scannericmpidentity & access exploitationindicators of compromiseinfostealerinfrastructure acquisitionreconnaissanceinjection activityinteliocsipv4japankeyloggerless seemalicious softwaremalwaremalware activitymalware signingmozillaname serversnetworknextnorth americansisdlnullsoft_nsisoperating system securitypassive dnsphishingphishing attackpresent augpresent janpresent junpresent sepprocess injectionprotocol-deviproxyread creconnaissanceremote servicesresearchedreview iocsscannerserversservicesocial engineeringsoftware exploitationsoftware integrityspainsubidt1003t1005t1007t1012t1021t1023t1027t1031t1041t1047t1053t1055t1059t1060t1071t1071.001t1078t1081t1082t1102t1110t1112t1115t1119t1129t1189t1190t1203t1204t1486t1499.002t1539t1554.001t1554.003t1555t1565t1566t1566.001t1566.002t1566.003t1567t1587.001t1590.001t1595.001t1595.002t1595.003tech broismthreat actortitle errortor nodetrojandroppertwittertype aunitedunited statesurlsusw32.bloat-aweb application attackweb trafficwin32 malwarewindows malwarewmiwriteyara detections

Activity Timeline

1 total obs
May 4May 4

Threat Activity Heatmap

· Peak: 2026-05-04
Less
More
Mon
Wed
Fri
Jun
·
Jul
·
·
·
Aug
·
·
·
Sep
·
·
·
·
Oct
·
·
·
Nov
·
·
·
Dec
·
·
·
·
Jan
·
·
·
Feb
·
·
·
Mar
·
·
·
·
Apr
·
·
·
May
·
·
·
Jun
·
·
24h
0
Dormant
7d
0
Dormant
30d
0
Dormant
3mo
1
Minimal
Threat ScoreLow Risk
28
SIGNAL
Signal Score
28%
Confidence
5
Reports
First seenNov 14, 2025
Last seenMay 4, 2026
GeolocationUS
CountryUnited States
LocationSan Francisco, California
ASNAS209242
OrgZendesk, Inc.
Coords37.7823, -122.4100

VirusTotal

Not checked

WHOIS

raw
NetRange: 216.198.0.0 - 216.198.63.255 CIDR: 216.198.0.0/18 NetName: ZENDESK-NETWORK NetHandle: NET-216-198-0-0-1 Parent: NET216 (NET-216-0-0-0-0) NetType: Direct Allocation OriginAS: Organization: Zendesk, Inc. (ZENDE-3) RegDate: 2015-05-29 Updated: 2024-03-20 Comment: -----BEGIN CERTIFICATE-----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-----END CERTIFICATE----- Ref: https://rdap.arin.net/registry/ip/216.198.0.0 OrgName: Zendesk, Inc. OrgId: ZENDE-3 Address: 989 Market St City: San Francisco StateProv: CA PostalCode: 94103 Country: US RegDate: 2012-10-04 Updated: 2024-02-12 Ref: https://rdap.arin.net/registry/entity/ZENDE-3 OrgAbuseHandle: NETWO5465-ARIN OrgAbuseName: Network Operations OrgAbusePhone: +1-415-418-7506 OrgAbuseEmail: [email protected] OrgAbuseRef: https://rdap.arin.net/registry/entity/NETWO5465-ARIN OrgTechHandle: NETWO5465-ARIN OrgTechName: Network Operations OrgTechPhone: +1-415-418-7506 OrgTechEmail: [email protected] OrgTechRef: https://rdap.arin.net/registry/entity/NETWO5465-ARIN OrgNOCHandle: NETWO5465-ARIN OrgNOCName: Network Operations OrgNOCPhone: +1-415-418-7506 OrgNOCEmail: [email protected] OrgNOCRef: https://rdap.arin.net/registry/entity/NETWO5465-ARIN OrgRoutingHandle: NETWO5465-ARIN OrgRoutingName: Network Operations OrgRoutingPhone: +1-415-418-7506 OrgRoutingEmail: [email protected] OrgRoutingRef: https://rdap.arin.net/registry/entity/NETWO5465-ARIN

Export & API

STIX 2.1 Bundle
CSV Export
Permalink

IOC Journey

medium
First detected 7 months ago · Last seen 1 month ago
Appeared in 5 threat reports