37.27.38.128
Classification: Malicious
37.27.38.128 is a malicious IP address in Helsinki, FI. Linked to Mimikatz malware. 7 sightings from ThreatFox Abuse.ch and Barracuda, last seen 2026-10-09.
Current activity
- Known attacker — Seen launching attacks over the Internet.
MITRE ATT&CK associations
Malware families: MIMIKATZ (S0002)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Mail Spammer | Barracuda | 2025-05-20 12:17:07 | 2026-10-09 19:17:08 | attacker malicious-activity | |
| MimiKatz | ThreatFox Abuse.ch | 2025-05-20 12:17:03 | 2025-05-21 11:43:18 | malicious-activity | S0002 Mimikatz |
Tags
as24940 c2 censys hacktool hetzner-as mimikatz open-dir port:8080Whois information
- AS name
- AS24940 Hetzner Online GmbH
- Registrant
- Hetzner Online GmbH
- City
- Helsinki
- Postal code
- 00761
- Country
- FI — Finland 🇫🇮
- First indexed
- 2025-05-20 12:17:03
- Last updated
- 2026-10-09 19:17:09