NoName057 - Pro-Russian Hacker Group

This is the latest targets in use by the NoName057 hacking group and their tool called DDoSIA.
The data is almost live, with a maximum of 60min delay. What you see here is what currently is being distributed to all the members as new targets.

Countries in DDoS scope:

List last modified: Sat, 30 May 2026 08:30:01 +0200

FQDN IP IP NATIONALITY / ASN NAME
ATTACK TYPE ATTACK METHOD ATTACK PORT USE TLS/SSL?
www.regione.veneto.it 89.17.160.89 Italy - Mestre / AS-41651 = Regione Veneto
HTTP GET 443 TLS/SSL = Yes
HTTP GET 443 TLS/SSL = Yes
HTTP GET 443 TLS/SSL = Yes
TCP SYN 80 TLS/SSL = Yes
TCP ACK 80 TLS/SSL = Yes
TCP SYN_ACK 80 TLS/SSL = Yes
TCP SYN 443 TLS/SSL = Yes
TCP ACK 443 TLS/SSL = Yes
TCP SYN_ACK 443 TLS/SSL = Yes
NGINX_LORIS UDP_FLOOD 443 TLS/SSL = Yes
www.comune.cavallinotreporti.ve.it 217.64.201.219 Italy - Frosinone / AS-12637 = SEEWEB s.r.l.
HTTP2 GET 443 TLS/SSL = Yes
HTTP2 GET 443 TLS/SSL = Yes
HTTP2 GET 443 TLS/SSL = Yes
HTTP2 GET 443 TLS/SSL = Yes
HTTP2 GET 443 TLS/SSL = Yes
TCP SYN 443 TLS/SSL = Yes
TCP ACK 443 TLS/SSL = Yes
TCP SYN_ACK 443 TLS/SSL = Yes
TCP PING 443 TLS/SSL = Yes
NGINX_LORIS UDP_FLOOD 443 TLS/SSL = Yes
TCP SYN 80 TLS/SSL = No
TCP ACK 80 TLS/SSL = No
TCP SYN_ACK 80 TLS/SSL = No
TCP PING 80 TLS/SSL = No
servizi.comune.cavallinotreporti.ve.it 94.177.194.9 Italy - Arezzo / AS-31034 = Aruba S.p.A.
HTTP2 POST 443 TLS/SSL = Yes
HTTP2 GET 443 TLS/SSL = Yes
HTTP2 GET 443 TLS/SSL = Yes
HTTP2 GET 443 TLS/SSL = Yes
TCP SYN 443 TLS/SSL = Yes
TCP ACK 443 TLS/SSL = Yes
TCP SYN_ACK 443 TLS/SSL = Yes
TCP PING 443 TLS/SSL = Yes
NGINX_LORIS UDP_FLOOD 443 TLS/SSL = Yes
TCP SYN 80 TLS/SSL = No
TCP ACK 80 TLS/SSL = No
TCP SYN_ACK 80 TLS/SSL = No
TCP PING 80 TLS/SSL = No
www.comune.albignasego.pd.it 195.231.24.148 Italy / AS-31034 = Aruba S.p.A.
HTTP2 POST 443 TLS/SSL = Yes
HTTP2 GET 443 TLS/SSL = Yes
HTTP2 GET 443 TLS/SSL = Yes
HTTP2 GET 443 TLS/SSL = Yes
HTTP2 GET 443 TLS/SSL = Yes
TCP SYN 443 TLS/SSL = Yes
TCP ACK 443 TLS/SSL = Yes
TCP SYN_ACK 443 TLS/SSL = Yes
TCP PING 443 TLS/SSL = Yes
NGINX_LORIS UDP_FLOOD 443 TLS/SSL = Yes
TCP SYN 80 TLS/SSL = No
TCP ACK 80 TLS/SSL = No
TCP SYN_ACK 80 TLS/SSL = No
TCP PING 80 TLS/SSL = No
TCP SYN 21 TLS/SSL = No
TCP SYN 53 TLS/SSL = No
TCP SYN 8443 TLS/SSL = No
www.provincia.padova.it 81.126.69.20 Italy / AS-20746 = TIM
HTTP POST 443 TLS/SSL = Yes
HTTP GET 443 TLS/SSL = Yes
HTTP GET 443 TLS/SSL = Yes
HTTP GET 443 TLS/SSL = Yes
HTTP GET 443 TLS/SSL = Yes
HTTP GET 443 TLS/SSL = Yes
TCP SYN 443 TLS/SSL = Yes
TCP ACK 443 TLS/SSL = Yes
TCP SYN_ACK 443 TLS/SSL = Yes
TCP PING 443 TLS/SSL = Yes
NGINX_LORIS UDP_FLOOD 443 TLS/SSL = Yes
TCP SYN 80 TLS/SSL = No
TCP ACK 80 TLS/SSL = No
TCP SYN_ACK 80 TLS/SSL = No
TCP PING 80 TLS/SSL = No
www.provincia.treviso.it 93.62.181.49 Italy - Sesto San Giovanni / AS-12874 = Fastweb
HTTP GET 443 TLS/SSL = Yes
HTTP GET 443 TLS/SSL = Yes
HTTP GET 443 TLS/SSL = Yes
HTTP GET 443 TLS/SSL = Yes
HTTP GET 443 TLS/SSL = Yes
TCP SYN 443 TLS/SSL = Yes
TCP ACK 443 TLS/SSL = Yes
TCP SYN_ACK 443 TLS/SSL = Yes
TCP PING 443 TLS/SSL = Yes
NGINX_LORIS UDP_FLOOD 443 TLS/SSL = Yes
TCP SYN 80 TLS/SSL = Yes
TCP ACK 80 TLS/SSL = No
TCP SYN_ACK 80 TLS/SSL = No
TCP PING 80 TLS/SSL = No
web.provincia.vr.it 89.31.75.224 Italy / AS-24994 = genesys informatica srl
HTTP2 POST 443 TLS/SSL = Yes
HTTP2 POST 443 TLS/SSL = Yes
HTTP2 GET 443 TLS/SSL = Yes
HTTP2 GET 443 TLS/SSL = Yes
HTTP2 GET 443 TLS/SSL = Yes
TCP SYN 443 TLS/SSL = Yes
TCP ACK 443 TLS/SSL = Yes
TCP SYN_ACK 443 TLS/SSL = Yes
TCP PING 443 TLS/SSL = Yes
NGINX_LORIS UDP_FLOOD 443 TLS/SSL = Yes
TCP SYN 80 TLS/SSL = No
TCP ACK 80 TLS/SSL = No
TCP SYN_ACK 80 TLS/SSL = No
TCP PING 80 TLS/SSL = No
TCP SYN 21 TLS/SSL = No
HTTP2 POST 443 TLS/SSL = Yes
www.comune.arzignano.vi.it 217.64.201.219 Italy - Frosinone / AS-12637 = SEEWEB s.r.l.
HTTP2 GET 443 TLS/SSL = Yes
HTTP2 GET 443 TLS/SSL = Yes
HTTP2 GET 443 TLS/SSL = Yes
HTTP2 GET 443 TLS/SSL = Yes
HTTP2 GET 443 TLS/SSL = Yes
TCP SYN 443 TLS/SSL = Yes
TCP ACK 443 TLS/SSL = Yes
TCP SYN_ACK 443 TLS/SSL = Yes
TCP PING 443 TLS/SSL = Yes
NGINX_LORIS UDP_FLOOD 443 TLS/SSL = Yes
TCP SYN 80 TLS/SSL = No
TCP ACK 80 TLS/SSL = No
TCP SYN_ACK 80 TLS/SSL = No
TCP PING 80 TLS/SSL = No
TCP SYN 21 TLS/SSL = No
servizi.comune.arzignano.vi.it 94.177.194.9 Italy - Arezzo / AS-31034 = Aruba S.p.A.
HTTP GET 443 TLS/SSL = Yes
HTTP GET 443 TLS/SSL = Yes
HTTP2 GET 443 TLS/SSL = Yes
HTTP3 GET 443 TLS/SSL = Yes
HTTP2 GET 443 TLS/SSL = Yes
TCP SYN 443 TLS/SSL = Yes
TCP ACK 443 TLS/SSL = Yes
TCP SYN_ACK 443 TLS/SSL = Yes
TCP PING 443 TLS/SSL = Yes
NGINX_LORIS UDP_FLOOD 443 TLS/SSL = Yes
TCP SYN 80 TLS/SSL = No
TCP ACK 80 TLS/SSL = No
TCP SYN_ACK 80 TLS/SSL = No
TCP PING 80 TLS/SSL = No
TCP SYN 21 TLS/SSL = No
www.comune.lonigo.vi.it 93.56.55.249 Italy - Milan / AS-12874 = Fastweb
HTTP2 GET 443 TLS/SSL = Yes
HTTP2 GET 443 TLS/SSL = Yes
HTTP2 POST 443 TLS/SSL = Yes
HTTP2 GET 443 TLS/SSL = Yes
HTTP2 GET 443 TLS/SSL = Yes
TCP SYN 443 TLS/SSL = Yes
TCP ACK 443 TLS/SSL = Yes
TCP SYN_ACK 443 TLS/SSL = Yes
TCP PING 443 TLS/SSL = Yes
NGINX_LORIS UDP_FLOOD 443 TLS/SSL = Yes
TCP SYN 80 TLS/SSL = No
TCP ACK 80 TLS/SSL = No
TCP SYN_ACK 80 TLS/SSL = No
TCP PING 80 TLS/SSL = No
vurp.comune.lonigo.vi.it 93.56.55.224 Italy - Milan / AS-12874 = Fastweb
HTTP2 GET 443 TLS/SSL = Yes
TCP SYN 443 TLS/SSL = Yes
TCP ACK 443 TLS/SSL = Yes
TCP SYN_ACK 443 TLS/SSL = Yes
TCP PING 443 TLS/SSL = Yes
NGINX_LORIS UDP_FLOOD 443 TLS/SSL = Yes
TCP SYN 80 TLS/SSL = No
TCP ACK 80 TLS/SSL = No
TCP SYN_ACK 80 TLS/SSL = No
TCP PING 80 TLS/SSL = No
www.provincia.vicenza.it 185.105.240.250 Italy - Schio / AS-200480 = Pasubio Tecnologia Srl
HTTP GET 443 TLS/SSL = Yes
HTTP GET 443 TLS/SSL = Yes
HTTP GET 443 TLS/SSL = Yes
HTTP GET 443 TLS/SSL = Yes
HTTP POST 443 TLS/SSL = Yes
HTTP GET 443 TLS/SSL = Yes
HTTP GET 443 TLS/SSL = Yes
TCP SYN 443 TLS/SSL = Yes
TCP ACK 443 TLS/SSL = Yes
TCP SYN_ACK 443 TLS/SSL = Yes
TCP PING 443 TLS/SSL = Yes
NGINX_LORIS UDP_FLOOD 443 TLS/SSL = Yes
TCP SYN 80 TLS/SSL = No
TCP ACK 80 TLS/SSL = No
TCP SYN_ACK 80 TLS/SSL = No
TCP PING 80 TLS/SSL = No
cittametropolitana.ve.it 94.247.12.174 Italy - Mestre / AS-48394 = Venis S.p.A.
HTTP GET 443 TLS/SSL = Yes
HTTP GET 443 TLS/SSL = Yes
HTTP GET 443 TLS/SSL = Yes
HTTP POST 443 TLS/SSL = Yes
HTTP GET 443 TLS/SSL = Yes
TCP SYN 443 TLS/SSL = Yes
TCP ACK 443 TLS/SSL = Yes
TCP SYN_ACK 443 TLS/SSL = Yes
TCP PING 443 TLS/SSL = Yes
NGINX_LORIS UDP_FLOOD 443 TLS/SSL = Yes
TCP SYN 80 TLS/SSL = No
TCP ACK 80 TLS/SSL = No
TCP SYN_ACK 80 TLS/SSL = No
TCP PING 80 TLS/SSL = No
www.prestitionline.it 213.92.12.195 Italy / AS-3313 = BT Italia S.p.A.
HTTP2 POST 443 TLS/SSL = Yes
HTTP2 POST 443 TLS/SSL = Yes
HTTP2 GET 443 TLS/SSL = Yes
HTTP2 GET 443 TLS/SSL = Yes
TCP SYN 80 TLS/SSL = Yes
TCP SYN 443 TLS/SSL = Yes
NGINX_LORIS UDP_FLOOD 443 TLS/SSL = Yes
www.mutuionline.it 213.92.12.170 Italy / AS-3313 = BT Italia S.p.A.
HTTP2 GET 443 TLS/SSL = Yes
HTTP2 POST 443 TLS/SSL = Yes
HTTP2 POST 443 TLS/SSL = Yes
HTTP2 POST 443 TLS/SSL = Yes
HTTP2 GET 443 TLS/SSL = Yes
HTTP2 GET 443 TLS/SSL = Yes
TCP SYN 80 TLS/SSL = Yes
TCP SYN 443 TLS/SSL = Yes
NGINX_LORIS UDP_FLOOD 443 TLS/SSL = Yes
www.cercassicurazioni.it 213.92.12.157 Italy / AS-3313 = BT Italia S.p.A.
HTTP2 UDP_FLOOD 443 TLS/SSL = Yes
HTTP2 POST 443 TLS/SSL = Yes
HTTP2 POST 443 TLS/SSL = Yes
HTTP2 GET 443 TLS/SSL = Yes
HTTP2 POST 443 TLS/SSL = Yes
HTTP2 GET 443 TLS/SSL = Yes
TCP SYN 80 TLS/SSL = Yes
TCP SYN 443 TLS/SSL = Yes
NGINX_LORIS UDP_FLOOD 443 TLS/SSL = Yes
www.quixa.it 171.18.96.89 France / AS-12696 = AXA Technology Services France GIE
HTTP GET 443 TLS/SSL = Yes
HTTP GET 443 TLS/SSL = Yes
HTTP GET 443 TLS/SSL = Yes
TCP SYN 80 TLS/SSL = Yes
TCP SYN 443 TLS/SSL = Yes
NGINX_LORIS UDP_FLOOD 443 TLS/SSL = Yes
prev.quixa.it 171.18.96.89 France / AS-12696 = AXA Technology Services France GIE
HTTP GET 443 TLS/SSL = Yes
HTTP GET 443 TLS/SSL = Yes
HTTP GET 443 TLS/SSL = Yes
HTTP GET 443 TLS/SSL = Yes
HTTP POST 443 TLS/SSL = Yes
www.24hassistance.com 52.166.246.90 The Netherlands - Amsterdam / AS-8075 = MICROSOFT-CORP-MSN-AS-BLOCK
HTTP GET 443 TLS/SSL = Yes
HTTP GET 443 TLS/SSL = Yes
HTTP GET 443 TLS/SSL = Yes
HTTP POST 443 TLS/SSL = Yes
HTTP POST 443 TLS/SSL = Yes
TCP SYN 80 TLS/SSL = Yes
TCP SYN 443 TLS/SSL = Yes
NGINX_LORIS UDP_FLOOD 443 TLS/SSL = Yes
www.coverwise.it 159.135.142.106 Germany / AS-39921 = Rackspace Ltd.
HTTP POST 443 TLS/SSL = Yes
HTTP POST 443 TLS/SSL = Yes
HTTP POST 443 TLS/SSL = Yes
HTTP GET 443 TLS/SSL = Yes
NGINX_LORIS UDP_FLOOD 443 TLS/SSL = Yes
TCP SYN 80 TLS/SSL = Yes
TCP SYN 443 TLS/SSL = Yes
www.holins.it 51.210.97.11 France / AS-16276 = OVH SAS
HTTP POST 443 TLS/SSL = Yes
HTTP GET 443 TLS/SSL = Yes
HTTP GET 443 TLS/SSL = Yes
HTTP GET 443 TLS/SSL = Yes
HTTP GET 443 TLS/SSL = Yes
HTTP POST 443 TLS/SSL = Yes
TCP SYN 22 TLS/SSL = Yes
TCP SYN 80 TLS/SSL = Yes
TCP SYN 443 TLS/SSL = Yes
TCP SYN 9090 TLS/SSL = Yes
NGINX_LORIS UDP_FLOOD 443 TLS/SSL = Yes
www.alilaguna.it 31.43.160.6 The Netherlands / AS-16509 = AMAZON-02
HTTP3 GET 443 TLS/SSL = Yes
HTTP3 GET 443 TLS/SSL = Yes
HTTP3 GET 443 TLS/SSL = Yes
HTTP3 GET 443 TLS/SSL = Yes
HTTP3 GET 443 TLS/SSL = Yes
TCP SYN 443 TLS/SSL = Yes
TCP ACK 443 TLS/SSL = Yes
TCP SYN_ACK 443 TLS/SSL = Yes
TCP PING 443 TLS/SSL = Yes
NGINX_LORIS UDP_FLOOD 443 TLS/SSL = Yes
TCP ACK 80 TLS/SSL = No
TCP ACK 80 TLS/SSL = No
TCP SYN_ACK 80 TLS/SSL = No
TCP PING 80 TLS/SSL = No
shop.alilaguna.it 35.234.83.43 Germany - Frankfurt am Main / AS-396982 = GOOGLE-CLOUD-PLATFORM
HTTP2 GET 443 TLS/SSL = Yes
HTTP2 GET 443 TLS/SSL = Yes
HTTP2 GET 443 TLS/SSL = Yes
HTTP2 GET 443 TLS/SSL = Yes
HTTP2 GET 443 TLS/SSL = Yes
TCP SYN 443 TLS/SSL = Yes
TCP ACK 443 TLS/SSL = Yes
TCP SYN_ACK 443 TLS/SSL = Yes
TCP PING 443 TLS/SSL = Yes
NGINX_LORIS UDP_FLOOD 443 TLS/SSL = Yes
TCP SYN 80 TLS/SSL = No
TCP ACK 80 TLS/SSL = No
TCP SYN_ACK 80 TLS/SSL = No
TCP PING 80 TLS/SSL = No