NoName057 - Pro-Russian Hacker Group

This is the latest targets in use by the NoName057 hacking group and their tool called DDoSIA.
The data is almost live, with a maximum of 60min delay. What you see here is what currently is being distributed to all the members as new targets.

Countries in DDoS scope:

List last modified: Tue, 31 Mar 2026 08:30:02 +0200

FQDN IP IP NATIONALITY / ASN NAME
ATTACK TYPE ATTACK METHOD ATTACK PORT USE TLS/SSL?
netbutik.postnord.dk 185.31.79.5 Denmark / AS-60422 = Powerhosting Aps
HTTP2 GET 443 TLS/SSL = Yes
HTTP2 UDP_FLOOD 443 TLS/SSL = Yes
HTTP2 GET 443 TLS/SSL = Yes
HTTP2 POST 443 TLS/SSL = Yes
HTTP2 POST 443 TLS/SSL = Yes
HTTP2 POST 443 TLS/SSL = Yes
HTTP2 POST 443 TLS/SSL = Yes
TCP SYN 443 TLS/SSL = Yes
TCP SYN 80 TLS/SSL = Yes
TCP ACK 443 TLS/SSL = Yes
TCP ACK 80 TLS/SSL = Yes
TCP SYN_ACK 443 TLS/SSL = Yes
TCP SYN_ACK 80 TLS/SSL = Yes
TCP PING 443 TLS/SSL = Yes
TCP PING 80 TLS/SSL = Yes
NGINX_LORIS UDP_FLOOD 443 TLS/SSL = Yes
copenhagensuborbitals.com 83.169.37.20 Germany / AS-20773 = Host Europe GmbH
HTTP GET 443 TLS/SSL = Yes
HTTP POST 443 TLS/SSL = Yes
HTTP GET 443 TLS/SSL = Yes
HTTP GET 443 TLS/SSL = Yes
HTTP GET 443 TLS/SSL = Yes
HTTP GET 443 TLS/SSL = Yes
HTTP GET 443 TLS/SSL = Yes
TCP SYN 22 TLS/SSL = Yes
TCP ACK 22 TLS/SSL = Yes
TCP SYN 80 TLS/SSL = Yes
TCP ACK 80 TLS/SSL = Yes
TCP SYN 443 TLS/SSL = Yes
TCP ACK 443 TLS/SSL = Yes
TCP SYN_ACK 443 TLS/SSL = Yes
NGINX_LORIS UDP_FLOOD 443 TLS/SSL = Yes
www.borger.dk 212.98.96.22 Denmark / AS-31027 = GlobalConnect A/S
HTTP POST 443 TLS/SSL = Yes
HTTP GET 443 TLS/SSL = Yes
HTTP GET 443 TLS/SSL = Yes
TCP SYN 80 TLS/SSL = Yes
TCP SYN 443 TLS/SSL = Yes
NGINX_LORIS UDP_FLOOD 443 TLS/SSL = Yes
www.rn.dk 87.53.131.10 Denmark - Aalborg / AS-3292 = TDC Holding A/S
HTTP GET 443 TLS/SSL = Yes
HTTP GET 443 TLS/SSL = Yes
HTTP GET 443 TLS/SSL = Yes
TCP SYN 443 TLS/SSL = Yes
TCP ACK 443 TLS/SSL = Yes
TCP SYN_ACK 443 TLS/SSL = Yes
TCP PING 443 TLS/SSL = Yes
NGINX_LORIS UDP_FLOOD 443 TLS/SSL = Yes
TCP SYN 80 TLS/SSL = No
TCP ACK 80 TLS/SSL = No
TCP SYN 80 TLS/SSL = No
soroe.dk 23.88.5.125 Germany - Falkenstein / AS-24940 = Hetzner Online GmbH
HTTP2 GET 443 TLS/SSL = Yes
HTTP2 POST 443 TLS/SSL = Yes
HTTP2 POST 443 TLS/SSL = Yes
HTTP2 POST 443 TLS/SSL = Yes
HTTP2 POST 443 TLS/SSL = Yes
HTTP2 POST 443 TLS/SSL = Yes
HTTP2 GET 443 TLS/SSL = Yes
TCP SYN 443 TLS/SSL = Yes
TCP ACK 443 TLS/SSL = Yes
TCP SYN_ACK 443 TLS/SSL = Yes
TCP PING 443 TLS/SSL = Yes
NGINX_LORIS UDP_FLOOD 443 TLS/SSL = Yes
TCP SYN 80 TLS/SSL = No
TCP SYN 80 TLS/SSL = No
TCP SYN 80 TLS/SSL = No
TCP SYN 7007 TLS/SSL = No
TCP SYN 5357 TLS/SSL = No
ringsted.dk 195.182.39.60 Denmark - Ringsted / AS-47249 = Ringsted Kommune
TCP SYN 443 TLS/SSL = Yes
TCP ACK 443 TLS/SSL = Yes
TCP SYN_ACK 443 TLS/SSL = Yes
TCP PING 443 TLS/SSL = Yes
NGINX_LORIS UDP_FLOOD 443 TLS/SSL = Yes
TCP SYN 80 TLS/SSL = No
TCP ACK 80 TLS/SSL = No
TCP SYN_ACK 80 TLS/SSL = No
TCP PING 80 TLS/SSL = No
NGINX_LORIS UDP_FLOOD 80 TLS/SSL = No
HTTP GET 443 TLS/SSL = Yes
holbaek.dk 167.235.95.185 Germany - Berlin / AS-24940 = Hetzner Online GmbH
HTTP2 POST 443 TLS/SSL = Yes
HTTP2 GET 443 TLS/SSL = Yes
HTTP2 POST 443 TLS/SSL = Yes
HTTP2 POST 443 TLS/SSL = Yes
TCP SYN 443 TLS/SSL = Yes
TCP ACK 443 TLS/SSL = Yes
TCP SYN_ACK 443 TLS/SSL = Yes
TCP PING 443 TLS/SSL = Yes
NGINX_LORIS UDP_FLOOD 443 TLS/SSL = Yes
TCP SYN 80 TLS/SSL = No
TCP ACK 80 TLS/SSL = No
TCP SYN 7007 TLS/SSL = No
TCP SYN 5357 TLS/SSL = No
www.metroselskabet.dk 20.107.224.34 Ireland - Dublin / AS-8075 = MICROSOFT-CORP-MSN-AS-BLOCK
HTTP2 GET 443 TLS/SSL = Yes
HTTP2 GET 443 TLS/SSL = Yes
HTTP2 GET 443 TLS/SSL = Yes
HTTP2 GET 443 TLS/SSL = Yes
TCP SYN 443 TLS/SSL = Yes
TCP ACK 443 TLS/SSL = Yes
TCP SYN_ACK 443 TLS/SSL = Yes
TCP PING 443 TLS/SSL = Yes
NGINX_LORIS UDP_FLOOD 443 TLS/SSL = Yes
TCP SYN 80 TLS/SSL = No
TCP ACK 80 TLS/SSL = No
TCP SYN_ACK 443 TLS/SSL = No
TCP PING 80 TLS/SSL = No
www.nrg.dk 199.34.228.78 United States / AS-27647 = WEEBLY
TCP SYN 443 TLS/SSL = Yes
HTTP GET 443 TLS/SSL = Yes
TCP ACK 443 TLS/SSL = Yes
TCP SYN_ACK 443 TLS/SSL = Yes
TCP PING 443 TLS/SSL = Yes
NGINX_LORIS UDP_FLOOD 443 TLS/SSL = Yes
TCP SYN 80 TLS/SSL = No
TCP ACK 80 TLS/SSL = No
TCP SYN_ACK 80 TLS/SSL = No
TCP PING 80 TLS/SSL = No
www.dst.dk 91.208.143.1 Denmark / AS-47765 = Danmarks Statistik
HTTP GET 443 TLS/SSL = Yes
HTTP POST 443 TLS/SSL = Yes
HTTP GET 443 TLS/SSL = Yes
TCP SYN 443 TLS/SSL = Yes
TCP ACK 443 TLS/SSL = Yes
TCP SYN_ACK 443 TLS/SSL = Yes
TCP PING 443 TLS/SSL = Yes
NGINX_LORIS UDP_FLOOD 443 TLS/SSL = Yes
TCP SYN 80 TLS/SSL = No
TCP ACK 80 TLS/SSL = No
TCP SYN_ACK 80 TLS/SSL = No
TCP PING 80 TLS/SSL = No
byret.dk 93.191.155.240 Denmark / AS-48854 = team.blue Denmark A/S
TCP SYN 443 TLS/SSL = Yes
TCP ACK 443 TLS/SSL = Yes
TCP SYN_ACK 443 TLS/SSL = Yes
TCP PING 443 TLS/SSL = Yes
NGINX_LORIS UDP_FLOOD 443 TLS/SSL = Yes
TCP ACK 80 TLS/SSL = No
TCP SYN 80 TLS/SSL = No
TCP SYN_ACK 80 TLS/SSL = No
TCP PING 80 TLS/SSL = No
NGINX_LORIS UDP_FLOOD 80 TLS/SSL = No
HTTP GET 443 TLS/SSL = Yes
handelsretten.dk 93.191.155.240 Denmark / AS-48854 = team.blue Denmark A/S
TCP SYN 443 TLS/SSL = Yes
TCP ACK 443 TLS/SSL = Yes
TCP SYN_ACK 443 TLS/SSL = Yes
TCP PING 443 TLS/SSL = Yes
NGINX_LORIS UDP_FLOOD 443 TLS/SSL = Yes
TCP SYN 80 TLS/SSL = No
TCP ACK 80 TLS/SSL = No
TCP SYN_ACK 80 TLS/SSL = No
TCP PING 443 TLS/SSL = No
HTTP GET 443 TLS/SSL = Yes
rigsadvokaten.dk 185.153.154.38 Denmark - Valby / AS-58282 = Statens IT
TCP SYN 443 TLS/SSL = Yes
TCP ACK 443 TLS/SSL = Yes
TCP SYN_ACK 443 TLS/SSL = Yes
TCP PING 443 TLS/SSL = Yes
NGINX_LORIS UDP_FLOOD 443 TLS/SSL = Yes
TCP SYN 80 TLS/SSL = No
TCP SYN 80 TLS/SSL = No
TCP SYN_ACK 80 TLS/SSL = No
TCP PING 80 TLS/SSL = No
NGINX_LORIS UDP_FLOOD 80 TLS/SSL = No
HTTP GET 443 TLS/SSL = Yes
www.scangl.dk 165.160.15.20 United States / AS-19574 = CSC
TCP SYN 443 TLS/SSL = Yes
TCP ACK 443 TLS/SSL = Yes
NGINX_LORIS UDP_FLOOD 443 TLS/SSL = Yes
TCP SYN_ACK 443 TLS/SSL = Yes
TCP PING 443 TLS/SSL = Yes
HTTP GET 443 TLS/SSL = Yes
e-commerce.airgreenland.com 20.223.99.24 Ireland - Dublin / AS-8075 = MICROSOFT-CORP-MSN-AS-BLOCK
HTTP2 GET 443 TLS/SSL = Yes
HTTP2 POST 443 TLS/SSL = Yes
HTTP2 POST 443 TLS/SSL = Yes
HTTP2 POST 443 TLS/SSL = Yes
TCP SYN_ACK 443 TLS/SSL = Yes
TCP PING 443 TLS/SSL = Yes
NGINX_LORIS UDP_FLOOD 443 TLS/SSL = Yes
TCP SYN 80 TLS/SSL = No
TCP ACK 80 TLS/SSL = No
TCP SYN_ACK 80 TLS/SSL = No
bus.gl 94.231.109.37 Denmark / AS-48854 = team.blue Denmark A/S
HTTP2 GET 443 TLS/SSL = Yes
HTTP2 GET 443 TLS/SSL = Yes
HTTP2 GET 443 TLS/SSL = Yes
HTTP2 GET 443 TLS/SSL = Yes
HTTP2 GET 443 TLS/SSL = Yes
TCP SYN 443 TLS/SSL = Yes
TCP ACK 443 TLS/SSL = Yes
TCP SYN_ACK 443 TLS/SSL = Yes
TCP PING 443 TLS/SSL = Yes
NGINX_LORIS UDP_FLOOD 443 TLS/SSL = Yes
TCP SYN 80 TLS/SSL = No
TCP ACK 80 TLS/SSL = No
TCP SYN_ACK 80 TLS/SSL = No
TCP PING 80 TLS/SSL = No
TCP SYN 22 TLS/SSL = No
TCP SYN 21 TLS/SSL = No
sdkgroup.com 65.21.254.165 Finland - Helsinki / AS-24940 = Hetzner Online GmbH
HTTP2 GET 443 TLS/SSL = Yes
HTTP2 POST 443 TLS/SSL = Yes
HTTP2 GET 443 TLS/SSL = Yes
HTTP2 GET 443 TLS/SSL = Yes
HTTP2 GET 443 TLS/SSL = Yes
HTTP2 GET 443 TLS/SSL = Yes
HTTP2 POST 443 TLS/SSL = Yes
UDP UDP_FLOOD 80 TLS/SSL = Yes
TCP SYN 80 TLS/SSL = Yes
TCP SYN 443 TLS/SSL = Yes
NGINX_LORIS UDP_FLOOD 443 TLS/SSL = Yes
hvidvask.dk 212.98.96.11 Denmark / AS-31027 = GlobalConnect A/S
HTTP GET 443 TLS/SSL = Yes
HTTP GET 443 TLS/SSL = Yes
HTTP GET 443 TLS/SSL = Yes
HTTP GET 443 TLS/SSL = Yes
UDP UDP_FLOOD 80 TLS/SSL = Yes
TCP SYN 80 TLS/SSL = Yes
TCP SYN 443 TLS/SSL = Yes
NGINX_LORIS UDP_FLOOD 443 TLS/SSL = Yes