NoName057 - Pro-Russian Hacker Group

This is the latest targets in use by the NoName057 hacking group and their tool called DDoSIA.
The data is almost live, with a maximum of 60min delay. What you see here is what currently is being distributed to all the members as new targets.

Countries in DDoS scope:

List last modified: Sun, 27 Sep 2026 09:30:02 +0200

FQDN IP IP NATIONALITY / ASN NAME
ATTACK TYPE ATTACK METHOD ATTACK PORT USE TLS/SSL?
⤷
⤷
vertol.com.ua 185.68.16.182 Ukraine / AS-200000 = Hosting Ukraine LTD
HTTP2 GET 443 TLS/SSL = Yes
⤷
HTTP2 POST 443 TLS/SSL = Yes
⤷
⤷
HTTP2 GET 443 TLS/SSL = Yes
⤷
HTTP2 POST 443 TLS/SSL = Yes
⤷
⤷
TCP SYN 80 TLS/SSL = Yes
TCP ACK 80 TLS/SSL = Yes
TCP SYN_ACK 80 TLS/SSL = Yes
TCP SYN 443 TLS/SSL = Yes
TCP ACK 443 TLS/SSL = Yes
TCP SYN_ACK 443 TLS/SSL = Yes
tec.dp.ua 89.162.171.12 Ukraine - Dnipro / AS-15895 = Kyivstar PJSC
HTTP GET 443 TLS/SSL = Yes
⤷
HTTP GET 443 TLS/SSL = Yes
⤷
HTTP POST 443 TLS/SSL = Yes
⤷
⤷
TCP SYN 80 TLS/SSL = Yes
TCP ACK 80 TLS/SSL = Yes
TCP SYN 443 TLS/SSL = Yes
TCP ACK 443 TLS/SSL = Yes
NGINX_LORIS UDP_FLOOD 443 TLS/SSL = Yes
HTTP GET 443 TLS/SSL = Yes
⤷
agro-ukraine.com 176.111.63.125 Ukraine - Velyka Oleksandrivka / AS-24703 = United Networks of Ukraine Ltd
HTTP GET 443 TLS/SSL = Yes
⤷
HTTP GET 443 TLS/SSL = Yes
⤷
HTTP POST 443 TLS/SSL = Yes
⤷
⤷
HTTP POST 443 TLS/SSL = Yes
⤷
⤷
HTTP POST 443 TLS/SSL = Yes
⤷
⤷
HTTP POST 443 TLS/SSL = Yes
⤷
⤷
TCP SYN 80 TLS/SSL = Yes
TCP ACK 80 TLS/SSL = Yes
TCP SYN 443 TLS/SSL = Yes
TCP ACK 443 TLS/SSL = Yes
NGINX_LORIS UDP_FLOOD 443 TLS/SSL = Yes
TCP SYN 22 TLS/SSL = Yes
TCP ACK 22 TLS/SSL = Yes
TCP SYN_ACK 80 TLS/SSL = Yes
TCP SYN_ACK 22 TLS/SSL = Yes
tor-safety.com 185.104.45.84 Ukraine / AS-200000 = Hosting Ukraine LTD
HTTP2 GET 443 TLS/SSL = Yes
⤷
HTTP2 POST 443 TLS/SSL = Yes
⤷
⤷
HTTP2 GET 443 TLS/SSL = Yes
⤷
HTTP2 GET 443 TLS/SSL = Yes
⤷
HTTP2 GET 443 TLS/SSL = Yes
⤷
TCP SYN 443 TLS/SSL = Yes
TCP ACK 443 TLS/SSL = Yes
TCP SYN_ACK 443 TLS/SSL = Yes
TCP PING 443 TLS/SSL = Yes
NGINX_LORIS UDP_FLOOD 443 TLS/SSL = Yes
TCP SYN 80 TLS/SSL = No
TCP ACK 80 TLS/SSL = No
TCP SYN_ACK 80 TLS/SSL = No
TCP PING 80 TLS/SSL = Yes
servizi.comune.arzignano.vi.it 94.177.194.9 Italy - Arezzo / AS-31034 = Aruba S.p.A.
HTTP GET 443 TLS/SSL = Yes
⤷
HTTP GET 443 TLS/SSL = Yes
⤷
HTTP2 GET 443 TLS/SSL = Yes
⤷
HTTP3 GET 443 TLS/SSL = Yes
⤷
HTTP2 GET 443 TLS/SSL = Yes
⤷
TCP SYN 443 TLS/SSL = Yes
TCP ACK 443 TLS/SSL = Yes
TCP SYN_ACK 443 TLS/SSL = Yes
TCP PING 443 TLS/SSL = Yes
NGINX_LORIS UDP_FLOOD 443 TLS/SSL = Yes
TCP SYN 80 TLS/SSL = No
TCP ACK 80 TLS/SSL = No
TCP SYN_ACK 80 TLS/SSL = No
TCP PING 80 TLS/SSL = No
TCP SYN 21 TLS/SSL = No
cittametropolitana.ve.it 94.247.12.174 Italy - Mestre / AS-48394 = Venis S.p.A.
HTTP GET 443 TLS/SSL = Yes
⤷
HTTP GET 443 TLS/SSL = Yes
⤷
HTTP GET 443 TLS/SSL = Yes
⤷
HTTP POST 443 TLS/SSL = Yes
⤷
⤷
HTTP GET 443 TLS/SSL = Yes
⤷
TCP SYN 443 TLS/SSL = Yes
TCP ACK 443 TLS/SSL = Yes
TCP SYN_ACK 443 TLS/SSL = Yes
TCP PING 443 TLS/SSL = Yes
NGINX_LORIS UDP_FLOOD 443 TLS/SSL = Yes
TCP SYN 80 TLS/SSL = No
TCP ACK 80 TLS/SSL = No
TCP SYN_ACK 80 TLS/SSL = No
TCP PING 80 TLS/SSL = No
shop.alilaguna.it 34.54.186.146 United States - Kansas City / AS-396982 = GOOGLE-CLOUD-PLATFORM
HTTP2 GET 443 TLS/SSL = Yes
⤷
HTTP2 GET 443 TLS/SSL = Yes
⤷
HTTP2 GET 443 TLS/SSL = Yes
⤷
HTTP2 GET 443 TLS/SSL = Yes
⤷
HTTP2 GET 443 TLS/SSL = Yes
⤷
TCP SYN 443 TLS/SSL = Yes
TCP ACK 443 TLS/SSL = Yes
TCP SYN_ACK 443 TLS/SSL = Yes
TCP PING 443 TLS/SSL = Yes
NGINX_LORIS UDP_FLOOD 443 TLS/SSL = Yes
TCP SYN 80 TLS/SSL = No
TCP ACK 80 TLS/SSL = No
TCP SYN_ACK 80 TLS/SSL = No
www.civitavecchiaport.org 217.64.201.114 Italy - Frosinone / AS-12637 = SEEWEB s.r.l.
HTTP2 POST 443 TLS/SSL = Yes
⤷
⤷
HTTP2 GET 443 TLS/SSL = Yes
⤷
HTTP2 GET 443 TLS/SSL = Yes
⤷
HTTP2 POST 443 TLS/SSL = Yes
⤷
⤷
HTTP2 GET 443 TLS/SSL = Yes
⤷
HTTP2 GET 443 TLS/SSL = Yes
⤷
TCP SYN 443 TLS/SSL = Yes
NGINX_LORIS UDP_FLOOD 443 TLS/SSL = Yes
TCP SYN 80 TLS/SSL = Yes
TCP SYN 21 TLS/SSL = Yes
TCP SYN 22 TLS/SSL = Yes
TCP SYN 25 TLS/SSL = Yes
TCP SYN 53 TLS/SSL = Yes
TCP SYN 106 TLS/SSL = Yes
TCP SYN 110 TLS/SSL = Yes
TCP SYN 143 TLS/SSL = Yes
TCP SYN 465 TLS/SSL = Yes
TCP SYN 587 TLS/SSL = Yes
TCP SYN 993 TLS/SSL = Yes
TCP SYN 995 TLS/SSL = Yes
TCP SYN 8443 TLS/SSL = Yes
stggg.civitavecchiaport.org 217.64.201.114 Italy - Frosinone / AS-12637 = SEEWEB s.r.l.
HTTP2 POST 443 TLS/SSL = Yes
⤷
⤷
HTTP2 POST 443 TLS/SSL = Yes
⤷
⤷
HTTP2 POST 443 TLS/SSL = Yes
⤷
⤷
HTTP2 GET 443 TLS/SSL = Yes
⤷
HTTP2 GET 443 TLS/SSL = Yes
⤷
HTTP2 GET 443 TLS/SSL = Yes
⤷
HTTP2 GET 443 TLS/SSL = Yes
⤷
HTTP2 POST 443 TLS/SSL = Yes
⤷
⤷
TCP SYN 443 TLS/SSL = Yes
NGINX_LORIS UDP_FLOOD 443 TLS/SSL = Yes
TCP SYN 80 TLS/SSL = Yes
TCP SYN 21 TLS/SSL = Yes
TCP SYN 22 TLS/SSL = Yes
TCP SYN 25 TLS/SSL = Yes
TCP SYN 53 TLS/SSL = Yes
TCP SYN 106 TLS/SSL = Yes
TCP SYN 110 TLS/SSL = Yes
TCP SYN 143 TLS/SSL = Yes
TCP SYN 465 TLS/SSL = Yes
TCP SYN 587 TLS/SSL = Yes
TCP SYN 993 TLS/SSL = Yes
TCP SYN 995 TLS/SSL = Yes
TCP SYN 8443 TLS/SSL = Yes
portinfo.it 89.46.109.52 Italy - Arezzo / AS-31034 = Aruba S.p.A.
HTTP2 GET 443 TLS/SSL = Yes
⤷
HTTP2 POST 443 TLS/SSL = Yes
⤷
⤷
HTTP2 GET 443 TLS/SSL = Yes
⤷
HTTP2 GET 443 TLS/SSL = Yes
⤷
HTTP2 GET 443 TLS/SSL = Yes
⤷
HTTP2 GET 443 TLS/SSL = Yes
⤷
HTTP2 GET 443 TLS/SSL = Yes
⤷
HTTP2 POST 443 TLS/SSL = Yes
⤷
⤷
TCP SYN 443 TLS/SSL = Yes
NGINX_LORIS UDP_FLOOD 443 TLS/SSL = Yes
TCP SYN 80 TLS/SSL = Yes
TCP SYN 2222 TLS/SSL = Yes
www.comune.bari.it 81.126.164.11 Italy / AS-3269 = TIM
HTTP GET 443 TLS/SSL = Yes
⤷
HTTP POST 443 TLS/SSL = Yes
⤷
⤷
HTTP POST 443 TLS/SSL = Yes
⤷
⤷
HTTP GET 443 TLS/SSL = Yes
⤷
HTTP POST 443 TLS/SSL = Yes
⤷
⤷
HTTP GET 443 TLS/SSL = Yes
⤷
HTTP GET 443 TLS/SSL = Yes
⤷
TCP SYN 443 TLS/SSL = Yes
NGINX_LORIS UDP_FLOOD 443 TLS/SSL = Yes
TCP SYN 80 TLS/SSL = Yes
portaleappalti.comune.bari.it 185.168.34.31 Italy / AS-200760 = Dinova Srl
HTTP POST 443 TLS/SSL = Yes
⤷
⤷
HTTP GET 443 TLS/SSL = Yes
⤷
HTTP GET 443 TLS/SSL = Yes
⤷
HTTP POST 443 TLS/SSL = Yes
⤷
⤷
HTTP POST 443 TLS/SSL = Yes
⤷
⤷
HTTP POST 443 TLS/SSL = Yes
⤷
⤷
HTTP POST 443 TLS/SSL = Yes
⤷
⤷
HTTP GET 443 TLS/SSL = Yes
⤷
TCP SYN 443 TLS/SSL = Yes
NGINX_LORIS UDP_FLOOD 443 TLS/SSL = Yes