{
  "name": "Investigating the Infrastructure Behind DDoSia's Attacks",
  "slug": "investigating-the-infrastructure-behind-ddosias-attacks",
  "description": "DDoSia, a participatory DDoS tool created by Russian hacktivists in 2022, is operated by the pro-Russian group NoName057(16). It relies on volunteers to contribute network resources for attacks, primarily targeting Ukraine, European allies, and NATO states. Censys has monitored DDoSia since mid-2025, observing an average of 6 control servers with short lifespans. The tool uses a multi-layered control infrastructure, with systems typically hosted on VPS providers. Despite law enforcement disruption in July 2025, DDoSia quickly reconstituted and resumed operations. The infrastructure is characterized by rapid changes, with most servers active for less than 24 hours. Attacks focus on government, military, transportation, public utilities, financial, and tourism sectors.",
  "published": "2025-12-16T08:50:20+00:00",
  "created_at": "2025-12-16T08:50:20+00:00",
  "modified_at": "2025-12-21T18:32:35+00:00",
  "created_at_opencti": "2025-12-16T08:50:20+00:00",
  "author": "",
  "confidence": null,
  "report_types": [],
  "labels": [],
  "tags": [
    "2025-12-16",
    "bobik",
    "ddos",
    "ddosia",
    "noname057(16)"
  ],
  "related_entities": {
    "observables": [
      {
        "id": "",
        "name": "89.185.84.159"
      },
      {
        "id": "",
        "name": "194.180.158.48"
      },
      {
        "id": "",
        "name": "185.39.204.86"
      },
      {
        "id": "",
        "name": "5.44.42.29"
      },
      {
        "id": "",
        "name": "83.217.9.109"
      },
      {
        "id": "",
        "name": "178.248.75.62"
      },
      {
        "id": "",
        "name": "188.116.20.254"
      },
      {
        "id": "",
        "name": "185.196.9.151"
      },
      {
        "id": "",
        "name": "104.194.145.88"
      },
      {
        "id": "",
        "name": "109.120.150.76"
      },
      {
        "id": "",
        "name": "94.140.114.239"
      },
      {
        "id": "",
        "name": "45.128.232.253"
      },
      {
        "id": "",
        "name": "193.56.135.252"
      },
      {
        "id": "",
        "name": "193.149.189.208"
      },
      {
        "id": "",
        "name": "185.196.11.216"
      },
      {
        "id": "",
        "name": "185.212.47.40"
      },
      {
        "id": "",
        "name": "77.239.101.153"
      },
      {
        "id": "",
        "name": "185.232.205.52"
      },
      {
        "id": "",
        "name": "83.217.9.48"
      },
      {
        "id": "",
        "name": "109.120.176.4"
      },
      {
        "id": "",
        "name": "154.18.239.180"
      },
      {
        "id": "",
        "name": "181.214.58.92"
      },
      {
        "id": "",
        "name": "65.38.121.22"
      },
      {
        "id": "",
        "name": "194.87.79.223"
      },
      {
        "id": "",
        "name": "45.85.93.177"
      },
      {
        "id": "",
        "name": "5.181.156.90"
      },
      {
        "id": "",
        "name": "176.98.40.6"
      },
      {
        "id": "",
        "name": "185.208.158.30"
      },
      {
        "id": "",
        "name": "45.89.55.4"
      },
      {
        "id": "",
        "name": "94.140.115.89"
      },
      {
        "id": "",
        "name": "45.82.13.121"
      },
      {
        "id": "",
        "name": "77.91.74.55"
      },
      {
        "id": "",
        "name": "185.178.231.30"
      },
      {
        "id": "",
        "name": "46.8.228.233"
      },
      {
        "id": "",
        "name": "213.165.63.179"
      },
      {
        "id": "",
        "name": "94.131.96.82"
      },
      {
        "id": "",
        "name": "104.194.150.61"
      },
      {
        "id": "",
        "name": "104.194.149.9"
      },
      {
        "id": "",
        "name": "45.84.0.235"
      },
      {
        "id": "",
        "name": "145.249.109.202"
      },
      {
        "id": "",
        "name": "78.153.130.43"
      },
      {
        "id": "",
        "name": "94.232.249.17"
      },
      {
        "id": "",
        "name": "62.60.234.87"
      },
      {
        "id": "",
        "name": "94.183.189.68"
      },
      {
        "id": "",
        "name": "91.239.148.54"
      },
      {
        "id": "",
        "name": "23.177.184.108"
      },
      {
        "id": "",
        "name": "103.80.86.26"
      },
      {
        "id": "",
        "name": "87.121.52.9"
      },
      {
        "id": "",
        "name": "80.85.241.183"
      },
      {
        "id": "",
        "name": "193.124.44.66"
      },
      {
        "id": "",
        "name": "147.45.125.58"
      },
      {
        "id": "",
        "name": "141.98.233.53"
      },
      {
        "id": "",
        "name": "62.133.62.99"
      },
      {
        "id": "",
        "name": "185.232.205.198"
      },
      {
        "id": "",
        "name": "147.45.60.149"
      },
      {
        "id": "",
        "name": "91.239.148.151"
      },
      {
        "id": "",
        "name": "94.140.112.17"
      },
      {
        "id": "",
        "name": "185.225.17.32"
      },
      {
        "id": "",
        "name": "195.133.88.73"
      },
      {
        "id": "",
        "name": "31.57.29.202"
      },
      {
        "id": "",
        "name": "95.163.152.28"
      },
      {
        "id": "",
        "name": "46.29.238.44"
      },
      {
        "id": "",
        "name": "46.29.238.184"
      },
      {
        "id": "",
        "name": "145.223.68.34"
      },
      {
        "id": "",
        "name": "193.17.183.18"
      },
      {
        "id": "",
        "name": "79.132.135.171"
      },
      {
        "id": "",
        "name": "195.133.88.72"
      },
      {
        "id": "",
        "name": "185.121.15.235"
      },
      {
        "id": "",
        "name": "85.192.27.166"
      },
      {
        "id": "",
        "name": "62.60.159.248"
      },
      {
        "id": "",
        "name": "185.219.7.231"
      },
      {
        "id": "",
        "name": "185.161.251.123"
      },
      {
        "id": "",
        "name": "181.214.58.65"
      },
      {
        "id": "",
        "name": "185.196.8.140"
      },
      {
        "id": "",
        "name": "209.200.246.58"
      },
      {
        "id": "",
        "name": "94.183.187.222"
      },
      {
        "id": "",
        "name": "193.233.193.65"
      },
      {
        "id": "",
        "name": "81.19.140.125"
      },
      {
        "id": "",
        "name": "85.192.26.92"
      },
      {
        "id": "",
        "name": "185.143.238.166"
      },
      {
        "id": "",
        "name": "194.180.158.26"
      },
      {
        "id": "",
        "name": "31.15.16.216"
      },
      {
        "id": "",
        "name": "38.180.116.107"
      },
      {
        "id": "",
        "name": "156.227.6.32"
      },
      {
        "id": "",
        "name": "193.233.193.90"
      },
      {
        "id": "",
        "name": "195.133.88.48"
      },
      {
        "id": "",
        "name": "104.194.143.96"
      },
      {
        "id": "",
        "name": "185.234.66.126"
      },
      {
        "id": "",
        "name": "86.54.42.84"
      },
      {
        "id": "",
        "name": "185.250.180.171"
      },
      {
        "id": "",
        "name": "45.143.200.29"
      },
      {
        "id": "",
        "name": "5.182.86.132"
      },
      {
        "id": "",
        "name": "185.234.66.239"
      },
      {
        "id": "",
        "name": "168.100.11.21"
      },
      {
        "id": "",
        "name": "5.252.178.167"
      },
      {
        "id": "",
        "name": "195.133.88.10"
      },
      {
        "id": "",
        "name": "185.219.7.53"
      },
      {
        "id": "",
        "name": "45.85.93.246"
      },
      {
        "id": "",
        "name": "178.22.31.6"
      },
      {
        "id": "",
        "name": "91.92.43.242"
      },
      {
        "id": "",
        "name": "104.194.149.73"
      },
      {
        "id": "",
        "name": "31.56.117.251"
      },
      {
        "id": "",
        "name": "103.80.86.66"
      },
      {
        "id": "",
        "name": "193.56.135.81"
      },
      {
        "id": "",
        "name": "195.133.88.59"
      },
      {
        "id": "",
        "name": "31.13.195.87"
      },
      {
        "id": "",
        "name": "194.87.97.75"
      },
      {
        "id": "",
        "name": "5.252.23.100"
      },
      {
        "id": "",
        "name": "216.185.57.42"
      },
      {
        "id": "",
        "name": "64.190.113.62"
      },
      {
        "id": "",
        "name": "23.177.185.118"
      },
      {
        "id": "",
        "name": "194.87.186.215"
      },
      {
        "id": "",
        "name": "5.252.178.168"
      },
      {
        "id": "",
        "name": "81.19.141.191"
      },
      {
        "id": "",
        "name": "185.232.205.16"
      },
      {
        "id": "",
        "name": "103.136.69.227"
      },
      {
        "id": "",
        "name": "31.192.236.13"
      },
      {
        "id": "",
        "name": "185.39.207.45"
      },
      {
        "id": "",
        "name": "193.17.183.123"
      },
      {
        "id": "",
        "name": "77.75.230.221"
      },
      {
        "id": "",
        "name": "213.218.212.59"
      },
      {
        "id": "",
        "name": "80.77.25.194"
      },
      {
        "id": "",
        "name": "103.231.75.120"
      },
      {
        "id": "",
        "name": "185.208.158.23"
      },
      {
        "id": "",
        "name": "88.218.248.182"
      },
      {
        "id": "",
        "name": "147.45.124.28"
      },
      {
        "id": "",
        "name": "7ee3574b0693e78060d863a5794437960aec0614af6c1909dd075daec0bcaf92"
      },
      {
        "id": "",
        "name": "87cd40fbf9f363c212a8402cc8350f624fd6760799c013a0cdd301707a5bd083"
      },
      {
        "id": "",
        "name": "8ba11c9e3d3f38a2473620579f61119be9ada9bc0e4dc37fc045017f56248473"
      },
      {
        "id": "",
        "name": "307e3ea1cb140f375443ef3c9b62028dd5c6449c1bf242b83d6db5d730bd2121"
      },
      {
        "id": "",
        "name": "e3f229dc71ce65c1f2de05e2cfbd7ae848d330661d9b9b3fa00d594bf84f4d93"
      },
      {
        "id": "",
        "name": "48e9d5b0f8a2d56d31b4e845597789a81e3733c03751139a22f55ceebd15b75a"
      },
      {
        "id": "",
        "name": "532edcad0f1637b4cb6fe2638c84c9cee2a52786b89f8d155c910bf60f43da9c"
      },
      {
        "id": "",
        "name": "b81734717f36d3cea59e5690b984333c5a6908a15883a0463d77cb20dadcec0c"
      },
      {
        "id": "",
        "name": "0eae66824c65efe6b69937bf8427b7f28df591f2788b8088fbe9a05e8c26e077"
      },
      {
        "id": "",
        "name": "2aaf3c08da86d5d0f6f9c00d4011991fd2cd50fa0777d51d5552b98365b15774"
      },
      {
        "id": "",
        "name": "95375dac86bf8daf101cb8120d78f0340e6b1cdbea16b859d96d7aef946be983"
      },
      {
        "id": "",
        "name": "0e19deac3d64a33495d237ed4cdb3581813b88b6ed2afe84b8c2908201feaf91"
      }
    ],
    "malware": [
      {
        "id": "legacy:malware:ee5ed6567d0f6579",
        "name": "Bobik",
        "slug": "bobik"
      },
      {
        "id": "legacy:malware:9c61b756080fc7cd",
        "name": "DDoSia",
        "slug": "ddosia"
      }
    ],
    "intrusion_sets": [
      {
        "id": "7b2e4291-4337-448c-b399-b20a6f6ee0d1",
        "name": "NoName057(16)",
        "slug": "noname05716"
      }
    ],
    "attack_patterns": [
      {
        "id": "9f11a241-9abc-4c57-95dd-33955ab08826",
        "name": "T1078"
      },
      {
        "id": "c340d47a-2ea8-41ca-9a0b-a72559b89bbf",
        "name": "T1584"
      },
      {
        "id": "a72ebeae-8e62-4039-8135-e9c611011fdc",
        "name": "T1573"
      },
      {
        "id": "ab179192-1c1a-4b7d-9792-b608a9459b71",
        "name": "T1591"
      },
      {
        "id": "1e043fe4-2413-4b8e-887c-0fe45d095a24",
        "name": "T1583"
      },
      {
        "id": "6c8f8a40-2746-4a37-86bd-81e82afa6e62",
        "name": "T1190"
      },
      {
        "id": "d570881a-1f73-41ca-ad6c-fc29256c76f9",
        "name": "T1595"
      },
      {
        "id": "b9eab970-53dd-4977-9a26-c4fe566e422d",
        "name": "T1133"
      },
      {
        "id": "306ee8dc-1d64-4916-96be-18060d690ad7",
        "name": "T1499"
      },
      {
        "id": "870bd958-53a3-4d25-9f23-00aa8bd6674d",
        "name": "T1102"
      },
      {
        "id": "dc342445-1b78-48b4-aa06-89ed2ad7c28e",
        "name": "T1071"
      },
      {
        "id": "7616ff60-a18f-4663-9824-b889aa01c8ce",
        "name": "T1588"
      }
    ],
    "others": [
      {
        "id": "",
        "name": "Ukraine"
      },
      {
        "id": "",
        "name": "Energy"
      },
      {
        "id": "",
        "name": "Finance"
      },
      {
        "id": "",
        "name": "Transport"
      },
      {
        "id": "",
        "name": "Hospitality"
      },
      {
        "id": "",
        "name": "Government and administrations"
      },
      {
        "id": "",
        "name": "Defense"
      }
    ]
  },
  "external_refs": [
    "https://censys.com/blog/ddosia-infrastructure",
    "https://otx.alienvault.com/pulse/69412b5c6fb2a99780607ae9"
  ]
}