| # | domain | network | attack type |
|---|
2026-07-30_12-05-08 check-hosts status
The attacks attributed to noname057 primarily target websites in Romania. Key sectors affected include transportation, telecommunications, and marketing, with numerous sites linked to the RNA (Romanian National Authority) and various companies like JT Group and LS Chartering. The attacks highlight a concentrated effort against Romanian digital infrastructure.AI generated25 targets are under attack, 8 new targets and 17 targets from previous attack
New Targets(8): marketing.ls-chartering.ro, www.idu.ro, sendy.ls-chartering.ro, newsletter.ls-chartering.ro, gps.ls-chartering.ro, constantaporthub.ro, midmar.ro, portbusiness.ro
Targets from prev attack(17): nts.rna.ro, suport.rna.ro, cpanel.jtgroup.ro, prtg.rna.ro, portal.rna.ro, jtgroup.ro, pise.rna.ro, mobile.rna.ro, vpn.rna.ro, webmail.jtgroup.ro, www.ctprojects.ro, check.rna.ro, b.mrcc.rna.ro, mrcc.rna.ro, roris.rna.ro, jttrucks.jtgroup.ro, jttower.jtgroup.ro
Dismissed Targets(0):
New Targets(8): marketing.ls-chartering.ro, www.idu.ro, sendy.ls-chartering.ro, newsletter.ls-chartering.ro, gps.ls-chartering.ro, constantaporthub.ro, midmar.ro, portbusiness.ro
Targets from prev attack(17): nts.rna.ro, suport.rna.ro, cpanel.jtgroup.ro, prtg.rna.ro, portal.rna.ro, jtgroup.ro, pise.rna.ro, mobile.rna.ro, vpn.rna.ro, webmail.jtgroup.ro, www.ctprojects.ro, check.rna.ro, b.mrcc.rna.ro, mrcc.rna.ro, roris.rna.ro, jttrucks.jtgroup.ro, jttower.jtgroup.ro
Dismissed Targets(0):
2026-07-30_08-05-07 check-hosts status
The sites attacked by noname057 include several Romanian domains, indicating a significant focus on Romania. The targeted websites are associated with various sectors, including transportation, telecommunications, and project management.AI generated17 targets are under attack, 17 new targets and 0 targets from previous attack
New Targets(17): jtgroup.ro, b.mrcc.rna.ro, suport.rna.ro, roris.rna.ro, portal.rna.ro, jttrucks.jtgroup.ro, www.ctprojects.ro, nts.rna.ro, webmail.jtgroup.ro, vpn.rna.ro, cpanel.jtgroup.ro, prtg.rna.ro, mobile.rna.ro, mrcc.rna.ro, jttower.jtgroup.ro, check.rna.ro, pise.rna.ro
Targets from prev attack(0):
Dismissed Targets(28): smtpgw.oil-terminal.com, scs.ro, rezervari.comvex.ro, webdisk.oil-terminal.com, www.chimpex.ro, cpcontacts.socep.ro, gestiune.scs.ro, ftp.scs.ro, mail.oil-terminal.com, www.gestiune.scs.ro, smtp.oil-terminal.com, cpanel.socep.ro, www.scs.ro, oil-terminal.com, buyex.comvex.ro, webdisk.socep.ro, relatia.oil-terminal.com, www.comvex.ro, portofconstantza.com, booking.portofconstantza.com, chimpex.ro, cpcalendars.oil-terminal.com, webmail.oil-terminal.com, mail.socep.ro, socep.ro, planning.chimpex.ro, cpanel.oil-terminal.com, cpcalendars.socep.ro
New Targets(17): jtgroup.ro, b.mrcc.rna.ro, suport.rna.ro, roris.rna.ro, portal.rna.ro, jttrucks.jtgroup.ro, www.ctprojects.ro, nts.rna.ro, webmail.jtgroup.ro, vpn.rna.ro, cpanel.jtgroup.ro, prtg.rna.ro, mobile.rna.ro, mrcc.rna.ro, jttower.jtgroup.ro, check.rna.ro, pise.rna.ro
Targets from prev attack(0):
Dismissed Targets(28): smtpgw.oil-terminal.com, scs.ro, rezervari.comvex.ro, webdisk.oil-terminal.com, www.chimpex.ro, cpcontacts.socep.ro, gestiune.scs.ro, ftp.scs.ro, mail.oil-terminal.com, www.gestiune.scs.ro, smtp.oil-terminal.com, cpanel.socep.ro, www.scs.ro, oil-terminal.com, buyex.comvex.ro, webdisk.socep.ro, relatia.oil-terminal.com, www.comvex.ro, portofconstantza.com, booking.portofconstantza.com, chimpex.ro, cpcalendars.oil-terminal.com, webmail.oil-terminal.com, mail.socep.ro, socep.ro, planning.chimpex.ro, cpanel.oil-terminal.com, cpcalendars.socep.ro
2026-07-29_12-10-10 check-hosts status
The attacks attributed to noname057 primarily target websites in Romania, particularly those related to the oil and shipping industries. Key affected sites include oil-terminal.com and various subdomains associated with it, as well as other local businesses like comvex.ro and chimpex.ro. The attacks highlight a focus on critical infrastructure and logistics within the region.AI generated28 targets are under attack, 9 new targets and 19 targets from previous attack
New Targets(9): relatia.oil-terminal.com, smtpgw.oil-terminal.com, cpcalendars.oil-terminal.com, mail.oil-terminal.com, oil-terminal.com, webdisk.oil-terminal.com, cpanel.oil-terminal.com, smtp.oil-terminal.com, webmail.oil-terminal.com
Targets from prev attack(19): www.comvex.ro, gestiune.scs.ro, ftp.scs.ro, booking.portofconstantza.com, buyex.comvex.ro, chimpex.ro, mail.socep.ro, cpanel.socep.ro, www.gestiune.scs.ro, rezervari.comvex.ro, webdisk.socep.ro, cpcalendars.socep.ro, cpcontacts.socep.ro, planning.chimpex.ro, portofconstantza.com, www.chimpex.ro, www.scs.ro, socep.ro, scs.ro
Dismissed Targets(0):
New Targets(9): relatia.oil-terminal.com, smtpgw.oil-terminal.com, cpcalendars.oil-terminal.com, mail.oil-terminal.com, oil-terminal.com, webdisk.oil-terminal.com, cpanel.oil-terminal.com, smtp.oil-terminal.com, webmail.oil-terminal.com
Targets from prev attack(19): www.comvex.ro, gestiune.scs.ro, ftp.scs.ro, booking.portofconstantza.com, buyex.comvex.ro, chimpex.ro, mail.socep.ro, cpanel.socep.ro, www.gestiune.scs.ro, rezervari.comvex.ro, webdisk.socep.ro, cpcalendars.socep.ro, cpcontacts.socep.ro, planning.chimpex.ro, portofconstantza.com, www.chimpex.ro, www.scs.ro, socep.ro, scs.ro
Dismissed Targets(0):
2026-07-29_08-05-08 check-hosts status
The attacks attributed to noname057 primarily targeted websites in Romania. Key sectors affected include logistics, tourism, and local government services, with multiple instances of attacks on various domains associated with these industries.AI generated19 targets are under attack, 19 new targets and 0 targets from previous attack
New Targets(19): gestiune.scs.ro, socep.ro, www.comvex.ro, booking.portofconstantza.com, www.gestiune.scs.ro, cpcontacts.socep.ro, planning.chimpex.ro, www.scs.ro, chimpex.ro, www.chimpex.ro, cpanel.socep.ro, cpcalendars.socep.ro, scs.ro, mail.socep.ro, buyex.comvex.ro, rezervari.comvex.ro, ftp.scs.ro, portofconstantza.com, webdisk.socep.ro
Targets from prev attack(0):
Dismissed Targets(27): ir-romania.ro, www.mfinante.gov.ro, www.engie.ro, www.romatsa.ro, paginiaurii.ro, www.roviniete.ro, www.arb.ro, www.cfrcalatori.ro, www.onpcsb.ro, www.minet.ro, www.astratranscarpatic.ro, inm-lex.ro, www.brci.ro, www.mae.ro, monitoruloficial.ro, www.mdlpa.ro, coduripostale.com, www.chimcomplex.ro, www.mt.ro, www.elcomex.ro, rocaindustry.ro, www.ccr.ro, app.inm-lex.ro, my.engie.ro, anaf.ro, www.isf.ro, www.eximtur.ro
New Targets(19): gestiune.scs.ro, socep.ro, www.comvex.ro, booking.portofconstantza.com, www.gestiune.scs.ro, cpcontacts.socep.ro, planning.chimpex.ro, www.scs.ro, chimpex.ro, www.chimpex.ro, cpanel.socep.ro, cpcalendars.socep.ro, scs.ro, mail.socep.ro, buyex.comvex.ro, rezervari.comvex.ro, ftp.scs.ro, portofconstantza.com, webdisk.socep.ro
Targets from prev attack(0):
Dismissed Targets(27): ir-romania.ro, www.mfinante.gov.ro, www.engie.ro, www.romatsa.ro, paginiaurii.ro, www.roviniete.ro, www.arb.ro, www.cfrcalatori.ro, www.onpcsb.ro, www.minet.ro, www.astratranscarpatic.ro, inm-lex.ro, www.brci.ro, www.mae.ro, monitoruloficial.ro, www.mdlpa.ro, coduripostale.com, www.chimcomplex.ro, www.mt.ro, www.elcomex.ro, rocaindustry.ro, www.ccr.ro, app.inm-lex.ro, my.engie.ro, anaf.ro, www.isf.ro, www.eximtur.ro
2026-07-28_20-55-10 check-hosts status
The attacks attributed to noname057 primarily target Romania, with a significant focus on various sectors including government, transportation, finance, and utilities. Notable websites affected include those of Engie Romania, the Ministry of Finance, and the National Agency for Fiscal Administration, indicating a broad range of interests in critical infrastructure and public services within the country.AI generated27 targets are under attack, 1 new targets and 26 targets from previous attack
New Targets(1): www.roviniete.ro
Targets from prev attack(26): www.engie.ro, www.onpcsb.ro, www.astratranscarpatic.ro, www.mdlpa.ro, www.elcomex.ro, coduripostale.com, www.mae.ro, monitoruloficial.ro, www.arb.ro, my.engie.ro, ir-romania.ro, www.isf.ro, paginiaurii.ro, www.cfrcalatori.ro, inm-lex.ro, www.eximtur.ro, www.ccr.ro, www.minet.ro, rocaindustry.ro, www.mfinante.gov.ro, www.chimcomplex.ro, www.romatsa.ro, app.inm-lex.ro, www.brci.ro, anaf.ro, www.mt.ro
Dismissed Targets(0):
New Targets(1): www.roviniete.ro
Targets from prev attack(26): www.engie.ro, www.onpcsb.ro, www.astratranscarpatic.ro, www.mdlpa.ro, www.elcomex.ro, coduripostale.com, www.mae.ro, monitoruloficial.ro, www.arb.ro, my.engie.ro, ir-romania.ro, www.isf.ro, paginiaurii.ro, www.cfrcalatori.ro, inm-lex.ro, www.eximtur.ro, www.ccr.ro, www.minet.ro, rocaindustry.ro, www.mfinante.gov.ro, www.chimcomplex.ro, www.romatsa.ro, app.inm-lex.ro, www.brci.ro, anaf.ro, www.mt.ro
Dismissed Targets(0):
2026-07-28_20-50-11 check-hosts status
The attacks attributed to noname057 primarily target Romania, with various sectors affected including government, energy, transportation, and finance. Notable sites attacked include government agencies like anaf.ro and mfinante.gov.ro, as well as companies in the energy sector such as engie.ro and chimcomplex.ro. Other sectors impacted include transportation with cfrcalatori.ro and legal services with inm-lex.ro. The attacks indicate a concentrated effort against Romanian infrastructure and services.AI generated26 targets are under attack, 0 new targets and 26 targets from previous attack
New Targets(0):
Targets from prev attack(26): www.isf.ro, www.engie.ro, www.chimcomplex.ro, www.ccr.ro, paginiaurii.ro, www.eximtur.ro, monitoruloficial.ro, www.mdlpa.ro, www.minet.ro, ir-romania.ro, www.elcomex.ro, www.mae.ro, coduripostale.com, www.mfinante.gov.ro, app.inm-lex.ro, www.brci.ro, inm-lex.ro, www.mt.ro, www.cfrcalatori.ro, anaf.ro, my.engie.ro, www.arb.ro, www.astratranscarpatic.ro, www.romatsa.ro, rocaindustry.ro, www.onpcsb.ro
Dismissed Targets(1): www.roviniete.ro
New Targets(0):
Targets from prev attack(26): www.isf.ro, www.engie.ro, www.chimcomplex.ro, www.ccr.ro, paginiaurii.ro, www.eximtur.ro, monitoruloficial.ro, www.mdlpa.ro, www.minet.ro, ir-romania.ro, www.elcomex.ro, www.mae.ro, coduripostale.com, www.mfinante.gov.ro, app.inm-lex.ro, www.brci.ro, inm-lex.ro, www.mt.ro, www.cfrcalatori.ro, anaf.ro, my.engie.ro, www.arb.ro, www.astratranscarpatic.ro, www.romatsa.ro, rocaindustry.ro, www.onpcsb.ro
Dismissed Targets(1): www.roviniete.ro
2026-07-28_12-05-08 check-hosts status
The attacks attributed to noname057 primarily target Romania, as evidenced by the majority of the websites listed, which are Romanian entities. Key sectors affected include government services, transportation, finance, and energy. Notable sites under attack include government institutions like anaf.ro and mae.ro, as well as various service providers and businesses, indicating a broad impact across different sectors within the country.AI generated27 targets are under attack, 8 new targets and 19 targets from previous attack
New Targets(8): www.mt.ro, monitoruloficial.ro, www.elcomex.ro, www.ccr.ro, www.cfrcalatori.ro, www.mdlpa.ro, www.brci.ro, www.mae.ro
Targets from prev attack(19): coduripostale.com, ir-romania.ro, my.engie.ro, app.inm-lex.ro, www.arb.ro, www.isf.ro, anaf.ro, rocaindustry.ro, www.roviniete.ro, www.minet.ro, www.astratranscarpatic.ro, www.eximtur.ro, inm-lex.ro, www.engie.ro, www.romatsa.ro, www.chimcomplex.ro, www.mfinante.gov.ro, www.onpcsb.ro, paginiaurii.ro
Dismissed Targets(0):
New Targets(8): www.mt.ro, monitoruloficial.ro, www.elcomex.ro, www.ccr.ro, www.cfrcalatori.ro, www.mdlpa.ro, www.brci.ro, www.mae.ro
Targets from prev attack(19): coduripostale.com, ir-romania.ro, my.engie.ro, app.inm-lex.ro, www.arb.ro, www.isf.ro, anaf.ro, rocaindustry.ro, www.roviniete.ro, www.minet.ro, www.astratranscarpatic.ro, www.eximtur.ro, inm-lex.ro, www.engie.ro, www.romatsa.ro, www.chimcomplex.ro, www.mfinante.gov.ro, www.onpcsb.ro, paginiaurii.ro
Dismissed Targets(0):
2026-07-28_08-05-10 check-hosts status
Noname057(16) has targeted several websites primarily in Romania. The main sectors affected include government, finance, transportation, and energy. Key sites under attack include the Ministry of Finance, the National Agency for Fiscal Administration, and various private companies in the energy and transportation sectors.AI generated19 targets are under attack, 19 new targets and 0 targets from previous attack
New Targets(19): www.mfinante.gov.ro, www.isf.ro, www.minet.ro, www.eximtur.ro, www.arb.ro, app.inm-lex.ro, paginiaurii.ro, www.onpcsb.ro, www.romatsa.ro, www.engie.ro, my.engie.ro, www.astratranscarpatic.ro, www.roviniete.ro, rocaindustry.ro, coduripostale.com, ir-romania.ro, www.chimcomplex.ro, inm-lex.ro, anaf.ro
Targets from prev attack(0):
Dismissed Targets(29): www.metrorex.ro, revasimeria.ro, arbitration.ccir.ro, www.snam.ro, www.afer.ro, www.palma.es, www.tramalacant.es, timrailcargo.ro, id.coruna.gal, api.molromania.ro, molromania.ro, www.mapn.ro, web.murcia.es, energia.imdea.org, www.scj.ro, mersultrenurilor.infofer.ro, www.rarom.ro, www.imm.gov.ro, www.metrovalencia.es, www.just.ro, portal.just.ro, www.rominvent.ro, www.coruna.gal, www.onrc.ro, cfr.ro, www.legebiltzarra.eus, www.transportepublico.es, www.iccj.ro, www.hacienda.gob.es
New Targets(19): www.mfinante.gov.ro, www.isf.ro, www.minet.ro, www.eximtur.ro, www.arb.ro, app.inm-lex.ro, paginiaurii.ro, www.onpcsb.ro, www.romatsa.ro, www.engie.ro, my.engie.ro, www.astratranscarpatic.ro, www.roviniete.ro, rocaindustry.ro, coduripostale.com, ir-romania.ro, www.chimcomplex.ro, inm-lex.ro, anaf.ro
Targets from prev attack(0):
Dismissed Targets(29): www.metrorex.ro, revasimeria.ro, arbitration.ccir.ro, www.snam.ro, www.afer.ro, www.palma.es, www.tramalacant.es, timrailcargo.ro, id.coruna.gal, api.molromania.ro, molromania.ro, www.mapn.ro, web.murcia.es, energia.imdea.org, www.scj.ro, mersultrenurilor.infofer.ro, www.rarom.ro, www.imm.gov.ro, www.metrovalencia.es, www.just.ro, portal.just.ro, www.rominvent.ro, www.coruna.gal, www.onrc.ro, cfr.ro, www.legebiltzarra.eus, www.transportepublico.es, www.iccj.ro, www.hacienda.gob.es
2026-07-28_07-05-08 check-hosts status
The attacks attributed to noname057 primarily target websites in Romania, Spain, and various European countries. Key sectors affected include transportation, public services, and government institutions. Notable countries under attack include Romania, with multiple government and transport-related sites, and Spain, featuring public transport and regional government websites.AI generated29 targets are under attack, 0 new targets and 29 targets from previous attack
New Targets(0):
Targets from prev attack(29): www.mapn.ro, www.rominvent.ro, www.snam.ro, revasimeria.ro, www.transportepublico.es, www.rarom.ro, mersultrenurilor.infofer.ro, www.onrc.ro, web.murcia.es, www.coruna.gal, cfr.ro, www.iccj.ro, energia.imdea.org, arbitration.ccir.ro, molromania.ro, id.coruna.gal, www.metrovalencia.es, www.scj.ro, www.metrorex.ro, www.just.ro, www.palma.es, portal.just.ro, www.tramalacant.es, api.molromania.ro, www.legebiltzarra.eus, timrailcargo.ro, www.imm.gov.ro, www.afer.ro, www.hacienda.gob.es
Dismissed Targets(2): www.cdep.ro, metropolitanogranada.es
New Targets(0):
Targets from prev attack(29): www.mapn.ro, www.rominvent.ro, www.snam.ro, revasimeria.ro, www.transportepublico.es, www.rarom.ro, mersultrenurilor.infofer.ro, www.onrc.ro, web.murcia.es, www.coruna.gal, cfr.ro, www.iccj.ro, energia.imdea.org, arbitration.ccir.ro, molromania.ro, id.coruna.gal, www.metrovalencia.es, www.scj.ro, www.metrorex.ro, www.just.ro, www.palma.es, portal.just.ro, www.tramalacant.es, api.molromania.ro, www.legebiltzarra.eus, timrailcargo.ro, www.imm.gov.ro, www.afer.ro, www.hacienda.gob.es
Dismissed Targets(2): www.cdep.ro, metropolitanogranada.es
2026-07-27_12-05-08 check-hosts status
The attacks attributed to noname057 primarily target websites in Spain and Romania, with notable hits on government, transportation, and public service sites. Key countries under attack include Spain, with multiple local government and transportation-related domains affected, and Romania, where several governmental and public service websites were compromised. Additionally, there are attacks on sites related to arbitration and energy, indicating a broad range of interests in the cyber threat landscape.AI generated31 targets are under attack, 11 new targets and 20 targets from previous attack
New Targets(11): www.transportepublico.es, www.legebiltzarra.eus, www.palma.es, www.hacienda.gob.es, energia.imdea.org, www.tramalacant.es, metropolitanogranada.es, web.murcia.es, www.metrovalencia.es, id.coruna.gal, www.coruna.gal
Targets from prev attack(20): mersultrenurilor.infofer.ro, arbitration.ccir.ro, portal.just.ro, www.metrorex.ro, www.afer.ro, www.rominvent.ro, api.molromania.ro, www.snam.ro, www.onrc.ro, www.imm.gov.ro, www.just.ro, cfr.ro, revasimeria.ro, timrailcargo.ro, www.mapn.ro, www.iccj.ro, www.cdep.ro, molromania.ro, www.scj.ro, www.rarom.ro
Dismissed Targets(0):
New Targets(11): www.transportepublico.es, www.legebiltzarra.eus, www.palma.es, www.hacienda.gob.es, energia.imdea.org, www.tramalacant.es, metropolitanogranada.es, web.murcia.es, www.metrovalencia.es, id.coruna.gal, www.coruna.gal
Targets from prev attack(20): mersultrenurilor.infofer.ro, arbitration.ccir.ro, portal.just.ro, www.metrorex.ro, www.afer.ro, www.rominvent.ro, api.molromania.ro, www.snam.ro, www.onrc.ro, www.imm.gov.ro, www.just.ro, cfr.ro, revasimeria.ro, timrailcargo.ro, www.mapn.ro, www.iccj.ro, www.cdep.ro, molromania.ro, www.scj.ro, www.rarom.ro
Dismissed Targets(0):
2026-07-27_08-05-08 check-hosts status
Noname057(16) has targeted various websites primarily located in Romania. The attacks have affected a range of sectors, including transportation, government services, and legal institutions. Key sites include molromania.ro, metrorex.ro, and cdep.ro, indicating a focus on critical infrastructure and public services within Romania.AI generated20 targets are under attack, 20 new targets and 0 targets from previous attack
New Targets(20): molromania.ro, www.metrorex.ro, www.imm.gov.ro, revasimeria.ro, www.cdep.ro, api.molromania.ro, www.rarom.ro, arbitration.ccir.ro, www.afer.ro, www.snam.ro, www.scj.ro, portal.just.ro, cfr.ro, mersultrenurilor.infofer.ro, www.iccj.ro, timrailcargo.ro, www.rominvent.ro, www.mapn.ro, www.just.ro, www.onrc.ro
Targets from prev attack(0):
Dismissed Targets(15): www.landes.fr, www.formation.corsicalinea.com, www.securite-routiere.gouv.fr, www.cgpc-formation.fr, www.haute-saone.gouv.fr, www.cartes-bancaires.com, www.renault-trucks.com, www.verney-carron.com, eureennormandie.fr, www.lotrans.com, www.gers.gouv.fr, www.autorite-transports.fr, www.hautespyrenees.fr, www.vienne.gouv.fr, ssm.macif.fr
New Targets(20): molromania.ro, www.metrorex.ro, www.imm.gov.ro, revasimeria.ro, www.cdep.ro, api.molromania.ro, www.rarom.ro, arbitration.ccir.ro, www.afer.ro, www.snam.ro, www.scj.ro, portal.just.ro, cfr.ro, mersultrenurilor.infofer.ro, www.iccj.ro, timrailcargo.ro, www.rominvent.ro, www.mapn.ro, www.just.ro, www.onrc.ro
Targets from prev attack(0):
Dismissed Targets(15): www.landes.fr, www.formation.corsicalinea.com, www.securite-routiere.gouv.fr, www.cgpc-formation.fr, www.haute-saone.gouv.fr, www.cartes-bancaires.com, www.renault-trucks.com, www.verney-carron.com, eureennormandie.fr, www.lotrans.com, www.gers.gouv.fr, www.autorite-transports.fr, www.hautespyrenees.fr, www.vienne.gouv.fr, ssm.macif.fr
2026-07-27_07-05-07 check-hosts status
The attacks attributed to noname057 primarily targeted websites in France. Notable victims include various regional government sites, transportation authorities, and private companies, indicating a focus on French institutions and businesses.AI generated15 targets are under attack, 0 new targets and 15 targets from previous attack
New Targets(0):
Targets from prev attack(15): www.haute-saone.gouv.fr, www.landes.fr, eureennormandie.fr, www.hautespyrenees.fr, www.formation.corsicalinea.com, www.renault-trucks.com, www.autorite-transports.fr, www.securite-routiere.gouv.fr, www.vienne.gouv.fr, www.cartes-bancaires.com, www.verney-carron.com, ssm.macif.fr, www.cgpc-formation.fr, www.lotrans.com, www.gers.gouv.fr
Dismissed Targets(1): www.aude.fr
New Targets(0):
Targets from prev attack(15): www.haute-saone.gouv.fr, www.landes.fr, eureennormandie.fr, www.hautespyrenees.fr, www.formation.corsicalinea.com, www.renault-trucks.com, www.autorite-transports.fr, www.securite-routiere.gouv.fr, www.vienne.gouv.fr, www.cartes-bancaires.com, www.verney-carron.com, ssm.macif.fr, www.cgpc-formation.fr, www.lotrans.com, www.gers.gouv.fr
Dismissed Targets(1): www.aude.fr
2026-07-26_10-55-07 check-hosts status
The attacks attributed to noname057 primarily target websites in France, including various government and regional sites such as haute-saone.gouv.fr, landes.fr, and vienne.gouv.fr. Other affected sectors include automotive, with renault-trucks.com, and training services, as seen with formation.corsicalinea.com and cgpc-formation.fr. The attacks highlight a focus on both public institutions and private companies within the country.AI generated16 targets are under attack, 8 new targets and 8 targets from previous attack
New Targets(8): www.renault-trucks.com, www.formation.corsicalinea.com, ssm.macif.fr, www.verney-carron.com, www.autorite-transports.fr, www.lotrans.com, www.cgpc-formation.fr, www.cartes-bancaires.com
Targets from prev attack(8): www.haute-saone.gouv.fr, www.landes.fr, www.vienne.gouv.fr, www.aude.fr, www.gers.gouv.fr, www.hautespyrenees.fr, www.securite-routiere.gouv.fr, eureennormandie.fr
Dismissed Targets(0):
New Targets(8): www.renault-trucks.com, www.formation.corsicalinea.com, ssm.macif.fr, www.verney-carron.com, www.autorite-transports.fr, www.lotrans.com, www.cgpc-formation.fr, www.cartes-bancaires.com
Targets from prev attack(8): www.haute-saone.gouv.fr, www.landes.fr, www.vienne.gouv.fr, www.aude.fr, www.gers.gouv.fr, www.hautespyrenees.fr, www.securite-routiere.gouv.fr, eureennormandie.fr
Dismissed Targets(0):
2026-07-26_08-05-07 check-hosts status
The attacks by noname057 primarily targeted websites in France. Key regions affected include Hautes-Pyrénées, Gers, Vienne, Aude, Haute-Saône, Landes, and Eure-et-Loir in Normandy. These attacks highlight a focused effort on French governmental and regional websites.AI generated8 targets are under attack, 8 new targets and 0 targets from previous attack
New Targets(8): eureennormandie.fr, www.hautespyrenees.fr, www.securite-routiere.gouv.fr, www.vienne.gouv.fr, www.gers.gouv.fr, www.haute-saone.gouv.fr, www.landes.fr, www.aude.fr
Targets from prev attack(0):
Dismissed Targets(20): sagem.com, www.evad.fr, book.lameridionale.fr, lemediateur.fbf.fr, wind-admin.cma-cgm.com, geodis.integrityline.app, courier-ts2.geodis.com, www.lameridionale.fr, uat.wind-admin.cma-cgm.com, cgpc.fr, ged.perrenot.eu, g360si.geodis.com, smtp-resa.lameridionale.fr, www.cnctr.fr, injob.geodis.com, brandcenter.geodis.com, courier.geodis.com, www.revuedesdeuxmondes.fr, www.marfret.com, www.lazardfreresgestion.fr
New Targets(8): eureennormandie.fr, www.hautespyrenees.fr, www.securite-routiere.gouv.fr, www.vienne.gouv.fr, www.gers.gouv.fr, www.haute-saone.gouv.fr, www.landes.fr, www.aude.fr
Targets from prev attack(0):
Dismissed Targets(20): sagem.com, www.evad.fr, book.lameridionale.fr, lemediateur.fbf.fr, wind-admin.cma-cgm.com, geodis.integrityline.app, courier-ts2.geodis.com, www.lameridionale.fr, uat.wind-admin.cma-cgm.com, cgpc.fr, ged.perrenot.eu, g360si.geodis.com, smtp-resa.lameridionale.fr, www.cnctr.fr, injob.geodis.com, brandcenter.geodis.com, courier.geodis.com, www.revuedesdeuxmondes.fr, www.marfret.com, www.lazardfreresgestion.fr
2026-07-25_08-05-09 check-hosts status
The recent attacks attributed to noname057 have primarily targeted websites in France, with significant focus on logistics and transportation companies. Key affected entities include Marfret, Geodis, and CMA CGM. The attacks highlight vulnerabilities in sectors critical to supply chain and logistics operations within the country. Additionally, some sites related to financial services and media, such as Lazard Frères Gestion and Revues des Deux Mondes, were also compromised, indicating a broader range of targets within France.AI generated20 targets are under attack, 20 new targets and 0 targets from previous attack
New Targets(20): www.marfret.com, www.cnctr.fr, book.lameridionale.fr, courier.geodis.com, smtp-resa.lameridionale.fr, www.lameridionale.fr, uat.wind-admin.cma-cgm.com, wind-admin.cma-cgm.com, geodis.integrityline.app, cgpc.fr, brandcenter.geodis.com, g360si.geodis.com, ged.perrenot.eu, www.lazardfreresgestion.fr, www.evad.fr, lemediateur.fbf.fr, injob.geodis.com, www.revuedesdeuxmondes.fr, courier-ts2.geodis.com, sagem.com
Targets from prev attack(0):
Dismissed Targets(34): hermes-ca-shopper.cevalogistics.com, mbt-cin-is.edf.fr, eus.cevalogistics.com, www.ca-assurances.com, auth-aode.edf.fr, auth.entreprises-collectivites.edf.fr, elctrapac-rec-shopper.cevalogistics.com, hermes-hk-rec-shopper.cevalogistics.com, www.proparco.fr, www.observatoire-metiers-banque.fr, www.cevalogistics.com, global-shopper.cevalogistics.com, rec-websso-gardian.myelectricnetwork.com, hermes-sg1-rec-shopper.cevalogistics.com, www.renault-trucks.com, hermes-uk-shopper.cevalogistics.com, www.id-logistics.com, ssm.macif.fr, link.cevalogistics.com, id-tps.cevalogistics.com, hermes-hk-shopper.cevalogistics.com, ciffco.com, hermes-sg-shopper.cevalogistics.com, thingsboard.labchatou.edf.fr, www.cartes-bancaires.com, www.cgpc-formation.fr, elctrapaconlineordering.cevalogistics.com, hermes-ca-rec-shopper.cevalogistics.com, www.macif.fr, www.groupama.com, websso-gardian.myelectricnetwork.com, express.cevalogistics.com, www.amendes.gouv.fr, axxes.fr
New Targets(20): www.marfret.com, www.cnctr.fr, book.lameridionale.fr, courier.geodis.com, smtp-resa.lameridionale.fr, www.lameridionale.fr, uat.wind-admin.cma-cgm.com, wind-admin.cma-cgm.com, geodis.integrityline.app, cgpc.fr, brandcenter.geodis.com, g360si.geodis.com, ged.perrenot.eu, www.lazardfreresgestion.fr, www.evad.fr, lemediateur.fbf.fr, injob.geodis.com, www.revuedesdeuxmondes.fr, courier-ts2.geodis.com, sagem.com
Targets from prev attack(0):
Dismissed Targets(34): hermes-ca-shopper.cevalogistics.com, mbt-cin-is.edf.fr, eus.cevalogistics.com, www.ca-assurances.com, auth-aode.edf.fr, auth.entreprises-collectivites.edf.fr, elctrapac-rec-shopper.cevalogistics.com, hermes-hk-rec-shopper.cevalogistics.com, www.proparco.fr, www.observatoire-metiers-banque.fr, www.cevalogistics.com, global-shopper.cevalogistics.com, rec-websso-gardian.myelectricnetwork.com, hermes-sg1-rec-shopper.cevalogistics.com, www.renault-trucks.com, hermes-uk-shopper.cevalogistics.com, www.id-logistics.com, ssm.macif.fr, link.cevalogistics.com, id-tps.cevalogistics.com, hermes-hk-shopper.cevalogistics.com, ciffco.com, hermes-sg-shopper.cevalogistics.com, thingsboard.labchatou.edf.fr, www.cartes-bancaires.com, www.cgpc-formation.fr, elctrapaconlineordering.cevalogistics.com, hermes-ca-rec-shopper.cevalogistics.com, www.macif.fr, www.groupama.com, websso-gardian.myelectricnetwork.com, express.cevalogistics.com, www.amendes.gouv.fr, axxes.fr
2026-07-24_12-05-08 check-hosts status
The attacks attributed to noname057 primarily target sites in France, with significant involvement from logistics and insurance sectors. Notable domains include those related to Ceva Logistics and EDF, indicating a focus on supply chain and energy infrastructure. Other affected entities include Groupama and Renault Trucks, highlighting the diverse nature of the attacks across various industries.AI generated34 targets are under attack, 10 new targets and 24 targets from previous attack
New Targets(10): websso-gardian.myelectricnetwork.com, rec-websso-gardian.myelectricnetwork.com, auth-aode.edf.fr, ssm.macif.fr, auth.entreprises-collectivites.edf.fr, www.id-logistics.com, www.observatoire-metiers-banque.fr, mbt-cin-is.edf.fr, thingsboard.labchatou.edf.fr, www.macif.fr
Targets from prev attack(24): hermes-ca-shopper.cevalogistics.com, express.cevalogistics.com, hermes-ca-rec-shopper.cevalogistics.com, www.groupama.com, axxes.fr, link.cevalogistics.com, hermes-hk-rec-shopper.cevalogistics.com, id-tps.cevalogistics.com, eus.cevalogistics.com, hermes-sg-shopper.cevalogistics.com, hermes-hk-shopper.cevalogistics.com, elctrapac-rec-shopper.cevalogistics.com, elctrapaconlineordering.cevalogistics.com, www.amendes.gouv.fr, www.cevalogistics.com, www.proparco.fr, www.cartes-bancaires.com, www.cgpc-formation.fr, global-shopper.cevalogistics.com, ciffco.com, hermes-uk-shopper.cevalogistics.com, hermes-sg1-rec-shopper.cevalogistics.com, www.ca-assurances.com, www.renault-trucks.com
Dismissed Targets(0):
New Targets(10): websso-gardian.myelectricnetwork.com, rec-websso-gardian.myelectricnetwork.com, auth-aode.edf.fr, ssm.macif.fr, auth.entreprises-collectivites.edf.fr, www.id-logistics.com, www.observatoire-metiers-banque.fr, mbt-cin-is.edf.fr, thingsboard.labchatou.edf.fr, www.macif.fr
Targets from prev attack(24): hermes-ca-shopper.cevalogistics.com, express.cevalogistics.com, hermes-ca-rec-shopper.cevalogistics.com, www.groupama.com, axxes.fr, link.cevalogistics.com, hermes-hk-rec-shopper.cevalogistics.com, id-tps.cevalogistics.com, eus.cevalogistics.com, hermes-sg-shopper.cevalogistics.com, hermes-hk-shopper.cevalogistics.com, elctrapac-rec-shopper.cevalogistics.com, elctrapaconlineordering.cevalogistics.com, www.amendes.gouv.fr, www.cevalogistics.com, www.proparco.fr, www.cartes-bancaires.com, www.cgpc-formation.fr, global-shopper.cevalogistics.com, ciffco.com, hermes-uk-shopper.cevalogistics.com, hermes-sg1-rec-shopper.cevalogistics.com, www.ca-assurances.com, www.renault-trucks.com
Dismissed Targets(0):
2026-07-24_08-10-08 check-hosts status
The attacks by noname057(16) primarily targeted websites in France, with notable involvement from logistics and transportation sectors. Key sites affected include Renault Trucks, various Ceva Logistics platforms, and French governmental services like amendes.gouv.fr. Other countries may be indirectly impacted through international operations, but the focus appears to be predominantly on French entities and services.AI generated24 targets are under attack, 24 new targets and 0 targets from previous attack
New Targets(24): www.renault-trucks.com, elctrapac-rec-shopper.cevalogistics.com, axxes.fr, hermes-sg1-rec-shopper.cevalogistics.com, link.cevalogistics.com, www.amendes.gouv.fr, hermes-ca-rec-shopper.cevalogistics.com, hermes-ca-shopper.cevalogistics.com, www.proparco.fr, ciffco.com, www.cevalogistics.com, hermes-hk-rec-shopper.cevalogistics.com, www.groupama.com, www.ca-assurances.com, eus.cevalogistics.com, hermes-hk-shopper.cevalogistics.com, www.cgpc-formation.fr, hermes-sg-shopper.cevalogistics.com, id-tps.cevalogistics.com, hermes-uk-shopper.cevalogistics.com, elctrapaconlineordering.cevalogistics.com, www.cartes-bancaires.com, global-shopper.cevalogistics.com, express.cevalogistics.com
Targets from prev attack(0):
Dismissed Targets(27): data.economie.gouv.fr, boutique.revuedesdeuxmondes.fr, www.cert.ssi.gouv.fr, portailpro.gouv.fr, www.formation.corsicalinea.com, www.viia.com, services.portailpro.gouv.fr, www.arcep.fr, www.autorite-transports.fr, www.corsicalinea.com, www.ville-rochefort.fr, www.lotrans.com, actus.sfr.fr, store.bordeaux.aeroport.fr, info-financiere.gouv.fr, breappweb.breger.fr, www.bordeaux.aeroport.fr, www.verney-carron.com, rubis.fr, www.rtm.fr, www.revuedesdeuxmondes.fr, fret.corsicalinea.net, www.talents.rtm.fr, www.sfr.fr, gnl.corsicalinea.com, www.angers.fr, www.breger.fr
New Targets(24): www.renault-trucks.com, elctrapac-rec-shopper.cevalogistics.com, axxes.fr, hermes-sg1-rec-shopper.cevalogistics.com, link.cevalogistics.com, www.amendes.gouv.fr, hermes-ca-rec-shopper.cevalogistics.com, hermes-ca-shopper.cevalogistics.com, www.proparco.fr, ciffco.com, www.cevalogistics.com, hermes-hk-rec-shopper.cevalogistics.com, www.groupama.com, www.ca-assurances.com, eus.cevalogistics.com, hermes-hk-shopper.cevalogistics.com, www.cgpc-formation.fr, hermes-sg-shopper.cevalogistics.com, id-tps.cevalogistics.com, hermes-uk-shopper.cevalogistics.com, elctrapaconlineordering.cevalogistics.com, www.cartes-bancaires.com, global-shopper.cevalogistics.com, express.cevalogistics.com
Targets from prev attack(0):
Dismissed Targets(27): data.economie.gouv.fr, boutique.revuedesdeuxmondes.fr, www.cert.ssi.gouv.fr, portailpro.gouv.fr, www.formation.corsicalinea.com, www.viia.com, services.portailpro.gouv.fr, www.arcep.fr, www.autorite-transports.fr, www.corsicalinea.com, www.ville-rochefort.fr, www.lotrans.com, actus.sfr.fr, store.bordeaux.aeroport.fr, info-financiere.gouv.fr, breappweb.breger.fr, www.bordeaux.aeroport.fr, www.verney-carron.com, rubis.fr, www.rtm.fr, www.revuedesdeuxmondes.fr, fret.corsicalinea.net, www.talents.rtm.fr, www.sfr.fr, gnl.corsicalinea.com, www.angers.fr, www.breger.fr
2026-07-23_12-05-08 check-hosts status
The sites attacked by noname057 primarily belong to France, indicating a significant focus on French government and transportation sectors. Notable targets include various government portals, transportation services, and regional websites, showcasing a concentrated effort to disrupt services in France.AI generated27 targets are under attack, 8 new targets and 19 targets from previous attack
New Targets(8): www.ville-rochefort.fr, www.cert.ssi.gouv.fr, www.lotrans.com, www.arcep.fr, www.angers.fr, portailpro.gouv.fr, services.portailpro.gouv.fr, www.autorite-transports.fr
Targets from prev attack(19): www.revuedesdeuxmondes.fr, www.sfr.fr, breappweb.breger.fr, www.rtm.fr, www.talents.rtm.fr, rubis.fr, www.bordeaux.aeroport.fr, www.corsicalinea.com, www.breger.fr, gnl.corsicalinea.com, actus.sfr.fr, fret.corsicalinea.net, www.formation.corsicalinea.com, data.economie.gouv.fr, www.viia.com, store.bordeaux.aeroport.fr, boutique.revuedesdeuxmondes.fr, info-financiere.gouv.fr, www.verney-carron.com
Dismissed Targets(0):
New Targets(8): www.ville-rochefort.fr, www.cert.ssi.gouv.fr, www.lotrans.com, www.arcep.fr, www.angers.fr, portailpro.gouv.fr, services.portailpro.gouv.fr, www.autorite-transports.fr
Targets from prev attack(19): www.revuedesdeuxmondes.fr, www.sfr.fr, breappweb.breger.fr, www.rtm.fr, www.talents.rtm.fr, rubis.fr, www.bordeaux.aeroport.fr, www.corsicalinea.com, www.breger.fr, gnl.corsicalinea.com, actus.sfr.fr, fret.corsicalinea.net, www.formation.corsicalinea.com, data.economie.gouv.fr, www.viia.com, store.bordeaux.aeroport.fr, boutique.revuedesdeuxmondes.fr, info-financiere.gouv.fr, www.verney-carron.com
Dismissed Targets(0):
2026-07-23_08-05-13 check-hosts status
The attacks attributed to noname057 primarily targeted websites in France. Key sectors affected include transportation, finance, and media, with significant hits on platforms related to airports, regional transportation, and government data. The attacks highlight a focus on French entities, particularly in the Bordeaux region and Corsica.AI generated19 targets are under attack, 19 new targets and 0 targets from previous attack
New Targets(19): store.bordeaux.aeroport.fr, www.bordeaux.aeroport.fr, boutique.revuedesdeuxmondes.fr, www.talents.rtm.fr, www.verney-carron.com, www.viia.com, breappweb.breger.fr, www.corsicalinea.com, fret.corsicalinea.net, gnl.corsicalinea.com, data.economie.gouv.fr, rubis.fr, www.sfr.fr, www.rtm.fr, info-financiere.gouv.fr, actus.sfr.fr, www.breger.fr, www.revuedesdeuxmondes.fr, www.formation.corsicalinea.com
Targets from prev attack(0):
Dismissed Targets(32): espace-client-rct.geodis.com, iris.geodis.com, www.landes.fr, iris3-demo.geodis.com, iot-api-sco.geodis.com, openam-geodis-euw1-staging.id.forgerock.io, my.geodis.com, iris3-dev.geodis.com, www.vienne.gouv.fr, www.haute-saone.gouv.fr, www.haute-garonne.fr, iris-demo.geodis.com, mediacenter.geodis.com, iriskpi.geodis.com, eureennormandie.fr, www.bordeaux.fr, www.securite-routiere.gouv.fr, www.lehavre.fr, www.le64.fr, www.nouvelle-aquitaine.fr, www.laregion.fr, www.tarbes.fr, metropole.toulouse.fr, www.hautespyrenees.fr, rps.geodis.com, regafi.fr, iris3-staging.geodis.com, iris3.geodis.com, mgs-uat.geodis.com, www.poitiers.fr, www.gers.gouv.fr, iris3-test.geodis.com
New Targets(19): store.bordeaux.aeroport.fr, www.bordeaux.aeroport.fr, boutique.revuedesdeuxmondes.fr, www.talents.rtm.fr, www.verney-carron.com, www.viia.com, breappweb.breger.fr, www.corsicalinea.com, fret.corsicalinea.net, gnl.corsicalinea.com, data.economie.gouv.fr, rubis.fr, www.sfr.fr, www.rtm.fr, info-financiere.gouv.fr, actus.sfr.fr, www.breger.fr, www.revuedesdeuxmondes.fr, www.formation.corsicalinea.com
Targets from prev attack(0):
Dismissed Targets(32): espace-client-rct.geodis.com, iris.geodis.com, www.landes.fr, iris3-demo.geodis.com, iot-api-sco.geodis.com, openam-geodis-euw1-staging.id.forgerock.io, my.geodis.com, iris3-dev.geodis.com, www.vienne.gouv.fr, www.haute-saone.gouv.fr, www.haute-garonne.fr, iris-demo.geodis.com, mediacenter.geodis.com, iriskpi.geodis.com, eureennormandie.fr, www.bordeaux.fr, www.securite-routiere.gouv.fr, www.lehavre.fr, www.le64.fr, www.nouvelle-aquitaine.fr, www.laregion.fr, www.tarbes.fr, metropole.toulouse.fr, www.hautespyrenees.fr, rps.geodis.com, regafi.fr, iris3-staging.geodis.com, iris3.geodis.com, mgs-uat.geodis.com, www.poitiers.fr, www.gers.gouv.fr, iris3-test.geodis.com
2026-07-23_07-05-07 check-hosts status
The attacks by noname057 primarily targeted websites in France, affecting various government and regional entities. Notable regions under attack include Hautes-Pyrénées, Vienne, Toulouse, Eure-et-Loir, Poitiers, Haute-Saône, Bordeaux, Nouvelle-Aquitaine, Haute-Garonne, and Landes. The attacks impacted both local government sites and services related to transportation and security.AI generated32 targets are under attack, 0 new targets and 32 targets from previous attack
New Targets(0):
Targets from prev attack(32): www.hautespyrenees.fr, metropole.toulouse.fr, eureennormandie.fr, iris3-dev.geodis.com, www.vienne.gouv.fr, www.haute-saone.gouv.fr, www.poitiers.fr, iris3-staging.geodis.com, iriskpi.geodis.com, www.laregion.fr, iot-api-sco.geodis.com, www.securite-routiere.gouv.fr, www.gers.gouv.fr, www.bordeaux.fr, www.nouvelle-aquitaine.fr, regafi.fr, iris.geodis.com, openam-geodis-euw1-staging.id.forgerock.io, www.haute-garonne.fr, www.landes.fr, mediacenter.geodis.com, iris3.geodis.com, www.le64.fr, iris-demo.geodis.com, www.tarbes.fr, my.geodis.com, www.lehavre.fr, iris3-demo.geodis.com, mgs-uat.geodis.com, rps.geodis.com, iris3-test.geodis.com, espace-client-rct.geodis.com
Dismissed Targets(2): www.pau.fr, www.aude.fr
New Targets(0):
Targets from prev attack(32): www.hautespyrenees.fr, metropole.toulouse.fr, eureennormandie.fr, iris3-dev.geodis.com, www.vienne.gouv.fr, www.haute-saone.gouv.fr, www.poitiers.fr, iris3-staging.geodis.com, iriskpi.geodis.com, www.laregion.fr, iot-api-sco.geodis.com, www.securite-routiere.gouv.fr, www.gers.gouv.fr, www.bordeaux.fr, www.nouvelle-aquitaine.fr, regafi.fr, iris.geodis.com, openam-geodis-euw1-staging.id.forgerock.io, www.haute-garonne.fr, www.landes.fr, mediacenter.geodis.com, iris3.geodis.com, www.le64.fr, iris-demo.geodis.com, www.tarbes.fr, my.geodis.com, www.lehavre.fr, iris3-demo.geodis.com, mgs-uat.geodis.com, rps.geodis.com, iris3-test.geodis.com, espace-client-rct.geodis.com
Dismissed Targets(2): www.pau.fr, www.aude.fr