| # | domain | network | attack type |
|---|
2026-10-25_07-02-08 check-hosts status
The attacks attributed to noname057 primarily targeted websites in Italy and France. Key sectors affected include logistics, transportation, and public services. Notable countries under attack include Italy, with multiple sites like alis.it and interportopd.it, and France, featuring sites such as genavir.fr and vienne.gouv.fr.AI generated20 targets are under attack, 20 new targets and 0 targets from previous attack
New Targets(20): www.alis.it, www.conemar.it, www.genavir.fr, www.vienne.gouv.fr, dogado.com, www.stef.com, www.confetra.com, www.interportopd.it, trasmar-service.it, venetosviluppo.it, sua.portsofgenoa.com, cittametropolitanacagliari.it, www.sogedim.it, transadriatica.it, www.mn.fr, brest.fr, www.gers.gouv.fr, eurenco.com, www.arcospedizioni.it, cestes.usb.it
Targets from prev attack(0):
Dismissed Targets(22): www.lapostemobile.fr, qual-neptune.marseille-port.fr, legalview.ipo-sa.com, support.lda.fr, totebag.hd.free.fr, web.eraclya.it, message-visio.sfr.fr, www.marseille-port.fr, qual-neptune-dechets.marseille-port.fr, vlamat51.hd.free.fr, caillet.hd.free.fr, pcs.marseille-port.fr, xsun.fr, sso.marseille-port.fr, espaceclient.lapostemobile.fr, maisongeorgelin.hd.free.fr, www.milo.larochelle.port.fr, activation.lapostemobile.fr, jeedom-bk1981.hd.free.fr, www.formation.corsicalinea.com, ezv-demo.marseille-port.fr, thalebserveur.hd.free.fr
New Targets(20): www.alis.it, www.conemar.it, www.genavir.fr, www.vienne.gouv.fr, dogado.com, www.stef.com, www.confetra.com, www.interportopd.it, trasmar-service.it, venetosviluppo.it, sua.portsofgenoa.com, cittametropolitanacagliari.it, www.sogedim.it, transadriatica.it, www.mn.fr, brest.fr, www.gers.gouv.fr, eurenco.com, www.arcospedizioni.it, cestes.usb.it
Targets from prev attack(0):
Dismissed Targets(22): www.lapostemobile.fr, qual-neptune.marseille-port.fr, legalview.ipo-sa.com, support.lda.fr, totebag.hd.free.fr, web.eraclya.it, message-visio.sfr.fr, www.marseille-port.fr, qual-neptune-dechets.marseille-port.fr, vlamat51.hd.free.fr, caillet.hd.free.fr, pcs.marseille-port.fr, xsun.fr, sso.marseille-port.fr, espaceclient.lapostemobile.fr, maisongeorgelin.hd.free.fr, www.milo.larochelle.port.fr, activation.lapostemobile.fr, jeedom-bk1981.hd.free.fr, www.formation.corsicalinea.com, ezv-demo.marseille-port.fr, thalebserveur.hd.free.fr
2026-10-24_08-04-07 check-hosts status
The attacks attributed to noname057 primarily target websites in France, particularly those related to local services and utilities, such as ports and mobile services. Key affected regions include Marseille and La Rochelle, with a focus on platforms providing customer support and client access. Other sites attacked include various service providers and local businesses, indicating a concentrated effort within the French digital landscape.AI generated22 targets are under attack, 14 new targets and 8 targets from previous attack
New Targets(14): www.lapostemobile.fr, caillet.hd.free.fr, jeedom-bk1981.hd.free.fr, totebag.hd.free.fr, vlamat51.hd.free.fr, espaceclient.lapostemobile.fr, message-visio.sfr.fr, activation.lapostemobile.fr, web.eraclya.it, legalview.ipo-sa.com, thalebserveur.hd.free.fr, maisongeorgelin.hd.free.fr, xsun.fr, www.formation.corsicalinea.com
Targets from prev attack(8): qual-neptune.marseille-port.fr, www.marseille-port.fr, sso.marseille-port.fr, www.milo.larochelle.port.fr, qual-neptune-dechets.marseille-port.fr, pcs.marseille-port.fr, support.lda.fr, ezv-demo.marseille-port.fr
Dismissed Targets(21): www.vidalenordest.it, eraclya.it, www.alumni-institut.marseille-port.fr, seapolar.larochelle.port.fr, trackandtrace.roadit.rhenus.com, www.citytransport.it, alumni-institut.marseille-port.fr, assessment-report-dev.lda.fr, qual-neptune-port.marseille-port.fr, www.conemar.it, dogado.com, payroll.lda.fr, www.ctstrasporti.it, www.cooperativasolidarieta.it, zptrasporti.it, monextranet.dunkerque-port.fr, www.escale-plus.larochelle.port.fr, www.larochelle.port.fr, neptune-port.marseille-port.fr, neptune.marseille-port.fr, www.lda.fr
New Targets(14): www.lapostemobile.fr, caillet.hd.free.fr, jeedom-bk1981.hd.free.fr, totebag.hd.free.fr, vlamat51.hd.free.fr, espaceclient.lapostemobile.fr, message-visio.sfr.fr, activation.lapostemobile.fr, web.eraclya.it, legalview.ipo-sa.com, thalebserveur.hd.free.fr, maisongeorgelin.hd.free.fr, xsun.fr, www.formation.corsicalinea.com
Targets from prev attack(8): qual-neptune.marseille-port.fr, www.marseille-port.fr, sso.marseille-port.fr, www.milo.larochelle.port.fr, qual-neptune-dechets.marseille-port.fr, pcs.marseille-port.fr, support.lda.fr, ezv-demo.marseille-port.fr
Dismissed Targets(21): www.vidalenordest.it, eraclya.it, www.alumni-institut.marseille-port.fr, seapolar.larochelle.port.fr, trackandtrace.roadit.rhenus.com, www.citytransport.it, alumni-institut.marseille-port.fr, assessment-report-dev.lda.fr, qual-neptune-port.marseille-port.fr, www.conemar.it, dogado.com, payroll.lda.fr, www.ctstrasporti.it, www.cooperativasolidarieta.it, zptrasporti.it, monextranet.dunkerque-port.fr, www.escale-plus.larochelle.port.fr, www.larochelle.port.fr, neptune-port.marseille-port.fr, neptune.marseille-port.fr, www.lda.fr
2026-10-23_12-02-08 check-hosts status
The attacks by noname057(16) primarily targeted websites in France and Italy. Key locations under attack include the ports of Marseille and La Rochelle in France, as well as various transport and logistics services in Italy. The focus appears to be on transportation and port-related services, indicating a potential interest in disrupting logistics and maritime operations in these countries.AI generated29 targets are under attack, 9 new targets and 20 targets from previous attack
New Targets(9): eraclya.it, dogado.com, www.vidalenordest.it, www.cooperativasolidarieta.it, www.conemar.it, trackandtrace.roadit.rhenus.com, www.citytransport.it, zptrasporti.it, www.ctstrasporti.it
Targets from prev attack(20): qual-neptune-dechets.marseille-port.fr, ezv-demo.marseille-port.fr, www.milo.larochelle.port.fr, www.lda.fr, neptune.marseille-port.fr, qual-neptune-port.marseille-port.fr, www.larochelle.port.fr, www.escale-plus.larochelle.port.fr, www.alumni-institut.marseille-port.fr, assessment-report-dev.lda.fr, monextranet.dunkerque-port.fr, pcs.marseille-port.fr, seapolar.larochelle.port.fr, support.lda.fr, neptune-port.marseille-port.fr, qual-neptune.marseille-port.fr, sso.marseille-port.fr, payroll.lda.fr, www.marseille-port.fr, alumni-institut.marseille-port.fr
Dismissed Targets(0):
New Targets(9): eraclya.it, dogado.com, www.vidalenordest.it, www.cooperativasolidarieta.it, www.conemar.it, trackandtrace.roadit.rhenus.com, www.citytransport.it, zptrasporti.it, www.ctstrasporti.it
Targets from prev attack(20): qual-neptune-dechets.marseille-port.fr, ezv-demo.marseille-port.fr, www.milo.larochelle.port.fr, www.lda.fr, neptune.marseille-port.fr, qual-neptune-port.marseille-port.fr, www.larochelle.port.fr, www.escale-plus.larochelle.port.fr, www.alumni-institut.marseille-port.fr, assessment-report-dev.lda.fr, monextranet.dunkerque-port.fr, pcs.marseille-port.fr, seapolar.larochelle.port.fr, support.lda.fr, neptune-port.marseille-port.fr, qual-neptune.marseille-port.fr, sso.marseille-port.fr, payroll.lda.fr, www.marseille-port.fr, alumni-institut.marseille-port.fr
Dismissed Targets(0):
2026-10-23_08-04-07 check-hosts status
The attacks attributed to noname057 primarily targeted websites associated with ports in France, specifically the Marseille and La Rochelle ports. Key sites affected include various subdomains of the Marseille port, such as qual-neptune-port.marseille-port.fr and pcs.marseille-port.fr, as well as several sites related to the La Rochelle port. Overall, France is the main country under attack in this incident.AI generated20 targets are under attack, 20 new targets and 0 targets from previous attack
New Targets(20): qual-neptune-port.marseille-port.fr, pcs.marseille-port.fr, alumni-institut.marseille-port.fr, ezv-demo.marseille-port.fr, neptune.marseille-port.fr, monextranet.dunkerque-port.fr, neptune-port.marseille-port.fr, qual-neptune-dechets.marseille-port.fr, www.escale-plus.larochelle.port.fr, www.larochelle.port.fr, qual-neptune.marseille-port.fr, assessment-report-dev.lda.fr, www.lda.fr, support.lda.fr, seapolar.larochelle.port.fr, www.marseille-port.fr, payroll.lda.fr, www.alumni-institut.marseille-port.fr, www.milo.larochelle.port.fr, sso.marseille-port.fr
Targets from prev attack(0):
Dismissed Targets(29): roberty.hd.free.fr, auth.7737243.free.fr, www.veniceonelimousine.com, www.giolo.it, thinkdebian.hd.free.fr, maisongeorgelin.hd.free.fr, jeedom-bk1981.hd.free.fr, caillet.hd.free.fr, thalebserveur.hd.free.fr, beonecp.novasystems.it, signup.free.fr, www.trasportifreccia.it, www.venice-transfer-company.it, www.free.fr, www.labolgetta.it, vmiralles-enclosed.hd.free.fr, secure2.ldlc.com, www.gruppotolusso.com, totebag.hd.free.fr, www.fercam.com, lauflix.hd.free.fr, subscribe.free.fr, traccar-serveur.hd.free.fr, vlamat51.hd.free.fr, mobile.free.fr, eurowelt.it, agpgroup.hd.free.fr, www.ldlc.com, carodie.hd.free.fr
New Targets(20): qual-neptune-port.marseille-port.fr, pcs.marseille-port.fr, alumni-institut.marseille-port.fr, ezv-demo.marseille-port.fr, neptune.marseille-port.fr, monextranet.dunkerque-port.fr, neptune-port.marseille-port.fr, qual-neptune-dechets.marseille-port.fr, www.escale-plus.larochelle.port.fr, www.larochelle.port.fr, qual-neptune.marseille-port.fr, assessment-report-dev.lda.fr, www.lda.fr, support.lda.fr, seapolar.larochelle.port.fr, www.marseille-port.fr, payroll.lda.fr, www.alumni-institut.marseille-port.fr, www.milo.larochelle.port.fr, sso.marseille-port.fr
Targets from prev attack(0):
Dismissed Targets(29): roberty.hd.free.fr, auth.7737243.free.fr, www.veniceonelimousine.com, www.giolo.it, thinkdebian.hd.free.fr, maisongeorgelin.hd.free.fr, jeedom-bk1981.hd.free.fr, caillet.hd.free.fr, thalebserveur.hd.free.fr, beonecp.novasystems.it, signup.free.fr, www.trasportifreccia.it, www.venice-transfer-company.it, www.free.fr, www.labolgetta.it, vmiralles-enclosed.hd.free.fr, secure2.ldlc.com, www.gruppotolusso.com, totebag.hd.free.fr, www.fercam.com, lauflix.hd.free.fr, subscribe.free.fr, traccar-serveur.hd.free.fr, vlamat51.hd.free.fr, mobile.free.fr, eurowelt.it, agpgroup.hd.free.fr, www.ldlc.com, carodie.hd.free.fr
2026-10-22_12-02-07 check-hosts status
The attacks by noname057 primarily targeted websites in France and Italy. Key sites include various platforms related to telecommunications, e-commerce, and transportation services. The attacks highlight a significant focus on French service providers and Italian businesses, indicating a concentrated effort in these regions.AI generated29 targets are under attack, 9 new targets and 20 targets from previous attack
New Targets(9): beonecp.novasystems.it, www.fercam.com, www.giolo.it, www.trasportifreccia.it, www.gruppotolusso.com, www.venice-transfer-company.it, www.veniceonelimousine.com, www.labolgetta.it, eurowelt.it
Targets from prev attack(20): www.free.fr, secure2.ldlc.com, mobile.free.fr, thalebserveur.hd.free.fr, signup.free.fr, lauflix.hd.free.fr, thinkdebian.hd.free.fr, www.ldlc.com, jeedom-bk1981.hd.free.fr, agpgroup.hd.free.fr, totebag.hd.free.fr, vlamat51.hd.free.fr, carodie.hd.free.fr, maisongeorgelin.hd.free.fr, subscribe.free.fr, vmiralles-enclosed.hd.free.fr, auth.7737243.free.fr, roberty.hd.free.fr, caillet.hd.free.fr, traccar-serveur.hd.free.fr
Dismissed Targets(0):
New Targets(9): beonecp.novasystems.it, www.fercam.com, www.giolo.it, www.trasportifreccia.it, www.gruppotolusso.com, www.venice-transfer-company.it, www.veniceonelimousine.com, www.labolgetta.it, eurowelt.it
Targets from prev attack(20): www.free.fr, secure2.ldlc.com, mobile.free.fr, thalebserveur.hd.free.fr, signup.free.fr, lauflix.hd.free.fr, thinkdebian.hd.free.fr, www.ldlc.com, jeedom-bk1981.hd.free.fr, agpgroup.hd.free.fr, totebag.hd.free.fr, vlamat51.hd.free.fr, carodie.hd.free.fr, maisongeorgelin.hd.free.fr, subscribe.free.fr, vmiralles-enclosed.hd.free.fr, auth.7737243.free.fr, roberty.hd.free.fr, caillet.hd.free.fr, traccar-serveur.hd.free.fr
Dismissed Targets(0):
2026-10-22_08-04-18 check-hosts status
The attacks by noname057 primarily targeted websites in France, as evidenced by the numerous domains associated with the Free.fr service and other French entities. Additionally, there is one site from LDLC, which also operates in France. Overall, the focus of the attacks appears to be predominantly within the French cyber landscape.AI generated20 targets are under attack, 20 new targets and 0 targets from previous attack
New Targets(20): subscribe.free.fr, www.free.fr, thalebserveur.hd.free.fr, caillet.hd.free.fr, agpgroup.hd.free.fr, vlamat51.hd.free.fr, signup.free.fr, carodie.hd.free.fr, roberty.hd.free.fr, secure2.ldlc.com, lauflix.hd.free.fr, vmiralles-enclosed.hd.free.fr, traccar-serveur.hd.free.fr, mobile.free.fr, jeedom-bk1981.hd.free.fr, auth.7737243.free.fr, thinkdebian.hd.free.fr, totebag.hd.free.fr, maisongeorgelin.hd.free.fr, www.ldlc.com
Targets from prev attack(0):
Dismissed Targets(29): bouygues-telecom.besignal.com, erp-test-v2.fr.eurofiber.com, support.fr.eurofiber.com, veneziataxi.it, helpdesk.fr.eurofiber.com, www.arteria.it, www.laposte.fr, www.susa.it, moncompte.laposte.fr, erp-ppd.fr.eurofiber.com, www.sagem.it, www.saresrl.it, erp-test-next.fr.eurofiber.com, auth-dev.fr.eurofiber.com, www.stef.com, monparrainage.lapostemobile.fr, music.lapostemobile.fr, authent.lidentitenumerique.laposte.fr, www.team-shipping.com, www.sda.it, erp-test.fr.eurofiber.com, assistance.lapostemobile.fr, activation.lapostemobile.fr, transadriatica.it, espaceclient.lapostemobile.fr, lidentitenumerique.laposte.fr, www.lapostemobile.fr, erp-prod.fr.eurofiber.com, www.triclo.it
New Targets(20): subscribe.free.fr, www.free.fr, thalebserveur.hd.free.fr, caillet.hd.free.fr, agpgroup.hd.free.fr, vlamat51.hd.free.fr, signup.free.fr, carodie.hd.free.fr, roberty.hd.free.fr, secure2.ldlc.com, lauflix.hd.free.fr, vmiralles-enclosed.hd.free.fr, traccar-serveur.hd.free.fr, mobile.free.fr, jeedom-bk1981.hd.free.fr, auth.7737243.free.fr, thinkdebian.hd.free.fr, totebag.hd.free.fr, maisongeorgelin.hd.free.fr, www.ldlc.com
Targets from prev attack(0):
Dismissed Targets(29): bouygues-telecom.besignal.com, erp-test-v2.fr.eurofiber.com, support.fr.eurofiber.com, veneziataxi.it, helpdesk.fr.eurofiber.com, www.arteria.it, www.laposte.fr, www.susa.it, moncompte.laposte.fr, erp-ppd.fr.eurofiber.com, www.sagem.it, www.saresrl.it, erp-test-next.fr.eurofiber.com, auth-dev.fr.eurofiber.com, www.stef.com, monparrainage.lapostemobile.fr, music.lapostemobile.fr, authent.lidentitenumerique.laposte.fr, www.team-shipping.com, www.sda.it, erp-test.fr.eurofiber.com, assistance.lapostemobile.fr, activation.lapostemobile.fr, transadriatica.it, espaceclient.lapostemobile.fr, lidentitenumerique.laposte.fr, www.lapostemobile.fr, erp-prod.fr.eurofiber.com, www.triclo.it
2026-10-21_12-04-27 check-hosts status
The attacks by noname057 primarily targeted websites in France and Italy. Key sectors affected include postal services, telecommunications, and various local businesses. Notable French sites include La Poste and Eurofiber, while Italian targets include local taxi services and shipping companies.AI generated29 targets are under attack, 10 new targets and 19 targets from previous attack
New Targets(10): www.sagem.it, www.stef.com, www.saresrl.it, www.susa.it, www.sda.it, transadriatica.it, www.triclo.it, veneziataxi.it, www.arteria.it, www.team-shipping.com
Targets from prev attack(19): lidentitenumerique.laposte.fr, www.laposte.fr, helpdesk.fr.eurofiber.com, erp-test-next.fr.eurofiber.com, monparrainage.lapostemobile.fr, espaceclient.lapostemobile.fr, auth-dev.fr.eurofiber.com, music.lapostemobile.fr, erp-test.fr.eurofiber.com, bouygues-telecom.besignal.com, erp-prod.fr.eurofiber.com, assistance.lapostemobile.fr, support.fr.eurofiber.com, erp-ppd.fr.eurofiber.com, moncompte.laposte.fr, authent.lidentitenumerique.laposte.fr, erp-test-v2.fr.eurofiber.com, activation.lapostemobile.fr, www.lapostemobile.fr
Dismissed Targets(0):
New Targets(10): www.sagem.it, www.stef.com, www.saresrl.it, www.susa.it, www.sda.it, transadriatica.it, www.triclo.it, veneziataxi.it, www.arteria.it, www.team-shipping.com
Targets from prev attack(19): lidentitenumerique.laposte.fr, www.laposte.fr, helpdesk.fr.eurofiber.com, erp-test-next.fr.eurofiber.com, monparrainage.lapostemobile.fr, espaceclient.lapostemobile.fr, auth-dev.fr.eurofiber.com, music.lapostemobile.fr, erp-test.fr.eurofiber.com, bouygues-telecom.besignal.com, erp-prod.fr.eurofiber.com, assistance.lapostemobile.fr, support.fr.eurofiber.com, erp-ppd.fr.eurofiber.com, moncompte.laposte.fr, authent.lidentitenumerique.laposte.fr, erp-test-v2.fr.eurofiber.com, activation.lapostemobile.fr, www.lapostemobile.fr
Dismissed Targets(0):
2026-10-21_08-08-09 check-hosts status
The attacks by noname057 primarily targeted websites associated with French entities, particularly those linked to La Poste and Eurofiber. The main country under attack is France, with various services related to mobile and digital identity being affected.AI generated19 targets are under attack, 1 new targets and 18 targets from previous attack
New Targets(1): activation.lapostemobile.fr
Targets from prev attack(18): espaceclient.lapostemobile.fr, moncompte.laposte.fr, authent.lidentitenumerique.laposte.fr, erp-ppd.fr.eurofiber.com, www.laposte.fr, lidentitenumerique.laposte.fr, erp-test-next.fr.eurofiber.com, support.fr.eurofiber.com, auth-dev.fr.eurofiber.com, assistance.lapostemobile.fr, erp-test.fr.eurofiber.com, music.lapostemobile.fr, monparrainage.lapostemobile.fr, helpdesk.fr.eurofiber.com, erp-test-v2.fr.eurofiber.com, erp-prod.fr.eurofiber.com, www.lapostemobile.fr, bouygues-telecom.besignal.com
Dismissed Targets(0):
New Targets(1): activation.lapostemobile.fr
Targets from prev attack(18): espaceclient.lapostemobile.fr, moncompte.laposte.fr, authent.lidentitenumerique.laposte.fr, erp-ppd.fr.eurofiber.com, www.laposte.fr, lidentitenumerique.laposte.fr, erp-test-next.fr.eurofiber.com, support.fr.eurofiber.com, auth-dev.fr.eurofiber.com, assistance.lapostemobile.fr, erp-test.fr.eurofiber.com, music.lapostemobile.fr, monparrainage.lapostemobile.fr, helpdesk.fr.eurofiber.com, erp-test-v2.fr.eurofiber.com, erp-prod.fr.eurofiber.com, www.lapostemobile.fr, bouygues-telecom.besignal.com
Dismissed Targets(0):
2026-10-21_08-02-08 check-hosts status
The attacks attributed to noname057 primarily target France, with a focus on various services related to La Poste and Eurofiber. Key sites affected include those associated with mobile services, identity verification, and customer support, indicating a concentrated effort on French digital infrastructure.AI generated18 targets are under attack, 17 new targets and 1 targets from previous attack
New Targets(17): espaceclient.lapostemobile.fr, moncompte.laposte.fr, erp-ppd.fr.eurofiber.com, www.laposte.fr, lidentitenumerique.laposte.fr, erp-test-next.fr.eurofiber.com, support.fr.eurofiber.com, auth-dev.fr.eurofiber.com, assistance.lapostemobile.fr, erp-test.fr.eurofiber.com, music.lapostemobile.fr, monparrainage.lapostemobile.fr, helpdesk.fr.eurofiber.com, erp-test-v2.fr.eurofiber.com, erp-prod.fr.eurofiber.com, www.lapostemobile.fr, bouygues-telecom.besignal.com
Targets from prev attack(1): authent.lidentitenumerique.laposte.fr
Dismissed Targets(29): pub.rmcbfm-ads.com, www.citytransport.it, message-visio.sfr.fr, mail40.sfr.fr, filtrag.sfr.fr, pulse.sfr.fr, espace-client.sfr.fr, portal.valab.com, sellerbot-tech.sfr.fr, cockpit-ecav.sfr.fr, www.beltlimo.it, actus.sfr.fr, familycp.sfr.fr, www.bettellasrl.com, www.contshipitalia.com, dogado.com, lab.sfr.fr, logementconnecte.sfr.fr, idp-sa-gcp.sfr.fr, www.ctstrasporti.it, www.noitel.it, home.sfr.fr, www.sfr.fr, ccr-daf.sfr.fr, homescope.sfr.fr, services.contshipitalia.com, trasmar-service.it, mail39.sfr.fr, www.ehiweb.it
New Targets(17): espaceclient.lapostemobile.fr, moncompte.laposte.fr, erp-ppd.fr.eurofiber.com, www.laposte.fr, lidentitenumerique.laposte.fr, erp-test-next.fr.eurofiber.com, support.fr.eurofiber.com, auth-dev.fr.eurofiber.com, assistance.lapostemobile.fr, erp-test.fr.eurofiber.com, music.lapostemobile.fr, monparrainage.lapostemobile.fr, helpdesk.fr.eurofiber.com, erp-test-v2.fr.eurofiber.com, erp-prod.fr.eurofiber.com, www.lapostemobile.fr, bouygues-telecom.besignal.com
Targets from prev attack(1): authent.lidentitenumerique.laposte.fr
Dismissed Targets(29): pub.rmcbfm-ads.com, www.citytransport.it, message-visio.sfr.fr, mail40.sfr.fr, filtrag.sfr.fr, pulse.sfr.fr, espace-client.sfr.fr, portal.valab.com, sellerbot-tech.sfr.fr, cockpit-ecav.sfr.fr, www.beltlimo.it, actus.sfr.fr, familycp.sfr.fr, www.bettellasrl.com, www.contshipitalia.com, dogado.com, lab.sfr.fr, logementconnecte.sfr.fr, idp-sa-gcp.sfr.fr, www.ctstrasporti.it, www.noitel.it, home.sfr.fr, www.sfr.fr, ccr-daf.sfr.fr, homescope.sfr.fr, services.contshipitalia.com, trasmar-service.it, mail39.sfr.fr, www.ehiweb.it
2026-10-21_07-56-07 check-hosts status
The attacks by noname057 primarily targeted websites in France and Italy. Key sectors affected include telecommunications, logistics, and digital services. Notable companies such as SFR and Contship Italia were among the victims, highlighting a focus on critical infrastructure and service providers in these countries.AI generated30 targets are under attack, 1 new targets and 29 targets from previous attack
New Targets(1): authent.lidentitenumerique.laposte.fr
Targets from prev attack(29): sellerbot-tech.sfr.fr, mail40.sfr.fr, pulse.sfr.fr, idp-sa-gcp.sfr.fr, home.sfr.fr, cockpit-ecav.sfr.fr, logementconnecte.sfr.fr, www.sfr.fr, pub.rmcbfm-ads.com, ccr-daf.sfr.fr, lab.sfr.fr, actus.sfr.fr, www.beltlimo.it, mail39.sfr.fr, espace-client.sfr.fr, services.contshipitalia.com, dogado.com, portal.valab.com, www.ctstrasporti.it, www.contshipitalia.com, www.ehiweb.it, message-visio.sfr.fr, homescope.sfr.fr, trasmar-service.it, www.bettellasrl.com, filtrag.sfr.fr, familycp.sfr.fr, www.citytransport.it, www.noitel.it
Dismissed Targets(0):
New Targets(1): authent.lidentitenumerique.laposte.fr
Targets from prev attack(29): sellerbot-tech.sfr.fr, mail40.sfr.fr, pulse.sfr.fr, idp-sa-gcp.sfr.fr, home.sfr.fr, cockpit-ecav.sfr.fr, logementconnecte.sfr.fr, www.sfr.fr, pub.rmcbfm-ads.com, ccr-daf.sfr.fr, lab.sfr.fr, actus.sfr.fr, www.beltlimo.it, mail39.sfr.fr, espace-client.sfr.fr, services.contshipitalia.com, dogado.com, portal.valab.com, www.ctstrasporti.it, www.contshipitalia.com, www.ehiweb.it, message-visio.sfr.fr, homescope.sfr.fr, trasmar-service.it, www.bettellasrl.com, filtrag.sfr.fr, familycp.sfr.fr, www.citytransport.it, www.noitel.it
Dismissed Targets(0):
2026-10-20_12-04-10 check-hosts status
The attacks attributed to noname057 primarily target websites in France and Italy. Key sectors affected include telecommunications, transportation, and various service providers. Notable victims include SFR, a major French telecom operator, and several Italian companies involved in logistics and transportation.AI generated29 targets are under attack, 10 new targets and 19 targets from previous attack
New Targets(10): www.ehiweb.it, www.beltlimo.it, trasmar-service.it, www.ctstrasporti.it, dogado.com, www.bettellasrl.com, www.contshipitalia.com, services.contshipitalia.com, www.citytransport.it, www.noitel.it
Targets from prev attack(19): pub.rmcbfm-ads.com, www.sfr.fr, homescope.sfr.fr, cockpit-ecav.sfr.fr, mail39.sfr.fr, lab.sfr.fr, actus.sfr.fr, filtrag.sfr.fr, home.sfr.fr, message-visio.sfr.fr, espace-client.sfr.fr, ccr-daf.sfr.fr, logementconnecte.sfr.fr, portal.valab.com, familycp.sfr.fr, sellerbot-tech.sfr.fr, mail40.sfr.fr, pulse.sfr.fr, idp-sa-gcp.sfr.fr
Dismissed Targets(0):
New Targets(10): www.ehiweb.it, www.beltlimo.it, trasmar-service.it, www.ctstrasporti.it, dogado.com, www.bettellasrl.com, www.contshipitalia.com, services.contshipitalia.com, www.citytransport.it, www.noitel.it
Targets from prev attack(19): pub.rmcbfm-ads.com, www.sfr.fr, homescope.sfr.fr, cockpit-ecav.sfr.fr, mail39.sfr.fr, lab.sfr.fr, actus.sfr.fr, filtrag.sfr.fr, home.sfr.fr, message-visio.sfr.fr, espace-client.sfr.fr, ccr-daf.sfr.fr, logementconnecte.sfr.fr, portal.valab.com, familycp.sfr.fr, sellerbot-tech.sfr.fr, mail40.sfr.fr, pulse.sfr.fr, idp-sa-gcp.sfr.fr
Dismissed Targets(0):
2026-10-20_08-06-08 check-hosts status
The attacks attributed to noname057 primarily target sites in France, specifically those associated with the SFR telecommunications company. These include various subdomains related to customer services, messaging, and housing connectivity. The focus on these sites indicates a concentrated effort to compromise services within the French digital landscape.AI generated19 targets are under attack, 4 new targets and 15 targets from previous attack
New Targets(4): pulse.sfr.fr, pub.rmcbfm-ads.com, espace-client.sfr.fr, sellerbot-tech.sfr.fr
Targets from prev attack(15): message-visio.sfr.fr, lab.sfr.fr, logementconnecte.sfr.fr, home.sfr.fr, mail40.sfr.fr, portal.valab.com, familycp.sfr.fr, actus.sfr.fr, mail39.sfr.fr, homescope.sfr.fr, www.sfr.fr, filtrag.sfr.fr, cockpit-ecav.sfr.fr, idp-sa-gcp.sfr.fr, ccr-daf.sfr.fr
Dismissed Targets(32): www.ipo-sa.com, mcstaging.marketplace.businessfrance.fr, cittametropolitana.ve.it, admin-proao.businessfrance.fr, telematico.adm.gov.it, www.businessfrance.fr, telematicoprova.adm.gov.it, nextcloud.valab.com, www.marketplace.businessfrance.fr, www.valab.com, shop.alilaguna.it, media.businessfrance.fr, portal-test.valab.com, venetosviluppo.it, www.assoporti.it, richiestamodifiche.adm.gov.it, www.solsi-cad.fr, www.portidellostretto.com, france365b2c.b2clogin.com, welcome.businessfrance.fr, en.media.businessfrance.fr, www.adspmam.it, legalview.ipo-sa.com, sua.portsofgenoa.com, cestes.usb.it, www.bancaprealpisanbiagio.it, one-team.my.site.com, integration-vi.businessfrance.fr, parcours.businessfrance.fr, world.businessfrance.fr, proao.businessfrance.fr, www.gruppotim.it
New Targets(4): pulse.sfr.fr, pub.rmcbfm-ads.com, espace-client.sfr.fr, sellerbot-tech.sfr.fr
Targets from prev attack(15): message-visio.sfr.fr, lab.sfr.fr, logementconnecte.sfr.fr, home.sfr.fr, mail40.sfr.fr, portal.valab.com, familycp.sfr.fr, actus.sfr.fr, mail39.sfr.fr, homescope.sfr.fr, www.sfr.fr, filtrag.sfr.fr, cockpit-ecav.sfr.fr, idp-sa-gcp.sfr.fr, ccr-daf.sfr.fr
Dismissed Targets(32): www.ipo-sa.com, mcstaging.marketplace.businessfrance.fr, cittametropolitana.ve.it, admin-proao.businessfrance.fr, telematico.adm.gov.it, www.businessfrance.fr, telematicoprova.adm.gov.it, nextcloud.valab.com, www.marketplace.businessfrance.fr, www.valab.com, shop.alilaguna.it, media.businessfrance.fr, portal-test.valab.com, venetosviluppo.it, www.assoporti.it, richiestamodifiche.adm.gov.it, www.solsi-cad.fr, www.portidellostretto.com, france365b2c.b2clogin.com, welcome.businessfrance.fr, en.media.businessfrance.fr, www.adspmam.it, legalview.ipo-sa.com, sua.portsofgenoa.com, cestes.usb.it, www.bancaprealpisanbiagio.it, one-team.my.site.com, integration-vi.businessfrance.fr, parcours.businessfrance.fr, world.businessfrance.fr, proao.businessfrance.fr, www.gruppotim.it
2026-10-20_08-02-11 check-hosts status
The attacks attributed to noname057 primarily target websites in France and Italy. Key sectors under attack include government services, telecommunications, and business platforms. Notable domains affected include those associated with Business France, SFR, and various Italian regional authorities.AI generated47 targets are under attack, 15 new targets and 32 targets from previous attack
New Targets(15): message-visio.sfr.fr, lab.sfr.fr, logementconnecte.sfr.fr, home.sfr.fr, actus.sfr.fr, portal.valab.com, familycp.sfr.fr, mail40.sfr.fr, mail39.sfr.fr, homescope.sfr.fr, www.sfr.fr, filtrag.sfr.fr, cockpit-ecav.sfr.fr, idp-sa-gcp.sfr.fr, ccr-daf.sfr.fr
Targets from prev attack(32): www.ipo-sa.com, cittametropolitana.ve.it, mcstaging.marketplace.businessfrance.fr, admin-proao.businessfrance.fr, telematico.adm.gov.it, www.businessfrance.fr, telematicoprova.adm.gov.it, nextcloud.valab.com, www.marketplace.businessfrance.fr, www.valab.com, shop.alilaguna.it, media.businessfrance.fr, portal-test.valab.com, venetosviluppo.it, richiestamodifiche.adm.gov.it, www.solsi-cad.fr, www.portidellostretto.com, welcome.businessfrance.fr, france365b2c.b2clogin.com, www.gruppotim.it, en.media.businessfrance.fr, www.adspmam.it, legalview.ipo-sa.com, sua.portsofgenoa.com, cestes.usb.it, www.bancaprealpisanbiagio.it, one-team.my.site.com, integration-vi.businessfrance.fr, world.businessfrance.fr, parcours.businessfrance.fr, proao.businessfrance.fr, www.assoporti.it
Dismissed Targets(0):
New Targets(15): message-visio.sfr.fr, lab.sfr.fr, logementconnecte.sfr.fr, home.sfr.fr, actus.sfr.fr, portal.valab.com, familycp.sfr.fr, mail40.sfr.fr, mail39.sfr.fr, homescope.sfr.fr, www.sfr.fr, filtrag.sfr.fr, cockpit-ecav.sfr.fr, idp-sa-gcp.sfr.fr, ccr-daf.sfr.fr
Targets from prev attack(32): www.ipo-sa.com, cittametropolitana.ve.it, mcstaging.marketplace.businessfrance.fr, admin-proao.businessfrance.fr, telematico.adm.gov.it, www.businessfrance.fr, telematicoprova.adm.gov.it, nextcloud.valab.com, www.marketplace.businessfrance.fr, www.valab.com, shop.alilaguna.it, media.businessfrance.fr, portal-test.valab.com, venetosviluppo.it, richiestamodifiche.adm.gov.it, www.solsi-cad.fr, www.portidellostretto.com, welcome.businessfrance.fr, france365b2c.b2clogin.com, www.gruppotim.it, en.media.businessfrance.fr, www.adspmam.it, legalview.ipo-sa.com, sua.portsofgenoa.com, cestes.usb.it, www.bancaprealpisanbiagio.it, one-team.my.site.com, integration-vi.businessfrance.fr, world.businessfrance.fr, parcours.businessfrance.fr, proao.businessfrance.fr, www.assoporti.it
Dismissed Targets(0):
2026-10-19_12-04-07 check-hosts status
The attacks attributed to noname057 primarily targeted websites in France and Italy. Key sectors affected include government services, business platforms, and legal services, highlighting vulnerabilities in both public and private organizations within these countries.AI generated32 targets are under attack, 13 new targets and 19 targets from previous attack
New Targets(13): www.assoporti.it, cestes.usb.it, www.gruppotim.it, cittametropolitana.ve.it, richiestamodifiche.adm.gov.it, shop.alilaguna.it, venetosviluppo.it, www.bancaprealpisanbiagio.it, sua.portsofgenoa.com, www.adspmam.it, telematico.adm.gov.it, telematicoprova.adm.gov.it, www.portidellostretto.com
Targets from prev attack(19): legalview.ipo-sa.com, integration-vi.businessfrance.fr, mcstaging.marketplace.businessfrance.fr, www.ipo-sa.com, proao.businessfrance.fr, www.valab.com, www.solsi-cad.fr, portal-test.valab.com, welcome.businessfrance.fr, www.businessfrance.fr, media.businessfrance.fr, admin-proao.businessfrance.fr, parcours.businessfrance.fr, france365b2c.b2clogin.com, one-team.my.site.com, www.marketplace.businessfrance.fr, world.businessfrance.fr, en.media.businessfrance.fr, nextcloud.valab.com
Dismissed Targets(0):
New Targets(13): www.assoporti.it, cestes.usb.it, www.gruppotim.it, cittametropolitana.ve.it, richiestamodifiche.adm.gov.it, shop.alilaguna.it, venetosviluppo.it, www.bancaprealpisanbiagio.it, sua.portsofgenoa.com, www.adspmam.it, telematico.adm.gov.it, telematicoprova.adm.gov.it, www.portidellostretto.com
Targets from prev attack(19): legalview.ipo-sa.com, integration-vi.businessfrance.fr, mcstaging.marketplace.businessfrance.fr, www.ipo-sa.com, proao.businessfrance.fr, www.valab.com, www.solsi-cad.fr, portal-test.valab.com, welcome.businessfrance.fr, www.businessfrance.fr, media.businessfrance.fr, admin-proao.businessfrance.fr, parcours.businessfrance.fr, france365b2c.b2clogin.com, one-team.my.site.com, www.marketplace.businessfrance.fr, world.businessfrance.fr, en.media.businessfrance.fr, nextcloud.valab.com
Dismissed Targets(0):
2026-10-19_08-08-06 check-hosts status
The attacks attributed to noname057 primarily target websites associated with France, indicating a focus on French institutions and businesses. The compromised sites include various domains related to business and legal services, highlighting a specific interest in sectors that may hold sensitive information or facilitate financial transactions.AI generated19 targets are under attack, 0 new targets and 19 targets from previous attack
New Targets(0):
Targets from prev attack(19): legalview.ipo-sa.com, france365b2c.b2clogin.com, proao.businessfrance.fr, one-team.my.site.com, admin-proao.businessfrance.fr, www.ipo-sa.com, www.valab.com, mcstaging.marketplace.businessfrance.fr, integration-vi.businessfrance.fr, portal-test.valab.com, world.businessfrance.fr, parcours.businessfrance.fr, media.businessfrance.fr, www.marketplace.businessfrance.fr, www.solsi-cad.fr, nextcloud.valab.com, www.businessfrance.fr, en.media.businessfrance.fr, welcome.businessfrance.fr
Dismissed Targets(6): www.alis.it, www.azimutbenetti.com, www.confetra.com, www.nerigroup.net, www.lorenziniterminal.it, www.interportopd.it
New Targets(0):
Targets from prev attack(19): legalview.ipo-sa.com, france365b2c.b2clogin.com, proao.businessfrance.fr, one-team.my.site.com, admin-proao.businessfrance.fr, www.ipo-sa.com, www.valab.com, mcstaging.marketplace.businessfrance.fr, integration-vi.businessfrance.fr, portal-test.valab.com, world.businessfrance.fr, parcours.businessfrance.fr, media.businessfrance.fr, www.marketplace.businessfrance.fr, www.solsi-cad.fr, nextcloud.valab.com, www.businessfrance.fr, en.media.businessfrance.fr, welcome.businessfrance.fr
Dismissed Targets(6): www.alis.it, www.azimutbenetti.com, www.confetra.com, www.nerigroup.net, www.lorenziniterminal.it, www.interportopd.it
2026-10-19_08-02-08 check-hosts status
The attacks attributed to noname057 primarily target websites in France and Italy. Key sectors affected include business services and logistics, with numerous sites related to French governmental and commercial entities, as well as Italian companies.AI generated25 targets are under attack, 19 new targets and 6 targets from previous attack
New Targets(19): legalview.ipo-sa.com, france365b2c.b2clogin.com, proao.businessfrance.fr, one-team.my.site.com, admin-proao.businessfrance.fr, www.ipo-sa.com, www.valab.com, mcstaging.marketplace.businessfrance.fr, integration-vi.businessfrance.fr, portal-test.valab.com, world.businessfrance.fr, parcours.businessfrance.fr, media.businessfrance.fr, www.marketplace.businessfrance.fr, www.solsi-cad.fr, nextcloud.valab.com, www.businessfrance.fr, en.media.businessfrance.fr, welcome.businessfrance.fr
Targets from prev attack(6): www.alis.it, www.azimutbenetti.com, www.confetra.com, www.nerigroup.net, www.lorenziniterminal.it, www.interportopd.it
Dismissed Targets(6): portaleappalti.comune.bari.it, www.sogedim.it, cittametropolitanacagliari.it, www.comune.bari.it, www.municipio.re.it, www.arcospedizioni.it
New Targets(19): legalview.ipo-sa.com, france365b2c.b2clogin.com, proao.businessfrance.fr, one-team.my.site.com, admin-proao.businessfrance.fr, www.ipo-sa.com, www.valab.com, mcstaging.marketplace.businessfrance.fr, integration-vi.businessfrance.fr, portal-test.valab.com, world.businessfrance.fr, parcours.businessfrance.fr, media.businessfrance.fr, www.marketplace.businessfrance.fr, www.solsi-cad.fr, nextcloud.valab.com, www.businessfrance.fr, en.media.businessfrance.fr, welcome.businessfrance.fr
Targets from prev attack(6): www.alis.it, www.azimutbenetti.com, www.confetra.com, www.nerigroup.net, www.lorenziniterminal.it, www.interportopd.it
Dismissed Targets(6): portaleappalti.comune.bari.it, www.sogedim.it, cittametropolitanacagliari.it, www.comune.bari.it, www.municipio.re.it, www.arcospedizioni.it
2026-10-18_08-02-07 check-hosts status
Noname057(16) has targeted various websites primarily in Italy. The attacked sites include municipal portals, logistics companies, and business associations. Key locations under attack include Bari, Reggio Emilia, and Cagliari, highlighting a concentrated focus on Italian infrastructure and services.AI generated12 targets are under attack, 12 new targets and 0 targets from previous attack
New Targets(12): www.alis.it, www.municipio.re.it, www.interportopd.it, www.arcospedizioni.it, portaleappalti.comune.bari.it, www.azimutbenetti.com, cittametropolitanacagliari.it, www.lorenziniterminal.it, www.comune.bari.it, www.sogedim.it, www.nerigroup.net, www.confetra.com
Targets from prev attack(0):
Dismissed Targets(21): www.marfret.com, www.vienne.gouv.fr, integration-vi.businessfrance.fr, www.ipo-sa.com, www.milo.larochelle.port.fr, sagem.com, www.gers.gouv.fr, www.formation.corsicalinea.com, www.cartes-bancaires.com, www.larochelle.port.fr, brest.fr, www.genavir.fr, www.haute-saone.gouv.fr, eurenco.com, xsun.fr, www.saint-malo.fr, www.mn.fr, gtt.fr, www.marseille-port.fr, www.renault-trucks.com, gicat.com
New Targets(12): www.alis.it, www.municipio.re.it, www.interportopd.it, www.arcospedizioni.it, portaleappalti.comune.bari.it, www.azimutbenetti.com, cittametropolitanacagliari.it, www.lorenziniterminal.it, www.comune.bari.it, www.sogedim.it, www.nerigroup.net, www.confetra.com
Targets from prev attack(0):
Dismissed Targets(21): www.marfret.com, www.vienne.gouv.fr, integration-vi.businessfrance.fr, www.ipo-sa.com, www.milo.larochelle.port.fr, sagem.com, www.gers.gouv.fr, www.formation.corsicalinea.com, www.cartes-bancaires.com, www.larochelle.port.fr, brest.fr, www.genavir.fr, www.haute-saone.gouv.fr, eurenco.com, xsun.fr, www.saint-malo.fr, www.mn.fr, gtt.fr, www.marseille-port.fr, www.renault-trucks.com, gicat.com
2026-10-18_02-22-07 check-hosts status
The attacks attributed to noname057 primarily target websites in France. Key sectors affected include government sites, transportation, and various companies, indicating a focus on critical infrastructure and services within the country.AI generated21 targets are under attack, 1 new targets and 20 targets from previous attack
New Targets(1): www.larochelle.port.fr
Targets from prev attack(20): gtt.fr, www.milo.larochelle.port.fr, eurenco.com, www.haute-saone.gouv.fr, www.saint-malo.fr, www.gers.gouv.fr, brest.fr, sagem.com, www.ipo-sa.com, gicat.com, www.formation.corsicalinea.com, integration-vi.businessfrance.fr, www.cartes-bancaires.com, www.vienne.gouv.fr, www.mn.fr, www.marfret.com, www.renault-trucks.com, www.marseille-port.fr, xsun.fr, www.genavir.fr
Dismissed Targets(0):
New Targets(1): www.larochelle.port.fr
Targets from prev attack(20): gtt.fr, www.milo.larochelle.port.fr, eurenco.com, www.haute-saone.gouv.fr, www.saint-malo.fr, www.gers.gouv.fr, brest.fr, sagem.com, www.ipo-sa.com, gicat.com, www.formation.corsicalinea.com, integration-vi.businessfrance.fr, www.cartes-bancaires.com, www.vienne.gouv.fr, www.mn.fr, www.marfret.com, www.renault-trucks.com, www.marseille-port.fr, xsun.fr, www.genavir.fr
Dismissed Targets(0):
2026-10-18_02-20-15 check-hosts status
The attacks attributed to noname057 primarily target websites in France. Significant entities affected include government sites, transportation companies, and various local municipalities. The attacks highlight vulnerabilities in critical infrastructure and public services across the country.AI generated20 targets are under attack, 0 new targets and 20 targets from previous attack
New Targets(0):
Targets from prev attack(20): sagem.com, www.milo.larochelle.port.fr, www.haute-saone.gouv.fr, www.formation.corsicalinea.com, www.genavir.fr, www.vienne.gouv.fr, eurenco.com, brest.fr, gicat.com, www.marseille-port.fr, integration-vi.businessfrance.fr, www.gers.gouv.fr, www.marfret.com, www.renault-trucks.com, www.mn.fr, www.ipo-sa.com, www.saint-malo.fr, www.cartes-bancaires.com, xsun.fr, gtt.fr
Dismissed Targets(1): www.larochelle.port.fr
New Targets(0):
Targets from prev attack(20): sagem.com, www.milo.larochelle.port.fr, www.haute-saone.gouv.fr, www.formation.corsicalinea.com, www.genavir.fr, www.vienne.gouv.fr, eurenco.com, brest.fr, gicat.com, www.marseille-port.fr, integration-vi.businessfrance.fr, www.gers.gouv.fr, www.marfret.com, www.renault-trucks.com, www.mn.fr, www.ipo-sa.com, www.saint-malo.fr, www.cartes-bancaires.com, xsun.fr, gtt.fr
Dismissed Targets(1): www.larochelle.port.fr