# domain network attack type
2026-07-23_12-05-08 check-hosts status
The sites attacked by noname057 primarily belong to France, indicating a significant focus on French government and transportation sectors. Notable targets include various government portals, transportation services, and regional websites, showcasing a concentrated effort to disrupt services in France.AI generated
27 targets are under attack, 8 new targets and 19 targets from previous attack
New Targets(8): www.ville-rochefort.fr, www.cert.ssi.gouv.fr, www.lotrans.com, www.arcep.fr, www.angers.fr, portailpro.gouv.fr, services.portailpro.gouv.fr, www.autorite-transports.fr
Targets from prev attack(19): www.revuedesdeuxmondes.fr, www.sfr.fr, breappweb.breger.fr, www.rtm.fr, www.talents.rtm.fr, rubis.fr, www.bordeaux.aeroport.fr, www.corsicalinea.com, www.breger.fr, gnl.corsicalinea.com, actus.sfr.fr, fret.corsicalinea.net, www.formation.corsicalinea.com, data.economie.gouv.fr, www.viia.com, store.bordeaux.aeroport.fr, boutique.revuedesdeuxmondes.fr, info-financiere.gouv.fr, www.verney-carron.com
Dismissed Targets(0):
2026-07-23_08-05-13 check-hosts status
The attacks attributed to noname057 primarily targeted websites in France. Key sectors affected include transportation, finance, and media, with significant hits on platforms related to airports, regional transportation, and government data. The attacks highlight a focus on French entities, particularly in the Bordeaux region and Corsica.AI generated
19 targets are under attack, 19 new targets and 0 targets from previous attack
New Targets(19): store.bordeaux.aeroport.fr, www.bordeaux.aeroport.fr, boutique.revuedesdeuxmondes.fr, www.talents.rtm.fr, www.verney-carron.com, www.viia.com, breappweb.breger.fr, www.corsicalinea.com, fret.corsicalinea.net, gnl.corsicalinea.com, data.economie.gouv.fr, rubis.fr, www.sfr.fr, www.rtm.fr, info-financiere.gouv.fr, actus.sfr.fr, www.breger.fr, www.revuedesdeuxmondes.fr, www.formation.corsicalinea.com
Targets from prev attack(0):
Dismissed Targets(32): espace-client-rct.geodis.com, iris.geodis.com, www.landes.fr, iris3-demo.geodis.com, iot-api-sco.geodis.com, openam-geodis-euw1-staging.id.forgerock.io, my.geodis.com, iris3-dev.geodis.com, www.vienne.gouv.fr, www.haute-saone.gouv.fr, www.haute-garonne.fr, iris-demo.geodis.com, mediacenter.geodis.com, iriskpi.geodis.com, eureennormandie.fr, www.bordeaux.fr, www.securite-routiere.gouv.fr, www.lehavre.fr, www.le64.fr, www.nouvelle-aquitaine.fr, www.laregion.fr, www.tarbes.fr, metropole.toulouse.fr, www.hautespyrenees.fr, rps.geodis.com, regafi.fr, iris3-staging.geodis.com, iris3.geodis.com, mgs-uat.geodis.com, www.poitiers.fr, www.gers.gouv.fr, iris3-test.geodis.com
2026-07-23_07-05-07 check-hosts status
The attacks by noname057 primarily targeted websites in France, affecting various government and regional entities. Notable regions under attack include Hautes-Pyrénées, Vienne, Toulouse, Eure-et-Loir, Poitiers, Haute-Saône, Bordeaux, Nouvelle-Aquitaine, Haute-Garonne, and Landes. The attacks impacted both local government sites and services related to transportation and security.AI generated
32 targets are under attack, 0 new targets and 32 targets from previous attack
New Targets(0):
Targets from prev attack(32): www.hautespyrenees.fr, metropole.toulouse.fr, eureennormandie.fr, iris3-dev.geodis.com, www.vienne.gouv.fr, www.haute-saone.gouv.fr, www.poitiers.fr, iris3-staging.geodis.com, iriskpi.geodis.com, www.laregion.fr, iot-api-sco.geodis.com, www.securite-routiere.gouv.fr, www.gers.gouv.fr, www.bordeaux.fr, www.nouvelle-aquitaine.fr, regafi.fr, iris.geodis.com, openam-geodis-euw1-staging.id.forgerock.io, www.haute-garonne.fr, www.landes.fr, mediacenter.geodis.com, iris3.geodis.com, www.le64.fr, iris-demo.geodis.com, www.tarbes.fr, my.geodis.com, www.lehavre.fr, iris3-demo.geodis.com, mgs-uat.geodis.com, rps.geodis.com, iris3-test.geodis.com, espace-client-rct.geodis.com
Dismissed Targets(2): www.pau.fr, www.aude.fr
2026-07-22_13-15-09 check-hosts status
The attacks by noname057 primarily targeted websites in France, including various government and regional sites. Key locations under attack include regions such as Nouvelle-Aquitaine, Hautes-Pyrénées, and Haute-Garonne, as well as important cities like Bordeaux, Le Havre, and Toulouse. The attacks also affected services related to transportation and logistics, highlighting a focus on critical infrastructure within the country.AI generated
34 targets are under attack, 1 new targets and 33 targets from previous attack
New Targets(1): rps.geodis.com
Targets from prev attack(33): www.vienne.gouv.fr, eureennormandie.fr, my.geodis.com, www.tarbes.fr, www.securite-routiere.gouv.fr, iot-api-sco.geodis.com, metropole.toulouse.fr, iris3-dev.geodis.com, espace-client-rct.geodis.com, www.landes.fr, www.hautespyrenees.fr, www.haute-saone.gouv.fr, mediacenter.geodis.com, www.aude.fr, iris.geodis.com, iris3-test.geodis.com, iris3-demo.geodis.com, openam-geodis-euw1-staging.id.forgerock.io, iris3-staging.geodis.com, iriskpi.geodis.com, iris3.geodis.com, www.laregion.fr, www.nouvelle-aquitaine.fr, www.lehavre.fr, iris-demo.geodis.com, www.pau.fr, mgs-uat.geodis.com, www.gers.gouv.fr, www.bordeaux.fr, www.le64.fr, www.haute-garonne.fr, regafi.fr, www.poitiers.fr
Dismissed Targets(0):
2026-07-22_13-10-08 check-hosts status
The attacks attributed to noname057 primarily target websites in France, affecting various regional and governmental entities. Key regions under attack include Nouvelle-Aquitaine, Haute-Garonne, and Hautes-Pyrénées, with significant impacts on local government sites and services. The attacks highlight vulnerabilities in both public and private sector platforms, emphasizing the need for enhanced cybersecurity measures across these regions.AI generated
33 targets are under attack, 2 new targets and 31 targets from previous attack
New Targets(2): my.geodis.com, espace-client-rct.geodis.com
Targets from prev attack(31): openam-geodis-euw1-staging.id.forgerock.io, iris-demo.geodis.com, www.poitiers.fr, iris3-demo.geodis.com, www.haute-garonne.fr, www.landes.fr, iot-api-sco.geodis.com, eureennormandie.fr, www.lehavre.fr, iris3-dev.geodis.com, www.aude.fr, www.hautespyrenees.fr, www.vienne.gouv.fr, iriskpi.geodis.com, www.tarbes.fr, www.gers.gouv.fr, iris3-staging.geodis.com, www.le64.fr, mediacenter.geodis.com, www.nouvelle-aquitaine.fr, www.securite-routiere.gouv.fr, www.pau.fr, iris.geodis.com, www.laregion.fr, iris3.geodis.com, www.bordeaux.fr, regafi.fr, metropole.toulouse.fr, mgs-uat.geodis.com, www.haute-saone.gouv.fr, iris3-test.geodis.com
Dismissed Targets(0):
2026-07-22_13-05-10 check-hosts status
The attacks attributed to noname057 primarily target websites in France, including various regional government and municipal sites. Notable areas under attack include Nouvelle-Aquitaine, Haute-Garonne, and Bordeaux, among others. The campaign seems focused on disrupting services related to local governance and public information.AI generated
31 targets are under attack, 1 new targets and 30 targets from previous attack
New Targets(1): mgs-uat.geodis.com
Targets from prev attack(30): openam-geodis-euw1-staging.id.forgerock.io, iris-demo.geodis.com, www.poitiers.fr, iris3-demo.geodis.com, www.haute-garonne.fr, www.landes.fr, iot-api-sco.geodis.com, www.vienne.gouv.fr, www.lehavre.fr, iris3-dev.geodis.com, www.hautespyrenees.fr, eureennormandie.fr, www.tarbes.fr, iriskpi.geodis.com, www.aude.fr, www.gers.gouv.fr, iris3-staging.geodis.com, www.le64.fr, mediacenter.geodis.com, www.nouvelle-aquitaine.fr, www.securite-routiere.gouv.fr, www.pau.fr, iris.geodis.com, www.laregion.fr, iris3.geodis.com, www.bordeaux.fr, regafi.fr, metropole.toulouse.fr, www.haute-saone.gouv.fr, iris3-test.geodis.com
Dismissed Targets(0):
2026-07-22_13-00-08 check-hosts status
The sites targeted by noname057(16) primarily include various government and regional websites in France, indicating a significant focus on this country. The attacks affected local government entities and services, showcasing a trend of cyber threats directed at public sector infrastructure in France. Additionally, some sites associated with Geodis, a logistics and transportation company, were also compromised, suggesting an interest in disrupting business operations alongside governmental functions.AI generated
30 targets are under attack, 1 new targets and 29 targets from previous attack
New Targets(1): mediacenter.geodis.com
Targets from prev attack(29): iris3.geodis.com, iris3-demo.geodis.com, www.le64.fr, www.haute-saone.gouv.fr, regafi.fr, www.nouvelle-aquitaine.fr, www.vienne.gouv.fr, metropole.toulouse.fr, www.securite-routiere.gouv.fr, www.hautespyrenees.fr, eureennormandie.fr, www.gers.gouv.fr, iris3-test.geodis.com, www.haute-garonne.fr, www.aude.fr, www.lehavre.fr, iris-demo.geodis.com, www.landes.fr, openam-geodis-euw1-staging.id.forgerock.io, www.pau.fr, www.laregion.fr, iris3-staging.geodis.com, www.tarbes.fr, iris3-dev.geodis.com, www.poitiers.fr, iot-api-sco.geodis.com, iris.geodis.com, iriskpi.geodis.com, www.bordeaux.fr
Dismissed Targets(0):
2026-07-22_12-55-10 check-hosts status
The recent attacks attributed to noname057 primarily targeted websites in France, affecting various regional and governmental entities. Key locations under attack include cities and regions such as Haute-Saône, Nouvelle-Aquitaine, Vienne, Toulouse, Hautes-Pyrénées, Gers, Haute-Garonne, Aude, Le Havre, Landes, Pau, and Bordeaux. The attacks also impacted the Geodis platform, indicating a focus on both local government sites and specific service providers.AI generated
29 targets are under attack, 1 new targets and 28 targets from previous attack
New Targets(1): iriskpi.geodis.com
Targets from prev attack(28): iris3.geodis.com, iris3-demo.geodis.com, www.le64.fr, regafi.fr, www.haute-saone.gouv.fr, www.nouvelle-aquitaine.fr, www.vienne.gouv.fr, metropole.toulouse.fr, www.securite-routiere.gouv.fr, www.hautespyrenees.fr, eureennormandie.fr, www.gers.gouv.fr, iris3-test.geodis.com, www.haute-garonne.fr, www.aude.fr, www.lehavre.fr, iris-demo.geodis.com, www.landes.fr, openam-geodis-euw1-staging.id.forgerock.io, www.pau.fr, www.laregion.fr, iris3-staging.geodis.com, www.tarbes.fr, iris3-dev.geodis.com, www.poitiers.fr, iot-api-sco.geodis.com, iris.geodis.com, www.bordeaux.fr
Dismissed Targets(0):
2026-07-22_12-50-08 check-hosts status
The attacks attributed to noname057 primarily targeted websites in France, affecting various regional and governmental sites. Key locations under attack include Nouvelle-Aquitaine, Le Havre, Poitiers, Bordeaux, Vienne, Tarbes, Haute-Garonne, Hautes-Pyrénées, Gers, Pau, and Toulouse, among others. The attacks seem to focus on both public administration and regional services, indicating a concentrated effort within French digital infrastructure.AI generated
28 targets are under attack, 2 new targets and 26 targets from previous attack
New Targets(2): iris3.geodis.com, openam-geodis-euw1-staging.id.forgerock.io
Targets from prev attack(26): iris.geodis.com, www.nouvelle-aquitaine.fr, www.laregion.fr, www.lehavre.fr, www.poitiers.fr, www.bordeaux.fr, iris-demo.geodis.com, www.vienne.gouv.fr, www.tarbes.fr, www.haute-garonne.fr, eureennormandie.fr, www.hautespyrenees.fr, iris3-test.geodis.com, www.gers.gouv.fr, www.pau.fr, iot-api-sco.geodis.com, metropole.toulouse.fr, regafi.fr, www.le64.fr, www.haute-saone.gouv.fr, iris3-staging.geodis.com, www.aude.fr, iris3-demo.geodis.com, www.landes.fr, www.securite-routiere.gouv.fr, iris3-dev.geodis.com
Dismissed Targets(0):
2026-07-22_12-35-08 check-hosts status
The attacks by noname057 primarily targeted websites in France, affecting various regional and governmental entities. Key regions under attack include Poitiers, Nouvelle-Aquitaine, Haute-Garonne, Vienne, and Bordeaux, among others. The attacks appear to focus on local government and transportation-related sites, indicating a potential interest in disrupting public services and infrastructure.AI generated
26 targets are under attack, 1 new targets and 25 targets from previous attack
New Targets(1): iris3-test.geodis.com
Targets from prev attack(25): www.poitiers.fr, iris3-dev.geodis.com, eureennormandie.fr, iris3-staging.geodis.com, www.laregion.fr, iris.geodis.com, www.vienne.gouv.fr, iot-api-sco.geodis.com, www.haute-garonne.fr, www.gers.gouv.fr, www.haute-saone.gouv.fr, www.hautespyrenees.fr, www.nouvelle-aquitaine.fr, regafi.fr, www.aude.fr, iris3-demo.geodis.com, www.securite-routiere.gouv.fr, www.bordeaux.fr, www.landes.fr, www.pau.fr, iris-demo.geodis.com, www.le64.fr, www.lehavre.fr, www.tarbes.fr, metropole.toulouse.fr
Dismissed Targets(0):
2026-07-22_12-30-08 check-hosts status
The attacks attributed to noname057 primarily targeted websites in France. Key regions affected include local government and regional authority sites, such as those from Haute-Garonne, Nouvelle-Aquitaine, and Bordeaux. Additionally, the Geodis infrastructure, which supports various services, was also compromised.AI generated
25 targets are under attack, 1 new targets and 24 targets from previous attack
New Targets(1): iris3-staging.geodis.com
Targets from prev attack(24): regafi.fr, iris3-dev.geodis.com, iris-demo.geodis.com, www.lehavre.fr, www.aude.fr, www.landes.fr, eureennormandie.fr, www.haute-garonne.fr, iris3-demo.geodis.com, www.tarbes.fr, www.poitiers.fr, www.laregion.fr, www.nouvelle-aquitaine.fr, www.haute-saone.gouv.fr, www.le64.fr, www.pau.fr, iot-api-sco.geodis.com, www.bordeaux.fr, www.hautespyrenees.fr, www.securite-routiere.gouv.fr, www.vienne.gouv.fr, www.gers.gouv.fr, iris.geodis.com, metropole.toulouse.fr
Dismissed Targets(0):
2026-07-22_12-05-07 check-hosts status
The attacks attributed to noname057 primarily target websites in France, affecting various regional and governmental entities. Key regions under attack include Haute-Garonne, Gers, Pyrénées-Atlantiques, and Nouvelle-Aquitaine, among others. The targeted sites range from local government portals to transportation and regional development platforms, indicating a focus on public sector digital infrastructure.AI generated
24 targets are under attack, 5 new targets and 19 targets from previous attack
New Targets(5): iris.geodis.com, iris3-dev.geodis.com, iris3-demo.geodis.com, iris-demo.geodis.com, iot-api-sco.geodis.com
Targets from prev attack(19): www.haute-garonne.fr, www.gers.gouv.fr, www.le64.fr, metropole.toulouse.fr, www.vienne.gouv.fr, www.laregion.fr, regafi.fr, eureennormandie.fr, www.aude.fr, www.bordeaux.fr, www.haute-saone.gouv.fr, www.landes.fr, www.hautespyrenees.fr, www.nouvelle-aquitaine.fr, www.lehavre.fr, www.tarbes.fr, www.securite-routiere.gouv.fr, www.poitiers.fr, www.pau.fr
Dismissed Targets(0):
2026-07-22_09-15-08 check-hosts status
The attacks by noname057 primarily targeted French government and regional websites. Key regions affected include Nouvelle-Aquitaine, Occitanie, and Normandy, with notable sites such as securite-routiere.gouv.fr, gers.gouv.fr, and bordeaux.fr among those compromised.AI generated
19 targets are under attack, 0 new targets and 19 targets from previous attack
New Targets(0):
Targets from prev attack(19): www.securite-routiere.gouv.fr, www.gers.gouv.fr, www.haute-saone.gouv.fr, www.le64.fr, www.aude.fr, www.pau.fr, regafi.fr, www.nouvelle-aquitaine.fr, eureennormandie.fr, www.tarbes.fr, www.bordeaux.fr, www.hautespyrenees.fr, www.haute-garonne.fr, www.poitiers.fr, www.laregion.fr, www.vienne.gouv.fr, www.lehavre.fr, www.landes.fr, metropole.toulouse.fr
Dismissed Targets(16): netscaler.groupe-bbl.com, link.onet.fr, ged.perrenot.eu, www.onet.fr, customs.groupe-bbl.com, conducteur.perrenot.eu, mycompliance.cma-cgm.com, citrix.groupe-bbl.com, netexplorer.onet.fr, mycompliance-pre.cma-cgm.com, ereflex.groupe-bbl.com, groupe-bbl.com, carriere.perrenot.eu, api.customs.groupe-bbl.com, secvault.onet.fr, uat.wind-admin.cma-cgm.com
2026-07-22_09-10-26 check-hosts status
The attacks attributed to noname057 primarily targeted websites in France. Key regions affected include various local government and administrative sites, such as those belonging to the Haute-Saône, Haute-Garonne, and Nouvelle-Aquitaine departments, as well as services related to transportation and customs. Other notable targets include educational and regional sites, indicating a broad interest in disrupting local services across the country.AI generated
35 targets are under attack, 3 new targets and 32 targets from previous attack
New Targets(3): carriere.perrenot.eu, conducteur.perrenot.eu, ged.perrenot.eu
Targets from prev attack(32): citrix.groupe-bbl.com, www.onet.fr, api.customs.groupe-bbl.com, www.laregion.fr, www.haute-saone.gouv.fr, metropole.toulouse.fr, regafi.fr, secvault.onet.fr, www.gers.gouv.fr, link.onet.fr, www.haute-garonne.fr, www.securite-routiere.gouv.fr, netscaler.groupe-bbl.com, www.pau.fr, www.hautespyrenees.fr, www.lehavre.fr, eureennormandie.fr, mycompliance.cma-cgm.com, www.aude.fr, mycompliance-pre.cma-cgm.com, ereflex.groupe-bbl.com, groupe-bbl.com, www.le64.fr, www.vienne.gouv.fr, www.tarbes.fr, netexplorer.onet.fr, www.poitiers.fr, uat.wind-admin.cma-cgm.com, www.landes.fr, www.bordeaux.fr, customs.groupe-bbl.com, www.nouvelle-aquitaine.fr
Dismissed Targets(0):
2026-07-22_09-10-09 check-hosts status
The attacks attributed to noname057 primarily targeted websites in France. Key sectors affected include government services, transportation, and regional authorities. Notable regions under attack include Nouvelle-Aquitaine, Haute-Garonne, and Hautes-Pyrénées, among others. The attacks demonstrate a focus on both local government and private sector entities, indicating a broad range of interests in the cyber threat landscape.AI generated
32 targets are under attack, 0 new targets and 32 targets from previous attack
New Targets(0):
Targets from prev attack(32): citrix.groupe-bbl.com, www.onet.fr, api.customs.groupe-bbl.com, www.laregion.fr, www.haute-saone.gouv.fr, metropole.toulouse.fr, regafi.fr, secvault.onet.fr, www.gers.gouv.fr, link.onet.fr, www.haute-garonne.fr, www.securite-routiere.gouv.fr, netscaler.groupe-bbl.com, www.pau.fr, www.hautespyrenees.fr, www.lehavre.fr, eureennormandie.fr, mycompliance.cma-cgm.com, www.aude.fr, mycompliance-pre.cma-cgm.com, ereflex.groupe-bbl.com, groupe-bbl.com, www.le64.fr, www.vienne.gouv.fr, www.tarbes.fr, netexplorer.onet.fr, www.poitiers.fr, uat.wind-admin.cma-cgm.com, www.landes.fr, www.bordeaux.fr, customs.groupe-bbl.com, www.nouvelle-aquitaine.fr
Dismissed Targets(7): carriere.perrenot.eu, apec.fr, ged.perrenot.eu, www.marseille-port.fr, cgpc.fr, conducteur.perrenot.eu, www.perrenot.eu
2026-07-22_08-55-10 check-hosts status
The attacks attributed to noname057 primarily targeted websites in France, affecting various government and regional institutions, as well as private companies. Key areas under attack include local government sites from regions such as Haute-Saône, Haute-Garonne, and Nouvelle-Aquitaine, as well as significant ports like Marseille. Additionally, several companies in the logistics and compliance sectors, such as Groupe BBL and CMA CGM, were also impacted. Overall, the attacks highlight a concentrated focus on French entities across both public and private sectors.AI generated
39 targets are under attack, 0 new targets and 39 targets from previous attack
New Targets(0):
Targets from prev attack(39): www.gers.gouv.fr, www.haute-saone.gouv.fr, customs.groupe-bbl.com, www.lehavre.fr, www.onet.fr, conducteur.perrenot.eu, apec.fr, carriere.perrenot.eu, www.hautespyrenees.fr, cgpc.fr, uat.wind-admin.cma-cgm.com, www.haute-garonne.fr, www.tarbes.fr, www.marseille-port.fr, link.onet.fr, www.vienne.gouv.fr, ged.perrenot.eu, netscaler.groupe-bbl.com, www.laregion.fr, www.nouvelle-aquitaine.fr, www.landes.fr, regafi.fr, www.pau.fr, mycompliance.cma-cgm.com, www.aude.fr, eureennormandie.fr, www.le64.fr, www.bordeaux.fr, metropole.toulouse.fr, ereflex.groupe-bbl.com, api.customs.groupe-bbl.com, mycompliance-pre.cma-cgm.com, secvault.onet.fr, groupe-bbl.com, www.poitiers.fr, netexplorer.onet.fr, www.perrenot.eu, citrix.groupe-bbl.com, www.securite-routiere.gouv.fr
Dismissed Targets(6): lannuaire.service-public.fr, aidantsconnect.beta.gouv.fr, www.cnil.fr, www.tisseo.fr, www.evad.fr, www.axa.com
2026-07-22_08-50-10 check-hosts status
The attacks by noname057 primarily targeted websites in France, affecting various governmental and regional institutions. Key regions under attack include Nouvelle-Aquitaine, Haute-Garonne, and Provence-Alpes-Côte d'Azur. The attacks also impacted several organizations, including CMA CGM and AXA, indicating a focus on both public services and private enterprises within the country.AI generated
45 targets are under attack, 5 new targets and 40 targets from previous attack
New Targets(5): www.cnil.fr, www.haute-garonne.fr, www.le64.fr, www.bordeaux.fr, cgpc.fr
Targets from prev attack(40): www.onet.fr, www.landes.fr, www.laregion.fr, ged.perrenot.eu, mycompliance.cma-cgm.com, uat.wind-admin.cma-cgm.com, www.pau.fr, regafi.fr, www.haute-saone.gouv.fr, api.customs.groupe-bbl.com, groupe-bbl.com, ereflex.groupe-bbl.com, lannuaire.service-public.fr, apec.fr, conducteur.perrenot.eu, www.hautespyrenees.fr, www.marseille-port.fr, www.tisseo.fr, www.evad.fr, carriere.perrenot.eu, netexplorer.onet.fr, citrix.groupe-bbl.com, secvault.onet.fr, www.poitiers.fr, www.perrenot.eu, www.aude.fr, mycompliance-pre.cma-cgm.com, netscaler.groupe-bbl.com, metropole.toulouse.fr, customs.groupe-bbl.com, link.onet.fr, aidantsconnect.beta.gouv.fr, www.lehavre.fr, www.nouvelle-aquitaine.fr, www.securite-routiere.gouv.fr, www.gers.gouv.fr, www.vienne.gouv.fr, www.axa.com, www.tarbes.fr, eureennormandie.fr
Dismissed Targets(0):
2026-07-22_08-45-11 check-hosts status
The attacks by noname057 primarily targeted websites in France, affecting various sectors including government, transportation, and logistics. Notable sites include regional government portals, compliance platforms, and transportation services, indicating a focus on critical infrastructure and public services within the country.AI generated
40 targets are under attack, 5 new targets and 35 targets from previous attack
New Targets(5): link.onet.fr, groupe-bbl.com, www.perrenot.eu, secvault.onet.fr, netscaler.groupe-bbl.com
Targets from prev attack(35): www.onet.fr, www.landes.fr, www.laregion.fr, uat.wind-admin.cma-cgm.com, mycompliance.cma-cgm.com, ged.perrenot.eu, www.pau.fr, regafi.fr, www.haute-saone.gouv.fr, api.customs.groupe-bbl.com, ereflex.groupe-bbl.com, lannuaire.service-public.fr, apec.fr, conducteur.perrenot.eu, www.hautespyrenees.fr, www.marseille-port.fr, www.tisseo.fr, www.evad.fr, carriere.perrenot.eu, netexplorer.onet.fr, citrix.groupe-bbl.com, www.poitiers.fr, www.aude.fr, mycompliance-pre.cma-cgm.com, customs.groupe-bbl.com, metropole.toulouse.fr, aidantsconnect.beta.gouv.fr, www.securite-routiere.gouv.fr, www.lehavre.fr, www.gers.gouv.fr, www.nouvelle-aquitaine.fr, www.vienne.gouv.fr, www.axa.com, www.tarbes.fr, eureennormandie.fr
Dismissed Targets(5): www.cnil.fr, www.haute-garonne.fr, www.le64.fr, www.bordeaux.fr, cgpc.fr
2026-07-22_08-40-25 check-hosts status
The attacks attributed to noname057 primarily targeted websites in France, impacting various local government and administrative sites, as well as corporate entities. Key regions affected include major cities like Bordeaux, Marseille, Toulouse, and Le Havre, along with several regional government sites across France. The attacks highlight a focus on both public sector and private organizations within the country.AI generated
40 targets are under attack, 0 new targets and 40 targets from previous attack
New Targets(0):
Targets from prev attack(40): www.le64.fr, www.cnil.fr, mycompliance-pre.cma-cgm.com, www.bordeaux.fr, mycompliance.cma-cgm.com, www.poitiers.fr, regafi.fr, lannuaire.service-public.fr, www.lehavre.fr, netexplorer.onet.fr, www.gers.gouv.fr, www.marseille-port.fr, www.landes.fr, www.haute-saone.gouv.fr, www.pau.fr, metropole.toulouse.fr, www.aude.fr, eureennormandie.fr, api.customs.groupe-bbl.com, apec.fr, www.vienne.gouv.fr, conducteur.perrenot.eu, uat.wind-admin.cma-cgm.com, www.securite-routiere.gouv.fr, www.evad.fr, carriere.perrenot.eu, www.hautespyrenees.fr, www.haute-garonne.fr, www.laregion.fr, www.onet.fr, www.tarbes.fr, www.axa.com, ereflex.groupe-bbl.com, ged.perrenot.eu, www.nouvelle-aquitaine.fr, www.tisseo.fr, cgpc.fr, customs.groupe-bbl.com, aidantsconnect.beta.gouv.fr, citrix.groupe-bbl.com
Dismissed Targets(5): secvault.onet.fr, www.perrenot.eu, netscaler.groupe-bbl.com, groupe-bbl.com, link.onet.fr
2026-07-22_08-25-10 check-hosts status
The attacks attributed to noname057 primarily targeted websites in France. Key regions affected include Hautes-Pyrénées, Tarbes, Toulouse, Haute-Garonne, and several others across the country. Notable sectors impacted include government services, transportation, and logistics, with a mix of local government sites and major companies like AXA also being targeted.AI generated
45 targets are under attack, 3 new targets and 42 targets from previous attack
New Targets(3): lannuaire.service-public.fr, www.tarbes.fr, www.evad.fr
Targets from prev attack(42): www.hautespyrenees.fr, www.le64.fr, regafi.fr, cgpc.fr, metropole.toulouse.fr, www.tisseo.fr, ged.perrenot.eu, www.haute-garonne.fr, www.vienne.gouv.fr, apec.fr, www.onet.fr, www.lehavre.fr, api.customs.groupe-bbl.com, conducteur.perrenot.eu, www.marseille-port.fr, www.pau.fr, mycompliance.cma-cgm.com, www.landes.fr, carriere.perrenot.eu, www.haute-saone.gouv.fr, netscaler.groupe-bbl.com, aidantsconnect.beta.gouv.fr, link.onet.fr, groupe-bbl.com, customs.groupe-bbl.com, www.axa.com, www.poitiers.fr, www.cnil.fr, www.laregion.fr, www.gers.gouv.fr, www.nouvelle-aquitaine.fr, uat.wind-admin.cma-cgm.com, eureennormandie.fr, www.perrenot.eu, mycompliance-pre.cma-cgm.com, www.securite-routiere.gouv.fr, www.bordeaux.fr, secvault.onet.fr, citrix.groupe-bbl.com, www.aude.fr, netexplorer.onet.fr, ereflex.groupe-bbl.com
Dismissed Targets(0):
2026-07-22_08-20-17 check-hosts status
The attacks by noname057 primarily targeted websites in France, affecting various local government and regional authority sites, as well as private companies. Key regions under attack include Marseille, Nouvelle-Aquitaine, Hautes-Pyrénées, Haute-Garonne, and Bordeaux. The attacks also impacted sectors such as transportation, compliance, and public services, highlighting a significant focus on French infrastructure and services.AI generated
42 targets are under attack, 2 new targets and 40 targets from previous attack
New Targets(2): mycompliance.cma-cgm.com, link.onet.fr
Targets from prev attack(40): www.marseille-port.fr, www.le64.fr, www.nouvelle-aquitaine.fr, www.gers.gouv.fr, www.pau.fr, eureennormandie.fr, www.lehavre.fr, mycompliance-pre.cma-cgm.com, www.hautespyrenees.fr, www.poitiers.fr, www.axa.com, www.onet.fr, secvault.onet.fr, netexplorer.onet.fr, api.customs.groupe-bbl.com, www.vienne.gouv.fr, www.tisseo.fr, www.landes.fr, cgpc.fr, www.haute-saone.gouv.fr, netscaler.groupe-bbl.com, conducteur.perrenot.eu, www.laregion.fr, www.cnil.fr, aidantsconnect.beta.gouv.fr, www.aude.fr, uat.wind-admin.cma-cgm.com, www.perrenot.eu, metropole.toulouse.fr, customs.groupe-bbl.com, citrix.groupe-bbl.com, www.securite-routiere.gouv.fr, www.bordeaux.fr, carriere.perrenot.eu, groupe-bbl.com, apec.fr, ged.perrenot.eu, www.haute-garonne.fr, ereflex.groupe-bbl.com, regafi.fr
Dismissed Targets(3): www.evad.fr, www.tarbes.fr, lannuaire.service-public.fr
2026-07-22_08-15-25 check-hosts status
The attacks attributed to noname057 primarily target websites in France, including various regional government sites, transport authorities, and private companies. Key sectors affected include local governance, transport, insurance, and compliance services. The attacks highlight a significant focus on French digital infrastructure and public services.AI generated
43 targets are under attack, 0 new targets and 43 targets from previous attack
New Targets(0):
Targets from prev attack(43): www.marseille-port.fr, www.le64.fr, www.nouvelle-aquitaine.fr, www.gers.gouv.fr, www.pau.fr, eureennormandie.fr, www.lehavre.fr, mycompliance-pre.cma-cgm.com, www.hautespyrenees.fr, www.poitiers.fr, www.axa.com, www.onet.fr, secvault.onet.fr, netexplorer.onet.fr, api.customs.groupe-bbl.com, www.vienne.gouv.fr, www.tisseo.fr, lannuaire.service-public.fr, cgpc.fr, www.haute-saone.gouv.fr, netscaler.groupe-bbl.com, conducteur.perrenot.eu, www.landes.fr, www.laregion.fr, www.cnil.fr, aidantsconnect.beta.gouv.fr, www.aude.fr, uat.wind-admin.cma-cgm.com, www.perrenot.eu, metropole.toulouse.fr, www.evad.fr, customs.groupe-bbl.com, www.tarbes.fr, citrix.groupe-bbl.com, www.securite-routiere.gouv.fr, www.bordeaux.fr, carriere.perrenot.eu, groupe-bbl.com, apec.fr, ged.perrenot.eu, www.haute-garonne.fr, ereflex.groupe-bbl.com, regafi.fr
Dismissed Targets(2): mycompliance.cma-cgm.com, link.onet.fr
2026-07-22_08-05-09 check-hosts status
The attacks by noname057 primarily targeted websites in France, affecting various governmental and regional entities. Key sites include those of local governments and public services, such as www.aude.fr, www.poitiers.fr, and www.haute-garonne.fr. Additionally, the attacks extended to organizations related to customs and transportation, highlighting a focus on critical infrastructure within France.AI generated
45 targets are under attack, 19 new targets and 26 targets from previous attack
New Targets(19): www.aude.fr, www.poitiers.fr, www.securite-routiere.gouv.fr, www.haute-saone.gouv.fr, www.le64.fr, www.bordeaux.fr, www.landes.fr, eureennormandie.fr, www.haute-garonne.fr, www.lehavre.fr, www.laregion.fr, www.gers.gouv.fr, www.hautespyrenees.fr, metropole.toulouse.fr, regafi.fr, www.pau.fr, www.vienne.gouv.fr, www.nouvelle-aquitaine.fr, www.tarbes.fr
Targets from prev attack(26): customs.groupe-bbl.com, conducteur.perrenot.eu, groupe-bbl.com, api.customs.groupe-bbl.com, www.onet.fr, www.marseille-port.fr, netexplorer.onet.fr, uat.wind-admin.cma-cgm.com, cgpc.fr, www.axa.com, apec.fr, ereflex.groupe-bbl.com, mycompliance-pre.cma-cgm.com, secvault.onet.fr, citrix.groupe-bbl.com, www.tisseo.fr, link.onet.fr, netscaler.groupe-bbl.com, ged.perrenot.eu, mycompliance.cma-cgm.com, www.perrenot.eu, aidantsconnect.beta.gouv.fr, lannuaire.service-public.fr, www.cnil.fr, carriere.perrenot.eu, www.evad.fr
Dismissed Targets(1): wind-admin.cma-cgm.com
2026-07-21_20-55-07 check-hosts status
The attacks attributed to noname057 primarily targeted websites in France, affecting various sectors including public services, transportation, and private corporations. Key sites include government portals, logistics companies, and financial institutions, indicating a focus on both public and private entities within the country.AI generated
27 targets are under attack, 1 new targets and 26 targets from previous attack
New Targets(1): www.axa.com
Targets from prev attack(26): ged.perrenot.eu, www.evad.fr, lannuaire.service-public.fr, www.perrenot.eu, api.customs.groupe-bbl.com, link.onet.fr, www.cnil.fr, www.tisseo.fr, wind-admin.cma-cgm.com, carriere.perrenot.eu, netexplorer.onet.fr, conducteur.perrenot.eu, uat.wind-admin.cma-cgm.com, citrix.groupe-bbl.com, apec.fr, netscaler.groupe-bbl.com, www.onet.fr, cgpc.fr, aidantsconnect.beta.gouv.fr, secvault.onet.fr, groupe-bbl.com, mycompliance.cma-cgm.com, mycompliance-pre.cma-cgm.com, customs.groupe-bbl.com, www.marseille-port.fr, ereflex.groupe-bbl.com
Dismissed Targets(0):
2026-07-21_20-50-08 check-hosts status
The attacks attributed to noname057 primarily targeted websites in France, with a focus on sectors such as transportation, customs, and public services. Key sites affected include Marseille Port, various Groupe BBL domains, and public service platforms like Service-Public. The attacks highlight a concentrated effort against French infrastructure and services.AI generated
26 targets are under attack, 1 new targets and 25 targets from previous attack
New Targets(1): www.onet.fr
Targets from prev attack(25): secvault.onet.fr, www.marseille-port.fr, customs.groupe-bbl.com, groupe-bbl.com, conducteur.perrenot.eu, netscaler.groupe-bbl.com, www.tisseo.fr, cgpc.fr, netexplorer.onet.fr, www.perrenot.eu, aidantsconnect.beta.gouv.fr, www.cnil.fr, wind-admin.cma-cgm.com, www.evad.fr, api.customs.groupe-bbl.com, uat.wind-admin.cma-cgm.com, link.onet.fr, lannuaire.service-public.fr, ereflex.groupe-bbl.com, carriere.perrenot.eu, apec.fr, ged.perrenot.eu, mycompliance-pre.cma-cgm.com, mycompliance.cma-cgm.com, citrix.groupe-bbl.com
Dismissed Targets(1): www.axa.com
2026-07-21_20-45-15 check-hosts status
The attacks attributed to noname057 primarily targeted websites in France, affecting various sectors including transportation, customs, and insurance. Notable entities include the Marseille port authority, several companies under the Groupe BBL, and major organizations like AXA and Tisséo. The attacks highlight a concentrated effort against French digital infrastructure, particularly in government and public services.AI generated
26 targets are under attack, 0 new targets and 26 targets from previous attack
New Targets(0):
Targets from prev attack(26): secvault.onet.fr, www.marseille-port.fr, customs.groupe-bbl.com, groupe-bbl.com, conducteur.perrenot.eu, netscaler.groupe-bbl.com, www.axa.com, www.tisseo.fr, cgpc.fr, netexplorer.onet.fr, www.perrenot.eu, aidantsconnect.beta.gouv.fr, www.cnil.fr, wind-admin.cma-cgm.com, www.evad.fr, api.customs.groupe-bbl.com, uat.wind-admin.cma-cgm.com, link.onet.fr, lannuaire.service-public.fr, ereflex.groupe-bbl.com, carriere.perrenot.eu, apec.fr, ged.perrenot.eu, mycompliance-pre.cma-cgm.com, mycompliance.cma-cgm.com, citrix.groupe-bbl.com
Dismissed Targets(1): www.onet.fr
2026-07-21_13-05-07 check-hosts status
The attacks attributed to noname057 primarily target sites in France and involve various sectors including transportation, customs, and compliance. Key countries under attack include France, where numerous domains related to public services, logistics, and corporate entities are affected.AI generated
27 targets are under attack, 8 new targets and 19 targets from previous attack
New Targets(8): apec.fr, www.axa.com, www.tisseo.fr, aidantsconnect.beta.gouv.fr, cgpc.fr, lannuaire.service-public.fr, www.evad.fr, www.cnil.fr
Targets from prev attack(19): ereflex.groupe-bbl.com, api.customs.groupe-bbl.com, netscaler.groupe-bbl.com, netexplorer.onet.fr, carriere.perrenot.eu, link.onet.fr, mycompliance-pre.cma-cgm.com, mycompliance.cma-cgm.com, www.marseille-port.fr, citrix.groupe-bbl.com, secvault.onet.fr, uat.wind-admin.cma-cgm.com, groupe-bbl.com, wind-admin.cma-cgm.com, www.perrenot.eu, ged.perrenot.eu, conducteur.perrenot.eu, customs.groupe-bbl.com, www.onet.fr
Dismissed Targets(0):
2026-07-21_09-05-07 check-hosts status
The attacks attributed to noname057 primarily target websites associated with logistics and customs services in France. Key countries under attack include France, given the prevalence of French domain names and organizations involved in shipping and compliance. The attackers focus on various sectors, indicating a potential interest in disrupting supply chain operations.AI generated
19 targets are under attack, 18 new targets and 1 targets from previous attack
New Targets(18): www.perrenot.eu, api.customs.groupe-bbl.com, netscaler.groupe-bbl.com, mycompliance-pre.cma-cgm.com, ereflex.groupe-bbl.com, www.onet.fr, mycompliance.cma-cgm.com, groupe-bbl.com, carriere.perrenot.eu, ged.perrenot.eu, www.marseille-port.fr, secvault.onet.fr, customs.groupe-bbl.com, conducteur.perrenot.eu, netexplorer.onet.fr, uat.wind-admin.cma-cgm.com, citrix.groupe-bbl.com, link.onet.fr
Targets from prev attack(1): wind-admin.cma-cgm.com
Dismissed Targets(0):
2026-07-21_08-05-08 check-hosts status
Noname057(16) has targeted various sites, including wind-admin.cma-cgm.com. The primary countries under attack include France, where CMA CGM is headquartered, and other regions involved in global shipping and logistics. The attacks reflect a focus on critical infrastructure and industries related to maritime operations.AI generated
1 targets are under attack, 1 new targets and 0 targets from previous attack
New Targets(1): wind-admin.cma-cgm.com
Targets from prev attack(0):
Dismissed Targets(31): g360ext.ff.geodis.com, gicat.com, www.lazardfreresgestion.fr, espace-client-rct.geodis.com, login.geodis.com, azreport-apac.ff.geodis.com, courier-ts2.geodis.com, idp.extranet.geodis.org, www.cnctr.fr, developer-uat.api.geodis.com, courier.geodis.com, injob.geodis.com, lemediateur.fbf.fr, start-ni-mitte.de, www.ccomptes.fr, geodis.com, www.wendelgroup.com, espace-client.geodis.com, geodis.integrityline.app, g360.ff.geodis.com, sagem.com, developer.api.geodis.com, brandcenter.geodis.com, g360staging.ff.geodis.com, www.economie.gouv.fr, handling.geodis.com, www.chantiers-atlantique.com, www.knds.fr, g360si.geodis.com, g360extstaging.ff.geodis.com, espace-client-qua.geodis.com
2026-07-20_12-05-08 check-hosts status
The attacks attributed to noname057 primarily target organizations in France and Germany. Notable sectors affected include logistics, finance, and government services, with multiple websites from Geodis, a major logistics provider, being compromised. Other targeted entities include financial institutions and governmental departments, indicating a broad interest in critical infrastructure and economic sectors within these countries.AI generated
31 targets are under attack, 10 new targets and 21 targets from previous attack
New Targets(10): www.knds.fr, www.ccomptes.fr, gicat.com, sagem.com, www.wendelgroup.com, www.economie.gouv.fr, www.cnctr.fr, www.chantiers-atlantique.com, www.lazardfreresgestion.fr, lemediateur.fbf.fr
Targets from prev attack(21): azreport-apac.ff.geodis.com, g360ext.ff.geodis.com, espace-client-rct.geodis.com, login.geodis.com, g360si.geodis.com, espace-client-qua.geodis.com, g360extstaging.ff.geodis.com, idp.extranet.geodis.org, espace-client.geodis.com, developer-uat.api.geodis.com, injob.geodis.com, start-ni-mitte.de, brandcenter.geodis.com, g360staging.ff.geodis.com, developer.api.geodis.com, g360.ff.geodis.com, handling.geodis.com, courier.geodis.com, geodis.com, geodis.integrityline.app, courier-ts2.geodis.com
Dismissed Targets(0):
2026-07-20_08-05-08 check-hosts status
The attacks attributed to noname057(16) primarily target websites associated with Geodis, a global logistics company. The main countries under attack include France, where Geodis is headquartered, and Germany, as indicated by the presence of German domains. Other regions may also be affected due to the international nature of the company's operations.AI generated
21 targets are under attack, 20 new targets and 1 targets from previous attack
New Targets(20): brandcenter.geodis.com, courier-ts2.geodis.com, developer.api.geodis.com, developer-uat.api.geodis.com, g360ext.ff.geodis.com, injob.geodis.com, login.geodis.com, g360si.geodis.com, handling.geodis.com, g360.ff.geodis.com, espace-client.geodis.com, espace-client-qua.geodis.com, g360staging.ff.geodis.com, g360extstaging.ff.geodis.com, courier.geodis.com, espace-client-rct.geodis.com, geodis.com, geodis.integrityline.app, azreport-apac.ff.geodis.com, idp.extranet.geodis.org
Targets from prev attack(1): start-ni-mitte.de
Dismissed Targets(17): www.stex-gmbh.com, auth.m-net.de, bestellen.glasfaser.swhl.de, kundenportal.m-net.de, stellenangebote.swhl.de, bond.wiesbaden.de, zugang2.wiesbaden.de, stats.eswe-verkehr.de, dtms.wiesbaden.de, piwi.wiesbaden.de, testfreight.ttline.com, www.ttline.com, wohnungswirtschaft.wiesbaden.de, anmeldung.mdv-verbundgebiet.de, login-netzplan.swhl.de, www.m-net.de, 1ticket.de
2026-07-19_12-10-07 check-hosts status
The attacks attributed to noname057 primarily target websites in Germany. Key sectors affected include transportation, telecommunications, and local government services. The targeted sites are associated with various regional services in cities like Wiesbaden and other areas across the country.AI generated
18 targets are under attack, 1 new targets and 17 targets from previous attack
New Targets(1): start-ni-mitte.de
Targets from prev attack(17): anmeldung.mdv-verbundgebiet.de, login-netzplan.swhl.de, dtms.wiesbaden.de, bond.wiesbaden.de, auth.m-net.de, www.m-net.de, stellenangebote.swhl.de, zugang2.wiesbaden.de, stats.eswe-verkehr.de, wohnungswirtschaft.wiesbaden.de, www.stex-gmbh.com, bestellen.glasfaser.swhl.de, kundenportal.m-net.de, piwi.wiesbaden.de, www.ttline.com, testfreight.ttline.com, 1ticket.de
Dismissed Targets(0):
2026-07-19_08-05-08 check-hosts status
The attacks attributed to noname057(16) primarily targeted websites in Germany. Key sectors affected include transportation, telecommunications, and local government services, with notable attacks on sites like m-net.de and wiesbaden.de.AI generated
17 targets are under attack, 17 new targets and 0 targets from previous attack
New Targets(17): bestellen.glasfaser.swhl.de, 1ticket.de, stats.eswe-verkehr.de, login-netzplan.swhl.de, anmeldung.mdv-verbundgebiet.de, stellenangebote.swhl.de, wohnungswirtschaft.wiesbaden.de, kundenportal.m-net.de, bond.wiesbaden.de, dtms.wiesbaden.de, www.ttline.com, piwi.wiesbaden.de, zugang2.wiesbaden.de, testfreight.ttline.com, www.m-net.de, auth.m-net.de, www.stex-gmbh.com
Targets from prev attack(0):
Dismissed Targets(18): www.portofkiel.com, analytics.portofkiel.com, www.nah.sh, analytics.tkmsgroup.com, www.tkmsgroup.com, agios.portofkiel.com, minio.pamyra.de, auth.portofkiel.com, stage.stadtwerke-kiel.de, online-knoellchen.kiel.de, anhoerung.kiel.de, stadtbuecherei.kiel.de, pasis.portofkiel.com, kiel.de, www.limanisupply.com, login.thyssenkrupp.com, lhk-intranet.kiel.de, esmz.portofkiel.com
2026-07-18_08-50-12 check-hosts status
The attacks attributed to noname057 primarily targeted websites in Germany, particularly those related to the Kiel region and various local organizations. Key sites affected include the Port of Kiel and several local government and library services. The attacks also impacted the Thyssenkrupp login portal and other related domains, indicating a focus on both public and private sector entities within Germany.AI generated
18 targets are under attack, 9 new targets and 9 targets from previous attack
New Targets(9): auth.portofkiel.com, www.portofkiel.com, www.limanisupply.com, pasis.portofkiel.com, analytics.portofkiel.com, agios.portofkiel.com, stage.stadtwerke-kiel.de, esmz.portofkiel.com, minio.pamyra.de
Targets from prev attack(9): analytics.tkmsgroup.com, www.nah.sh, login.thyssenkrupp.com, online-knoellchen.kiel.de, stadtbuecherei.kiel.de, anhoerung.kiel.de, lhk-intranet.kiel.de, kiel.de, www.tkmsgroup.com
Dismissed Targets(30): www.vms.de, immobilienprojekte.frankfurter-volksbank.de, www.kreis-oh.de, www.saarvv.de, vrinternational.frankfurter-volksbank.de, momente.frankfurter-volksbank.de, signaturonline.frankfurter-volksbank.de, immobilien.frankfurter-volksbank.de, money-and-more.frankfurter-volksbank.de, www.sbahn-hannover.de, profil-newsletter.frankfurter-volksbank.de, nachhaltigkeitskompass.frankfurter-volksbank.de, stiftung-moritzburg.de, anmeldung-newsletter.frankfurter-volksbank.de, dashboard.frankfurter-volksbank.de, www.bode-holtemme.de, www.bvl.de, abmeldung-newsletter.frankfurter-volksbank.de, t.frankfurter-volksbank.de, www.erfurt.de, emili.frankfurter-volksbank.de, nachhaltigkeitskompass-firmenkunden.frankfurter-volksbank.de, www.nasa.de, move.frankfurter-volksbank.de, www.vg-arendsee-kalbe.de, dialogadmin.frankfurter-volksbank.de, frontend-api.sbahn-hannover.de, dialogonline.frankfurter-volksbank.de, www.bkms-system.net, www.gladbeck.de
2026-07-18_08-46-09 check-hosts status
The attacks by noname057 primarily targeted websites in Germany, with significant focus on various sectors including banking, public services, and local government. Notable sites affected include those belonging to the Frankfurter Volksbank, Kiel city, and several regional transport services, indicating a concentrated effort within the German digital landscape.AI generated
39 targets are under attack, 2 new targets and 37 targets from previous attack
New Targets(2): anhoerung.kiel.de, lhk-intranet.kiel.de
Targets from prev attack(37): analytics.tkmsgroup.com, online-knoellchen.kiel.de, www.vms.de, immobilienprojekte.frankfurter-volksbank.de, www.kreis-oh.de, www.saarvv.de, vrinternational.frankfurter-volksbank.de, kiel.de, momente.frankfurter-volksbank.de, www.tkmsgroup.com, signaturonline.frankfurter-volksbank.de, immobilien.frankfurter-volksbank.de, money-and-more.frankfurter-volksbank.de, www.nah.sh, stadtbuecherei.kiel.de, www.sbahn-hannover.de, profil-newsletter.frankfurter-volksbank.de, nachhaltigkeitskompass.frankfurter-volksbank.de, stiftung-moritzburg.de, anmeldung-newsletter.frankfurter-volksbank.de, dashboard.frankfurter-volksbank.de, www.bode-holtemme.de, www.bvl.de, login.thyssenkrupp.com, abmeldung-newsletter.frankfurter-volksbank.de, t.frankfurter-volksbank.de, www.erfurt.de, emili.frankfurter-volksbank.de, nachhaltigkeitskompass-firmenkunden.frankfurter-volksbank.de, www.nasa.de, www.vg-arendsee-kalbe.de, move.frankfurter-volksbank.de, dialogadmin.frankfurter-volksbank.de, frontend-api.sbahn-hannover.de, dialogonline.frankfurter-volksbank.de, www.bkms-system.net, www.gladbeck.de
Dismissed Targets(0):
2026-07-18_08-31-15 check-hosts status
The attacks attributed to noname057 primarily target websites in Germany, with a focus on various sectors including banking, public services, and educational institutions. Key affected regions include cities such as Kiel, Erfurt, and Gladbeck, highlighting a concentrated effort against German online infrastructure. Additionally, there are instances of attacks on platforms related to financial services and public transport, indicating a broad range of targets within the country.AI generated
37 targets are under attack, 4 new targets and 33 targets from previous attack
New Targets(4): login.thyssenkrupp.com, online-knoellchen.kiel.de, analytics.tkmsgroup.com, stadtbuecherei.kiel.de
Targets from prev attack(33): money-and-more.frankfurter-volksbank.de, www.vg-arendsee-kalbe.de, www.erfurt.de, www.nah.sh, www.vms.de, www.saarvv.de, kiel.de, immobilienprojekte.frankfurter-volksbank.de, nachhaltigkeitskompass.frankfurter-volksbank.de, move.frankfurter-volksbank.de, www.kreis-oh.de, stiftung-moritzburg.de, vrinternational.frankfurter-volksbank.de, momente.frankfurter-volksbank.de, profil-newsletter.frankfurter-volksbank.de, www.tkmsgroup.com, www.sbahn-hannover.de, dialogonline.frankfurter-volksbank.de, www.bkms-system.net, dialogadmin.frankfurter-volksbank.de, www.bode-holtemme.de, frontend-api.sbahn-hannover.de, t.frankfurter-volksbank.de, www.nasa.de, abmeldung-newsletter.frankfurter-volksbank.de, www.bvl.de, dashboard.frankfurter-volksbank.de, www.gladbeck.de, anmeldung-newsletter.frankfurter-volksbank.de, emili.frankfurter-volksbank.de, nachhaltigkeitskompass-firmenkunden.frankfurter-volksbank.de, signaturonline.frankfurter-volksbank.de, immobilien.frankfurter-volksbank.de
Dismissed Targets(0):
2026-07-18_08-15-30 check-hosts status
The attacks attributed to noname057 primarily targeted websites in Germany, with a focus on financial institutions and local government services. Key sites affected include various domains associated with Frankfurter Volksbank, S-Bahn Hannover, and several municipal websites. The attacks highlight a concentrated effort against German entities, indicating a potential motive related to financial or governmental data.AI generated
33 targets are under attack, 3 new targets and 30 targets from previous attack
New Targets(3): kiel.de, www.nah.sh, www.tkmsgroup.com
Targets from prev attack(30): immobilien.frankfurter-volksbank.de, momente.frankfurter-volksbank.de, www.kreis-oh.de, signaturonline.frankfurter-volksbank.de, frontend-api.sbahn-hannover.de, nachhaltigkeitskompass-firmenkunden.frankfurter-volksbank.de, t.frankfurter-volksbank.de, anmeldung-newsletter.frankfurter-volksbank.de, dialogadmin.frankfurter-volksbank.de, emili.frankfurter-volksbank.de, www.bkms-system.net, profil-newsletter.frankfurter-volksbank.de, www.nasa.de, www.vms.de, www.bode-holtemme.de, abmeldung-newsletter.frankfurter-volksbank.de, nachhaltigkeitskompass.frankfurter-volksbank.de, www.bvl.de, www.gladbeck.de, money-and-more.frankfurter-volksbank.de, move.frankfurter-volksbank.de, vrinternational.frankfurter-volksbank.de, www.sbahn-hannover.de, www.vg-arendsee-kalbe.de, www.saarvv.de, www.erfurt.de, stiftung-moritzburg.de, dashboard.frankfurter-volksbank.de, immobilienprojekte.frankfurter-volksbank.de, dialogonline.frankfurter-volksbank.de
Dismissed Targets(0):
2026-07-17_12-10-47 check-hosts status
The attacks attributed to noname057 primarily targeted websites in Germany, with notable instances involving various domains associated with financial institutions and local government entities. Key sites included those of the Frankfurter Volksbank, the city of Erfurt, and several regional transport services like S-Bahn Hannover. The attacks reflect a concentrated effort against German infrastructure, indicating a potential focus on disrupting services and accessing sensitive information.AI generated
30 targets are under attack, 13 new targets and 17 targets from previous attack
New Targets(13): www.bkms-system.net, www.kreis-oh.de, www.erfurt.de, www.nasa.de, stiftung-moritzburg.de, www.sbahn-hannover.de, www.vms.de, www.saarvv.de, www.gladbeck.de, www.vg-arendsee-kalbe.de, frontend-api.sbahn-hannover.de, www.bode-holtemme.de, www.bvl.de
Targets from prev attack(17): profil-newsletter.frankfurter-volksbank.de, vrinternational.frankfurter-volksbank.de, nachhaltigkeitskompass.frankfurter-volksbank.de, immobilien.frankfurter-volksbank.de, t.frankfurter-volksbank.de, immobilienprojekte.frankfurter-volksbank.de, dialogonline.frankfurter-volksbank.de, abmeldung-newsletter.frankfurter-volksbank.de, money-and-more.frankfurter-volksbank.de, emili.frankfurter-volksbank.de, anmeldung-newsletter.frankfurter-volksbank.de, momente.frankfurter-volksbank.de, dialogadmin.frankfurter-volksbank.de, dashboard.frankfurter-volksbank.de, nachhaltigkeitskompass-firmenkunden.frankfurter-volksbank.de, move.frankfurter-volksbank.de, signaturonline.frankfurter-volksbank.de
Dismissed Targets(0):
2026-07-17_09-16-16 check-hosts status
The attacks by noname057 primarily targeted websites associated with Frankfurter Volksbank, indicating a focus on Germany. The compromised sites include various services related to banking, sustainability, and customer engagement, highlighting the sector's vulnerability to cyber threats.AI generated
17 targets are under attack, 0 new targets and 17 targets from previous attack
New Targets(0):
Targets from prev attack(17): signaturonline.frankfurter-volksbank.de, nachhaltigkeitskompass-firmenkunden.frankfurter-volksbank.de, anmeldung-newsletter.frankfurter-volksbank.de, t.frankfurter-volksbank.de, nachhaltigkeitskompass.frankfurter-volksbank.de, dashboard.frankfurter-volksbank.de, momente.frankfurter-volksbank.de, move.frankfurter-volksbank.de, dialogonline.frankfurter-volksbank.de, vrinternational.frankfurter-volksbank.de, immobilien.frankfurter-volksbank.de, immobilienprojekte.frankfurter-volksbank.de, money-and-more.frankfurter-volksbank.de, abmeldung-newsletter.frankfurter-volksbank.de, emili.frankfurter-volksbank.de, dialogadmin.frankfurter-volksbank.de, profil-newsletter.frankfurter-volksbank.de
Dismissed Targets(27): partnerportal.m-net.de, www.rmv.de, traukalender.wiesbaden.de, auth.m-net.de, piwi.wiesbaden.de, dtms.wiesbaden.de, aboonline.eswe-verkehr.de, ausbildung.wiesbaden.de, ivupad.eswe-verkehr.de, zugang2.wiesbaden.de, media.m-net.de, stats.eswe-verkehr.de, kundenportal.m-net.de, bond.wiesbaden.de, forum.m-net.de, auth-portale.m-net.de, caligari.wiesbaden.de, www.wiesbaden.de, www.m-net.de, ov-traukalender.wiesbaden.de, kurhaus.wiesbaden.de, matomo.eswe-verkehr.de, geoportal.wiesbaden.de, wohnungswirtschaft.wiesbaden.de, user.cloudcom.m-net.de, shop.eswe.com, www.eswe-verkehr.de
2026-07-17_08-10-49 check-hosts status
The attacks attributed to noname057 primarily target websites in Germany, specifically in the Wiesbaden area and associated with various institutions such as the Frankfurter Volksbank and M-net. The focus appears to be on local government services, transportation, and banking platforms, indicating a concentrated effort on critical infrastructure and regional services within Germany.AI generated
44 targets are under attack, 17 new targets and 27 targets from previous attack
New Targets(17): abmeldung-newsletter.frankfurter-volksbank.de, anmeldung-newsletter.frankfurter-volksbank.de, t.frankfurter-volksbank.de, emili.frankfurter-volksbank.de, immobilien.frankfurter-volksbank.de, dashboard.frankfurter-volksbank.de, momente.frankfurter-volksbank.de, dialogonline.frankfurter-volksbank.de, signaturonline.frankfurter-volksbank.de, money-and-more.frankfurter-volksbank.de, immobilienprojekte.frankfurter-volksbank.de, dialogadmin.frankfurter-volksbank.de, profil-newsletter.frankfurter-volksbank.de, nachhaltigkeitskompass.frankfurter-volksbank.de, move.frankfurter-volksbank.de, nachhaltigkeitskompass-firmenkunden.frankfurter-volksbank.de, vrinternational.frankfurter-volksbank.de
Targets from prev attack(27): kurhaus.wiesbaden.de, shop.eswe.com, user.cloudcom.m-net.de, caligari.wiesbaden.de, media.m-net.de, kundenportal.m-net.de, bond.wiesbaden.de, www.eswe-verkehr.de, www.wiesbaden.de, auth-portale.m-net.de, forum.m-net.de, traukalender.wiesbaden.de, ov-traukalender.wiesbaden.de, stats.eswe-verkehr.de, auth.m-net.de, wohnungswirtschaft.wiesbaden.de, zugang2.wiesbaden.de, geoportal.wiesbaden.de, www.rmv.de, piwi.wiesbaden.de, www.m-net.de, partnerportal.m-net.de, ausbildung.wiesbaden.de, aboonline.eswe-verkehr.de, dtms.wiesbaden.de, matomo.eswe-verkehr.de, ivupad.eswe-verkehr.de
Dismissed Targets(8): www.kvg-kiel.de, analytics.portofkiel.com, www.nah.sh, ivu.kvg-kiel.de, login.kvg-kiel.de, agios.portofkiel.com, mobiliteam.nah.sh, auth.portofkiel.com
2026-07-17_03-15-07 check-hosts status
The attacks attributed to noname057 primarily target websites in Germany, specifically in cities like Wiesbaden and Kiel. Key sectors affected include transportation, public services, and telecommunications, with multiple local government and service provider websites compromised.AI generated
35 targets are under attack, 1 new targets and 34 targets from previous attack
New Targets(1): mobiliteam.nah.sh
Targets from prev attack(34): zugang2.wiesbaden.de, wohnungswirtschaft.wiesbaden.de, www.m-net.de, partnerportal.m-net.de, www.nah.sh, user.cloudcom.m-net.de, login.kvg-kiel.de, www.eswe-verkehr.de, caligari.wiesbaden.de, auth.m-net.de, www.wiesbaden.de, forum.m-net.de, analytics.portofkiel.com, stats.eswe-verkehr.de, agios.portofkiel.com, kundenportal.m-net.de, shop.eswe.com, kurhaus.wiesbaden.de, www.rmv.de, geoportal.wiesbaden.de, piwi.wiesbaden.de, traukalender.wiesbaden.de, matomo.eswe-verkehr.de, dtms.wiesbaden.de, ausbildung.wiesbaden.de, auth-portale.m-net.de, ov-traukalender.wiesbaden.de, media.m-net.de, auth.portofkiel.com, ivu.kvg-kiel.de, ivupad.eswe-verkehr.de, www.kvg-kiel.de, bond.wiesbaden.de, aboonline.eswe-verkehr.de
Dismissed Targets(0):
2026-07-17_03-10-09 check-hosts status
The attacks by noname057 primarily targeted websites in Germany. Key cities affected include Wiesbaden, Kiel, and areas served by M-net and ESWE Verkehr. The attacks impacted various services, including public transport, local government portals, and user authentication systems.AI generated
34 targets are under attack, 0 new targets and 34 targets from previous attack
New Targets(0):
Targets from prev attack(34): www.wiesbaden.de, auth.portofkiel.com, ivupad.eswe-verkehr.de, caligari.wiesbaden.de, partnerportal.m-net.de, www.m-net.de, zugang2.wiesbaden.de, auth-portale.m-net.de, geoportal.wiesbaden.de, ivu.kvg-kiel.de, media.m-net.de, user.cloudcom.m-net.de, www.eswe-verkehr.de, auth.m-net.de, aboonline.eswe-verkehr.de, piwi.wiesbaden.de, wohnungswirtschaft.wiesbaden.de, www.kvg-kiel.de, dtms.wiesbaden.de, traukalender.wiesbaden.de, bond.wiesbaden.de, www.nah.sh, shop.eswe.com, kundenportal.m-net.de, ov-traukalender.wiesbaden.de, forum.m-net.de, kurhaus.wiesbaden.de, analytics.portofkiel.com, matomo.eswe-verkehr.de, www.rmv.de, agios.portofkiel.com, ausbildung.wiesbaden.de, login.kvg-kiel.de, stats.eswe-verkehr.de
Dismissed Targets(1): mobiliteam.nah.sh
2026-07-17_02-15-09 check-hosts status
The attacks attributed to noname057 primarily target websites in Germany, particularly in the regions of Kiel and Wiesbaden. Key sectors affected include public transportation, local government services, and various online portals related to mobility and utilities. The attacks highlight a concentrated effort on German infrastructure and services, indicating a potential focus on disrupting local operations and accessing sensitive information.AI generated
35 targets are under attack, 4 new targets and 31 targets from previous attack
New Targets(4): dtms.wiesbaden.de, media.m-net.de, forum.m-net.de, ivupad.eswe-verkehr.de
Targets from prev attack(31): analytics.portofkiel.com, www.nah.sh, partnerportal.m-net.de, kurhaus.wiesbaden.de, zugang2.wiesbaden.de, shop.eswe.com, caligari.wiesbaden.de, geoportal.wiesbaden.de, stats.eswe-verkehr.de, traukalender.wiesbaden.de, piwi.wiesbaden.de, mobiliteam.nah.sh, kundenportal.m-net.de, auth.m-net.de, ivu.kvg-kiel.de, www.kvg-kiel.de, www.wiesbaden.de, aboonline.eswe-verkehr.de, www.eswe-verkehr.de, auth-portale.m-net.de, auth.portofkiel.com, ov-traukalender.wiesbaden.de, matomo.eswe-verkehr.de, www.rmv.de, ausbildung.wiesbaden.de, wohnungswirtschaft.wiesbaden.de, bond.wiesbaden.de, www.m-net.de, agios.portofkiel.com, user.cloudcom.m-net.de, login.kvg-kiel.de
Dismissed Targets(0):
2026-07-17_02-10-26 check-hosts status
The attacks attributed to noname057 primarily target websites in Germany, specifically in the regions of Wiesbaden and Kiel. These include various municipal, transportation, and service-related sites, indicating a focus on local government and public services. The attacks highlight vulnerabilities in critical infrastructure within these areas.AI generated
31 targets are under attack, 0 new targets and 31 targets from previous attack
New Targets(0):
Targets from prev attack(31): www.wiesbaden.de, auth.portofkiel.com, kurhaus.wiesbaden.de, wohnungswirtschaft.wiesbaden.de, login.kvg-kiel.de, auth-portale.m-net.de, www.rmv.de, partnerportal.m-net.de, ivu.kvg-kiel.de, mobiliteam.nah.sh, matomo.eswe-verkehr.de, bond.wiesbaden.de, agios.portofkiel.com, shop.eswe.com, geoportal.wiesbaden.de, user.cloudcom.m-net.de, stats.eswe-verkehr.de, auth.m-net.de, ausbildung.wiesbaden.de, traukalender.wiesbaden.de, www.nah.sh, www.eswe-verkehr.de, analytics.portofkiel.com, kundenportal.m-net.de, caligari.wiesbaden.de, ov-traukalender.wiesbaden.de, www.kvg-kiel.de, piwi.wiesbaden.de, aboonline.eswe-verkehr.de, www.m-net.de, zugang2.wiesbaden.de
Dismissed Targets(4): ivupad.eswe-verkehr.de, media.m-net.de, forum.m-net.de, dtms.wiesbaden.de
2026-07-16_23-15-08 check-hosts status
The attacks by noname057(16) primarily targeted websites in Germany, specifically in cities like Wiesbaden and Kiel. Key sectors affected include public transportation, local government services, and telecommunications.AI generated
35 targets are under attack, 1 new targets and 34 targets from previous attack
New Targets(1): caligari.wiesbaden.de
Targets from prev attack(34): agios.portofkiel.com, www.m-net.de, dtms.wiesbaden.de, auth-portale.m-net.de, analytics.portofkiel.com, bond.wiesbaden.de, www.nah.sh, ivu.kvg-kiel.de, kurhaus.wiesbaden.de, forum.m-net.de, auth.portofkiel.com, ov-traukalender.wiesbaden.de, piwi.wiesbaden.de, zugang2.wiesbaden.de, login.kvg-kiel.de, ausbildung.wiesbaden.de, matomo.eswe-verkehr.de, www.wiesbaden.de, media.m-net.de, user.cloudcom.m-net.de, www.kvg-kiel.de, www.rmv.de, aboonline.eswe-verkehr.de, ivupad.eswe-verkehr.de, stats.eswe-verkehr.de, shop.eswe.com, partnerportal.m-net.de, kundenportal.m-net.de, geoportal.wiesbaden.de, mobiliteam.nah.sh, wohnungswirtschaft.wiesbaden.de, auth.m-net.de, traukalender.wiesbaden.de, www.eswe-verkehr.de
Dismissed Targets(0):
2026-07-16_23-10-17 check-hosts status
The attacks attributed to noname057 primarily target websites in Germany, particularly in the regions of Wiesbaden and Kiel. Key sectors under attack include public transportation, local government services, and online shopping platforms. Notable websites affected include municipal portals, transport services, and various online customer services, indicating a focus on disrupting local infrastructure and services.AI generated
34 targets are under attack, 0 new targets and 34 targets from previous attack
New Targets(0):
Targets from prev attack(34): kurhaus.wiesbaden.de, shop.eswe.com, ov-traukalender.wiesbaden.de, www.rmv.de, auth.m-net.de, ivu.kvg-kiel.de, agios.portofkiel.com, aboonline.eswe-verkehr.de, wohnungswirtschaft.wiesbaden.de, mobiliteam.nah.sh, geoportal.wiesbaden.de, forum.m-net.de, ivupad.eswe-verkehr.de, traukalender.wiesbaden.de, login.kvg-kiel.de, www.kvg-kiel.de, kundenportal.m-net.de, www.m-net.de, partnerportal.m-net.de, stats.eswe-verkehr.de, www.eswe-verkehr.de, www.nah.sh, ausbildung.wiesbaden.de, bond.wiesbaden.de, www.wiesbaden.de, piwi.wiesbaden.de, dtms.wiesbaden.de, auth.portofkiel.com, user.cloudcom.m-net.de, zugang2.wiesbaden.de, media.m-net.de, matomo.eswe-verkehr.de, analytics.portofkiel.com, auth-portale.m-net.de
Dismissed Targets(1): caligari.wiesbaden.de
2026-07-16_13-05-08 check-hosts status
The attacks attributed to noname057 primarily targeted sites in Germany, particularly in the Wiesbaden and Kiel regions. Key sectors affected include public transportation, local government services, and telecommunications. The attacks highlight a focus on regional infrastructure and services, impacting both local authorities and public transport systems.AI generated
35 targets are under attack, 8 new targets and 27 targets from previous attack
New Targets(8): analytics.portofkiel.com, ivu.kvg-kiel.de, www.kvg-kiel.de, mobiliteam.nah.sh, login.kvg-kiel.de, auth.portofkiel.com, www.nah.sh, agios.portofkiel.com
Targets from prev attack(27): zugang2.wiesbaden.de, piwi.wiesbaden.de, www.eswe-verkehr.de, www.wiesbaden.de, ausbildung.wiesbaden.de, traukalender.wiesbaden.de, caligari.wiesbaden.de, www.m-net.de, media.m-net.de, dtms.wiesbaden.de, auth-portale.m-net.de, stats.eswe-verkehr.de, ov-traukalender.wiesbaden.de, forum.m-net.de, user.cloudcom.m-net.de, bond.wiesbaden.de, partnerportal.m-net.de, matomo.eswe-verkehr.de, auth.m-net.de, kurhaus.wiesbaden.de, shop.eswe.com, ivupad.eswe-verkehr.de, wohnungswirtschaft.wiesbaden.de, kundenportal.m-net.de, www.rmv.de, aboonline.eswe-verkehr.de, geoportal.wiesbaden.de
Dismissed Targets(0):
2026-07-16_09-05-07 check-hosts status
The attacks attributed to noname057 primarily target websites in Germany, particularly in the Wiesbaden area. Key sectors affected include public transportation, utilities, and local government services, indicating a focus on critical infrastructure and community services within the country.AI generated
27 targets are under attack, 27 new targets and 0 targets from previous attack
New Targets(27): shop.eswe.com, auth.m-net.de, traukalender.wiesbaden.de, dtms.wiesbaden.de, aboonline.eswe-verkehr.de, www.eswe-verkehr.de, www.wiesbaden.de, user.cloudcom.m-net.de, ivupad.eswe-verkehr.de, www.rmv.de, matomo.eswe-verkehr.de, wohnungswirtschaft.wiesbaden.de, www.m-net.de, caligari.wiesbaden.de, forum.m-net.de, geoportal.wiesbaden.de, kurhaus.wiesbaden.de, kundenportal.m-net.de, ov-traukalender.wiesbaden.de, stats.eswe-verkehr.de, bond.wiesbaden.de, media.m-net.de, auth-portale.m-net.de, partnerportal.m-net.de, piwi.wiesbaden.de, zugang2.wiesbaden.de, ausbildung.wiesbaden.de
Targets from prev attack(0):
Dismissed Targets(1): www.mvg.de
2026-07-16_08-05-09 check-hosts status
Noname057(16) has targeted various websites, including www.mvg.de, primarily affecting Germany. The attacks indicate a focus on critical infrastructure and public services within the country.AI generated
1 targets are under attack, 0 new targets and 1 targets from previous attack
New Targets(0):
Targets from prev attack(1): www.mvg.de
Dismissed Targets(29): nationalexpress.de, transportticket.staging.ttline.com, transportticket.ttline.com, kundenportal.swhl.de, pay.staging.ttline.com, pay.ttline.com, www.faehre-honnef.de, speedtest.glasfaser.swhl.de, plusbus-deutschland.de, login-netzplan.swhl.de, www.bds-dgv.de, www.mdv-verbundgebiet.de, plustaktbus.de, bestellen.glasfaser.swhl.de, www.sweg.de, webmail.bds-dgv.de, anmeldung.mdv-verbundgebiet.de, www.swhl.de, www.moovme.de, parken.swhl.de, www.deutschebahn.com, 1ticket.de, bitwarden.swhl.de, www.ttline.com, start-ni-mitte.de, testfreight.ttline.com, stellenangebote.swhl.de, booking.ttline.com, netzplan.swhl.de
2026-07-16_07-10-07 check-hosts status
The recent attacks attributed to noname057 primarily targeted websites in Germany, affecting various sectors including transportation, public services, and telecommunications. Key sites include those related to ticketing and travel services, such as ttline.com and deutschebahn.com, indicating a focus on the transportation infrastructure in the country.AI generated
30 targets are under attack, 0 new targets and 30 targets from previous attack
New Targets(0):
Targets from prev attack(30): parken.swhl.de, webmail.bds-dgv.de, transportticket.ttline.com, pay.ttline.com, plustaktbus.de, anmeldung.mdv-verbundgebiet.de, booking.ttline.com, 1ticket.de, login-netzplan.swhl.de, bestellen.glasfaser.swhl.de, transportticket.staging.ttline.com, www.sweg.de, pay.staging.ttline.com, www.moovme.de, plusbus-deutschland.de, www.faehre-honnef.de, www.bds-dgv.de, netzplan.swhl.de, www.mdv-verbundgebiet.de, www.deutschebahn.com, nationalexpress.de, www.ttline.com, kundenportal.swhl.de, stellenangebote.swhl.de, www.mvg.de, start-ni-mitte.de, www.swhl.de, speedtest.glasfaser.swhl.de, bitwarden.swhl.de, testfreight.ttline.com
Dismissed Targets(1): www.nordwestbahn.de