# domain network attack type
2026-09-05_08-04-07 check-hosts status
The attacks by noname057 primarily targeted Estonia, with various government and local authority websites affected. Key areas under attack include e-residency services, municipal websites, and educational institutions, showcasing a focus on critical infrastructure within the country.AI generated
12 targets are under attack, 12 new targets and 0 targets from previous attack
New Targets(12): myyk.inges.ee, www.e-resident.gov.ee, mail.narvasadam.ee, id.lhv.ee, eva.riigikogu.ee, minuomavalitsus.fin.ee, tenders.blrt.ee, web.peatus.ee, www.tartuhly.ee, auth.fin.ee, rito.riigikogu.ee, rhrkoolitus.fin.ee
Targets from prev attack(0):
Dismissed Targets(33): fi.astri.ee, frankenburg.tech, elron.ee, login.olerex.ee, eteenusparnu.gren.ee, digiprojekt.gren.ee, mail.gren.ee, www.pytk.ee, www.tpilet.ee, www.tallinn.ee, etend.tallinnlt.ee, eteenusviru.gren.ee, www.tartu.ee, liivakast.viiger.gobus.ee, test.viiger.gobus.ee, talv.olerex.ee, astri.ee, m.energia.ee, luxexpress.eu, kanejaku.gren.ee, tartu.astri.ee, www.omniva.ee, viiger.gobus.ee, composer.olerex.ee, www.praamid.ee, gobus.ee, eteenustartu.gren.ee, veeteed.com, seib.gren.ee, auth.praamid.ee, docker.olerex.ee, pilet.ee, mail.astri.ee
2026-09-04_12-02-08 check-hosts status
The sites attacked by noname057 primarily belong to Estonia, indicating a significant focus on this country. The targets include various domains related to transportation, local government, and public services, reflecting a diverse range of interests. Other countries may also be indirectly affected due to the interconnected nature of digital services.AI generated
33 targets are under attack, 13 new targets and 20 targets from previous attack
New Targets(13): www.tpilet.ee, etend.tallinnlt.ee, auth.praamid.ee, www.tallinn.ee, www.praamid.ee, frankenburg.tech, pilet.ee, luxexpress.eu, www.tartu.ee, veeteed.com, m.energia.ee, www.omniva.ee, elron.ee
Targets from prev attack(20): talv.olerex.ee, fi.astri.ee, docker.olerex.ee, mail.astri.ee, liivakast.viiger.gobus.ee, tartu.astri.ee, www.pytk.ee, astri.ee, eteenusviru.gren.ee, viiger.gobus.ee, eteenusparnu.gren.ee, kanejaku.gren.ee, mail.gren.ee, gobus.ee, seib.gren.ee, composer.olerex.ee, eteenustartu.gren.ee, login.olerex.ee, test.viiger.gobus.ee, digiprojekt.gren.ee
Dismissed Targets(0):
2026-09-04_08-02-08 check-hosts status
The attacks attributed to noname057 primarily target websites in Estonia. Key domains affected include various services related to Olerex and Gren, indicating a focus on local businesses and government services within the country. The attacks highlight a concentrated effort against Estonian digital infrastructure.AI generated
20 targets are under attack, 20 new targets and 0 targets from previous attack
New Targets(20): composer.olerex.ee, mail.gren.ee, login.olerex.ee, astri.ee, test.viiger.gobus.ee, docker.olerex.ee, gobus.ee, kanejaku.gren.ee, eteenustartu.gren.ee, viiger.gobus.ee, talv.olerex.ee, tartu.astri.ee, fi.astri.ee, mail.astri.ee, liivakast.viiger.gobus.ee, digiprojekt.gren.ee, www.pytk.ee, seib.gren.ee, eteenusparnu.gren.ee, eteenusviru.gren.ee
Targets from prev attack(0):
Dismissed Targets(26): www.vkg.ee, e.seb.ee, www.swedbank.ee, secure.seb.ee, www.parnuvesi.ee, pizzakoju.ee, eteenused.viruev.ee, web.peatus.ee, www.tuuleliinid.ee, services.postimees.ee, sakala.postimees.ee, veenait.parnuvesi.ee, mail.vnk.ee, www.viruev.ee, staging.viruev.ee, www.citadele.ee, www.koda.ee, www.vnk.ee, siil.cooppank.ee, umaleht.ee, www.alecoq.ee, www.seb.ee, smtp.vnk.ee, ollemaailm.alecoq.ee, evea.ee, pop.vnk.ee
2026-09-03_12-04-07 check-hosts status
The attacks attributed to noname057 primarily targeted websites in Estonia. Key sectors affected include finance, media, and public services, with notable institutions like Swedbank and Citadele being among the victims.AI generated
26 targets are under attack, 8 new targets and 18 targets from previous attack
New Targets(8): www.vkg.ee, www.parnuvesi.ee, www.alecoq.ee, ollemaailm.alecoq.ee, veenait.parnuvesi.ee, evea.ee, siil.cooppank.ee, www.tuuleliinid.ee
Targets from prev attack(18): www.seb.ee, umaleht.ee, services.postimees.ee, www.viruev.ee, pizzakoju.ee, www.vnk.ee, www.swedbank.ee, eteenused.viruev.ee, smtp.vnk.ee, www.citadele.ee, web.peatus.ee, e.seb.ee, secure.seb.ee, sakala.postimees.ee, mail.vnk.ee, staging.viruev.ee, pop.vnk.ee, www.koda.ee
Dismissed Targets(0):
2026-09-03_08-06-07 check-hosts status
The attacks attributed to noname057 primarily target Estonia, as indicated by the domains listed. Key sites affected include banking services such as Swedbank and SEB, along with various local services and news platforms. The focus on these domains highlights a significant cyber threat landscape in Estonia.AI generated
18 targets are under attack, 5 new targets and 13 targets from previous attack
New Targets(5): mail.vnk.ee, eteenused.viruev.ee, pop.vnk.ee, smtp.vnk.ee, www.vnk.ee
Targets from prev attack(13): www.citadele.ee, www.swedbank.ee, pizzakoju.ee, services.postimees.ee, staging.viruev.ee, e.seb.ee, www.viruev.ee, www.koda.ee, umaleht.ee, web.peatus.ee, sakala.postimees.ee, www.seb.ee, secure.seb.ee
Dismissed Targets(31): www.fin.ee, www.valimised.ee, www.siseministeerium.ee, avaandmed.eesti.ee, www.e-resident.gov.ee, reform.ee, www.baltictimes.com, www.riigikogu.ee, eelnoud.valitsus.ee, eesti200.ee, www.mkm.ee, kra.ee, www.riigikontroll.ee, www.isamaa.ee, www.sm.ee, www.just.ee, parempoolsed.ee, analytics.kredex.ee, mil.ee, mtr.ttja.ee, www.oiguskantsler.ee, eften.ee, www.keskerakond.ee, vasakliit.ee, www.vm.ee, ekre.ee, valitsus.ee, www.sotsdem.ee, www.riigikantselei.ee, w.president.ee, riiul.fi.ee
2026-09-03_08-02-08 check-hosts status
The attacks by noname057 primarily target websites in Estonia. Key sectors affected include government, banking, and media. Notable sites include the Estonian Ministry of Finance, various political party websites, and major banks like SEB and Swedbank, indicating a focus on critical national infrastructure and public services in Estonia.AI generated
44 targets are under attack, 11 new targets and 33 targets from previous attack
New Targets(11): www.citadele.ee, pizzakoju.ee, services.postimees.ee, staging.viruev.ee, e.seb.ee, www.viruev.ee, www.koda.ee, umaleht.ee, web.peatus.ee, sakala.postimees.ee, www.seb.ee
Targets from prev attack(33): www.fin.ee, www.valimised.ee, www.siseministeerium.ee, avaandmed.eesti.ee, www.e-resident.gov.ee, reform.ee, www.swedbank.ee, www.baltictimes.com, www.riigikogu.ee, eelnoud.valitsus.ee, eesti200.ee, www.mkm.ee, kra.ee, www.riigikontroll.ee, www.sm.ee, www.just.ee, www.isamaa.ee, parempoolsed.ee, analytics.kredex.ee, mil.ee, mtr.ttja.ee, www.oiguskantsler.ee, eften.ee, www.keskerakond.ee, vasakliit.ee, www.vm.ee, ekre.ee, valitsus.ee, www.sotsdem.ee, www.riigikantselei.ee, w.president.ee, riiul.fi.ee, secure.seb.ee
Dismissed Targets(0):
2026-09-03_08-00-27 check-hosts status
The cyber attacks by noname057 primarily targeted Estonia, affecting various government and political websites. Key sites include the Estonian Parliament (riigikogu.ee), the Ministry of Defense (mil.ee), and the Office of the President (w.president.ee). Other affected entities include political parties and financial institutions, highlighting a significant focus on Estonia's political landscape and critical infrastructure.AI generated
33 targets are under attack, 2 new targets and 31 targets from previous attack
New Targets(2): secure.seb.ee, www.swedbank.ee
Targets from prev attack(31): www.keskerakond.ee, www.vm.ee, mtr.ttja.ee, ekre.ee, www.riigikogu.ee, www.riigikontroll.ee, eesti200.ee, www.oiguskantsler.ee, www.siseministeerium.ee, www.sotsdem.ee, eften.ee, www.riigikantselei.ee, www.baltictimes.com, reform.ee, mil.ee, analytics.kredex.ee, www.e-resident.gov.ee, valitsus.ee, vasakliit.ee, www.fin.ee, www.just.ee, parempoolsed.ee, www.mkm.ee, www.isamaa.ee, riiul.fi.ee, eelnoud.valitsus.ee, kra.ee, avaandmed.eesti.ee, www.valimised.ee, www.sm.ee, w.president.ee
Dismissed Targets(0):
2026-09-02_12-02-07 check-hosts status
The sites attacked by noname057 primarily belong to Estonia, indicating a significant focus on this country. The targeted websites include government entities, political parties, and media outlets, showcasing a wide range of interests from political to administrative domains.AI generated
31 targets are under attack, 11 new targets and 20 targets from previous attack
New Targets(11): mtr.ttja.ee, riiul.fi.ee, kra.ee, www.mkm.ee, www.sm.ee, www.fin.ee, eelnoud.valitsus.ee, eften.ee, avaandmed.eesti.ee, www.riigikontroll.ee, analytics.kredex.ee
Targets from prev attack(20): reform.ee, www.isamaa.ee, www.valimised.ee, www.vm.ee, ekre.ee, www.siseministeerium.ee, valitsus.ee, mil.ee, w.president.ee, www.baltictimes.com, parempoolsed.ee, www.e-resident.gov.ee, www.riigikantselei.ee, www.oiguskantsler.ee, vasakliit.ee, www.just.ee, www.sotsdem.ee, eesti200.ee, www.keskerakond.ee, www.riigikogu.ee
Dismissed Targets(0):
2026-09-02_08-02-07 check-hosts status
The attacks by noname057 primarily targeted Estonia, affecting various governmental and political websites. Key sites include those of the Estonian government, political parties, and election-related platforms, indicating a focus on disrupting the country's political landscape and governance.AI generated
20 targets are under attack, 20 new targets and 0 targets from previous attack
New Targets(20): reform.ee, valitsus.ee, www.oiguskantsler.ee, www.just.ee, vasakliit.ee, www.baltictimes.com, www.valimised.ee, mil.ee, parempoolsed.ee, www.riigikogu.ee, www.vm.ee, eesti200.ee, www.e-resident.gov.ee, w.president.ee, www.riigikantselei.ee, www.sotsdem.ee, www.isamaa.ee, ekre.ee, www.siseministeerium.ee, www.keskerakond.ee
Targets from prev attack(0):
Dismissed Targets(27): www.bussijaam.ee, www.linnaelamu.ee, olerex.ee, kajakallas.ee, kviitung.olerex.ee, www.kroonpress.eu, cpanel.njk.ee, www.teed.ee, www.narvavesi.ee, www.parkimine.ee, ecoforce.olerex.ee, tartutk.ee, cpanel.linnaelamu.ee, www.eurochem.ee, njk.ee, login.olerex.ee, www.tlt.ee, cloud.narvavesi.ee, mail.narvasadam.ee, www.tbb.ee, rito.riigikogu.ee, webmail.linnaelamu.ee, tagasimakse.olerex.ee, www.veoauto.ee, mx.tbb.ee, www.app.njk.ee, webmail.njk.ee
2026-09-01_12-04-07 check-hosts status
The attacks attributed to noname057 primarily target websites in Estonia. Key sectors affected include government, transportation, and various service providers. The attacks highlight vulnerabilities in critical infrastructure and public services within the country.AI generated
27 targets are under attack, 9 new targets and 18 targets from previous attack
New Targets(9): www.app.njk.ee, www.tbb.ee, cpanel.linnaelamu.ee, cpanel.njk.ee, mx.tbb.ee, www.linnaelamu.ee, webmail.njk.ee, webmail.linnaelamu.ee, njk.ee
Targets from prev attack(18): mail.narvasadam.ee, kviitung.olerex.ee, rito.riigikogu.ee, ecoforce.olerex.ee, www.tlt.ee, tartutk.ee, tagasimakse.olerex.ee, www.parkimine.ee, www.veoauto.ee, www.bussijaam.ee, www.kroonpress.eu, cloud.narvavesi.ee, www.eurochem.ee, www.teed.ee, www.narvavesi.ee, olerex.ee, login.olerex.ee, kajakallas.ee
Dismissed Targets(0):
2026-09-01_08-04-08 check-hosts status
The attacks attributed to noname057 primarily target websites in Estonia. Key sectors affected include media, transportation, utilities, and government services. The attacks highlight vulnerabilities in various local businesses and public services, indicating a focused effort on disrupting operations in this region.AI generated
18 targets are under attack, 18 new targets and 0 targets from previous attack
New Targets(18): www.eurochem.ee, www.kroonpress.eu, www.veoauto.ee, login.olerex.ee, mail.narvasadam.ee, tagasimakse.olerex.ee, www.parkimine.ee, ecoforce.olerex.ee, www.tlt.ee, kviitung.olerex.ee, olerex.ee, rito.riigikogu.ee, cloud.narvavesi.ee, www.bussijaam.ee, tartutk.ee, kajakallas.ee, www.narvavesi.ee, www.teed.ee
Targets from prev attack(0):
Dismissed Targets(31): eva.riigikogu.ee, goproperty.ee, rhrkoolitus.fin.ee, www.tartuhly.ee, www.inges.ee, www.lhv.ee, baltijaam.ee, nordichypo.ee, myyk.inges.ee, www.kaitseliit.ee, minuomavalitsus.fin.ee, www.lkf.ee, transport.tallinn.ee, www.dirhami.ee, vagner.ee, www.evr.ee, www.norma.ee, dokumendiregister.rahandusministeerium.ee, www.ts.ee, tallinn.pilet.ee, tele2.ee, tenders.blrt.ee, auth.fin.ee, kais-terminal.fin.ee, id.lhv.ee, altero.ee, oam.fi.ee, fp.lhv.ee, eref.ee, marketplace.e-resident.gov.ee, permits.ts.ee
2026-08-31_12-08-08 check-hosts status
The attacks attributed to noname057 primarily targeted websites in Estonia and Finland. Key sectors affected include government services, transportation, and financial institutions. Notable sites include e-resident.gov.ee, various LHV banking services, and Tallinn's public transport portal. The attacks highlight a significant focus on critical infrastructure and public services in these countries.AI generated
31 targets are under attack, 1 new targets and 30 targets from previous attack
New Targets(1): minuomavalitsus.fin.ee
Targets from prev attack(30): marketplace.e-resident.gov.ee, goproperty.ee, www.ts.ee, altero.ee, permits.ts.ee, id.lhv.ee, baltijaam.ee, www.evr.ee, dokumendiregister.rahandusministeerium.ee, myyk.inges.ee, tallinn.pilet.ee, eref.ee, oam.fi.ee, auth.fin.ee, tele2.ee, kais-terminal.fin.ee, www.kaitseliit.ee, www.lhv.ee, nordichypo.ee, www.norma.ee, www.dirhami.ee, transport.tallinn.ee, eva.riigikogu.ee, vagner.ee, www.tartuhly.ee, www.lkf.ee, fp.lhv.ee, www.inges.ee, tenders.blrt.ee, rhrkoolitus.fin.ee
Dismissed Targets(0):
2026-08-31_12-02-07 check-hosts status
The attacks attributed to noname057 primarily target Estonia, with various government and financial websites being compromised. Key sites affected include those related to e-residency, property management, and public transportation. In addition to Estonia, there are indications of interest in Finnish domains, highlighting a broader regional focus on Northern Europe.AI generated
30 targets are under attack, 11 new targets and 19 targets from previous attack
New Targets(11): marketplace.e-resident.gov.ee, kais-terminal.fin.ee, eref.ee, nordichypo.ee, www.tartuhly.ee, www.lkf.ee, auth.fin.ee, www.norma.ee, eva.riigikogu.ee, tenders.blrt.ee, rhrkoolitus.fin.ee
Targets from prev attack(19): goproperty.ee, www.ts.ee, altero.ee, permits.ts.ee, id.lhv.ee, baltijaam.ee, www.evr.ee, dokumendiregister.rahandusministeerium.ee, myyk.inges.ee, tallinn.pilet.ee, oam.fi.ee, tele2.ee, www.kaitseliit.ee, www.lhv.ee, www.dirhami.ee, transport.tallinn.ee, vagner.ee, fp.lhv.ee, www.inges.ee
Dismissed Targets(0):
2026-08-31_08-02-07 check-hosts status
The attacks by noname057 primarily targeted websites in Estonia, with a focus on various sectors including transportation, finance, and government services. Notable sites include those related to public transport, banking, and national registries, indicating a concentrated effort to disrupt critical infrastructure in Estonia.AI generated
19 targets are under attack, 19 new targets and 0 targets from previous attack
New Targets(19): www.evr.ee, tallinn.pilet.ee, vagner.ee, transport.tallinn.ee, oam.fi.ee, www.ts.ee, www.dirhami.ee, tele2.ee, id.lhv.ee, baltijaam.ee, myyk.inges.ee, dokumendiregister.rahandusministeerium.ee, fp.lhv.ee, www.kaitseliit.ee, www.inges.ee, goproperty.ee, permits.ts.ee, www.lhv.ee, altero.ee
Targets from prev attack(0):
Dismissed Targets(13): www.nuct.co.jp, www.sjn.jp, www.tochigi-tv.jp, www.dpj.or.jp, scm.meiko-trans.co.jp, www.yurakaiun.co.jp, www.toyofuji.co.jp, catosweb.kamigumi.co.jp, www.meiko-trans.co.jp, www.pref.yamanashi.jp, www.mitsui-soko.com, sslvpn.toyofuji.co.jp, jreastfaq.jreast.co.jp
2026-08-30_08-02-07 check-hosts status
The attacks attributed to noname057(16) primarily target sites in Japan. Key sectors affected include transportation, logistics, and government, with notable organizations like Yamanashi Prefecture, Meiko Transport, and various media outlets being compromised. The attacks indicate a focused effort on Japanese infrastructure and services.AI generated
13 targets are under attack, 13 new targets and 0 targets from previous attack
New Targets(13): www.pref.yamanashi.jp, www.meiko-trans.co.jp, scm.meiko-trans.co.jp, jreastfaq.jreast.co.jp, www.mitsui-soko.com, www.sjn.jp, www.tochigi-tv.jp, www.nuct.co.jp, www.toyofuji.co.jp, www.dpj.or.jp, sslvpn.toyofuji.co.jp, www.yurakaiun.co.jp, catosweb.kamigumi.co.jp
Targets from prev attack(0):
Dismissed Targets(13): www.aomori-airport.co.jp, www.hakodate-dock.co.jp, jimin-miekenren.jp, www.seiho.or.jp, www.naikaizosen.co.jp, aoimorirailway.com, www.idcj.jp, nptc.co.jp, glossary.mizuho-sc.com, www.kkj.go.jp, information1.gov-procurement.go.jp, www.city.sendai.jp, www.konanbus.com
2026-08-29_08-02-07 check-hosts status
Noname057(16) has targeted various websites primarily in Japan, focusing on sectors such as transportation, local government, and finance. Key attacked sites include those related to airports, city administrations, and public procurement, indicating a significant cyber threat to Japanese infrastructure and services.AI generated
13 targets are under attack, 13 new targets and 0 targets from previous attack
New Targets(13): nptc.co.jp, www.aomori-airport.co.jp, glossary.mizuho-sc.com, www.city.sendai.jp, www.idcj.jp, www.hakodate-dock.co.jp, www.naikaizosen.co.jp, www.konanbus.com, jimin-miekenren.jp, information1.gov-procurement.go.jp, www.seiho.or.jp, www.kkj.go.jp, aoimorirailway.com
Targets from prev attack(0):
Dismissed Targets(28): www.city.niigata.lg.jp, www.inpex.co.jp, www.tls-inc.co.jp, www.jmf.or.jp, track.kuronekoyamato.co.jp, iccj.or.jp, hikawamaru.nyk.com, www.city.fukuoka.lg.jp, www.jmuc.co.jp, www.nyk.com, amane.nyk.com, www.klinelogistics.com, inet.nca.aero, www.jimin.jp, www.city.okayama.jp, kllwebsystems.jp.klinelogistics.com, www.chukyokk.co.jp, www.nitto-ntl.co.jp, www.sanoyas.co.jp, central-lng.com, mol-logistics.eu, www.city.yokosuka.kanagawa.jp, www.city.osaka.lg.jp, www.city.yokohama.lg.jp, www.aikai.co.jp, jp.osy.co.jp, www.shi.co.jp, museum.nyk.com
2026-08-28_22-42-07 check-hosts status
The attacks attributed to noname057 primarily target websites in Japan, with several notable cities such as Niigata, Osaka, Okayama, Yokosuka, Fukuoka, and Yokohama being affected. Additionally, logistics and transportation companies like MOL Logistics and NYK Line are also among the compromised sites.AI generated
28 targets are under attack, 0 new targets and 28 targets from previous attack
New Targets(0):
Targets from prev attack(28): mol-logistics.eu, central-lng.com, www.city.niigata.lg.jp, track.kuronekoyamato.co.jp, www.jmf.or.jp, www.nitto-ntl.co.jp, www.city.osaka.lg.jp, www.city.okayama.jp, iccj.or.jp, hikawamaru.nyk.com, www.tls-inc.co.jp, www.city.yokosuka.kanagawa.jp, amane.nyk.com, www.city.fukuoka.lg.jp, kllwebsystems.jp.klinelogistics.com, www.shi.co.jp, www.chukyokk.co.jp, museum.nyk.com, inet.nca.aero, www.aikai.co.jp, www.inpex.co.jp, www.klinelogistics.com, www.city.yokohama.lg.jp, jp.osy.co.jp, www.sanoyas.co.jp, www.jmuc.co.jp, www.nyk.com, www.jimin.jp
Dismissed Targets(3): www.mitsui-soko.com, www.dpj.or.jp, www.yurakaiun.co.jp
2026-08-28_12-06-07 check-hosts status
The attacks attributed to noname057 primarily target Japan, with numerous sites from various sectors including logistics, municipal services, and technology. Notable cities under attack include Niigata, Fukuoka, Okayama, Yokohama, and Osaka. Additionally, there are attacks on European entities, such as mol-logistics.eu, indicating a broader scope of interest beyond Japan.AI generated
31 targets are under attack, 12 new targets and 19 targets from previous attack
New Targets(12): jp.osy.co.jp, www.sanoyas.co.jp, www.inpex.co.jp, www.jmf.or.jp, www.city.okayama.jp, www.shi.co.jp, www.city.yokosuka.kanagawa.jp, www.city.yokohama.lg.jp, www.jmuc.co.jp, www.city.osaka.lg.jp, www.city.niigata.lg.jp, www.city.fukuoka.lg.jp
Targets from prev attack(19): central-lng.com, www.nitto-ntl.co.jp, kllwebsystems.jp.klinelogistics.com, mol-logistics.eu, www.jimin.jp, www.aikai.co.jp, www.chukyokk.co.jp, www.klinelogistics.com, www.mitsui-soko.com, hikawamaru.nyk.com, www.nyk.com, amane.nyk.com, inet.nca.aero, track.kuronekoyamato.co.jp, museum.nyk.com, www.yurakaiun.co.jp, www.tls-inc.co.jp, www.dpj.or.jp, iccj.or.jp
Dismissed Targets(0):