| # | domain | network | attack type |
|---|
2026-08-15_08-04-09 check-hosts status
The attacks attributed to noname057 primarily targeted websites in Germany, affecting various sectors including transportation, media, and local government. Notable sites include those associated with public transport, such as sbahn-hannover.de and kvg-kiel.de, as well as media outlets like taz.de and burda.com. Additionally, the attacks impacted local government websites such as erfurt.de and saalekreis.de, highlighting a concentrated effort against German entities.AI generated23 targets are under attack, 23 new targets and 0 targets from previous attack
New Targets(23): analytics.tkmsgroup.com, frontend-api.sbahn-hannover.de, www.kreis-oh.de, testfreight.ttline.com, www.taz.de, minio.pamyra.de, www.funkemedien.de, www.vms.de, www.kvg-kiel.de, www.ttline.com, www.vg-arendsee-kalbe.de, www.burda.com, www.sbahn-hannover.de, shop.taz.de, mailing.cicero.de, www.vergabe24.de, mailing.gruene-hessen.de, portal.taz.de, epaper.taz.de, anhoerung.kiel.de, www.erfurt.de, www.nasa.de, www.saalekreis.de
Targets from prev attack(0):
Dismissed Targets(11): misp.bka.de, fms.verwalt-berlin.de, webapp.bundespolizei.de, www.bundespolizei.de, www.bka.de, webmail.bundespolizei.de, u-entrance.bka.de, www.karriere.bka.de, skid.bka.de, bewerbung.bka.de, bewerbung-prep.bka.de
New Targets(23): analytics.tkmsgroup.com, frontend-api.sbahn-hannover.de, www.kreis-oh.de, testfreight.ttline.com, www.taz.de, minio.pamyra.de, www.funkemedien.de, www.vms.de, www.kvg-kiel.de, www.ttline.com, www.vg-arendsee-kalbe.de, www.burda.com, www.sbahn-hannover.de, shop.taz.de, mailing.cicero.de, www.vergabe24.de, mailing.gruene-hessen.de, portal.taz.de, epaper.taz.de, anhoerung.kiel.de, www.erfurt.de, www.nasa.de, www.saalekreis.de
Targets from prev attack(0):
Dismissed Targets(11): misp.bka.de, fms.verwalt-berlin.de, webapp.bundespolizei.de, www.bundespolizei.de, www.bka.de, webmail.bundespolizei.de, u-entrance.bka.de, www.karriere.bka.de, skid.bka.de, bewerbung.bka.de, bewerbung-prep.bka.de
2026-08-14_12-20-07 check-hosts status
The attacks by noname057 primarily target German government websites, specifically those associated with the Bundespolizei (Federal Police) and the BKA (Federal Criminal Police Office). The main focus is on various platforms related to job applications and administrative functions within these agencies. This indicates a concentrated effort against Germany's cybersecurity infrastructure.AI generated11 targets are under attack, 0 new targets and 11 targets from previous attack
New Targets(0):
Targets from prev attack(11): webapp.bundespolizei.de, fms.verwalt-berlin.de, skid.bka.de, bewerbung-prep.bka.de, misp.bka.de, u-entrance.bka.de, www.karriere.bka.de, www.bundespolizei.de, bewerbung.bka.de, www.bka.de, webmail.bundespolizei.de
Dismissed Targets(7): www.eswe-versorgung.de, portal.menzelldoehle.de, fernwaerme.eswe-versorgung.de, helpdesk.menzelldoehle.de, www.menzelldoehle.de, zaehler.eswe-versorgung.de, kundenportal.eswe.com
New Targets(0):
Targets from prev attack(11): webapp.bundespolizei.de, fms.verwalt-berlin.de, skid.bka.de, bewerbung-prep.bka.de, misp.bka.de, u-entrance.bka.de, www.karriere.bka.de, www.bundespolizei.de, bewerbung.bka.de, www.bka.de, webmail.bundespolizei.de
Dismissed Targets(7): www.eswe-versorgung.de, portal.menzelldoehle.de, fernwaerme.eswe-versorgung.de, helpdesk.menzelldoehle.de, www.menzelldoehle.de, zaehler.eswe-versorgung.de, kundenportal.eswe.com
2026-08-14_12-16-07 check-hosts status
The sites attacked by noname057 predominantly target Germany, with a focus on various governmental and utility services. Key sectors under attack include law enforcement, public administration, and energy supply, highlighting a significant threat to critical infrastructure in the country.AI generated18 targets are under attack, 2 new targets and 16 targets from previous attack
New Targets(2): webapp.bundespolizei.de, webmail.bundespolizei.de
Targets from prev attack(16): www.eswe-versorgung.de, fms.verwalt-berlin.de, skid.bka.de, bewerbung-prep.bka.de, misp.bka.de, fernwaerme.eswe-versorgung.de, portal.menzelldoehle.de, u-entrance.bka.de, www.karriere.bka.de, www.bundespolizei.de, helpdesk.menzelldoehle.de, bewerbung.bka.de, www.bka.de, www.menzelldoehle.de, zaehler.eswe-versorgung.de, kundenportal.eswe.com
Dismissed Targets(14): www.trans-bavaria.com, www.afs-bund.de, www.dietrich-logistic.com, shop.eswe.com, dship-carriers.com, matomo.dietrich-logistic.com, www.lfst.bayern.de, sso.toll-collect.de, www.evergabe.de, archiv.dietrich-logistic.com, www.toll-collect.de, webportal.trans-bavaria.com, www.evergabe-online.de, www.tma-bulk.eu
New Targets(2): webapp.bundespolizei.de, webmail.bundespolizei.de
Targets from prev attack(16): www.eswe-versorgung.de, fms.verwalt-berlin.de, skid.bka.de, bewerbung-prep.bka.de, misp.bka.de, fernwaerme.eswe-versorgung.de, portal.menzelldoehle.de, u-entrance.bka.de, www.karriere.bka.de, www.bundespolizei.de, helpdesk.menzelldoehle.de, bewerbung.bka.de, www.bka.de, www.menzelldoehle.de, zaehler.eswe-versorgung.de, kundenportal.eswe.com
Dismissed Targets(14): www.trans-bavaria.com, www.afs-bund.de, www.dietrich-logistic.com, shop.eswe.com, dship-carriers.com, matomo.dietrich-logistic.com, www.lfst.bayern.de, sso.toll-collect.de, www.evergabe.de, archiv.dietrich-logistic.com, www.toll-collect.de, webportal.trans-bavaria.com, www.evergabe-online.de, www.tma-bulk.eu
2026-08-14_12-10-11 check-hosts status
The attacks attributed to noname057 primarily target websites in Germany. Key sectors affected include government agencies, utilities, and logistics. Notable sites under attack include those associated with the German Federal Criminal Police Office (BKA), various municipal utilities, and logistics companies. The majority of the impacted domains are hosted within Germany, indicating a concentrated focus on this region.AI generated30 targets are under attack, 2 new targets and 28 targets from previous attack
New Targets(2): fms.verwalt-berlin.de, www.bundespolizei.de
Targets from prev attack(28): www.menzelldoehle.de, skid.bka.de, www.evergabe-online.de, bewerbung-prep.bka.de, www.tma-bulk.eu, u-entrance.bka.de, www.evergabe.de, misp.bka.de, www.lfst.bayern.de, portal.menzelldoehle.de, www.eswe-versorgung.de, archiv.dietrich-logistic.com, sso.toll-collect.de, shop.eswe.com, matomo.dietrich-logistic.com, zaehler.eswe-versorgung.de, www.dietrich-logistic.com, fernwaerme.eswe-versorgung.de, webportal.trans-bavaria.com, dship-carriers.com, www.trans-bavaria.com, www.karriere.bka.de, www.bka.de, www.toll-collect.de, kundenportal.eswe.com, bewerbung.bka.de, helpdesk.menzelldoehle.de, www.afs-bund.de
Dismissed Targets(0):
New Targets(2): fms.verwalt-berlin.de, www.bundespolizei.de
Targets from prev attack(28): www.menzelldoehle.de, skid.bka.de, www.evergabe-online.de, bewerbung-prep.bka.de, www.tma-bulk.eu, u-entrance.bka.de, www.evergabe.de, misp.bka.de, www.lfst.bayern.de, portal.menzelldoehle.de, www.eswe-versorgung.de, archiv.dietrich-logistic.com, sso.toll-collect.de, shop.eswe.com, matomo.dietrich-logistic.com, zaehler.eswe-versorgung.de, www.dietrich-logistic.com, fernwaerme.eswe-versorgung.de, webportal.trans-bavaria.com, dship-carriers.com, www.trans-bavaria.com, www.karriere.bka.de, www.bka.de, www.toll-collect.de, kundenportal.eswe.com, bewerbung.bka.de, helpdesk.menzelldoehle.de, www.afs-bund.de
Dismissed Targets(0):
2026-08-14_12-04-08 check-hosts status
The attacks attributed to noname057 primarily target websites in Germany, with a focus on governmental and logistics sectors. Key sites include various domains related to the German Federal Criminal Police Office (BKA) and local service providers, indicating a concentrated effort against German infrastructure and public services.AI generated28 targets are under attack, 7 new targets and 21 targets from previous attack
New Targets(7): skid.bka.de, www.karriere.bka.de, www.bka.de, bewerbung-prep.bka.de, bewerbung.bka.de, u-entrance.bka.de, misp.bka.de
Targets from prev attack(21): www.menzelldoehle.de, www.evergabe-online.de, www.tma-bulk.eu, www.evergabe.de, www.lfst.bayern.de, portal.menzelldoehle.de, www.eswe-versorgung.de, archiv.dietrich-logistic.com, sso.toll-collect.de, shop.eswe.com, matomo.dietrich-logistic.com, www.dietrich-logistic.com, zaehler.eswe-versorgung.de, fernwaerme.eswe-versorgung.de, webportal.trans-bavaria.com, dship-carriers.com, www.trans-bavaria.com, www.toll-collect.de, kundenportal.eswe.com, helpdesk.menzelldoehle.de, www.afs-bund.de
Dismissed Targets(0):
New Targets(7): skid.bka.de, www.karriere.bka.de, www.bka.de, bewerbung-prep.bka.de, bewerbung.bka.de, u-entrance.bka.de, misp.bka.de
Targets from prev attack(21): www.menzelldoehle.de, www.evergabe-online.de, www.tma-bulk.eu, www.evergabe.de, www.lfst.bayern.de, portal.menzelldoehle.de, www.eswe-versorgung.de, archiv.dietrich-logistic.com, sso.toll-collect.de, shop.eswe.com, matomo.dietrich-logistic.com, www.dietrich-logistic.com, zaehler.eswe-versorgung.de, fernwaerme.eswe-versorgung.de, webportal.trans-bavaria.com, dship-carriers.com, www.trans-bavaria.com, www.toll-collect.de, kundenportal.eswe.com, helpdesk.menzelldoehle.de, www.afs-bund.de
Dismissed Targets(0):
2026-08-14_08-02-32 check-hosts status
The attacks attributed to noname057 primarily target Germany, as evidenced by the majority of the compromised sites being associated with German companies and services. Key sectors affected include logistics, utilities, and public services, highlighting a focus on critical infrastructure and operational platforms within the country.AI generated21 targets are under attack, 21 new targets and 0 targets from previous attack
New Targets(21): webportal.trans-bavaria.com, matomo.dietrich-logistic.com, www.eswe-versorgung.de, fernwaerme.eswe-versorgung.de, shop.eswe.com, sso.toll-collect.de, www.menzelldoehle.de, www.afs-bund.de, www.dietrich-logistic.com, zaehler.eswe-versorgung.de, www.toll-collect.de, portal.menzelldoehle.de, www.lfst.bayern.de, www.tma-bulk.eu, kundenportal.eswe.com, helpdesk.menzelldoehle.de, www.evergabe.de, www.trans-bavaria.com, dship-carriers.com, archiv.dietrich-logistic.com, www.evergabe-online.de
Targets from prev attack(0):
Dismissed Targets(26): matomo.maritimes-cluster.de, etracking.karlgross.de, mdm.intern.rmv.de, mysites.rmv.de, geo.rmv.de, citrix.seifert-logistics.com, www.rmv.de, www.karlgross.de, gts.rmv.de, mailing.gruene-hessen.de, www.gruene-hessen.de, remote.frachtcontor.de, einnahmen.rmv.de, avb.rmv.de, www.frachtcontor.de, login.kvg-kiel.de, www.pwl.de, colorline.de, www.maritimes-cluster.de, portal.rmv.de, tarif-vertrieb.rmv.de, ivu.kvg-kiel.de, seifert-logistics.com, membership-application.maritimes-cluster.de, www.kvg-kiel.de, bf-backend.rmv.de
New Targets(21): webportal.trans-bavaria.com, matomo.dietrich-logistic.com, www.eswe-versorgung.de, fernwaerme.eswe-versorgung.de, shop.eswe.com, sso.toll-collect.de, www.menzelldoehle.de, www.afs-bund.de, www.dietrich-logistic.com, zaehler.eswe-versorgung.de, www.toll-collect.de, portal.menzelldoehle.de, www.lfst.bayern.de, www.tma-bulk.eu, kundenportal.eswe.com, helpdesk.menzelldoehle.de, www.evergabe.de, www.trans-bavaria.com, dship-carriers.com, archiv.dietrich-logistic.com, www.evergabe-online.de
Targets from prev attack(0):
Dismissed Targets(26): matomo.maritimes-cluster.de, etracking.karlgross.de, mdm.intern.rmv.de, mysites.rmv.de, geo.rmv.de, citrix.seifert-logistics.com, www.rmv.de, www.karlgross.de, gts.rmv.de, mailing.gruene-hessen.de, www.gruene-hessen.de, remote.frachtcontor.de, einnahmen.rmv.de, avb.rmv.de, www.frachtcontor.de, login.kvg-kiel.de, www.pwl.de, colorline.de, www.maritimes-cluster.de, portal.rmv.de, tarif-vertrieb.rmv.de, ivu.kvg-kiel.de, seifert-logistics.com, membership-application.maritimes-cluster.de, www.kvg-kiel.de, bf-backend.rmv.de
2026-08-13_12-04-09 check-hosts status
The attacks attributed to noname057 primarily target websites in Germany. Key sectors affected include logistics, public transport, and environmental organizations, with numerous sites linked to the RMV (Rhein-Main-Verkehrsverbund) public transport authority and various maritime and logistics companies.AI generated26 targets are under attack, 8 new targets and 18 targets from previous attack
New Targets(8): mailing.gruene-hessen.de, remote.frachtcontor.de, www.frachtcontor.de, www.gruene-hessen.de, ivu.kvg-kiel.de, login.kvg-kiel.de, www.pwl.de, www.kvg-kiel.de
Targets from prev attack(18): seifert-logistics.com, portal.rmv.de, www.karlgross.de, membership-application.maritimes-cluster.de, mdm.intern.rmv.de, avb.rmv.de, bf-backend.rmv.de, mysites.rmv.de, www.rmv.de, citrix.seifert-logistics.com, tarif-vertrieb.rmv.de, matomo.maritimes-cluster.de, einnahmen.rmv.de, geo.rmv.de, colorline.de, gts.rmv.de, etracking.karlgross.de, www.maritimes-cluster.de
Dismissed Targets(0):
New Targets(8): mailing.gruene-hessen.de, remote.frachtcontor.de, www.frachtcontor.de, www.gruene-hessen.de, ivu.kvg-kiel.de, login.kvg-kiel.de, www.pwl.de, www.kvg-kiel.de
Targets from prev attack(18): seifert-logistics.com, portal.rmv.de, www.karlgross.de, membership-application.maritimes-cluster.de, mdm.intern.rmv.de, avb.rmv.de, bf-backend.rmv.de, mysites.rmv.de, www.rmv.de, citrix.seifert-logistics.com, tarif-vertrieb.rmv.de, matomo.maritimes-cluster.de, einnahmen.rmv.de, geo.rmv.de, colorline.de, gts.rmv.de, etracking.karlgross.de, www.maritimes-cluster.de
Dismissed Targets(0):
2026-08-13_08-04-08 check-hosts status
The attacks attributed to noname057 primarily target websites in Germany, particularly those associated with the RMV (Rhein-Main-Verkehrsverbund) and logistics sectors. Key sites affected include tarif-vertrieb.rmv.de and portal.rmv.de, along with various other RMV-related domains. Additionally, the attacks extend to the maritime and logistics industries, with sites like colorline.de and seifert-logistics.com being compromised. Overall, Germany is the main country under attack, with a focus on transportation and logistics services.AI generated18 targets are under attack, 18 new targets and 0 targets from previous attack
New Targets(18): tarif-vertrieb.rmv.de, mysites.rmv.de, gts.rmv.de, portal.rmv.de, einnahmen.rmv.de, colorline.de, citrix.seifert-logistics.com, matomo.maritimes-cluster.de, avb.rmv.de, membership-application.maritimes-cluster.de, geo.rmv.de, www.rmv.de, www.maritimes-cluster.de, seifert-logistics.com, etracking.karlgross.de, bf-backend.rmv.de, www.karlgross.de, mdm.intern.rmv.de
Targets from prev attack(0):
Dismissed Targets(30): stadtbuecherei.kiel.de, bestellen.glasfaser.swhl.de, stage.stadtwerke-kiel.de, auth.portofkiel.com, lhk-intranet.kiel.de, login.thyssenkrupp.com, start-ni-mitte.de, agios.portofkiel.com, kiel.de, www.limanisupply.com, piwi.wiesbaden.de, analytics.portofkiel.com, bond.wiesbaden.de, pasis.portofkiel.com, esmz.portofkiel.com, www.nah.sh, minio.pamyra.de, anmeldung.mdv-verbundgebiet.de, analytics.tkmsgroup.com, www.tkmsgroup.com, anhoerung.kiel.de, testfreight.ttline.com, online-knoellchen.kiel.de, www.ttline.com, www.portofkiel.com, zugang2.wiesbaden.de, wohnungswirtschaft.wiesbaden.de, login-netzplan.swhl.de, dtms.wiesbaden.de, stellenangebote.swhl.de
New Targets(18): tarif-vertrieb.rmv.de, mysites.rmv.de, gts.rmv.de, portal.rmv.de, einnahmen.rmv.de, colorline.de, citrix.seifert-logistics.com, matomo.maritimes-cluster.de, avb.rmv.de, membership-application.maritimes-cluster.de, geo.rmv.de, www.rmv.de, www.maritimes-cluster.de, seifert-logistics.com, etracking.karlgross.de, bf-backend.rmv.de, www.karlgross.de, mdm.intern.rmv.de
Targets from prev attack(0):
Dismissed Targets(30): stadtbuecherei.kiel.de, bestellen.glasfaser.swhl.de, stage.stadtwerke-kiel.de, auth.portofkiel.com, lhk-intranet.kiel.de, login.thyssenkrupp.com, start-ni-mitte.de, agios.portofkiel.com, kiel.de, www.limanisupply.com, piwi.wiesbaden.de, analytics.portofkiel.com, bond.wiesbaden.de, pasis.portofkiel.com, esmz.portofkiel.com, www.nah.sh, minio.pamyra.de, anmeldung.mdv-verbundgebiet.de, analytics.tkmsgroup.com, www.tkmsgroup.com, anhoerung.kiel.de, testfreight.ttline.com, online-knoellchen.kiel.de, www.ttline.com, www.portofkiel.com, zugang2.wiesbaden.de, wohnungswirtschaft.wiesbaden.de, login-netzplan.swhl.de, dtms.wiesbaden.de, stellenangebote.swhl.de
2026-08-12_12-06-36 check-hosts status
The attacks by noname057(16) primarily targeted websites in Germany, specifically affecting cities such as Kiel and Wiesbaden. Key sectors impacted include transportation, public services, and local government, with multiple sites associated with port operations and municipal services being compromised.AI generated30 targets are under attack, 12 new targets and 18 targets from previous attack
New Targets(12): stellenangebote.swhl.de, piwi.wiesbaden.de, login-netzplan.swhl.de, wohnungswirtschaft.wiesbaden.de, www.ttline.com, zugang2.wiesbaden.de, anmeldung.mdv-verbundgebiet.de, dtms.wiesbaden.de, start-ni-mitte.de, testfreight.ttline.com, bestellen.glasfaser.swhl.de, bond.wiesbaden.de
Targets from prev attack(18): esmz.portofkiel.com, agios.portofkiel.com, www.portofkiel.com, login.thyssenkrupp.com, analytics.tkmsgroup.com, online-knoellchen.kiel.de, pasis.portofkiel.com, minio.pamyra.de, www.nah.sh, kiel.de, stadtbuecherei.kiel.de, analytics.portofkiel.com, auth.portofkiel.com, stage.stadtwerke-kiel.de, www.tkmsgroup.com, www.limanisupply.com, anhoerung.kiel.de, lhk-intranet.kiel.de
Dismissed Targets(0):
New Targets(12): stellenangebote.swhl.de, piwi.wiesbaden.de, login-netzplan.swhl.de, wohnungswirtschaft.wiesbaden.de, www.ttline.com, zugang2.wiesbaden.de, anmeldung.mdv-verbundgebiet.de, dtms.wiesbaden.de, start-ni-mitte.de, testfreight.ttline.com, bestellen.glasfaser.swhl.de, bond.wiesbaden.de
Targets from prev attack(18): esmz.portofkiel.com, agios.portofkiel.com, www.portofkiel.com, login.thyssenkrupp.com, analytics.tkmsgroup.com, online-knoellchen.kiel.de, pasis.portofkiel.com, minio.pamyra.de, www.nah.sh, kiel.de, stadtbuecherei.kiel.de, analytics.portofkiel.com, auth.portofkiel.com, stage.stadtwerke-kiel.de, www.tkmsgroup.com, www.limanisupply.com, anhoerung.kiel.de, lhk-intranet.kiel.de
Dismissed Targets(0):
2026-08-12_08-08-07 check-hosts status
The attacks attributed to noname057 primarily targeted websites in Germany, particularly in Kiel and related to local institutions and companies. Key sites included those of Thyssenkrupp and various local government and library services, indicating a focus on both corporate and public sector entities within the region.AI generated18 targets are under attack, 18 new targets and 0 targets from previous attack
New Targets(18): www.nah.sh, login.thyssenkrupp.com, www.tkmsgroup.com, stadtbuecherei.kiel.de, agios.portofkiel.com, kiel.de, pasis.portofkiel.com, analytics.tkmsgroup.com, online-knoellchen.kiel.de, auth.portofkiel.com, minio.pamyra.de, www.portofkiel.com, www.limanisupply.com, analytics.portofkiel.com, anhoerung.kiel.de, stage.stadtwerke-kiel.de, lhk-intranet.kiel.de, esmz.portofkiel.com
Targets from prev attack(0):
Dismissed Targets(26): www.golem.de, epaper.taz.de, gruppenkonto.spiegel.de, staging.cicero.de, blogs.taz.de, shop.heise.de, konto.apotheken-umschau.de, www.taz.de, www.inhalt.apotheken-umschau.de, www.spiegel.de, www.cicero.de, epaper.cicero.de, www.thelocal.de, www.bundesanzeiger.de, mailing.cicero.de, www.bavarikon.de, www.funkemedien.de, shop.11freunde.de, www.apotheken-umschau.de, api-account.golem.de, shop.taz.de, www.abendzeitung-muenchen.de, www.burda.com, www.11freunde.de, portal.taz.de, www.heise.de
New Targets(18): www.nah.sh, login.thyssenkrupp.com, www.tkmsgroup.com, stadtbuecherei.kiel.de, agios.portofkiel.com, kiel.de, pasis.portofkiel.com, analytics.tkmsgroup.com, online-knoellchen.kiel.de, auth.portofkiel.com, minio.pamyra.de, www.portofkiel.com, www.limanisupply.com, analytics.portofkiel.com, anhoerung.kiel.de, stage.stadtwerke-kiel.de, lhk-intranet.kiel.de, esmz.portofkiel.com
Targets from prev attack(0):
Dismissed Targets(26): www.golem.de, epaper.taz.de, gruppenkonto.spiegel.de, staging.cicero.de, blogs.taz.de, shop.heise.de, konto.apotheken-umschau.de, www.taz.de, www.inhalt.apotheken-umschau.de, www.spiegel.de, www.cicero.de, epaper.cicero.de, www.thelocal.de, www.bundesanzeiger.de, mailing.cicero.de, www.bavarikon.de, www.funkemedien.de, shop.11freunde.de, www.apotheken-umschau.de, api-account.golem.de, shop.taz.de, www.abendzeitung-muenchen.de, www.burda.com, www.11freunde.de, portal.taz.de, www.heise.de
2026-08-11_12-04-15 check-hosts status
The attacks attributed to noname057 primarily target websites based in Germany. Key sectors affected include media, publishing, and online services, with notable examples being major news outlets like Spiegel, Cicero, and Taz, as well as various cultural and commercial platforms.AI generated26 targets are under attack, 8 new targets and 18 targets from previous attack
New Targets(8): www.cicero.de, api-account.golem.de, epaper.cicero.de, mailing.cicero.de, staging.cicero.de, www.golem.de, shop.11freunde.de, www.11freunde.de
Targets from prev attack(18): gruppenkonto.spiegel.de, www.heise.de, epaper.taz.de, www.burda.com, www.abendzeitung-muenchen.de, www.bundesanzeiger.de, www.thelocal.de, www.inhalt.apotheken-umschau.de, blogs.taz.de, www.spiegel.de, konto.apotheken-umschau.de, www.taz.de, portal.taz.de, shop.heise.de, shop.taz.de, www.bavarikon.de, www.apotheken-umschau.de, www.funkemedien.de
Dismissed Targets(0):
New Targets(8): www.cicero.de, api-account.golem.de, epaper.cicero.de, mailing.cicero.de, staging.cicero.de, www.golem.de, shop.11freunde.de, www.11freunde.de
Targets from prev attack(18): gruppenkonto.spiegel.de, www.heise.de, epaper.taz.de, www.burda.com, www.abendzeitung-muenchen.de, www.bundesanzeiger.de, www.thelocal.de, www.inhalt.apotheken-umschau.de, blogs.taz.de, www.spiegel.de, konto.apotheken-umschau.de, www.taz.de, portal.taz.de, shop.heise.de, shop.taz.de, www.bavarikon.de, www.apotheken-umschau.de, www.funkemedien.de
Dismissed Targets(0):
2026-08-11_08-04-07 check-hosts status
The attacks attributed to noname057 primarily target German websites. Key affected sites include major news outlets and online platforms such as Spiegel, TAZ, and Heise. The attacks indicate a concentrated effort against Germany's digital infrastructure.AI generated18 targets are under attack, 18 new targets and 0 targets from previous attack
New Targets(18): www.thelocal.de, www.spiegel.de, epaper.taz.de, www.bavarikon.de, shop.heise.de, www.abendzeitung-muenchen.de, shop.taz.de, www.apotheken-umschau.de, www.funkemedien.de, blogs.taz.de, www.burda.com, portal.taz.de, www.inhalt.apotheken-umschau.de, konto.apotheken-umschau.de, www.taz.de, gruppenkonto.spiegel.de, www.bundesanzeiger.de, www.heise.de
Targets from prev attack(0):
Dismissed Targets(24): www.vms.de, beteiligungsportal.hessen.de, www.gladbeck.de, www.saalekreis.de, www.evergabe.nrw.de, auftraege.bayern.de, www.l.de, www.bvl.de, www.vg-arendsee-kalbe.de, www.vergabe24.de, www.erfurt.de, frontend-api.sbahn-hannover.de, www.sbahn-hannover.de, www.nasa.de, www.saarvv.de, www.boersenag.de, support.cosinex.de, www.quotrix.de, www.boerse-duesseldorf.de, www.kreis-oh.de, stiftung-moritzburg.de, www.evergabe-mv.de, www.elster.de, www.bkms-system.net
New Targets(18): www.thelocal.de, www.spiegel.de, epaper.taz.de, www.bavarikon.de, shop.heise.de, www.abendzeitung-muenchen.de, shop.taz.de, www.apotheken-umschau.de, www.funkemedien.de, blogs.taz.de, www.burda.com, portal.taz.de, www.inhalt.apotheken-umschau.de, konto.apotheken-umschau.de, www.taz.de, gruppenkonto.spiegel.de, www.bundesanzeiger.de, www.heise.de
Targets from prev attack(0):
Dismissed Targets(24): www.vms.de, beteiligungsportal.hessen.de, www.gladbeck.de, www.saalekreis.de, www.evergabe.nrw.de, auftraege.bayern.de, www.l.de, www.bvl.de, www.vg-arendsee-kalbe.de, www.vergabe24.de, www.erfurt.de, frontend-api.sbahn-hannover.de, www.sbahn-hannover.de, www.nasa.de, www.saarvv.de, www.boersenag.de, support.cosinex.de, www.quotrix.de, www.boerse-duesseldorf.de, www.kreis-oh.de, stiftung-moritzburg.de, www.evergabe-mv.de, www.elster.de, www.bkms-system.net
2026-08-10_12-08-07 check-hosts status
The attacks attributed to noname057 primarily target websites in Germany, with a focus on various sectors including public transportation, procurement, and local government services. Key affected countries include Germany, as evidenced by the numerous German domains involved in the attacks.AI generated24 targets are under attack, 8 new targets and 16 targets from previous attack
New Targets(8): auftraege.bayern.de, www.boerse-duesseldorf.de, www.quotrix.de, www.evergabe.nrw.de, www.boersenag.de, www.vergabe24.de, www.saalekreis.de, beteiligungsportal.hessen.de
Targets from prev attack(16): frontend-api.sbahn-hannover.de, www.l.de, www.vms.de, www.erfurt.de, www.kreis-oh.de, www.gladbeck.de, www.nasa.de, support.cosinex.de, www.bkms-system.net, www.sbahn-hannover.de, www.vg-arendsee-kalbe.de, stiftung-moritzburg.de, www.saarvv.de, www.evergabe-mv.de, www.elster.de, www.bvl.de
Dismissed Targets(0):
New Targets(8): auftraege.bayern.de, www.boerse-duesseldorf.de, www.quotrix.de, www.evergabe.nrw.de, www.boersenag.de, www.vergabe24.de, www.saalekreis.de, beteiligungsportal.hessen.de
Targets from prev attack(16): frontend-api.sbahn-hannover.de, www.l.de, www.vms.de, www.erfurt.de, www.kreis-oh.de, www.gladbeck.de, www.nasa.de, support.cosinex.de, www.bkms-system.net, www.sbahn-hannover.de, www.vg-arendsee-kalbe.de, stiftung-moritzburg.de, www.saarvv.de, www.evergabe-mv.de, www.elster.de, www.bvl.de
Dismissed Targets(0):
2026-08-10_08-04-08 check-hosts status
The attacks attributed to noname057(16) primarily targeted websites in Germany, affecting various sectors including transportation, local government, and public services. Notable sites include those related to public transport in Hannover and Saarland, as well as local government portals in cities like Erfurt and Gladbeck. The attacks highlight a focus on regional infrastructure and public service platforms within Germany.AI generated16 targets are under attack, 0 new targets and 16 targets from previous attack
New Targets(0):
Targets from prev attack(16): www.vg-arendsee-kalbe.de, www.elster.de, stiftung-moritzburg.de, www.erfurt.de, www.gladbeck.de, www.bkms-system.net, www.vms.de, www.sbahn-hannover.de, support.cosinex.de, www.bvl.de, www.evergabe-mv.de, www.l.de, www.nasa.de, frontend-api.sbahn-hannover.de, www.saarvv.de, www.kreis-oh.de
Dismissed Targets(1): cpanel.sigmashipping.ro
New Targets(0):
Targets from prev attack(16): www.vg-arendsee-kalbe.de, www.elster.de, stiftung-moritzburg.de, www.erfurt.de, www.gladbeck.de, www.bkms-system.net, www.vms.de, www.sbahn-hannover.de, support.cosinex.de, www.bvl.de, www.evergabe-mv.de, www.l.de, www.nasa.de, frontend-api.sbahn-hannover.de, www.saarvv.de, www.kreis-oh.de
Dismissed Targets(1): cpanel.sigmashipping.ro
2026-08-10_08-02-17 check-hosts status
The attacks by noname057 primarily targeted websites in Germany, including various local government and transportation services. Notable sites affected include www.vg-arendsee-kalbe.de, www.elster.de, and www.saarvv.de, indicating a focus on regional infrastructure. Other sites like www.nasa.de suggest a broader interest in high-profile organizations. Overall, the attacks highlight a significant threat to German digital assets.AI generated17 targets are under attack, 16 new targets and 1 targets from previous attack
New Targets(16): www.vg-arendsee-kalbe.de, www.elster.de, stiftung-moritzburg.de, www.erfurt.de, www.gladbeck.de, www.bkms-system.net, www.vms.de, www.sbahn-hannover.de, support.cosinex.de, www.bvl.de, www.evergabe-mv.de, www.l.de, www.nasa.de, frontend-api.sbahn-hannover.de, www.saarvv.de, www.kreis-oh.de
Targets from prev attack(1): cpanel.sigmashipping.ro
Dismissed Targets(15): www.cnctech.ro, cpanel.cnctech.ro, webmail.cnctech.ro, phpma.infotrans.vesttransrail.ro, euroccoper.ro, webmail.euroccoper.ro, mail.hercules-braila.ro, cpanel.stelcoro.ro, vesttransrail.ro, www.europafm.ro, mail.vesttransrail.ro, www.hercules-braila.ro, histria.ro, cpanel.euroccoper.ro, sigmashipping.ro
New Targets(16): www.vg-arendsee-kalbe.de, www.elster.de, stiftung-moritzburg.de, www.erfurt.de, www.gladbeck.de, www.bkms-system.net, www.vms.de, www.sbahn-hannover.de, support.cosinex.de, www.bvl.de, www.evergabe-mv.de, www.l.de, www.nasa.de, frontend-api.sbahn-hannover.de, www.saarvv.de, www.kreis-oh.de
Targets from prev attack(1): cpanel.sigmashipping.ro
Dismissed Targets(15): www.cnctech.ro, cpanel.cnctech.ro, webmail.cnctech.ro, phpma.infotrans.vesttransrail.ro, euroccoper.ro, webmail.euroccoper.ro, mail.hercules-braila.ro, cpanel.stelcoro.ro, vesttransrail.ro, www.europafm.ro, mail.vesttransrail.ro, www.hercules-braila.ro, histria.ro, cpanel.euroccoper.ro, sigmashipping.ro
2026-08-09_08-08-09 check-hosts status
The attacks attributed to noname057 primarily target Romania, with several sites related to webmail and cPanel services being compromised. Key sectors affected include shipping, media, and transportation, highlighting vulnerabilities in the country's digital infrastructure.AI generated16 targets are under attack, 16 new targets and 0 targets from previous attack
New Targets(16): webmail.euroccoper.ro, cpanel.sigmashipping.ro, webmail.cnctech.ro, euroccoper.ro, www.europafm.ro, cpanel.cnctech.ro, www.cnctech.ro, sigmashipping.ro, histria.ro, mail.vesttransrail.ro, cpanel.euroccoper.ro, www.hercules-braila.ro, cpanel.stelcoro.ro, vesttransrail.ro, phpma.infotrans.vesttransrail.ro, mail.hercules-braila.ro
Targets from prev attack(0):
Dismissed Targets(17): rajac.ro, polaris.ro, customs.ro, www.electroputere.ro, efactura.rajac.ro, mail.acn.ro, www.navlomar.com, bilete.cfrcalatori.ro, cfrmarfa.com, siveco.ro, www.uniuneanotarilor.ro, termoficare-constanta.ro, legislatie.just.ro, www.gecad.com, apdmgalati.ro, www.bpi.ro, avize.rajac.ro
New Targets(16): webmail.euroccoper.ro, cpanel.sigmashipping.ro, webmail.cnctech.ro, euroccoper.ro, www.europafm.ro, cpanel.cnctech.ro, www.cnctech.ro, sigmashipping.ro, histria.ro, mail.vesttransrail.ro, cpanel.euroccoper.ro, www.hercules-braila.ro, cpanel.stelcoro.ro, vesttransrail.ro, phpma.infotrans.vesttransrail.ro, mail.hercules-braila.ro
Targets from prev attack(0):
Dismissed Targets(17): rajac.ro, polaris.ro, customs.ro, www.electroputere.ro, efactura.rajac.ro, mail.acn.ro, www.navlomar.com, bilete.cfrcalatori.ro, cfrmarfa.com, siveco.ro, www.uniuneanotarilor.ro, termoficare-constanta.ro, legislatie.just.ro, www.gecad.com, apdmgalati.ro, www.bpi.ro, avize.rajac.ro
2026-08-08_08-08-09 check-hosts status
Noname057(16) has targeted various websites primarily in Romania. The attacked sites include those related to utilities, transportation, and government services, indicating a focus on critical infrastructure and public services within the country.AI generated17 targets are under attack, 0 new targets and 17 targets from previous attack
New Targets(0):
Targets from prev attack(17): www.electroputere.ro, rajac.ro, mail.acn.ro, www.navlomar.com, www.gecad.com, siveco.ro, www.bpi.ro, polaris.ro, customs.ro, cfrmarfa.com, apdmgalati.ro, efactura.rajac.ro, legislatie.just.ro, avize.rajac.ro, www.uniuneanotarilor.ro, bilete.cfrcalatori.ro, termoficare-constanta.ro
Dismissed Targets(12): cpcontacts.rangetrans.ro, cpanel.mgmmarine.ro, mail.mgmmarine.ro, webdisk.mgmmarine.ro, orcashipping.ro, www.mgmmarine.ro, cpcalendars.rangetrans.ro, cpanel.rangetrans.ro, rangetrans.ro, webmail.mgmmarine.ro, webmail.rangetrans.ro, cpcontacts.mgmmarine.ro
New Targets(0):
Targets from prev attack(17): www.electroputere.ro, rajac.ro, mail.acn.ro, www.navlomar.com, www.gecad.com, siveco.ro, www.bpi.ro, polaris.ro, customs.ro, cfrmarfa.com, apdmgalati.ro, efactura.rajac.ro, legislatie.just.ro, avize.rajac.ro, www.uniuneanotarilor.ro, bilete.cfrcalatori.ro, termoficare-constanta.ro
Dismissed Targets(12): cpcontacts.rangetrans.ro, cpanel.mgmmarine.ro, mail.mgmmarine.ro, webdisk.mgmmarine.ro, orcashipping.ro, www.mgmmarine.ro, cpcalendars.rangetrans.ro, cpanel.rangetrans.ro, rangetrans.ro, webmail.mgmmarine.ro, webmail.rangetrans.ro, cpcontacts.mgmmarine.ro
2026-08-08_08-04-07 check-hosts status
The attacks attributed to noname057 primarily target websites in Romania. Key sectors affected include local government, transportation, and various industries, indicating a focus on infrastructure and public services. The range of attacked sites includes educational institutions, shipping companies, and utilities, highlighting the diverse nature of the targets within the country.AI generated29 targets are under attack, 4 new targets and 25 targets from previous attack
New Targets(4): cpcontacts.rangetrans.ro, rangetrans.ro, cpcalendars.rangetrans.ro, cpanel.rangetrans.ro
Targets from prev attack(25): rajac.ro, apdmgalati.ro, legislatie.just.ro, webmail.rangetrans.ro, www.uniuneanotarilor.ro, cpcontacts.mgmmarine.ro, termoficare-constanta.ro, mail.acn.ro, www.navlomar.com, www.gecad.com, www.bpi.ro, orcashipping.ro, www.mgmmarine.ro, cfrmarfa.com, www.electroputere.ro, cpanel.mgmmarine.ro, siveco.ro, polaris.ro, customs.ro, webmail.mgmmarine.ro, avize.rajac.ro, bilete.cfrcalatori.ro, mail.mgmmarine.ro, webdisk.mgmmarine.ro, efactura.rajac.ro
Dismissed Targets(0):
New Targets(4): cpcontacts.rangetrans.ro, rangetrans.ro, cpcalendars.rangetrans.ro, cpanel.rangetrans.ro
Targets from prev attack(25): rajac.ro, apdmgalati.ro, legislatie.just.ro, webmail.rangetrans.ro, www.uniuneanotarilor.ro, cpcontacts.mgmmarine.ro, termoficare-constanta.ro, mail.acn.ro, www.navlomar.com, www.gecad.com, www.bpi.ro, orcashipping.ro, www.mgmmarine.ro, cfrmarfa.com, www.electroputere.ro, cpanel.mgmmarine.ro, siveco.ro, polaris.ro, customs.ro, webmail.mgmmarine.ro, avize.rajac.ro, bilete.cfrcalatori.ro, mail.mgmmarine.ro, webdisk.mgmmarine.ro, efactura.rajac.ro
Dismissed Targets(0):
2026-08-08_08-02-21 check-hosts status
The attacks attributed to noname057 primarily target websites in Romania. Key sectors affected include utilities, transportation, and legal services, with notable sites such as rajac.ro, legislatie.just.ro, and cfrmarfa.com being compromised. Other targeted entities include marine and shipping companies, indicating a focus on critical infrastructure and commercial operations within the country.AI generated25 targets are under attack, 17 new targets and 8 targets from previous attack
New Targets(17): www.electroputere.ro, rajac.ro, mail.acn.ro, www.navlomar.com, www.gecad.com, siveco.ro, www.bpi.ro, polaris.ro, customs.ro, cfrmarfa.com, apdmgalati.ro, efactura.rajac.ro, legislatie.just.ro, avize.rajac.ro, www.uniuneanotarilor.ro, bilete.cfrcalatori.ro, termoficare-constanta.ro
Targets from prev attack(8): cpanel.mgmmarine.ro, mail.mgmmarine.ro, webdisk.mgmmarine.ro, orcashipping.ro, www.mgmmarine.ro, webmail.mgmmarine.ro, webmail.rangetrans.ro, cpcontacts.mgmmarine.ro
Dismissed Targets(14): cpcontacts.rangetrans.ro, cpcontacts.sigmashipping.ro, cpanel.ameropa.ro, www.ameropa.ro, cpcalendars.ameropa.ro, webmail.sigmashipping.ro, www.romnav.ro, webdisk.sigmashipping.ro, cpcalendars.sigmashipping.ro, www.unicom-group.ro, www.deltanav.ro, cpcalendars.rangetrans.ro, cpanel.rangetrans.ro, rangetrans.ro
New Targets(17): www.electroputere.ro, rajac.ro, mail.acn.ro, www.navlomar.com, www.gecad.com, siveco.ro, www.bpi.ro, polaris.ro, customs.ro, cfrmarfa.com, apdmgalati.ro, efactura.rajac.ro, legislatie.just.ro, avize.rajac.ro, www.uniuneanotarilor.ro, bilete.cfrcalatori.ro, termoficare-constanta.ro
Targets from prev attack(8): cpanel.mgmmarine.ro, mail.mgmmarine.ro, webdisk.mgmmarine.ro, orcashipping.ro, www.mgmmarine.ro, webmail.mgmmarine.ro, webmail.rangetrans.ro, cpcontacts.mgmmarine.ro
Dismissed Targets(14): cpcontacts.rangetrans.ro, cpcontacts.sigmashipping.ro, cpanel.ameropa.ro, www.ameropa.ro, cpcalendars.ameropa.ro, webmail.sigmashipping.ro, www.romnav.ro, webdisk.sigmashipping.ro, cpcalendars.sigmashipping.ro, www.unicom-group.ro, www.deltanav.ro, cpcalendars.rangetrans.ro, cpanel.rangetrans.ro, rangetrans.ro