| # | domain | network | attack type |
|---|
2026-11-07_07-02-06 check-hosts status
The websites attacked by noname057 primarily belong to Germany, with a focus on various sectors including transportation, maritime industries, and local government services. The attacks targeted platforms related to public transportation, maritime clusters, and regional administrative services, indicating a concentrated effort within the German digital infrastructure.AI generated23 targets are under attack, 23 new targets and 0 targets from previous attack
New Targets(23): enaio.eww.de, avb.rmv.de, www.nasa.de, membership-application.maritimes-cluster.de, my.fassmer.de, einnahmen.rmv.de, matomo.maritimes-cluster.de, www.fassmer.de, www.vms.de, www.pwl.de, wohnungswirtschaft.wiesbaden.de, www.saalekreis.de, www.energie.de, www.bvl.de, secshare.fassmer.de, bf-backend.rmv.de, piwi.wiesbaden.de, www.frachtcontor.de, www.karlgross.de, www.rmv.de, gts.rmv.de, www.maritimes-cluster.de, dtms.wiesbaden.de
Targets from prev attack(0):
Dismissed Targets(30): www.authusb.net, www.coruna.gal, www.advens.com, www.turgranada.es, www.interior.gob.es, www.policia.es, www.cni.es, www.tecnove.com, www.ccn-cert.cni.es, www.teldat.com, www.casareal.es, eme-es.com, energia.imdea.org, www.parcan.es, www.tibagroup.com, sede.guardiacivil.gob.es, rns.ccn-cert.cni.es, www.aecarretera.com, www.transportepublico.es, www.navarra.es, administracion.gob.es, www.axians.es, www.tramalacant.es, id.coruna.gal, web.murcia.es, www.poderjudicial.es, login.poderjudicial.es, www.hacienda.gob.es, representantesaduaneros.com, www.gva.es
New Targets(23): enaio.eww.de, avb.rmv.de, www.nasa.de, membership-application.maritimes-cluster.de, my.fassmer.de, einnahmen.rmv.de, matomo.maritimes-cluster.de, www.fassmer.de, www.vms.de, www.pwl.de, wohnungswirtschaft.wiesbaden.de, www.saalekreis.de, www.energie.de, www.bvl.de, secshare.fassmer.de, bf-backend.rmv.de, piwi.wiesbaden.de, www.frachtcontor.de, www.karlgross.de, www.rmv.de, gts.rmv.de, www.maritimes-cluster.de, dtms.wiesbaden.de
Targets from prev attack(0):
Dismissed Targets(30): www.authusb.net, www.coruna.gal, www.advens.com, www.turgranada.es, www.interior.gob.es, www.policia.es, www.cni.es, www.tecnove.com, www.ccn-cert.cni.es, www.teldat.com, www.casareal.es, eme-es.com, energia.imdea.org, www.parcan.es, www.tibagroup.com, sede.guardiacivil.gob.es, rns.ccn-cert.cni.es, www.aecarretera.com, www.transportepublico.es, www.navarra.es, administracion.gob.es, www.axians.es, www.tramalacant.es, id.coruna.gal, web.murcia.es, www.poderjudicial.es, login.poderjudicial.es, www.hacienda.gob.es, representantesaduaneros.com, www.gva.es
2026-11-07_06-04-09 check-hosts status
The recent attacks attributed to the group noname057 have primarily targeted websites in Spain. Key sectors affected include government, law enforcement, and public services, with notable sites such as the Ministry of Interior, Guardia Civil, and various regional government portals being compromised. These attacks highlight a significant focus on Spanish institutions and critical infrastructure.AI generated30 targets are under attack, 0 new targets and 30 targets from previous attack
New Targets(0):
Targets from prev attack(30): www.navarra.es, www.turgranada.es, www.gva.es, www.interior.gob.es, www.policia.es, www.transportepublico.es, www.tramalacant.es, sede.guardiacivil.gob.es, www.casareal.es, www.axians.es, eme-es.com, www.cni.es, id.coruna.gal, www.teldat.com, www.tecnove.com, www.authusb.net, www.ccn-cert.cni.es, www.poderjudicial.es, www.hacienda.gob.es, login.poderjudicial.es, www.parcan.es, representantesaduaneros.com, www.coruna.gal, rns.ccn-cert.cni.es, administracion.gob.es, web.murcia.es, www.advens.com, www.aecarretera.com, www.tibagroup.com, energia.imdea.org
Dismissed Targets(1): metropolitanogranada.es
New Targets(0):
Targets from prev attack(30): www.navarra.es, www.turgranada.es, www.gva.es, www.interior.gob.es, www.policia.es, www.transportepublico.es, www.tramalacant.es, sede.guardiacivil.gob.es, www.casareal.es, www.axians.es, eme-es.com, www.cni.es, id.coruna.gal, www.teldat.com, www.tecnove.com, www.authusb.net, www.ccn-cert.cni.es, www.poderjudicial.es, www.hacienda.gob.es, login.poderjudicial.es, www.parcan.es, representantesaduaneros.com, www.coruna.gal, rns.ccn-cert.cni.es, administracion.gob.es, web.murcia.es, www.advens.com, www.aecarretera.com, www.tibagroup.com, energia.imdea.org
Dismissed Targets(1): metropolitanogranada.es
2026-11-07_04-50-07 check-hosts status
The attacks attributed to noname057 primarily targeted various websites in Spain. Key sectors affected include government, law enforcement, and public services. Notable domains include those of the Spanish judicial system, regional governments, and public transport services. Overall, the attacks highlight a significant focus on Spanish institutions and online services.AI generated31 targets are under attack, 0 new targets and 31 targets from previous attack
New Targets(0):
Targets from prev attack(31): www.aecarretera.com, www.axians.es, www.cni.es, www.navarra.es, www.poderjudicial.es, www.interior.gob.es, sede.guardiacivil.gob.es, www.tramalacant.es, www.turgranada.es, administracion.gob.es, web.murcia.es, www.policia.es, login.poderjudicial.es, representantesaduaneros.com, energia.imdea.org, www.authusb.net, www.transportepublico.es, www.coruna.gal, www.casareal.es, www.teldat.com, www.tecnove.com, www.gva.es, rns.ccn-cert.cni.es, www.ccn-cert.cni.es, www.advens.com, id.coruna.gal, eme-es.com, www.parcan.es, www.tibagroup.com, metropolitanogranada.es, www.hacienda.gob.es
Dismissed Targets(5): www.camaramadrid.es, www.palma.es, www.legebiltzarra.eus, sede.coruna.gal, santiagodecompostela.gal
New Targets(0):
Targets from prev attack(31): www.aecarretera.com, www.axians.es, www.cni.es, www.navarra.es, www.poderjudicial.es, www.interior.gob.es, sede.guardiacivil.gob.es, www.tramalacant.es, www.turgranada.es, administracion.gob.es, web.murcia.es, www.policia.es, login.poderjudicial.es, representantesaduaneros.com, energia.imdea.org, www.authusb.net, www.transportepublico.es, www.coruna.gal, www.casareal.es, www.teldat.com, www.tecnove.com, www.gva.es, rns.ccn-cert.cni.es, www.ccn-cert.cni.es, www.advens.com, id.coruna.gal, eme-es.com, www.parcan.es, www.tibagroup.com, metropolitanogranada.es, www.hacienda.gob.es
Dismissed Targets(5): www.camaramadrid.es, www.palma.es, www.legebiltzarra.eus, sede.coruna.gal, santiagodecompostela.gal
2026-11-06_11-04-07 check-hosts status
The attacks attributed to noname057 primarily target Spain, with numerous government and public service websites under threat. Key sectors affected include administration, energy, law enforcement, and transportation. Notable sites include various regional government portals, judicial systems, and public service organizations, indicating a focused effort on critical infrastructure within the country.AI generated36 targets are under attack, 16 new targets and 20 targets from previous attack
New Targets(16): administracion.gob.es, www.tibagroup.com, eme-es.com, login.poderjudicial.es, www.authusb.net, www.axians.es, representantesaduaneros.com, www.palma.es, santiagodecompostela.gal, www.gva.es, www.teldat.com, web.murcia.es, www.hacienda.gob.es, rns.ccn-cert.cni.es, www.navarra.es, www.advens.com
Targets from prev attack(20): energia.imdea.org, www.cni.es, www.camaramadrid.es, sede.coruna.gal, id.coruna.gal, sede.guardiacivil.gob.es, www.transportepublico.es, www.interior.gob.es, metropolitanogranada.es, www.tramalacant.es, www.legebiltzarra.eus, www.aecarretera.com, www.parcan.es, www.casareal.es, www.coruna.gal, www.ccn-cert.cni.es, www.turgranada.es, www.tecnove.com, www.policia.es, www.poderjudicial.es
Dismissed Targets(0):
New Targets(16): administracion.gob.es, www.tibagroup.com, eme-es.com, login.poderjudicial.es, www.authusb.net, www.axians.es, representantesaduaneros.com, www.palma.es, santiagodecompostela.gal, www.gva.es, www.teldat.com, web.murcia.es, www.hacienda.gob.es, rns.ccn-cert.cni.es, www.navarra.es, www.advens.com
Targets from prev attack(20): energia.imdea.org, www.cni.es, www.camaramadrid.es, sede.coruna.gal, id.coruna.gal, sede.guardiacivil.gob.es, www.transportepublico.es, www.interior.gob.es, metropolitanogranada.es, www.tramalacant.es, www.legebiltzarra.eus, www.aecarretera.com, www.parcan.es, www.casareal.es, www.coruna.gal, www.ccn-cert.cni.es, www.turgranada.es, www.tecnove.com, www.policia.es, www.poderjudicial.es
Dismissed Targets(0):
2026-11-06_07-04-07 check-hosts status
The attacks by noname057 primarily targeted websites in Spain. Key sectors affected include government, law enforcement, and public services, with notable sites such as the Royal House of Spain, the National Police, and various regional government portals. The attacks highlight a significant threat landscape within the Spanish digital infrastructure.AI generated20 targets are under attack, 20 new targets and 0 targets from previous attack
New Targets(20): www.turgranada.es, www.casareal.es, www.camaramadrid.es, www.policia.es, www.tecnove.com, www.tramalacant.es, sede.guardiacivil.gob.es, www.coruna.gal, www.transportepublico.es, www.poderjudicial.es, www.interior.gob.es, www.ccn-cert.cni.es, id.coruna.gal, www.aecarretera.com, metropolitanogranada.es, energia.imdea.org, www.legebiltzarra.eus, www.parcan.es, sede.coruna.gal, www.cni.es
Targets from prev attack(0):
Dismissed Targets(24): www.totallogistic.es, www.cleceseguridad.com, www.mrw.es, suardiaz.com, www.azvi.es, www.interglobo.net, www.crtm.es, www.metrovalencia.es, www.ineco.com, redalsa.com, comunicacion.diputaciondevalladolid.es, gasnam.es, web.larioja.org, www.cabeza.com, enyse.com, www.irizar.com, gls-group.com, www.portcastello.com, www.enaire.es, www.fecsa.net, www.trablisa.es, www.metroligero-oeste.es, www.sepi.es, www.puertos.es
New Targets(20): www.turgranada.es, www.casareal.es, www.camaramadrid.es, www.policia.es, www.tecnove.com, www.tramalacant.es, sede.guardiacivil.gob.es, www.coruna.gal, www.transportepublico.es, www.poderjudicial.es, www.interior.gob.es, www.ccn-cert.cni.es, id.coruna.gal, www.aecarretera.com, metropolitanogranada.es, energia.imdea.org, www.legebiltzarra.eus, www.parcan.es, sede.coruna.gal, www.cni.es
Targets from prev attack(0):
Dismissed Targets(24): www.totallogistic.es, www.cleceseguridad.com, www.mrw.es, suardiaz.com, www.azvi.es, www.interglobo.net, www.crtm.es, www.metrovalencia.es, www.ineco.com, redalsa.com, comunicacion.diputaciondevalladolid.es, gasnam.es, web.larioja.org, www.cabeza.com, enyse.com, www.irizar.com, gls-group.com, www.portcastello.com, www.enaire.es, www.fecsa.net, www.trablisa.es, www.metroligero-oeste.es, www.sepi.es, www.puertos.es
2026-11-05_11-04-07 check-hosts status
The websites attacked by noname057(16) primarily belong to organizations in Spain, indicating a focus on this country. The targets include logistics, transportation, and public service sectors, reflecting a diverse range of interests.AI generated24 targets are under attack, 8 new targets and 16 targets from previous attack
New Targets(8): www.totallogistic.es, www.puertos.es, www.cabeza.com, www.interglobo.net, web.larioja.org, www.trablisa.es, www.portcastello.com, www.cleceseguridad.com
Targets from prev attack(16): www.mrw.es, gls-group.com, www.fecsa.net, www.ineco.com, www.irizar.com, www.crtm.es, enyse.com, www.metrovalencia.es, gasnam.es, suardiaz.com, www.sepi.es, www.enaire.es, www.metroligero-oeste.es, comunicacion.diputaciondevalladolid.es, redalsa.com, www.azvi.es
Dismissed Targets(0):
New Targets(8): www.totallogistic.es, www.puertos.es, www.cabeza.com, www.interglobo.net, web.larioja.org, www.trablisa.es, www.portcastello.com, www.cleceseguridad.com
Targets from prev attack(16): www.mrw.es, gls-group.com, www.fecsa.net, www.ineco.com, www.irizar.com, www.crtm.es, enyse.com, www.metrovalencia.es, gasnam.es, suardiaz.com, www.sepi.es, www.enaire.es, www.metroligero-oeste.es, comunicacion.diputaciondevalladolid.es, redalsa.com, www.azvi.es
Dismissed Targets(0):
2026-11-05_07-04-07 check-hosts status
Noname057(16) has targeted various websites primarily in Spain, affecting sectors such as transportation, public services, and logistics. Notable targets include government sites like comunicacion.diputaciondevalladolid.es and transportation companies such as metrovalencia.es and irizar.com. The attacks highlight a focus on Spanish infrastructure and services.AI generated16 targets are under attack, 16 new targets and 0 targets from previous attack
New Targets(16): www.azvi.es, www.enaire.es, gasnam.es, enyse.com, suardiaz.com, www.ineco.com, www.metroligero-oeste.es, www.mrw.es, www.irizar.com, www.sepi.es, www.crtm.es, www.fecsa.net, www.metrovalencia.es, comunicacion.diputaciondevalladolid.es, redalsa.com, gls-group.com
Targets from prev attack(0):
Dismissed Targets(29): www.bremen-airport.com, wartung.hannover-airport.de, www.memmingen-airport.de, gascade.de, friedrichshafen-airport.de, www.menzelldoehle.de, dahajm.hannover-airport.de, maportal.hannover-airport.de, zaehler.eswe-versorgung.de, my.rostock-airport.de, helpdesk.menzelldoehle.de, www.caritas.de, fernwaerme.eswe-versorgung.de, www.hannover-airport.de, www.trans-bavaria.com, www.flughafen-erfurt-weimar.de, www.jadeweserport.de, tour.memmingen-airport.de, login.kvg-kiel.de, safety.hannover-airport.de, www.ihk-muenchen.de, www.gasunie.de, www.rostock-airport.de, www.dortmund-airport.com, airport-weeze.com, stats.eswe-verkehr.de, stage.dahajm.hannover-airport.de, thyssengas.com, mail.bremen-airport.com
New Targets(16): www.azvi.es, www.enaire.es, gasnam.es, enyse.com, suardiaz.com, www.ineco.com, www.metroligero-oeste.es, www.mrw.es, www.irizar.com, www.sepi.es, www.crtm.es, www.fecsa.net, www.metrovalencia.es, comunicacion.diputaciondevalladolid.es, redalsa.com, gls-group.com
Targets from prev attack(0):
Dismissed Targets(29): www.bremen-airport.com, wartung.hannover-airport.de, www.memmingen-airport.de, gascade.de, friedrichshafen-airport.de, www.menzelldoehle.de, dahajm.hannover-airport.de, maportal.hannover-airport.de, zaehler.eswe-versorgung.de, my.rostock-airport.de, helpdesk.menzelldoehle.de, www.caritas.de, fernwaerme.eswe-versorgung.de, www.hannover-airport.de, www.trans-bavaria.com, www.flughafen-erfurt-weimar.de, www.jadeweserport.de, tour.memmingen-airport.de, login.kvg-kiel.de, safety.hannover-airport.de, www.ihk-muenchen.de, www.gasunie.de, www.rostock-airport.de, www.dortmund-airport.com, airport-weeze.com, stats.eswe-verkehr.de, stage.dahajm.hannover-airport.de, thyssengas.com, mail.bremen-airport.com
2026-11-04_11-04-07 check-hosts status
The attacks attributed to noname057(16) primarily target infrastructure and services in Germany, including various airports such as Hannover, Memmingen, and Bremen. Other notable targets include gas and utility companies, as well as regional organizations, indicating a focus on critical sectors within the country.AI generated29 targets are under attack, 11 new targets and 18 targets from previous attack
New Targets(11): zaehler.eswe-versorgung.de, www.gasunie.de, www.menzelldoehle.de, helpdesk.menzelldoehle.de, www.jadeweserport.de, thyssengas.com, gascade.de, fernwaerme.eswe-versorgung.de, stats.eswe-verkehr.de, www.ihk-muenchen.de, www.caritas.de
Targets from prev attack(18): wartung.hannover-airport.de, airport-weeze.com, stage.dahajm.hannover-airport.de, www.memmingen-airport.de, www.rostock-airport.de, www.flughafen-erfurt-weimar.de, my.rostock-airport.de, friedrichshafen-airport.de, maportal.hannover-airport.de, mail.bremen-airport.com, www.dortmund-airport.com, login.kvg-kiel.de, www.trans-bavaria.com, www.bremen-airport.com, dahajm.hannover-airport.de, www.hannover-airport.de, tour.memmingen-airport.de, safety.hannover-airport.de
Dismissed Targets(0):
New Targets(11): zaehler.eswe-versorgung.de, www.gasunie.de, www.menzelldoehle.de, helpdesk.menzelldoehle.de, www.jadeweserport.de, thyssengas.com, gascade.de, fernwaerme.eswe-versorgung.de, stats.eswe-verkehr.de, www.ihk-muenchen.de, www.caritas.de
Targets from prev attack(18): wartung.hannover-airport.de, airport-weeze.com, stage.dahajm.hannover-airport.de, www.memmingen-airport.de, www.rostock-airport.de, www.flughafen-erfurt-weimar.de, my.rostock-airport.de, friedrichshafen-airport.de, maportal.hannover-airport.de, mail.bremen-airport.com, www.dortmund-airport.com, login.kvg-kiel.de, www.trans-bavaria.com, www.bremen-airport.com, dahajm.hannover-airport.de, www.hannover-airport.de, tour.memmingen-airport.de, safety.hannover-airport.de
Dismissed Targets(0):
2026-11-04_07-04-06 check-hosts status
The attacks by noname057(16) primarily targeted airports and transportation-related websites in Germany. Key sites affected include those from Rostock, Memmingen, Hannover, Dortmund, Erfurt-Weimar, and Friedrichshafen. This indicates a concentrated effort against German infrastructure, particularly in the aviation sector.AI generated18 targets are under attack, 18 new targets and 0 targets from previous attack
New Targets(18): my.rostock-airport.de, tour.memmingen-airport.de, airport-weeze.com, wartung.hannover-airport.de, www.dortmund-airport.com, www.trans-bavaria.com, friedrichshafen-airport.de, login.kvg-kiel.de, mail.bremen-airport.com, safety.hannover-airport.de, dahajm.hannover-airport.de, www.hannover-airport.de, www.flughafen-erfurt-weimar.de, www.bremen-airport.com, maportal.hannover-airport.de, stage.dahajm.hannover-airport.de, www.memmingen-airport.de, www.rostock-airport.de
Targets from prev attack(0):
Dismissed Targets(32): eww.de, www.energie.de, www.pwl.de, www.karlgross.de, www.dachser.com, etracking.karlgross.de, seifert-logistics.com, coop.se, www.borsen.dk, www.bds-dgv.de, matomo.dietrich-logistic.com, www.dietrich-logistic.com, secshare.fassmer.de, monparrainage.lapostemobile.fr, www.syddanskbolig.dk, remote.frachtcontor.de, archiv.dietrich-logistic.com, ecm.karlgross.de, login.thyssenkrupp.com, www.danfoss.com, www.maritimes-cluster.de, citrix.seifert-logistics.com, www.bvl.de, matomo.maritimes-cluster.de, www.lapostemobile.fr, assistance.lapostemobile.fr, my.fassmer.de, membership-application.maritimes-cluster.de, fassmer.de, password.thyssenkrupp.com, enaio.eww.de, www.frachtcontor.de
New Targets(18): my.rostock-airport.de, tour.memmingen-airport.de, airport-weeze.com, wartung.hannover-airport.de, www.dortmund-airport.com, www.trans-bavaria.com, friedrichshafen-airport.de, login.kvg-kiel.de, mail.bremen-airport.com, safety.hannover-airport.de, dahajm.hannover-airport.de, www.hannover-airport.de, www.flughafen-erfurt-weimar.de, www.bremen-airport.com, maportal.hannover-airport.de, stage.dahajm.hannover-airport.de, www.memmingen-airport.de, www.rostock-airport.de
Targets from prev attack(0):
Dismissed Targets(32): eww.de, www.energie.de, www.pwl.de, www.karlgross.de, www.dachser.com, etracking.karlgross.de, seifert-logistics.com, coop.se, www.borsen.dk, www.bds-dgv.de, matomo.dietrich-logistic.com, www.dietrich-logistic.com, secshare.fassmer.de, monparrainage.lapostemobile.fr, www.syddanskbolig.dk, remote.frachtcontor.de, archiv.dietrich-logistic.com, ecm.karlgross.de, login.thyssenkrupp.com, www.danfoss.com, www.maritimes-cluster.de, citrix.seifert-logistics.com, www.bvl.de, matomo.maritimes-cluster.de, www.lapostemobile.fr, assistance.lapostemobile.fr, my.fassmer.de, membership-application.maritimes-cluster.de, fassmer.de, password.thyssenkrupp.com, enaio.eww.de, www.frachtcontor.de
2026-11-03_11-02-09 check-hosts status
The attacks by noname057 primarily targeted websites from Germany, France, and Denmark. Key sectors affected include logistics, energy, and telecommunications. Notable companies involved are Thyssenkrupp, Frachtcontor, and Dachser, among others.AI generated32 targets are under attack, 9 new targets and 23 targets from previous attack
New Targets(9): ecm.karlgross.de, eww.de, matomo.maritimes-cluster.de, membership-application.maritimes-cluster.de, etracking.karlgross.de, www.karlgross.de, www.dachser.com, enaio.eww.de, www.maritimes-cluster.de
Targets from prev attack(23): login.thyssenkrupp.com, www.frachtcontor.de, www.lapostemobile.fr, seifert-logistics.com, remote.frachtcontor.de, matomo.dietrich-logistic.com, www.dietrich-logistic.com, secshare.fassmer.de, www.energie.de, monparrainage.lapostemobile.fr, citrix.seifert-logistics.com, www.pwl.de, archiv.dietrich-logistic.com, assistance.lapostemobile.fr, www.danfoss.com, www.bvl.de, fassmer.de, coop.se, www.borsen.dk, my.fassmer.de, www.syddanskbolig.dk, www.bds-dgv.de, password.thyssenkrupp.com
Dismissed Targets(0):
New Targets(9): ecm.karlgross.de, eww.de, matomo.maritimes-cluster.de, membership-application.maritimes-cluster.de, etracking.karlgross.de, www.karlgross.de, www.dachser.com, enaio.eww.de, www.maritimes-cluster.de
Targets from prev attack(23): login.thyssenkrupp.com, www.frachtcontor.de, www.lapostemobile.fr, seifert-logistics.com, remote.frachtcontor.de, matomo.dietrich-logistic.com, www.dietrich-logistic.com, secshare.fassmer.de, www.energie.de, monparrainage.lapostemobile.fr, citrix.seifert-logistics.com, www.pwl.de, archiv.dietrich-logistic.com, assistance.lapostemobile.fr, www.danfoss.com, www.bvl.de, fassmer.de, coop.se, www.borsen.dk, my.fassmer.de, www.syddanskbolig.dk, www.bds-dgv.de, password.thyssenkrupp.com
Dismissed Targets(0):
2026-11-03_09-14-07 check-hosts status
The attacks attributed to noname057 primarily target websites in Germany, Denmark, and France. Key sectors affected include logistics, telecommunications, and energy. Notable companies involved are Thyssenkrupp, Danfoss, and Fassmer, indicating a focus on industrial and service-oriented organizations.AI generated23 targets are under attack, 2 new targets and 21 targets from previous attack
New Targets(2): www.danfoss.com, www.borsen.dk
Targets from prev attack(21): login.thyssenkrupp.com, www.bds-dgv.de, www.syddanskbolig.dk, citrix.seifert-logistics.com, monparrainage.lapostemobile.fr, my.fassmer.de, fassmer.de, www.dietrich-logistic.com, password.thyssenkrupp.com, assistance.lapostemobile.fr, matomo.dietrich-logistic.com, www.lapostemobile.fr, archiv.dietrich-logistic.com, www.energie.de, seifert-logistics.com, www.bvl.de, secshare.fassmer.de, remote.frachtcontor.de, www.frachtcontor.de, coop.se, www.pwl.de
Dismissed Targets(0):
New Targets(2): www.danfoss.com, www.borsen.dk
Targets from prev attack(21): login.thyssenkrupp.com, www.bds-dgv.de, www.syddanskbolig.dk, citrix.seifert-logistics.com, monparrainage.lapostemobile.fr, my.fassmer.de, fassmer.de, www.dietrich-logistic.com, password.thyssenkrupp.com, assistance.lapostemobile.fr, matomo.dietrich-logistic.com, www.lapostemobile.fr, archiv.dietrich-logistic.com, www.energie.de, seifert-logistics.com, www.bvl.de, secshare.fassmer.de, remote.frachtcontor.de, www.frachtcontor.de, coop.se, www.pwl.de
Dismissed Targets(0):
2026-11-03_09-08-06 check-hosts status
The attacks attributed to noname057 primarily target websites in France, Germany, Denmark, and Sweden. Notable sectors affected include telecommunications, logistics, and energy, with multiple sites from companies like La Poste Mobile, Thyssenkrupp, and various logistics firms being compromised.AI generated21 targets are under attack, 1 new targets and 20 targets from previous attack
New Targets(1): www.syddanskbolig.dk
Targets from prev attack(20): monparrainage.lapostemobile.fr, www.bds-dgv.de, coop.se, password.thyssenkrupp.com, login.thyssenkrupp.com, remote.frachtcontor.de, archiv.dietrich-logistic.com, www.energie.de, assistance.lapostemobile.fr, secshare.fassmer.de, www.frachtcontor.de, www.dietrich-logistic.com, fassmer.de, my.fassmer.de, www.bvl.de, www.pwl.de, matomo.dietrich-logistic.com, citrix.seifert-logistics.com, www.lapostemobile.fr, seifert-logistics.com
Dismissed Targets(0):
New Targets(1): www.syddanskbolig.dk
Targets from prev attack(20): monparrainage.lapostemobile.fr, www.bds-dgv.de, coop.se, password.thyssenkrupp.com, login.thyssenkrupp.com, remote.frachtcontor.de, archiv.dietrich-logistic.com, www.energie.de, assistance.lapostemobile.fr, secshare.fassmer.de, www.frachtcontor.de, www.dietrich-logistic.com, fassmer.de, my.fassmer.de, www.bvl.de, www.pwl.de, matomo.dietrich-logistic.com, citrix.seifert-logistics.com, www.lapostemobile.fr, seifert-logistics.com
Dismissed Targets(0):
2026-11-03_07-04-08 check-hosts status
The attacks attributed to noname057 primarily target websites in Germany, France, and Sweden. Key sectors affected include logistics, telecommunications, and energy. The attackers have focused on various domains associated with companies like Dietrich Logistics, La Poste Mobile, and Thyssenkrupp, indicating a broad interest in disrupting services across these industries.AI generated20 targets are under attack, 20 new targets and 0 targets from previous attack
New Targets(20): www.dietrich-logistic.com, archiv.dietrich-logistic.com, matomo.dietrich-logistic.com, assistance.lapostemobile.fr, secshare.fassmer.de, remote.frachtcontor.de, monparrainage.lapostemobile.fr, coop.se, seifert-logistics.com, www.bvl.de, citrix.seifert-logistics.com, login.thyssenkrupp.com, www.lapostemobile.fr, www.frachtcontor.de, www.energie.de, password.thyssenkrupp.com, fassmer.de, www.bds-dgv.de, my.fassmer.de, www.pwl.de
Targets from prev attack(0):
Dismissed Targets(33): www.vms.de, www.taz.de, www.funkemedien.de, frontend-api.sbahn-hannover.de, einnahmen.rmv.de, piwi.wiesbaden.de, www.vergabe24.de, www.saalekreis.de, minio.pamyra.de, wohnungswirtschaft.wiesbaden.de, www.erfurt.de, mailing.cicero.de, anhoerung.kiel.de, www.kvg-kiel.de, www.rmv.de, www.sbahn-hannover.de, www.burda.com, testfreight.ttline.com, avb.rmv.de, portal.taz.de, shop.taz.de, www.vg-arendsee-kalbe.de, www.ttline.com, epaper.taz.de, gts.rmv.de, www.kreis-oh.de, bf-backend.rmv.de, kiel.de, www.nasa.de, dtms.wiesbaden.de, analytics.tkmsgroup.com, mailing.gruene-hessen.de, geo.rmv.de
New Targets(20): www.dietrich-logistic.com, archiv.dietrich-logistic.com, matomo.dietrich-logistic.com, assistance.lapostemobile.fr, secshare.fassmer.de, remote.frachtcontor.de, monparrainage.lapostemobile.fr, coop.se, seifert-logistics.com, www.bvl.de, citrix.seifert-logistics.com, login.thyssenkrupp.com, www.lapostemobile.fr, www.frachtcontor.de, www.energie.de, password.thyssenkrupp.com, fassmer.de, www.bds-dgv.de, my.fassmer.de, www.pwl.de
Targets from prev attack(0):
Dismissed Targets(33): www.vms.de, www.taz.de, www.funkemedien.de, frontend-api.sbahn-hannover.de, einnahmen.rmv.de, piwi.wiesbaden.de, www.vergabe24.de, www.saalekreis.de, minio.pamyra.de, wohnungswirtschaft.wiesbaden.de, www.erfurt.de, mailing.cicero.de, anhoerung.kiel.de, www.kvg-kiel.de, www.rmv.de, www.sbahn-hannover.de, www.burda.com, testfreight.ttline.com, avb.rmv.de, portal.taz.de, shop.taz.de, www.vg-arendsee-kalbe.de, www.ttline.com, epaper.taz.de, gts.rmv.de, www.kreis-oh.de, bf-backend.rmv.de, kiel.de, www.nasa.de, dtms.wiesbaden.de, analytics.tkmsgroup.com, mailing.gruene-hessen.de, geo.rmv.de
2026-11-02_11-04-35 check-hosts status
The attacks attributed to noname057 primarily target Germany, with a significant focus on various sectors including transportation, media, and local government services. Notable websites affected include those of public transport services like RMV and S-Bahn Hannover, as well as media outlets such as TAZ and Burda. The attacks highlight a concentrated effort on German infrastructure and services.AI generated33 targets are under attack, 12 new targets and 21 targets from previous attack
New Targets(12): www.rmv.de, www.ttline.com, einnahmen.rmv.de, avb.rmv.de, geo.rmv.de, analytics.tkmsgroup.com, gts.rmv.de, wohnungswirtschaft.wiesbaden.de, dtms.wiesbaden.de, bf-backend.rmv.de, piwi.wiesbaden.de, testfreight.ttline.com
Targets from prev attack(21): www.burda.com, www.nasa.de, portal.taz.de, www.kvg-kiel.de, www.sbahn-hannover.de, anhoerung.kiel.de, www.saalekreis.de, mailing.gruene-hessen.de, epaper.taz.de, www.kreis-oh.de, kiel.de, www.vg-arendsee-kalbe.de, www.taz.de, www.vms.de, www.erfurt.de, mailing.cicero.de, minio.pamyra.de, www.funkemedien.de, shop.taz.de, frontend-api.sbahn-hannover.de, www.vergabe24.de
Dismissed Targets(0):
New Targets(12): www.rmv.de, www.ttline.com, einnahmen.rmv.de, avb.rmv.de, geo.rmv.de, analytics.tkmsgroup.com, gts.rmv.de, wohnungswirtschaft.wiesbaden.de, dtms.wiesbaden.de, bf-backend.rmv.de, piwi.wiesbaden.de, testfreight.ttline.com
Targets from prev attack(21): www.burda.com, www.nasa.de, portal.taz.de, www.kvg-kiel.de, www.sbahn-hannover.de, anhoerung.kiel.de, www.saalekreis.de, mailing.gruene-hessen.de, epaper.taz.de, www.kreis-oh.de, kiel.de, www.vg-arendsee-kalbe.de, www.taz.de, www.vms.de, www.erfurt.de, mailing.cicero.de, minio.pamyra.de, www.funkemedien.de, shop.taz.de, frontend-api.sbahn-hannover.de, www.vergabe24.de
Dismissed Targets(0):
2026-11-02_08-02-07 check-hosts status
The cyber attacks attributed to noname057(16) have primarily targeted websites in Germany. Key sectors affected include media, public transportation, and local government services. Notable sites include major news outlets such as taz.de and burda.com, as well as various regional government portals. The attacks indicate a concentrated effort against German infrastructure and digital services.AI generated21 targets are under attack, 0 new targets and 21 targets from previous attack
New Targets(0):
Targets from prev attack(21): minio.pamyra.de, www.burda.com, epaper.taz.de, www.saalekreis.de, mailing.gruene-hessen.de, www.funkemedien.de, www.kreis-oh.de, www.erfurt.de, www.kvg-kiel.de, shop.taz.de, www.sbahn-hannover.de, portal.taz.de, www.vms.de, www.vergabe24.de, www.nasa.de, anhoerung.kiel.de, www.taz.de, kiel.de, www.vg-arendsee-kalbe.de, frontend-api.sbahn-hannover.de, mailing.cicero.de
Dismissed Targets(1): www.bmi.bund.de
New Targets(0):
Targets from prev attack(21): minio.pamyra.de, www.burda.com, epaper.taz.de, www.saalekreis.de, mailing.gruene-hessen.de, www.funkemedien.de, www.kreis-oh.de, www.erfurt.de, www.kvg-kiel.de, shop.taz.de, www.sbahn-hannover.de, portal.taz.de, www.vms.de, www.vergabe24.de, www.nasa.de, anhoerung.kiel.de, www.taz.de, kiel.de, www.vg-arendsee-kalbe.de, frontend-api.sbahn-hannover.de, mailing.cicero.de
Dismissed Targets(1): www.bmi.bund.de
2026-11-02_07-02-19 check-hosts status
The recent attacks attributed to noname057 primarily targeted websites in Germany. Key sectors affected include media, transportation, and government services. Notable sites include Burda, TAZ, and various regional government portals, indicating a focused campaign against German online infrastructure.AI generated22 targets are under attack, 21 new targets and 1 targets from previous attack
New Targets(21): www.burda.com, portal.taz.de, www.nasa.de, www.vergabe24.de, www.kreis-oh.de, mailing.gruene-hessen.de, anhoerung.kiel.de, www.vg-arendsee-kalbe.de, www.sbahn-hannover.de, www.taz.de, www.erfurt.de, minio.pamyra.de, epaper.taz.de, www.saalekreis.de, shop.taz.de, frontend-api.sbahn-hannover.de, mailing.cicero.de, kiel.de, www.vms.de, www.funkemedien.de, www.kvg-kiel.de
Targets from prev attack(1): www.bmi.bund.de
Dismissed Targets(53): media.m-net.de, annalena-baerbock.de, auth-portale.m-net.de, www.bmv.de, user.cloudcom.m-net.de, www.bundesfinanzministerium.de, wibau-wiesbaden.de, www.bnd.bund.de, www.bmz.de, www.bundespolizei.de, www.polizei.de, www.bmwk.de, www.bundeswehr.de, www.vergabe.nrw.de, skid.bka.de, www.zoll.de, www.bundesverfassungsgericht.de, www.bundeswirtschaftsministerium.de, www.bundestag.de, www.bundesgerichtshof.de, www.bmvg.de, www.verfassungsschutz.de, bmds.bund.de, www.polizei.bayern.de, kundenportal.m-net.de, www.elster.de, partnerportal.m-net.de, www.bundesjustizamt.de, mein.pyur.com, www.bsg.bund.de, www.seg-wiesbaden.de, www.eswe-verkehr.de, forum.m-net.de, www.pyur.com, www.generalbundesanwalt.de, www.bundesfinanzhof.de, justiz.de, auth.m-net.de, www.easybell.de, u-entrance.bka.de, www.bmj.de, hessen.de, bewerbung.bka.de, www.bka.de, webmail.bundespolizei.de, justizministerium.hessen.de, www.m-net.de, www.wiesbaden.de, my.easybell.com, www.polizei.hessen.de, www.bundesarbeitsgericht.de, www.auswaertiges-amt.de, www.wvv.de
New Targets(21): www.burda.com, portal.taz.de, www.nasa.de, www.vergabe24.de, www.kreis-oh.de, mailing.gruene-hessen.de, anhoerung.kiel.de, www.vg-arendsee-kalbe.de, www.sbahn-hannover.de, www.taz.de, www.erfurt.de, minio.pamyra.de, epaper.taz.de, www.saalekreis.de, shop.taz.de, frontend-api.sbahn-hannover.de, mailing.cicero.de, kiel.de, www.vms.de, www.funkemedien.de, www.kvg-kiel.de
Targets from prev attack(1): www.bmi.bund.de
Dismissed Targets(53): media.m-net.de, annalena-baerbock.de, auth-portale.m-net.de, www.bmv.de, user.cloudcom.m-net.de, www.bundesfinanzministerium.de, wibau-wiesbaden.de, www.bnd.bund.de, www.bmz.de, www.bundespolizei.de, www.polizei.de, www.bmwk.de, www.bundeswehr.de, www.vergabe.nrw.de, skid.bka.de, www.zoll.de, www.bundesverfassungsgericht.de, www.bundeswirtschaftsministerium.de, www.bundestag.de, www.bundesgerichtshof.de, www.bmvg.de, www.verfassungsschutz.de, bmds.bund.de, www.polizei.bayern.de, kundenportal.m-net.de, www.elster.de, partnerportal.m-net.de, www.bundesjustizamt.de, mein.pyur.com, www.bsg.bund.de, www.seg-wiesbaden.de, www.eswe-verkehr.de, forum.m-net.de, www.pyur.com, www.generalbundesanwalt.de, www.bundesfinanzhof.de, justiz.de, auth.m-net.de, www.easybell.de, u-entrance.bka.de, www.bmj.de, hessen.de, bewerbung.bka.de, www.bka.de, webmail.bundespolizei.de, justizministerium.hessen.de, www.m-net.de, www.wiesbaden.de, my.easybell.com, www.polizei.hessen.de, www.bundesarbeitsgericht.de, www.auswaertiges-amt.de, www.wvv.de
2026-10-31_11-04-08 check-hosts status
The attacks attributed to noname057 primarily target German websites, indicating a focus on Germany as the main country under attack. The compromised sites include government institutions, law enforcement agencies, and public services, reflecting an intent to disrupt critical infrastructure and access sensitive information.AI generated54 targets are under attack, 19 new targets and 35 targets from previous attack
New Targets(19): www.eswe-verkehr.de, my.easybell.com, www.seg-wiesbaden.de, kundenportal.m-net.de, partnerportal.m-net.de, www.m-net.de, www.easybell.de, media.m-net.de, www.wvv.de, justizministerium.hessen.de, forum.m-net.de, www.pyur.com, hessen.de, user.cloudcom.m-net.de, auth.m-net.de, auth-portale.m-net.de, www.polizei.hessen.de, mein.pyur.com, wibau-wiesbaden.de
Targets from prev attack(35): bewerbung.bka.de, www.bmj.de, www.bmvg.de, www.wiesbaden.de, www.verfassungsschutz.de, www.auswaertiges-amt.de, www.bundestag.de, www.bka.de, www.bundesfinanzministerium.de, www.elster.de, bmds.bund.de, www.bundesgerichtshof.de, www.bundesjustizamt.de, www.generalbundesanwalt.de, www.bundesfinanzhof.de, www.bmv.de, www.bundeswehr.de, www.polizei.bayern.de, www.bnd.bund.de, annalena-baerbock.de, u-entrance.bka.de, www.bundesarbeitsgericht.de, www.bmi.bund.de, www.bmwk.de, www.vergabe.nrw.de, www.bmz.de, www.bundesverfassungsgericht.de, skid.bka.de, webmail.bundespolizei.de, justiz.de, www.bundeswirtschaftsministerium.de, www.zoll.de, www.bundespolizei.de, www.polizei.de, www.bsg.bund.de
Dismissed Targets(0):
New Targets(19): www.eswe-verkehr.de, my.easybell.com, www.seg-wiesbaden.de, kundenportal.m-net.de, partnerportal.m-net.de, www.m-net.de, www.easybell.de, media.m-net.de, www.wvv.de, justizministerium.hessen.de, forum.m-net.de, www.pyur.com, hessen.de, user.cloudcom.m-net.de, auth.m-net.de, auth-portale.m-net.de, www.polizei.hessen.de, mein.pyur.com, wibau-wiesbaden.de
Targets from prev attack(35): bewerbung.bka.de, www.bmj.de, www.bmvg.de, www.wiesbaden.de, www.verfassungsschutz.de, www.auswaertiges-amt.de, www.bundestag.de, www.bka.de, www.bundesfinanzministerium.de, www.elster.de, bmds.bund.de, www.bundesgerichtshof.de, www.bundesjustizamt.de, www.generalbundesanwalt.de, www.bundesfinanzhof.de, www.bmv.de, www.bundeswehr.de, www.polizei.bayern.de, www.bnd.bund.de, annalena-baerbock.de, u-entrance.bka.de, www.bundesarbeitsgericht.de, www.bmi.bund.de, www.bmwk.de, www.vergabe.nrw.de, www.bmz.de, www.bundesverfassungsgericht.de, skid.bka.de, webmail.bundespolizei.de, justiz.de, www.bundeswirtschaftsministerium.de, www.zoll.de, www.bundespolizei.de, www.polizei.de, www.bsg.bund.de
Dismissed Targets(0):
2026-10-31_07-02-29 check-hosts status
The attacks attributed to noname057 primarily target German government and institutional websites. Key sectors under attack include law enforcement, defense, finance, and judiciary. The main countries affected by these attacks are Germany, given the specific nature of the targeted sites, which include various federal ministries and agencies, as well as local police and legal institutions.AI generated35 targets are under attack, 35 new targets and 0 targets from previous attack
New Targets(35): www.bnd.bund.de, bewerbung.bka.de, www.bmv.de, skid.bka.de, www.vergabe.nrw.de, u-entrance.bka.de, www.bundeswehr.de, www.auswaertiges-amt.de, www.bundesverfassungsgericht.de, www.bmwk.de, www.bundesfinanzhof.de, bmds.bund.de, www.bundeswirtschaftsministerium.de, www.elster.de, www.bundesjustizamt.de, www.bundesgerichtshof.de, www.zoll.de, www.polizei.de, annalena-baerbock.de, justiz.de, www.generalbundesanwalt.de, www.wiesbaden.de, www.bmi.bund.de, www.bka.de, www.bmvg.de, www.bmj.de, www.bundesfinanzministerium.de, www.bundespolizei.de, www.bsg.bund.de, www.bmz.de, www.bundesarbeitsgericht.de, www.verfassungsschutz.de, webmail.bundespolizei.de, www.polizei.bayern.de, www.bundestag.de
Targets from prev attack(0):
Dismissed Targets(41): www.mn.fr, www.breger.fr, www.bettellasrl.com, www.cerealsemi.com, breappweb.breger.fr, www.autamarocchi.com, www.regione.calabria.it, www.exail-technologies.com, comune.brissogne.ao.it, www.reggiocal.it, www.baronetrasporti.it, myam.autamarocchi.com, www.vienne.gouv.fr, www.comune.chambave.ao.it, www.comune.livorno.it, eurenco.com, www.fedespedi.it, www.eos-technologie.com, login.pecsb.it, www.knds.com, www.scponline.it, www.bergatrans.it, www.agerborsamerci.it, www.servizipubblicaamministrazione.it, www.myam.it, www.genavir.fr, tracking.autamarocchi.com, servizidigitali.comune.brissogne.ao.it, comune.gignod.ao.it, brest.fr, qgds.it, www.cacemautotrasporti.com, www.bartolini.it, www.parrot.com, www.beltlimo.it, www.gers.gouv.fr, delair.aero, support.lda.fr, www.ariane.group, webmailssl.it, iam.regione.calabria.it
New Targets(35): www.bnd.bund.de, bewerbung.bka.de, www.bmv.de, skid.bka.de, www.vergabe.nrw.de, u-entrance.bka.de, www.bundeswehr.de, www.auswaertiges-amt.de, www.bundesverfassungsgericht.de, www.bmwk.de, www.bundesfinanzhof.de, bmds.bund.de, www.bundeswirtschaftsministerium.de, www.elster.de, www.bundesjustizamt.de, www.bundesgerichtshof.de, www.zoll.de, www.polizei.de, annalena-baerbock.de, justiz.de, www.generalbundesanwalt.de, www.wiesbaden.de, www.bmi.bund.de, www.bka.de, www.bmvg.de, www.bmj.de, www.bundesfinanzministerium.de, www.bundespolizei.de, www.bsg.bund.de, www.bmz.de, www.bundesarbeitsgericht.de, www.verfassungsschutz.de, webmail.bundespolizei.de, www.polizei.bayern.de, www.bundestag.de
Targets from prev attack(0):
Dismissed Targets(41): www.mn.fr, www.breger.fr, www.bettellasrl.com, www.cerealsemi.com, breappweb.breger.fr, www.autamarocchi.com, www.regione.calabria.it, www.exail-technologies.com, comune.brissogne.ao.it, www.reggiocal.it, www.baronetrasporti.it, myam.autamarocchi.com, www.vienne.gouv.fr, www.comune.chambave.ao.it, www.comune.livorno.it, eurenco.com, www.fedespedi.it, www.eos-technologie.com, login.pecsb.it, www.knds.com, www.scponline.it, www.bergatrans.it, www.agerborsamerci.it, www.servizipubblicaamministrazione.it, www.myam.it, www.genavir.fr, tracking.autamarocchi.com, servizidigitali.comune.brissogne.ao.it, comune.gignod.ao.it, brest.fr, qgds.it, www.cacemautotrasporti.com, www.bartolini.it, www.parrot.com, www.beltlimo.it, www.gers.gouv.fr, delair.aero, support.lda.fr, www.ariane.group, webmailssl.it, iam.regione.calabria.it