#	domain	network	attack type

2026-07-18_08-50-12 check-hosts status

The attacks attributed to noname057 primarily targeted websites in Germany, particularly those related to the Kiel region and various local organizations. Key sites affected include the Port of Kiel and several local government and library services. The attacks also impacted the Thyssenkrupp login portal and other related domains, indicating a focus on both public and private sector entities within Germany.^{AI generated}
18 targets are under attack, 9 new targets and 9 targets from previous attack
New Targets(9): auth.portofkiel.com, www.portofkiel.com, www.limanisupply.com, pasis.portofkiel.com, analytics.portofkiel.com, agios.portofkiel.com, stage.stadtwerke-kiel.de, esmz.portofkiel.com, minio.pamyra.de
Targets from prev attack(9): analytics.tkmsgroup.com, www.nah.sh, login.thyssenkrupp.com, online-knoellchen.kiel.de, stadtbuecherei.kiel.de, anhoerung.kiel.de, lhk-intranet.kiel.de, kiel.de, www.tkmsgroup.com
Dismissed Targets(30): www.vms.de, immobilienprojekte.frankfurter-volksbank.de, www.kreis-oh.de, www.saarvv.de, vrinternational.frankfurter-volksbank.de, momente.frankfurter-volksbank.de, signaturonline.frankfurter-volksbank.de, immobilien.frankfurter-volksbank.de, money-and-more.frankfurter-volksbank.de, www.sbahn-hannover.de, profil-newsletter.frankfurter-volksbank.de, nachhaltigkeitskompass.frankfurter-volksbank.de, stiftung-moritzburg.de, anmeldung-newsletter.frankfurter-volksbank.de, dashboard.frankfurter-volksbank.de, www.bode-holtemme.de, www.bvl.de, abmeldung-newsletter.frankfurter-volksbank.de, t.frankfurter-volksbank.de, www.erfurt.de, emili.frankfurter-volksbank.de, nachhaltigkeitskompass-firmenkunden.frankfurter-volksbank.de, www.nasa.de, move.frankfurter-volksbank.de, www.vg-arendsee-kalbe.de, dialogadmin.frankfurter-volksbank.de, frontend-api.sbahn-hannover.de, dialogonline.frankfurter-volksbank.de, www.bkms-system.net, www.gladbeck.de

2026-07-18_08-46-09 check-hosts status

The attacks by noname057 primarily targeted websites in Germany, with significant focus on various sectors including banking, public services, and local government. Notable sites affected include those belonging to the Frankfurter Volksbank, Kiel city, and several regional transport services, indicating a concentrated effort within the German digital landscape.^{AI generated}
39 targets are under attack, 2 new targets and 37 targets from previous attack
New Targets(2): anhoerung.kiel.de, lhk-intranet.kiel.de
Targets from prev attack(37): analytics.tkmsgroup.com, online-knoellchen.kiel.de, www.vms.de, immobilienprojekte.frankfurter-volksbank.de, www.kreis-oh.de, www.saarvv.de, vrinternational.frankfurter-volksbank.de, kiel.de, momente.frankfurter-volksbank.de, www.tkmsgroup.com, signaturonline.frankfurter-volksbank.de, immobilien.frankfurter-volksbank.de, money-and-more.frankfurter-volksbank.de, www.nah.sh, stadtbuecherei.kiel.de, www.sbahn-hannover.de, profil-newsletter.frankfurter-volksbank.de, nachhaltigkeitskompass.frankfurter-volksbank.de, stiftung-moritzburg.de, anmeldung-newsletter.frankfurter-volksbank.de, dashboard.frankfurter-volksbank.de, www.bode-holtemme.de, www.bvl.de, login.thyssenkrupp.com, abmeldung-newsletter.frankfurter-volksbank.de, t.frankfurter-volksbank.de, www.erfurt.de, emili.frankfurter-volksbank.de, nachhaltigkeitskompass-firmenkunden.frankfurter-volksbank.de, www.nasa.de, www.vg-arendsee-kalbe.de, move.frankfurter-volksbank.de, dialogadmin.frankfurter-volksbank.de, frontend-api.sbahn-hannover.de, dialogonline.frankfurter-volksbank.de, www.bkms-system.net, www.gladbeck.de
Dismissed Targets(0):

2026-07-18_08-31-15 check-hosts status

The attacks attributed to noname057 primarily target websites in Germany, with a focus on various sectors including banking, public services, and educational institutions. Key affected regions include cities such as Kiel, Erfurt, and Gladbeck, highlighting a concentrated effort against German online infrastructure. Additionally, there are instances of attacks on platforms related to financial services and public transport, indicating a broad range of targets within the country.^{AI generated}
37 targets are under attack, 4 new targets and 33 targets from previous attack
New Targets(4): login.thyssenkrupp.com, online-knoellchen.kiel.de, analytics.tkmsgroup.com, stadtbuecherei.kiel.de
Targets from prev attack(33): money-and-more.frankfurter-volksbank.de, www.vg-arendsee-kalbe.de, www.erfurt.de, www.nah.sh, www.vms.de, www.saarvv.de, kiel.de, immobilienprojekte.frankfurter-volksbank.de, nachhaltigkeitskompass.frankfurter-volksbank.de, move.frankfurter-volksbank.de, www.kreis-oh.de, stiftung-moritzburg.de, vrinternational.frankfurter-volksbank.de, momente.frankfurter-volksbank.de, profil-newsletter.frankfurter-volksbank.de, www.tkmsgroup.com, www.sbahn-hannover.de, dialogonline.frankfurter-volksbank.de, www.bkms-system.net, dialogadmin.frankfurter-volksbank.de, www.bode-holtemme.de, frontend-api.sbahn-hannover.de, t.frankfurter-volksbank.de, www.nasa.de, abmeldung-newsletter.frankfurter-volksbank.de, www.bvl.de, dashboard.frankfurter-volksbank.de, www.gladbeck.de, anmeldung-newsletter.frankfurter-volksbank.de, emili.frankfurter-volksbank.de, nachhaltigkeitskompass-firmenkunden.frankfurter-volksbank.de, signaturonline.frankfurter-volksbank.de, immobilien.frankfurter-volksbank.de
Dismissed Targets(0):

2026-07-18_08-15-30 check-hosts status

The attacks attributed to noname057 primarily targeted websites in Germany, with a focus on financial institutions and local government services. Key sites affected include various domains associated with Frankfurter Volksbank, S-Bahn Hannover, and several municipal websites. The attacks highlight a concentrated effort against German entities, indicating a potential motive related to financial or governmental data.^{AI generated}
33 targets are under attack, 3 new targets and 30 targets from previous attack
New Targets(3): kiel.de, www.nah.sh, www.tkmsgroup.com
Targets from prev attack(30): immobilien.frankfurter-volksbank.de, momente.frankfurter-volksbank.de, www.kreis-oh.de, signaturonline.frankfurter-volksbank.de, frontend-api.sbahn-hannover.de, nachhaltigkeitskompass-firmenkunden.frankfurter-volksbank.de, t.frankfurter-volksbank.de, anmeldung-newsletter.frankfurter-volksbank.de, dialogadmin.frankfurter-volksbank.de, emili.frankfurter-volksbank.de, www.bkms-system.net, profil-newsletter.frankfurter-volksbank.de, www.nasa.de, www.vms.de, www.bode-holtemme.de, abmeldung-newsletter.frankfurter-volksbank.de, nachhaltigkeitskompass.frankfurter-volksbank.de, www.bvl.de, www.gladbeck.de, money-and-more.frankfurter-volksbank.de, move.frankfurter-volksbank.de, vrinternational.frankfurter-volksbank.de, www.sbahn-hannover.de, www.vg-arendsee-kalbe.de, www.saarvv.de, www.erfurt.de, stiftung-moritzburg.de, dashboard.frankfurter-volksbank.de, immobilienprojekte.frankfurter-volksbank.de, dialogonline.frankfurter-volksbank.de
Dismissed Targets(0):

2026-07-17_12-10-47 check-hosts status

The attacks attributed to noname057 primarily targeted websites in Germany, with notable instances involving various domains associated with financial institutions and local government entities. Key sites included those of the Frankfurter Volksbank, the city of Erfurt, and several regional transport services like S-Bahn Hannover. The attacks reflect a concentrated effort against German infrastructure, indicating a potential focus on disrupting services and accessing sensitive information.^{AI generated}
30 targets are under attack, 13 new targets and 17 targets from previous attack
New Targets(13): www.bkms-system.net, www.kreis-oh.de, www.erfurt.de, www.nasa.de, stiftung-moritzburg.de, www.sbahn-hannover.de, www.vms.de, www.saarvv.de, www.gladbeck.de, www.vg-arendsee-kalbe.de, frontend-api.sbahn-hannover.de, www.bode-holtemme.de, www.bvl.de
Targets from prev attack(17): profil-newsletter.frankfurter-volksbank.de, vrinternational.frankfurter-volksbank.de, nachhaltigkeitskompass.frankfurter-volksbank.de, immobilien.frankfurter-volksbank.de, t.frankfurter-volksbank.de, immobilienprojekte.frankfurter-volksbank.de, dialogonline.frankfurter-volksbank.de, abmeldung-newsletter.frankfurter-volksbank.de, money-and-more.frankfurter-volksbank.de, emili.frankfurter-volksbank.de, anmeldung-newsletter.frankfurter-volksbank.de, momente.frankfurter-volksbank.de, dialogadmin.frankfurter-volksbank.de, dashboard.frankfurter-volksbank.de, nachhaltigkeitskompass-firmenkunden.frankfurter-volksbank.de, move.frankfurter-volksbank.de, signaturonline.frankfurter-volksbank.de
Dismissed Targets(0):

2026-07-17_09-16-16 check-hosts status

The attacks by noname057 primarily targeted websites associated with Frankfurter Volksbank, indicating a focus on Germany. The compromised sites include various services related to banking, sustainability, and customer engagement, highlighting the sector's vulnerability to cyber threats.^{AI generated}
17 targets are under attack, 0 new targets and 17 targets from previous attack
New Targets(0):
Targets from prev attack(17): signaturonline.frankfurter-volksbank.de, nachhaltigkeitskompass-firmenkunden.frankfurter-volksbank.de, anmeldung-newsletter.frankfurter-volksbank.de, t.frankfurter-volksbank.de, nachhaltigkeitskompass.frankfurter-volksbank.de, dashboard.frankfurter-volksbank.de, momente.frankfurter-volksbank.de, move.frankfurter-volksbank.de, dialogonline.frankfurter-volksbank.de, vrinternational.frankfurter-volksbank.de, immobilien.frankfurter-volksbank.de, immobilienprojekte.frankfurter-volksbank.de, money-and-more.frankfurter-volksbank.de, abmeldung-newsletter.frankfurter-volksbank.de, emili.frankfurter-volksbank.de, dialogadmin.frankfurter-volksbank.de, profil-newsletter.frankfurter-volksbank.de
Dismissed Targets(27): partnerportal.m-net.de, www.rmv.de, traukalender.wiesbaden.de, auth.m-net.de, piwi.wiesbaden.de, dtms.wiesbaden.de, aboonline.eswe-verkehr.de, ausbildung.wiesbaden.de, ivupad.eswe-verkehr.de, zugang2.wiesbaden.de, media.m-net.de, stats.eswe-verkehr.de, kundenportal.m-net.de, bond.wiesbaden.de, forum.m-net.de, auth-portale.m-net.de, caligari.wiesbaden.de, www.wiesbaden.de, www.m-net.de, ov-traukalender.wiesbaden.de, kurhaus.wiesbaden.de, matomo.eswe-verkehr.de, geoportal.wiesbaden.de, wohnungswirtschaft.wiesbaden.de, user.cloudcom.m-net.de, shop.eswe.com, www.eswe-verkehr.de

2026-07-17_08-10-49 check-hosts status

The attacks attributed to noname057 primarily target websites in Germany, specifically in the Wiesbaden area and associated with various institutions such as the Frankfurter Volksbank and M-net. The focus appears to be on local government services, transportation, and banking platforms, indicating a concentrated effort on critical infrastructure and regional services within Germany.^{AI generated}
44 targets are under attack, 17 new targets and 27 targets from previous attack
New Targets(17): abmeldung-newsletter.frankfurter-volksbank.de, anmeldung-newsletter.frankfurter-volksbank.de, t.frankfurter-volksbank.de, emili.frankfurter-volksbank.de, immobilien.frankfurter-volksbank.de, dashboard.frankfurter-volksbank.de, momente.frankfurter-volksbank.de, dialogonline.frankfurter-volksbank.de, signaturonline.frankfurter-volksbank.de, money-and-more.frankfurter-volksbank.de, immobilienprojekte.frankfurter-volksbank.de, dialogadmin.frankfurter-volksbank.de, profil-newsletter.frankfurter-volksbank.de, nachhaltigkeitskompass.frankfurter-volksbank.de, move.frankfurter-volksbank.de, nachhaltigkeitskompass-firmenkunden.frankfurter-volksbank.de, vrinternational.frankfurter-volksbank.de
Targets from prev attack(27): kurhaus.wiesbaden.de, shop.eswe.com, user.cloudcom.m-net.de, caligari.wiesbaden.de, media.m-net.de, kundenportal.m-net.de, bond.wiesbaden.de, www.eswe-verkehr.de, www.wiesbaden.de, auth-portale.m-net.de, forum.m-net.de, traukalender.wiesbaden.de, ov-traukalender.wiesbaden.de, stats.eswe-verkehr.de, auth.m-net.de, wohnungswirtschaft.wiesbaden.de, zugang2.wiesbaden.de, geoportal.wiesbaden.de, www.rmv.de, piwi.wiesbaden.de, www.m-net.de, partnerportal.m-net.de, ausbildung.wiesbaden.de, aboonline.eswe-verkehr.de, dtms.wiesbaden.de, matomo.eswe-verkehr.de, ivupad.eswe-verkehr.de
Dismissed Targets(8): www.kvg-kiel.de, analytics.portofkiel.com, www.nah.sh, ivu.kvg-kiel.de, login.kvg-kiel.de, agios.portofkiel.com, mobiliteam.nah.sh, auth.portofkiel.com

2026-07-17_03-15-07 check-hosts status

The attacks attributed to noname057 primarily target websites in Germany, specifically in cities like Wiesbaden and Kiel. Key sectors affected include transportation, public services, and telecommunications, with multiple local government and service provider websites compromised.^{AI generated}
35 targets are under attack, 1 new targets and 34 targets from previous attack
New Targets(1): mobiliteam.nah.sh
Targets from prev attack(34): zugang2.wiesbaden.de, wohnungswirtschaft.wiesbaden.de, www.m-net.de, partnerportal.m-net.de, www.nah.sh, user.cloudcom.m-net.de, login.kvg-kiel.de, www.eswe-verkehr.de, caligari.wiesbaden.de, auth.m-net.de, www.wiesbaden.de, forum.m-net.de, analytics.portofkiel.com, stats.eswe-verkehr.de, agios.portofkiel.com, kundenportal.m-net.de, shop.eswe.com, kurhaus.wiesbaden.de, www.rmv.de, geoportal.wiesbaden.de, piwi.wiesbaden.de, traukalender.wiesbaden.de, matomo.eswe-verkehr.de, dtms.wiesbaden.de, ausbildung.wiesbaden.de, auth-portale.m-net.de, ov-traukalender.wiesbaden.de, media.m-net.de, auth.portofkiel.com, ivu.kvg-kiel.de, ivupad.eswe-verkehr.de, www.kvg-kiel.de, bond.wiesbaden.de, aboonline.eswe-verkehr.de
Dismissed Targets(0):

2026-07-17_03-10-09 check-hosts status

The attacks by noname057 primarily targeted websites in Germany. Key cities affected include Wiesbaden, Kiel, and areas served by M-net and ESWE Verkehr. The attacks impacted various services, including public transport, local government portals, and user authentication systems.^{AI generated}
34 targets are under attack, 0 new targets and 34 targets from previous attack
New Targets(0):
Targets from prev attack(34): www.wiesbaden.de, auth.portofkiel.com, ivupad.eswe-verkehr.de, caligari.wiesbaden.de, partnerportal.m-net.de, www.m-net.de, zugang2.wiesbaden.de, auth-portale.m-net.de, geoportal.wiesbaden.de, ivu.kvg-kiel.de, media.m-net.de, user.cloudcom.m-net.de, www.eswe-verkehr.de, auth.m-net.de, aboonline.eswe-verkehr.de, piwi.wiesbaden.de, wohnungswirtschaft.wiesbaden.de, www.kvg-kiel.de, dtms.wiesbaden.de, traukalender.wiesbaden.de, bond.wiesbaden.de, www.nah.sh, shop.eswe.com, kundenportal.m-net.de, ov-traukalender.wiesbaden.de, forum.m-net.de, kurhaus.wiesbaden.de, analytics.portofkiel.com, matomo.eswe-verkehr.de, www.rmv.de, agios.portofkiel.com, ausbildung.wiesbaden.de, login.kvg-kiel.de, stats.eswe-verkehr.de
Dismissed Targets(1): mobiliteam.nah.sh

2026-07-17_02-15-09 check-hosts status

The attacks attributed to noname057 primarily target websites in Germany, particularly in the regions of Kiel and Wiesbaden. Key sectors affected include public transportation, local government services, and various online portals related to mobility and utilities. The attacks highlight a concentrated effort on German infrastructure and services, indicating a potential focus on disrupting local operations and accessing sensitive information.^{AI generated}
35 targets are under attack, 4 new targets and 31 targets from previous attack
New Targets(4): dtms.wiesbaden.de, media.m-net.de, forum.m-net.de, ivupad.eswe-verkehr.de
Targets from prev attack(31): analytics.portofkiel.com, www.nah.sh, partnerportal.m-net.de, kurhaus.wiesbaden.de, zugang2.wiesbaden.de, shop.eswe.com, caligari.wiesbaden.de, geoportal.wiesbaden.de, stats.eswe-verkehr.de, traukalender.wiesbaden.de, piwi.wiesbaden.de, mobiliteam.nah.sh, kundenportal.m-net.de, auth.m-net.de, ivu.kvg-kiel.de, www.kvg-kiel.de, www.wiesbaden.de, aboonline.eswe-verkehr.de, www.eswe-verkehr.de, auth-portale.m-net.de, auth.portofkiel.com, ov-traukalender.wiesbaden.de, matomo.eswe-verkehr.de, www.rmv.de, ausbildung.wiesbaden.de, wohnungswirtschaft.wiesbaden.de, bond.wiesbaden.de, www.m-net.de, agios.portofkiel.com, user.cloudcom.m-net.de, login.kvg-kiel.de
Dismissed Targets(0):

2026-07-17_02-10-26 check-hosts status

The attacks attributed to noname057 primarily target websites in Germany, specifically in the regions of Wiesbaden and Kiel. These include various municipal, transportation, and service-related sites, indicating a focus on local government and public services. The attacks highlight vulnerabilities in critical infrastructure within these areas.^{AI generated}
31 targets are under attack, 0 new targets and 31 targets from previous attack
New Targets(0):
Targets from prev attack(31): www.wiesbaden.de, auth.portofkiel.com, kurhaus.wiesbaden.de, wohnungswirtschaft.wiesbaden.de, login.kvg-kiel.de, auth-portale.m-net.de, www.rmv.de, partnerportal.m-net.de, ivu.kvg-kiel.de, mobiliteam.nah.sh, matomo.eswe-verkehr.de, bond.wiesbaden.de, agios.portofkiel.com, shop.eswe.com, geoportal.wiesbaden.de, user.cloudcom.m-net.de, stats.eswe-verkehr.de, auth.m-net.de, ausbildung.wiesbaden.de, traukalender.wiesbaden.de, www.nah.sh, www.eswe-verkehr.de, analytics.portofkiel.com, kundenportal.m-net.de, caligari.wiesbaden.de, ov-traukalender.wiesbaden.de, www.kvg-kiel.de, piwi.wiesbaden.de, aboonline.eswe-verkehr.de, www.m-net.de, zugang2.wiesbaden.de
Dismissed Targets(4): ivupad.eswe-verkehr.de, media.m-net.de, forum.m-net.de, dtms.wiesbaden.de

2026-07-16_23-15-08 check-hosts status

The attacks by noname057(16) primarily targeted websites in Germany, specifically in cities like Wiesbaden and Kiel. Key sectors affected include public transportation, local government services, and telecommunications.^{AI generated}
35 targets are under attack, 1 new targets and 34 targets from previous attack
New Targets(1): caligari.wiesbaden.de
Targets from prev attack(34): agios.portofkiel.com, www.m-net.de, dtms.wiesbaden.de, auth-portale.m-net.de, analytics.portofkiel.com, bond.wiesbaden.de, www.nah.sh, ivu.kvg-kiel.de, kurhaus.wiesbaden.de, forum.m-net.de, auth.portofkiel.com, ov-traukalender.wiesbaden.de, piwi.wiesbaden.de, zugang2.wiesbaden.de, login.kvg-kiel.de, ausbildung.wiesbaden.de, matomo.eswe-verkehr.de, www.wiesbaden.de, media.m-net.de, user.cloudcom.m-net.de, www.kvg-kiel.de, www.rmv.de, aboonline.eswe-verkehr.de, ivupad.eswe-verkehr.de, stats.eswe-verkehr.de, shop.eswe.com, partnerportal.m-net.de, kundenportal.m-net.de, geoportal.wiesbaden.de, mobiliteam.nah.sh, wohnungswirtschaft.wiesbaden.de, auth.m-net.de, traukalender.wiesbaden.de, www.eswe-verkehr.de
Dismissed Targets(0):

2026-07-16_23-10-17 check-hosts status

The attacks attributed to noname057 primarily target websites in Germany, particularly in the regions of Wiesbaden and Kiel. Key sectors under attack include public transportation, local government services, and online shopping platforms. Notable websites affected include municipal portals, transport services, and various online customer services, indicating a focus on disrupting local infrastructure and services.^{AI generated}
34 targets are under attack, 0 new targets and 34 targets from previous attack
New Targets(0):
Targets from prev attack(34): kurhaus.wiesbaden.de, shop.eswe.com, ov-traukalender.wiesbaden.de, www.rmv.de, auth.m-net.de, ivu.kvg-kiel.de, agios.portofkiel.com, aboonline.eswe-verkehr.de, wohnungswirtschaft.wiesbaden.de, mobiliteam.nah.sh, geoportal.wiesbaden.de, forum.m-net.de, ivupad.eswe-verkehr.de, traukalender.wiesbaden.de, login.kvg-kiel.de, www.kvg-kiel.de, kundenportal.m-net.de, www.m-net.de, partnerportal.m-net.de, stats.eswe-verkehr.de, www.eswe-verkehr.de, www.nah.sh, ausbildung.wiesbaden.de, bond.wiesbaden.de, www.wiesbaden.de, piwi.wiesbaden.de, dtms.wiesbaden.de, auth.portofkiel.com, user.cloudcom.m-net.de, zugang2.wiesbaden.de, media.m-net.de, matomo.eswe-verkehr.de, analytics.portofkiel.com, auth-portale.m-net.de
Dismissed Targets(1): caligari.wiesbaden.de

2026-07-16_13-05-08 check-hosts status

The attacks attributed to noname057 primarily targeted sites in Germany, particularly in the Wiesbaden and Kiel regions. Key sectors affected include public transportation, local government services, and telecommunications. The attacks highlight a focus on regional infrastructure and services, impacting both local authorities and public transport systems.^{AI generated}
35 targets are under attack, 8 new targets and 27 targets from previous attack
New Targets(8): analytics.portofkiel.com, ivu.kvg-kiel.de, www.kvg-kiel.de, mobiliteam.nah.sh, login.kvg-kiel.de, auth.portofkiel.com, www.nah.sh, agios.portofkiel.com
Targets from prev attack(27): zugang2.wiesbaden.de, piwi.wiesbaden.de, www.eswe-verkehr.de, www.wiesbaden.de, ausbildung.wiesbaden.de, traukalender.wiesbaden.de, caligari.wiesbaden.de, www.m-net.de, media.m-net.de, dtms.wiesbaden.de, auth-portale.m-net.de, stats.eswe-verkehr.de, ov-traukalender.wiesbaden.de, forum.m-net.de, user.cloudcom.m-net.de, bond.wiesbaden.de, partnerportal.m-net.de, matomo.eswe-verkehr.de, auth.m-net.de, kurhaus.wiesbaden.de, shop.eswe.com, ivupad.eswe-verkehr.de, wohnungswirtschaft.wiesbaden.de, kundenportal.m-net.de, www.rmv.de, aboonline.eswe-verkehr.de, geoportal.wiesbaden.de
Dismissed Targets(0):

2026-07-16_09-05-07 check-hosts status

The attacks attributed to noname057 primarily target websites in Germany, particularly in the Wiesbaden area. Key sectors affected include public transportation, utilities, and local government services, indicating a focus on critical infrastructure and community services within the country.^{AI generated}
27 targets are under attack, 27 new targets and 0 targets from previous attack
New Targets(27): shop.eswe.com, auth.m-net.de, traukalender.wiesbaden.de, dtms.wiesbaden.de, aboonline.eswe-verkehr.de, www.eswe-verkehr.de, www.wiesbaden.de, user.cloudcom.m-net.de, ivupad.eswe-verkehr.de, www.rmv.de, matomo.eswe-verkehr.de, wohnungswirtschaft.wiesbaden.de, www.m-net.de, caligari.wiesbaden.de, forum.m-net.de, geoportal.wiesbaden.de, kurhaus.wiesbaden.de, kundenportal.m-net.de, ov-traukalender.wiesbaden.de, stats.eswe-verkehr.de, bond.wiesbaden.de, media.m-net.de, auth-portale.m-net.de, partnerportal.m-net.de, piwi.wiesbaden.de, zugang2.wiesbaden.de, ausbildung.wiesbaden.de
Targets from prev attack(0):
Dismissed Targets(1): www.mvg.de

2026-07-16_08-05-09 check-hosts status

Noname057(16) has targeted various websites, including www.mvg.de, primarily affecting Germany. The attacks indicate a focus on critical infrastructure and public services within the country.^{AI generated}
1 targets are under attack, 0 new targets and 1 targets from previous attack
New Targets(0):
Targets from prev attack(1): www.mvg.de
Dismissed Targets(29): nationalexpress.de, transportticket.staging.ttline.com, transportticket.ttline.com, kundenportal.swhl.de, pay.staging.ttline.com, pay.ttline.com, www.faehre-honnef.de, speedtest.glasfaser.swhl.de, plusbus-deutschland.de, login-netzplan.swhl.de, www.bds-dgv.de, www.mdv-verbundgebiet.de, plustaktbus.de, bestellen.glasfaser.swhl.de, www.sweg.de, webmail.bds-dgv.de, anmeldung.mdv-verbundgebiet.de, www.swhl.de, www.moovme.de, parken.swhl.de, www.deutschebahn.com, 1ticket.de, bitwarden.swhl.de, www.ttline.com, start-ni-mitte.de, testfreight.ttline.com, stellenangebote.swhl.de, booking.ttline.com, netzplan.swhl.de

2026-07-16_07-10-07 check-hosts status

The recent attacks attributed to noname057 primarily targeted websites in Germany, affecting various sectors including transportation, public services, and telecommunications. Key sites include those related to ticketing and travel services, such as ttline.com and deutschebahn.com, indicating a focus on the transportation infrastructure in the country.^{AI generated}
30 targets are under attack, 0 new targets and 30 targets from previous attack
New Targets(0):
Targets from prev attack(30): parken.swhl.de, webmail.bds-dgv.de, transportticket.ttline.com, pay.ttline.com, plustaktbus.de, anmeldung.mdv-verbundgebiet.de, booking.ttline.com, 1ticket.de, login-netzplan.swhl.de, bestellen.glasfaser.swhl.de, transportticket.staging.ttline.com, www.sweg.de, pay.staging.ttline.com, www.moovme.de, plusbus-deutschland.de, www.faehre-honnef.de, www.bds-dgv.de, netzplan.swhl.de, www.mdv-verbundgebiet.de, www.deutschebahn.com, nationalexpress.de, www.ttline.com, kundenportal.swhl.de, stellenangebote.swhl.de, www.mvg.de, start-ni-mitte.de, www.swhl.de, speedtest.glasfaser.swhl.de, bitwarden.swhl.de, testfreight.ttline.com
Dismissed Targets(1): www.nordwestbahn.de

2026-07-15_12-05-07 check-hosts status

Noname057(16) has targeted various websites primarily in Germany, affecting sectors such as transportation and public services. Key countries under attack include Germany, with numerous sites like ttline.com, mdv-verbundgebiet.de, and deutschebahn.com being compromised. Other affected domains suggest a focus on public transport and ticketing services, indicating a concentrated effort on critical infrastructure within this region.^{AI generated}
31 targets are under attack, 12 new targets and 19 targets from previous attack
New Targets(12): plusbus-deutschland.de, start-ni-mitte.de, nationalexpress.de, www.sweg.de, www.moovme.de, www.nordwestbahn.de, plustaktbus.de, www.mvg.de, www.mdv-verbundgebiet.de, anmeldung.mdv-verbundgebiet.de, 1ticket.de, www.deutschebahn.com
Targets from prev attack(19): pay.ttline.com, www.ttline.com, netzplan.swhl.de, testfreight.ttline.com, transportticket.ttline.com, kundenportal.swhl.de, pay.staging.ttline.com, www.faehre-honnef.de, www.swhl.de, bitwarden.swhl.de, transportticket.staging.ttline.com, speedtest.glasfaser.swhl.de, login-netzplan.swhl.de, booking.ttline.com, stellenangebote.swhl.de, parken.swhl.de, bestellen.glasfaser.swhl.de, webmail.bds-dgv.de, www.bds-dgv.de
Dismissed Targets(0):

2026-07-15_08-10-07 check-hosts status

The attacks attributed to noname057 primarily target websites in Germany, as indicated by the domains associated with various services and organizations. Key sectors affected include transportation, telecommunications, and web services, with notable entities like TT-Line and SWHL being targeted.^{AI generated}
19 targets are under attack, 19 new targets and 0 targets from previous attack
New Targets(19): stellenangebote.swhl.de, kundenportal.swhl.de, www.ttline.com, bestellen.glasfaser.swhl.de, transportticket.staging.ttline.com, bitwarden.swhl.de, testfreight.ttline.com, webmail.bds-dgv.de, www.faehre-honnef.de, pay.ttline.com, login-netzplan.swhl.de, netzplan.swhl.de, pay.staging.ttline.com, transportticket.ttline.com, parken.swhl.de, booking.ttline.com, speedtest.glasfaser.swhl.de, www.swhl.de, www.bds-dgv.de
Targets from prev attack(0):
Dismissed Targets(29): hahn-shipping.de, auth.portofkiel.com, zollagentur.gmbh, www.tkmsgroup.com, remote.frachtcontor.de, www.pwl.de, stex-gmbh.com, matomo.maritimes-cluster.de, analytics.portofkiel.com, agios.portofkiel.com, www.maritimes-cluster.de, www.hellmann.com, www.sartori-berger.de, membership-application.maritimes-cluster.de, portal.limanisupply.com, password.thyssenkrupp.com, limanisupply.com, www.shipserv.com, www.portofkiel.com, analytics.tkmsgroup.com, pasis.portofkiel.com, tw.tkmsgroup.com, mytkms.tkmsgroup.com, www.frachtcontor.de, www.zoll.de, esmz.portofkiel.com, www.zoll-portal.de, minio.pamyra.de, login.thyssenkrupp.com

2026-07-14_13-05-08 check-hosts status

The attacks by noname057 primarily targeted websites in Germany, particularly those related to shipping, logistics, and maritime industries. Key sites affected include those associated with Kiel Port, Thyssenkrupp, and various maritime clusters, indicating a focus on the transportation and logistics sectors within Germany.^{AI generated}
29 targets are under attack, 13 new targets and 16 targets from previous attack
New Targets(13): remote.frachtcontor.de, www.shipserv.com, www.tkmsgroup.com, password.thyssenkrupp.com, matomo.maritimes-cluster.de, tw.tkmsgroup.com, analytics.tkmsgroup.com, www.pwl.de, login.thyssenkrupp.com, www.maritimes-cluster.de, www.frachtcontor.de, membership-application.maritimes-cluster.de, mytkms.tkmsgroup.com
Targets from prev attack(16): www.portofkiel.com, esmz.portofkiel.com, www.zoll-portal.de, analytics.portofkiel.com, www.zoll.de, zollagentur.gmbh, www.sartori-berger.de, pasis.portofkiel.com, stex-gmbh.com, www.hellmann.com, portal.limanisupply.com, hahn-shipping.de, agios.portofkiel.com, limanisupply.com, minio.pamyra.de, auth.portofkiel.com
Dismissed Targets(0):

2026-07-14_08-10-07 check-hosts status

The attacks attributed to noname057 primarily target websites in Germany, with a notable focus on companies involved in logistics, shipping, and port services. Key sites affected include those related to the Port of Kiel and various German logistics firms.^{AI generated}
16 targets are under attack, 12 new targets and 4 targets from previous attack
New Targets(12): www.sartori-berger.de, stex-gmbh.com, www.portofkiel.com, agios.portofkiel.com, limanisupply.com, zollagentur.gmbh, analytics.portofkiel.com, minio.pamyra.de, esmz.portofkiel.com, hahn-shipping.de, pasis.portofkiel.com, auth.portofkiel.com
Targets from prev attack(4): portal.limanisupply.com, www.zoll.de, www.zoll-portal.de, www.hellmann.com
Dismissed Targets(27): lhk-intranet.kiel.de, www.schleswig-holstein.de, www.nah.sh, jobs.kiel.de, stage.stadtwerke-kiel.de, efue.stadtwerke-kiel.de, online-knoellchen.kiel.de, www.stadtwerke-kiel.de, ivu.kvg-kiel.de, evayo.stadtwerke-kiel.de, colorline.de, www.zoll-auktion.de, login.kvg-kiel.de, messenger.kiel.de, www.zoll-karriere.de, traukalender.kiel.de, www.foerde-sparkasse.de, www.kvg-kiel.de, onlineservices.stadtwerke-kiel.de, www.kiel.de, mobiliteam.nah.sh, stadtbuecherei.kiel.de, www.kieler-volksbank.de, anhoerung.kiel.de, www.wraase.de, kundenportal.stadtwerke-kiel.de, refugeecompass-kiel.de

2026-07-14_08-05-07 check-hosts status

The attacks by noname057 primarily targeted websites in Germany, specifically in the region of Schleswig-Holstein. Notable sites include various municipal services, public transport portals, and local banks. The focus appears to be on disrupting local government and utility services, as well as services related to refugee support and community resources.^{AI generated}
31 targets are under attack, 4 new targets and 27 targets from previous attack
New Targets(4): portal.limanisupply.com, www.zoll.de, www.zoll-portal.de, www.hellmann.com
Targets from prev attack(27): lhk-intranet.kiel.de, www.nah.sh, www.schleswig-holstein.de, jobs.kiel.de, stage.stadtwerke-kiel.de, efue.stadtwerke-kiel.de, online-knoellchen.kiel.de, www.stadtwerke-kiel.de, ivu.kvg-kiel.de, evayo.stadtwerke-kiel.de, colorline.de, www.zoll-auktion.de, login.kvg-kiel.de, messenger.kiel.de, www.zoll-karriere.de, traukalender.kiel.de, www.foerde-sparkasse.de, www.kvg-kiel.de, onlineservices.stadtwerke-kiel.de, www.kiel.de, mobiliteam.nah.sh, stadtbuecherei.kiel.de, www.kieler-volksbank.de, anhoerung.kiel.de, www.wraase.de, kundenportal.stadtwerke-kiel.de, refugeecompass-kiel.de
Dismissed Targets(0):

2026-07-13_20-40-08 check-hosts status

The attacks attributed to noname057 primarily target websites in Germany, particularly in the region of Kiel and the state of Schleswig-Holstein. Key sectors affected include public services, transportation, banking, and community resources. The attacks highlight a focus on local government and municipal services, indicating a potential interest in disrupting essential services and accessing sensitive information.^{AI generated}
27 targets are under attack, 1 new targets and 26 targets from previous attack
New Targets(1): jobs.kiel.de
Targets from prev attack(26): onlineservices.stadtwerke-kiel.de, lhk-intranet.kiel.de, kundenportal.stadtwerke-kiel.de, www.zoll-auktion.de, traukalender.kiel.de, www.foerde-sparkasse.de, www.stadtwerke-kiel.de, www.nah.sh, stadtbuecherei.kiel.de, refugeecompass-kiel.de, stage.stadtwerke-kiel.de, www.kvg-kiel.de, mobiliteam.nah.sh, www.schleswig-holstein.de, evayo.stadtwerke-kiel.de, messenger.kiel.de, ivu.kvg-kiel.de, online-knoellchen.kiel.de, login.kvg-kiel.de, www.kieler-volksbank.de, www.wraase.de, www.zoll-karriere.de, colorline.de, anhoerung.kiel.de, efue.stadtwerke-kiel.de, www.kiel.de
Dismissed Targets(0):

2026-07-13_20-35-08 check-hosts status

The attacks attributed to noname057 primarily target websites in Germany, particularly in the region of Kiel and the broader Schleswig-Holstein area. Key sectors affected include public services, banking, and transportation, with notable sites such as Stadtwerke Kiel, various municipal services, and local financial institutions.^{AI generated}
26 targets are under attack, 0 new targets and 26 targets from previous attack
New Targets(0):
Targets from prev attack(26): onlineservices.stadtwerke-kiel.de, lhk-intranet.kiel.de, kundenportal.stadtwerke-kiel.de, www.zoll-auktion.de, traukalender.kiel.de, www.foerde-sparkasse.de, www.stadtwerke-kiel.de, www.nah.sh, stadtbuecherei.kiel.de, refugeecompass-kiel.de, stage.stadtwerke-kiel.de, www.kvg-kiel.de, mobiliteam.nah.sh, www.schleswig-holstein.de, evayo.stadtwerke-kiel.de, messenger.kiel.de, ivu.kvg-kiel.de, online-knoellchen.kiel.de, login.kvg-kiel.de, www.kieler-volksbank.de, www.wraase.de, www.zoll-karriere.de, colorline.de, anhoerung.kiel.de, efue.stadtwerke-kiel.de, www.kiel.de
Dismissed Targets(1): jobs.kiel.de

2026-07-13_20-20-10 check-hosts status

The attacks attributed to noname057 primarily target websites in Germany, particularly in the Kiel region. Key sectors affected include transportation, banking, and public services, with notable sites such as mobiliteam.nah.sh, various Kiel municipal services, and local financial institutions. This indicates a concentrated effort against critical infrastructure and public services in Germany.^{AI generated}
27 targets are under attack, 1 new targets and 26 targets from previous attack
New Targets(1): www.nah.sh
Targets from prev attack(26): mobiliteam.nah.sh, lhk-intranet.kiel.de, messenger.kiel.de, jobs.kiel.de, www.wraase.de, www.kvg-kiel.de, online-knoellchen.kiel.de, www.kieler-volksbank.de, www.zoll-karriere.de, www.foerde-sparkasse.de, ivu.kvg-kiel.de, login.kvg-kiel.de, www.schleswig-holstein.de, refugeecompass-kiel.de, www.stadtwerke-kiel.de, www.zoll-auktion.de, colorline.de, stage.stadtwerke-kiel.de, efue.stadtwerke-kiel.de, traukalender.kiel.de, stadtbuecherei.kiel.de, kundenportal.stadtwerke-kiel.de, anhoerung.kiel.de, onlineservices.stadtwerke-kiel.de, www.kiel.de, evayo.stadtwerke-kiel.de
Dismissed Targets(0):

2026-07-13_20-15-12 check-hosts status

The sites attacked by noname057 primarily belong to Germany, specifically targeting various local institutions and services in the Kiel area. This includes websites related to transportation, banking, public services, and job listings, indicating a focus on regional infrastructure and community resources.^{AI generated}
26 targets are under attack, 0 new targets and 26 targets from previous attack
New Targets(0):
Targets from prev attack(26): mobiliteam.nah.sh, lhk-intranet.kiel.de, messenger.kiel.de, jobs.kiel.de, www.wraase.de, www.kvg-kiel.de, online-knoellchen.kiel.de, www.kieler-volksbank.de, www.zoll-karriere.de, www.foerde-sparkasse.de, ivu.kvg-kiel.de, login.kvg-kiel.de, www.schleswig-holstein.de, refugeecompass-kiel.de, www.stadtwerke-kiel.de, www.zoll-auktion.de, colorline.de, stage.stadtwerke-kiel.de, efue.stadtwerke-kiel.de, traukalender.kiel.de, stadtbuecherei.kiel.de, kundenportal.stadtwerke-kiel.de, anhoerung.kiel.de, onlineservices.stadtwerke-kiel.de, www.kiel.de, evayo.stadtwerke-kiel.de
Dismissed Targets(1): www.nah.sh

2026-07-13_12-25-08 check-hosts status

The attacks by noname057 primarily targeted websites in Germany, specifically in the Kiel region. Key sectors affected include local government, public services, banking, and transportation. The attacks highlight vulnerabilities in municipal and regional online services, impacting users in various aspects of daily life.^{AI generated}
27 targets are under attack, 1 new targets and 26 targets from previous attack
New Targets(1): www.kieler-volksbank.de
Targets from prev attack(26): stadtbuecherei.kiel.de, online-knoellchen.kiel.de, www.foerde-sparkasse.de, refugeecompass-kiel.de, login.kvg-kiel.de, www.zoll-auktion.de, www.kiel.de, anhoerung.kiel.de, lhk-intranet.kiel.de, traukalender.kiel.de, evayo.stadtwerke-kiel.de, colorline.de, stage.stadtwerke-kiel.de, www.kvg-kiel.de, jobs.kiel.de, www.zoll-karriere.de, messenger.kiel.de, www.schleswig-holstein.de, mobiliteam.nah.sh, efue.stadtwerke-kiel.de, www.wraase.de, ivu.kvg-kiel.de, www.stadtwerke-kiel.de, www.nah.sh, kundenportal.stadtwerke-kiel.de, onlineservices.stadtwerke-kiel.de
Dismissed Targets(0):

2026-07-13_12-20-07 check-hosts status

The attacks attributed to noname057 primarily target websites in Germany, specifically in the region of Kiel and Schleswig-Holstein. The affected sites include various local government, transportation, and service-related platforms, indicating a focus on regional infrastructure and public services.^{AI generated}
26 targets are under attack, 1 new targets and 25 targets from previous attack
New Targets(1): www.foerde-sparkasse.de
Targets from prev attack(25): ivu.kvg-kiel.de, online-knoellchen.kiel.de, anhoerung.kiel.de, messenger.kiel.de, jobs.kiel.de, www.stadtwerke-kiel.de, www.wraase.de, colorline.de, www.zoll-auktion.de, www.kiel.de, evayo.stadtwerke-kiel.de, www.nah.sh, stadtbuecherei.kiel.de, mobiliteam.nah.sh, www.zoll-karriere.de, refugeecompass-kiel.de, www.schleswig-holstein.de, lhk-intranet.kiel.de, login.kvg-kiel.de, onlineservices.stadtwerke-kiel.de, traukalender.kiel.de, stage.stadtwerke-kiel.de, www.kvg-kiel.de, efue.stadtwerke-kiel.de, kundenportal.stadtwerke-kiel.de
Dismissed Targets(0):

2026-07-13_12-05-32 check-hosts status

The attacks by noname057 primarily targeted websites in Germany, particularly in the state of Schleswig-Holstein. Key sites affected include various local government and public service portals, as well as transportation and job-related platforms. The attacks highlight a focus on regional infrastructure and services within this area.^{AI generated}
25 targets are under attack, 7 new targets and 18 targets from previous attack
New Targets(7): www.zoll-karriere.de, www.zoll-auktion.de, www.schleswig-holstein.de, colorline.de, ivu.kvg-kiel.de, www.kvg-kiel.de, login.kvg-kiel.de
Targets from prev attack(18): evayo.stadtwerke-kiel.de, messenger.kiel.de, refugeecompass-kiel.de, jobs.kiel.de, traukalender.kiel.de, stage.stadtwerke-kiel.de, onlineservices.stadtwerke-kiel.de, www.wraase.de, www.nah.sh, online-knoellchen.kiel.de, www.stadtwerke-kiel.de, stadtbuecherei.kiel.de, efue.stadtwerke-kiel.de, www.kiel.de, anhoerung.kiel.de, kundenportal.stadtwerke-kiel.de, mobiliteam.nah.sh, lhk-intranet.kiel.de
Dismissed Targets(0):

2026-07-13_10-05-09 check-hosts status

The attacks attributed to noname057 primarily target websites in Germany, specifically in the city of Kiel. The affected sites include various municipal services, public libraries, and public transportation platforms, indicating a focus on local government and community infrastructure.^{AI generated}
18 targets are under attack, 0 new targets and 18 targets from previous attack
New Targets(0):
Targets from prev attack(18): stage.stadtwerke-kiel.de, onlineservices.stadtwerke-kiel.de, www.kiel.de, stadtbuecherei.kiel.de, traukalender.kiel.de, refugeecompass-kiel.de, www.nah.sh, messenger.kiel.de, mobiliteam.nah.sh, anhoerung.kiel.de, efue.stadtwerke-kiel.de, www.wraase.de, evayo.stadtwerke-kiel.de, kundenportal.stadtwerke-kiel.de, lhk-intranet.kiel.de, online-knoellchen.kiel.de, jobs.kiel.de, www.stadtwerke-kiel.de
Dismissed Targets(6): doc.bkport.com, v.bkport.com, inform.omtp.com.ua, erouter.bkport.com, omtp.com.ua, www.bkport.com

2026-07-13_08-05-11 check-hosts status

The attacks attributed to noname057 primarily targeted websites in Germany, particularly in the Kiel region. Key sites affected include those associated with local utilities, municipal services, and public transportation. The attacks also extended to Ukrainian domains, indicating a broader geographical impact.^{AI generated}
24 targets are under attack, 18 new targets and 6 targets from previous attack
New Targets(18): evayo.stadtwerke-kiel.de, refugeecompass-kiel.de, www.wraase.de, lhk-intranet.kiel.de, www.nah.sh, stage.stadtwerke-kiel.de, mobiliteam.nah.sh, messenger.kiel.de, online-knoellchen.kiel.de, stadtbuecherei.kiel.de, anhoerung.kiel.de, efue.stadtwerke-kiel.de, jobs.kiel.de, onlineservices.stadtwerke-kiel.de, traukalender.kiel.de, kundenportal.stadtwerke-kiel.de, www.stadtwerke-kiel.de, www.kiel.de
Targets from prev attack(6): omtp.com.ua, doc.bkport.com, v.bkport.com, erouter.bkport.com, inform.omtp.com.ua, www.bkport.com
Dismissed Targets(12): support.cosinex.de, www.evergabe.nrw.de, beteiligungsportal.hessen.de, www.quotrix.de, www.l.de, www.vergabe24.de, www.boerse-duesseldorf.de, auftraege.bayern.de, www.evergabe-mv.de, www.boersenag.de, www.saalekreis.de, www.elster.de

2026-07-12_12-05-07 check-hosts status

The attacks attributed to noname057 primarily target websites in Germany and Ukraine. Key sectors affected include finance, public services, and procurement. Notable sites include various regional government portals and financial services, indicating a focus on critical infrastructure within these countries.^{AI generated}
18 targets are under attack, 3 new targets and 15 targets from previous attack
New Targets(3): www.vergabe24.de, www.elster.de, auftraege.bayern.de
Targets from prev attack(15): www.boersenag.de, www.boerse-duesseldorf.de, doc.bkport.com, www.saalekreis.de, erouter.bkport.com, inform.omtp.com.ua, www.evergabe-mv.de, www.evergabe.nrw.de, www.l.de, beteiligungsportal.hessen.de, www.quotrix.de, v.bkport.com, www.bkport.com, support.cosinex.de, omtp.com.ua
Dismissed Targets(0):

2026-07-12_08-05-07 check-hosts status

The attacks attributed to noname057 primarily targeted websites in Germany, with several sites linked to governmental and financial services. Additionally, there were attacks on Ukrainian sites, indicating a broader focus on both German and Ukrainian entities.^{AI generated}
15 targets are under attack, 9 new targets and 6 targets from previous attack
New Targets(9): www.evergabe.nrw.de, www.evergabe-mv.de, www.saalekreis.de, www.boerse-duesseldorf.de, www.l.de, www.quotrix.de, www.boersenag.de, beteiligungsportal.hessen.de, support.cosinex.de
Targets from prev attack(6): www.bkport.com, doc.bkport.com, v.bkport.com, omtp.com.ua, inform.omtp.com.ua, erouter.bkport.com
Dismissed Targets(14): stiftung-moritzburg.de, www.kreis-oh.de, www.gladbeck.de, www.saarvv.de, www.vg-arendsee-kalbe.de, www.sbahn-hannover.de, www.nasa.de, www.vms.de, www.bode-holtemme.de, www.erfurt.de, www.bvl.de, www.bkms-system.net, frontend-api.sbahn-hannover.de, www.turgranada.es

2026-07-11_08-10-10 check-hosts status

The attacks attributed to noname057 primarily target websites in Germany, with notable mentions including government and transportation sites such as NASA's German domain, various local municipalities, and public transport services. Other affected countries include Spain, with a site related to tourism, and Ukraine, which has seen attacks on its information platforms.^{AI generated}
20 targets are under attack, 13 new targets and 7 targets from previous attack
New Targets(13): www.nasa.de, www.bkms-system.net, frontend-api.sbahn-hannover.de, www.kreis-oh.de, www.erfurt.de, www.vms.de, www.vg-arendsee-kalbe.de, stiftung-moritzburg.de, www.bode-holtemme.de, www.bvl.de, www.sbahn-hannover.de, www.saarvv.de, www.gladbeck.de
Targets from prev attack(7): omtp.com.ua, www.bkport.com, inform.omtp.com.ua, v.bkport.com, www.turgranada.es, erouter.bkport.com, doc.bkport.com
Dismissed Targets(35): www.transportepublico.es, www.poderjudicial.es, administracion.gob.es, representantesaduaneros.com, sede.coruna.gal, www.tecnove.com, digitales.hessen.de, www.policia.es, www.aecarretera.com, www.lzbw.de, vergabemarktplatz.brandenburg.de, www.service-bw.de, www.evergabe.sachsen-anhalt.de, www.interior.gob.es, www.ccn-cert.cni.es, www.camaramadrid.es, rns.ccn-cert.cni.es, www.vergabe.rlp.de, www.bundesanzeiger.de, www.parcan.es, id.coruna.gal, www.vergabe.bremen.de, www.cni.es, www.tramalacant.es, www.vergabe.schleswig-holstein.de, www.casareal.es, energia.imdea.org, bieterportal.noncd.db.de, www.deutsches-ausschreibungsblatt.de, dashboard.digitale-verwaltung.de, www.coruna.gal, sede.guardiacivil.gob.es, login.poderjudicial.es, www.legebiltzarra.eus, www.puertos.es

2026-07-11_08-05-08 check-hosts status

The attacks attributed to noname057 primarily target websites in Spain and Germany. Key sectors affected include public transport, judicial administration, and governmental services. Other countries involved in the attacks include Ukraine and Brazil, with various sites related to public procurement and digital administration being compromised.^{AI generated}
42 targets are under attack, 8 new targets and 34 targets from previous attack
New Targets(8): www.poderjudicial.es, www.bkport.com, dashboard.digitale-verwaltung.de, www.vergabe.bremen.de, v.bkport.com, login.poderjudicial.es, erouter.bkport.com, doc.bkport.com
Targets from prev attack(34): www.transportepublico.es, administracion.gob.es, representantesaduaneros.com, sede.coruna.gal, www.tecnove.com, digitales.hessen.de, www.policia.es, www.aecarretera.com, www.lzbw.de, inform.omtp.com.ua, vergabemarktplatz.brandenburg.de, www.service-bw.de, www.evergabe.sachsen-anhalt.de, www.interior.gob.es, www.ccn-cert.cni.es, www.camaramadrid.es, rns.ccn-cert.cni.es, www.vergabe.rlp.de, www.bundesanzeiger.de, www.parcan.es, id.coruna.gal, www.cni.es, www.tramalacant.es, www.turgranada.es, www.casareal.es, energia.imdea.org, bieterportal.noncd.db.de, omtp.com.ua, www.deutsches-ausschreibungsblatt.de, www.coruna.gal, sede.guardiacivil.gob.es, www.vergabe.schleswig-holstein.de, www.legebiltzarra.eus, www.puertos.es
Dismissed Targets(0):

2026-07-11_08-00-12 check-hosts status

The attacks attributed to noname057 primarily target websites in Germany, Spain, and Ukraine. Key sectors affected include public administration, transportation, and various governmental agencies. The attacks demonstrate a focus on disrupting services and accessing sensitive information within these countries.^{AI generated}
34 targets are under attack, 0 new targets and 34 targets from previous attack
New Targets(0):
Targets from prev attack(34): www.tecnove.com, www.deutsches-ausschreibungsblatt.de, vergabemarktplatz.brandenburg.de, www.vergabe.schleswig-holstein.de, www.ccn-cert.cni.es, www.transportepublico.es, www.legebiltzarra.eus, www.casareal.es, www.aecarretera.com, www.cni.es, www.evergabe.sachsen-anhalt.de, www.camaramadrid.es, www.bundesanzeiger.de, www.puertos.es, bieterportal.noncd.db.de, www.turgranada.es, rns.ccn-cert.cni.es, sede.guardiacivil.gob.es, inform.omtp.com.ua, digitales.hessen.de, sede.coruna.gal, administracion.gob.es, www.parcan.es, www.tramalacant.es, www.coruna.gal, www.service-bw.de, www.interior.gob.es, www.policia.es, www.lzbw.de, energia.imdea.org, representantesaduaneros.com, id.coruna.gal, omtp.com.ua, www.vergabe.rlp.de
Dismissed Targets(8): erouter.bkport.com, doc.bkport.com, dashboard.digitale-verwaltung.de, v.bkport.com, www.vergabe.bremen.de, www.bkport.com, login.poderjudicial.es, www.poderjudicial.es

2026-07-11_07-05-09 check-hosts status

The attacks by noname057 primarily targeted websites in Spain, Germany, and Ukraine. Notable sites include various government and public service portals, such as those related to civil guard, public administration, and judicial systems in Spain. In Germany, the attacks affected platforms involved in public procurement and administrative functions. Additionally, Ukrainian websites related to public transport and other services were also compromised.^{AI generated}
42 targets are under attack, 0 new targets and 42 targets from previous attack
New Targets(0):
Targets from prev attack(42): www.turgranada.es, www.tramalacant.es, vergabemarktplatz.brandenburg.de, sede.guardiacivil.gob.es, www.bkport.com, www.camaramadrid.es, www.legebiltzarra.eus, www.vergabe.bremen.de, id.coruna.gal, omtp.com.ua, www.coruna.gal, www.ccn-cert.cni.es, www.bundesanzeiger.de, www.vergabe.schleswig-holstein.de, www.service-bw.de, sede.coruna.gal, energia.imdea.org, www.casareal.es, www.evergabe.sachsen-anhalt.de, www.policia.es, bieterportal.noncd.db.de, administracion.gob.es, representantesaduaneros.com, v.bkport.com, www.puertos.es, erouter.bkport.com, www.tecnove.com, www.cni.es, inform.omtp.com.ua, www.interior.gob.es, www.transportepublico.es, doc.bkport.com, www.vergabe.rlp.de, www.deutsches-ausschreibungsblatt.de, www.parcan.es, www.lzbw.de, digitales.hessen.de, rns.ccn-cert.cni.es, www.poderjudicial.es, login.poderjudicial.es, www.aecarretera.com, dashboard.digitale-verwaltung.de
Dismissed Targets(1): metropolitanogranada.es

2026-07-11_05-50-10 check-hosts status

NoName057(16) has targeted various websites across multiple countries, primarily focusing on Spain and Germany. The attacks include Spanish governmental and regional sites such as www.policia.es and www.interior.gob.es, as well as German platforms like www.service-bw.de and www.deutsches-ausschreibungsblatt.de. Other affected sites span across Ukraine and include omtp.com.ua. The attacks highlight a significant focus on public sector and administrative websites in these nations.^{AI generated}
43 targets are under attack, 1 new targets and 42 targets from previous attack
New Targets(1): metropolitanogranada.es
Targets from prev attack(42): www.tramalacant.es, erouter.bkport.com, www.cni.es, www.service-bw.de, www.policia.es, www.bkport.com, rns.ccn-cert.cni.es, www.poderjudicial.es, energia.imdea.org, www.transportepublico.es, www.deutsches-ausschreibungsblatt.de, www.interior.gob.es, login.poderjudicial.es, v.bkport.com, www.tecnove.com, www.coruna.gal, omtp.com.ua, sede.guardiacivil.gob.es, www.evergabe.sachsen-anhalt.de, bieterportal.noncd.db.de, id.coruna.gal, www.puertos.es, www.ccn-cert.cni.es, www.lzbw.de, vergabemarktplatz.brandenburg.de, www.aecarretera.com, www.camaramadrid.es, administracion.gob.es, www.vergabe.bremen.de, dashboard.digitale-verwaltung.de, www.legebiltzarra.eus, www.parcan.es, www.vergabe.schleswig-holstein.de, sede.coruna.gal, doc.bkport.com, www.casareal.es, www.turgranada.es, www.vergabe.rlp.de, inform.omtp.com.ua, www.bundesanzeiger.de, representantesaduaneros.com, digitales.hessen.de
Dismissed Targets(0):

2026-07-11_05-45-14 check-hosts status

The attacks attributed to noname057 primarily targeted websites in Spain and Germany, with significant focus on government and public service sites. Notable countries under attack include Spain, where various government and judicial sites were compromised, and Germany, which saw attacks on public administration and procurement platforms. Additionally, some Ukrainian sites were also affected.^{AI generated}
42 targets are under attack, 0 new targets and 42 targets from previous attack
New Targets(0):
Targets from prev attack(42): www.tramalacant.es, erouter.bkport.com, www.cni.es, www.service-bw.de, www.policia.es, www.bkport.com, rns.ccn-cert.cni.es, www.poderjudicial.es, energia.imdea.org, www.transportepublico.es, www.deutsches-ausschreibungsblatt.de, www.interior.gob.es, login.poderjudicial.es, v.bkport.com, www.tecnove.com, www.coruna.gal, omtp.com.ua, sede.guardiacivil.gob.es, www.evergabe.sachsen-anhalt.de, bieterportal.noncd.db.de, id.coruna.gal, www.puertos.es, www.ccn-cert.cni.es, www.lzbw.de, vergabemarktplatz.brandenburg.de, www.aecarretera.com, www.camaramadrid.es, administracion.gob.es, www.vergabe.bremen.de, dashboard.digitale-verwaltung.de, www.legebiltzarra.eus, www.parcan.es, www.vergabe.schleswig-holstein.de, sede.coruna.gal, doc.bkport.com, www.casareal.es, www.turgranada.es, www.vergabe.rlp.de, inform.omtp.com.ua, www.bundesanzeiger.de, representantesaduaneros.com, digitales.hessen.de
Dismissed Targets(1): metropolitanogranada.es

2026-07-11_05-25-11 check-hosts status

The attacks by noname057 primarily targeted websites in Germany and Spain. Key sectors affected include government portals, public administration, and legal institutions. Notable sites include various regional and national government websites in Spain, such as www.interior.gob.es and www.poderjudicial.es, alongside numerous German sites like www.vergabe.rlp.de and www.bundesanzeiger.de.^{AI generated}
43 targets are under attack, 2 new targets and 41 targets from previous attack
New Targets(2): www.transportepublico.es, www.legebiltzarra.eus
Targets from prev attack(41): www.vergabe.rlp.de, www.tramalacant.es, www.policia.es, www.coruna.gal, www.interior.gob.es, www.casareal.es, www.ccn-cert.cni.es, www.poderjudicial.es, www.cni.es, www.vergabe.bremen.de, omtp.com.ua, www.vergabe.schleswig-holstein.de, www.deutsches-ausschreibungsblatt.de, www.lzbw.de, www.service-bw.de, representantesaduaneros.com, www.bkport.com, www.aecarretera.com, sede.guardiacivil.gob.es, www.parcan.es, erouter.bkport.com, inform.omtp.com.ua, digitales.hessen.de, sede.coruna.gal, v.bkport.com, www.bundesanzeiger.de, www.camaramadrid.es, www.evergabe.sachsen-anhalt.de, doc.bkport.com, administracion.gob.es, www.turgranada.es, www.puertos.es, id.coruna.gal, login.poderjudicial.es, vergabemarktplatz.brandenburg.de, rns.ccn-cert.cni.es, energia.imdea.org, bieterportal.noncd.db.de, www.tecnove.com, metropolitanogranada.es, dashboard.digitale-verwaltung.de
Dismissed Targets(0):

2026-07-11_05-20-12 check-hosts status

The attacks attributed to noname057 primarily target websites in Germany, Spain, and Ukraine. Key sectors affected include government portals, public procurement platforms, and law enforcement sites. Notable examples include the Spanish Guardia Civil and various regional government sites in Germany, reflecting a focus on critical infrastructure and public services in these countries.^{AI generated}
41 targets are under attack, 0 new targets and 41 targets from previous attack
New Targets(0):
Targets from prev attack(41): bieterportal.noncd.db.de, www.vergabe.bremen.de, v.bkport.com, www.tecnove.com, sede.guardiacivil.gob.es, rns.ccn-cert.cni.es, www.aecarretera.com, inform.omtp.com.ua, www.camaramadrid.es, id.coruna.gal, erouter.bkport.com, www.parcan.es, www.casareal.es, metropolitanogranada.es, www.service-bw.de, omtp.com.ua, www.bkport.com, www.cni.es, www.interior.gob.es, www.policia.es, representantesaduaneros.com, www.tramalacant.es, www.turgranada.es, login.poderjudicial.es, digitales.hessen.de, www.coruna.gal, www.deutsches-ausschreibungsblatt.de, doc.bkport.com, www.vergabe.rlp.de, www.evergabe.sachsen-anhalt.de, www.ccn-cert.cni.es, dashboard.digitale-verwaltung.de, www.poderjudicial.es, administracion.gob.es, sede.coruna.gal, energia.imdea.org, www.bundesanzeiger.de, www.vergabe.schleswig-holstein.de, www.puertos.es, www.lzbw.de, vergabemarktplatz.brandenburg.de
Dismissed Targets(2): www.legebiltzarra.eus, www.transportepublico.es

2026-07-11_03-15-08 check-hosts status

The attacks by noname057 primarily target websites in Spain, Germany, and Ukraine. Key sectors affected include energy, public administration, and transportation. Notable sites include governmental platforms, legal institutions, and public service portals, indicating a focus on critical infrastructure and public services in these countries.^{AI generated}
43 targets are under attack, 2 new targets and 41 targets from previous attack
New Targets(2): www.casareal.es, sede.guardiacivil.gob.es
Targets from prev attack(41): energia.imdea.org, login.poderjudicial.es, www.service-bw.de, omtp.com.ua, www.cni.es, www.poderjudicial.es, administracion.gob.es, www.legebiltzarra.eus, erouter.bkport.com, www.transportepublico.es, www.vergabe.schleswig-holstein.de, id.coruna.gal, inform.omtp.com.ua, www.interior.gob.es, www.vergabe.rlp.de, www.coruna.gal, www.deutsches-ausschreibungsblatt.de, sede.coruna.gal, vergabemarktplatz.brandenburg.de, www.evergabe.sachsen-anhalt.de, www.puertos.es, www.parcan.es, v.bkport.com, www.camaramadrid.es, metropolitanogranada.es, dashboard.digitale-verwaltung.de, rns.ccn-cert.cni.es, www.bkport.com, www.bundesanzeiger.de, www.ccn-cert.cni.es, doc.bkport.com, digitales.hessen.de, www.tecnove.com, www.turgranada.es, representantesaduaneros.com, bieterportal.noncd.db.de, www.tramalacant.es, www.aecarretera.com, www.policia.es, www.lzbw.de, www.vergabe.bremen.de
Dismissed Targets(0):

2026-07-11_03-10-09 check-hosts status

The attacks by noname057 primarily targeted websites in Spain and Germany. Key sectors affected include government institutions, judicial systems, and public services. Notable sites include various regional government portals and public procurement platforms, indicating a focus on critical infrastructure and public administration in these countries.^{AI generated}
41 targets are under attack, 0 new targets and 41 targets from previous attack
New Targets(0):
Targets from prev attack(41): www.camaramadrid.es, www.poderjudicial.es, www.evergabe.sachsen-anhalt.de, administracion.gob.es, representantesaduaneros.com, www.lzbw.de, login.poderjudicial.es, www.vergabe.bremen.de, v.bkport.com, www.turgranada.es, www.bkport.com, digitales.hessen.de, omtp.com.ua, www.coruna.gal, www.vergabe.schleswig-holstein.de, www.aecarretera.com, doc.bkport.com, www.ccn-cert.cni.es, rns.ccn-cert.cni.es, sede.coruna.gal, vergabemarktplatz.brandenburg.de, dashboard.digitale-verwaltung.de, inform.omtp.com.ua, www.bundesanzeiger.de, www.service-bw.de, www.cni.es, www.parcan.es, www.transportepublico.es, www.vergabe.rlp.de, www.legebiltzarra.eus, www.deutsches-ausschreibungsblatt.de, id.coruna.gal, www.puertos.es, www.policia.es, erouter.bkport.com, www.tramalacant.es, metropolitanogranada.es, www.interior.gob.es, www.tecnove.com, bieterportal.noncd.db.de, energia.imdea.org
Dismissed Targets(2): www.casareal.es, sede.guardiacivil.gob.es

2026-07-10_23-25-10 check-hosts status

The attacks attributed to noname057 primarily target websites in Spain and Germany. Key sectors affected include government, judiciary, and public services. Notable sites attacked include various Spanish government portals, such as the Ministry of Interior and the Judiciary, as well as German public administration platforms. Other impacted countries include Ukraine, with specific sites related to public services and administration also being targeted.^{AI generated}
43 targets are under attack, 6 new targets and 37 targets from previous attack
New Targets(6): rns.ccn-cert.cni.es, omtp.com.ua, www.coruna.gal, www.lzbw.de, www.aecarretera.com, www.tecnove.com
Targets from prev attack(37): www.interior.gob.es, login.poderjudicial.es, www.camaramadrid.es, www.puertos.es, www.vergabe.schleswig-holstein.de, www.cni.es, www.poderjudicial.es, www.bundesanzeiger.de, administracion.gob.es, digitales.hessen.de, erouter.bkport.com, representantesaduaneros.com, sede.coruna.gal, www.turgranada.es, bieterportal.noncd.db.de, www.vergabe.rlp.de, www.service-bw.de, www.transportepublico.es, www.evergabe.sachsen-anhalt.de, www.legebiltzarra.eus, metropolitanogranada.es, energia.imdea.org, v.bkport.com, doc.bkport.com, www.policia.es, www.vergabe.bremen.de, www.casareal.es, id.coruna.gal, inform.omtp.com.ua, www.deutsches-ausschreibungsblatt.de, sede.guardiacivil.gob.es, www.bkport.com, www.ccn-cert.cni.es, www.tramalacant.es, www.parcan.es, vergabemarktplatz.brandenburg.de, dashboard.digitale-verwaltung.de
Dismissed Targets(0):

2026-07-10_23-20-28 check-hosts status

The attacks attributed to noname057 primarily target websites in Spain and Germany, with a focus on government and public service domains. Key sites affected include various regional government portals, judicial systems, and public transport services. Additionally, there are attacks on educational and organizational platforms in these countries, highlighting a concentrated effort on critical infrastructure and public administration.^{AI generated}
37 targets are under attack, 0 new targets and 37 targets from previous attack
New Targets(0):
Targets from prev attack(37): www.camaramadrid.es, v.bkport.com, www.legebiltzarra.eus, doc.bkport.com, metropolitanogranada.es, representantesaduaneros.com, digitales.hessen.de, www.vergabe.rlp.de, www.deutsches-ausschreibungsblatt.de, energia.imdea.org, dashboard.digitale-verwaltung.de, www.interior.gob.es, www.transportepublico.es, www.bkport.com, www.poderjudicial.es, erouter.bkport.com, administracion.gob.es, sede.guardiacivil.gob.es, inform.omtp.com.ua, www.bundesanzeiger.de, www.evergabe.sachsen-anhalt.de, www.policia.es, bieterportal.noncd.db.de, www.ccn-cert.cni.es, www.service-bw.de, www.vergabe.schleswig-holstein.de, www.vergabe.bremen.de, www.cni.es, sede.coruna.gal, www.puertos.es, login.poderjudicial.es, www.parcan.es, www.tramalacant.es, id.coruna.gal, www.turgranada.es, www.casareal.es, vergabemarktplatz.brandenburg.de
Dismissed Targets(6): rns.ccn-cert.cni.es, www.lzbw.de, www.tecnove.com, omtp.com.ua, www.aecarretera.com, www.coruna.gal

2026-07-10_22-10-07 check-hosts status

The attacks by noname057 predominantly target websites in Spain and Germany. Key sectors affected include government, public services, and transportation. Spain is particularly impacted with numerous local government and administrative sites being targeted, while Germany sees attacks on various public procurement and administrative platforms. Other countries like Ukraine are also represented, indicating a broader focus on European entities.^{AI generated}
43 targets are under attack, 1 new targets and 42 targets from previous attack
New Targets(1): omtp.com.ua
Targets from prev attack(42): www.cni.es, id.coruna.gal, www.lzbw.de, www.policia.es, login.poderjudicial.es, digitales.hessen.de, www.deutsches-ausschreibungsblatt.de, www.transportepublico.es, v.bkport.com, www.camaramadrid.es, www.turgranada.es, sede.guardiacivil.gob.es, rns.ccn-cert.cni.es, www.ccn-cert.cni.es, www.coruna.gal, bieterportal.noncd.db.de, www.bundesanzeiger.de, www.evergabe.sachsen-anhalt.de, www.legebiltzarra.eus, doc.bkport.com, representantesaduaneros.com, www.bkport.com, www.casareal.es, erouter.bkport.com, www.service-bw.de, www.vergabe.rlp.de, inform.omtp.com.ua, www.parcan.es, www.tramalacant.es, www.aecarretera.com, www.puertos.es, energia.imdea.org, dashboard.digitale-verwaltung.de, administracion.gob.es, www.tecnove.com, www.poderjudicial.es, sede.coruna.gal, vergabemarktplatz.brandenburg.de, metropolitanogranada.es, www.interior.gob.es, www.vergabe.bremen.de, www.vergabe.schleswig-holstein.de
Dismissed Targets(0):