#	domain	network	attack type

2026-11-15_21-40-06 check-hosts status

The sites attacked by noname057(16) include various organizations primarily located in Spain. The main countries under attack are Spain, as evidenced by the presence of multiple sites related to Sevilla and Euskadi. The targeted websites range from local government portals to private companies, indicating a focus on both public and private sectors within the region.^{AI generated}
9 targets are under attack, 3 new targets and 6 targets from previous attack
New Targets(3): feedback.lamaignere.com, clientes.lamaignere.com, clientes.correosexpress.com
Targets from prev attack(6): pgics.sevilla.org, wiferta.sevilla.org, eportal.aernnova.com, www.euskadi.eus, core-pgics.sevilla.org, www.metro-sevilla.es
Dismissed Targets(0):

2026-11-15_21-36-08 check-hosts status

The sites attacked by noname057 include various organizations primarily located in Spain. Key targets are associated with the Basque government, public services in Seville, and a transportation network in the region. The main countries under attack are Spain, with a focus on local governmental and public infrastructure websites.^{AI generated}
6 targets are under attack, 6 new targets and 0 targets from previous attack
New Targets(6): www.euskadi.eus, www.metro-sevilla.es, core-pgics.sevilla.org, pgics.sevilla.org, eportal.aernnova.com, wiferta.sevilla.org
Targets from prev attack(0):
Dismissed Targets(0):

2026-11-15_07-04-17 check-hosts status

Noname057(16) has targeted various websites across multiple countries, primarily focusing on sectors such as government, education, and technology. The main countries affected by these attacks include the United States, Canada, and several European nations. The group's activities highlight a growing trend in cyber threats aimed at critical infrastructure and public services.^{AI generated}
0 targets are under attack, 0 new targets and 0 targets from previous attack
New Targets(0):
Targets from prev attack(0):
Dismissed Targets(19): www.fundacionnaturgy.org, sede.sevilla.org, redalsa.com, www.transgesa.es, eme-es.com, www.grupoica.com, www.sevilla.org, www.globalpower-generation.com, emtre.es, sevitrade.com, www.elcasco1920.com, www.ufd.es, sevillacruiseport.com, www.sepi.es, www.boluda.com.es, transparencia.puertodesevilla.com, www.toledo.es, www.puertodesevilla.com, www.apc.es

2026-11-14_07-08-08 check-hosts status

The attacks by noname057 primarily targeted websites in Spain. Notable sites include those associated with local government, energy, and transportation sectors, reflecting a focus on critical infrastructure and public services.^{AI generated}
19 targets are under attack, 0 new targets and 19 targets from previous attack
New Targets(0):
Targets from prev attack(19): sede.sevilla.org, www.apc.es, transparencia.puertodesevilla.com, www.fundacionnaturgy.org, www.grupoica.com, www.elcasco1920.com, www.ufd.es, www.transgesa.es, emtre.es, sevillacruiseport.com, eme-es.com, redalsa.com, sevitrade.com, www.toledo.es, www.globalpower-generation.com, www.sevilla.org, www.boluda.com.es, www.sepi.es, www.puertodesevilla.com
Dismissed Targets(1): www.gencat.cat

2026-11-14_07-02-10 check-hosts status

The attacks by noname057 primarily target sites in Spain, with a focus on various sectors including government, energy, and tourism. Notable cities under attack include Sevilla and Toledo, and several organizations involved in environmental and infrastructure services have also been impacted.^{AI generated}
20 targets are under attack, 19 new targets and 1 targets from previous attack
New Targets(19): sede.sevilla.org, www.apc.es, transparencia.puertodesevilla.com, www.fundacionnaturgy.org, www.grupoica.com, www.elcasco1920.com, www.ufd.es, www.transgesa.es, emtre.es, sevillacruiseport.com, eme-es.com, redalsa.com, sevitrade.com, www.toledo.es, www.globalpower-generation.com, www.sevilla.org, www.boluda.com.es, www.sepi.es, www.puertodesevilla.com
Targets from prev attack(1): www.gencat.cat
Dismissed Targets(33): www.autobusesplazadearmas.es, saasti.api.grupamar.es, beta.portalempleado.grupamar.es, www.group.sener, algeciras.mertramar.com, www.mjusticia.gob.es, rdp.grupamar.es, www.isdefe.es, campus.grupamar.es, www.arbitramadrid.com, mertramar.com, blogsaverroes.juntadeandalucia.es, www.tribunalconstitucional.es, sede.justicia.juntadeandalucia.es, www.camaramadrid.es, recargas.tussam.es, parlamentodenavarra.es, ejercitodelaireydelespacio.defensa.gob.es, www.cimsa.com, remote.boluda.com.es, portalempleado.grupamar.es, www.juntadeandalucia.es, grupamar.es, dev.mertramar.com, www.sedigas.es, ejercito.defensa.gob.es, bancoaudiovisual.juntadeandalucia.es, www.tussam.es, contacto.mertramar.com, www.lamoncloa.gob.es, www.defensa.gob.es, apps.boluda.com.es, www.fecsa.net

2026-11-14_06-04-11 check-hosts status

The attacks attributed to noname057 primarily target sites in Spain, affecting various sectors including government, transportation, and education. Key regions under attack include Andalusia, Navarra, and Madrid, with notable institutions such as the Spanish Ministry of Defense and local government websites being compromised. The attacks highlight a focus on public services and administrative platforms.^{AI generated}
34 targets are under attack, 0 new targets and 34 targets from previous attack
New Targets(0):
Targets from prev attack(34): www.juntadeandalucia.es, algeciras.mertramar.com, blogsaverroes.juntadeandalucia.es, www.sedigas.es, portalempleado.grupamar.es, grupamar.es, www.tussam.es, parlamentodenavarra.es, www.fecsa.net, www.isdefe.es, ejercitodelaireydelespacio.defensa.gob.es, bancoaudiovisual.juntadeandalucia.es, www.cimsa.com, ejercito.defensa.gob.es, beta.portalempleado.grupamar.es, www.camaramadrid.es, remote.boluda.com.es, www.group.sener, www.mjusticia.gob.es, dev.mertramar.com, www.gencat.cat, saasti.api.grupamar.es, www.defensa.gob.es, www.autobusesplazadearmas.es, www.lamoncloa.gob.es, apps.boluda.com.es, contacto.mertramar.com, rdp.grupamar.es, recargas.tussam.es, www.arbitramadrid.com, www.tribunalconstitucional.es, sede.justicia.juntadeandalucia.es, campus.grupamar.es, mertramar.com
Dismissed Targets(1): www.cofides.es

2026-11-14_00-04-06 check-hosts status

The attacks attributed to noname057 primarily target websites in Spain. Key sectors affected include government, transportation, and legal institutions. Notable sites include those of the Spanish Ministry of Defense, regional justice departments, and various public service platforms.^{AI generated}
35 targets are under attack, 0 new targets and 35 targets from previous attack
New Targets(0):
Targets from prev attack(35): www.cofides.es, portalempleado.grupamar.es, www.fecsa.net, sede.justicia.juntadeandalucia.es, www.arbitramadrid.com, grupamar.es, rdp.grupamar.es, blogsaverroes.juntadeandalucia.es, parlamentodenavarra.es, www.tribunalconstitucional.es, www.isdefe.es, www.autobusesplazadearmas.es, www.tussam.es, www.group.sener, ejercitodelaireydelespacio.defensa.gob.es, contacto.mertramar.com, bancoaudiovisual.juntadeandalucia.es, campus.grupamar.es, www.camaramadrid.es, www.gencat.cat, saasti.api.grupamar.es, www.juntadeandalucia.es, recargas.tussam.es, www.lamoncloa.gob.es, mertramar.com, beta.portalempleado.grupamar.es, www.cimsa.com, ejercito.defensa.gob.es, remote.boluda.com.es, apps.boluda.com.es, algeciras.mertramar.com, www.sedigas.es, www.mjusticia.gob.es, www.defensa.gob.es, dev.mertramar.com
Dismissed Targets(1): www.boluda.com.es

2026-11-13_11-04-09 check-hosts status

The attacks by noname057 primarily targeted websites in Spain, affecting various sectors including government, defense, transportation, and justice. Notable sites include those associated with the Spanish Air Force, regional government bodies, and public transport services, indicating a focus on critical infrastructure and public services within the country.^{AI generated}
36 targets are under attack, 16 new targets and 20 targets from previous attack
New Targets(16): ejercitodelaireydelespacio.defensa.gob.es, www.cimsa.com, www.gencat.cat, www.fecsa.net, www.arbitramadrid.com, www.defensa.gob.es, www.cofides.es, www.sedigas.es, www.isdefe.es, www.camaramadrid.es, parlamentodenavarra.es, www.group.sener, www.tribunalconstitucional.es, www.mjusticia.gob.es, ejercito.defensa.gob.es, www.lamoncloa.gob.es
Targets from prev attack(20): mertramar.com, blogsaverroes.juntadeandalucia.es, apps.boluda.com.es, sede.justicia.juntadeandalucia.es, rdp.grupamar.es, beta.portalempleado.grupamar.es, www.autobusesplazadearmas.es, bancoaudiovisual.juntadeandalucia.es, saasti.api.grupamar.es, www.boluda.com.es, campus.grupamar.es, remote.boluda.com.es, contacto.mertramar.com, recargas.tussam.es, dev.mertramar.com, portalempleado.grupamar.es, algeciras.mertramar.com, www.tussam.es, grupamar.es, www.juntadeandalucia.es
Dismissed Targets(0):

2026-11-13_07-02-17 check-hosts status

The attacks attributed to noname057 primarily target Spain, with a focus on various websites associated with regional government entities, transportation services, and educational institutions. Key sectors affected include transportation, justice, and public services, indicating a concentrated effort against Spanish infrastructure and services.^{AI generated}
20 targets are under attack, 20 new targets and 0 targets from previous attack
New Targets(20): www.boluda.com.es, blogsaverroes.juntadeandalucia.es, remote.boluda.com.es, campus.grupamar.es, sede.justicia.juntadeandalucia.es, saasti.api.grupamar.es, contacto.mertramar.com, www.tussam.es, bancoaudiovisual.juntadeandalucia.es, www.juntadeandalucia.es, dev.mertramar.com, beta.portalempleado.grupamar.es, www.autobusesplazadearmas.es, recargas.tussam.es, mertramar.com, grupamar.es, rdp.grupamar.es, portalempleado.grupamar.es, apps.boluda.com.es, algeciras.mertramar.com
Targets from prev attack(0):
Dismissed Targets(24): www.axa.es, www.xpo.com, www.fepex.es, www.gva.es, www.apvigo.es, clientes.lamaignere.com, www.parlament.cat, lamaignere.com, www.apba.es, www.aecid.es, hisenda.gva.es, sede.apvigo.gob.es, www.unvi.es, feedback.lamaignere.com, www.mapa.gob.es, www.alimentacion.es, www.apcoruna.com, sede.dgt.gob.es, www.bilbaoport.eus, www.guaguas.com, prb.lamaignere.com, clientes.correosexpress.com, servicios.fepex.es, www.bolsasymercados.es

2026-11-13_06-04-08 check-hosts status

The attacks attributed to noname057 primarily target websites in Spain, including various government and transport-related sites, as well as financial and commercial platforms. Key sectors affected include public administration, transportation, and finance, indicating a focus on critical infrastructure within the country.^{AI generated}
24 targets are under attack, 0 new targets and 24 targets from previous attack
New Targets(0):
Targets from prev attack(24): clientes.lamaignere.com, www.bilbaoport.eus, www.gva.es, www.mapa.gob.es, prb.lamaignere.com, www.aecid.es, hisenda.gva.es, sede.apvigo.gob.es, www.axa.es, www.guaguas.com, feedback.lamaignere.com, sede.dgt.gob.es, www.xpo.com, lamaignere.com, www.apba.es, www.unvi.es, www.bolsasymercados.es, www.alimentacion.es, www.apvigo.es, clientes.correosexpress.com, servicios.fepex.es, www.parlament.cat, www.apcoruna.com, www.fepex.es
Dismissed Targets(1): tab.es

2026-11-12_11-06-08 check-hosts status

The attacks attributed to noname057 primarily target websites in Spain, affecting various sectors including government, transportation, and finance. Notable targets include regional government sites, public transportation services, and financial institutions, indicating a concentrated focus on Spanish digital infrastructure.^{AI generated}
25 targets are under attack, 7 new targets and 18 targets from previous attack
New Targets(7): www.parlament.cat, www.guaguas.com, tab.es, www.bolsasymercados.es, sede.dgt.gob.es, www.axa.es, www.unvi.es
Targets from prev attack(18): prb.lamaignere.com, www.apcoruna.com, www.fepex.es, lamaignere.com, www.apba.es, www.bilbaoport.eus, www.mapa.gob.es, feedback.lamaignere.com, clientes.correosexpress.com, sede.apvigo.gob.es, www.alimentacion.es, clientes.lamaignere.com, www.xpo.com, www.gva.es, www.apvigo.es, hisenda.gva.es, www.aecid.es, servicios.fepex.es
Dismissed Targets(0):

2026-11-12_07-04-08 check-hosts status

Noname057(16) has targeted websites primarily in Spain, affecting various sectors including ports, agriculture, and logistics. Key countries under attack include Spain, with significant impacts on local government and service websites. The attacks span a range of domains, from port authorities to food and agricultural organizations.^{AI generated}
18 targets are under attack, 18 new targets and 0 targets from previous attack
New Targets(18): www.bilbaoport.eus, www.fepex.es, clientes.correosexpress.com, www.gva.es, prb.lamaignere.com, feedback.lamaignere.com, www.apba.es, www.apvigo.es, www.xpo.com, www.alimentacion.es, clientes.lamaignere.com, hisenda.gva.es, lamaignere.com, servicios.fepex.es, sede.apvigo.gob.es, www.mapa.gob.es, www.apcoruna.com, www.aecid.es
Targets from prev attack(0):
Dismissed Targets(33): www.asambleamurcia.es, portalcomercio.sevilla.org, www.euskadi.eus, www.metro-sevilla.es, www.asambleamadrid.es, tuciudad.sevilla.org, eportal.aernnova.com, api-pgics.sevilla.org, citaprevia.sevilla.org, www.xunta.gal, scm.aernnova.com, www.asturias.es, core-pgics.sevilla.org, webmail.sevilla.org, pgics.sevilla.org, panel-portalcomercio.sevilla.org, www.gobiernodecanarias.org, www.sevilla.org, www.parlamentodegalicia.es, api-portalcomercio.sevilla.org, wiferta.sevilla.org, www.aernnova.com, monitortest.metro-sevilla.es, zonaprivada.teletaxisevilla.es, smtp.ctas.es, www.parlamentodeandalucia.es, www.juntadeandalucia.es, miciudad.sevilla.org, www.carm.es, teletaxisevilla.es, imd.sevilla.org, monitor.metro-sevilla.es, www.cortsvalencianes.es

2026-11-12_06-02-08 check-hosts status

The attacks attributed to noname057 primarily target websites in Spain, particularly focusing on regions such as Andalusia, the Basque Country, Galicia, and Murcia. Key sites include various government and municipal platforms, indicating a concentrated effort against local administrative and public service websites.^{AI generated}
33 targets are under attack, 0 new targets and 33 targets from previous attack
New Targets(0):
Targets from prev attack(33): imd.sevilla.org, www.euskadi.eus, core-pgics.sevilla.org, www.xunta.gal, www.asambleamurcia.es, www.gobiernodecanarias.org, citaprevia.sevilla.org, www.carm.es, www.asturias.es, www.parlamentodegalicia.es, eportal.aernnova.com, pgics.sevilla.org, teletaxisevilla.es, api-portalcomercio.sevilla.org, www.sevilla.org, scm.aernnova.com, www.aernnova.com, www.metro-sevilla.es, zonaprivada.teletaxisevilla.es, wiferta.sevilla.org, www.cortsvalencianes.es, miciudad.sevilla.org, api-pgics.sevilla.org, www.parlamentodeandalucia.es, tuciudad.sevilla.org, smtp.ctas.es, panel-portalcomercio.sevilla.org, monitor.metro-sevilla.es, portalcomercio.sevilla.org, www.asambleamadrid.es, www.juntadeandalucia.es, monitortest.metro-sevilla.es, webmail.sevilla.org
Dismissed Targets(1): www.jgpa.es

2026-11-11_11-06-09 check-hosts status

The attacks attributed to noname057 target various websites primarily in Spain, particularly in the regions of Andalusia, Murcia, Galicia, and the Canary Islands. Key sites affected include municipal portals, government websites, and services related to transportation and commerce. The attacks highlight a focus on local government and public service infrastructure across multiple Spanish cities and regions.^{AI generated}
34 targets are under attack, 12 new targets and 22 targets from previous attack
New Targets(12): www.asambleamadrid.es, www.euskadi.eus, www.parlamentodegalicia.es, www.parlamentodeandalucia.es, www.jgpa.es, www.juntadeandalucia.es, www.asambleamurcia.es, www.carm.es, www.asturias.es, www.cortsvalencianes.es, www.gobiernodecanarias.org, www.xunta.gal
Targets from prev attack(22): miciudad.sevilla.org, www.aernnova.com, citaprevia.sevilla.org, imd.sevilla.org, smtp.ctas.es, eportal.aernnova.com, webmail.sevilla.org, wiferta.sevilla.org, portalcomercio.sevilla.org, monitortest.metro-sevilla.es, www.sevilla.org, pgics.sevilla.org, core-pgics.sevilla.org, zonaprivada.teletaxisevilla.es, api-pgics.sevilla.org, scm.aernnova.com, api-portalcomercio.sevilla.org, tuciudad.sevilla.org, panel-portalcomercio.sevilla.org, teletaxisevilla.es, www.metro-sevilla.es, monitor.metro-sevilla.es
Dismissed Targets(0):

2026-11-11_07-34-07 check-hosts status

The attacks attributed to noname057 primarily target websites in Spain, specifically in the city of Seville. Key sectors affected include local government services, commerce, and transportation, with numerous municipal and regional sites being compromised.^{AI generated}
22 targets are under attack, 2 new targets and 20 targets from previous attack
New Targets(2): teletaxisevilla.es, zonaprivada.teletaxisevilla.es
Targets from prev attack(20): core-pgics.sevilla.org, imd.sevilla.org, portalcomercio.sevilla.org, www.aernnova.com, citaprevia.sevilla.org, webmail.sevilla.org, miciudad.sevilla.org, eportal.aernnova.com, scm.aernnova.com, wiferta.sevilla.org, tuciudad.sevilla.org, pgics.sevilla.org, www.metro-sevilla.es, monitor.metro-sevilla.es, api-portalcomercio.sevilla.org, smtp.ctas.es, api-pgics.sevilla.org, www.sevilla.org, panel-portalcomercio.sevilla.org, monitortest.metro-sevilla.es
Dismissed Targets(0):

2026-11-11_07-22-07 check-hosts status

The attacks attributed to noname057 primarily target websites in Spain, specifically in the city of Seville. Key sites affected include various municipal and commercial portals, as well as services related to public transportation and city management. The main focus of the attacks appears to be on local government and commerce-related platforms.^{AI generated}
20 targets are under attack, 2 new targets and 18 targets from previous attack
New Targets(2): wiferta.sevilla.org, webmail.sevilla.org
Targets from prev attack(18): citaprevia.sevilla.org, monitortest.metro-sevilla.es, www.sevilla.org, api-portalcomercio.sevilla.org, smtp.ctas.es, tuciudad.sevilla.org, portalcomercio.sevilla.org, imd.sevilla.org, scm.aernnova.com, www.metro-sevilla.es, miciudad.sevilla.org, panel-portalcomercio.sevilla.org, monitor.metro-sevilla.es, eportal.aernnova.com, api-pgics.sevilla.org, www.aernnova.com, pgics.sevilla.org, core-pgics.sevilla.org
Dismissed Targets(0):

2026-11-11_07-18-38 check-hosts status

The attacks attributed to noname057 primarily targeted websites based in Spain, particularly in the city of Seville. The affected sites include various municipal and transportation services, as well as commercial platforms associated with the region.^{AI generated}
18 targets are under attack, 1 new targets and 17 targets from previous attack
New Targets(1): api-pgics.sevilla.org
Targets from prev attack(17): citaprevia.sevilla.org, www.sevilla.org, scm.aernnova.com, imd.sevilla.org, www.metro-sevilla.es, smtp.ctas.es, pgics.sevilla.org, tuciudad.sevilla.org, core-pgics.sevilla.org, miciudad.sevilla.org, monitor.metro-sevilla.es, eportal.aernnova.com, www.aernnova.com, api-portalcomercio.sevilla.org, panel-portalcomercio.sevilla.org, portalcomercio.sevilla.org, monitortest.metro-sevilla.es
Dismissed Targets(0):

2026-11-11_07-12-07 check-hosts status

The attacks attributed to noname057 primarily target websites in Spain, particularly those associated with the city of Seville. Key sites affected include various municipal and transportation-related platforms, indicating a focus on local government and public services.^{AI generated}
17 targets are under attack, 2 new targets and 15 targets from previous attack
New Targets(2): portalcomercio.sevilla.org, tuciudad.sevilla.org
Targets from prev attack(15): citaprevia.sevilla.org, www.sevilla.org, scm.aernnova.com, imd.sevilla.org, www.metro-sevilla.es, smtp.ctas.es, pgics.sevilla.org, api-portalcomercio.sevilla.org, miciudad.sevilla.org, core-pgics.sevilla.org, monitor.metro-sevilla.es, eportal.aernnova.com, www.aernnova.com, panel-portalcomercio.sevilla.org, monitortest.metro-sevilla.es
Dismissed Targets(0):

2026-11-11_07-06-06 check-hosts status

The attacks attributed to noname057 primarily target Spain, with a focus on various websites associated with the city of Seville and the Aernnova company. Notable sites include municipal services, transportation, and commerce portals, indicating a concentrated effort on local infrastructure and services.^{AI generated}
15 targets are under attack, 2 new targets and 13 targets from previous attack
New Targets(2): panel-portalcomercio.sevilla.org, pgics.sevilla.org
Targets from prev attack(13): monitor.metro-sevilla.es, www.aernnova.com, imd.sevilla.org, api-portalcomercio.sevilla.org, smtp.ctas.es, www.sevilla.org, scm.aernnova.com, miciudad.sevilla.org, eportal.aernnova.com, monitortest.metro-sevilla.es, core-pgics.sevilla.org, www.metro-sevilla.es, citaprevia.sevilla.org
Dismissed Targets(26): www.dgtinfo.es, ctas.es, ejercito.defensa.gob.es, www.ine.es, www.puertodesevilla.com, transparencia.puertodesevilla.com, webmail.ctas.es, portalweb.aldeport.es, sevitrade.com, repositorio.aemet.es, contrataciondelestado.es, armada.defensa.gob.es, sede.agenciatributaria.gob.es, venta.renfe.com, ednon.com, www.grupoica.com, www.boluda.com.es, contratacioncentralizada.gob.es, intranet.soliss.es, eme-es.com, clientes.sevitrade.com, www.aldeport.es, www.guardedbox.es, sevillacruiseport.com, www.jomipsa.com, www.navarra.es

2026-11-11_07-02-07 check-hosts status

The attacks attributed to noname057 primarily targeted websites in Spain. Key sectors affected include government, transportation, and various public services. Notable sites compromised include those of local government agencies, transportation services, and public information portals. The attacks highlight a concentrated threat landscape within Spain, affecting both public institutions and private enterprises.^{AI generated}
39 targets are under attack, 13 new targets and 26 targets from previous attack
New Targets(13): monitor.metro-sevilla.es, www.aernnova.com, imd.sevilla.org, scm.aernnova.com, smtp.ctas.es, api-portalcomercio.sevilla.org, www.sevilla.org, miciudad.sevilla.org, eportal.aernnova.com, monitortest.metro-sevilla.es, core-pgics.sevilla.org, www.metro-sevilla.es, citaprevia.sevilla.org
Targets from prev attack(26): www.dgtinfo.es, ctas.es, ejercito.defensa.gob.es, www.ine.es, www.puertodesevilla.com, transparencia.puertodesevilla.com, webmail.ctas.es, portalweb.aldeport.es, sevitrade.com, repositorio.aemet.es, contrataciondelestado.es, armada.defensa.gob.es, sede.agenciatributaria.gob.es, venta.renfe.com, ednon.com, www.grupoica.com, www.boluda.com.es, contratacioncentralizada.gob.es, intranet.soliss.es, eme-es.com, clientes.sevitrade.com, www.aldeport.es, www.guardedbox.es, www.jomipsa.com, sevillacruiseport.com, www.navarra.es
Dismissed Targets(0):

2026-11-10_11-06-08 check-hosts status

The attacks attributed to noname057 primarily targeted websites in Spain. Key sectors affected include government agencies, transportation, and logistics. Notable sites include the Spanish Army's defense portal, various regional government websites, and transportation services like Renfe. The attacks highlight a significant focus on Spanish entities and infrastructure.^{AI generated}
26 targets are under attack, 8 new targets and 18 targets from previous attack
New Targets(8): contratacioncentralizada.gob.es, sevillacruiseport.com, webmail.ctas.es, sede.agenciatributaria.gob.es, ctas.es, armada.defensa.gob.es, www.guardedbox.es, venta.renfe.com
Targets from prev attack(18): repositorio.aemet.es, transparencia.puertodesevilla.com, ednon.com, eme-es.com, www.jomipsa.com, www.boluda.com.es, www.aldeport.es, contrataciondelestado.es, www.grupoica.com, sevitrade.com, intranet.soliss.es, www.navarra.es, portalweb.aldeport.es, ejercito.defensa.gob.es, clientes.sevitrade.com, www.dgtinfo.es, www.puertodesevilla.com, www.ine.es
Dismissed Targets(0):

2026-11-10_07-02-09 check-hosts status

The attacks attributed to noname057 primarily targeted websites in Spain. Key sectors affected include government, transportation, and local businesses. Notable sites under attack include those related to the port of Sevilla, the Spanish Army, and various regional government portals.^{AI generated}
18 targets are under attack, 18 new targets and 0 targets from previous attack
New Targets(18): www.puertodesevilla.com, portalweb.aldeport.es, intranet.soliss.es, www.navarra.es, eme-es.com, repositorio.aemet.es, clientes.sevitrade.com, www.ine.es, www.jomipsa.com, transparencia.puertodesevilla.com, www.boluda.com.es, sevitrade.com, ednon.com, www.grupoica.com, contrataciondelestado.es, www.dgtinfo.es, ejercito.defensa.gob.es, www.aldeport.es
Targets from prev attack(0):
Dismissed Targets(28): www.fundacionnaturgy.org, eidas.izenpe.com, www.gasrenovable.org, www.palmasport.es, www.innovasur.com, www.nedgia.es, ciberso.com, www.transgesa.es, www.elcasco1920.com, areaprivada.ufd.es, oficinavirtual.canaldeisabelsegunda.es, www.ufd.es, www.canaldeisabelsegunda.es, www.metrobilbao.eus, www.globalpower-generation.com, www.toledo.es, www.sedigas.es, srm.canaldeisabelsegunda.es, www.bilbao.eus, www.sevilla.org, www.logista.com, sede.toledo.es, sede.sevilla.org, www.tussam.es, www.talgo.com, www.apc.es, licitaciones.canaldeisabelsegunda.es, emtre.es

2026-11-09_11-06-09 check-hosts status

The recent attacks attributed to noname057 primarily targeted websites in Spain, with notable focus on cities like Sevilla and Toledo, as well as various organizations and companies across the country. The sites affected include municipal portals, energy companies, and other public services, indicating a concentrated effort against Spanish infrastructure and services.^{AI generated}
28 targets are under attack, 8 new targets and 20 targets from previous attack
New Targets(8): www.canaldeisabelsegunda.es, www.globalpower-generation.com, www.metrobilbao.eus, www.innovasur.com, oficinavirtual.canaldeisabelsegunda.es, www.gasrenovable.org, www.sedigas.es, ciberso.com
Targets from prev attack(20): www.sevilla.org, www.palmasport.es, emtre.es, areaprivada.ufd.es, sede.toledo.es, sede.sevilla.org, www.talgo.com, www.elcasco1920.com, www.nedgia.es, srm.canaldeisabelsegunda.es, www.ufd.es, www.logista.com, www.fundacionnaturgy.org, www.apc.es, www.tussam.es, licitaciones.canaldeisabelsegunda.es, www.bilbao.eus, www.toledo.es, eidas.izenpe.com, www.transgesa.es
Dismissed Targets(0):

2026-11-09_07-04-08 check-hosts status

The attacks attributed to noname057 primarily targeted websites in Spain. Key sectors affected include public services, transportation, and energy, indicating a focus on critical infrastructure. Notable cities under attack include Madrid, Seville, Toledo, and Bilbao.^{AI generated}
20 targets are under attack, 20 new targets and 0 targets from previous attack
New Targets(20): srm.canaldeisabelsegunda.es, eidas.izenpe.com, www.transgesa.es, www.apc.es, www.tussam.es, sede.toledo.es, sede.sevilla.org, areaprivada.ufd.es, www.bilbao.eus, www.elcasco1920.com, www.fundacionnaturgy.org, www.talgo.com, www.logista.com, www.toledo.es, www.palmasport.es, licitaciones.canaldeisabelsegunda.es, www.ufd.es, www.sevilla.org, www.nedgia.es, emtre.es
Targets from prev attack(0):
Dismissed Targets(21): www.trans-bavaria.com, my.rostock-airport.de, stats.eswe-verkehr.de, comunicacion.diputaciondevalladolid.es, dahajm.hannover-airport.de, www.camaramadrid.es, www.irizar.com, redalsa.com, www.jadeweserport.de, maportal.hannover-airport.de, sede.coruna.gal, helpdesk.menzelldoehle.de, mail.bremen-airport.com, www.menzelldoehle.de, www.palma.es, www.portcastello.com, www.fecsa.net, www.sepi.es, enyse.com, santiagodecompostela.gal, www.legebiltzarra.eus

2026-11-08_07-06-07 check-hosts status

The attacks attributed to noname057 primarily target websites in Germany, Spain, and other European countries. Notable countries under attack include Germany, with multiple airport-related sites affected, and Spain, which has seen attacks on various governmental and commercial entities. The focus appears to be on transportation, local government, and service-related sectors.^{AI generated}
21 targets are under attack, 21 new targets and 0 targets from previous attack
New Targets(21): www.menzelldoehle.de, www.palma.es, mail.bremen-airport.com, helpdesk.menzelldoehle.de, comunicacion.diputaciondevalladolid.es, sede.coruna.gal, my.rostock-airport.de, santiagodecompostela.gal, stats.eswe-verkehr.de, www.legebiltzarra.eus, enyse.com, redalsa.com, www.trans-bavaria.com, www.sepi.es, www.irizar.com, www.portcastello.com, www.fecsa.net, dahajm.hannover-airport.de, www.jadeweserport.de, www.camaramadrid.es, maportal.hannover-airport.de
Targets from prev attack(0):
Dismissed Targets(23): matomo.maritimes-cluster.de, www.maritimes-cluster.de, www.nasa.de, www.saalekreis.de, www.rmv.de, wohnungswirtschaft.wiesbaden.de, www.energie.de, einnahmen.rmv.de, piwi.wiesbaden.de, secshare.fassmer.de, my.fassmer.de, www.frachtcontor.de, gts.rmv.de, dtms.wiesbaden.de, www.bvl.de, www.karlgross.de, www.vms.de, enaio.eww.de, membership-application.maritimes-cluster.de, www.fassmer.de, avb.rmv.de, bf-backend.rmv.de, www.pwl.de