Infrawatch
Loading dataset… Learn more about Infrawatch
Victimology
On 7 April 2026, the UK National Cyber Security Centre (NCSC) published an advisory detailing APT28 activity involving the compromise of vulnerable routers to enable DNS hijacking and adversary-in-the-middle operations. Use this checker to see whether your IP address or network may have been affected. We do not guarantee accurate results. This data is refreshed every hour.

Use the public IP of the router or internet connection you want to check, or a CIDR range for a network block.

Dataset Map
Country-level distribution of listed IPs in the dataset.
> Building world layer…
Drawing listed IPs from the frozen advisory dataset