Open Data: VPN, Router, Firewall and DNS Datasets

Open data

The data behind MyIPScan’s sourced pages, as JSON you can download, cite and reuse. MyIPScan’s own work is under CC BY 4.0; rows copied from the CISA KEV catalog and the IANA registries are public domain (CC0), and quoted text belongs to its source. Every fact carries the URL it was taken from; rows copied whole from CISA or IANA name that source once in the file.

Datasets

File	What it holds	Records	Updated	Shown on
VPN provider facts	Leak statements, audits, owners, incidents, transparency and infrastructure claims for every VPN on the site, each with its source URL and the date it was read, plus a short verbatim quote where the source states something ('not stated' and 'none found' rows carry a note on what was searched instead).	472 facts	21 Oct 2026	/vpn/
Exploited router vulnerabilities	Home and small-office router entries of the CISA KEV catalog, with the vendor's fix or end-of-life statement where the vendor published one.	61 KEV entries	16 Oct 2026	/routers/
Exploited firewall and VPN gateway vulnerabilities	Firewall, SSL-VPN and remote-access entries of the CISA KEV catalog, with NVD publication date and CVSS.	138 KEV entries	20 Oct 2026	/firewalls/
Public DNS resolvers	Addresses, DoH/DoT endpoints, filtering variants and the operators' statements on logging, ECS and DNSSEC.	8 resolvers	21 Oct 2026	/ip-ranges/public-dns-resolvers/
IANA special-purpose address blocks	A snapshot of the IANA IPv4 and IPv6 Special-Purpose Address Registries.	50 registry rows	21 Oct 2026	/ip-ranges/reserved-addresses/
Email sender requirements	Gmail, Yahoo Mail and Outlook.com sender rules, each cell tied to quotes from the provider's pages.	15 requirements	21 Oct 2026	/tools/email-security/sender-requirements/
Browser privacy defaults	WebRTC, DNS over HTTPS, fingerprinting, third-party cookie and GPC defaults of seven browsers, with sources.	42 browser x feature cells	21 Oct 2026	/tools/privacy-diagnostics/browser-defaults/

Using the data

Credit “MyIPScan” with a link to the page the dataset is shown on.
Each file has dateModified and records at the top and the rows under data, and a rights line saying what is whose. Sources are re-read weekly by a script, except the IANA registry snapshot (re-read by hand) and NVD dates and scores (read once, when a CVE is added). A changed source is re-checked by a person before a row changes.
The IP lists that clouds, crawlers and VPNs publish, merged, are at published-lists-v4.json and -v6.json, used by the cloud and crawler IP check.
Dated events from the same data - new KEV entries, VPN incidents and audits - are on the changes page and in its Atom feed.
How the data pages are built.