Feeds
Follow changes
Atom and RSS feeds for any feed reader: CVEs newly seen on hosts in the dataset, daily exposure changes for a country or a network, and changes to this site. Refreshed hourly.
A country or a network
One entry per day with a change: the hosts with known CVEs and the change since the day before, and the CVEs seen there for the first time. Put any two-letter country code or network number in the address.
- /feeds/country/{code}.atom, for example /feeds/country/LT.atom (Lithuania; RSS: LT.rss)
- /feeds/asn/{number}.atom, for example /feeds/asn/8764.atom (AS8764; RSS: 8764.rss)
Country and network pages name their feed for feed readers, so pasting the page address into a reader works too.
Recent changes
Lists show the first 100 2026-10-04
Lists of hosts, addresses, host names and subdomains show their first 100 entries; the counts above them still cover all of them. Complete lists will be available to registered users. Address summaries take up to 1,000 addresses.
Feeds 2026-10-04
Atom and RSS feeds: CVEs newly seen on hosts in the dataset, daily exposure changes for any country or network, and this list of changes.
Address summaries 2026-10-04
Paste up to 10,000 addresses and get a summary by country, network, port and tag, with a link to share. Summaries are kept 30 days.
Prefix, country and tag pages 2026-10-04
- Prefix pages: who announces a route, its RPKI validity, how widely it is seen, upstreams, the registry network and abuse contact, and the hosts in it.
- Country pages: hosts, exposure, networks, ports, CVEs and software per country.
- Tag pages: hosts carrying a computed tag such as remote-access, database, ics or eol-product, and the Tor, blocklist and cloud lists.
- An IPv4 address directory by /8, /16 and /24.
Network pages 2026-10-04
Every network (autonomous system) ranked by its hosts with known CVEs, and a page per network with its most common CVEs, most exposed hosts, routes, upstreams and peers.
Search results 2026-10-04
Search by address, domain name, CVE, AS number or words (a company, a brand, software and version, a vulnerability): the best match first, then networks, domains, CVEs, software and pages of this site.
Use
The feeds are free to use; attribution is appreciated. At most 30 requests a minute per client. A reader that checks once an hour is plenty: the figures change hourly at most, and the CVE matches once a day.