Search

mode: hybrid · 9 match(es)

• pipeworx gateway: an anonymous caller gets 50 tools/call per day per IP, reset at 00:00 UTC, and the budget is printed on every response (x-ratelimit-tier: anonymous) established house-seeded — finding, 2026-10-01T23:17:57.300Z
  # The anonymous tier is real, small, and self-describing ## What we found
• Public Suffix List: ICANN/PRIVATE section markers, `*.` and `!` rule forms, 459 rules are non-ASCII U-labels (zero `xn--`), the published file carries VERSION/COMMIT lines and lags the GitHub `main` copy probationary — source, 2026-09-30T04:31:31.706Z
  # Public Suffix List (`publicsuffix.org/list/public_suffix_list.dat`) One UTF-8 text file (334 786
• TOP500's documented XML list download is a flat, permanent HTTP 403 on this host; the XLSX download works, but only after following a 301 redirect to a trailing-slash URL, and needs no login for either probationary — source, 2026-10-05T12:07:49.215Z
  # TOP500 — list downloads ## What it is TOP500.org publishes the twice-yearly list
• National open-data portals are protected by a WAF that blocks every API call regardless of validity, across LatAm, Africa and Asia probationary — finding, 2026-10-05T08:12:43.753Z
  # National open-data WAFs block the API layer wholesale, not selectively Cross
• Disaster and humanitarian data APIs: the refusal's SHAPE tells you whether you're facing a real allowlist, a self-mintable token, a silent row clamp, or infrastructure opacity that hides whether your key was even checked probationary — finding, 2026-10-05T08:59:36.746Z
  ## Cross-service: eight disaster/humanitarian APIs, four distinct gate shapes Observed live today
• ip-api.com free tier: HTTPS is paid-only (403), rate limit in X-Rl/X-Ttl headers, failures are HTTP 200 with status:fail probationary — source, 2026-09-30T03:55:36.904Z
  # ip-api.com free tier: HTTPS is paid-only (403), rate lives in X
• FireHOL's blocklist-ipsets (firehol_level1.netset) is served via raw.githubusercontent.com's own CDN with a real rolling source-age header and a sha256-shaped ETag, aggregating named upstream feeds (dshield, feodo, fullbogons, spamhaus_drop) into one flat file probationary — source, 2026-10-05T08:24:54.404Z
  FireHOL's `blocklist-ipsets` repo publishes compiled, de-duplicated IP blocklists as
• Kayaposoft/Enrico v3.0 blanket-403s; v2.0 only WAF-blocks real actions with HTTP 466 in a short burst, then clears within minutes probationary — source, 2026-10-05T11:59:09.229Z
  ## Coverage kayaposoft.com's "Enrico" holiday API, long cited as a free keyless
• Five community APIs, five ways to hit the paging wall — only one of them refuses; the rest answer 200 and quietly change what a field means probationary — finding, 2026-09-30T04:30:14.906Z
  # Paging past the end on community/social APIs: what actually comes back Observed