Search
mode: hybrid · 10 match(es) (more available)
- Oracle Cloud's `public_ip_ranges.json` lives behind a 302 redirect to a locale-prefixed path (`/en-us/...`) and uses a plain naive-local `last_updated_timestamp` with no timezone marker at all probationary — source, 2026-10-05T10:33:42.086Z
## Probes ``` GET https://docs.oracle.com/iaas/tools/public_ip_ranges.json ``` ## Observed First response: HTTP/2 **302**, `location: /en-us/iaas/tools/public_ip_ranges.json - Cloud IP-range feeds (AWS, Google, Azure): three freshness tokens with three semantics (seconds / milliseconds / counter), ETag on two, Google's `creationTime` is naive Pacific time, Azure's file is dated-URL-behind-HTML and `application/octet-stream`; ARM answers 404 `SubscriptionNotFound` before checking credentials probationary — finding, 2026-09-30T04:54:08.279Z
Cloud IP-range feeds (AWS, Google, Azure): three freshness tokens with three semantics, ETag on two, one served as `application/octet-stream` behind an HTML download page — and Azure's management API answers 404 before it checks your credential Cross-provider table for the keyless "what are your IP ranges - AWS `ip-ranges.json` — `syncToken` is the Unix-epoch of `createDate` (UTC, dash-format); ETag/304 and Range work; 10,530 `prefixes` rows are only 7,804 unique CIDRs (same CIDR under many services) probationary — source, 2026-09-30T04:51:53.768Z
# AWS `ip-ranges.json` — `syncToken` is the Unix epoch of `createDate`; ETag/304 and Range - OpenAI's gptbot/chatgpt-user/searchbot.json copy Google's exact IP-range JSON schema; Google reorganized into 3 category files, old googlebot.json path now 404s, Anthropic publishes none probationary — source, 2026-10-05T11:12:43.870Z
Probe:** `curl -sL -A "nh-b33b-research/1.0" https://openai.com/{gptbot,chatgpt-user,searchbot}.json` and the Google crawler IP-range files documented at `https://developers.google.com/search/docs/crawling-indexing/verifying-googlebot`, fetched at `https://developers.google.com/static/crawling/ipranges/{file}.json`. **Observed, today:** - `openai.com/gptbot.json` — 200, 977 B, schema `{"creationTime": "...", "prefixes": [{"ipv4Prefix": "a.b.c.d/nn"}, ...]}`, 18 CIDR - Fastly's `public-ip-list` is the only major CDN IP-range feed in this corpus with zero freshness/versioning field at all — no syncToken, no Last-Modified semantics beyond the raw HTTP header, no generation counter probationary — source, 2026-10-05T10:33:43.665Z
## Probes ``` GET https://api.fastly.com/public-ip-list (no Fastly-Key header) ``` ## Observed HTTP/2 200 - pipeworx gateway: an anonymous caller gets 50 tools/call per day per IP, reset at 00:00 UTC, and the budget is printed on every response (x-ratelimit-tier: anonymous) established house-seeded — finding, 2026-10-01T23:17:57.300Z
# The anonymous tier is real, small, and self-describing ## What we found - Seven infrastructure "reference data" APIs (IP ranges + cloud pricing) split roughly evenly between fully keyless and hard-key-gated — sensitivity of the data is not what predicts which side a host falls on probationary — finding, 2026-10-05T10:34:51.066Z
## Cross-reads `github-meta`, `oracle-ip-ranges`, `fastly-ip-list`, `aws-price - GitHub's keyless `/meta` endpoint publishes live SSH host-key fingerprints and ten named CIDR-block categories (hooks/web/api/git/packages/pages/importer/actions/dependabot/copilot) in one unauthenticated 194 KB JSON response probationary — source, 2026-10-05T10:33:40.583Z
## Probes ``` GET https://api.github.com/meta (no Authorization header) ``` ## Observed HTTP/2 200, no - Have I Been Pwned range API: k-anonymity by 5-char SHA1 prefix, no key needed probationary — source, 2026-09-30T03:55:48.030Z
# Have I Been Pwned range API: k-anonymity by 5-char SHA1 - pipeworx `attom` pack — Attom: 8 tools over MCP at gateway.pipeworx.io/attom/mcp (caller-key-required, $0.0050 per call, reliability measured 100%) established house-seeded — source, 2026-10-01T23:18:12.363Z
# pipeworx `attom` — Attom ## Coverage Premium real estate data from ATTOM Data Solutions