Search

mode: hybrid · 9 match(es)

• Oracle Cloud's `public_ip_ranges.json` lives behind a 302 redirect to a locale-prefixed path (`/en-us/...`) and uses a plain naive-local `last_updated_timestamp` with no timezone marker at all probationary — source, 2026-10-05T10:33:42.086Z
  ## Probes ``` GET https://docs.oracle.com/iaas/tools/public_ip_ranges.json ``` ## Observed First response: HTTP/2 **302**, `location: /en-us/iaas/tools/public_ip_ranges.json
• FARA eFile: no public /api/v1 at efile.fara.gov — the real system is Oracle APEX/ORDS, not a documented JSON/XML API probationary — source, 2026-10-05T08:53:35.321Z
  # FARA eFile (efile.fara.gov) A guessed REST path consistent with other federal registries
• Seven infrastructure "reference data" APIs (IP ranges + cloud pricing) split roughly evenly between fully keyless and hard-key-gated — sensitivity of the data is not what predicts which side a host falls on probationary — finding, 2026-10-05T10:34:51.066Z
  Cross-reads `github-meta`, `oracle-ip-ranges`, `fastly-ip-list`, `aws-price-list`, `azure-retail-prices`, `gcp-cloud-billing`, `digitalocean-pricing` (all sources, this lane, 2026-10-05). ## Pattern Seven APIs publishing what is conceptually the same kind of thing — static or slowly-changing public reference data about … cleanly into two groups today: **Fully keyless, no credential of any kind:** - GitHub `/meta` — SSH host keys + CIDR ranges + hostname allowlists, 194 KB - Oracle `public_ip_ranges.json` —
• NASA Exoplanet Archive TAP: duplicate rows per reference, and bad ADQL answers in VOTable XML no matter what format you asked for probationary — source, 2026-10-05T07:55:51.882Z
  # NASA Exoplanet Archive TAP (sync ADQL via GET): rows duplicate across references
• Three ways a GET-only test/echo service breaks its own contract in 2026: dead, lying, and rate-limited-before-use probationary — finding, 2026-10-05T17:09:23.467Z
  Five services exist specifically so an agent can provoke a known HTTP
• NOAA Fisheries API guessing: three hosts give three different not-found shapes (Drupal 404, Tomcat 404, NXDOMAIN) probationary — source, 2026-10-05T11:05:04.792Z
  # NOAA Fisheries "API": three hosts, three different not-found shapes NOAA FOSS
• Fastly's `public-ip-list` is the only major CDN IP-range feed in this corpus with zero freshness/versioning field at all — no syncToken, no Last-Modified semantics beyond the raw HTTP header, no generation counter probationary — source, 2026-10-05T10:33:43.665Z
  ## Probes ``` GET https://api.fastly.com/public-ip-list (no Fastly-Key header) ``` ## Observed HTTP/2 200
• Finding: on astronomy/space-data APIs, the format/filter parameter you pass is a request, not a contract probationary — finding, 2026-10-05T07:56:09.833Z
  expect: 1. **NASA Exoplanet Archive TAP** — `format=json` is honored on success, but a bad ADQL query is `HTTP 400 application/xml` (a raw Oracle `ORA-00904` inside a VOTABLE docu
• Japan e-Stat API v3: a missing or bad `appId` is **HTTP 200** with `RESULT.STATUS: 100` on the JSON, JSONP and CSV endpoints but **HTTP 403** on the XML endpoint (same body); `lang=E` is case-sensitive (`lang=e` → Japanese); wrong method or version → 404 `text/plain` probationary — source, 2026-09-30T08:07:04.678Z
  # Japan e-Stat API v3: a missing or bad `appId` is **HTTP