公众号服务测试环境验证服务器地址的有效性成功后,会收到三条来自境外IP的调用,参数一致。请问是否正常?
// 腾讯IP
{ip=81.69.103.205, URI=/wx, queryString=signature=fcb35052f72df8f094fc867ad5ff418371e455e8&echostr=5493832432691941656×tamp=1678676248&nonce=1557352838}}
// 境外IP调用
{"ip":"65.154.226.170","URI":"/wx","queryString":"signature=fcb35052f72df8f094fc867ad5ff418371e455e8%26echostr=5493832432691941656%26timestamp=1678676248%26nonce=1557352838"}
{ip=205.169.39.249, URI=/wx, queryString=signature=fcb35052f72df8f094fc867ad5ff418371e455e8&echostr=5493832432691941656×tamp=1678676248&nonce=1557352838}}
{ip=205.169.39.249, URI=/wx, queryString=signature=fcb35052f72df8f094fc867ad5ff418371e455e8&echostr=5493832432691941656×tamp=1678676248&nonce=1557352838}}
你好,
65.154.226.170
205.169.39.249
这两个不是我们平台的IP。https://developers.weixin.qq.com/doc/offiaccount/Basic_Information/Get_the_WeChat_server_IP_address.html
可以通过API 定期获取我们平台的ip(平台ip变化频率很低),非法ip建议不要处理。
http请求方式: GET https://api.weixin.qq.com/cgi-bin/getcallbackip?access_token=ACCESS_TOKEN
另外可以排查下有没有登录过第三方的服务,可能存在风险