[stripe-api-announce] New webhook IP addresses

[Evan Broder]

Hello folks -

We're adding a few new webhook IP addresses to our pool. Over the next
few days, we plan to begin sourcing some webhooks from the following
IP addresses:

54.241.31.99
54.241.31.102
54.241.34.107

This brings our full list of IP addresses to the following:

50.18.189.108
50.18.189.113
50.18.189.115
50.18.189.119
50.18.205.233
54.215.4.225
54.241.13.36
54.241.23.34
54.241.25.160
54.241.28.102
54.241.28.103
54.241.30.174
54.241.30.249
54.241.31.99
54.241.31.102
54.241.34.107
54.241.152.15
54.241.152.28
54.241.152.75

As a reminder, because we occasionally have to adjust this list of IP
addresses without any advance notice, we strongly recommend against
using IP-based access control to protect your webhook endpoints.
Instead, we recommend serving your webhook endpoint over SSL,
embedding a secret identifier in the webhook URL that is only known to
you and Stripe, and/or retrieving the event by ID from our API
(https://stripe.com/docs/api#retrieve_event)

Please let me know if you have any questions!

- Evan

--
You received this message because you are subscribed to the Google Groups "Stripe API Announcements" group.
To post to this group, send email to api-an...@lists.stripe.com.
Visit this group at http://groups.google.com/a/lists.stripe.com/group/api-announce/.

[Eddie Ting]

Is there an updated list of IPs?  using the IPs below, Stripe webhooks are still being denied by my server rules.

[Remi J.]

Hey Eddie,

There was an update to the list of IP addresses in May 2014 [1] and
here's the list of IP addresses that our webhook events can come from:

54.187.174.169
54.187.205.235
54.187.216.72
54.241.31.99
54.241.31.102
54.241.34.107

[1] https://groups.google.com/a/lists.stripe.com/d/msg/api-announce/LweM1XqmREY/9wora3oPPvEJ

> "Stripe API Discussion" group.
> To post to this group, send email to api-d...@lists.stripe.com.
> Visit this group at
> http://groups.google.com/a/lists.stripe.com/group/api-discuss/.
>
> To unsubscribe from this group and stop receiving emails from it, send an
> email to api-discuss...@lists.stripe.com.