小米路由器一天发了 2.4 万个请求到 api.miwifi.com

[doublleft]

最近在家里部署了 Adguard Home，一天后发现拦截记录，小米路由器向 api.miwifi.com 发出了 2.4 万个请求


就是类似这种请求，每 8 秒请求 2 次。



我在服务器上进行抓包了几个详细的 url：

http://api.miwifi.com/rom_config?info=eyJkZXZpY2VfaWQiOiI3NjE4ZTg2ZS03ODFmLTM1NjUtNTdkNS01NTVjYmNkOTE2MjUiLCJzbiI6IjIzMzY1XC9DOVRTMzIxOTEiLCJoYXJkd2FyZSI6IlIyMTAwIiwicm9tIjoiMi4wLjc0MyIsImNoYW5uZWwiOiJyZWxlYXNlIiwiY291bnRyeV9jb2RlIjoiQ04iLCJ0cyI6MH0%3D

接口会返回：

{"code":0,"signature":"w4su32697uWpKkhe2lkwYIq/ESFRqugLa/sjclKHrI7PJXC07/NJK2//Tz4rNbhxjkY4ApUkwRsqVW7YO8LrNLa0Z9uHCfWc4/yxtO7YrL7N0JqMIQYogBSTot7TQIOQNxqBwhGrX6Bklw9xVGkmkFKPAFkvftB0OhKvnRomO80KqmWu1vTlhrAORhu1rYnlJsb6KMCrKN66L+OuFlT5wtxp3Zgjf2KFVaw9l0/lqLr+wAv/LB2EopFP6zkQ5dlsfpI/2fm9E3i9Yd9NnJ2J/akQHRxyV2QTOixi02zpbJJBJoeAEeUifstNOJZu7qTeohRV/dNkHO7WWu1nDkb9og==","config":"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","ts":1610979519588}

[ziseyinzi]

redmi ac2100，原厂固件，AP 模式，一直和北京世纪互联的一个 IP 互通有无，被我在主路由里 ban 了 WAN 的权限，不影响使用。

[hash]

@CEBBCAT
@ysc3839
恰恰相反,这样的吐槽才能从根本上杜绝这样的问题

[winterx]

家里一台 AX6+AX1800 做 AP+MESH，AX1800 是 mesh 节点
1800 也是疯狂向 api.miwifi.com 发请求，我这 24 小时能发 2 万多个请求，还有一个 xiaoqiang，但没有后缀？
看不下去直接把这域名加入过滤名单了

[sphinxdwood]

2.4w 次是 DNS 解析请求的次数？

[wangxiaoaer]

技术层面，路由器的拦截记录之类能否把自家域名设置为白名单？就是访问了（后台触发这种），但是不拦截，也不显示？ 这样的话，是不是更隐蔽了？

[Genezzzzzz]

@S179276SP #17 hicloud 是云服务自己上传备份吧

[jworg]

小米这也太草台了吧，嵌入式肯定避免这种无限尝试的，比如尝试 3 次就等 1 个小时再重置状态重新尝试。这样死循环是想步暴风的后尘吗。。。。。。

[ccming]

你以为小米路由器那么便宜卖给你是做慈善吗

[tomtom9]

@ziseyinzi 我记得世纪互联是微软的代理商？

[alect]

一直都有人说不要用小米的东西

[tairan2006]

路由器还是买华为，我买了一次小米的之后再也不买了

[vmebeh]

这 log 大师不光本机到处拉 log，还往服务器传这么多

[daimiaopeng]

闪屏广告接口

[winterx]

@tairan2006 建议你看看 17 楼

[daimiaopeng]

https://api.miwifi.com 接口一部分如下：
路由器是否已被绑定
路由器绑定注册
路由列表接口
隐私协议引导接口
撤销隐私协议 /用户协议授权
首页隐私合规更新提示框接口
首页隐私合规更新提示框已读
首页注册客户端接口
等等

[chengs]

@tairan2006 为什么买华为？思科网件多了去了

[yukiww233]

app 远程控制的服务器是这个域名么..如果是的话我觉得正常啊
也不能又要远控又不让连服务器

[juded]

@chengs linksys 没用过，网件的无线太垃圾了。

[leonme]

@tairan2006 华为路由器？和小米没啥区别，都是渣渣～无论啥路由器，能刷 openwrt 的都是好路由器

[winterx]

@leonme 话也不能这么说，华为企业路由器还是很强的，但消费者路由器真心是渣渣