Advertisement
If you have a new account but are having problems posting or verifying your account, please email us on hello@boards.ie for help. Thanks :)
Hello all! Please ensure that you are posting a new thread or question in the appropriate forum. The Feedback forum is overwhelmed with questions that are having to be moved elsewhere. If you need help to verify your account contact hello@boards.ie
Hi there,
There is an issue with role permissions that is being worked on at the moment.
If you are having trouble with access or permissions on regional forums please post here to get access: https://www.boards.ie/discussion/2058365403/you-do-not-have-permission-for-that#latest

My CCTV DVR ... caling "home" in China

  • 07-12-2016 12:37pm
    #1
    rolion
    Closed Accounts Posts: 3,362 ✭✭✭


    Hi,

    Just went trough my logs on the firewall and foud the IP addres of the DVR calling "home" in China: 120.131.2.234
    I did a trace route on the IP and is no reverse name.

    I know there is a mass explosion of malware trough IoT but ... CCTV DVRs as well ?

    My DVR:
    QVIS Zeus LX
    Build Date:2012/8/11 15:15:12
    System: V2.82.R09.13931026

    Any one,any ideea !?


Comments

  • #2
    r3nu4l
    Registered Users, Registered Users 2 Posts: 17,399 ✭✭✭✭r3nu4l


    Might be worth posting in the information security forum also.

    http://touch.boards.ie/forum/24

    Many Chinese smartphone are suspected of 'reporting back' activity, to manufacturers, who are then obliged to hand the information to the Chinese government. Could be the same for your DVR too...


  • #3
    rolion
    Closed Accounts Posts: 3,362 ✭✭✭rolion


    OK,doing a packet analiser AND traffic now going to a domain nctw.dcXXXX.ie AND located in Cheryville / Kildare !!!
    Crazy stuff..where are you Mr. Robot ,i need you to run a "profile" for Derek !? :)


  • #4
    rolion
    Closed Accounts Posts: 3,362 ✭✭✭rolion


    OK..nice one !

    My DVR takes "information" from the "homeIP" than tries to connect to this site based in Kildare / Ireland.I have the site NAME (full DNS record... W T F !??? ),IP address and the owner contact details.Should i email him and tell ? No...

    "Trying" to see what is running at that site...found a B2268H Huawei 4G router device that has the SSL expired,diverts login from http to https and it asks me to login !

    Whats next ? :)


  • #5
    spongerobinson
    Registered Users, Registered Users 2 Posts: 569 ✭✭✭spongerobinson


    rolion wrote: »
    Whats next ? :)

    No idea...but following with interest!


  • #6
    mickjohnlong
    Registered Users, Registered Users 2 Posts: 394 ✭✭mickjohnlong


    Do you have remote viewing on your cctv? If yes is it thru a static ip or cloud based?


  • Advertisement
Advertisement