p2pwn Question

I performed factory reset (button inside the camera) that cleared the 2 accounts.
Then I flashed the latest firmware and factory reset it again using the UI.
All cameras have been checked for configuration and all unwanted services disabled.
I've created a new vLAN and isolated them there, all have a firewall rule in place to block internet out.
 
  • Like
Reactions: botics, misterfredsr, TonyR and 1 other person
I am watching my firewall log live right now and even with outbound/inbound rules set the bots are going crazy trying to log in. My breach was specific to the cameras not my NVR. But after this I am switching to Blue Iris full time and programming the cameras directly in terms of settings. Isolating cameras/NVR/Blue Iris to its own LAN is the way to go. Highly suggest a dual ethernet card as well. Just my thoughts...
 
Interesting when I asked questions I never got any answers from you.

So is your NVR a PoE model with the cameras plugged into the NVR or are the cameras on an external switch?
 
Ahhhh that would have helped.

And every one of them was running P2P and accessing the Internet?
Or UpnP?
Same thing would have happened if running BI if same services were exposed.
 
  • Like
Reactions: botics
EagleEye7 said:
I know for a lot of people configuring vpn's etc can seem like quite a challenge, which is understandable, but it hurts a bit to think of otherwise perfectly good cameras being thrown out or not used, just because of a security problem that a newer camera probably isn't completely immune to anyway!
Click to expand...
About that... VPN (and a lot of other technical things) really intimidated me, and really killed any motivation to learn about them. What changed that is AI. Using Claude, you provide a narrative, much like what the OP did here, specifics of the network topography, and then tell Claude you want to implement a solution that will prevent what happened. Ask it to talk to you like you're in 5th grade. AI will ultimate "eat our brains", sure. But for now, it helps those with smaller brains tackle things that are hard to grasp.
 
  • Like
Reactions: botics
If the attacks haven't been at the NVR, once you isolate the cameras from the internet, you could proceed as you are now with the NVR and not deal with the learning curve of BI.

If the cameras remain with access to the internet, they will be hacked with BI
 
bigredfish said:
Ahhhh that would have helped.
Click to expand...

I am sure there will be more of this as cameras continue to get more sophisticated
wittaj said:
If the attacks haven't been at the NVR, once you isolate the cameras from the internet, you could proceed as you are now with the NVR and not deal with the learning curve of BI.

If the cameras remain with access to the internet, they will be hacked with BI
Click to expand...
VPN time for me.. I think I said it yesterday or day before.. Wake up call for me. I personally have been wanting to move to Blue Iris and find it more useful than my new NVR.
 
You must log in or register to reply here.
Top Bottom