p2pwn Question

Dahua NVR?
You’ve been hacked

Are you running P2P on an NVR with firmware older than Aug 2024?

Are you running port forwarding on your router to access the NVR?

One of those two things most likely.

  • disconnect NVR and cameras from the internet
  • factory default NVR and all cameras
  • re-initialize the NVR
  • make sure your admin is the only user account
  • download and update the NVR firmware to something later than Aug 2024
  • reboot
  • plug each camera back into the NVR and wait for each one to come back up

If you are port forwarding you’ll be hacked again

Best to use a VPN such as OpenVPN or Wireguard

P2P is fine if you update all firmware to Aug 2024 or later
 
Last edited:
  • Like
Reactions: JDreaming and TonyR
And now on cameras I am seeing reserved user accounts.. what a mess. Most of my cameras have no newer firmware update I am aware of but will ask Andy and check all these settings.

UNPLUG it from the INTERNET NOW

If you are using PoE cams plugged directly into the NVR it matters much less about the cameras fw,.

The important thing, and the hack, likely came through your NVR

The steps I showed are still the ones you should use
There is no other way at this point
 
Last edited:
  • Like
Reactions: JDreaming
+1^^^^.
Also disable uPnP in router.
Cameras may have uPnP also but not as big a deal with a POE NVR but it won't hurt to disable those as well.
 
And if you are indeed using a PoE NVR with cameras directly attached to it, there is NO good reason to have P2P enabled on them. The NVR will handle it
 
  • Like
Reactions: JDreaming
Andy still has many of the Dahua 5442 series (54IR series using his naming system)
These are still the go to cameras

Each location/scene is different, possible another model may be better for any given scene but that requires seeing a picture of the scene at night (daytime they'll all be fine)