Multiple access attempts in Dahua NVR log and choppy video

zxcc

n3wb
Joined
Mar 1, 2018
Messages
4
Reaction score
0
Today I've checked the logs of my Dahua NVR and it looks like someone's been trying to log in regularly from different locations for a long time. I've added the IPs to the NVR's black list, but it's no use since the IPs keep on changing. Here's part of the log:


Code:
2    2020-03-05 23:37:16    admin    AuthFailed    EXCEPCION: Login failed! Invalid user name or password. Time: 2020-03-05 23:37:09 Login Group Name: admin Login IP Address: 185.147.x.x Login User: admin
3    2020-03-05 22:58:36    admin    AuthFailed    EXCEPCION: Login failed! Invalid user name or password. Time: 2020-03-05 22:58:36 Login Group Name: admin Login IP Address: 216.151.x.x Login User: admin
4    2020-03-05 22:31:36    admin    AuthFailed    EXCEPCION: Login failed! Invalid user name or password. Time: 2020-03-05 22:31:29 Login Group Name: admin Login IP Address: 5.183.x.x Login User: admin
5    2020-03-05 22:24:56    admin    AuthFailed    EXCEPCION: Login failed! Invalid user name or password. Time: 2020-03-05 22:24:55 Login Group Name: admin Login IP Address: 45.56.x.x Login User: admin
6    2020-03-05 22:15:36    admin    AuthFailed    EXCEPCION: Login failed! Invalid user name or password. Time: 2020-03-05 22:15:36 Login Group Name: admin Login IP Address: 45.10.x.x Login User: admin
7    2020-03-05 21:34:16    admin    AuthFailed    EXCEPCION: Login failed! Invalid user name or password. Time: 2020-03-05 21:34:11 Login Group Name: admin Login IP Address: 45.10.x.x Login User: admin
8    2020-03-05 20:53:16    admin    AuthFailed    EXCEPCION: Login failed! Invalid user name or password. Time: 2020-03-05 20:52:58 Login Group Name: admin Login IP Address: 185.244.x.x Login User: admin
9    2020-03-05 20:30:16    admin    AuthFailed    EXCEPCION: Login failed! Invalid user name or password. Time: 2020-03-05 20:30:11 Login Group Name: admin Login IP Address: 216.169.x.x Login User: admin
10    2020-03-05 20:15:56    admin    AuthFailed    EXCEPCION: Login failed! Invalid user name or password. Time: 2020-03-05 20:15:46 Login Group Name: admin Login IP Address: 45.10.x.x Login User: admin
11    2020-03-05 19:46:36    admin    AuthFailed    EXCEPCION: Login failed! Invalid user name or password. Time: 2020-03-05 19:46:25 Login Group Name: admin Login IP Address: 104.238.x.x Login User: admin
12    2020-03-05 19:34:16    admin    AuthFailed    EXCEPCION: Login failed! Invalid user name or password. Time: 2020-03-05 19:34:09 Login Group Name: admin Login IP Address: 45.10.x.x Login User: admin
13    2020-03-05 18:54:56    admin    AuthFailed    EXCEPCION: Login failed! Invalid user name or password. Time: 2020-03-05 18:54:55 Login Group Name: admin Login IP Address: 5.183.x.x Login User: admin
14    2020-03-05 18:21:16    admin    AuthFailed    EXCEPCION: Login failed! Invalid user name or password. Time: 2020-03-05 18:21:16 Login Group Name: admin Login IP Address: 64.145.x.x Login User: admin
15    2020-03-05 18:15:36    admin    AuthFailed    EXCEPCION: Login failed! Invalid user name or password. Time: 2020-03-05 18:15:32 Login Group Name: admin Login IP Address: 176.67.x.x Login User: admin
16    2020-03-05 17:26:56    admin    AuthFailed    EXCEPCION: Login failed! Invalid user name or password. Time: 2020-03-05 17:26:41 Login Group Name: admin Login IP Address: 216.151.x.x Login User: admin
17    2020-03-05 16:58:16    admin    AuthFailed    EXCEPCION: Login failed! Invalid user name or password. Time: 2020-03-05 16:58:11 Login Group Name: admin Login IP Address: 5.183.x.x Login User: admin
18    2020-03-05 16:26:56    admin    AuthFailed    EXCEPCION: Login failed! Invalid user name or password. Time: 2020-03-05 16:26:52 Login Group Name: admin Login IP Address: 2.58.x.x Login User: admin
19    2020-03-05 16:16:56    admin    AuthFailed    EXCEPCION: Login failed! Invalid user name or password. Time: 2020-03-05 16:16:53 Login Group Name: admin Login IP Address: 176.67.x.x Login User: admin
20    2020-03-05 16:12:56    admin    AuthFailed    EXCEPCION: Login failed! Invalid user name or password. Time: 2020-03-05 16:12:54 Login Group Name: admin Login IP Address: 185.245.x.x Login User: admin
21    2020-03-05 15:10:36    admin    AuthFailed    EXCEPCION: Login failed! Invalid user name or password. Time: 2020-03-05 15:10:21 Login Group Name: admin Login IP Address: 5.183.x.x Login User: admin
22    2020-03-05 14:51:36    admin    AuthFailed    EXCEPCION: Login failed! Invalid user name or password. Time: 2020-03-05 14:51:35 Login Group Name: admin Login IP Address: 216.151.x.x Login User: admin
23    2020-03-05 14:29:36    admin    AuthFailed    EXCEPCION: Login failed! Invalid user name or password. Time: 2020-03-05 14:29:17 Login Group Name: admin Login IP Address: 5.180.x.x Login User: admin
24    2020-03-05 14:15:56    admin    AuthFailed    EXCEPCION: Login failed! Invalid user name or password. Time: 2020-03-05 14:15:37 Login Group Name: admin Login IP Address: 64.145.x.x Login User: admin
25    2020-03-05 14:10:16    admin    AuthFailed    EXCEPCION: Login failed! Invalid user name or password. Time: 2020-03-05 14:10:14 Login Group Name: admin Login IP Address: 173.245.x.x Login User: admin
26    2020-03-05 13:11:56    admin    AuthFailed    EXCEPCION: Login failed! Invalid user name or password. Time: 2020-03-05 13:11:42 Login Group Name: admin Login IP Address: 94.46.x.x Login User: admin
27    2020-03-05 12:35:56    admin    AuthFailed    EXCEPCION: Login failed! Invalid user name or password. Time: 2020-03-05 12:35:42 Login Group Name: admin Login IP Address: 85.10.x.x Login User: admin
28    2020-03-05 12:30:16    admin    AuthFailed    EXCEPCION: Login failed! Invalid user name or password. Time: 2020-03-05 12:30:00 Login Group Name: admin Login IP Address: 173.245.x.x Login User: admin
29    2020-03-05 12:12:36    admin    AuthFailed    EXCEPCION: Login failed! Invalid user name or password. Time: 2020-03-05 12:12:32 Login Group Name: admin Login IP Address: 185.244.x.x Login User: admin
30    2020-03-05 12:05:36    admin    AuthFailed    EXCEPCION: Login failed! Invalid user name or password. Time: 2020-03-05 12:05:23 Login Group Name: admin Login IP Address: 2.58.x.x Login User: admin
31    2020-03-05 11:07:36    admin    AuthFailed    EXCEPCION: Login failed! Invalid user name or password. Time: 2020-03-05 11:07:31 Login Group Name: admin Login IP Address: 173.245.x.x Login User: admin
32    2020-03-05 10:35:16    admin    AuthFailed    EXCEPCION: Login failed! Invalid user name or password. Time: 2020-03-05 10:35:08 Login Group Name: admin Login IP Address: 173.245.x.x Login User: admin
33    2020-03-05 10:22:56    admin    AuthFailed    EXCEPCION: Login failed! Invalid user name or password. Time: 2020-03-05 10:22:38 Login Group Name: admin Login IP Address: 23.254.x.x Login User: admin
34    2020-03-05 10:13:56    admin    AuthFailed    EXCEPCION: Login failed! Invalid user name or password. Time: 2020-03-05 10:13:47 Login Group Name: admin Login IP Address: 216.169.x.x Login User: admin
35    2020-03-05 09:30:16    admin    AuthFailed    EXCEPCION: Login failed! Invalid user name or password. Time: 2020-03-05 09:30:13 Login Group Name: admin Login IP Address: 104.238.x.x Login User: admin
What can I do to stop that from happening? Unfortunatelly the NVR needs to be accessed remotely, so I can't disable port forwarding for it.

Another problem I have is with a Dahua IP cam (hfw4433f-zsa) connected to the NVR. Namely, the video has become very choppy of late, laggy, especially when there's lots of scene change, fast moving objects etc. In addition, some strange audio glitches appear as well, like old audio fragments overlapping new, weird pitch distortion. The camera also has a problem with constant connection dropping. When I try to watch a live stream in e.g. VLC the stream stops after a few minutes and won't automatically restart/reconnect unless I manually do so. This is the reason why I can't broadcast the stream through certain services such as AngelCam, because the stream gets interrupted and won't restart. I've read somewhere that the cam uses some unorthodox method to keep RTSP connection alive (aka heartbeat). It should periodically check for GET_PARAMETER which is what I think VLC sends, but the camera seems to ignore it. What's odd though is that the stream never gets interrupted when viewed via the camera web interface. However, some other services like ipcamlive somehow manage to work around this (the stream doesn't stop but becomes glitchy over time, as I've mentioned before).
However, all recordings are ok, they play smoothly. First I thought it was a network issue, but the internet speed is 32Mbit / 20Mbit (download/upload), and the camera encodes at 1500Kbit CBR, 50 GOP, 32Kbit audio, which should be more than enough to broadcast live video feed without any hiccups (it broadcasts to a streaming server so there's only one connection with the cam). I've already tried replacing routers, switches etc but nothing helped. Any ideas how to solve this problem?
 

mat200

IPCT Contributor
Joined
Jan 17, 2017
Messages
14,133
Reaction score
23,549
Today I've checked the logs of my Dahua NVR and it looks like someone's been trying to log in regularly from different locations for a long time. I've added the IPs to the NVR's black list, but it's no use since the IPs keep on changing. Here's part of the log:


Code:
2    2020-03-05 23:37:16    admin    AuthFailed    EXCEPCION: Login failed! Invalid user name or password. Time: 2020-03-05 23:37:09 Login Group Name: admin Login IP Address: 185.147.x.x Login User: admin
3    2020-03-05 22:58:36    admin    AuthFailed    EXCEPCION: Login failed! Invalid user name or password. Time: 2020-03-05 22:58:36 Login Group Name: admin Login IP Address: 216.151.x.x Login User: admin
4    2020-03-05 22:31:36    admin    AuthFailed    EXCEPCION: Login failed! Invalid user name or password. Time: 2020-03-05 22:31:29 Login Group Name: admin Login IP Address: 5.183.x.x Login User: admin
5    2020-03-05 22:24:56    admin    AuthFailed    EXCEPCION: Login failed! Invalid user name or password. Time: 2020-03-05 22:24:55 Login Group Name: admin Login IP Address: 45.56.x.x Login User: admin
6    2020-03-05 22:15:36    admin    AuthFailed    EXCEPCION: Login failed! Invalid user name or password. Time: 2020-03-05 22:15:36 Login Group Name: admin Login IP Address: 45.10.x.x Login User: admin
7    2020-03-05 21:34:16    admin    AuthFailed    EXCEPCION: Login failed! Invalid user name or password. Time: 2020-03-05 21:34:11 Login Group Name: admin Login IP Address: 45.10.x.x Login User: admin
8    2020-03-05 20:53:16    admin    AuthFailed    EXCEPCION: Login failed! Invalid user name or password. Time: 2020-03-05 20:52:58 Login Group Name: admin Login IP Address: 185.244.x.x Login User: admin
9    2020-03-05 20:30:16    admin    AuthFailed    EXCEPCION: Login failed! Invalid user name or password. Time: 2020-03-05 20:30:11 Login Group Name: admin Login IP Address: 216.169.x.x Login User: admin
10    2020-03-05 20:15:56    admin    AuthFailed    EXCEPCION: Login failed! Invalid user name or password. Time: 2020-03-05 20:15:46 Login Group Name: admin Login IP Address: 45.10.x.x Login User: admin
11    2020-03-05 19:46:36    admin    AuthFailed    EXCEPCION: Login failed! Invalid user name or password. Time: 2020-03-05 19:46:25 Login Group Name: admin Login IP Address: 104.238.x.x Login User: admin
12    2020-03-05 19:34:16    admin    AuthFailed    EXCEPCION: Login failed! Invalid user name or password. Time: 2020-03-05 19:34:09 Login Group Name: admin Login IP Address: 45.10.x.x Login User: admin
13    2020-03-05 18:54:56    admin    AuthFailed    EXCEPCION: Login failed! Invalid user name or password. Time: 2020-03-05 18:54:55 Login Group Name: admin Login IP Address: 5.183.x.x Login User: admin
14    2020-03-05 18:21:16    admin    AuthFailed    EXCEPCION: Login failed! Invalid user name or password. Time: 2020-03-05 18:21:16 Login Group Name: admin Login IP Address: 64.145.x.x Login User: admin
15    2020-03-05 18:15:36    admin    AuthFailed    EXCEPCION: Login failed! Invalid user name or password. Time: 2020-03-05 18:15:32 Login Group Name: admin Login IP Address: 176.67.x.x Login User: admin
16    2020-03-05 17:26:56    admin    AuthFailed    EXCEPCION: Login failed! Invalid user name or password. Time: 2020-03-05 17:26:41 Login Group Name: admin Login IP Address: 216.151.x.x Login User: admin
17    2020-03-05 16:58:16    admin    AuthFailed    EXCEPCION: Login failed! Invalid user name or password. Time: 2020-03-05 16:58:11 Login Group Name: admin Login IP Address: 5.183.x.x Login User: admin
18    2020-03-05 16:26:56    admin    AuthFailed    EXCEPCION: Login failed! Invalid user name or password. Time: 2020-03-05 16:26:52 Login Group Name: admin Login IP Address: 2.58.x.x Login User: admin
19    2020-03-05 16:16:56    admin    AuthFailed    EXCEPCION: Login failed! Invalid user name or password. Time: 2020-03-05 16:16:53 Login Group Name: admin Login IP Address: 176.67.x.x Login User: admin
20    2020-03-05 16:12:56    admin    AuthFailed    EXCEPCION: Login failed! Invalid user name or password. Time: 2020-03-05 16:12:54 Login Group Name: admin Login IP Address: 185.245.x.x Login User: admin
21    2020-03-05 15:10:36    admin    AuthFailed    EXCEPCION: Login failed! Invalid user name or password. Time: 2020-03-05 15:10:21 Login Group Name: admin Login IP Address: 5.183.x.x Login User: admin
22    2020-03-05 14:51:36    admin    AuthFailed    EXCEPCION: Login failed! Invalid user name or password. Time: 2020-03-05 14:51:35 Login Group Name: admin Login IP Address: 216.151.x.x Login User: admin
23    2020-03-05 14:29:36    admin    AuthFailed    EXCEPCION: Login failed! Invalid user name or password. Time: 2020-03-05 14:29:17 Login Group Name: admin Login IP Address: 5.180.x.x Login User: admin
24    2020-03-05 14:15:56    admin    AuthFailed    EXCEPCION: Login failed! Invalid user name or password. Time: 2020-03-05 14:15:37 Login Group Name: admin Login IP Address: 64.145.x.x Login User: admin
25    2020-03-05 14:10:16    admin    AuthFailed    EXCEPCION: Login failed! Invalid user name or password. Time: 2020-03-05 14:10:14 Login Group Name: admin Login IP Address: 173.245.x.x Login User: admin
26    2020-03-05 13:11:56    admin    AuthFailed    EXCEPCION: Login failed! Invalid user name or password. Time: 2020-03-05 13:11:42 Login Group Name: admin Login IP Address: 94.46.x.x Login User: admin
27    2020-03-05 12:35:56    admin    AuthFailed    EXCEPCION: Login failed! Invalid user name or password. Time: 2020-03-05 12:35:42 Login Group Name: admin Login IP Address: 85.10.x.x Login User: admin
28    2020-03-05 12:30:16    admin    AuthFailed    EXCEPCION: Login failed! Invalid user name or password. Time: 2020-03-05 12:30:00 Login Group Name: admin Login IP Address: 173.245.x.x Login User: admin
29    2020-03-05 12:12:36    admin    AuthFailed    EXCEPCION: Login failed! Invalid user name or password. Time: 2020-03-05 12:12:32 Login Group Name: admin Login IP Address: 185.244.x.x Login User: admin
30    2020-03-05 12:05:36    admin    AuthFailed    EXCEPCION: Login failed! Invalid user name or password. Time: 2020-03-05 12:05:23 Login Group Name: admin Login IP Address: 2.58.x.x Login User: admin
31    2020-03-05 11:07:36    admin    AuthFailed    EXCEPCION: Login failed! Invalid user name or password. Time: 2020-03-05 11:07:31 Login Group Name: admin Login IP Address: 173.245.x.x Login User: admin
32    2020-03-05 10:35:16    admin    AuthFailed    EXCEPCION: Login failed! Invalid user name or password. Time: 2020-03-05 10:35:08 Login Group Name: admin Login IP Address: 173.245.x.x Login User: admin
33    2020-03-05 10:22:56    admin    AuthFailed    EXCEPCION: Login failed! Invalid user name or password. Time: 2020-03-05 10:22:38 Login Group Name: admin Login IP Address: 23.254.x.x Login User: admin
34    2020-03-05 10:13:56    admin    AuthFailed    EXCEPCION: Login failed! Invalid user name or password. Time: 2020-03-05 10:13:47 Login Group Name: admin Login IP Address: 216.169.x.x Login User: admin
35    2020-03-05 09:30:16    admin    AuthFailed    EXCEPCION: Login failed! Invalid user name or password. Time: 2020-03-05 09:30:13 Login Group Name: admin Login IP Address: 104.238.x.x Login User: admin
What can I do to stop that from happening? Unfortunatelly the NVR needs to be accessed remotely, so I can't disable port forwarding for it.
...
Dear @zxcc

DO NOT PORT FORWARD.

IF you do it is JUST A question of time before you are cyberjacked!


Seriously, this is like visiting hookers in Wuhan in the last couple of months - it is just a question of time before you get the illness.

"Oh, but I need to see the hookers... "

...

SEE the VPN notes in the wiki.
 
Top