Possible hacking into blueiris?

jcams

Getting the hang of it
Aug 5, 2015
74
31
I woke up this morning and noticed the connected user icon illuminated. I checked the status page and it showed a "server" type connection from 222.175.199.226 This ip shows up as a china origin hacking/bruteforce/port scanner on a reporting website. And now even stranger it has erased its entry from my status page. Im running BI4 still these days. Should i be worried? And now i see a user that has been added with the name of 1 and password of 1..
 
  • Like
Reactions: mat200
VPN Primer
 
If you still have port forwarding enabled, immediately change your passwords to something unguessable. Then read the link to VPN. I use ZeroTier for access to my BI setup.

Sent from my Pixel 4a using Tapatalk
 
Change the default administrator account password in BI. Delete the new account that was created. Change your own password. Make any password complex, upper/lower case and special characters. SHUT OFF PORT FORWARDING!
 
Change the default administrator account password in BI. Delete the new account that was created. Change your own password. Make any password complex, upper/lower case and special characters. SHUT OFF PORT FORWARDING!
Not sure where i find the default administrator BI password.. I did change my only users password.. I also run BI as a service.. when i click the "blueiris admin" shortcut it just loads up.
 
Last edited:
I will admit i have never messed with VPN stuff. My asus router has a VPN section, can i use that? Or should i go ahead and read the steps you linked and try to figure it all out?
 
The VPN link provides a few details on setting up a VPN through a router. Start there, but be sure and go ahead and disable port forwarding first.

Sent from my Pixel 4a using Tapatalk
 
In the console got to the configuration, gear icon on the upper left. There you will see a tab labeled "Users". Check there for your own account, the admin account and any others that you, or someone else, may have created. You can disable/delete the admin account if you like or simply change the password and leave it as is.
 
  • Like
Reactions: jcams and TVille
Thank you both so much! Port forwarding is disabled and i already feel safer lol.. I think i deleted the admin account from users a while back so it is not there.. just my personal user account and "local console" which doesnt have a password. Should i give local console a password?
Also i went ahead and figured out how to hide my ssid but still connect :)
 
  • Like
Reactions: TVille
If you're not port forwarding and using a VPN the console is fine without a password.
 
  • Like
Reactions: jcams
You want to use OpenVPN on your router, it's more secure than the old pptp vpn.
Be sure your router has the latest firmware installed for it.
I just noticed my router has the pptp and OpenVPN options under vpn.. sorry im all over the place doing a few things but i am about to read the vpn primer for noobs.. can i possibly just use the "openvpn" option in my asus router? Just updated the router to the latest fimware..
 
  • Like
Reactions: sebastiantombs
I just noticed my router has the pptp and OpenVPN options under vpn.. sorry im all over the place doing a few things but i am about to read the vpn primer for noobs.. can i possibly just use the "openvpn" option in my asus router? Just updated the router to the latest fimware..
Yes, that is what we have been saying. Setup the OpenVPN server on your router.
 
OK cool.. i am just learning this stuff. When i enable the openvpn option on my router it opens more options..
VPN details - is set to general
Server port - auto generated a port number
RSA encryption - 1024 bit or 2048
Client will use vpn to access - Local only or internet and local are the 2 options

Then below all that i have a section that allows me to enter a username and password for up to 16 users.

Will i need to run some kind of openvpn software on my android to access my cameras?
 
  • Like
Reactions: sebastiantombs
The router will generate a file needed for whatever device you want to use it on, PC, Android, IoS. You'll need to install the VPN client on the devices then import the file that the router generates to be able to connect. It's pretty much point and click. You'll need to create a user, or as many as are needed, under OpenVPN on the router as well if I remember correctly.