Welcome @GenerallyZodBoth .51 and .52 are Dahua cameras, and they beacon to China regularly. (see attached)
Anyone have more information on this?
I would strongly advise blocking their egress on your routers or configure their IPs static with no default route.
View attachment 43552
Thanks @GenerallyZod@mat200:
Device Type
IPC-HDBW4431R-ZS
Software Version
2.420.0000.21.R, Build Date: 2016-07-24
WEB Version
3.2.1.364036
ONVIF Version
2.42
Device Type
IPC-HDBW4433R-ZS
System Version
2.621.0000.28.R, Build Date: 2017-09-12
WEB Version
3.2.1.495007
ONVIF Version
16.12(V2.3.1.460928)
@Dramus:
Auto check for updates is not in the UI on either camera, guessing older firmware.
@SouthernYankee:
Where and from who did you buy the cameras ?
USA / Amazon
Do you have uPNP enabled in your cameras or routes ?
Hell no :-D
Who long have these cameras been up and running ?
I think a couple of years
Are you using port forwarding to access the cameras from the internet ?
No. - Blue Iris.
Check that you don't have the P2P/EZ4IP checked on. But even with it off some of the older Dahua firmware around that time was known to phone home and otherwise try to make connections regardless of user settings. e.g., see:@mat200:
Device Type
IPC-HDBW4431R-ZS
Software Version
2.420.0000.21.R, Build Date: 2016-07-24
WEB Version
3.2.1.364036
ONVIF Version
2.42
Device Type
IPC-HDBW4433R-ZS
System Version
2.621.0000.28.R, Build Date: 2017-09-12
WEB Version
3.2.1.495007
ONVIF Version
16.12(V2.3.1.460928)
Another is a Windows file server offering RPC services.One of the servers they are trying to talk to is just a web server