Hello. I have same type of camera. Mine it's bricked also. I'm doing some tests on it now. Can you, please write these commands in command.txt and paste the results of ncat log?
partition
help
printenv
ls
tftp 0x82000000 .FLASHING_DONE_STOP_TFTP_NOW
sleep 5
Mine camera only responds to ping on...