I woke up this morning and noticed the connected user icon illuminated. I checked the status page and it showed a "server" type connection from 222.175.199.226 This ip shows up as a china origin hacking/bruteforce/port scanner on a reporting website. And now even stranger it has erased its entry from my status page. Im running BI4 still these days. Should i be worried? And now i see a user that has been added with the name of 1 and password of 1..
Possible hacking into blueiris?
- Thread starter jcams
- Start date
sebastiantombs
Known around here
VPN Primer
ipcamtalk.com
VPN Primer for Noobs
The internet is a force of nature; no video surveillance system made was designed to be exposed to those forces.. NEVER FORWARD PORTS to your NVR or Cameras, doing such things not only exposes you to severe security problems, but everyone else on the internet too.. Hackers dont want your video...
If you still have port forwarding enabled, immediately change your passwords to something unguessable. Then read the link to VPN. I use ZeroTier for access to my BI setup.
Sent from my Pixel 4a using Tapatalk
Sent from my Pixel 4a using Tapatalk
sebastiantombs
Known around here
Change the default administrator account password in BI. Delete the new account that was created. Change your own password. Make any password complex, upper/lower case and special characters. SHUT OFF PORT FORWARDING!
Not sure where i find the default administrator BI password.. I did change my only users password.. I also run BI as a service.. when i click the "blueiris admin" shortcut it just loads up.
Last edited:
sebastiantombs
Known around here
In the console got to the configuration, gear icon on the upper left. There you will see a tab labeled "Users". Check there for your own account, the admin account and any others that you, or someone else, may have created. You can disable/delete the admin account if you like or simply change the password and leave it as is.
Thank you both so much! Port forwarding is disabled and i already feel safer lol.. I think i deleted the admin account from users a while back so it is not there.. just my personal user account and "local console" which doesnt have a password. Should i give local console a password?
Also i went ahead and figured out how to hide my ssid but still connect
Also i went ahead and figured out how to hide my ssid but still connect
sebastiantombs
Known around here
If you're not port forwarding and using a VPN the console is fine without a password.
looney2ns
IPCT Contributor
You want to use OpenVPN on your router, it's more secure than the old pptp vpn.
Be sure your router has the latest firmware installed for it.
Be sure your router has the latest firmware installed for it.
I just noticed my router has the pptp and OpenVPN options under vpn.. sorry im all over the place doing a few things but i am about to read the vpn primer for noobs.. can i possibly just use the "openvpn" option in my asus router? Just updated the router to the latest fimware..
looney2ns
IPCT Contributor
Yes, that is what we have been saying. Setup the OpenVPN server on your router.
OK cool.. i am just learning this stuff. When i enable the openvpn option on my router it opens more options..
VPN details - is set to general
Server port - auto generated a port number
RSA encryption - 1024 bit or 2048
Client will use vpn to access - Local only or internet and local are the 2 options
Then below all that i have a section that allows me to enter a username and password for up to 16 users.
Will i need to run some kind of openvpn software on my android to access my cameras?
VPN details - is set to general
Server port - auto generated a port number
RSA encryption - 1024 bit or 2048
Client will use vpn to access - Local only or internet and local are the 2 options
Then below all that i have a section that allows me to enter a username and password for up to 16 users.
Will i need to run some kind of openvpn software on my android to access my cameras?
sebastiantombs
Known around here
The router will generate a file needed for whatever device you want to use it on, PC, Android, IoS. You'll need to install the VPN client on the devices then import the file that the router generates to be able to connect. It's pretty much point and click. You'll need to create a user, or as many as are needed, under OpenVPN on the router as well if I remember correctly.