There's all sorts of things going outbound by nvrs and cameras.
There'll be p2p stuff (even if turned off I reckon there's still a heartbeat of some sort), there'll be notification stuff, email, time server, checking for updates etc etc.
Almost all of it would be pretty harmless, but you can't...