BackOrifice on hikvision doorbell DS-KB6403-WIP?

sunday

n3wb
Joined
Mar 21, 2019
Messages
10
Reaction score
0
Location
nl
I just installed this wifi doorbell. My asus router tells me (I guess through the Mac- address) that is is a netgear ntv300, which by itself is a bit weird, but who knows they put an small one inside. My router also has an analyze traffic option, which tells me what application it is talking to.

What worries me is that it talks to something called BackOrifice, a remote admin tool which is also used for hacking. Is my doorbell hacked? Is it trying to hack my router, or my computer?

Is anybody else seeing this?
 

tangent

IPCT Contributor
Joined
May 12, 2016
Messages
4,421
Reaction score
3,655
most likely your router just declares that anything that uses port 31337 is backorifice. To figure out anything meaningful you'd need to use something better to analyze the traffic.
 
Top