How to know if a model is fake or not?

[Matt-One]

Hi everybody,

Maybe some of you read my post where i say that i'm looking for dahua camera...
Looking in this forum and in general on google and amazon in italy, i found a dahua model (not just one but more than one model) that it isn't available in the dahua homepage with a datasheet. So i ask myself, it could be an old model, or a re-branded model? Or just it is a fake model??

That model is : ipc-hdbw4631R-ZS at least on dahua homepage i can see this model IPC-HDBW4631E-ASE
Im not looking at this model but it isn't the first model that i can't find in dahua homepage, so i would know if i can find dahua clone or rebranded dahua (how to see them?!)
Plus what the "R" word mean?

I take a look at cliff wiki and i saw also the decoding chart but i'm not finding the answear...

Thank you

 

[looney2ns]

If you can't find the "exact" model number on the international Dahua website, then it is most likely a China region cam with hacked firmware. Usually best to avoid those.

 

[Matt-One]

Well, thx u but there are re-branded brands from dahua, right? Wich brands are they? If i understand well, the vendor that sell here from aliexpress, sell no brand camera too, but they are dahua too? they are compatible with dahua firmware? Or they doesn't have the same hardware?

Another thing i would to ask you is this :
In the cliff notes IP Cam Talk Cliff Notes | IP Cam Talk there is the Model decoding chart that say that after the 4 numbers (like in the image H-FW-8301-EP-Z)there are two letters, but usually i see one letter and then -ASE AS etc.

What does they mean?

Thank you

 

[looney2ns]

Courtesy of www.ipvm.com

 

[looney2ns]

More info found here: https://dahuawiki.com/Main_Page

 

[Matt-One]

More info found here: https://dahuawiki.com/Main_Page

Thank you so much for your time

 

[J_Fritz]

I have the model IPC-HDBW4631R-ZS. Thanks for the info-graphic for OEM's.
Running an nmap scan from my pfsense box(FreeBSD) produces this result on both of my cameras:

Running: /usr/local/bin/nmap -sS -sV -O '**IP ADDRESS**'
Starting Nmap 7.70 ( Nmap: the Network Mapper - Free Security Scanner ) at 2019-10-13 14:23 CDT
Nmap scan report for **hostname** (**ip address**)
Host is up (0.0053s latency).
Not shown: 997 closed ports
PORT STATE SERVICE VERSION
80/tcp open http
554/tcp open rtsp Lorex IP camera rtspd
5000/tcp open upnp?
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at Nmap Fingerprint Submitter 2.0 :
SF-Port80-TCP:V=7.70%I=7%D=10/13%Time=5DA379BB%P=amd64-portbld-freebsd11.2
SF:%r(GetRequest,64B2,"HTTP/1\.1\x20200\x20OK\r\nCONNECTION:\x20close\r\nD
SF:ate:\x20Sun,\x2013\x20Oct\x202019\x2013:23:37\x20GMT\r\nLast-Modified:\
SF:x20Mon,\x2004\x20Sep\x202017\x2007:50:23\x20GMT\r\nEtag:\x20\"150451142
SF:3:63d6\"\r\nCONTENT-LENGTH:\x2025558\r\nCACHE-CONTROL:\x20max-age=0\r\n
SF:CONTENT-TYPE:\x20text/html\r\n\r\n\x20\x20\x20\x20\x20\x20\x20\x20\x20\x
SF:20\x20\x20\x20\x20\x20\x20\x20

I don't have any other cameras to compare, however, port 554 being labeled as Lorex IP Camera is suspicious.

 

[SouthernYankee]

Define FAKE ?

port 554 is a standard port for RTSPD on almost all cameras.
You better turn off upnp or you will be hacked.
Read about security in the WIKI.
As posted on amazon ipc-hdbw4631R-ZS camera is not upgradable, so it is a chinese hacked camera. It may be a Dahua but is for china only.

 

[J_Fritz]

554 is the default port for RTSP (like 22 for ssh or 80 for http), but port 554 being listed specifically as Lorex IP camera could that possibly be an indication of a Lorex OEM? Unless Lorex holds the rights to the protocol which I can't find anything about.

I am aware of upnp still being enabled, it's internal only and disabled to/from the outside world. Thanks for the catch.

I've looked into updated firmware with little luck and, as of now, there is a small chance of some working, but most likely it will be Chinese only or turn it into an overpriced decoy.

 

[Arjun]

The R could mean anything i.e. Retail and such. I remember one of the reviewers here bringing that nomenclature up based on a review model he received.