What does this mean? Are there people connecting to my Blue Iris?

[talisman2208]

So I noticed These connections in my connections tab, the bottom is me, but the top 3 I don't know, one is an IP from Florida using a VPN, and the other is a Michigan VPN. What do these mean and why is their connection session 0:00:00:00?

Thanks, sorry I'm a newbie.

Steve

 

[looney2ns]

Explained in the BI help file.

 

[talisman2208]

Explained in the BI help file.

I think I read that? Maybe I didn't read the right spot but this was all I saw regarding it. So these are just random login attempts?

 

[sebastiantombs]

Let me guess, you're using port forwarding which opens your machine to every hacker in the world. Use a VPN, not an outgoing VPN designed to hide your IP address so you can go porn surfing or whatever, but an inbound VPN that allows secure, encrypted, connections back to your server from authorized devices only. If you have an Asus router a VPN server is built right in. Some models of Netgear routers also have built in VPN servers.

VPN Information Thread

VPN Primer for Noobs

The internet is a force of nature; no video surveillance system made was designed to be exposed to those forces.. NEVER FORWARD PORTS to your NVR or Cameras, doing such things not only exposes you to severe security problems, but everyone else on the internet too.. Hackers dont want your video...

ipcamtalk.com

Also look in the Wiki, in the blue bar at the top of the page, for information regarding securing your network.

 

[wittaj]

Yep I would say for port forwarding.

https://support.censys.io/hc/en-us/articles/360038378552-Frequently-Asked-Questions

You haven't been hacked yet, but the possibility is real. Follow the above VPN.

 

[SpacemanSpiff]

Speaking of scanning the Internet, I just scanned a search engine's results for one of the domain's listed.

This is what they have to say about themselves:

https://support.censys.io/hc/en-us/articles/360059603231-Censys-Internet-Scanning-Intro

 

[talisman2208]

Let me guess, you're using port forwarding which opens your machine to every hacker in the world. Use a VPN, not an outgoing VPN designed to hide your IP address so you can go porn surfing or whatever, but an inbound VPN that allows secure, encrypted, connections back to your server from authorized devices only. If you have an Asus router a VPN server is built right in. Some models of Netgear routers also have built in VPN servers.

VPN Information Thread

VPN Primer for Noobs

The internet is a force of nature; no video surveillance system made was designed to be exposed to those forces.. NEVER FORWARD PORTS to your NVR or Cameras, doing such things not only exposes you to severe security problems, but everyone else on the internet too.. Hackers dont want your video...

ipcamtalk.com

Also look in the Wiki, in the blue bar at the top of the page, for information regarding securing your network.

You are correct! And I have an Asus AC88U

 

[sebastiantombs]

So read the material and use a VPN.

 

[wittaj]

Many here use OpenVPN very successfully.

Do not port forward as you are finding out!

OpenVPN is simple, but we overthink it and make it way more difficult than it needs to be lol.

You will need a DDNS as your WAN IP address is subject to change at anytime by your ISP (although most do not change often) or you are paying for a static IP address.

I was there too once with OpenVPN...tried to do all this research to find directions and got to the point I said screw it and just enabled it and kinda of followed what it was asking and it worked.

Just go to OpenVPN and enable it and see what it says - probably asks you to create a user/PW, DDNS name, encryption method, and create certificate. Then copy and save the certificate on your mobile device. Then install the OpenVPN app and select the certificate and then connect and you are on your home network.

It really is simpler than our minds make it out to be.

OpenVPN on a Asus router

Sept 2021 Turned off comments because of ads July 2021 Bought a new Asus router, an RT-AX86U. Loaded it right away with Merlin firmware, s...

randyshomeprojects.blogspot.com

 

[Futaba]

The easiest way to create a VPN I found is to use PiVPN and choose Wireguard. PiVPN is designed to run on a Raspberry Pi, it also runs well on a Ubuntu VM on my Hyper-V server. PiVPN is super easy to setup. And if you install PiHole first and then install PiVPN, your Wireguard VPN will also use PiHole as the DNS and filter out ad servers as well as known bad IPs and domain names.

 

[Mike A.]

Wireguard and PiHole are great but he already has OpenVPN ready to go on the Asus at his network edge. Even if these scans were benign others might not be and cams are a prime target. Turn that thing on. ; ) You can do something else later if you want.

 

[CrazyAsYou]

hide your IP address so you can go porn surfing or whatever

I've found that if I disable all my VPNs, port forward and allow unauthenticated access to the cam that faces my desk while porn surfing it puts hackers off wanting gain access to my systems.