Securing IP Camera from External Login?

[McHaggis69]

Hi,

I have used an old Amcrest ProHD IP2M-841B for some years now.

I have two questions regarding it -

1 - Despite the only active 'event' in the camera setup being motion detection, over the last few weeks the camera has started recording all night every night at 8 minute intervals. I had read a network fault could cause that, but I've since turned that off as a recording event. Any ideas appreciated. Why is it recording every 8 minutes? Firmware is up to date.

2 - While investigating tonight what might be causing problem 1, I discovered in the logs (which I've never looked at until now) attempts by random IP addresses to log in to the camera. Usually using 'home', 'admin' etc type login names. The password I have set on the camera is *very* secure so I'm not that worried, but it set me thinking, how do I stop these people trying to log in? One IP address in particualr has been very persistent in trying regularly and often to log in. I do access the camera myself remotely to check on my dogs so shutting off external access is not an option. I guess I could change the standard port, but this guy would obviously just scan my fixed IP for another open port? Is there any way to block these kinds of login attempts?

[Revo2Maxx]

To be Honest the best thing to do if you have someone trying to log in is turn off Port Forwarding and only use P2P... While I know you said you access from outside your self however didn't state how you do this over Phone or Outside Computer?

Either way to be honest the Best bet would be turn off all Network forwarding to the camera and setup the camera to access over P2P Only.. Then when you access the Camera over your Phone from anywhere with cell data or even if your camera is connected to another Network data it will access the camera. It is Fast and Secure and there is no Ports open to let outside hackers try to access your system. Most times it is a Bot that is doing random access attacks until something is found then the hacker tries to find what can Crack or if your using bad FW that has issue hackers can Exploit.. If you need access with a PC while away from your home like your Laptop then use ASP for access as there is the option to log in with the software on PC or Mac using P2P just need to make sure that option is checked when setup and use the SN rather then the IP when setting up...

[McHaggis69]

Thanks for that advice.

For info I think i found the cause of the recording every 8 minutes. Both the wired and wireless settings were set to the same IP causing a network conflict. Even though network events were disabled it does appear the camera was still recording due to teh conflict. I dont use wifi so its disabled, but now the settings have a different fixed ip in place which seems to have cured it.

In terms of security I have now found how to block an IP (or IP segment) so have done that.
I use the amcrest app on my phone and ipad when away from home which I will review how its setup. Currently I am port forwarding one port to make it work (I dont use upnp or anything like that) so I could theoretically change the port on the camera setup and my router - or as you suggest look at different ways to contact it remotely using the amcrest app.

[GaryOkie]

Many of my cameras are Dahua, not Amcrest, and I would never trust P2P connections to a Chinese hosted server. At least Amcrest P2P servers are hosted on AWS in the US, so P2P security is good only to the extent that you trust Amcrest. For users outside of the US, there will also likely be increased communication latency using Amcrest P2P if it remains US-hosted only.

In addition to blocking all Internet access on my cameras via the router, I only use OpenVPN from outside the home to access my cameras or NVR directly. Only the AD110 doorbell still uses P2P, necessary for 2-way talk, but the subnet it is on is isolated from my main home network (as are other IoT devices).

Here's a good article comparing VPN, P2P, and Port Forwarding for securing access to home cameras...
https://www.vueville.com/home-security/ ... 2p-vs-vpn/

[McHaggis69]

Thanks - you've actually hit on something that I hadn't considered.
I use VPN to access my home network for files etc when I am remote so there is really nothing to stop me ditching the Amcrest software which requires open ports or P2P etc, and simply logging into the camera via my VPN.

Its so obvious now that I think about it.
Connect to my home network via my VPN and boom! job done.

I will explore all the solutions, but that looks favourite

[McHaggis69]

Well thats that sorted.

Camera port now closed.
Connecting remotely via my VPN and I can still browse the camera using the Amcrest software as if I am in the house.

Great answers thanks. Every day is a school day.