PDA

View Full Version : Someone hacking my VU


c0154936
14-03-18, 23:15
Hi Guys

Someone is remotely accessing my VU

from

ppp109-252-72-225.pppoe.ru

I've blocked the ports on my WAN but can some tell me how they found me?
ccs
14-03-18, 23:26
They just scan all ports until they find what they're looking for. Everyone who leaves ports open is vulnerable.

Every WAN IP address will be targeted at some time.
c0154936
14-03-18, 23:30
Can we set the streaming ports to using an encrypted port eg. https?
ccs
14-03-18, 23:31
You need to set up a VPN.
c0154936
14-03-18, 23:32
i'm gonna flash my receiver from scratch just in case they have setup any f*** up cron job.
birdman
14-03-18, 23:57
i'm gonna flash my receiver from scratch just in case they have setup any f*** up cron job.If they are accessing your box then it is more likely your router which needs to be reconfigured.
One person on here apparently discovered that their box was, somehow, in the DMZ.
birdman
14-03-18, 23:58
Can we set the streaming ports to using an encrypted port eg. https?That wouldn't stop anything. They'd just accept the certificate and keep streaming....
c0154936
15-03-18, 00:04
this box was not in the DMZ but i did open the ports, my fault completely.

Lesson learnt i suppose, still in the process of flashing box, lol
jukkal2
15-03-18, 15:50
Can we set the streaming ports to using an encrypted port eg. https?
I would be more worried of some hacker messing up my configuration or otherwise damaging the system (and possibly using it for some distributed attacks) than just somebody being able to stream some content from tv or recordings..
joysleep1
15-03-18, 16:43
But i still do not understand how someone can hack you if you have your ports open. Now, when you open your ports you have to set credentials and (username nad password). So even if someone scans your ports or whatever, how would they guess the username or password?
c0154936
15-03-18, 20:11
In OPENWEBIF, there is a setting to enable "HTTP AUTHENTICATION FOR STREAMING" and that was switched off so even though the guy could not access port 80, he could access port 8001-8002 without any username or password.

If you enable "HTTP AUTHENTICATION FOR STREAMING" for streaming, the CLIENT MODE feature on my vu zeros stopped working.
jassie
11-06-18, 02:12
close your ports, I set up for remote access to my receiver in the past year and was hacked in no time. Recordings on both my VU receivers were wiped by the hacker, going back several years, you can imagine how pissed I was:rolleyes:
imish
11-06-18, 09:20
Amazing how many boxed show up with a quick google search.....

Its hardly a hack it you leave the door wide open.
jassie
13-06-18, 00:38
Amazing how many boxed show up with a quick google search.....

Its hardly a hack it you leave the door wide open.

what exactly do you write in google to see these?:confused: