• March 18, 2019, 10:36:19 AM
  • Welcome, Guest
Please login or register.

Login with username, password and session length
Advanced search  

News:

This Forum Beta is ONLY for registered owners of D-Link products in the USA for which we have created boards at this time.

Author Topic: DSC-2630L attacked from XXX.XXX.XX.XXX Classification: "WEB Remote Command"  (Read 759 times)

user100

  • Level 1 Member
  • *
  • Posts: 4

DCS-2630L
Firmware Version: 1.05.02

I recent changed my router to TP Deco router. I used their build-in antivirus tool (TrendMicro). As soon as I started the protection, I received notice, from time to time, that my DSC-2630L was being attached from XXX.XXX.XX.XXX Classification: "WEB Remote Command".

Is it some security loophole for this product? What should I do?

Thank you.
Logged

GreenBay42

  • Administrator
  • Level 9 Member
  • *
  • Posts: 1901

i will forward this to the security team to see if this is an issue. The camera will send and receive data from the mydlink servers so the router may be detecting that.
Logged

FurryNutz

  • Poweruser
  •   ▲
    ▲ ▲
  • *****
  • Posts: 47012
  • D-Link Global Forum Moderator
    • New DIR-890L Router with SmartConnect™ Technology

What is this number? XXX.XXX.XX.XXX


DCS-2630L
Firmware Version: 1.05.02

I recent changed my router to TP Deco router. I used their build-in antivirus tool (TrendMicro). As soon as I started the protection, I received notice, from time to time, that my DSC-2630L was being attached from XXX.XXX.XX.XXX Classification: "WEB Remote Command".

Is it some security loophole for this product? What should I do?

Thank you.
Logged
"Nothing Funny about It...." We are not here to Impress anyone! You have a be a COMPETENT user first to under stand COMPETENT help!

user100

  • Level 1 Member
  • *
  • Posts: 4

The numbers include:
205.185.113.123
119.23.68.83
104.248.161.171
37.53.77.129
183.233.238.67
209.141.57.239
205.185.115.94

These numbers do not appear at the same time (ie Each time the attack is from different addresses)
Logged

GreenBay42

  • Administrator
  • Level 9 Member
  • *
  • Posts: 1901

Try resetting the camera and setup again. Reflash the firmware - Make sure you get the firmware from support.dlink.com/dcs-2630L or tsd.dlink.com.tw.

Are any other devices on your network getting similar "attacks"?
Logged

FurryNutz

  • Poweruser
  •   ▲
    ▲ ▲
  • *****
  • Posts: 47012
  • D-Link Global Forum Moderator
    • New DIR-890L Router with SmartConnect™ Technology

You can see who these IPs belong to at https://whois.domaintools.com

The numbers include:
205.185.113.123
119.23.68.83
104.248.161.171
37.53.77.129
183.233.238.67
209.141.57.239
205.185.115.94

These numbers do not appear at the same time (ie Each time the attack is from different addresses)
Logged
"Nothing Funny about It...." We are not here to Impress anyone! You have a be a COMPETENT user first to under stand COMPETENT help!

user100

  • Level 1 Member
  • *
  • Posts: 4

Try resetting the camera and setup again. Reflash the firmware - Make sure you get the firmware from support.dlink.com/dcs-2630L or tsd.dlink.com.tw.

Are any other devices on your network getting similar "attacks"?

On my network, I also have a NAS, an Edimax IP cam, Compro IP cam, TP link Smart plug, WIFI printer. However, they did not receive any attacks notification. Yes, the latest firmware is from the official website of Dlink.
Logged

user100

  • Level 1 Member
  • *
  • Posts: 4

I just checked. All IP is from a company which I don't know.
Further, I read the Antivirus History again and found several entry on the attack of my DSC-2630L is "Classification: WEB D-Link DSL-2750B". Just want to know whether there are any security issue for DSC-2630L generally?


You can see who these IPs belong to at https://whois.domaintools.com

The numbers include:
205.185.113.123
119.23.68.83
104.248.161.171
37.53.77.129
183.233.238.67
209.141.57.239
205.185.115.94

These numbers do not appear at the same time (ie Each time the attack is from different addresses)
Logged