Dahua Camera Brute-Force/Auth-Bypass Sweep via DVRIP Port 37777 (CameraSwarm)

Ibrahim Saud@tektrix

•updated 22 days ago•0•0•2

Detects high-frequency connection attempts from a single source IP to multiple destination IPs over the non-standard DVRIP port 37777, often used by Dahua surveillance equipment. This behavior is indicative of automated scanning, brute-forcing, or exploitation attempts targeting vulnerable IoT/CCTV devices.