Meisam Emamjome
Meisam Emamjome

Reputation: 508

strange query in server logs REMOTE HI_SRDK_DEV_GetHddInfo

I have this http request in my server logs:

REMOTE HI_SRDK_DEV_GetHddInfo

Has anyone seen this message before?

Upvotes: 7

Views: 1123

Answers (2)

Dmytro Dadyka
Dmytro Dadyka

Reputation: 2250

HiSilicon provides SDK for developing digital video recorders and web cameras software. SDK contains protocol for remote device configuration named "MCTP". Сommands transmitted by this protocol have names similar to HI_SRDK_SYS_USERMNG_GetUserList, HI_SRDK_NET_GetEmailAttr, etc. Someone wanted to find a HiSilicon based video recorder on your IP address, possibly for hacking.

Upvotes: 0

mulya
mulya

Reputation: 1331

Looks like somebody using exploit to find and hack Kguard Digital Video Recorders in the internet. Ignore if you don't have one.

https://dl.packetstormsecurity.net/1506-exploits/kdvr-authorization.txt

Upvotes: 7

Related Questions