First I must apologise - this has turned into an essay!
Can I ask - did you install any other CCTV cameras in the weeks before this started happening?
I have had an AVTech KPD 674 (with 4 cameras covering the outside of my house) which has been working perfectly for over 4 years, but I too started having these issues this year.
I have always had the cctv accessible via port 81, and use port forwarding on my router so I can access it from elsewhere with my phone (using their EagleEyes app).
When my sister's house was broken into I gave her my old internal IP camera (Storage Options SON-IP1 I think it was) and installed it for her - it was great, having its' own internal web server.
I thought I should get a couple more for my own house so bought 2 cheap IP cameras from eBay - a SriCam and a YooSee (both about £25).
When I received these and tried to set them up I was quite disappointed for lots of reasons, the main 3 being:
1 - they do not have built-in web servers and can't be accessed from a web browser - they can ONLY be used with their phone/PC apps.
2 - they are sold as "HD 720p" - erm, no - that is true ONLY when viewing live through their phone app, the alarm emails and viewing with their PC app only show a very poor 320x240 resolution!!! Very pathetic.
3 - security (lack of!) - they do not need port forwarding to work - they communicate directly with their manufacturers servers, so does the app so the 2 are linked. That means their server in China has everybody's ip addresses/passwords for these cameras!
I thought (3) was quite a big security risk - but thousands were being sold (along with lots of other cameras/cctv systems using the same "no port forwarding needed") with no complaints logged that I could see so I thought I'd risk it and give them a go...
About a week later the same problem as yours happened to my KPD 674 cctv - I couldn't access it from my sister's house. When I got home and checked I found the ip address and port had been changed to some seemingly random numbers like yours.
I wondered how that had happened - there were no outside accesses logged.
Nobody knows the password I use to access the cctv DVR - but I suspect there must be a hidden manufacturers "back door" in the embedded Linux OS (that we do not have access to view/change) that the hackers know??
I reset the ip+port + rebooted it (in case anything dodgy in memory), and it worked again.
Exactly the same thing happened every few days over the next few weeks, and I got some warning letters from Virgin Media (my IPS) saying there was virus-like activity on my network.
After the first couple of times I started writing the numbers down to see if there was a pattern:
IP address Port:
10.115.251.089 52636
10.187.250.115 42268
10.232.148.069 34877
10.210.053.198 27602
10.200.191.139 11955
Not any pattern I could see.
The IP gateway had also been changed, and the DNS servers were always set to 1.2.3.4 and 1.2.3.5.
I did full scans of everything I had - no virus detected.
I can't do scans of the KPD 674 or the 2 new cameras of course, but I knew it had to be them so switched them off (I also found in some forums other users starting to get issues like them being controlled/moved remotely, apparently by an engineer at the manufacturers who then asked them how the cameras were performing!).
After a few days the same thing happened again (with the cameras off) and more Virgin Media warning letters.
This time I started using a different port number on the cctv, and changed my router port forwarding accordingly.
That was 3 months ago - and I have not had any more issues with it since then!
I changed the port number as I mentioned, but I later also changed by VM package so they sent me a new router, and I got a new ip address as well.
So the new cheap IP cameras caused my issues - wondered if your problems may also be caused by new ip cameras?
AVTECH KPD 674_lost ip settings
in Installation Help and Accessories
Posted
Hi Anastast
First I must apologise - this has turned into an essay!
Can I ask - did you install any other CCTV cameras in the weeks before this started happening?
I have had an AVTech KPD 674 (with 4 cameras covering the outside of my house) which has been working perfectly for over 4 years, but I too started having these issues this year.
I have always had the cctv accessible via port 81, and use port forwarding on my router so I can access it from elsewhere with my phone (using their EagleEyes app).
When my sister's house was broken into I gave her my old internal IP camera (Storage Options SON-IP1 I think it was) and installed it for her - it was great, having its' own internal web server.
I thought I should get a couple more for my own house so bought 2 cheap IP cameras from eBay - a SriCam and a YooSee (both about £25).
When I received these and tried to set them up I was quite disappointed for lots of reasons, the main 3 being:
1 - they do not have built-in web servers and can't be accessed from a web browser - they can ONLY be used with their phone/PC apps.
2 - they are sold as "HD 720p" - erm, no - that is true ONLY when viewing live through their phone app, the alarm emails and viewing with their PC app only show a very poor 320x240 resolution!!! Very pathetic.
3 - security (lack of!) - they do not need port forwarding to work - they communicate directly with their manufacturers servers, so does the app so the 2 are linked. That means their server in China has everybody's ip addresses/passwords for these cameras!
I thought (3) was quite a big security risk - but thousands were being sold (along with lots of other cameras/cctv systems using the same "no port forwarding needed") with no complaints logged that I could see so I thought I'd risk it and give them a go...
About a week later the same problem as yours happened to my KPD 674 cctv - I couldn't access it from my sister's house. When I got home and checked I found the ip address and port had been changed to some seemingly random numbers like yours.
I wondered how that had happened - there were no outside accesses logged.
Nobody knows the password I use to access the cctv DVR - but I suspect there must be a hidden manufacturers "back door" in the embedded Linux OS (that we do not have access to view/change) that the hackers know??
I reset the ip+port + rebooted it (in case anything dodgy in memory), and it worked again.
Exactly the same thing happened every few days over the next few weeks, and I got some warning letters from Virgin Media (my IPS) saying there was virus-like activity on my network.
After the first couple of times I started writing the numbers down to see if there was a pattern:
IP address Port:
10.115.251.089 52636
10.187.250.115 42268
10.232.148.069 34877
10.210.053.198 27602
10.200.191.139 11955
Not any pattern I could see.
The IP gateway had also been changed, and the DNS servers were always set to 1.2.3.4 and 1.2.3.5.
I did full scans of everything I had - no virus detected.
I can't do scans of the KPD 674 or the 2 new cameras of course, but I knew it had to be them so switched them off (I also found in some forums other users starting to get issues like them being controlled/moved remotely, apparently by an engineer at the manufacturers who then asked them how the cameras were performing!).
After a few days the same thing happened again (with the cameras off) and more Virgin Media warning letters.
This time I started using a different port number on the cctv, and changed my router port forwarding accordingly.
That was 3 months ago - and I have not had any more issues with it since then!
I changed the port number as I mentioned, but I later also changed by VM package so they sent me a new router, and I got a new ip address as well.
So the new cheap IP cameras caused my issues - wondered if your problems may also be caused by new ip cameras?
Hope this helps - it might not of course.
Razzi