TCP 34567
Synopsis
- TCP 34567 is widely used by XiongMai (XMeye) and other HiSilicon-based “H.264 DVR/NVR” devices for their proprietary DVR service (often called NetSurveillance/DVRIP) to provide live view, playback, and control.
- Client software that connects to this port includes XMeye (mobile/desktop), General CMS/NetSurveillance CMS, and various OEM VMS apps provided with these DVRs.
- Many OEM/rebranded systems using XiongMai firmware expose this port, including models sold under brands like SANNCE, H.View, and some older Annke and Q-See units.
- The open-source dvrip libraries and tools (e.g., python-dvrip) communicate with these devices over TCP 34567.
- Internet scans (e.g., Shodan) commonly label the service on 34567 as “H.264 DVR” or “NetSurveillance” for these devices.
- Security note: this port/service has been heavily targeted by IoT botnets and attackers due to weak/default credentials and protocol flaws in many models; Mirai variants and Mozi have been observed scanning/exploiting such DVRs.
Observed activity
Last 30 days
Detailed chart