TCP 34567

ProtocolTCP
Port34567
Labels

Synopsis

  • TCP 34567 is widely used by XiongMai (XMeye) and other HiSilicon-based “H.264 DVR/NVR” devices for their proprietary DVR service (often called NetSurveillance/DVRIP) to provide live view, playback, and control.
  • Client software that connects to this port includes XMeye (mobile/desktop), General CMS/NetSurveillance CMS, and various OEM VMS apps provided with these DVRs.
  • Many OEM/rebranded systems using XiongMai firmware expose this port, including models sold under brands like SANNCE, H.View, and some older Annke and Q-See units.
  • The open-source dvrip libraries and tools (e.g., python-dvrip) communicate with these devices over TCP 34567.
  • Internet scans (e.g., Shodan) commonly label the service on 34567 as “H.264 DVR” or “NetSurveillance” for these devices.
  • Security note: this port/service has been heavily targeted by IoT botnets and attackers due to weak/default credentials and protocol flaws in many models; Mirai variants and Mozi have been observed scanning/exploiting such DVRs.

Observed activity

Last 30 days Detailed chart

More information