Dahua Camera CGI HTTP Brute-Force Fallback (CGI Brute UA Tag)

Arnold Chan@slaz

•updated Sep 6, 2026•0•0•3

Detects repeated HTTP requests targeting the '/cgi-bin/' path on Dahua camera web interfaces with a specific user-agent string ('CGI Brute'). This behavior is characteristic of an automated brute-force campaign attempting to gain unauthorized access to camera web administration interfaces.