Dahua P2P Relay Serial Lookup Abuse via easy4ipcloud.com:8800

Ibrahim Saud@tektrix

•updated Sep 20, 2026•0•0•2

Detects network activity related to Dahua P2P relay services (easy4ipcloud.com) on port 8800. The rules monitor for device lookup queries (/online/p2psrv/), probe requests (/probe/device/), and the presence of WSSE authentication headers, which may indicate interaction with or exploitation attempts by tools targeting P2P-enabled surveillance hardware.