Dahua P2P Relay CVE-2025-31702 HMAC Replay / No-Auth Probe Sweep

Ibrahim Saud@tektrix

•updated Sep 20, 2026•0•0•2

Detects high-frequency, unauthenticated probe requests targeting Dahua P2P relay endpoints (/probe/device/ and /online/p2psrv/). This activity is indicative of automated scanning, enumeration, or potential exploitation attempts related to CVE-2025-31702 against internet-facing or network-connected Dahua hardware.