Novus NHDR-4116-H2/F

Novus · hybrid recorder, 16 analog BNC inputs and IP channels, 2 drives 3.5" · NHDR-4116-H2/F

Illustrative drawing of front and rear in proportions from the vendor datasheet

what it is

A hybrid recorder: 16 BNC video inputs for high-definition analog cameras (AHD, TVI, CVI and analog) plus IP camera channels. The datasheet for the variant without the letter F lists a hybrid mode of 16 analog + 4 IP and an IP mode with 20 channels; the /F variant reports in its API up to 20 IP channels alongside 16 analog ones.

Desktop enclosure 378 × 50 × 340 mm, 2.5 kg without drives. Inside there is room for two 3.5" SATA drives, up to 16 TB in total. On the back: HDMI up to 4K, VGA, a 10/100/1000 Ethernet port, USB 3.0, 16 alarm inputs and one relay output, RS-485 for controlling PTZ cameras, 12 V DC power from an external adapter, 30 W consumption with drives (manufacturer datasheet).

The platform is RaySharp. The same hardware and firmware reach the market under several brands; the mobile app from the datasheet, RxCamView, is an app of this platform.

what we read from it

The recorder listens on port 80 (web panel) and 9000 (the platform's own protocol, used by the apps). RTSP on port 554 is present only on some devices of this family. SSH, telnet and HTTPS on port 443 were closed on the seven units checked (October 11, 2026).

Without login the new panel returns the password rules and the version of its API (/API/Login/Range) as well as the password composition rules. All requests use the POST method with a JSON body.

After login, read-only:

model, firmware and hardware versions, disk capacity, cloud connection status,
disks: model, firmware, status (Normal, Full…), capacity and free space,
recording of each channel: enabled or not, resolution, frame rate, bitrate,
channels and streams, including bandwidth usage of the IP channels,
date, time, time zone and NTP settings,
SNMP configuration — disabled by default.

The Full status with overwrite enabled is normal: the recorder deletes the oldest recordings.

how to recognize the panel generation

The home page without login settles this immediately. The title webpackSPA means the new panel with the JSON API. A redirect login.html → index.html and a reference to RSVideoOcx.cab mean the old panel: the page only loads an ActiveX plugin, and login goes through port 9000. Without the plugin, an old device cannot be logged into over HTTP.

measured pitfalls

Code 400 is not an answer about the password. Login is HTTP Digest (MD5), and the challenge contains userhash="true". The panel in the browser ignores this flag and sends the username in plain text. A client that honors it — for example curl --digest — gets 400 Bad Request.
Lockout after a wrong password. The response carries "error_code":"verify_failed" and block_remain_time equal to 180 s. Another attempt during this time keeps the lockout.
Logging out is necessary. The panel keeps sessions on the device side and may limit their number.
NTP enabled is not NTP working. Measured: the clocks were 159–195 s fast with ntp_enable: true, because the recorder's network had no route to the time server. Check the clock drift, not the toggle itself.
RTSP without valid credentials stays silent. It answers OPTIONS, but to DESCRIBE it returns neither 401 nor anything else. Silence does not distinguish a wrong path from a wrong password.
Older devices of the platform report local time as GMT. The Date header in the RTSP response carries local time labeled GMT — the drift must be calculated with a time zone correction.
The root account is not a web panel account.
The Ethernet port does not tolerate PoE power. The manufacturer forbids plugging the recorder into a PoE port of a switch — this risks damaging both devices.

reset button

A hidden button on the rear panel: holding it for 3 seconds resets the administrator password, for 8 seconds restores factory settings (manufacturer's manual).

what we cannot read

Disk SMART — the API reports status and capacity, but not health attributes.
A command line — the device has neither SSH nor telnet.
Anything from the old panel over HTTP — login requires the plugin and port 9000.

full parameter list

A full parameter list for this model is not here yet — the ones described above are those we have read and verified. A missing list does not mean the device exposes nothing more.