Websites like Insecam have previously archived thousands of these unsecured feeds to demonstrate the critical importance of security settings.
If you have IP cameras at home, you should take these steps to ensure they aren't appearing in these search results: 5 Steps to Securing a Remote Access Security Camera System
: Be aware that even "hidden" cameras can be detected by specialized apps or infrared scanners. encryption methods for home security or recommendations for privacy-focused camera brands
An attacker searches inurl: view index shtml bedroom install on Google. The third result shows a directory listing with install.shtml and config_old.shtml .
If you are looking for a report on the risks associated with these types of search queries or exposed devices, here are the key findings: Vulnerability Exposure
Older models from brands like Vivotek, Gadspot, or TRENDnet used view index.shtml as a primary page for streaming video. For example: http://[camera_IP]/cgi-bin/view/index.shtml?camera=1 If a device was never properly secured, searching inurl:view index.shtml would yield live video feeds. Adding “bedroom” filters for internal room labels. The “install” suffix suggests an installation panel left open.
: Poorly configured cameras can broadcast private spaces (like bedrooms) to the public internet. This often happens because the "Remote View" feature is enabled without setting a strong password. Mitigation Change Default Passwords : Always update factory-set usernames and passwords. Disable UPnP