Change the default "admin/admin" or "admin/password" login immediately.
Instead of searching for vulnerable devices, the best approach is to configure your own system. Here is a universal guide to achieving "motion free" multi-camera viewing on major platforms. inurl multicameraframe mode motion free
When implementing mode=motion free , you may encounter these problems: inurl multicameraframe mode motion free
Intruders can use live feeds to monitor when people leave their homes or to identify security weak points. Device Takeover: inurl multicameraframe mode motion free