Many IP cameras and DVRs are shipped with web servers enabled by default, listening on Port 80 (HTTP) or Port 8080. Administrators frequently fail to change the default landing page path ( /view/index.shtml ), making them easily identifiable by search crawlers.
Never leave the factory username and password (e.g., admin/admin). This is the #1 way cameras are compromised. inurl view index shtml cctv work