Finding a public feed is just the tip of the iceberg. The underlying risks are far more severe, turning these devices into multiple-vector threats.
The camera is assigned a public IP address or port-forwarded through a router without a firewall blocking external traffic.
Many users do not change the default administrative credentials (e.g., admin/admin or admin/password ) or leave the interface open without any password protection.
Searching for strings like "inurl:view/index.shtml" is a well-known technique used to find unsecured, public-facing IP camera feeds. If you are looking for a "review" of this practice or the results it yields, The Experience
: Devices exposed this way are often part of larger unsecured networks
Restrict internet access to the camera and require users to connect via a secure VPN to view the feed remotely.
Change the username and password immediately upon setup. Use a strong, unique password.
Accessing a camera feed using search operators, even if it is "publicly accessible," is a gray area, and in many jurisdictions, it is illegal.