Just an fyi:
Once you come up against these cams there's a URI that gives a static image via non-auth, as long as the cam is exposed via HTTP (any port)
e.g. https://www.shodan.io/host/82.64.91.107
Shodan has the static image on 80/tcp and 554/tcp (same image).
We can obviously get full moving image+audio via 554/tcp (RTSP).
But, what about when 554/tcp isn't available?
If we were to go to:
hxxp://82.64.91.107/jpgmulreq/1/image.jpg?key=&lq=12 (URI defanged to prevent auto-linking, change to http for it to work)
We get a single static image.
Press F5 to refresh.
Or, craft a little local .html that pulls that image in, and some .js to refresh it every 500ms.
For an example of that, see: https://pastebin.com/raw/Qsej1DbP (change the IP+port accordingly. Or view as-is to see guards at a desk in RU ;-) )
Feel free to find+add me on Twitter/X, if you have an account there.