What I found is that cameras are marketed using "security", but when it comes to network security they are not very secure.
- They all use http for setup/admin.
- They all report motion/audio events via ftp or smtp.
One of the vendors has a laughable effort at "Security through obscurity" by making the http port 88 vs 80...
Command to look for open port 80 on a network
- nmap -p80 192.168.1.0/24 --open
- nmap -p80,88 192.168.1.0/24 --open
Yeah, somebody up to no good will never figure that out...