Accessing a private camera feed via Shodan without permission is (unauthorized access to a computer system). However, Shodan itself is a legal search engine—it only indexes publicly accessible information. The responsibility lies with the device owner to secure their stream.
Unfortunately, "easy" rarely equates to "secure." Many users installed the software, got it working, and never went back to secure the settings. They left the web interface exposed to the public internet. webcamxp 5 - Shodan Search
Alternatively, a simpler and highly effective search is: Accessing a private camera feed via Shodan without
A significant number of webcamXP 5 installations utilized default or weak authentication. If a user did not deliberately set up a username and password (or if they kept the default "admin/admin"), the video stream was accessible to anyone who found the IP address. Shodan effectively aggregated these open doors into a single searchable list. Unfortunately, "easy" rarely equates to "secure