IP Crawl maps thousands of open webcams on the public internet

IP Crawl, a scanner that probes common webcam ports (80, 554, 8080, etc.), has indexed a large number of publicly reachable cameras. The project’s website lists the live atlas of URLs that return image data, and the effort sparked discussion on Hacker News [IP Crawl][hn-front].

How it works

The scanner sends lightweight HTTP requests to IP ranges, records any response that contains a JPEG or MJPEG stream, and publishes the results in a searchable database. Each entry includes the IP address, port, and a thumbnail preview, allowing anyone to verify whether a device is exposed.

Security implications

The atlas shows that many webcams operate with default credentials or no authentication at all, meaning anyone can view live video feeds. Open cameras provide a low‑cost foothold for attackers to pivot into internal networks, harvest credentials, or conduct surveillance. Because the list is public, it can be used both for legitimate hardening efforts and for malicious scanning.

What engineers can do

Network teams can query the atlas for their own address space, identify exposed devices, and apply immediate mitigations: enable strong passwords, update firmware, and block inbound webcam ports at the perimeter firewall. Regular scans against the same ports help maintain a clean surface area and reduce the risk of accidental exposure.

The IP Crawl project demonstrates how easy it is to discover unsecured cameras and underscores the need for proactive device hardening across any organization that deploys IP‑based video equipment.