Shodan IP Camera Exposure: Check and Secure Your Camera

11 min read · Oct 20, 2026

A shodan ip camera result means a camera or recorder answered when a scanning service knocked on a public internet address, and the service saved what it saw. To find out whether that is your camera, look up your home or shop's public IP address on Shodan and check your router for open ports. If something shows up, the fix is almost always the same four steps: remove port forwarding, turn off UPnP, change the device password and update the firmware.

What Shodan actually shows, and why cameras end up there

Shodan is a search engine, but instead of web pages it indexes devices. It continuously contacts public internet addresses and records which ports respond and what each service says about itself: a login page, a video stream, a device type, sometimes a firmware version. Anyone can search those records.

A camera only appears there if it is reachable from the internet on an open port. That normally happens in one of three ways:

Port forwarding. Someone, often an installer or a past tenant, told the router to pass traffic on a certain port straight to the camera or recorder.
UPnP. Universal Plug and Play lets devices on your network ask the router to open ports automatically, with nobody approving it.
DMZ or a public address on the camera. The router sends all unknown traffic to one device, or the camera is plugged directly into a modem without a router in between.

Here is the reassuring part. Remote viewing through the Yoosee app is designed to work without opening ports on your router: on most setups the camera makes its own outgoing connection to the app service, and your phone reaches it through that. A camera set up only that way generally does not show up as an open service in an internet device search. Exposure usually comes from something extra that was added to the router, often to make a recorder or a third-party viewer work from outside.

Being listed is not the same as being hacked. But it does mean strangers can see the login screen or stream address and try passwords, which is why it is worth closing.

Step 1: find your public IP address

Your camera has a local address inside your network (something like 192.168.x.x), and your whole network shares one public address on the internet. Shodan only knows the public one.

Connect your phone or computer to the same WiFi or network as the camera. Mobile data will give you a different, unrelated address.
Open a browser and search for "what is my IP". The number shown at the top is your current public IP.
Write it down, and note whether it looks like IPv4 (four groups of numbers separated by dots) or IPv6 (longer, with colons).

Two things can make this confusing:

Your public address can change. Many home connections get a new one after a router restart or every so often. A clean result today does not cover an address you had last month.
Some providers share one public address between many customers. If your router's own status page shows an internet (WAN) address that is different from what the website shows, your provider is probably doing this. Inbound connections usually cannot reach your devices in that case, but anything listed under that shared address may belong to someone else, so do not panic at a result you cannot match to your own equipment.

Step 2: look your address up

Go to the Shodan website and search for your public IP. Depending on the site's current rules, you may need to sign in to see host details. Only look up addresses you are responsible for: your own home, your own shop. Probing other people's devices may be against local rules, so check them before doing anything beyond your own network.

What you might see, and what it means:

"No information available" or no results. Nothing at that address answered recent scans. Good, but go on to Step 3 anyway, because scans are not continuous for every address and your IP may have changed.
A web login page on some port. A camera, recorder or the router itself has a browser interface open to the internet.
A port described as RTSP or a video stream. A camera stream is reachable from outside. This often traces back to someone setting up remote viewing in a player such as VLC; if you followed our guide to opening a Yoosee camera in VLC on your local network, that setup should stay local only.
A screenshot of a camera image. The stream needed no password at all. Treat this as urgent.
Your router's brand or admin page. The router's own remote management is switched on. That is a separate fix, covered below.

Take a screenshot of the result. It helps you confirm later that the change worked, and it is useful if you need to ask your installer what they set up.

Step 3: check your router directly

The router is the real authority on what is open, and it does not depend on when a scan last happened.

Sign in to the router's admin page. The address and login are often on a sticker on the router itself.
Find the port forwarding section. It may be called virtual server, NAT rules, or applications and gaming. Note every rule that points to a camera or recorder's local IP.
Find the UPnP setting, usually under advanced, network or NAT settings. Many routers also show a list of ports that UPnP has opened, and which device asked for them.
Check for DMZ or "exposed host". If it points to a camera or recorder, that device is fully open.
Check remote management or "access from WAN" for the router itself.

If you cannot tell which local IP belongs to the camera, match it against the router's list of connected devices. The router-list method in the VLC and IP address guide explains how to identify the camera by unplugging it and watching which entry disappears.

To double-check from the outside, switch your phone to mobile data (so it is genuinely outside your network) and use an online open-port checker on your public IP and any port you found in a forwarding rule. A port that shows as open from outside is exposed, whatever the router menus say.

Step 4: close the exposure

Work through these in order. The first two remove the path from the internet; the rest make sure nothing weak is left behind if a path ever reopens.

Remove port forwarding and DMZ

Delete every forwarding rule that points to a camera or recorder, and turn off DMZ if it targets one. Save, and restart the router if it asks. If there is a rule you do not recognise and you are not sure what it does, write down its details before deleting it, so you can put it back if something unrelated, such as a game console, stops working.

Turn off UPnP

Switch UPnP off on the router. Some cameras and recorders also have their own UPnP option in their settings; turn that off too if you find it. The app's normal remote viewing should keep working on most models, because it does not rely on opened ports. Test it from mobile data after the change.

Change the device password

The device password protects the camera itself, separate from your app account password. If your camera was ever exposed, assume its password may have been tried, and set a new, long one in the app. On most app versions it is under the camera's settings, then security or device password, though menu names may differ slightly by version. If you no longer know the current one, our guide to recovering a forgotten Yoosee camera password explains which password is which and how to get back in.

Do the same for any recorder that was exposed, and for the router's own admin password if it is still the one printed on the sticker.

Update firmware

Firmware updates often fix security weaknesses. In the app, open the camera's settings and look for a firmware or device update option; on some models it appears under device information. Update the router as well, since an outdated router is a common way into an otherwise careful network. If no update is offered for your camera, ask the seller whether a newer version exists for your model.

Switch off what you do not use

If your model has RTSP or ONVIF switches and you never use a computer player or a recorder, turning them off removes services that could be exposed by mistake later. If you do use a recorder, keep it on the local network; our guide to connecting a Yoosee camera to an NVR covers adding the camera over the local network.

Step 5: confirm the fix and keep it closed

Repeat the open-port check from mobile data. Previously open ports should now show as closed or filtered.
Look up your public IP on Shodan again after some days. Old records can linger for a while after you close a port, so judge by the date of the record, not just its presence.
If you need to watch from outside, use the app, or set up a VPN into your own network if your router supports one. Both work without leaving anything listening on the open internet.
Consider keeping cameras on a separate network from your computers, if your router supports it. Test the app afterwards, since some guest networks block local features, or ask whoever manages your network to set it up.
After moving house, changing internet provider or replacing a router, run the check again. New equipment can arrive with UPnP switched on.

Signs the camera may already have been accessed

None of these prove anything alone, but together they are worth acting on:

Settings changed that nobody in the household touched, such as a new schedule or a different name on the camera.
On pan-tilt models, the camera moves, or the speaker plays sounds, when nobody is using the app.
You are suddenly told the device password is wrong, although you did not change it.
If your app version shows who the camera is shared with, an account you do not recognise appears there.

If you see these, close the exposure first (Step 4), then consider a factory reset and pairing the camera again from scratch. Our guide on how to reset a Yoosee camera explains what a reset wipes and what to prepare beforehand, so you are not locked out halfway.

When to get help

Ask for help instead of guessing in these situations:

The router is managed by your internet provider or a landlord, and you cannot open its settings. They can remove forwarding rules and turn off UPnP for you.
An installer set up remote viewing for a recorder. Ask them exactly which ports they opened and to replace that setup with app viewing or a VPN.
It is a shared office network. Router changes may affect other systems, so let the network administrator make them.
The camera still shows strange behaviour after a reset and a new password. Contact the seller with your model and firmware version.

If you need to move or rewire a camera while sorting this out, switch off power first, and leave mains wiring, ladders and roof work to a qualified electrician.

Frequently asked questions

Can someone watch my camera just because it appears on Shodan?

Not automatically. A listing means a service on your camera or recorder answered from the internet, so people can see it and try to log in. If the password is weak, a default, or missing altogether, they may get in, which is why closing the port and changing the password both matter.

Does using the Yoosee app for remote viewing make my camera show up?

App viewing on its own should not, because it does not need a port opened on your router. If your address is listed, the cause is almost always something added on top: a forwarding rule for a recorder or computer player, UPnP opening ports automatically, or a DMZ setting.

My public IP shows results, but none of them look like my camera. Why?

Your provider may share one public address between many customers, or your address may have changed and the record belongs to an earlier user. Compare the WAN address on your router's status page with the address you searched, and check the date on the record. If they do not match your equipment and your router has no forwarding rules, the result is probably not yours.

Will turning off UPnP break anything at home?

The camera should keep working in the app; test it from mobile data to be sure. Some games consoles, voice chat or file-sharing programs use UPnP and may complain afterwards. If something specific stops working, add one narrow forwarding rule for that device rather than switching UPnP back on for everything.

How often should I check?

Run the check after any change to your network: a new router, a new provider, a new recorder, or an installer visit. Between those, it does no harm to look up your address again every few months and to apply firmware updates when the app offers them.