Modat Finds 8,074 Open RTSP Streams Across 210 Countries as 43.9% Run Off Default Ports
Updated
Updated · Markets Insider · Jun 9
Modat Finds 8,074 Open RTSP Streams Across 210 Countries as 43.9% Run Off Default Ports
3 articles · Updated · Markets Insider · Jun 9
Summary
8,074 RTSP services returned live video with no credentials in March after Modat verified 973,819 internet-exposed services across 210 countries for responsiveness and unauthenticated access.
43.9% of the exposed RTSP surface ran on non-default ports, and more than a third of fingerprinted services were not camera devices, undermining detection focused on port 554 or camera-vendor signatures.
Modat said the open feeds included a thermal array at high-voltage equipment, a server facility interior, a SCADA water-treatment dashboard and one device exposing 358 live feeds.
797,153 hosts in Modat's wider set of 3.36 million RTSP endpoints showed an open stream alongside a known vendor login page, with thousands more sharing industrial control or SCADA fingerprints on the same host.
One in five viewable streams sat in a conflict-affected country, reinforcing Modat's warning that exposed video feeds can provide operational intelligence and are often fixable by enabling authentication and using a VPN.
With nearly a million cameras streaming online, are we unknowingly broadcasting operational intelligence to global adversaries?
Thousands of industrial systems are exposed via live video. How long until this intelligence is used in a physical attack?
As new cyber laws take effect, who is truly responsible for the internet's million exposed digital eyes?
1 Million RTSP Streams Exposed Worldwide: Modat’s 2026 Findings and the Urgent Need for IoT Security Reform
Overview
On June 9, 2026, Modat released research revealing that nearly one million Real Time Streaming Protocol (RTSP) video services are exposed to the internet worldwide. This exposure creates a significant global vulnerability, as many of these services transmit sensitive or private video feeds. Alarmingly, thousands of these streams are live and lack any form of authentication, allowing anyone with basic technical skills to access them without a username or password. This widespread lack of security poses immediate risks to privacy and operational integrity, highlighting an urgent need for stronger security measures in RTSP-based video systems.