Just because you can access a camera does not mean you should. There is a profound ethical chasm between security research and voyeurism.

Do not leave admin/admin or root/12345. Use a password manager to generate a 16-character random password.

Log into your router. Look for port forwarding rules for ports 80, 8080, 554 (RTSP), or 37777 (DVR default). Delete them.