[mothered]

Nice tutorial, I tested a few. You really have to find good lists. I used the list below and the second one I tried was correct rightaway with the basic "admin & admin" login.
https://www.shodan.io/search?query=linux+upnp+avtech

You stated that it uses Server push mode. I don't think it's used everywhere, current cam I got uses DivX player for video playback.

If you want to try getting devices like routers, here is a list that provides a list for default router passwords:
http://www.routerpasswords.com/

Nice one. The more Info, resources and methodologies, the better.

Thanks for this and thank you OP.