It’s entirely possible, I’ve got them disconnected for now, and told the company that these are long outdated and a potential liability. But here we are.
They were behind a firewall, no port forwarding done to the outside world (other than blueiris port), but being these are like 13 years old...