: Thousands of Axis cameras are indexed by search engines because they use a predictable URL path: /axis-cgi/mjpg/video.cgi?resolution=640x480 . If a device is connected directly to the internet without a firewall or password, anyone with a browser can view the live MJPEG (Motion JPEG) stream.

If you need a (e.g., for a cybersecurity blog, research paper, or class assignment), here is a short excerpt you can adapt:

The search string inurl axis cgi mjpg motion jpeg full is more than a relic of early 2010s Google Dorking. It is a symptom of a persistent problem: convenience overriding security in physical security systems.

: Researchers have found over 40,000 such cameras globally—ranging from office lobbies and warehouses to sensitive areas like hospital rooms and private homes.

Users failing to change the factory-set username and password.