Axis cameras historically used as the username and pass or no password by default.
Private live streams (e.g., bedrooms, backyards, home offices) can be viewed by unauthorized individuals. intitle live view axis inurl view viewshtml
Let’s break down our specific query: intitle:"Live View / - AXIS" inurl:/view.shtml . Axis cameras historically used as the username and
: Instructs Google to look only for web pages where the HTML tag contains the exact phrase generated by older legacy Axis camera firmware interfaces. : Instructs Google to look only for web
Journalists have used this dork (properly, with disclosure) to expose lax security. For example, finding an Axis camera inside a daycare center or a courtroom control room is a massive privacy breach. The camera owner may be negligent, but the viewer is also violating the privacy of everyone captured on the feed.
Even if the camera requires a login, Google still indexes the login page title. The problem arises when the camera allows a “guest” or “anonymous” view—then Google indexes the actual live feed.
Always change the default administrator username and password immediately during setup.