that are broadcasting their live video feeds to the open internet. What’s happening here?
This dork is often used to find cameras that have been left unprotected by a password or are running outdated firmware with known vulnerabilities. inurl axis-cgi mjpg video.cgi
This search query finds live MJPEG video streams from Axis network cameras that are publicly accessible without authentication. The endpoint /axis-cgi/mjpg/video.cgi is part of Axis’s legacy video streaming API, often enabled for easy integration but frequently left unsecured. that are broadcasting their live video feeds to