Inurl+viewerframe+mode+motion+upd [top] Now
The search query inurl:viewerframe?mode=motion is a famous "Google dork" used to find unsecured, public-facing network cameras (often Axis brand) that allow anyone to view live feeds and control pan-tilt-zoom (PTZ) functions.
This query is an example of "Google hacking" or "Google Dorking"—a technique using advanced search operators to find specific, often sensitive, information on the public web.
If you own an IP camera or use an older surveillance system, follow these steps to ensure you aren't part of the "Viewerframe" index:
The popularity of search strings like inurl:viewerframe?mode=motion serves as a stark reminder of the "Security through Obscurity" fallacy. Just because a web address is complex or unpublicized does not mean it is hidden. Search engine crawlers are relentless, and if a device is connected to the internet without a password, it will eventually be discovered. As the Internet of Things continues to expand, securing basic device configurations remains the first and most critical line of defense for personal and organizational privacy.
Instead of opening a port on your router (Port Forwarding), access your cameras through a secure Virtual Private Network. inurl+viewerframe+mode+motion+upd
This report summarizes the purpose and security implications of the search query inurl:viewerframe?mode=motion
For security professionals and ethical hackers, tools exist that dramatically improve upon this technique. is a search engine specifically for internet-connected devices. Its database is far more suited for this kind of device discovery, allowing you to filter by operating system, open port, or even specific camera model. You could replicate the dork on Shodan with a query like has_screenshot:true ViewerFrame .
: For camera owners, the appearance of their device in these search results is a major security flaw. It indicates that the device is publicly accessible and likely still using default or no credentials. Improving the View
operator to find indexed URLs containing specific camera-software parameters: viewerframe : The primary viewing page for the camera's web-based UI. mode=motion The search query inurl:viewerframe
upd=10432 – occupant upright. watching. awaiting response.
This article explores what this search query means, why it poses a significant security risk, how it is utilized, and how to protect your devices. What is "inurl:viewerframe?mode=motion"?
Use on-screen "Motion" or "PTZ" (Pan-Tilt-Zoom) controls to look around a room.
Unsecured cameras often monitor private residences, office spaces, parking lots, and server rooms. Accessing these feeds without authorization is a severe invasion of privacy. Just because a web address is complex or
: If a camera must sit on a public web server for a legitimate reason, configure the server’s robots.txt file to disallow search engine spiders from crawling directories like /viewerframe . Conclusion
: Part of the specific file path or script name used by the camera's web server to display the live feed.
The string "inurl:viewerframe?mode=motion" is not a product model, but a Google Dork