Skip to main content

Inurl+viewerframe+mode+motion+my+location+top

Use Google’s advanced search or Bing, Shodan, Censys, or ZoomEye:

inurl:"viewerframe" "mode=motion"

Or add "my location" if you want to narrow down.

Shodan example:
html:"viewerframe" "mode=motion" inurl+viewerframe+mode+motion+my+location+top


When you combine these terms, you are asking the search engine: "Show me every website that has 'viewerframe?mode=motion' in its web address."

Historically, this search yielded thousands of results. You would see live feeds from: Use Google’s advanced search or Bing, Shodan, Censys,

In the early 2010s, this became a viral trend. People used it to people-watch in Tokyo, watch sunsets in Hawaii, or check traffic in London—all without permission.

This is the most deceptive and critical parameter. It does not refer to the searcher’s location. Instead, within the context of the camera’s interface, my location is often a placeholder or a JavaScript variable that loads a map or a text string indicating the camera’s physical placement. Due to poor coding, many cameras populating this field will display the actual address, GPS coordinates, or a named location (e.g., "Warehouse Loading Bay 3" or "Living Room"). Or add "my location" if you want to narrow down

If your camera’s web interface allows custom files, add a robots.txt file with:

User-agent: *
Disallow: /

This tells search engines not to index. It is not a security barrier (a direct link still works), but it removes the camera from Google’s index.

To understand why this search works, we have to break it down into its component parts. This is a "Google Dork"—an advanced search technique using operators to refine results.

You might be asking: Why would any manufacturer allow a camera to be public like this? The answer is a combination of convenience, ignorance, and default settings.