Google has a complicated relationship with dorks. On one hand, they have removed certain search operators over the years (like inurl: wildcard combinations). On the other hand, they argue that Google is just an index; it does not control the content of the internet.

The real fix must come from manufacturers. As of 2025-2026, we are seeing a shift:

However, legacy devices remain. A hotel that bought 100 cameras in 2018 will not replace them until 2028. That means the inurl:viewerframe mode=motion hotel hot dork will remain viable for the foreseeable decade.

Most cameras allow you to rename the web interface. Change viewerframe.html to something random, like 8d92kf2_stream.html. Security through obscurity is not perfect, but it stops Google from indexing you.

Let’s dissect the string:

What it finds: When you search this, Google returns a list of live security camera feeds that are connected to the internet without a password. The mode=motion part specifically looks for cameras set to motion detection mode.

Why would a security researcher—or a black-hat hacker—specifically look for hotel cameras?