The specific script that tells the camera to start pushing these images as a continuous "multipart" stream.
Industrial Axis cameras are built to last 10–15 years. A camera installed in a factory in 2012 with firmware from that era might still be running today. Many of these older models defaulted to HTTP (not HTTPS) and did not enforce passwords on the motion.cgi by default. Installers often left settings as-is "to make remote viewing easy." inurl axis cgi mjpg motion jpeg free
Axis cameras allow you to change the path to the CGI scripts. Instead of /axis-cgi/ , rename it to something random, e.g., /x7k2p9/ . Security through obscurity is not foolproof, but it stops automated scanners. The specific script that tells the camera to