Turn off CGI access or public viewing features if they are not necessary.
Never leave the default password blank or use "admin/admin." inurl axiscgi mjpg videocgi exclusive
Do not rely solely on a username/password. Configure your camera or your network firewall to only allow video stream requests from specific IP addresses (e.g., your NVR or monitoring server). Turn off CGI access or public viewing features
Use your router or the camera’s built-in access list to allow only specific management IP addresses to reach /axis-cgi/* . inurl axiscgi mjpg videocgi exclusive
: Users can often append arguments to this URL to modify the stream, such as ?resolution=320x240 or ?compression=25 . Why People Search This Video streaming - Axis developer documentation