How to find a WiFi camera on a local network: from the router to the command line

A situation where it is necessary to detect WiFi camera Within a local network, this issue arises quite frequently: whether it's the initial setup of a new video surveillance device, finding a forgotten IP address to connect to a DVR, or checking your home network for unauthorized devices. Unlike wired systems, wireless modules often change their address when reconnecting unless a static IP is configured, complicating administration.

There are many software and hardware solutions to solve this problem, ranging from simple mobile apps to professional traffic analysis. DHCP protocol, which distributes addresses to devices, stores the search history, but doesn't always display the current status in real time. Therefore, for effective searches, it's important to understand which tools are available at different network access levels.

In this article, we'll explore the most effective methods for detecting cameras across various operating systems and network environments. You'll learn how to use standard Windows and Linux tools, as well as specialized port scanning software. Local area network (LAN) is full of hidden information, and correct interpretation of the received data will allow you to quickly identify the desired device.

Searching for a device via the router's web interface

The easiest and most accessible way to find IP address of the camera — Check your router settings. Almost any modern router keeps a log of connected clients, displaying their MAC addresses, assigned IP addresses, and often device names. To do this, log in to the admin panel by going to 192.168.0.1 or 192.168.1.1 in the browser.

In the router interface, look for sections with names like "Client List," "DHCP Server," "Attached Devices," or "Client List." All active connections are displayed here. CCTV cameras often have the manufacturer's name in their name (e.g., Hikvision, Dahua, Xiaomi) or specific prefixes (OUI) in their MAC address, which can be used to identify the equipment vendor.

⚠️ Note: If the camera is connected via a complex setup with repeaters or a mesh system, it may not appear in the main list, but in the child access points section. The device name may also be hidden or replaced with the generic "IPCamera" if the firmware does not transmit the hostname correctly.

For more precise identification, it is useful to know the first three bytes of the MAC address (OUI), which are unique to each manufacturer. For example, addresses starting with 4C:1A:3D, often belong to Hikvision cameras. Knowing this, you can filter the list and find the desired device, even without a name.

📊 Which router do you use to search for cameras?
TP-Link
Keenetic
MikroTik
Asus/Other

Once you find an entry in the client list, write down the IP address. This address is often used for direct access to the camera's web interface or for adding it to a video surveillance program. If the address is dynamic, it may change after a router reboot, so for fixed systems, setting it up is recommended. static IP or MAC address reservation.

Using the command line and the ARP table

A more technical, yet faster, method for finding devices on a network is to use the ARP (Address Resolution Protocol). A computer maintains a table of IP addresses and MAC addresses of devices it has recently communicated with. To view this table in Windows, open the command prompt (cmd) and enter the command arp -a.

The command will result in a list of all addresses known to the system. However, there's a catch: the table will only show devices with which your PC has already exchanged data. To "stir up" the network and force the router and cameras to respond, you can first ping the broadcast address, for example, ping 192.168.1.255, although modern security systems often ignore such requests.

C:\Users\Admin> arp -a

Interface: 192.168.1.5 --- 0x3

Internet Address Physical Address Type

192.168.1.1 00-11-22-33-44-55 dynamic

192.168.1.105 aa-bb-cc-dd-ee-ff dynamic

192.168.1.200 4c-1a-3d-xx-xx-xx dynamic

The syntax is similar in Linux and macOS. By parsing the list, you can identify unknown addresses. If you know your camera's MAC address (usually written on a sticker on the camera's body), find the corresponding IP address in the output. arp -a It won't be difficult. This is especially useful when the router's web interface is unavailable or overloaded.

The method is advantageous for its speed and lack of need to install additional software. However, it doesn't display open ports, which is a key difference from specialized scanners. It's suitable for initial diagnostics and a quick check for the presence of a device in a network segment. ARP table fits perfectly.

Scanning ports with specialized software

For deep network analysis and the search for cameras that aren't visible or have hidden settings, professionals use port scanners. The leading utility in this field is Nmap (Network Mapper), available for Windows, Linux, and macOS, allows you to not only find the IP address but also identify the device model based on open ports.

CCTV cameras use specific ports for video transmission and control. For example, the standard port for the web interface is 80, for RTSP streaming it's 554, and for Onvif it's 8080 or 8000. By scanning the subnet for these open ports, you can, with a high probability, identify the camera, even if it's labeled "Unknown Device."

An example command for Nmap that searches for devices with open port 554 (RTSP) on the local network:

nmap -p 554 192.168.1.0/24

The scan result will show a list of IP addresses where port 554 is open. These are almost guaranteed to be IP cameras or DVRs. Other programs, such as Advanced IP Scanner or Angry IP Scanner, work on a similar principle, but often have a more user-friendly graphical interface, which is convenient for beginners.

☑️ Pre-scan port check

Completed: 0 / 4

It's important to understand that active port scanning can be detected by security systems as an attack. While this is safe on a home network, in a corporate environment, such actions can result in your IP address being blocked by a firewall. Always use such tools with caution and only in authorized network segments.

Identifying a camera by its manufacturer's MAC address

Every network device has a unique identifier—a MAC address. The first six characters (3 bytes) of this address, called the OUI (Organizationally Unique Identifier), are assigned to a specific manufacturer. Knowing these codes allows you to quickly filter the list of devices on the network and find a camera, even if it has been renamed.

Below is a table with MAC address prefixes for popular CCTV camera manufacturers. If you see a device with this address prefix in your router's client list or in the output arp -a, this is your target object.

Manufacturer MAC Prefix (OUI) Device type
Hikvision 4C:1A:3D, 88:BB:2E IP cameras, recorders
Dahua Technology 2C:23:3A, 6C:3E:9B IP cameras, dome cameras
Xiaomi (Mi Home) 64:CC:2E, A4:14:37 Smart cameras, action cameras
Axis Communications 00:40:8C, AC:CC:8E Professional IP cameras
Uniview (UNV) 00:23:59, 3C:2D:58 Network cameras

To find a complete list of prefixes, you can use the IEEE OUI online database or specialized MAC address calculators. Entering the first six characters of the found address will give you the exact manufacturer's name. This helps you determine which software to use for further configuration.

⚠️ Please note: Some manufacturers use different OUIs for different product lines or change them over time. Furthermore, Chinese OEMs may use the same prefixes for dozens of different camera brands sold under different names.

Using the MAC address is the most reliable way to identify hardware, as changing it programmatically in a camera's network interface is more difficult than simply changing the hostname. If you find a device with an unknown name but a MAC address from a known vendor, you're on the right track.

Search through mobile apps and utilities

Modern smart home ecosystems often provide their own device discovery tools. If you're setting up a Xiaomi, Aqara, or TP-Link Tapo camera, their proprietary apps (Mi Home, Tapo) will automatically scan the network during initial setup and find the device, prompting you to add it. This is the easiest path for the average user.

For a more universal search in the local network, there are cross-platform snails, such as ONVIF Device Manager (for Windows). This free program scans your network for devices that support the ONVIF standard, a universal protocol for IP cameras. It not only finds the camera but also displays its model, streaming profile, and allows you to test video performance.

There are also mobile network scanners for Android and iOS, for example, Fing or Network AnalyzerBy installing such an app on a smartphone connected to the same Wi-Fi network, you'll get a detailed list of all devices. These apps can often recognize the device type (camera, printer, TV) and display manufacturer logos, making visual identification easier.

Why might the camera not be visible in the app?

The camera may not be visible if it's connected to a guest Wi-Fi network, which isolates devices from each other (AP Isolation). The issue could also be related to different frequencies (2.4 GHz and 5 GHz), if the router doesn't combine them into a single network, although modern routers usually route traffic between clients correctly.

Mobile methods are convenient because they're always accessible—your phone is always at hand. However, they may not reveal technical details, such as open ports or the exact protocol version, that desktop software displays. Combine mobile search for a quick check and desktop search for in-depth configuration.

Detection problems and their solutions

Sometimes the camera is physically connected to the network (the indicators are lit), but it can't be found programmatically. One common cause is that the device is on a different subnet. If your computer has an address 192.168.1.5, and the camera by default received an address from the range 192.168.0.x (or vice versa), they will not "see" each other without routing.

In this case, you'll need to temporarily change the IP address of your computer's network card by adding a second address from the camera's range, or use the router's subnet change feature. The problem may also lie in the camera's security settings: some models disable ping requests or hide from public lists by default.

Another scenario is the use of VLANs (virtual local area networks). If the camera is connected to a port assigned to an IoT VLAN and your PC is on the main network, direct network scanning will be impossible without configuring firewall rules or temporarily reconnecting. Resetting the camera to factory settings (using the Reset button) often restores its default IP address, which can be easily found using the vendor's utilities.

Frequently Asked Questions (FAQ)

Is it possible to find a camera's IP address if I don't know its manufacturer?

Yes, you can. Use network scanners (such as Advanced IP Scanner or Fing) that display the MAC addresses of all devices. The first six characters of the MAC address (OUI) can be used to identify the manufacturer using online databases, even if the device name is hidden.

Why is the camera not visible on the network even though Wi-Fi is connected?

Possible causes: AP Isolation is enabled in the router, the camera and PC are on different subnets, a firewall is triggered that blocks discovery packets, or the camera is in sleep mode and is not responding to requests.

How can I find a camera if it has a static IP but I forgot it?

Use the manufacturer's utilities (for example, SADP for Hikvision or ConfigTool for Dahua). They operate at Layer 2 of the OSI model and can find the device even if the subnets don't match, allowing you to change its IP address.

Is it safe to leave camera ports open on a local network?

Within a secure home network, it's relatively safe. However, if the camera has firmware vulnerabilities, an attacker with Wi-Fi access could intercept the video stream. Regular firmware updates and strong passwords are recommended.

Can a camera have multiple IP addresses?

Yes, a single network card can have multiple IP addresses. Furthermore, a camera can have one address for the local network (LAN) and another if a P2P tunnel or port forwarding is configured, although technically, the device only has one primary IP address active on the local segment.