You are referencing a specific type of Google Dork (search query) used to find web-connected CCTV cameras. The query inurl:view index shtml typically targets web servers (often specific DVR or NAS brands) that use Server Side Includes (.shtml) to render camera feeds.
The "Dorking" Risk: Explain that Google indexes everything it can see; if a camera has no password, Google treats it like a public webpage. inurl view index shtml cctv fix
UPnP automatically "punches holes" in your firewall to allow external access, which is how search engines find your device. You are referencing a specific type of Google