Universal Plug and Play (UPnP) often creates these "holes" in your firewall automatically. Disable it on your router.
Newer devices have moved away from .shtml paths and now require password setup during the initial installation. inurl view index shtml new
To understand why this keyword is significant, you have to break down its components: Universal Plug and Play (UPnP) often creates these