UPnP is convenient but dangerous. Log into your router and turn off UPnP. Then, manually set up port forwarding only if absolutely necessary.
If you own an IP camera, you must take steps to ensure your private feed doesn't end up as a search result for a "viewerframe" query. inurl viewerframe mode motion network camera link
The query relies on the inurl operator, which instructs the search engine to look specifically within the URL string rather than the page content. UPnP is convenient but dangerous