SSDP also facilitates IPv6 address scanning
https://blog.talosintelligence.com/2019/03/ipv6-unmasking-via-upnp.html
Scroll down a bit. Also has other links about why uPNP is evil...
https://blog.talosintelligence.com/2019/03/ipv6-unmasking-via-upnp.html
Scroll down a bit. Also has other links about why uPNP is evil...