The following logfile entries in one of the logfiles on one of the webservers I maintain immediately caught my eye:

[17/Apr/2008:16:22:16 +0200] "GET /Public_UPNP_gatedesc.xml HTTP/1.1"

[17/Apr/2008:16:22:17 +0200] "POST /Public_UPNP_C3 HTTP/1.1"

Interesting.