UPnP is not disabled by default on all routers, especially older ones. So devices may just try to port-forward certain control or media ports.