Oh great man, you are right, its a Plex (yea i have a NAS and im running Plex on it). Here is the log from router to prove:
Jun 3 22:55:47 miniupnpd[744]: SendSSDPResponse(): sendto(udp): Operation not permitted
Jun 3 22:56:50 miniupnpd[744]: SendSSDPResponse(): sendto(udp): Operation not...