UPNPScan

A tool that scans the LAN or a given address range for UPnP capable devices. This is done by sending M-SEARCH discovery packets to either the UPnP multicast address or to the specified ip range.

usage:
./upnpscan -m or ./upnpscan -t 192.168.1-20.*