If a distro configures sshd to use UPnP out of the box is deliciously evil. It wouldn't surprise me after some of the shenanigans I've seen through the years.