Host header should be #{rhost}:#{rport} for Unicast dest IPs.

Per http://www.upnp.org/specs/arch/UPnP-arch-DeviceArchitecture-v1.1.pdf (see bottom of page 31 'For unicast M-SEARCH...')