Can you please double check that the IP address. If it actually started with 91.199… then it’s the Comodo update server, although 62MB being uploaded (as opposed to downloaded) is a bit odd.
Anyone can see exactly what traffic is going through your NIC (i.e. - see what Comodo or any other application is sending/receiving), you can install Wireshark/pcap. This app will capture all traffic going through the NIC and the captured data can then be read and interpreted.