Shady behavioir from System.exe or False Comodo diagnosis ?

Comodo Internet Security - CIS Firewall Help - CIS
#1

Been having this issue since installing Windows 7
Basically System.exe been trying to receive inbound connections.

9/26/2009 12:39:40 AM System Blocked 192.168.1.254 1050 192.168.1.65 2869 TCP
9/26/2009 12:45:19 AM System Blocked 192.168.1.254 1051 192.168.1.65 2869 TCP
9/26/2009 12:03:04 PM System Blocked 192.168.1.254 1027 192.168.1.65 2869 TCP
9/26/2009 12:17:54 PM System Blocked 192.168.1.254 1029 192.168.1.65 2869 TCP
9/26/2009 12:18:37 PM System Blocked 192.168.1.254 1031 192.168.1.65 2869 TCP
9/26/2009 12:31:42 PM System Blocked 192.168.1.254 1033 192.168.1.65 2869 TCP

Comodo Internet Security logs about a 100 of these daily, what’s going on?

#2

SSDP Discovery Service (UPnP) event notification (sent by network devices, such as routers with built-in firewalls) will also use TCP port 2869 in addition to TCP 5000 and UDP 1900.
So take a look at your router for UPnP messages.

#3

Info 00:49:34 (since last boot) UPnP action ‘AddPortMapping’ from ip=192.168.1.65 (Success)

Info 00:49:02 (since last boot) UPnP action ‘AddPortMapping’ from ip=192.168.1.65 (Success)

Info 00:48:59 (since last boot) UPnP action ‘AddPortMapping’ from ip=192.168.1.65 (Success)

Info 00:48:58 (since last boot) UPnP action ‘AddPortMapping’ from ip=192.168.1.65 (Success)

Info 00:48:17 (since last boot) UPnP action ‘AddPortMapping’ from ip=192.168.1.65 (Success)

Info 00:48:15 (since last boot) UPnP action ‘AddPortMapping’ from ip=192.168.1.65 (Success)