Router security question

I have ZoneAlarm running and I've checked my log recently only to discover the router is trying to talk to the desktop and getting blocked. What's odd to me about this is the router is trying every port in sequence.
It's tried every port in the 1800 range, went to 1900 and is now in the 2000 range. About one try every minute.
Also odd is if I shut down ZA I get another network connection icon on the lower right that's named Internet Connection at 10Mbs.
Should I be worried?
Anyone explain what's going on?

 

Sounds like UPNP (Universal Plug and Play)

http://en.wikipedia.org/wiki/Universal_Plug_and_Play

 

I ran Steve Gibson's UnP'n'Play program to disable it. DU Meter still shows some traffic but not nearly as much. I will monitor ZA logs and report back.