Thoose who are really looking might have found the following event in your event log:

Reservation for namespace identified by URL prefix http://*:2869/ was successfully added.

This is just UPNP reserving it's port and namespace in http.sys.