The port number it uses is the reason it's being blocked. However it is not the krnl386.exe that is causing these alerts, it is another program which I haven't determined yet. (krnl386.exe is about 120KB)