Looks like the upnp is used as a type of ddos attack, attackers wouldn't really bother with CON but would be good to disable it. I am curious how that affects dns seeders though.