OT: Bittorrent matches in my router log

Forgive the somewhat OT question.

I have a rule setup on my router to forward on bittorrent ports to my PC. I
have used a range outside of the normal 6881 - 6999. When I don't have
bittorrent running I am still seeing messages in my router log of IP
addresses matching these port ranges. Is this just someone randomly
scanning all possible port ranges on all PCs? Or could this be the sign of
some spyware?

Here is my log
Fri, 2004-12-17 13:30:16 - TCP Packet - Source:81.191.102.216,1886
Destination:192.168.0.3,16929 - [Bittorrent_I match]
Fri, 2004-12-17 13:40:16 - TCP Packet - Source:81.191.102.216,2134
Destination:192.168.0.3,16929 - [Bittorrent_I match]
Fri, 2004-12-17 13:50:13 - TCP Packet - Source:81.191.102.216,2376
Destination:192.168.0.3,16929 - [Bittorrent_I match]

"Philip Rayne" <(E-Mail Removed)> wrote in message
news:cpuosi$rct$1$(E-Mail Removed)...
> I have a rule setup on my router to forward on bittorrent ports to my
> PC. I have used a range outside of the normal 6881 - 6999. When I
> don't have bittorrent running I am still seeing messages in my router
> log of IP addresses matching these port ranges. Is this just someone
> randomly scanning all possible port ranges on all PCs? Or could this be
> the sign of some spyware?
>
> Here is my log
> Fri, 2004-12-17 13:30:16 - TCP Packet - Source:81.191.102.216,1886
> Destination:192.168.0.3,16929 - [Bittorrent_I match]
> Fri, 2004-12-17 13:40:16 - TCP Packet - Source:81.191.102.216,2134
> Destination:192.168.0.3,16929 - [Bittorrent_I match]
> Fri, 2004-12-17 13:50:13 - TCP Packet - Source:81.191.102.216,2376
> Destination:192.168.0.3,16929 - [Bittorrent_I match]

The timing of these is almost certainly more than a coincidence. Without
knowing the TCP flags, I can't say for sure, but my guess is that
81.191.102.216 is trying to connect to your machine because you've
previously used BitTorrent and it doesn't know/realise you've stopped.

Alex