Shareaza, Limewire, Gnutella and BearShare all use 6346. i dont use any of them but it's my understanding that your IP addy hets added to a list of hosts when you sign on so it looks like your probably right
if i were you id check xxx.xxx.xxx.142 to see what ports it does have open and check the running processes on that machine to see if one of these bad boys is running. id be dammed if id let someone's want of warez or mp3s endanger my job.
BTW you can check the running processes on a remote machine on your network from your own box by using pslist.com from systernals.com. you need to be logged on with admin rights on the network or use the admin password.
