Though it could be a trojan that is using that port instead of the default, I dont think thats the case. I have found multiple scans for that port from multiple ip addresses, which leads me to believe its something else. COuld be wrong though, who knows.