N. Miller wrote:
On Thu, 14 Jul 2005 01:07:08 -0400, Rick T wrote:


For the past few months my router shows a constant influx on ports 1026
and 1027; all the IP's (quite a few) seem to be in China and all the
issuing ports are in the 5 digit range.

Thought it might be a Treewalk "feature" but I uninstalled that a couple
weeks ago.


Any thoughts ?


Worm, or Messenger Service spam. I've seen it in the logs of two different
SBC customer router logs since, roughly mid-April, or so.


thought it might be something like that, thanks... any real purpose for
those specific ports? (looking it up it's supposed to be DNS auxiliary
or something like that, but if they're never used I'm blocking them).


Rick