Internet-Security raven logo internet-security.com

UDP 1027

ProtocolUDP
Port1027
LabelsNative IPv6 behind IPv4-to-IPv4 NAT

Synopsis

  • Microsoft Windows Messenger Service (net send) on Windows 2000/XP/Server 2003, which used MSRPC and often dynamically listened on UDP port 1027.
  • Other MSRPC/DCOM services on those legacy Windows versions could also bind to UDP 1027 due to dynamic RPC port assignment, so it commonly appeared in enterprise traffic of that era.
  • Abuse: In the early 2000s, spammers and some malware blasted UDP 1026–1027 to trigger “Messenger Service” pop-up spam on exposed Windows hosts, prompting widespread firewall blocks of these ports.

Observed activity

Last 30 days Detailed chart

More information