Yet another strange message in SYSLOG

[Shoshana Abrass]

  Has anyone else seen the following in their SYSLOG, and/or can anyone
  explain it:

  Nov 28 15:28:45 magritte rlogind[5547]: \
	Connection from 99.1.0.63 on illegal port 1257

  This has happened several times, on several hosts, with different port #'s
  and from different remote hosts.  The remote host (99.1.0.63) is a known 
  host on our network. It's possible that our in-house software is doing 
  the wrong thing.... but I don't think we're doing any homegrown rlogin 
  stuff.

  -shoshana
  pdi!shoshana at sgi.com