Network Blackjack in Firewall logs

In our Checkpoint Firewall 1/VPN 1 logs there are entries for a service called “Blackjack”. This is coming from most of our computers. I found in a port list that this service uses port 1025. Does anyone know what this is, how is it being generated?

Thanks.