He thought it was a bad router, replaced it, problem still remains. Any ideas?

What brand router is it? Certain ones are having issues with the Code Red worm, and that could be causing it. (Cable modem networks are still getting hit hard, I have 3990 attacks logged on my server on @home, compaired with 2823 attacks on the logo site (and the logo site has 5 ips, so thats an average of 565 per IP there))