Hi all, Our internal systems are behind an ISA 2000 server. My PC runs BlackICE software. I have noticed a TCP and UDP port scan from 11.0.0.98. Is it normal to see this type of attack to my internal machine?