Hi all ! I Some days ago I have received strange notification : ISA Server detected a well-known port scan attack from Internet Protocol (IP) address 127.0.0.1. A well-known port is any port in the range of 1-2048. I don't understand how can it be ? 127.0.0.1 - is the local private address ! It is impossible that somebody scaned my my server from himself . Did somebody have the same notification ? Best Regards Andrey Silkin