Well they could perhaps filter out 127.0.0.1 and the rest of the local network from the port scanner. https://w3dt.net/tools/portscan#&query=127.0.0.1 https://

Well they could perhaps filter out 127.0.0.1 and the rest of the local network from the port scanner. https://w3dt.net/tools/portscan#&query=127.0.0.1 https://w3dt.net/tools/portscan#&query=127.0.0.1 That alone makes me wonder at the sanitization they are carrying out upon the input - there be dragons out there.