Hy, I installed Online armor firewall. After checking log files i discovered that outgoing UDP connection 127.0.0.1 is resolved as milw0rm.com Message from logs: "Outgoing UDP access allowed to: (milw0rm.com) 127.0.0.1:51989"; Connection isn't from specific process. It's happens with all processes which are listening. Domain name is suspicious for me. I don't have a clue what is that, so maybe someone here can help me. Thanks.