[cobalt-security] Portsentry detection (all raqs)

["James Mackay" <jjma@xxxxxxxxxxxxxx>]

Hello

I've set up portsentry on stealth mode and it has been running well. However over the weekend I've received 100 email from both
servers from the IP address below. (http://www.hotchilli.com  a hosting company in the UK)

Sep 30 05:53:38 www portsentry[386]: attackalert: Host: 217.72.160.65 is already blocked. Ignoring
Sep 30 05:53:42 www portsentry[386]: attackalert: Connect from host: 217.72.160.65/217.72.160.65 to UDP port: 69

Interested to know whether I should email the company to ask why they are scanning this port but unsure as to whether portsentry is
producing bogus alerts?

Thanks

ja