Hello I've set up portsentry on stealth mode and it has been running well. However over the weekend I've received 100 email from both servers from the IP address below. (http://www.hotchilli.com a hosting company in the UK)
Sep 30 05:53:38 www portsentry[386]: attackalert: Host: 217.72.160.65 is already blocked. Ignoring Sep 30 05:53:42 www portsentry[386]: attackalert: Connect from host: 217.72.160.65/217.72.160.65 to UDP port: 69 Interested to know whether I should email the company to ask why they are scanning this port but unsure as to whether portsentry is producing bogus alerts? Thanks ja _______________________________________________ cobalt-security mailing list [EMAIL PROTECTED] http://list.cobalt.com/mailman/listinfo/cobalt-security
