actually I just deinstalled portsentry because of this. There are a huge number of Linux boxes out there that are desperately scanning port 111 looking for a nfs type server.
Its worth setting the trip wire level a little higher to avoid being swamped with spurious info.
