Portscan detected from 8.8.4.4 (dns.google)

Got that some times ago, see https://community.sophos.com/products/unified-threat-management/f/german-forum/62491/portscan-detected-google-dns in the German part unfortunately.

A guess from Bob was a spoofed IP. I never had a 100% explanation. 

Best regards 

Alex 

I've learned since then, Alex, that this also can be a DDoS attack where the sending IP is spoofed by devices on a bot net.

Cheers - Bob

Thank you Alex and Bob for your input and help! I have created a "black hole" and I add to the list all portscan received. I noticed most of received portscans (90%) are coming from ec2 compute amazonaws (i.e., ec2-34-229-43-227.compute-1.amazonaws.com). I understand, this is a hosted service where people create their own vm servers. Please correct if I am wrong because I also use Echo devices at home.

Thank you Alex and Bob for your input and help! I have created a "black hole" and I add to the list all portscan received. I noticed most of received portscans (90%) are coming from ec2 compute amazonaws (i.e., ec2-34-229-43-227.compute-1.amazonaws.com). I understand, this is a hosted service where people create their own vm servers. Please correct if I am wrong because I also use Echo devices at home.