I also have carrier-based (free) spam prevention which may prevent the POTS equivalent of a port-scan. But that wasn't enough - with GV based call screening, it's now down to near-zero.