Unless you block the port at your external router you will not be able to stop the scans. It also sounds like the world knows yours network addresses. If you used Network Address Translation (NAT) you could keep your internal address from making there way out for discovery. Can you enforce NAT on your network?