The simple solution is to just use Proxies on non standard ports, therefore stopping them scanning every port to try to detect a Proxy.