Not sure if I’m missing something here, but that scans ports on the localhost, it is not a port scan of your entire network. While that’s still crazy and not something you want, it’s not quite what you initially said, and I don’t believe they’d be able to scan outside of your machine