What are the correct statements about the IP address scanning attack and prevention principles?

IP address scanning attack is an attacker that uses an ICMP packet (such as ping and tracert) to detect the target address.

IP address scanning attack is an attack method used by an attacker to detect a target address by using TCP/UDP packets.

IP address scanning attack defense detects the rate of address scanning behavior of a host. If the rate exceeds the threshold, it is blacklisted.

If the USG starts the blacklist function and is associated with IP address scanning attack prevention, when the scanning rate of a certain source exceeds the set threshold, the excess threshold will be discarded, and the packets sent by this source will be less than the subsequent time. Threshold, can also be forwarded