Thank you sdangol, the only way I can do is to limit the scanning to origin IP.