A security analyst is reviewing the following output from an IPS:

Given this output, which of the following can be concluded? (Choose two.)

A. The source IP of the attack is coming from 250.19.18.22.

B. The source IP of the attack is coming from 250.19.18.71.

C. The attacker sent a malformed IGAP packet, triggering the alert.

D. The attacker sent a malformed TCP packet, triggering the alert.
E. The TTL value is outside of the expected range, triggering the alert.