Suspicious activity, like IP addresses or ports being scanned sequentially, is a sign of which type of attack? ​

What “old fashioned” features of checking accounts is p2p replacing

You are working as a security analyst in a company xyz that owns the whole subnet range of 23.0.0.0/8 and 192.168.0.0/8. while monitoring the data, you find a high number of outbound connections. you see that ip's owned by xyz (internal) and private ip's are communicating to a single public ip. therefore, the internal ip's are sending data to the public ip. after further analysis, you find out that this public ip is a blacklisted ip, and the internal communicating devices are compromised. what kind of attack does the above scenario depict?

State 7 common key's for every keyboard