internal only IP address categorized as suspicious by BCWF