I'm studying the malicious incoming traffic of a server. I've noticed that the inter-arrival time between packets follow an exponential distribution. This suggested that the packets arrival follows a Poisson distribution . One plausible explanation for this is based on the law of rare events. Usually the malicious packets scans a large IP scope, so there is a little probability that such packets arrive to the server. Observing that the rate of the packets is not constant in time, is possible to state that the packets have been sent following a random strategy?