> ## Documentation Index > Fetch the complete documentation index at: https://docs.onefirewall.com/llms.txt > Use this file to discover all available pages before exploring further. # One IP, a Dozen Industries > A single malicious IP correlated across automotive, logistics, finance, and cloud infrastructure members spread over five countries At the center of this graph is one IP address, 31.77.227.120. Every line connects to an Alliance member that reported traffic from that address, independently and without coordination between members. *** ## Distribution across sectors The labeled nodes span an automotive company in the Netherlands, a logistics provider in the UK, a cybersecurity firm in the UK, a threat intel provider in Germany, a financial services firm in Italy, a cloud provider in Italy, a security partner in Rome, a GenAI security vendor in Serbia, a software house in the UK, and a set of anonymized members labeled M-1 through M-8. There is no shared vertical or supply-chain relationship among these organizations. The single connecting factor is that the same address was observed hitting all of them. ## Anonymized nodes Not every member's identity is exposed on a graph like this. The M-1 through M-8 nodes contribute their observation without an identifying label. The correlation weight is based on the observation being independently verifiable, not on the reporting member being named. ## Correlation across independent members This is the practical form of the Alliance Member Frequency factor in the Crime Score model. The financial services firm in Italy had no visibility into the automotive company in the Netherlands being hit by the same IP days earlier. Evaluated individually, each of these sightings resembles routine background scanning. Correlated, they describe a single actor working through unrelated targets across five countries — a pattern only visible once the observations are pooled. *** Proof of Value engagements check whether a client's own traffic already correlates with sightings like these. [Start a Proof of Value](https://onefirewall.com/proof-of-value).