One of my clients got hit by a hacker last week. All the attacks came from a IP address ending in
Several websites suggest that this is a malware host and should be blocked. One of the staff members looking into says they appear to have inserted Java Script into a query string, which would be a new one on me.