security_identifier
Static attacker IP address identified as the single source of the observed Salesforce and ServiceNow portal scraping.
No current published clusters are mapped here yet.