If you need a write-up for a legitimate security assessment or to understand how to detect such anomalies in your logs, I'm happy to expand on detection and mitigation strategies instead.

is a software tool for web testing and automation. While it has legitimate uses (e.g., penetration testers checking login rate limits, developers load-testing endpoints), it is also widely known as a credential stuffing tool used to test stolen username/password pairs against websites. Version 1.4.4 is one of the older, commonly referenced releases.