Select a screenshot to view it full size. Use the arrow keys to move between them.
An IIS log colored by client address. One address becomes a solid strand at the 14:05 spike on the timeline: a credential-stuffing attack.