Sign-In From Malware Infected IP — Detection Rule

Indicates sign-ins from IP addresses infected with malware that is known to actively communicate with a bot server.