Lots of Access Denied in SharePoint ULS logs

We are running SharePoint 2019 in a minrole setup. Two SharePoint servers and a separate SQL server. We recently updated to the latest CU. I was looking in the ULS logs for something specific I'm troubleshooting and I stumbled on a ton of access denied messages. When I filter in on one of the correlation ID's, it seems to be the same set of events for each time it happens. However, each time it's a random user and it seems to give the same access denied on several different sites that these users don't have access to. It happens all day long and goes back as far as the logs do which is 5 days. We would have to pull backups to look in older log files. The odd thing is that it even happens when the majority of users are not on the network. One of the users was even a colleague of mine and I know he's not trying to access multiple random sites And it kind of looks like it goes down the sites in order. So I immediately start thinking this is a virus that is trying to access sites with a list of users. But I wanted to reach out to the community to see if these are normal entries in the ULS that I can safely ignore??

Your input is much appreciated! See screenshot of ULS filtered on one of the correlation IDs.