Exam Week

You are a tier-one analyst. Zhetisu University is a regional higher-education institution. In the morning an alert arrives: the server ZHE-SRV-LMS recorded an unusual number of failed logons during the night.

People mistype passwords every day and most such spikes are not incidents. Your job is to decide whether this one is, and if so to reconstruct the sequence: where the attempts came from, when they stopped and what happened next.

You have the security log for the day. Timestamps are UTC; the office runs on Astana time (UTC+5).