Quiet Ward

You are a tier-one analyst. Shipager Clinic is a private medical centre. In the morning an alert arrives: the server SHI-SRV-MIS recorded an unusual number of failed logons during the night.

People mistype passwords every day and most such spikes are not incidents. Your job is to decide whether this one is, and if so to reconstruct the sequence: where the attempts came from, when they stopped and what happened next.

You have the security log for the day. Timestamps are UTC; the office runs on Astana time (UTC+5).