Parse Logs for Failed Logins | Dataford Interview Questions

Write a script to parse a JSON log file and identify IP addresses that have made more than 100 failed login attempts in a minute.

Implement parse_failed_login_ips(log_json), where log_json is a JSON string containing an array of records. Each record has integer timestamp values in seconds, an ip string, and a status string. Return a lexicographically sorted list of IP addresses with more than 100 failed attempts in any 60-second interval. Intervals are half-open by timestamp difference, so attempts exactly 60 seconds apart are not in the same interval.

Constraints

log_json contains a valid JSON array
0 <= number of records <= 1000
Each record contains integer timestamp, string ip, and string status fields
A failed attempt is identified by status == "failed"
An IP is reported only when more than 100 failures occur within a 60-second interval
Return IP addresses in lexicographic order

Function Signature

def parse_failed_login_ips(log_json):

Whenever you're ready, walk me through your approach or go straight to the code. The requirements are in the Question tab.

Problem

Write a script to parse a JSON log file and identify IP addresses that have made more than 100 failed login attempts in a minute.

Constraints

log_json contains a valid JSON array
0 <= number of records <= 1000
Each record contains integer timestamp, string ip, and string status fields
A failed attempt is identified by status == "failed"
An IP is reported only when more than 100 failures occur within a 60-second interval
Return IP addresses in lexicographic order

Function Signature

def parse_failed_login_ips(log_json):

Whenever you're ready, walk me through your approach or go straight to the code. The requirements are in the Question tab.