账号异常告警限时活动

import datetime

# 模拟用户登录数据
user_logins = {
    'user1': [{'time': datetime.datetime(2023, 10, 1, 12, 0), 'location': 'New York'}],
    'user2': [{'time': datetime.datetime(2023, 10, 1, 23, 0), 'location': 'Los Angeles'}]
}

# 异常检测函数
def detect_anomaly(username, login_time, login_location):
    if username in user_logins:
        last_login = user_logins[username][-1]
        time_diff = login_time - last_login['time']
        location_diff = login_location != last_login['location']
        
        if time_diff < datetime.timedelta(hours=1) and location_diff:
            return True
    return False

# 模拟新登录事件
new_login = {'username': 'user1', 'time': datetime.datetime(2023, 10, 1, 13, 0), 'location': 'Chicago'}

if detect_anomaly(new_login['username'], new_login['time'], new_login['location']):
    print(f"ALERT: Anomaly detected for user {new_login['username']}!")
else:
    print(f"Normal login for user {new_login['username']}.")