追溯威胁源头双十一活动

import re
from datetime import datetime

def parse_logs(log_file):
    suspicious_activities = []
    pattern = re.compile(r'(\d{4}-\d{2}-\d{2} \d{2}:\d{2}:\d{2}).*?(Failed login|SQL injection).*?(IP: (\d+\.\d+\.\d+\.\d+))')
    
    with open(log_file, 'r') as file:
        for line in file:
            match = pattern.search(line)
            if match:
                timestamp, activity_type, _, ip_address = match.groups()
                suspicious_activities.append({
                    'timestamp': datetime.strptime(timestamp, '%Y-%m-%d %H:%M:%S'),
                    'activity_type': activity_type,
                    'ip_address': ip_address
                })
    
    return suspicious_activities

# 使用示例
log_entries = parse_logs('server_logs.txt')
for entry in log_entries:
    print(entry)