coders.sh *

Loading Developers Heaven

The Botnet Filter

Mission brief

Hard

Our security team is tracking a botnet. Identify "suspicious" users who logged in from more than 5 different IP addresses within a 10-minute window.

Note: This environment runs SQLite, so use datetime(time, '+X minutes') for time adjustments.

Identify suspicious users who logged in from >5 different IPs in <10 minutes.

Our security team is tracking a botnet. Identify "suspicious" users who logged in from more than 5 different IP addresses within a 10-minute window.

Note: This environment runs SQLite, so use datetime(time, '+X minutes') for time adjustments.

logins

user_idINT

ip_addressVARCHAR

login_timeDATETIME

One SQL table. One SQL condition.
Still tricky for most developers.

Initializing Database Engine v1.8.0...

Write a SQL query, then click Run Query

Keep practicing

Similar difficulty and topics — pick up where you left off or stretch your SQL skills.

Title	Complexity	Status	Solve
The Shadow Follower	Hard	Not solved	Solve
The Data Leaker	Hard	Not solved	Solve
The Recursive Tree	Hard	Not solved	Solve