code: def duo_anonymous_ip_failure(rec):
      """
      author:       airbnb_csirt
      description:  Alert on Duo auth logs marked as a failure due to an Anonymous IP.
      reference:    https://duo.com/docs/policy#anonymous-networks
      playbook:     N/A
      """
      return (
          rec["result"] == "FAILURE" and rec["reason"] == "Anonymous IP"
      )
  
label_desc: Use image node_id 1 for calling a global function with example usage: duo_anonymous_ip_failure(rec) and returns: unknown