Online Banking Login Attempt Logs
This dataset provides comprehensive, timestamped logs of online banking login attempts, including user identifiers, authentication methods, device and location data, and the outcome of each attempt. It is designed for security monitoring, anomaly detection, and compliance auditing in financial technology environments, enabling deep analysis of user behavior and potential threats.
Sample rows
preview · 8 of 200 rows · all 16 columns| log_idstring | login_channelstring | successboolean | failure_reasonstring | user_idstring | usernamestring | login_timestampdatetime | ip_addressstring | device_idstring | geo_countrystring | geo_regionstring | geo_citystring | mfa_usedboolean | mfa_methodstring | account_lockedboolean | user_agentstring |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| LOG00001 | web | true | blank | U10001 | jdoe | 2024-01-04T08:00:00Z | 192.168.1.101 | DEV201 | US | California | San Jose | true | authenticator_app | false | Mozilla/5.0 (Windows NT 10.0; Win64; x64) Chrome/121.0.0.0 |
| LOG00002 | web | false | invalid_password | U10002 | chloe.l | 2024-01-05T09:15:00Z | 203.0.113.12 | DEV202 | US | New York | Brooklyn | false | blank | false | Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Safari/605.1.15 |
| LOG00003 | api | false | invalid_username | U10003 | x-guest | 2023-12-31T00:00:00Z | 127.0.0.1 | blank | blank | blank | blank | false | blank | false | curl/7.68.0 |
| LOG00004 | web | true | blank | U10004 | lucasb | 2024-02-02T13:25:00Z | 181.213.42.11 | DEV203 | BR | São Paulo | Campinas | false | blank | false | Mozilla/5.0 (Windows NT 10.0; Win64; x64) Firefox/117.0 |
| LOG00005 | mobile_app | false | account_locked | U10005 | tchou | 2024-02-05T07:00:00Z | 2001:0db8:85a3:0000:0000:8a2e:0370:7334 | DEV204 | FR | Île-de-France | Paris | true | sms | true | Mozilla/5.0 (Linux; Android 11; SM-G991B) Chrome/90.0.0.0 Mobile |
| LOG00006 | web | true | blank | U10001 | jdoe | 2024-02-07T16:00:00Z | 198.51.100.87 | DEV201 | US | California | San Jose | true | biometric | false | Mozilla/5.0 (Windows NT 10.0; Win64; x64) Chrome/121.0.0.0 |
| LOG00007 | mobile_app | false | multi_factor_failed | U10006 | koukik | 2024-02-10T05:30:00Z | 203.0.113.33 | DEV205 | JP | Tokyo | Shinjuku | true | authenticator_app | false | Mozilla/5.0 (iPhone; CPU iPhone OS 15_2 like Mac OS X) AppleWebKit/605.1.15 Mobile/15E148 |
| LOG00008 | mobile_app | false | session_timeout | U10007 | mike_88 | 2024-03-02T12:00:00Z | 203.0.113.45 | DEV206 | GB | England | London | false | blank | false | Mozilla/5.0 (Linux; Android 13; Pixel 6) Chrome/114.0.0.0 Mobile |
| LOG00009 | web | true | blank | U10008 | sanchez_juan | 2024-03-05T23:59:59Z | 189.203.45.67 | DEV207 | MX | Jalisco | Guadalajara | false | blank | false | Mozilla/5.0 (Windows NT 10.0; Win64; x64) Firefox/120.0 |
| LOG00010 | api | false | account_disabled | U10009 | zeus | 2024-03-10T18:30:00Z | 10.0.0.55 | blank | blank | blank | blank | false | blank | false | python-requests/2.25.1 |
| LOG00011 | web | false | other | U10010 | longest-username-in-the-database_2024 | 2024-03-15T14:45:00Z | 203.0.113.50 | blank | NL | North Holland | Amsterdam | false | blank | false | Mozilla/5.0 (Macintosh; Intel Mac OS X 13_1) Chrome/120.0.6099.234 |
| LOG00012 | web | true | blank | U10011 | c.barton | 2024-03-19T06:10:00Z | 8.8.8.8 | DEV208 | DE | Bavaria | Munich | false | blank | false | Mozilla/5.0 (Windows NT 10.0; Win64; x64) Edge/120.0.2210.91 |
| LOG00013 | api | false | invalid_password | U10012 | guest_user | 2024-03-20T22:00:00Z | ::1 | blank | blank | blank | blank | false | blank | false | Googlebot/2.1 (+http://www.google.com/bot.html) |
| LOG00014 | mobile_app | true | blank | U10013 | maria.rosa | 2024-03-21T08:00:00Z | 188.25.44.13 | DEV209 | GR | Attica | Athens | true | sms | false | Mozilla/5.0 (Linux; Android 11; SAMSUNG SM-A125F) Chrome/120.0.6099.234 Mobile |
| LOG00015 | web | false | invalid_password | U10014 | james_h | 2024-03-25T00:00:00Z | 203.0.113.61 | DEV210 | CA | Ontario | Toronto | false | blank | false | Mozilla/5.0 (Windows NT 10.0; Win64; x64) Chrome/121.0.0.0 |
| LOG00016 | web | true | blank | U10015 | lucy_ng | 2024-03-29T05:45:00Z | 203.0.113.77 | DEV211 | SG | Central | Singapore | false | blank | false | Mozilla/5.0 (Macintosh; Intel Mac OS X 12_6_7) Safari/605.1.15 |
| LOG00017 | mobile_app | false | multi_factor_failed | U10016 | rachel.w | 2024-04-01T13:00:00Z | 203.0.113.88 | DEV212 | AU | Victoria | Melbourne | true | false | Mozilla/5.0 (iPhone; CPU iPhone OS 16_1 like Mac OS X) AppleWebKit/605.1.15 Mobile/15E148 | |
| LOG00018 | web | true | blank | U10017 | olivier | 2024-04-05T18:30:00Z | 203.0.113.99 | DEV213 | FR | Île-de-France | Paris | true | hardware_token | false | Mozilla/5.0 (Windows NT 10.0; Win64; x64) Chrome/121.0.0.0 |
| LOG00019 | web | false | invalid_password | U10018 | anil_k | 2024-04-06T09:00:00Z | 192.0.2.33 | DEV214 | IN | Delhi | New Delhi | false | blank | false | Mozilla/5.0 (X11; Linux x86_64) Firefox/120.0 |
| LOG00020 | mobile_app | true | blank | U10019 | nbrown | 2024-04-09T11:00:00Z | 203.0.113.111 | DEV215 | GB | England | Manchester | false | blank | false | Mozilla/5.0 (Linux; Android 10; SM-A307FN) Chrome/121.0.0.0 Mobile |
What the 200 rows show
from the 200-row sample- 52%success = true
- 5mfa methods
- 22geo countries
- string 12
- datetime 1
- boolean 3
Columns
16 columns in three groups| column | type | description | example |
|---|---|---|---|
| Text 12 columns | |||
log_id | string | Unique identifier for each login attempt log entryunique | LOG00001 |
user_id | string | Unique identifier for the user attempting to log in | U10001 |
username | string | Username provided during the login attempt | jdoe |
failure_reason | string | Reason for login failure if unsuccessful (e.g., invalid_password, account_locked, etc.)7 values · optional | invalid_password |
ip_address | string | IP address from which the login attempt was made (IPv4 or IPv6) | 192.168.1.101 |
user_agent | string | Browser or device user agent string used during the login attempt | curl/7.68.0 |
device_id | string | Unique identifier for the device used in the login attempt, if availableoptional | DEV201 |
geo_country | string | Country determined from the IP address at the time of loginoptional | US |
geo_region | string | Region or state determined from the IP address at the time of loginoptional | California |
geo_city | string | City determined from the IP address at the time of loginoptional | San Jose |
mfa_method | string | Type of multi-factor authentication used (e.g., sms, email, authenticator_app, biometric)6 values · optional | authenticator_app |
login_channel | string | Channel used for login (e.g., web, mobile_app, api)web · mobile_app · api · other | web |
| Dates and times 1 column | |||
login_timestamp | datetime | Date and time when the login attempt occurred (UTC) | 2024-01-04T08:00:00Z |
| True or false 3 columns | |||
success | boolean | Indicates whether the login attempt was successful | true |
mfa_used | boolean | Indicates whether multi-factor authentication was used during the login attempt | true |
account_locked | boolean | Indicates if the account was locked as a result of this login attempt | false |
Use it for
A finance dashboard
The success rate, success by login_
channel and a breakdown of failure_ reason. Excel, Power BI or Tableau. Why do 103 of 200 rows have success = true?
A class exercise
Hand out the rows and one question. Everyone works from the same 200 rows.
- Logs200LOG00001webLOG00002webLOG00004web
A software demo
Believable logs with user_
id, username and login_ timestamp to fill a screen in front of a buyer.
blueprint · online-banking-login-attempt-logs
Behind this dataset
Same schema. As many rows as you need.
These 200 rows came out of a blueprint — 16 columns with generation rules behind each one. Open it in Data Factory to retune a column, add your own, wire in foreign keys, and run it at the size you actually need.
- User ID anonymized per attempt.
- Timestamp, channel, and outcome recorded.
- Failed attempts and lockouts flagged.
- Device and IP logged.
1 credit per row. Preview 20 rows free. Buy rows for the full run.
- Exports
- CSV, JSON, JSONL, Parquet, SQL, Excel, TSV, XML
- Licence
- yours to use, including commercially
- API slug
- online-banking-login-attempt-logs