Transportation IoT Security Audit Logs
This dataset provides detailed, structured security audit logs for IoT devices deployed across transportation infrastructure, capturing event types, device and asset context, user actions, network information, compliance checks, and remediation outcomes. It enables cybersecurity teams and fleet managers to monitor vulnerabilities, ensure regulatory compliance, and respond proactively to threats affecting smart city and logistics operations.
Sample rows
preview · 8 of 120 rows · all 20 columns| audit_log_idstring | compliance_statusstring | infrastructure_typestring | event_timestampdatetime | device_idstring | device_typestring | device_firmware_versionstring | device_location_latitudefloat | device_location_longitudefloat | infrastructure_idstring | event_typestring | event_severitystring | user_idstring | user_rolestring | source_ipstring | destination_ipstring | vulnerability_idstring | remediation_actionstring | remediation_statusstring | event_descriptionstring |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| ALOG-00001 | compliant | train | 2024-06-05T00:00:00Z | cam-83219 | camera | v1.2.4 | 40.7128 | -74.006 | train-534 | login | info | op_frank | operator | 10.0.1.2 | blank | blank | blank | blank | Camera device user login at scheduled shift start. |
| ALOG-00002 | compliant | bus | 2024-06-05T08:17:23Z | gps-1174 | gps_tracker | v3.0.1 | 34.0522 | -118.2437 | bus-892 | configuration_change | medium | admin_ophelia | admin | 10.0.4.8 | 10.0.4.251 | blank | blank | blank | GPS device configuration updated for route 22. |
| ALOG-00003 | compliant | station | 2024-06-05T23:59:59Z | env-99832 | air_quality_sensor | v0.0.0-beta | 51.5074 | -0.1278 | stn-209 | firmware_update | medium | svc_stnadmin | automated_process | 172.16.12.66 | 172.16.12.67 | blank | patched | completed | Firmware update applied to air quality sensor at platform 3. |
| ALOG-00004 | non_compliant | traffic_light | 2024-06-05T14:45:13Z | sig-1003 | traffic_signal_controller | v2.3.7 | 37.7749 | -122.4194 | tl-202 | anomaly_detected | high | system_watchdog | automated_process | 192.168.10.19 | blank | blank | escalated | pending | Signal controller detected abnormal traffic flow pattern. |
| ALOG-00005 | not_checked | blank | 2024-06-06T11:06:37Z | sensor-5001 | temperature_sensor | v9.2.0 | 48.8566 | 2.3522 | blank | other | low | blank | blank | 10.0.2.14 | blank | blank | blank | blank | Temperature sensor periodic health check completed. |
| ALOG-00006 | non_compliant | metro | 2024-06-06T16:24:01Z | cam-9812 | camera | v4.8.3-rc3 | 0 | 0 | metro-382 | policy_violation | critical | admin_rashid | admin | 192.168.100.54 | 192.168.100.79 | blank | quarantined | pending | Camera policy violation: unauthorized access attempt detected. |
| ALOG-00007 | compliant | warehouse | 2024-06-06T19:40:55Z | humidity-492 | humidity_sensor | v1.0.1 | -90 | 180 | wh-111 | logout | info | op_olga | operator | 10.0.3.19 | blank | blank | blank | blank | Humidity sensor user logged out after shift. |
| ALOG-00008 | non_compliant | station | 2024-06-07T05:15:29Z | env-8830 | air_quality_sensor | v2.0.7 | 35.6895 | 139.6917 | stn-301 | incident_response | critical | secscan_bot | automated_process | 172.16.20.100 | 172.16.20.200 | blank | escalated | pending | Emergency response initiated for hazardous air quality detected. |
| ALOG-00009 | compliant | bus | 2024-06-07T09:27:01Z | gps-2422 | gps_tracker | v3.2.3 | 28.6139 | 77.209 | bus-599 | firmware_update | medium | admin_kumar | admin | 10.0.8.15 | 10.0.8.99 | blank | patched | completed | GPS tracker firmware update initiated during maintenance. |
| ALOG-00010 | non_compliant | train | 2024-06-07T16:59:00Z | cam-8431 | camera | v1.4.2 | 52.52 | 13.405 | train-740 | vulnerability_found | critical | secscan_bot | automated_process | 192.168.20.20 | 192.168.20.21 | CVE-2024-18532 | escalated | pending | Camera CVE-2024-18532 vulnerability discovered during scan. |
| ALOG-00011 | not_checked | blank | 2024-06-08T00:00:00Z | sensor-1602 | temperature_sensor | v5.7.1 | -45 | 120 | blank | other | info | blank | blank | 10.0.6.10 | blank | blank | blank | blank | Temperature sensor system check completed at midnight. |
| ALOG-00012 | not_checked | experimental_hub | 2024-06-08T08:01:45Z | ultrasonic-321 | ultrasonic_sensor | blank | 90 | -180 | experimental-12 | other | low | test_user | qa_engineer | 192.168.50.50 | blank | blank | blank | blank | Ultrasonic sensor calibration event completed. |
| ALOG-00013 | compliant | warehouse | 2024-06-08T12:36:05Z | humidity-492 | humidity_sensor | v999.999.999 | 37.7749 | -122.4194 | wh-111 | login | info | op_olga | operator | 10.0.3.19 | blank | blank | blank | blank | Warehouse operator logged in to humidity sensor system. |
| ALOG-00014 | compliant | station | 2024-06-08T18:00:23Z | env-99832 | air_quality_sensor | v2.1.1 | 40.4168 | -3.7038 | stn-209 | logout | info | op_shohei | operator | 10.0.9.12 | blank | blank | blank | blank | User logged out from air quality sensor system. |
| ALOG-00015 | non_compliant | train | 2024-06-09T02:29:36Z | cam-83219 | camera | v1.2.4 | 40.7128 | -74.006 | train-534 | anomaly_detected | high | system_alert | automated_process | 10.0.1.2 | blank | blank | escalated | pending | Camera detected unauthorized movement near train cabin. |
| ALOG-00016 | non_compliant | bus | 2024-06-09T07:12:17Z | gps-1174 | gps_tracker | v3.0.1 | 34.0522 | -118.2437 | bus-892 | policy_violation | critical | admin_ophelia | admin | 10.0.4.8 | 10.0.4.251 | blank | escalated | pending | GPS tracker policy violation: unauthorized configuration change. |
| ALOG-00017 | non_compliant | traffic_light | 2024-06-09T13:45:54Z | sig-1003 | traffic_signal_controller | v2.3.7 | 37.7749 | -122.4194 | tl-202 | incident_response | critical | sys_alert | automated_process | 192.168.10.19 | blank | blank | escalated | pending | Response initiated for traffic signal controller anomaly. |
| ALOG-00018 | not_checked | blank | 2024-06-09T18:30:03Z | sensor-5001 | temperature_sensor | v9.2.0 | 48.8566 | 2.3522 | blank | other | low | blank | blank | 10.0.2.14 | blank | blank | blank | blank | Routine temperature sensor performance review. |
| ALOG-00019 | compliant | metro | 2024-06-10T00:00:00Z | cam-9812 | camera | v4.8.3-rc3 | 0 | 0 | metro-382 | login | info | admin_rashid | admin | 192.168.100.54 | blank | blank | blank | blank | Metro admin logged in to camera system. |
| ALOG-00020 | compliant | warehouse | 2024-06-10T09:15:10Z | humidity-492 | humidity_sensor | v1.0.1 | -90 | 180 | wh-111 | firmware_update | medium | svc_whadmin | automated_process | 10.0.3.19 | 10.0.3.20 | blank | patched | completed | Firmware updated for humidity sensor in warehouse. |
What the 120 rows show
from the 120-row sample- 3remediation statuses
- 4user roles
- 4remediation actions
- 5event severities
- 8device types
- 9event types
- string 17
- float 2
- datetime 1
Columns
20 columns in three groups| column | type | description | example |
|---|---|---|---|
| Text 17 columns | |||
audit_log_id | string | Unique identifier for each security audit log eventunique | ALOG-00001 |
device_id | string | Unique identifier for the IoT device involved in the event | cam-83219 |
device_type | string | Type or model of the IoT device (e.g., GPS tracker, sensor, camera)8 types | camera |
device_firmware_version | string | Firmware version running on the IoT deviceoptional | v1.2.4 |
infrastructure_id | string | Identifier for the transportation infrastructure asset (e.g., traffic signal, depot, vehicle)optional | train-534 |
infrastructure_type | string | Type of transportation infrastructure (e.g., traffic light, bus, warehouse)8 types · optional | train |
event_type | string | Type of security event (e.g., login, configuration_change, firmware_update, anomaly_detected, vulnerability_found)9 values | login |
event_severity | string | Severity level of the event (e.g., info, low, medium, high, critical)info · low · medium · high · critical | info |
event_description | string | Detailed description of the audit event | Camera device user login … |
user_id | string | Identifier for the user or system account that initiated the event (if applicable)optional | op_frank |
user_role | string | Role of the user or system account (e.g., admin, operator, automated_process)4 roles · optional | operator |
source_ip | string | IP address from which the event originatedoptional | 10.0.1.2 |
destination_ip | string | IP address targeted by the event (if applicable)optional | 10.0.4.251 |
compliance_status | string | Compliance check result at the time of the event (e.g., compliant, non_compliant, not_checked)compliant · non_compliant · not_checked · optional | compliant |
vulnerability_id | string | Reference ID for a detected vulnerability (e.g., CVE number), if applicableoptional | CVE-2024-18532 |
remediation_action | string | Action taken to remediate the event or vulnerability (e.g., patched, quarantined, escalated, none)4 actions · optional | patched |
remediation_status | string | Status of the remediation action (e.g., pending, completed, failed, not_applicable)pending · completed · failed · not_applicable · optional | completed |
| Numbers 2 columns | |||
device_location_latitude | float | Latitude of the IoT device at the time of the event-90 to 90 · optional | 40.7128 |
device_location_longitude | float | Longitude of the IoT device at the time of the event-180 to 180 · optional | -74.006 |
| Dates and times 1 column | |||
event_timestamp | datetime | Date and time when the audit event was recorded (UTC) | 2024-06-05T00:00:00Z |
Use it for
A transportation dashboard
A breakdown of infrastructure_
type. Excel, Power BI or Tableau. What pattern can you find in 120 rows?
A class exercise
Hand out the rows and one question. Everyone works from the same 120 rows.
- Audit logs120ALOG-00001compliantALOG-00002compliantALOG-00003compliant
A software demo
Believable audit logs with event_
timestamp, device_ id and device_ type to fill a screen in front of a buyer.
blueprint · transportation-iot-security-audit-logs
Behind this dataset
Same schema. As many rows as you need.
These 120 rows came out of a blueprint — 20 columns with generation rules behind each one. Open it in Data Factory to retune a column, add your own, wire in foreign keys, and run it at the size you actually need.
- Each row represents a unique IoT device event within a transportation asset (fleet vehicle, traffic signal, etc.)
- Events must include timestamp, device ID, event type, and severity level
- Compliance flags are set for devices with outdated firmware or failed authentication
- Critical events require incident escalation indicator
- Devices with repeated warnings are tagged for maintenance review
1 credit per row. Preview 20 rows free. Buy rows for the full run.
- Exports
- CSV, JSON, JSONL, Parquet, SQL, Excel, TSV, XML
- Licence
- yours to use, including commercially
- API slug
- transportation-iot-security-audit-logs