Interactive Demo — Simulated data only. Back to SOC in a Box
SOC365 Dashboard
Acme Legal Services Ltd Live 02:43:02 UTC

DecoyPulse Honeypots

10
Total Honeypots
10
Active
13
Triggered (30d)
2
Internal Triggers
10
External Triggers
99.3%
Avg Uptime
0
False Positives
5
Unique Attackers

Honeypot Status

DP-SSH-01
SSH Server
Host: SRV-FILE-01
Port: 22
Protocol: ssh
Status: Active
Triggers (30d): 2
Last Trigger: 2026-10-01 22:58
Uptime: 98.3%
Deployed: 2026-08-29
DP-RDP-01
RDP Terminal
Host: WS-PC-003
Port: 3389
Protocol: rdp
Status: Active
Triggers (30d): 2
Last Trigger: 2026-09-29 08:11
Uptime: 99.4%
Deployed: 2026-08-25
DP-SMB-01
SMB File Share
Host: SRV-DC-01
Port: 445
Protocol: smb
Status: Active
Triggers (30d): 2
Last Trigger: 2026-09-28 08:59
Uptime: 98.9%
Deployed: 2026-05-05
DP-HTTP-01
Web Admin Panel
Host: SRV-WEB-01
Port: 8080
Protocol: http
Status: Active
Triggers (30d): 3
Last Trigger: 2026-09-27 16:03
Uptime: 99.5%
Deployed: 2026-05-15
DP-SQL-01
MSSQL Database
Host: SRV-SQL-01
Port: 1433
Protocol: sql
Status: Active
Triggers (30d): 0
Last Trigger: Never
Uptime: 98.9%
Deployed: 2026-06-12
DP-FTP-01
FTP Server
Host: SRV-BACKUP-01
Port: 21
Protocol: ftp
Status: Active
Triggers (30d): 0
Last Trigger: Never
Uptime: 98.1%
Deployed: 2026-05-02
DP-LDAP-01
LDAP Directory
Host: SRV-DC-01
Port: 389
Protocol: ldap
Status: Active
Triggers (30d): 5
Last Trigger: 2026-10-01 22:11
Uptime: 99.8%
Deployed: 2026-07-24
DP-SMTP-01
SMTP Mail Relay
Host: SRV-MAIL-01
Port: 25
Protocol: smtp
Status: Active
Triggers (30d): 4
Last Trigger: 2026-10-11 08:56
Uptime: 99.4%
Deployed: 2026-06-17
DP-CRED-01
Credential Lure
Host: SRV-APP-01
Protocol: credential
Status: Active
Triggers (30d): 4
Last Trigger: 2026-10-06 15:36
Uptime: 100%
Deployed: 2026-05-10
DP-FILE-01
Canary Documents
Host: SRV-FILE-01
Protocol: canary
Status: Active
Triggers (30d): 4
Last Trigger: 2026-10-04 23:50
Uptime: 99%
Deployed: 2026-08-15

Trigger Activity Log

25 events (last 30 days)
ID Time Honeypot Action Source IP Source Type User Context Severity Alert Raised
DPT-0011 1d ago DP-CRED-01 Credential spray against honeypot service 103.48.216.44 External — Medium No
DPT-0005 2d ago DP-SMB-01 HTTP admin panel login attempted 45.94.148.223 External — Medium Yes
DPT-0010 5d ago DP-HTTP-01 Canary document opened from workstation 103.98.216.132 External — Medium Yes
DPT-0003 6d ago DP-LDAP-01 Decoy credentials used from new IP 91.31.195.80 External — Medium Yes
DPT-0024 7d ago DP-SMB-01 HTTP admin panel login attempted 45.49.148.23 External — Medium Yes
DPT-0013 8d ago DP-FILE-01 LDAP bind with service account 10.3.94.126 Internal j.smith Critical Yes
DPT-0023 8d ago DP-CRED-01 Multiple protocol probes from single source 185.7.220.49 External — Medium Yes
DPT-0002 9d ago DP-FTP-01 FTP anonymous login attempt 103.75.216.31 External — High Yes
DPT-0019 10d ago DP-SQL-01 LDAP bind with service account 10.2.246.180 Internal a.wilson Critical Yes
DPT-0012 10d ago DP-RDP-01 Multiple protocol probes from single source 10.1.228.151 Internal n.clark Critical Yes
DPT-0004 10d ago DP-LDAP-01 Automated tool fingerprint detected 194.132.62.85 External — Medium Yes
DPT-0021 10d ago DP-CRED-01 HTTP admin panel login attempted 185.253.220.41 External — Medium Yes
DPT-0022 11d ago DP-FTP-01 Port scan followed by connection attempt 103.138.216.92 External — Medium Yes
DPT-0008 12d ago DP-SQL-01 HTTP admin panel login attempted 185.84.220.35 External — High No
DPT-0018 13d ago DP-LDAP-01 SMB share enumeration attempt 103.90.216.120 External — Medium Yes
DPT-0014 15d ago DP-SSH-01 SSH login attempt with user "admin" 10.0.196.152 Internal k.brown Critical Yes
DPT-0020 16d ago DP-RDP-01 SMB share enumeration attempt 10.0.132.120 Internal system Critical Yes
DPT-0001 17d ago DP-RDP-01 Lateral movement using honeypot credentials 91.119.195.237 External — High Yes
DPT-0025 19d ago DP-FTP-01 Decoy credentials used from new IP 103.195.216.197 External — Medium No
DPT-0017 22d ago DP-SMB-01 Canary document opened from workstation 185.151.220.193 External — High Yes
DPT-0009 23d ago DP-RDP-01 Credential spray against honeypot service 10.2.114.202 Internal a.wilson Critical Yes
DPT-0006 27d ago DP-FILE-01 Lateral movement using honeypot credentials 91.173.195.57 External — High Yes
DPT-0007 27d ago DP-FILE-01 LDAP bind with service account 194.51.62.58 External — Medium Yes
DPT-0016 27d ago DP-CRED-01 Multiple protocol probes from single source 10.0.24.194 Internal d.walker Critical Yes
DPT-0015 28d ago DP-RDP-01 SSH login attempt with user "admin" 185.3.220.5 External — Medium Yes

Zero False Positive Detection

DecoyPulse honeypots have zero false positive rate because no legitimate user or service should ever interact with them. Any trigger is inherently suspicious and warrants investigation. Internal triggers are especially critical as they may indicate lateral movement or insider threat activity.