Configure Blackhole sensor

Get started with your Blackhole sensor

Updated over a week ago

This sensor is one of the default shipped sensors with your Bee. It’s a service that does not interact with incoming connections. The Blackhole sensor, for example will notify you when someone executes a port scan on one of the given ports. When configuring the Blackhole Sensor, it’s always possible to simply enable or disable the sensor. When enabled you can add multiple ports, which the sensor will listen to. To check this you can run a quick ports scan on the IP of your Bee.

Enable or Disable the Blackhole sensor

By default the Blackhole is enabled, but it will not be active on any port. To fully disable the sensor, click on the dropdown and select no. After clicking the save button it will take a maximum of 5 minutes before the Blackhole is disabled on your Honeypot.

Add Blackhole ports

To add an Port is required to specify a certain name. This will not be visible to an attacker, it’s only used for you to identify the port which you specified. In the Port field you can specify the Port number.

Note: It’s not possible to add an range of Ports numbers.

In the protocol field you can select the protocol which you want to activate on the given port. You can select one of the following Protocols:

  • Transmission Control Protocol (TCP)

  • User Datagram Protocol (UDP)

Did this answer your question?