Sentinel Console

Agents reporting

87/ 90

3 agents silent

Open criticals

+2 in last 24h

Open findings

23CVEs

6 fixable by upgrade now

Events / min

1,284

▲ 8% vs prior hour

Rules

12live·5shadow

Open items by severity

34open

Critical4

Warning11

Info / low19

Silent / unhealthy agents

NodeRegionRoleLast heartbeatAgentCert expiry

cov-node-05COVgame-node47m agov2.14.189d

mia-node-11MIAgame-node23m agov2.14.1121d

dfw-hv-02DFWhypervisor9m agov2.13.818d

Recent high-severity events

2026-07-06 14:52:08dfw-node-07logtailsshd: 240 failed logins from 45.9.148.0/24 in 6m

2026-07-06 14:49:56dfw-node-07netinvnew listener 0.0.0.0:2222 (pid 41772, sshd -d)

2026-07-06 14:47:31lax-node-12procmoncontainer→host exec — runc breakout signature (customer #4127)

2026-07-06 14:41:02fra-node-03fim/etc/ssh/sshd_config modified — outside run window

2026-07-06 14:33:55nyc-node-04netinvegress 410 Mbps → 185.220.101.7:4444 (stratum) — mining pattern

2026-07-06 14:20:19sgp-node-09pkginvopenssl 3.0.11 vulnerable — CVE-2025-31344 (fixed 3.0.16)

Regions

DFW16NYC12ATL10COV8LAX14SGP9FRA11MIA10

Shadow vs live rules

last 24h

LIVEssh-bruteforce-v331 fires

LIVEfim-critical-paths9 fires

LIVErunc-breakout-sig1 fire

SHADOWmining-egress-heuristic v2would fire 14×

SHADOWdefender-tamperwould fire 3×