TOTAL ATTACKS
—Waiting for comparisonselected time range
The default password is still in useThis dashboard is internet-facing. Change the admin password now.
UNIQUE IPS
—Distinct attack sourcessource addresses
HIGH RISK
—Critical + high severitypriority events
BLOCKED
—Logged firewall denialsDROP / BLOCK
GEOGRAPHIC DISTRIBUTION
Live attack map
CriticalHighMedium / low
Waiting for geolocated attacks.
Waiting for geolocated attacks to display on the map.
REAL TIME
LISTENINGLive event stream
Waiting for eventsNew sensor data will appear here.
VOLUME ANALYSIS
Attack timeline
All eventsCritical
TARGET SURFACE
Most targeted ports
PRIORITY SOURCES
Most active attacker IPs
| Source IP | Location / network | Events | Blocked | Last seen | Risk | Details |
|---|
EVENT EXPLORER
Attack events
Search, filter, and investigate events from every sensor in one place.
| Time | Risk | Source IP | Location | Target | Attack type | Result | Details |
|---|
Page 1 / 1
ACTIVE DEFENSE
Fully automated protectionBlocked IP addresses
Monitor automatic blocks and historical actions for RDP port 11111.
Automatic block on attempt 21
RUNNINGWhen an IP exceeds 20 attempts within 60 minutes, its TCP/UDP access to port 11111 is blocked for 24 hours. Expired rules are removed automatically and reapplied if the attack resumes.
ACTIVE BLOCKS
—Currently denied accessIPs
TOTAL BLOCKS
—All blocking actionsrecords
UNIQUE IPS
—Distinct blocked sourcesIPs
LAST 24 HOURS
—New automatic blocksactions
| Source IP | Location / network | Attempts | Target | Status | Blocked at | Expiry / release | Details |
|---|
Page 1 / 1
THREAT INTELLIGENCE
Source and behavior analysis
Compare attack volume by country, category, and target surface.
SOURCE COUNTRIES
Country ranking
ATTACK PATTERNS
Category distribution
0events
PORT MATRIX
Target service volume
WEEKLY SUMMARY
Last 7 days
Attack events per day
Top attack types
| Source IP | Location / network | Events | High risk | Last seen | Details |
|---|
REVIEW LIST
Read-onlyBlock suggestions
Sentinel never changes the firewall. RDP Guard keeps blocking RDP brute force on its own; review these sources and block them yourself if needed. Addresses that signed in to Sentinel are never listed.
| Source IP | Location / network | Reason | Evidence | Last seen | Details |
|---|
INFRASTRUCTURE VISIBILITY
CheckingSystem health
Monitor the live status of data sources, geolocation, and storage.
RUNTIME DETAILS
Sentinel node
Monitoring scope
Sentinel counts only events that reach this Windows computer and are recorded by active sensors. Traffic terminated at the router, Cloudflare, or another server requires a separate log connection from that source.
ADMINISTRATOR SECURITY
Account and password
Protect your administration session and replace the initial password with a strong one.
A
ADMINISTRATOR ACCOUNT
admin
Has access to all attack data and system status.
AUTHENTICATION
Change password
SESSION SECURITY
Active sessions
Sentinel sign-ins stored on this server. Ending a session signs that browser out immediately.
Showing sessions of every user.
| User | Browser | Network | Signed in | Expires | Actions |
|---|
ALERTS
Off