Host · tessellatepay.com · Internal · criticality C
302 · Grafana · Frankfurt · DigitalOcean fra1 · 2 open issues · first seen 2 Sep · last scanned Mon 12 Oct · scanning now, since 10:19
Internal · answering on the internet
It's marked internal, but "Grafana" answers to the whole internet. Put it behind your VPN or SSO, or tell us it's meant to be public.
What to fix on it first
2 issues · ranked by proof, then exploitation in the wild, then severity
Who gets its findings, and how much it matters
Owner routes findings · criticality moves them up the queue
Owner
Set by hand
What it's for
Meant for staff only
Criticality
Tools and pages that would hurt if they fell
What answers, from where, running what
As the last finished scan saw it
On the web
How it meets the internet
Straight onto the internet
Its own address answers. Whatever it runs, attackers reach directly.
Runs
What it offers anyone who asks
Open ports, the headers its pages send, the routes we know
Ports
Headers
It redirects, so its headers are judged where it lands.