On: VNC Roulette

[dmitshur]

I can only guess it's people who think of their IP as a password. Like, who's going to guess the IP, right.

[cjmoran → dmitshur]

I have to ask, how does one come across such open servers? Do you just try common ports on random IP addresses until you find one that works?

[zanny → cjmoran]

There are only 4 billion IPV4 addresses. Just iterate port 5900 until you get a response, bam, VNC server.

[achillean → cjmoran]

Shodan has been keeping track of publicly accessible control systems for several years now and you can use the search engine to identify them. As a starting point check out: https://www.shodan.io/explore/category/industrial-control-sy...

[spydum → cjmoran]

Shodan.io is pretty good index of open ports on the internet

[ATsch → cjmoran]

another, newer alternative is https://github.com/robertdavidgraham/masscan

note that doing this is a very good way to get angry letters from your ISP

[gravypod → cjmoran]

Look up Zmap