4 ms·
I see things that look alarmingly like industrial control. Who leaves wide open unpassworded VNC?
by api 11y ago
I see things that look alarmingly like industrial control. Who leaves wide open unpassworded VNC?
- resoluteteeth 11y ago> I see things that look alarmingly like industrial control. Who leaves wide open unpassworded VNC? Apparently tons and tons of people!
- an_account_name 11y agoThis post is terrifying.
- shurcooL 11y agoI can only guess it's people who think of their IP as a password. Like, who's going to guess the IP, right.
- cjmoran 11y agoI have to ask, how does one come across such open servers? Do you just try common ports on random IP addresses until you find one that works?
- gravypod 11y agoLook up Zmap
- zanny 11y agoThere are only 4 billion IPV4 addresses. Just iterate port 5900 until you get a response, bam, VNC server.
- spydum 11y agoShodan.io is pretty good index of open ports on the internet
- achillean 11y agoShodan has been keeping track of publicly accessible control systems for several years now and you can use the search engine to identify them. As a starting point check out: https://www.shodan.io/explore/category/industrial-control-systems https://www.shodan.io/explore/category/industrial-control-sy...
- ATsch 11y agoanother, newer alternative is https://github.com/robertdavidgraham/masscan https://github.com/robertdavidgraham/masscan note that doing this is a very good way to get angry letters from your ISP
- signet 11y agoCould be a research or decoy honeypot.
- nommm-nommm 11y agoThis often happens accidentally.
- Pxtl 11y agoConsidering how many are a readout, I'm imagining they're read-only and are a shortcut on some other desktop to check the temperature and pressure of their gizmos. Honestly, read-only public makes sense for that. What do I care if somebody can see the position of my overhead crane?