[Carbanak]

I've performed a mass scan of the Internet for IP addresses that have port 5900 (VNC) open.

So you can parse this data into any brute forcing tool you wish and enjoy the spoils. Yes there are some IP addresses with no auth.

https://mega.nz/#!8qBX0KCb!ddEz1_QqvxFIL...3eM82R6RDM

🤝

[Faith Connors]

an interesting one would be ports 8080 or 3128 or something, default proxy ports. could generate yourself a massive proxy list.
or 3389 for RDPs.

[Charger]

How did you manage to scan without your vps provider getting involved?

[Carbanak]

How did you manage to scan without your vps provider getting involved?

Use a VPS provider that ignores abuse reports, use the correct scanning setup and don't scan every single port on the internet.

---

an interesting one would be ports 8080 or 3128 or something, default proxy ports. could generate yourself a massive proxy list.
or 3389 for RDPs.

For my next scan I will try and see if I can get socks5 and RDP IP addresses.