I can only guess it's people who think of their IP as a password. Like, who's going to guess the IP, right.

I have to ask, how does one come across such open servers? Do you just try common ports on random IP addresses until you find one that works?

There are only 4 billion IPV4 addresses. Just iterate port 5900 until you get a response, bam, VNC server.

Shodan has been keeping track of publicly accessible control systems for several years now and you can use the search engine to identify them. As a starting point check out: https://www.shodan.io/explore/category/industrial-control-sy...

Shodan.io is pretty good index of open ports on the internet

another, newer alternative is https://github.com/robertdavidgraham/masscan

note that doing this is a very good way to get angry letters from your ISP

Look up Zmap

> I see things that look alarmingly like industrial control. Who leaves wide open unpassworded VNC?

Apparently tons and tons of people!

This post is terrifying.

Considering how many are a readout, I'm imagining they're read-only and are a shortcut on some other desktop to check the temperature and pressure of their gizmos.

Honestly, read-only public makes sense for that. What do I care if somebody can see the position of my overhead crane?

This often happens accidentally.

Could be a research or decoy honeypot.